From 529dbc2f2eb1b761750d2bedf44c953710f24f91 Mon Sep 17 00:00:00 2001
From: Contributor <contributor@example.invalid>
Date: Sat, 26 Sep 2026 20:43:24 +0300
Subject: [PATCH 1/4] Add per-node HAProxy settings and advanced configuration
 editor

---
 README.md                                     |   1 +
 docs/api-contract.md                          |   9 +-
 docs/features/haproxy-configuration.md        |  77 +++++++++++
 docs/images/haproxy-advanced.png              | Bin 0 -> 130384 bytes
 docs/images/haproxy-settings.png              | Bin 0 -> 52820 bytes
 .../node-detail/HAProxyConfiguration.tsx      | 126 ++++++++++++++++++
 frontend/src/pages/NodeDetailPage.tsx         |  11 +-
 internal/panel/haproxy_renderer.go            |  15 ++-
 internal/panel/haproxy_renderer_http_test.go  |   7 +-
 internal/panel/haproxy_settings.go            |  99 ++++++++++++++
 .../haproxy_settings_integration_test.go      |  90 +++++++++++++
 internal/panel/haproxy_settings_test.go       |  78 +++++++++++
 internal/panel/http.go                        |  26 +++-
 internal/panel/http_test.go                   |   5 +
 internal/panel/node_facts.go                  |  21 ++-
 internal/panel/store.go                       |  51 ++++++-
 16 files changed, 595 insertions(+), 21 deletions(-)
 create mode 100644 docs/features/haproxy-configuration.md
 create mode 100644 docs/images/haproxy-advanced.png
 create mode 100644 docs/images/haproxy-settings.png
 create mode 100644 frontend/src/features/node-detail/HAProxyConfiguration.tsx
 create mode 100644 internal/panel/haproxy_settings.go
 create mode 100644 internal/panel/haproxy_settings_integration_test.go
 create mode 100644 internal/panel/haproxy_settings_test.go

diff --git a/README.md b/README.md
index ba9533e..2c870b1 100644
--- a/README.md
+++ b/README.md
@@ -167,6 +167,7 @@ go test ./...
 
 - Заметки к релизам [2.0.1](docs/releases/2.0.1.md) и [2.0.0](docs/releases/2.0.0.md), [CHANGELOG](CHANGELOG.md)
 - [API Panel](docs/api-contract.md)
+- [Настройки HAProxy и Advanced-редактор](docs/features/haproxy-configuration.md)
 - [Архитектура](docs/architecture.md)
 - [Первичная установка ноды](docs/bootstrap-flow.md)
 - [Самообновление Agent](docs/node-self-update.md)
diff --git a/docs/api-contract.md b/docs/api-contract.md
index 209b662..2956532 100644
--- a/docs/api-contract.md
+++ b/docs/api-contract.md
@@ -43,6 +43,7 @@ once and atomically bound to the verified leaf before subsequent use.
 | `POST` | `/api/v1/nodes/{node_id}/config-revisions/from-routes` | Render enabled routes and create an immutable revision without assigning it. |
 | `GET` | `/api/v1/nodes/{node_id}/config-revisions/{revision}` | Read one immutable configuration revision. |
 | `GET` | `/api/v1/nodes/{node_id}/config-state` | Read desired/actual revision and convergence state. |
+| `POST` | `/api/v1/nodes/{node_id}/generated-config` | Atomically resume generated configuration from current routes and node settings. |
 | `PUT` | `/api/v1/nodes/{node_id}/desired-revision` | Assign any existing revision as desired state. |
 | `GET, POST` | `/api/v1/agent-releases` | List or stream/upload and sign an immutable Agent release. |
 | `DELETE` | `/api/v1/agent-releases/{release_id}` | Delete only an unused release; installed, assigned and rollback-required releases return `409 release_in_use`. |
@@ -672,9 +673,11 @@ support.
 
 `POST /api/v1/nodes/{node_id}/render-config` has no request body. It returns the
 complete config, SHA-256, renderer version, counts, warnings and stable runtime
-names. Disabled routes are excluded. An empty enabled route set returns
-`422 no_enabled_routes`; a defensively detected inconsistent stored route set
-returns `422 invalid_route_set`.
+names. Disabled routes are excluded. An empty enabled route set returns a
+base configuration without listeners, suitable for the Advanced editor. A
+defensively detected inconsistent stored route set returns `422 invalid_route_set`.
+Node-wide `global` and `defaults` settings and manual revision behavior are
+described in [HAProxy configuration](features/haproxy-configuration.md).
 
 The current renderer rejects wildcard/specific bind overlaps, caps enabled routes at
 1024 and emits one ACL per SNI route, with up to 32 SNI values per `acl` line
diff --git a/docs/features/haproxy-configuration.md b/docs/features/haproxy-configuration.md
new file mode 100644
index 0000000..71a886f
--- /dev/null
+++ b/docs/features/haproxy-configuration.md
@@ -0,0 +1,77 @@
+# Per-node HAProxy configuration
+
+Open a node and select **Конфигурация HAProxy**.
+
+## Global / defaults
+
+The form configures HAProxy for every generated route on that node:
+
+| Setting | HAProxy directive | Default |
+| --- | --- | --- |
+| Maximum connections | `global maxconn` | HAProxy automatic default |
+| Threads | `global nbthread` | HAProxy automatic default |
+| Connect timeout | `defaults timeout connect` | `5s` |
+| Client timeout | `defaults timeout client` | `15m` |
+| Server timeout | `defaults timeout server` | `15m` |
+
+Empty fields preserve existing defaults. Settings are stored in
+`nodes.metadata.haproxy_settings`; clients omitting this key preserve it.
+An empty object resets tuning. API validation rejects unknown fields,
+non-integral limits, out-of-range values and malformed durations.
+
+Changing these settings republishes an active route-lifecycle configuration
+in the same database transaction. Nodes without such a configuration retain
+the settings for their next generated revision. While an advanced revision
+is assigned, changing settings does not alter its text.
+
+## Advanced
+
+1. Configure routes and save global/defaults settings.
+2. Choose **Загрузить из UI** to populate the editor, or load an existing revision.
+   A node with no enabled routes can generate a base configuration.
+3. Edit `haproxy.cfg` and choose **Сохранить версию**. Saving creates an immutable
+   draft and does not deploy it.
+4. Choose **Применить версию** to assign the saved revision to the node.
+5. Watch desired/applied revision numbers, status and the last application error.
+   The agent validates with HAProxy before applying. Saving or assigning a
+   revision is not confirmation of successful application.
+
+Advanced revisions use `metadata.source=advanced_editor`. While one is assigned,
+route operations requiring publication fail with HTTP 409
+`advanced_config_active`; the route mutation and revision publication roll back
+together. Draft-only changes can still be saved. Node fact changes do not
+replace advanced revisions. Assignment and route publication serialize on the
+same node lock.
+
+**Вернуться к сборке из UI** calls `POST /api/v1/nodes/{id}/generated-config`.
+It renders current saved routes and settings, creates a revision, updates route
+deployment tracking and assigns it in one transaction. It does not reuse a
+potentially stale preview. Previous manual revisions remain in history.
+
+The editor deliberately does not parse arbitrary HAProxy text back into route
+forms. Preserve the agent's admin socket and generated runtime names when using
+NodeFlow runtime metrics. Quotas, routing statistics and firewall planning are
+based on managed route intent; arbitrary manual listeners/backends do not
+acquire those features automatically. Certificates and referenced files must
+already exist on the node. Configurations are limited to 512 KiB. Avoid storing
+private keys directly in configuration text.
+
+## Verification
+
+- Frontend: `cd frontend && npm ci && npm run build && npm test`.
+- Linux: `go test ./internal/panel ./internal/agent`.
+- PostgreSQL integration: apply migrations to an isolated database, set
+  `NODEFLOW_TEST_DATABASE_URL`, then run
+  `go test ./internal/panel -run 'TestPGStoreHAProxySettingsAndAdvancedMode'`.
+
+The integration test covers republishing tuned settings, old-client omission,
+manual-mode publication rejection and rollback, preservation of manual text,
+and explicit resumption of generated configuration.
+
+## Screenshots
+
+The screenshots use a local test panel and synthetic configuration values.
+
+![Per-node global and defaults settings](../images/haproxy-settings.png)
+
+![Advanced configuration editor](../images/haproxy-advanced.png)
diff --git a/docs/images/haproxy-advanced.png b/docs/images/haproxy-advanced.png
new file mode 100644
index 0000000000000000000000000000000000000000..619320f03ac0f8b0f5c5c771f30468bcfe35b09e
GIT binary patch
literal 130384
zcmd42Wl&vVvn~k1-Q7L7y9Ku(!7aEuA-Dy1clY298+W$=!QI^*g58yT=S<DdsdMMn
z%)ec$_UdKt+ue_Jn394N5<EUU7#J9mjI_8i7#IX17#QRz><8e86T)`{Ffddw8F3L+
zx6IQlC{4_-1i>Nasx=5b=XSMiZEasfMA4KW(Xa@xpxXFZP?frYqqPW_g*(13F&kbd
z=cjcMS7Gm-Z7B=mX=&`mlTPaor}?GT#gpDKrKP3ORnfu0&{C+7BB+p8O$l*vaq*ex
zI5;#|Rn)Zcq%pThx4izOu>Pc>@51Ql=$&3~y*XAEmX@^?V_wNDq>g`26G44Xv9Pul
zL!hFjuA8wZhl7_<QAwZxPJ;D+6qXbd3s{gLkL%|m`|p20e4;5WEiWo8EZGUXCqw%e
z;}RDif7=%c0Re&0mNEM86@ims785u|rX~N~92pd3JoPIv`o9YXVxmeP6aM=NNd^%{
z`R^8C!KEqx6AbnfdDy=YqG0GU|GC8vvC`!Kf};Kq|F0Nel=1(LkV2BiiT~#sVE@xl
zyl653A;`#Z!sK|rn|wEB4kkH3je9=Op}seuiPd+!;NW0$=4|Wr{1(;6A0iOF6um_s
zV36=4GpuJT$Os_bMTjQuGi*&w2mU@lzy4@{7{&_7wtTZJDheq@g`<UJ5EORSeC2}h
zvQH8dz8$(DI;PHe=^K&E$o#dP(iyJNf#b9!Jzcx;crLxkrgo}p^|GgLy~}s<Kk<eF
zU{F$}`Me%$W{XHvrB`FxR_IhKHjf02XM*M1T+jAHH$Fs)sZ+_>E!RwgN-KZ<Y#0v`
z<-_;k5Mc0%zR1jj2+`Em2H9>z|NX3?U2%Oz%i(c|=J1wR+XG5pbQPY+;#5nN$hw|x
z$fG4HG>J*^*7McIg5<D+h!FHaM($1LYmW}kGWWj{zCNmqZ>+f3HPNaa>nP98Io_;3
z`Mg5kGVA4wPo?L6F_t`N93I;sY33`*>i60x)+Z6Lv$7gB8f1M>I~G!t)3NT`M~Z(S
zARw?`tF2U6<KxjoYpC-MxnJ}AzJbyH@M*Y*)~?F^W<P0sA=BLnB_x=T$7^b6VQ6+-
zmF1PHQf~Vz6g=iImwT@K3RfrwoB=I^YBOqzic)(FiST-jPe5m<kFBH2E*b`g)4{K-
z@FcqJX1S)Sx3Smqg_2H}zSaOK<XQqg=kwhzFIp?BtKU?%%ih*{7(~=e`gplTMFR?L
zE*Gt4ulQmV6wM+j3^yr}zW%TMM|#=+*6WMw@Nr>Ierz*|W0QyzgJ%2Y+v{_EyLVk(
z-Qy*-e1@BcJM_hh?_qZj+ukT2kG%4N(ngCn4bxs@&D8w-+rwIV`an3&%=ENj@h=tK
z^d<}9c4i(<&PLIo>o0LbWDMzC)@)|Gsfsy5Tfx0S2n2Wp^%)2_v;t<UnxA*^@$nh<
z3kwS;2)Jv@NrZhq%gIN$6VJ5To`}J8!TJ9|BEbBpxw+hEeR_2+=xJhRR-scrKQ&cj
zUY$J<j#W><&O|{0acs4B+^xZ^|HOPHMNC$>&#cR0bE&j+Yi)f(`r6JYC31~A(l2ul
zgF-0aa;y3F^5h_+BbPBo%cu>4<t0Rary}kIB{S+|3c1VnOt^i~*2YKv{5f(gk&%DI
zQd!kxHUfv4w^sC<V^+J<bM&j{gIbmLfN?8K9f=F&_mllf9T%Ikm9C9HjVIT;Bkc2b
ztJg(i=-WHhlKKHQ63ID&-oZn0oUjvfBIP{)a)_c~Cl__RP5(=?==L{;c*I*I1FGLs
zQ{SD_;<K}v+~ID{I|ZL#_QwZUUxZS}&S-cE5rtsU3P^j+CNg>u*$r0%%crMnG!s95
zAq<B};Jytnh)7sTELDC`bjiw0OQXfRetY$7S74*$;INrL)k5Xd@AT>^t+d@yp;4rw
z@{tR6C%$>>c&?SxVA9v>u#=xLliw<0<6_gRW!QYY+L7jE^8WKUJvKxzSlGPCqhMJW
zztC!%fia{wp2kTqR3w|?FFm?l2T4N6<3?&fZHW1{zOM?><<-n1k0$P8rCgvKl4)&i
z9T^$%uk8tjbXv#@fLWs5B@Nu{XnSx#1V1=DZLphY%}w&lZ2tLs=C|(8=D?8P4$lX>
zBO~9E)+q|9-0<^_wl3EPy;Y~P<GCjL4K7gQT8*8cLb-amnSlkV+Wy}RdX+<3n&1--
zyu(wwKEn6A6AkGQa)}7(;DfOo66BwkH7r7q2}~~*^IY?%v)$d@$0XsH^rIW<McQ*K
zO?F~rGK0ynv0z!MjaF)<O?|zpB@SDbcEtIKCUE6Q4)^0}h5h2Vu?~n-U&<A1Q)M2@
z%@uMC;o(+0oF10y&10D}7vZ52P%zPF)u!_$oWDDxS;Q^)tKcu~_8fk=NoAX)ru2$>
z&F=5N=r;utV|HlIRanW+GT-tY!E8#qVdUB(>(1b(ke;IEZ)%&s>VG&}8)E7q9l}Jf
zp|ga_NHdWS3JNZ83CBcJ`$*gqa9Om>Rhz|mlTn2FPJ)EcWcxdHZDSEMy(gFQMfX43
z82oaj!PlXSOA(n-CM+xr<BXa?uhnF0TcRL1CNeC{aBDygbLgE}uYL2v>t-LxhHgME
zvDxtzTA^I68sz?ry#y<l!t|;neJkkkI6S^O-rMW{?vorAHUb$ErZ;0=SXAT$?>EHA
zMve|$7%LW%7wh10Kd$w59Fd9>&)wy9RcBFabc(y5`Ri*N=0_#4x=-@*@|gW^8XtOg
ziC~dIt`0vc+C8ZF-i19=A(!f{n-Xo!x^uxHV316PVlz6P?|Z;?jTs=X%f*VLhx&u5
zBzyd!tmn%{!YIF-{-%2Cc}BS$tWQkDd;@I{L_~ahy{3AwhYN*=<a~U2aw2?W)~oZG
z2?kb}G`8wt982>S10&-Xq9_{zm`d2)zeRN$<;O-y;QOBUhP>LhP8vA&su{}SA4%YH
z$xktaT>fFH3)Ol%z6c0oC>O#tE8`Ortc~>!4u5uOaf<Cda}coT8jL3uTq46-49NUC
z#$f|V6F4*?n{phkdL@Rl@Hwr&EumrKbJ=fsrN)sak)|%56GEGLjPU36Rq40=3OoD6
z(l?&Nf8jRk*p7pp5~aiCczvd(3`=c4StZCK-($P52y&E^gchCUF;z>UOe$9$e82Q9
zl?eqcJ6rX|K$jEn-=!W`MIxNuSv$(_HM-p$V<FVmU}}v$rXNq&4~3wRXoKvaQV0nh
z7%qEWpC_}00t8x}Z<5nWwNy<o|8-OEobmjPX$5D+hlM16Ty#Xe+Fu{T@Y3)il9{-$
zFSLBnFd*6_&iEQ1Jq>!d#Bcs^Gb@^@tM3c5v~)N7oM{ipVik4XKsiHQpzj;|_$scr
z*y3~BHCVifD)3h6c7AYHt`_m;S?d)QqheO8*2>y&Lh4cNE$i<K$v2W<%Y|?`TZLK*
zc}Ql|Q1~A5EtwK(#Cox0D`Ual!}Vfs`*1w$H7WDB!DbHKl3><1H>DWoxxsQ8e*pGu
zpcHl)_1lnD$QK<O8{_D9?MCZHt2K|+Lq`-6f$xr43{RxtXw?DLXSYW)?QH+rfp_?&
zi@K5LuV89V(;G7Wm8RRxaF?tT`VF5H6;W=^TN|xIkV)o?bTr(mwVN!@HV?sidM@7L
zhT{69>^52%|B!pEaQ!qhi)FsVdm7JHYyFP*KJe~yw)#_*_MPhObj)t_$1Nce%EQ&2
zjJ!-#=k;1JO`&`GK?9rVSobcwb@auv>jg!$1o_L`D-2K^tv71LI$xeLnk<Ce4h=?%
zW2JT@yu-sDRIwQK5WmnW5N}(q*A0ATws%`?&ipW`onR&poGlGKI4~dr3$j@9S3$E_
zvef~}r}E_4KD$UnV4p3v?3Az;a98N(WM@|uS05a6Igjm6Oy&q?a4%Hbb+p#dT%iOL
z!IgihAIv2SpyGD>*LL~(x7$D8@Er-i4V<Mg>-T0uc4b@;>ho-JRjlNemvdWOeoCQb
zid9Ng!TF^VYfA~V<1Dp{^0>k#k4hld#Ua=ExpEDfW%(ZwAzf!y-*5e1VR+PF1<{w=
z>~k(_97^r`Y&Tjfm9~1z7b<&LBh{*yR19$YuJRyY=v6CNmYmrF@nyZP{3V?BC-&BC
zr(jlGZBru6*Zti^=phy=v?-X~-5Ia>6djjZybplX)<Oa{PgGJHYCKffOA$@%lzwVs
zWtN`3M$Jf@{KPClJQPV3fZ3Y|GG4h?^UJ@uiD@JVdEYYad#|B9Tdl>Aedv9<Ieqpn
zIp=S(*U?$Y6mm}g&+@<=pG6h(-!Of?5|pu;pPyf?7MZJ_xQWE&%-6cv_x8B|H98um
zC=35MHeaF7UULC9f-c~;JC!V-(PXonUr<m`R5`I5N2$H6Eg391np!b$tLwY{=tv#^
zjkataGm)x4p?Z?xA7*&d^YN#WA?8()CS_z~q@Z{m!ix9v18=w78I0j~`V-l{At#MS
z5gR<qv6to1LbPW+IyzdW6|w(OO)=)^KZ$+rMKmtaI9DNC(DT<T%id^8#@3nh&S2D1
zy;l*Fp!*9CS24aqc$(h2zL4+MoABlBy{g87Lk3&Y`!vkIhC}Bm=$z{xAPHR^i}7iT
z`iDfes{{W};Ew+nA<X|Y)XN_E$n1E-C%+H=Dc_x)fksZHNpG$5_4ym*RdIe%rCPo?
z98jF19~Eg;OJc*q;2z%n0HgvSg2<>SN8L7sv%mQq^2%36L2{jH>;))8X>oCW(YITD
zAqWS|kIdTFdt*4~iuukN^Gd={@YtVaWWH#q=r_5X{W{~Xud8zynVp@rP4}F$Qq%A9
zczwD#XmdSx=qFKp$QI=Le#%nv{%NE;m$RIlf*fSC-1{0;QeGaD!_(=!!c|*ai;aza
zqF%k$Zdo5cncqy9MWhvQAQF;wD)1ye>lm$sKidoJd>xQgX=MSDQ2RT}hW%Sn1WrpA
zJ_lCu$gk;X4b~cpi&9HVU+-i%(b&w;!oa{lAbBw9HRBSEEDxIP9>%?mrN~a`y)%Ao
zbtV!vY(D|29JB8D_;>@THk)&3p}X7Q?6|S{SkQXE6oZC_zhx6$3e}g6h~KqLufU^8
z;VT9PMg$f!$kHdCaP7ajfRlaeg{rl7N0pJGi;XtsIeM|)Xoo;LgU}2iW4_P7fPO^4
z_l=MYD9O)^mrkjh4xD`H&+pxy!Q4`)@6|7{ZAd4xFb@~i$l7XU-%GuouF1p|6(`;6
z#@@tw2tYQcYfUI^NMz?Tf{Rz7Unl^mIvyrPQk|v;Y^1)c%ecOwNP<4Qso%fhVG(h8
z+)$%WW-IHhFYLxK;+eCy_ggs(@c2P=TIkSZOMys4T;E6X2M#8)%-IgN0z#b3CVnMw
zGe<{YGg_rhUaxm}vU_{)k7ukjdTLZ)KEc2s;@2471dHW`#Bn84e6i^ZiNfQ?cA*Wl
z-{=S^BEiKYAamc}-{<+2Kr@++WSzlb>u(%LdL4U7@r-<0@A^G9GRMzLME$zB8HUzy
zNFp5bO8=b1QQ+G__E+f)n|W*|Esi1kXcJg?@R9DtC}SSe*jd3IPqCPwiL474dx|#m
zw|po7tX!s^qY=AvI5?xWY0*)E<ZTWZQ-`8;8twLWP68mrD83NWt5r4F415!a;Hj*r
zK-DXEsca;eztW=DuE3QYoSH(#;5|=y$<5!xVmQuPt9M^9qs&;kcS1C)!xEv7A&OaS
z_m&G$AkrdTkJh+Y?>exUt%Zuf*>6N`1Rn{9Fda)0b21(BcV1|*#_0riBEL~X-8jzu
z>SZ>`_l*P77Cneorz~@^gx&oZ(*+TNCO$-*JpS9>Sna1&t_)6l>Wl*JYJKL+E>w89
zA)r6;eBQUcLZ@oZ5jkshjx|u-24$@P*!Z(^PFZpF5Yt{WJN&&jlmybByNf2rv7g>B
z4}BKk6i5i-2=<F5WWJNpg8W(u2@9Y-qz}SD0I+PbSsQhaXIGI1b7?k}OV-v&F?m(E
z-r1u-$MBbjg`#qH3JS;CXUyEF^5%d0`VrE{=7>A@{f|7sR22(bjpSHZd9Koys4}hi
zSkI5C#d&N;VgRL255T=?xxhvFE{1ODxZ12V+CM-(hXJS+c3huS_`E{7aWwtT+8>4F
z)7OIN#n-3n1F32he(X+<we;VnqnFj6YK;+hH|9Xz{E-TWM;41Of);WXaEGS#uVxGO
zi(mm{z`lYKHdI94=PD`cr<_(g7n<k@R0}&gpILycB<3(tdPY7&!>thjtGCJV$#<L?
zM`ZUOu8t`msFbbHYJ?u5hGpk8uDv_ksFs~8;~A>$>=c3y()0GXx#)d?&q4UZ%iow`
zK*Q_FddU!+RIX7i3$54r-F=-<m=Kdzor96nwk%|2jo;ONqc!S_rGKBe3yP$R*L?L?
z;Q{x$pUK$s5df59=mniECs!*O*3FnS3qT_iFSf{;2U?d{le*)2IAm<}x@%PHMn#5-
z^LV+}X!9z5)8_I00-#FIyCbS3(Or7qH+!uT-J);R>m6=uVDuW}H>o}y&sCblKWL>~
zJ_q&&^!w56iFw?ghpiyq-Z@6r`P&kPqiX#yalCOj7(*)9Jz1!xi6rvfdU3ZWvDaKE
zRL-|IFi3mXVY_6|3xsgy<P;a0TRStj1h2@R`Tg7L)y!D5!{?0eR^$nOZ|OD4mcS4`
zB+PM;W3p657kJXU-4P7J%>WQtwZWH*7-FG*!H*?Cn~e}IN;N$_-Lva)GZ<A{FnGGu
zvNAV;l@7NBV73ckhwgE_buk!Z5&0+rdm1grcY*S+B~wk`uq*f}DEivnuP-k~^>e}G
zgk?wUd)g-*9TTYefQ|#+3J#-Kwe(v)vQeT2!xS0X)FsGf)rQ++HQ*Tqn^9}rZ0eqf
z-#~kU<_dOab;)U3qce@3^!#RT(sk#L^SOC$ak&miS8F^s0-NFXI`d1Fm-|9#)v0nc
ze}Tb<hSKa>tE*T!EIi_Mx=_LQqu(lT({UDVf3^q5yI*bQQx-r_Fn&2f^0XO?inZ;c
zMyJay2sr>%Qiq+LmgN38Wk?7K;G<oRyr>hd&0xVc*MhvdVq!s$z$+N|$N@M(cyJ=`
zz3`949iDe2i@rO5kcMg1^W{>Q16D;;{CK@Cr^u9PIaoMKbQ|H<**xb@c{}S*W=jLI
ze=#8u^ECr})>}kM?i8ufX6s(RHU{U1>H6;@zXuSo8!hJQzCPbG5W<fPFD?#@nBEM^
zCw!&3sb=BkHns)3C{r)+h{B&M_WaC`>Sf^n3dx0<=lJJWmiNQ?+LiGs)7N%HVS4}}
z^7=p0KTfaZa&d8KTC4-K)SH~ZpKRM1YM|gfy*#ngaEaa?&fRSK1;AZh;j*b$!S~yq
zmZmpa8DX(`4c8PFQjRRLklvrKJkL+)cuDKp5JF<Nt^)hSVYyQ30f$-d()fHkC?Ybl
zZ~{f0s?y+-2ilD&OV3YgYJj)9KUurDDv;t4^xQ{Ox5?nP@pyj|w2_F|X9jpCT$*oc
zZbnaP1!hqI@3MutL;CZ5c2@OspQhX0;hNLNx;KNUGg1^Dd&eaoq9g;Pn6iy7Lm_T7
zy($9=UW4<EdQZQB!MC*SZ%5ly6b1GXEhE1Ygxh^{;^MBZc7_W3DI-C3iiX4IOKl6E
zYmo@y8^07tk_dSjq#zRsH2Yo%g<=sJ$7XGv4G25G{<%~0D|c`>_(k-wP~j`zWDb9f
zO7vHLmtaEVo}Ng{2bYT#l_tBjP-8R)EiS9o!@)ZOSo_&#$ICYZLIJl+u=k<C!J?l<
zJ!^f$8cH>ejyX%VK)*0N|Jfgp{&?2)*^;GETvB`!j8mxjJs03>wjbBmJT*`Amp;Mh
zM|CdOTcgaAvO<U;ee?-3Sfir!8n`9(bOJz5LPGq@{-X%2QExr1TAA3;y@S|T#LLo5
zan`bHe<3}e&po2r4-h=N`DN#8$xM^|`miVJ86@B4RF7B<&4`|alo-yADx@f6n)k~i
zYxJ~_!L$~Oy@;+Zp>Kd}))&1Ejo2T4V$e?$cg6&T0)jsa)JVZAj^N3wZ4r<^@Pc_G
z^~EJ35Mu?Vqqht5@}_aFCGIA2+pk|%eyxG)@OnZo258yOa_>$0gh&V^Y&NivBy3Pu
zezGPVr5oLEhs;uaG26IY7h4pP-F!jdJp<EtP)r%<k;EUnT`$(R9)YA)W7Hd+ot-RX
zu-PqhpOC8K@H54AvyAk8;O#W78_N%O)B)@(LfaaMQO9thzk9Lts}!gWa}R8d;+aYH
zp(3sR_sq=nCcz4q-C_w^-AtLhb>x}cK%B8#ZB5PLY!Sxa+5yn~xbiiS{rIpE1QjeS
z4t<6(m&!%5WG2Ixd8b^~*47p5ES&{XTg0J=sWL{w-m;U!7IUqf^UC&ma+B~ZJk^Mr
zVTM5)4&hrn0QaY)dU&rH*l4@qvX<_Q+qR_E!wYf46z`WO^{xM4dVadcrXLfXX1&R8
zy7+tAZ`}5&CPPxgEm~UI=D^$fmX}{=D@xL*=;uA!NHgsGS^K<5Lpzc&dowRbGc?WY
zqsfc`67CPgYiV|<kn@dFF~s`q4z<=z_L7)|NW@XlNCXDXp}fH)id23@kV0`qW<OIK
z_*~AvpB_$^&6RnNdD`d#72HrRgb~SFc0CrkN+xwa7D^^Y5_D<Ci`m=J=E|BXN(s<r
zQB65D<Gy&hQ6Ec6hNXMVx3Iq`)d1ZK9;ey&Y=Qlny6*g39z0f7*7fWS+ZYGuceD2&
zVF(G>?SVCW-QNPx-kaU-O`Yhx;IWgFEplqoFDIjG2{IVw564l)P%HR{dt?+647dV}
zKI-K+`@M1Z1O~$!ayZ5d@&}1w)I}0yq-BV_)fq1~2>HAOLh$?o%3U9gPKlBsC3>Z*
zhQ{u0Z$qIQJEzx2a+RfasJav-90D%;+tlM|{4G`Ra{QmMJhj63mSU<b&DY!|vv_-V
z-Y#@Hv$)&<qXjSsdX*lWZ&CAHTsD#+mPi+-e(iD^dMnt3kedf(Kc`@t9Q%G=PO-dU
z+WR3KE!G+<)59QA4^o%Wvh1}9CtekV#2n98ha?)5LZ}7iOOA>7ws_p(x53a;`P>D~
zB^n6Spt1)++O4<4)vH`>Qz>oMJc6udMnR>FH1kU=!&vls0-T&s#fmush7ZEc@3BiS
zvf4Vr-q(rmZ&8U<*#{Dz5eJ=Iyx!klMT5k#DJt|*+l>uM$l}CbICsS<4Y@=&^coD%
zqBq*zCsu5}--%PaJvVK%(yyWdy?EbffHU1V(}>JSSeOjYz-KrJe)XsLX)fFK@u?}W
z2nioAlhgHD>$5>;fGyBzuyTCbroz?6q(M1x{+z}l2YX)8PtHS2`_y(yNp*5`bYyX|
z$-~K*grX=XxA!1Z7`_nn!WyjV^C2`Us#2-;0|OtbPNo}4H~IU3174<p&-GqJ3a)E>
zmoE{@3#Opw9ln5pQU~-MRiB}xKek^-o=cXtW-bMKDGb?LK6wEkw?y7?=&IhkV7SLY
z!pO$x2}Vm14?RX0A``QYn8*=ZN8FTCZU|;14~Fl(wA{>mo=~bxqSqK?rT*Guj)lXp
z3Y(seKg<?LZH55F4o_1>3wqg;c}X8eX4!$Rg7ZJ^^g2TSUd&_0IdW_KtGj)DaXxt=
z>telE_)(3G%iS4<o?^DU9qNX4!o<wP%F4UkBN?HyXD1tIvFnXFt~IJViEv(qdIDQ8
zh@<3in1RxWLk%ts9>y^Wb*>t^4}hM$g<-v*6pT*d&l;KG((|x1>S<m@4rQ*A?%p|B
zqu7nni~3=r`?dxwPCn=lqzbFWkH2@Q()~e<2;VC=KLi}~JWxUR!M#W=m?VPl8pn}K
z#G-M0QGiRlctaefSTr_Jwpwh?O9-G4<=_;rq!(n2Qc33sJ5TfDw2*{eP0wsz)$8&I
zLUn<oLgY_KZoa!-8X5g##w&JKEYq&arXcg1YD`2_kU%z78!0N1$Ny1hI80g;CcsJj
zo*)m`m8I=su{Pks0GDkMHzd!cza-9BGWvYB1!M3J)|kd4^Fx>O377CePZq1;wp+1`
zg0jB$e*a0K^|XdglkH5UXOkAYHw%$jMmx*{$@i0Kd1XqG&kc4nX1g_L%-KVjOv<=r
zq3(YS9O#s4!1i(7tZKsP)LL(!>JKzWD=Te#Mf;X^isVwZZ<NatC(2WlwDV<fisi7G
zKp8wfzuH@jrJ_Xc<q|*o4LA<D5DB&8v~+J~eAKQeG2qL}%$l##y1B{;^MhHA8<9$#
z05Anfvr*A$JwNCywaMab42PKoUd}G{aJ`;Cxp&Jj-vnR<Y*(rnec|TW-f*?tZZFA-
zIo$4B7LR_2{s>4)6J#lrloapXQE!n=q9FU$#Z}a7VAv4C2oK}XZRoPp>MoZ~Hv@qZ
z59sIu9{nF(mVxelB)EZ3de=M<&1fln?_}O<MY+}U;QV2mmw4+EXY-TD8d>n2^@5?%
z;CPeM1rv7YJc4lO?!vXZDfCFQWnUA~=<>35O~O{LadC7i=D}n5{aPQdYyQXo<^mG8
z1(vja*2+PA<uuw2bu=DiRm^8d&GBkC`&I_=tiRswo>qYEJ=)(7Nl)TJ3-h;DFJMH_
zEae9eU`jyRPPi&}`ufe#C<YP3nGU@$eS@;q!FHF#fr4bvVIp`$U89t{<?I8<{!71^
z4uNUgl((JMc=4z6$sczXmo;Qq^lJTXy{bg;@a4IHW|@thp<PQHaD+B!2Gv#T503Op
z1=K_GCQ`8hG`f(k1U%ly9Qu_NfsXYCl+Ct}p@y2}HOL=%bxp<qV6>_8V-2km4bE-_
zgap)E1mT+@${Yb7|Cke14b8{_e)_c!8WApR;hpEKW99?bKRjJ8YWZ2)0Bp8w4nldy
zN&-YX!@+@8d6xaN6;MpjfDkX9Q<(|Re($ug)Y!W4$`DS(MO=ZDA?gr3+}Jj&@laq`
z$Qr=S8udFm=Y*>oW~Ux+LBD?)zrodo=Or|{FhH4sMHlus#kD0mqknfJx!#+MS==-a
z6#sGYBWe~gk{^(6S(-`d6m0f;3{*QjoDs1(t>yy}B;|*7f8>=}Tp2yzpC%xRTZ(6f
z+R(k_W2|ceB>haWA}^VNV~>rX`*9-C3P>(E!X-+zG?JkYlG9??U_^t0Dpi~G^wKxO
z#dZmqOhMqgRj7#nT(kX<)rKzxN&yX9^l1z}JG>n-CMkjx?=1;SuGL(bX0y{ZP<q{H
z^g_sp$>Dt95vNisy$^md<!vuCi+53)ScYkIFG9>9m{BJ`Tw%~u=wgK?8t-@0D?P)D
zr*60QB?g2+M#ZA=dS7$Qvg;L>mq#2qO#I>Wue{oLG~U_F4iFH<TMl!bt~=b4@DGyt
z9ozTGWuGy%$?z5WQ8zqPWOCaFU5Q=gr$Q}iz&V)jM?e%1F;850zydQoJ3Q5F&}6+O
z`o3%Y1ueX5{bRN57y+aYJj?fqo12V77PM^L2IWQRU}O?#W<v|<lFe6H7hhrveU7r0
zn^#J2-w<SCQQz9SI`oI;X=H_jR4{*trqZb<(pm-+2yMR)P?<DsnY_;UNYH15@Z+YV
zCZL;+jUR6zeWHu43b8s(c0OS-A;vh3N(~m%fE4&mHoy@PPrt(li4Guml%QW5;IDA5
z*d@^altmP<BeFlEK!!*J;?Qb;Pha6c#MTp9cRgSAyAr$JmnYydRJ}_-nz$$I{^B1L
z+MZgi+v#tKRUf4479@)W<qMCE-#gP+FVgqN6Xi7EH1$}>c`v;CD}NUrSi8BKVg52k
zI}S-C?5~8(B|G_d2|2s9R;&iIxwwM7MyrKy*}MH0R=o}h3*^jfP&vrx^>i%K*UqUd
zx|zCG3sq6I1nh#JDRAo*GI@E8W<xh$d$dINKO`ot?3OCGiL)Y&XLGJB4e$zFAKrgm
zVf{jcVZV+E860k{QEkY`gvYaC?^AC!5xZv!K86fU66<xhtY-ZOh46<QF1H2)!X`<7
zqSNuJr58)B){17mF``TSbQQcdQXf`bj6~&-s_Xh6=e=vw&=_{}U(&YSDWW1hy?cQR
zWM+?q)7m^&cEpJ$J)&ja{QH1;MU%sR9R%fMTWd7Htlv6*-Ral|&CmmIlz~JD_Diiv
z#Y5kr;y!A*3NTA-*r&tq9M<lj@!y|%y*!T4)sDy#TXdsBhKQnE@YlQ_Ct0NGY2FS*
z;FPNsgHG2SKHGd;uXWi$<$X37-St5Ss55@g{nPt3{(GX;n32V`xu~whfL|XMA9#Zp
z^qQq_A;?eErLy>h3@*EAnG&$xNh{kyjP|IHT96kA>os-|h}y#%ZsKmw(Pu+3MDL%X
zeO2bD`@;n7G;yV?+LE7{BRapC?v*9E71*liU@}1R4a#uDv!QQ{AGiZJ=yyOZGM54e
z-J5w-jk<}>b%6r$#Z)cCHrnkXTW<MJ1s6uZ4<P**msAeHJ&Fi|@0J4uoy8g#!QE*9
z_Zgz>!*1JyccNIIn+F7OwsPpazF1w7Lv_K0;o)F_MKaZiVd<!jMB{ItHMGWu<?Qa3
z6c?ZDoD~#T!@vl41?Yg+L>mZBbRH!@#GXz%<~Y6Rq|``nIgT*cFSoh_D8J_L6XxL1
zkU77@&F0&bv0>JVtAAS0@UXNMeqWu>!y8b|3|l9-=$8D|9L#@RGkrTR2@CctbtqJk
z(vVuOqNV+&<jTU*y;NLSfGQC#y6M`*_APTS6Wp5ovlfuA17O9Z9{=3YKO`tMUhJ4P
z(C^9VfNY(*%5M!`C1&F9V#e~7F^=cjaCV<-dc=x)<7mAhAVw}2;mzue52CZ$T=4iD
zLX&Zq;-!pOpy}Rm&<yrp(l6DDt^@Z<WgF>W0#NFTry536n7Pe%aidAU33u(Hh|085
z`f!HxJDnD5-bYz$?J}03=CzaQx!fngV9)caOK0*dt)hTMB(}@(zMZh9CKqM{NTJ|n
zh1)*qi*#nMe^N)n7}_<WcBv81-mu78=`E6158Y$6&x_z!#D^Q;K`3_Ul0XJ4Z-PZM
z7a9^KU+Um`MCME7iUFd})6)Y$!aoa_leTSshHV9+7bsV2d}AboW8?SQ4V|}L?grVa
zjQ;$VG@3ml@Ru%`+Vn+CiIvjU{!?G92<4kc*#s8m@bGJGQ8TF#rvYso5%<|-XycgE
z+Uw7w<+Oj$=n2X;3i!-fThqm(pnt!we^{wZ5}g{C?c#TZm#pASa3siwl6EAME*J(L
zlvCl{pH;z2yKfzyV=0U&FA`w>!*eg_t_1&_apHCd=60*p|2%Gw*8lq+xBsa?^nccQ
z_y6dwE_Ed0K_HhfbgG7i21*EejZ)nXNoOcUOG|6#lXZDT{TLPGfd|*a*=fKf*0U33
zYg;Lsyo>3NyX<;8Rpv~uAOVj>ml#m|<^)JhN`-@igR3Mzii%7Dy7-?x@^RpWI!+Z3
zQU>Hw0s~33+HFRFga+uYjWsm}De0W{>#g$EP?N_;$Gq|`TwKa7!RijedVHqGiL;5S
zP%#fj3&q-ZR+*y7)rg<c0ecG%RxPb5yV0$*i;b=ET7^6NIZF5H>dWbX(|y9}-Wph3
zAo;|zV$y39CZqbe-L~65@zaO3ON>&jLe&vyGR-G50d4r}5QvDc@#2w_jLhPU4mY`Z
zLoTUI?R>2*B{g;U6$~I;eh7}Q%`v*^vphhkR;oL9=lZRZe2P$K-01LJDAZC3CHs#R
z^KWDkctRxMR@<?8fX2%l^a;Pq+Vdno7MHQMF6G~va?CkL^Lp$~Ceo3LA*!r;v%iMN
zp+zjhB6gp(?-8J<r^hZSDA?KLv3$?ljIE&n6dyz+B&^~>fJX=D>?C;Ly^2%19i6{=
zYB$)Bxx*!A10o4p%fe@7vp;pVMg*w1KLXTF)Z5&fw@87E>U8i7I17h%3I-$1_zF}G
z6o_X8AKgx=7XczvlWiZZKoXHi2oZ0o(Use&d#>!O^;xhp+7N|CwGM>V$gAXXgDv~Y
z5H}T7k@B9bmjU1w@b>bKWiAAG7PgHKH+y3KhVDkiAKxqaK|P;CcdFLf>{eP{0fFX6
zH&%Psx4p7Y&CCaknJ5(GRv@>qZ3e<34x9eVi4`sqWTdNX&YAxHz@P%~Tve1nLfv{p
z#?e?sM8Y~bh-9+sC7*iv&u_5RB!4|s3pf1Y=+x8nDb>=!g+)IZQ@P&(QYYRIP(14Q
zAGNi$6`V3aMp~b4uo)#|i2C%M0fLg{@kbwI2=Ka=ZuSpPPAD7>FY`F97jExwuN`ha
zYL?^%6a;K1s+OwnS$%I%-PCMzjKb$m=XPCZu+IV5NE~{-$e_NX{rxSU!%Z@CDVjoC
z&;}tOmYbOLyaY8LA8obRo$(Ql-)5yHCz}Zy8g>8PLxs0pX_Uy#i;F9C8U=LA+1s`#
zr5aH({%XCBbiRQ*0B|e8-QX}THX54)OshhcK#RfjheMR}Ca`i%KYu7d3w2|7(L4d!
zYLW(0V8+MQ)<z_Z?MG!$w<(xy*>7~pf0nhGDgoyYs$pm0aC_V|1bi`P)RFo`4OYF)
zSN7}eX<ZINZQ!hcYAdumWr(|eeJ~l5Z?@GZiFh(qDmFDrio)#*Tj0L^oEO&N)jn~v
z>zKjj444IX&S*I5Y$GpUpst^PrM*5*?_3!VN$I!ned*MR{j1CSkf*OQ4-PNF?uQh|
z<kYB0qXNcKmzUckmGSDAtfH|*CjC4w099^x_3zvQ93uiYvo2nZ|JSt^Z}Z_TRKoF8
z7yE}!LFeQ7Fdpn$?~{7~$FV;wff!dLqwz~gsZhy*zNO3MF5QHbdf!g4Ro>+ruj@Ub
z0sv}0v|+Z*Hu-kR6L1qPGV|SKp1W^e_5cdrmSb`XAkFsO`a?XF5|apfNh>OLd7rpM
zX>$UJ3-RlKDa<UifG%M9d$?FT==bTa7_TT9{<!M_sK_BG#J`4zH+>LLC28`b0sliZ
z@z+jrux%`KY+gpouXQSI(SQAkf@x`KolfTU&wXNj_?&j*x>2YpQhm|e$CVjPtuCj4
z0X(GJ^iA%II%?Z6sY1X53<<vnB8--n*3G~+N;<kJ!qWHsTf9JFk4KBCSdp3!*tE)!
z)D8Ex%T!d<jtf;fn!9Jy_58o*Tjfv8C$kwdyTDjKY2whSmYAL-|Ho!w<kKSUkKDcb
zv!HxTfnK#_s?DB6!Nz#8%`>J@nog~37Qmxvq93^JR|5qLG_STv*1Lv|=E^r#O=>9D
z+B|Voc*K7L#8{bnxpu8`k%0R(;AK+2T9~KPsJy-%NtnzLmV?Ho)fU&$c?PVar<iDi
z{rxq7qH=63#Pv4R0ug1ZQkIxF_`$KZ_6~oR`D<%KSSg%<c(G#kw(7xoRvQo?Bmr$d
zlf76`zw<j@(BP}b=Dq)&^;PeH1GP`|bL0p6saz2gaY})_5(I!m4C{s2GTgdM1eh=p
z3NDL9hu`9HcT8kt;Mk?umD+$skHvmn0CubEYbcvJ@NtEw=H?{iEv+oKuF9u3wgVeP
zKk(EJph1f^GidQJxPMlpU@al-{1l7(&%fSpznKz2nM!5w1t38m0so={JUs$?L&Z|f
z{mzhL{1Ukb%YSnLu2v@&eS_UOy&y7Wjdz=K1^L$pWh-s`mD{sTo>Hv{GZwCPudD0P
zy)k(#AFT?jIlAfT-vsdujm`$JJ#Ca2<0M^fSKF^EuBUEln`O@r=Q4uGFuI=%z$iD<
zREmwWhrAvy$>hoDvTeA<#bl9*IQl`B3D8K#eGibHBjRmgu>q^h(4vskgrJsi@EBZi
z^l*(jCd#qhi4*P`pPnvk0s;iv?|?J{nZH}yst9N~r+_fG-swJ*Ki5URub;3eOeZBL
zhhfTOO*ex@Z`s)$BSnmY1Sc^ahLJ!Qm#VMF@Yjvn^9mgYsUV(pxL)uK*qz*s!N%cg
z2pAvqsohszJy9eh3Bi|oewu@x9;OSVY|aDO&!6heGc_H$yTJ@0>!l8=vc6{O{)!MZ
z1xywd%9UmQCaR^{&OpDc><2ifMan8{E4CPR`foV8XlVb)-Ui(qZ0#EtyH!^>!@P-D
zTW4@F>h#G6&(!UWT3J|ZlG4)F0%G=ytve%wTX`hqG5-5GTmU6JKYBO{p<3Jhd6jC*
z^<UG7KBAW`(9=Htd90g>r;@8$Yewc`Z|)9`!5v(Hg4e$;WpP`zA?Q1XE=NZ=`rSAN
ztV4)o#)E#H(=#kP<bWtT3PA`*Hi+zGP;zDES*c1fv49&Y4ndRin7Z^w7aDpe%AcQ?
z*j{#&!^nW#7OLNWvDo}qn*E#!AXq>x*U->l*63V~H<e=%(Q9>+xds7FnQjor$P!ut
z$BXW-gsd&4ol4riV3YtZHWn6KPP4?kxUB&M9K*M;n3xc6Sf`exB&?h55eOebHz&$9
zNyJ6zXemkF79NqAZXIsGiJ%7;M2L*XXQK)D7xO%==Bk`e-Ncu^?G+M-a6&nG0o{j#
zVn8s`W}fjDO9?5$L^`+FaxM*>Mkzx^Ax%sUHnSd~HtHncKt_V&@BN+^R1_5ab1(vj
zb(L9CN~+kh{-=^a+B;a<hid&B><Rm|)+Z{V_343;#l>ce>3rkCs3b3z?Zetu=acOv
zfS1Sqkb(!9pBINV8oQCjh_V<P9T=E99)U^g|475P7=tUw#!HLGcPICP15+$RZRF+U
z{enH-_xdF+j?-%PaJ7gXT^A4(tJYc_|5>0<o`}egc7|faV2~Jfn=d;do}+VwYOT(!
z7SUIAi)GiKQxXdLD6LQ8VMLMbR$Ji|C$8_es;l4;0h_*$rnp<ePx+rM?wfQU4t`}v
z(6V2f%mM=nKn|}aMM|R6@VL943wa<hVeW~(-jjO){22i##6N0}*VpWY8X=woTrZaQ
z_+9VA*lF@Ev6(d~@0<lLPmkE8KW*^V$5jJ<{Xjx^!!7Qrjm1ve=Ucq&FU8TWr;B8C
z<jVIQ(;8K}JidkinUngam?Z#LTj$cZd^ud;&_pJ4Y310JDj7vk^s^8!D`>IBdJi$u
zvRWRSEC9Z%5TKcD;d1~IXZ%BVFeL9C=hjJr?>zxjC89q#!>z^PuQh%$zIyM*4PD^|
zKfs|y@dhOC&yLuZDjZ-mo<nS=vIXFztHX<_oM3Jb`;Whf*}N?J!=$B4y0Pg0(>mXk
zXpOySPFMF0FMjmxd;u)e2EwV7D1w55ZtlNLxgNToKJ*35{<4NlPfhoVey(sUzDad7
z1}wwgl&UGWa(8!|5a_GWkSC$rkA_UY=VtbrGT#ZRDvJsVGEhk-M_|k-QynySS?b9G
zPWg>|VN2LT$=2VCa8rGOd8Wj7J>qNRcj_BeS@PxEtbq|O^nPZw=l^`|$4c@eVUxYG
z?oIFKq^EB}|3DQa0O$mtE(Sm8zXR^#0c?hUPCwY}cO1F@8Y_~0iH=(N8$krM1^It_
z{3v&%R2s0n^KQqOXvUQhlI6^?PXDc-SH9yn2a{^8ISl_j;53y(^>^39`lJ5%zmEO?
z0D9$)yn^v9TLu5I^56sN(7)=B+D{^?4V{u0kM+(;&&e1uM$3yM<NkRr>Td4e&<1I!
zFk-5G!|fcY>UO8ufX}bpZ{o;nwof;)qW^}twiSnFKTZ4=2(hA}i2<e_a0vcufNjV)
zx7^Gu9;2t=njN^PiP*otljDGU#)Fbak0ngwOr+uejfRD;2FLl0evsUYTG_SuYg2_K
zUx<SMFQ}8ww|~a?`}yKdhW&ozkt9(5*Gv8X(!Tllg@cpR`=FAGgKf|;W?d|!@pKq1
z@HjO!HHlH9MWg^5u*x2Ut_DO`RmmS+b6RsBuUo?c1UgRos(nwNwM^e2BVd%IgqWM1
zZ3UGl#a;$cd}9Y%m1;df*No1~`^rP=iDktczGMnmwHgrZ!R~R!0{KQ8clGwRkOZ;d
zFj@=vq4p4MJ)K(B)BeQRBeUbf#riJn_J!yKAWam($YRcJs=|;Ty{>4`Cr|8)g<~}#
zYx~BE|JE1l5tU#y5_0zfH2*LP*rMr~85C{b;Yrug#={%JxboCChqa{{wC4w#U*qGO
zu;kpAyGd5IcidX>m@~dpJhntx%sIxMw|H-yWI`{)>y;Vm<b=eTMSg9BgZE)kuc0%*
zjU(X;Io`%9D9_Zy=qu&*4p53^QX{@xzD<nt(#HftEmX|a==GURW(%y=+TNulNI7DW
z3I0KJa>O0CBWCxp>U;?jSR1S@`K_!huy*!X5}s0XmD$MP@T7ZhbLIhB^F*e#Q#<y!
z4Vv@2(eLnz?gke-ZQy8JfMhg?`RtP6$@$0YaBGc+NqN@lvL-C4e9q_ka6Ou_oJo&|
zHsgoF*XN`fx(<tV4yY%IUgYzY@T*XavA8s+4=D_n?H+rXCRI>35j-i7r=QNVg+2Sj
zDqY{`U90qX-){~UOK0{`NEQL_-SV%ynV|=MP*r>i7vahAF@WicB+r76EG-Wv#jCV=
zQMf48Ef{P+BDq_Np|Nu7TFH*Ku*dN?RYt#Grw#BLRmiP*$ai{0BOt6bnGf+n&X>&P
zYHXlcK<rSr65yq6zJa}K$;gB;(5Z?noCnAzm0sRn1<d&&*y(jqra_lp$5r6VGgk86
zEabw2Y~go1VJuJ9TnkM*KPYAkbhn+awJ<GJZ5s(^g(5E1I{{c_&GUhT_G$BNE#v-t
zIXBk?lY^$276v)%hxYsecf0$}wSUWb&W_NCXHYw$5s~l1eWO^<3R-s8r>!M~`AEW9
zGEUB*=lwsYCMG74A9P!6kP$G09`J%wwD;-VZvL3Q2eAwJxY20+I6lU&n%VEk$7twP
zWC_Z23!1Ut#HBxB`>33We6m4JvD4-#RU?PZXvS$%Sg>|Ttd*7qORL)uxKQ!qs=$N8
z?)U!hfds%)e6-~1b~=OtU?yE2*GxgRX6dUmr}xSVxdTO}ue+7G8Pe*mlR|yvs^#o`
zeN0rmT6(Y75@p5qs5KtU1l*XBD1V@X#iV!=%ayQTc<wSd_vWMMmGLwLe!%_|Uzesz
zn`w8ynYh{DadBJduZFV#tKYB07s_Q!Pm}E+UL&kx9f3qST7idtYrV^GITAv>Z|8Td
zI$I?Ces&C{An-ZL>9Siy-3;4f>73{!TgaXCiNT7dTH+1n!M@F%X?AL=*=uVy4}#yV
zF))!GM?gCC-H5x6pI>qTWII1E5JRPXQHFK1-sL&rEgX1_rBSLZ?~awHTvfoFlSCA<
z=gje@a2o;f3?f|ZijtV?cu-1=cPB>3BwlQDeu!>deaJ=KblO!sm~?4#JR_&^UEDQn
z9FI26781g3KYLmF=t8H-ER7gm@^wgWaPVi7ot{XwxbmI^xxF2fG-G&!$q3uUdgpqF
z(^{NZ{*Xo$QnD>siEfYMCpv_Ry!4ENyYvpD=l$-4p}yuWe_<oV_*wv_sAr8Om$UWR
zt|lXacRWYgtmM)3a?WzXV>6WHktu&GfgT4&AyiTn>Wd`&YWh6Q6zYdy<S`x$9Hg3q
zO#QwX({#Dt7}fQ~j-@DwVQ3~XL^*u*_8vz)U4q9dFTm2)#@;L_Td3j1ry_AbIEO&Z
z>&ynHu~SniX5?`uANRg4=`XBiH)E87+3e>s$53H^ixY5XL_(4%2=McZOR)#r4b2!E
zb~4XjHD~AzrA-2Jod2x3p%SZ4iMYelw$Wos9ZYj?B?EaAv30Z)(sW0_W&V)Jq*E##
zhYt8}fI&$E?d=>+_DO3SqcT$4!!#9veIQ3P8bq&LQwhyk%{Muv4&rEofUPX({hb6W
zFf31U0-A{L&Tz}24wK&O?BuN7^0iLrRjScyCJ6(DzDQOBmu1l|sEc`@tZ-?4DPv9l
zr>?2%q(lmHb~c;kVU%^sK7(d}qlySVW%*C3>O3s^1@TbTW!aR{!^7=*r)MkkXOS3^
z^}9PAsJw2OhVr$Q1w=x&POkwgB?2A^xLmzt=KG$jt6|gus)Afz=Ofk<nVWmm+*Fh)
zRYIC)Ql(2Qc(%}Gzi5*!i~D@&f}g=V$XU-WXRL00+V3qw36*k5IfonpYXS4oXfDsm
zYT0%!y6V^r;HN%9Z;topsWA)HTI9?@7Q8pF+#+!dw>O&g-@w<0M@Sc`SaWe`&D21;
zrY?%F&=UYHd3R?mFdH8w|1@vg_LYa=ZclEN<AMqaztP|!HGN-1tJbaRE3ds-wmkP%
z`3gv@&8{Pu;p-t(P+_jm6S<m(%E1s4)J{P8kbrbwqaQ*X@#imm%dK^I8cI9Y%H;Ni
z@#D1Abc7UHJoCSQV`H^7Z>t{PIeF>EUVFOQ3HbgAO`^k8Zn;+bsi5!hc6v1uEk?S`
zQh~*&9-kDD{1f{;?PLcSd0_WwFIP1~z@p7gP7YVU+I*82STyf0`LaWOqamlAf~3m@
z6LYZ)g1*jzayjG0C8<z0YhJOmvT}c7GFPcH7@#eIP5Q>jgN)$9L1Bz>!Al>n63^0m
zvC`q#kBd_X^Tqjsvrw)H9QAYa+1W`-b5uf}n`1@?|3ba;0NCAY>VI<qkJaTAqbdG9
zej#($bwTUw#Vca|pRX>BP06eEtQHz2aI(2q=Im5m8=|%fGBL%04LdhIowe6={A;2-
z8UqIMVr6^tbOJNm00E5<#-#p7|7MYrv{Hy~l<4*wsvP?8=&1OeL9OTWyc(j{*H$C}
zFN2U>Bnx<pb4^27A>^3HKA0xnTBbO}Aqs*8rh%SUPwwf6DWMwly=tS+nVTQAquJ&A
z+|X_soSMKb{COnJOEkLhJ~N!6BjU!c)G+Qm_H^i+fCAMk^-?Oup)4&{=y-Y2BAgr8
z8?NKIOj$6b{}5u4GIzz^{G{G@+~#ax@PCRDa4C^*JGTM<QY})?UL0LiNNKF*XNY5q
zAAnX2sia!-aC>GrhKNEU+=-ysh;w3GVV(4u0Gd`^N`ooKu!HCoe#UT8;f|Gad$xP3
zS*7VMkIa+jYSd@?#Zr@^&b3mr-uG!cEi}(*;SFsI#^6fyv7?Q98$$>nynLVcO+l8Q
z{;=}(9g=6%988i>=%2==rqbB*-+t8V{c}~|xhi}HPZB9B%{~s@990>UBj|p4e@3rh
zv+zZU4L)5(b9lY4hd&qH0hkLwr8ZD7Y5eo?8D6H4Ej1N&vI1ZE_DJ}*ZyXN0^!UAt
zb{8ihJNSA~5%2fotI$4J-`mamA7ncd<JVq)Zv6y<Msj86mhX4|u+%3Qz~||+?lJ2K
zU{sc9!nOSJSYirG4*unj9jYF#5(*GD{Jd9?aDGBYN}gt9Z<kwVm(#zB6#|`%kT7u`
z!Uiy&j{@@IZg(jc<w?!YP6byprP@92bRA#mB(1!D<d&)z5dT!vq;{Y)71;Trv;(i4
z?^dWBdEG%gidf770kGP2%1}gYxBU36IcbtC6<S(Jb~By)pJRCB<>ZW;@^*=I3ugkt
z`)-B5Il!11wz|FTUaNV!*nN${7k?kP{GdYB3Mwr81cAXRTzd{YC33pyoRxE)#-dtj
zc!CC6**-o-`z8;=%Jg!>MO<7qvPi(_fF{~IRkU*zej|Q9v%&6GzdCD=HVX?|tM3Cf
zJ=3~+;dsr6+x4T+=$YyG3>n4g&2DX=nx0;Vfg?|$K0TKi;FJQ_RuZAi%xvMLV24nb
zF&p%Bdv_U|&l=Mx32uS~p#sGV+ZoAOBj%}EPe2U1r7Kieg3_>eXANA_u~%q>;R&%q
zs9d$0y>9|}@YDJ8+D3Q_+5Lc5#Qh+aCNovF%L(u9(atll<o1vVz^K(1edN_s3-TH)
z7k1os<7CyW>f~6GZf4+U?(Ga3`^A-mWanr;Uz==c;)%UEZO@_D{RqnlTH&&N*nDGj
zv9YrHwSfXhLXTGI|6<gMC$tQAlBeY(qNST0|0L)xFl(0&bE<P#g3F_c5bgf<I5(E+
zLgaC_(lOFKRb$XYUePx!M}R$)datPgQ=@HsTT7?4zb|Y*&SmQmi$rXPVr)~&hIQ}@
zy^@Dj+i?4c`*20lKJvR8g3g37r4c-w0k(|n3p~yN(9O>mjoNMy_78=jX<cK%|Na5B
z+Nu_zL{T>Z6DRhO!)CVbQ(nG<0+~!Z6=F7NbFzV7Nd1M0>PMQu?f5TKnW+8)MnSTi
zN}QK0*PU=s!)B;6VDOjSos}g*m<(-5^*Ar2Ao*q0D&+`YY-&_hz6x=#Br+Ahv4czQ
zhLfp!3rFiVw6#<kRXuq9cDL}SYULztoXMO`Rm$tbo;YKgz7c;jrQfZHk#(8F97W!*
z%M$A$$od44kg1t0aoy6;!WHd{kZm$c*J}7&cATC+*@F}9mlE~6!sGBsHl;o8wt1=V
ztfz4>ZF>Iii(D@j$V61nvz0p24#u^{nqyPucel5|h&K);282!c<?N*p&v+>=@w6DL
zB896G<<-UoHzzBn)Xff2;vuygq`f)03~1X862@xJsnUQj`9oMp{N^6B%5kP!LtqS6
zQjtMlQCyx(`}o_kO^AGU_N!zeB~6}=;U}|gNxcr1TDI@~h3&~tvCNChSmM1SX*yfa
zeOdB4-+%ls=H4l~((c>#u2jXY*s0hRTNSfnR&3i=#kOtRwrxA9*w%UKegAu(?`!R}
zbFr_^byik;)@pOjImYPy*QYF8JFNK0ZE@~(O~Ib%K9>W$WTe#nms*A7+z<EnxXe%9
zmhoIl%F2s#kEC04gwpoczZ#4SVpt+Ca(+t0a|u@-NZ;&J1%Yjb<afwLcB$Ju3p%gf
zbJP8H__Jp8kr5uFtkvoMzWs)M-^~GT5#dip>gjRw4EAzKgOtnret5CjV$+|!WpOI!
zD$L>4IX5H7=NTAbAH?P=V`}uH;i*3jB9uv~&L0|`k$Kc^f5ybIH>K;z+Wdms-DWi-
z77XUC)lZPlB1oLU*8Yn<V*($^Y(YT*JjiblQ3;7srF7x6q4EM+Ri0_(iE>T$Om=iR
zk`0m(30JI97|C0<ga>FB6Jz~VtZV)emSI23PA+5V`jopW>sOW^p}3f7OE7-NKm2>z
zfFg;cdk{4-%=ZA)i%@d52t|^TRUiB(31bk{!E|qHDJvd4eE7iS;OFH0xA{_x;RdXi
zBkmJ<(G2Z9W3m<w*ES<TP3Y=(O(ri6ceGST!HKl?7<qpQbZI`{UQ*>kP5DPj)f3mZ
zXaBvm*t9rMGO!yZZMKL=bTqN+7N|IUj@<g6syu>xZ<If*-Bs8ob8Ti>Rv*%T)zbHg
zPAFt&4WQ-;c8kW-P~N$!=3&tVY<g{0kk;&Ei52FNvKr6D&}chv1W|sMWdJQ~am|r}
z8$~vsH@`{V3uSv^k1uBnX!H5?q)vqqnEwOf>nZLfLJp$iId7<|2+7FCrwde$^~5HX
z;!9v%;nf+1u^3~}?E~Fa7exiSO~SPNrRGLEIR+G&k!3$2rS{#%eY$I5VIjANZ6>l}
z{hCzvo~VCxcMn5nbu`q2(^a8LOjZ*;0|OW|*xR!M?7&als~=E-<iEKR%6(h$QS{`G
zH`DDA*Q<oD3mxxgw{qWZ+o1xhogM~~Yn8QuUFq~|*rEI5QS5dk-r9Pz1svx-GOTvK
zKF>EPE|i)t)Z$}fH`fofB1<3z5bvHe7H2abOP^5o8YP#-=gpWgnDg}DuVJX{ZxYhC
zc6lAR!dSud(tjfuQZt>~+~d9a`I@-hUc&!IS%@?L!tDBuv`R#GwJgTOFB_W_6sL=Q
zhtuk=;>_$T*)0Sb_p3@5It4Y{feT=u{QQPV^(z5A>Cg6gFo$E%dSsC`!fGJ}EnJmY
zmn;3aLtWb)T*3=^X8%p0oi6s6bKp^%Dj~xTVr?}77Du-9hiu~av=|R{n_=tgRQbV*
zx2<p5E<UT(2BqKA_(2(i5}#e!cft>L-Z)BGf^>VI@!}y-dm19d(Wnamo)~o^GZ+c1
zq?FZk4SGY`kb}d93x#l?*KPQ>EO&CJfF`sKH!epH$n3|<gH@qa>Ldl6A!ONIbzk8A
zor($_jQi6L<{Hi`cNOixfTun#vj5ZbJWO}do&$0c&MW$uN|pUhZDHh;4!i$d>8I|i
z?TPZzi;eb(w@1&12!~qqvgn7hHZ0{RBrqbyhN8I>13tC>s8Mz8H0MX5Si?cO-D(~f
zqLGQM+I=de#8+@aN_d*g#!78mxo=)Nw=y_tzjAhT^E5&A$bMnzBc6yD$C8LAL~uQq
z(~c_P2yFZ)cdtMV>#Y&$ZV+P7Ht->Oe4Y<QgkZH&4>0noxIn3MUxo-psrB^<Z0_oa
zq)YAgF**rAb%udQd$clLuXqVyeuq8=Ggl|GW$tNVw7Pm8$NsV>^mqSLYd8v-?<a2c
zJne44b%jd#z!Z;Aum+33**!g~9W&Yau_1SfehDmB>T6UCCUe3AMmDg3@H7;MQ#!9=
zvq(N`Jv;WE1`{;}%09GrtBn%I%`Ip&O6bC+?k}rgnZ7$dR3jTE105Qh$<cIWy@i_f
zt{Q;PxM$sC%l$6p4z=wK=!coasr{;kx<0Ra?N1Q&;x?T|C2IB6x>rZ)+NHF;W^g;e
z&dOza=IVR-fbTY$Zzg~>b}OB3ox*v6j8Vc*Fw#TZY}&|>TBvkuXXh4Ld4CQIfAfC2
zUY-q{%;c$Yy6;JeJcCegGN)?AtQqbe#vX8S$5C(7ks3ro+}6o<<8(YyYptL`Q-s5A
zOyl-q?re!q1aBIX!bMQ5f*?7+A#3uaGtqg)q8|`Kxt+u)ArP+t4;!Ns5kRyqNrWZq
zWZ%vJdSn8kq=T1R{Pc1c0X_l&Bm&GBo~+#MZeUuJ8{J#C(I7DCL6Eq-5LFe`u6J61
zMx_(p!J^;vmIP&a334TkyVeP(DO9-(Vonv%h9YHu`<no?b|Q9g`QkL1kaEWwn50lC
zRSa7laM~S{lOo(wOEy|tM&KQe+{y#PxMLRMdzlC$!S1S0WD`Bj=dtUDy61awMOxrw
znnATk@*9s+#b#b*g^AQjKBrVsxYwrYeByg|>IszeDX-Pf4_cbTe3gly`QZir*|4Z^
zsb;Z;XM|7N%0F*~nFwxG`zD{iA?VB8?lZ=!8|LimDKeVWOuoG|ZiO>5F<DNxjQT-*
zMs;E`=UvlONy_d-z})s`6)*W-9I}f7KR0st>&fPEEjh>?4Ehe24yy*-r0dtjh<Kgf
zMuGj)#+&f-lhju$g=gwJ6f|sriR5tNh_R9|7CPSfsKv!`Uh?~sgs6zW(XJ>%t8z`F
z-U7yrBA_*Y>`)c5RjySNZEbs?lt)l$;HmICA%SH>E>9E+EP>cSq@=9u$!>k>*A#IR
zP;2(b*mDtr%1>wb9nQ+lN~J@tHZ5d!g2IhnxGThuV<+ed-X~RK!2GG_gPHoF%9h5n
zF-s<{>PO;30ajp3T}JXn$B7T$&hc(Mb`XimFZ?9o>MOJ_pZ)>U%k-{>$m&m@2$5W)
zYc2Zg>(J%U57RoXy?ylJ{#t7jE#SB%f)O`gnWG0r78Yw?eT1L_8kRREC;`lW)$;LM
zhLJShqbvIx@}Y_{LgzRq(YA=+1(NVr$D6<hE7~;PYQvkaNd>?-h{vvl8zvA+U(p*s
zVG9lIX$QH3`Zjf-6yL?f`Q?6oWj+*z*!<<-N15lAfX};1M<2vHil@f~mjerrit~C0
zX840Guv!JG*lE<bX6N-ZTO-<eJ)IjpB&IMpm8A$qP#7jh@;j31UX@R$78!p)jafJ9
z`ElZ;Tq5g4F;B4qy!+E_v0gsui$Q4n;rCw`2hCG@*T&r_EN08qw(%=O;D?tY)s@1T
zi&Jxg!p`W}NGxUnyGvK{f#J5|;?K}psI{8Z@JkT|gcRt+vRu?%Y2Gf=qfX8103o<Q
z`!TmNo_$&<12!1gBNT#wee{Rf!k2;fj8p|^j|eLdKi5&cV;tZtJH2UF1}+<}mk1>-
zReb{@%Sd1~UL!CiLkPYSmiuL!1Fa?<t{C^p;R#27uT}589wI1R?N29MKYqV}?}{y4
zV^B30(CR!8{5m#WEKMr}B!$fpd?_SWQDtmW+rS=sW8CuaU$cOUc>F*e-@9uJUdOi8
zuIycUWdDFuo+>XY{okW=>~2mLO+>f#2vX*TmW$QsWan7!Sr4ax1M3y&#L~~Uy0q(I
zbKjHY2dhx__7-7W2^V5HA2RtSh0v3@XI1}cl~7rk*pM-szOykBG45Sf{P|-CO)WMO
zsbIX6VY!<Cb{?>v{!#9;HevNlFV-KH{->g_l+`N&`<BzSf3jw-Tpc@%C8Qo^VM@jH
zqi<cGwBVqsgM3OwPTM3tEr!^Nc4(5{#*^FVdp}|1PhQ^736_9^#bomW^Ld)h!9mAx
z=O>m5mTo$Cku(f-e4T^6K_^sCa3?EqYu?LOL;|F&F0LpVb}CF+wP&1{&<2hi1vt2H
zeHwqr#YI+`YbSLtOXzC6^{O*+j@Hu-D;0F4SRiEvI(Amt+;C*hYO2N0%omOPvE!Il
zd^j>pfwy{5FKJ|1`lZI>D+R@-dD^lPP6~cYTOO3WqHTiN{-DlUa?+#Xu+|U`*Baii
zcclyiVh`j7{d+12FM~Ps0?c!CLqtSd<;oR#hMG>Rf6Km?uM~Z!ecp5W-Uxo|o@`Bn
z!v5hzLE6%5(ac-tlX8FlHB6>`=t4S`a%sE157|TSrNFkdU`FP54ME?n{7lV4UOb%%
zapC!fJS2>LFppwL<&K~4eJBgXi=bxbPF7k_o{SM57J-L{&^89gtnBQv8|W`y(&C<Z
zU*DZ8C$H#8=C5nZ*_b-<Wkq9(;>`9Li{xa#b;hLTc7hcYh?Z32W3qrDe`(H*Vdk^8
zR6MFAdYy?rmKN?^TT{=67z^`!XDPV7txGZj8e-~q>M6;K&CaI}`TFZ?wYJ~k$u1e*
zB(=m|(to7ECBC!G?R)%89BKy~YGn7bfuFoKGpW2i(Fh=%MqJ}Ozwk21y)n0IlDrqG
zZ#Fr~-c#XLiEPC0X1t`o<}@=aBcoTQ(4R(HH~tOS0p)u&Rd8s0qu8|kN5S)b%>AFb
zT(=?-#W-48Sn@{~%hrqBDhY6|KE{)-<N?E#zn|&+iN_037U-4H4<gj7KzTqMSU793
z>zmx=eXk`ZB{htYH&iT9zZp+Wywch^-)tY=#{-AQ)oM^jRW8(t@mal3Q*T&$*}DSL
z1qTSVV#z45B%N^CjP&&hF>?wE?jN_;r+Yc<J}TE*-FhcHSE?_!3~4wme>H}^+|`+E
z=DLhVL?DA(gAxR)bIV;x+B~@39X|mz5YAPmT((>|*n8^IX4mkL=wOl;owJ(Ckmh$0
zZO~TRBiNVdtB`mzKv1B&y*%&SiY$90cpW4h9=F>DBsX9PEB;Q=-H9OGXcOZlQ!8-T
z0UTI+?~%cfyx#CyP1aXY0<G^>AHNW<3i*J~ZO12II$Os@_D)r+Sh|>gaF&@CXHR$x
zS;)~V!v5ru(jzE0)Sdol4SX#R&8x1rm<{gpcuP`T9tr!yX2Zd7en8j|Z<81H7sSt;
z_Q$yu?-!d~#cG{LYyKzqIBi?I=zXuWS;FPuo}mlMrLtCc1HGL0=^1+r^3u|o8a)=y
zzmY$JO$6C=>uwq!?(tf5$KQeTWsp;Hc3~k}JU%=6s-;}V(9mVc1UT-kLzF`GxIMm<
z;X0l3)>>RpaFrJ4_rGZxPN<r!mZjI8oVEwje*e`_ui1O>nxE4z?&?gljOp$u)^!gw
zI(EzZ`7+zOc4%emUV9@gG&<x)j=kOlj!ht$T@DZd5o!ARuj2*&BBUG>OHD+&X9rW$
zy9LIk@1=Q(;ODxLTYh@WiPx9&-9Hri#Z_tnM4Vpi*l;gGk-ilR{pIQ)d{nD*U{b55
z+UX-&j#Xk{s&?{H)w6U9RJKMEn8-Kj-tq91q|{@%j;U~&$LTdg&sSCTwmzbfKcOjb
zXCiU+B!1!vH&>G=fK#3}ewqaY#$`^It9%a6nOmCHoG9-KZU{Sm6be)S+pNekb?h-C
zK1!)3qG?qWeYkbg@d6@}^3fV=H={}dA{^@}Kx3U_cohWN&H*@&=g6JiIOW|Dg&h6u
zF8Gzwiy*kwh;vT&VI#|LCkN0e`EA55lbX{tKhfXY|9G6nm}8>R>JX{oK1!yuWOgF6
z_ZXdmvUc1Ma{f{J1J;C```a89vVjncDBf2JdT`A*KlLF{9sZY7l*^C3e5De3Ks;S7
zv0w!|ivDdCRfIb@%;OA32AZ;S3TB4IWVu{ExP@7pz-l=od`)ReqkX42=X+B3gq8rN
zlGV1NgSyhX>4b}nDVPOlRo`2AzC&Rp9ggM45R?Ty>i%ZO%nxKxuX9&Bs)>&i!!R=e
zPS@V*4j+OD7&OWdy@e966Bq<SJQU_oh;a-*?B6gg*$N)pNI<(QS3{^TCMD(j-eG&h
zv=KDhaOOtn@~SAQ?*S1u08#>LFrVXKRHsP{iyHDnPfxyWdTMHDV|mr9AO80@ks%`Z
zYhY|5p;$7{XVe|#ODT+<!R-YHjXWMxX#o2oN`v!lh(UAwD+6E`2mSKxp!Q5nNrz&<
zz#!W{yB?KNj*Er{mHBq-eca8d;sKM+bgpUm^xby9R5HC|>vefI7B_GU$(7lx8{<Vh
zzJgA>Y8~23t5a2e%3_Lbi6{XL?3<Z2-NXhixBgoSN!k+KZ2jOCoY~vqvt+|}MbDgB
z*y7(NMP?|}DhdJub6!)5Ss~UX1>Y$Xd<0JEOxTwZfB+5ib@1_&#?!tx&8Y~H@buS%
z@z7y-f$v%z;a77d`X*9q^iyz1odd1Xcn;c|O1C)$<EvB?p{uw4v|3!)>`lEZS^h~}
zh!erwkka_;ne5{{U0zDzDR4>7{OyugNy<GXbH41Bqlu3SrK+0~I#`*+lI=dD2V2n^
zs|$OyGAhUUF~ARpT%{@qsDIsxgNu{r#-FayXHY{mhD*6!;rx#<2;^9A9<-}Y7R-ib
z{52_thezU|re+o>WU3%JD>Nn-fEIbZbrAvL!n@h+V}oWq#Yxaie>bZw?$7awnTcsO
z=+fbFyj_e*ui~gX*ps{f5i*O#Co<(t-TpF<_H@>AtpJ^N#ncM9ryk>dZX+REaip3m
ztA~NFdg@Vp#cV*bT116D1>V-4!I{w5EX-lV>ayE6B8+ZqCevo4Ls!{adS<if5=NXp
z#<c;9WkheWit;7H;;e!AV!`2_VvR+#b@vT(<yP7CXgX?ZcK>lX%@{yFpRRL(K;ymr
zS&N2SsntrZ5>Tl%SQRofGREPm&kL_In0d<6s8D=8B-@3QSu%edk-8Pp#jsB)V4XGM
zZpfAv2Hj6ipa^#TE7~_&T$2otas1so?QTkT`#`#18ray}1Q>@U$`uN|o0yoGl%nv8
zNe8j^)bY{le1M9d9rGK7>n)xqH4}zQWC$BDIWWl!T-1q5eKcQ1Ve4I&l9wMHbz)a@
z7%Ih8%3gPcHw^b-&dz8Lys9s2ij?pL4-i{lDZs&>X@2?Cms?3@>M->d@tudWvC^>t
z|2N+8Nn?nKd_R<)2@r{dTUr{Nf;mHhb=CLwtEvNOr_=rQvf-U~1a?+DnvleDGc03w
z*Vk9b%>Dg#x-n#QB!-ifLiX$R4-kF@Znx`CgW$r#<__I-%%ghL=jw>=fZHPA&()oy
zFRR7e5(PPH8S&LXUS1!rnlIWIDzhyLF7gkol$0UnfKU<`F2B#O;BcvIcK0DffljTG
zSUJVn!Szvp+K-O`;g^na@`T%C=lsk}B*GzD;R$q?wRu%rxJS~RYlkiZpSy`$d&v2Z
z$1Mr$cv5p_2=-wA4VjMVO0&aVAc7UpbUQKGf1Kl*eSP2BprI<Au~>1^0&ELpESJ<N
zyl2a?fo$)OSGZ+@qv(^buj~o!kfWiLie{^kC$T9hzO#Uo`%HVyVRua)VdTbHzKPZ0
z4$P1ev<c}8a`m!MYi4oPl(Mh*4t5`(YDLUtuT%M4St?M=>wx6e;EAwm?IXgA=kQ-Y
zfXtdya6cMX3et@8_5fiV?xEqy(88A{K-%pF!+SaU!q9&Rwts)wZGofS>>l9YAX(>d
z!hE#ai}ql*g9NWq&uaa&2KW=mU0}HZwEg{>B!ZQb-gMpsNLEZeQKkjR52I9yqSAnH
zH6FKT$b8BRJmN238hv?lH9B;e|9oOS{936Q{N7d1U_b~~kTy?sc(z%KiTAd*C&)CR
zwn(do+T^qdu0(n*7n6`c>f*<sU1vH~Bm^jKvi5AubWG=S<zB`^c*Aa4h72>a^p&|O
zmo0$TNbV=R#5Pn!M$+LDY>Br+DH>Qg?^2BedY=3K%yQcz0~HnWE>FwAnVPb!;D2;T
zU#!C#ff8#=^;RZ8(@79v0{1+cB$}t*C!wI+k=gXogM|&7Qk+glM%uZGYh%!N@CkUh
zKa+5T9p!5W9|zn>&+qGIX&o+azL>AtJ{@j{D-~xsvS9LM=8k*yz=?)RRv2rjZy1KV
z5l^zU{kBS@<^+%eSOE;nbCf@ZmBv{`gKQztt%^%AObCcnc1jn^BA?+lS}`5Y*!sz+
z^$`p`!jf~k*%^K#!%aBRiSjFDa3WJwI;zxNU1^!8*2D1<GHB`s_Y*@#GI*qc{M>9_
z{RC+y)g}c<q|1eo7t8s8zL=}pQxUfN|5F%4kP~Qp?@(P%Wl|m28!eHRwU3#N9S`Q{
z=f1{aN=<vr$jLvA$kDM<R6tV9vDH7rsRdcGFqzKP!L{MUynF}sc~@gw1e}++;UF|P
z;52RU_+c28nmk_Dj~%B(Lll-jC<s!WDUX*3K!KHqxxj<7v=rxeaI#)cK<cli>#$KQ
z!ONn7#PydJg3+6Hym=;Z40(oB|86R0j0SZ5hP&`TG(4YgyIU04VYx{xMlAp8Mb;-u
zOkv5V7$un$#NP0+agX&)ip6Hrhc+t}0+TuY<!8e7p@54CnbufayUt=pcxKGZK;t05
zS&>p`*%rud{YPg@kd$iMr(wCz1w2VrzxcSdg=}w!c+MN`b~E|EG+L_b0E}g74aUh+
z``14=y&{}q9R2z?zP1(W^(+TH(D7!MH_+sY1wC8a_Xh_q67j`sP7C@rd;0)8KYSo@
zxi`%Xi>5>}n)MtO7Dk^pK;|C()96MC7x2?*a35G~BK<~yF<)=Mrp7-_QiaD53Q?^;
zS!y+=FKt?qo-K%YyL=Bf|4nD8T`;)o+lnxnP&rd&Q@YHUezD%(&5x2eJS7{ubukEH
zwb<PS&A8n>8yz#9vz@I!qF6-9?nWUMOkGfLfK2LAqlbZzC2k`#QvizwSm47AwlPv<
zCq(fEIN$l|+`|maX~_WpiaI4gngnurxPOf7*S7U4(3zzzdB5GU*8SHkpmS<cFF^~K
zfZ1(le>A9}psR6ttFcyw`5FP5EMK_YHI;0Y_0sj1iUdGg(zgFyu6%8{Y)C;Xmc$l4
z`^y1K=h*iv`ZFq=bTY%M(rNxkr^ihU6p9p=cvUj<!IK_aDjgcV4N+*DQl56+&Yu0u
zZCzd5US0tWM;E`gzW(QS=jXVb=0g7bWA|FXiv<b`h=oM)1{i5mq5l!j>f9?7#tf(w
zgiJ1jjnuik_@yVajIUz;_>m(Lr~2m}M{~k<N)kgYz;pVGdo$?}LLFpktS(+=7)Ukq
zOt4j1!H}BAq8>~UTCCi$;ko3=#iyJi4LFjw1%&@XBUeE2Lom&BF+nAxRs%gb*}IZy
z4aSp!`U8n5=EKlGl&ftir~Xwgi#40Y=2I!QEr+2By32UX;eKeL`#i6!GnrR+kGkX5
zS4VH=$-sxrok5%t$BZlpoug2uT5HL;Bz*QO70^}+{Na>%7{CEI{MLERxn_}~`$8rR
zS8QE&S>>Au+fBhZoCB@1dC*I+_jD#$jI^C2ab)sJVoaog%Y6X8)3>?U|52&gpA}kz
zpzm;6_)tUf+ebeqcCki?vDz{gc2G1zpP1A`h}Qpz|CmBjDrN#w%A8pUK}>35BPEA;
z6P16Zk-zJscr(x}Xi6aseXIkBmQ_iZFOtn{UhRWY8cYh60O+!$ShnPt!M)!hvkPd;
z^VM9>DTtZz$rPy*s*E_er_U`MaDFdo_(PZ973g0?J?D3Jnvvyk0`E_jQT+Hz8#D~`
zdRy?7K*1yg{+#ypRVML2BK8|xzprB_z<Nf9yvV9je1z3<Q4|kzaBz$i3MSl!+4C%7
zgsEgzR1_)RoY6gxGy^Au#1r}SPyH82=?-_W>MhOcIb}+97Bko&Mih2vaR$UU(Q6eA
z4P079nccKk@x48CcwK=-@6O_m-$$C7wJ4HE5k!%=zxVMSezQ}{wY@49z+xuRf=M7z
z-RW(2o1Xx&nZ(hHAt+%AX=zd+`>I{X?Pr{KQqt0H&w_P;R^lCtu)?S{@p@a?r1%k<
zGBgsj!gu1&Eoa*fYG3D|f7Xgg_p6`~2)C)3gEsVu)#BXhX-2NH*A<d&61AcJspA?Q
z#=FWh@kQ_c2zlFL^}!qbc&d5wog4c}g4vW=1+T8~*SKp{iKiO;n_i_{RF(PHG3o<&
z=S}TFN`)p2r90*C=?M=_zRhAbLZTpNFtt=XjBA6bht+fQv&bFNIrEoP<Wg(W>?AVo
z*r|k1JPyx$(^;sVf9&x$JN+XwKDxpN-|%lZsm1<~{efaJpiJXM?hi(_&mAb=+H`r^
zQSIjMrz>PgL<3*@`~=gxF&eCYtpVw12y)Q3gWHpg+k5IG#F&aihs4)*V>p03C_t;h
zwZGl2-&2%v*`s|Gs0t15ykY<Q7~Pyn!xgrN61kL0lbfyzL!;4^9-c0*M~~b9-v7>a
zYwF7VnJ+jdpCI-8LvQ2Jri%0+vYN?=UFa*b$uu7W*TEBVn4e_&&?pS-moXMPr|p&m
zi<T;P0+>>zv0k5{d2TCauCL@q3eb6YsaiS`e$)HWOQ+^0s#|xZ7+}R7)*mb(7y;Y|
zUhGaRl!ULJTA9rAZiS_SXsCB772|<V745XQG(4*=LiJ~Zj`5K;2`GpRmu{ppVJ90T
z;ZN6lluS@5=Z#4_;LZ-uR+Zx^7vo+zpjNLMOwJhg<q2U@)*{MFm#PyQ9FG`K*{^C4
z7&klCQy;e#8z^$3NLVSmKkJz5y1pGZ7ML0FT8svGOY64A5!a~h_Gy^Mj7ly!Phn`!
z7zy<Sqer~DO&4l*M)1x4yIvJ!*svFA433f;o!<_^L8xW^U9!1^{987?II!*gux=x9
z1YaJ|snt=WhC!?6k?l15N0_CA{rTB-z6Uy?Zjex?d~Kfd`=_!GiJcYG3HQcH(_f7A
zZ#<i#3YDJ=*;?LCh3oU#xfSJp*|)<v=@;GpSC%tMZ~z~R6$**#s-jqSP9nR#%59wz
zpMp@aQg5*iL8Sn%9?A_|vhc0{@-!O!a`Dcc+G3B5h>jjA3^`AdO5x(69s-z~07?6E
zsp{i_w%}f`j*2gjCYKinnIlY?Q_=+XH&o)kTWBcq(Y3(1n&Zs;A|Sp>E^rP1yN6zP
zaRZ7T9+SQAB&_U*xRm7H!%tgXbPT&Na$yYtKY83b4vb63GnGMF57pwHP^5P)XQ_8d
z&)I>q|E(%jI}BOB&?B#DYxjj=dpyAk+bt<f2a^4~Z}$3FfT?!51hmeD@yjfMJiYFf
zJk{1Ay+Bn33_{$rHXXtN2v040elfN4?zdGsEZ1>(?HBfl0Eo!cKkzrqXo=P%=P=FG
z^~nL#^@HESQssOkzBpA|J!?z;-c?#?_I#Ldz@X#yNYJ72H$aq(vz$fOF56}mz1o^T
z#TG8nU9Ge56Q-GZy7IbFN>`oiYg5cK4#sN_%%Re)!eE#IIne`ip{Hj?fDboZWuODo
zT^>9HqoOO5BseWms>H^A0jY)j-n|X@>%zsWtEjiOxR5E4aiQd;LKigfxSB|kqy&9G
zUo0CfB~Df&YNqioNzijKn=M}n3I@&15Byw7<G>qvC4%k}gnW3_e`r26Qx6#xjM7+D
zlD1Eit#u@7_)xfICcGet(sH`cRHh&q0Z^gdLuveFPB)z%VLM+6x9ys8xra1P<mk#D
z1W7wt%25=?N<iOoDhC+$rvni1mMZp6TI}&5-FhP|N|nJLmzUkP!l~B?wS4$`NplLc
z6#{pHksc^qm@6Jpef_^I*I6H-^+jsR*Sn?z+5VSkxZU4LX~oi<J$#qV2Fmv7C~U+N
z35X7sV_%%CIHaz+O`%VUhAr(<nUK$%2Gnp0$5yHqK6;vWqlRh_M$Ckug(;<^$b>)+
z>c=95{TBcwk3p!KL=4eDtv;pbi*AqrtuRBLyV_-aI){sWfYm2(a%S1Z+25WH=`3EG
z=i!n7tiH;-GJz^4RIHoS6E!M*c5NC6GU!o{b!P$8*X+b^>301d>d=z&m6`)foa0N4
zX1V&#YlqUnbnFKnU%l6h#<CZ+7&KDB72MBv6~Mb#t?l7cTNu%Ov|PAZB<k;mi8}Vv
z7ZrrIWX?(3K(*7<CYRJ=N#_2~v_=r|Ep6WyJ<5wyrLI~d1hYkxF(<qIZWVO=4}&#O
z)+MY<o6PE=QC4rFjzd<9wE!I)DFfIn@aF(pEuKss2kMhd&yEUtu2&XwUT_e%!-e^y
z3caMf{uT5S?J#i}et?JW)Aik)0oAbGehp?$jqD<_ez?C&o;}Oos5h^ESQ9!~=R$Xt
z#A~-LrWI!TK;^u>gQcUMux><F*q1<ek#M2v%5j-Z(=fU?a{lT8D+ha~atuy=1V9tk
z55L+>d$Y$R|6E97BzqWf3=e2kxGOdtF4|Joy7XRWcm%kOslaa6vlxRI(n_5c++HWq
z8NSZx<l;>CRZnd;P{{CU(rMCO-(XzO!KKK_%TwK6T6(G*&o^N6RPFG%U3V=?#M$CV
zr*asE401V>M3KNI*0u}r7SK&k*D4%cOCdu*7a+6h#UsGHa%nA^pM5{gr_JCE4&e%m
zoKsYo1%yF1lCBYiQ8wDmeMh2Js_)2r_ZQ1yA2wdWNGwTQQ-(RT=~t?IU6Usxg~V!o
z`5X)Ly;e69q6*#Rsmku{IQi#3+q0v3uS-{!bkYU+1^-dOKAIkGgMA~URJSY#N`Om=
z$j=AURx0!=w{z2%Y+s!PA<+ul;4?&C0b`_v`pM*QrA<F1+QdB#-_-ZNLfC~cQ5yHn
zrZZ@3QX4V7_T-P;{X<@Zkth(6fWlR_J>%Yn+@#tH4em}ryy>YvczWE%U2UQX@>L?X
z`dcB(C6!^N1;eVNrzJ;Y+Bz%S-?H~75G&3SL50~7e9f7M>07(*XViI!Y3W{E{p#|N
z)(mS#tYFhCOw-GMUo}4Z&H4$4e77HDb!+OkX7T|?fYt#;5w29*xWQz_-LI5i7z+7l
znISJt)Kxj%i{QN8`djzoJ}SPJn@-Ry&HEDWSgaPkYB4Cpz-WUvfL-KX!}qQ~IQ>y(
zlG%*8?R&L}7#f&ethtc3wolsgGqdIu!nf`i6pyFVsIT|uu_AyR+YYq#=#A{w-*g4z
z*Hg)1&ha^PXIf~oxjE){6+pmF=ndj-=GXxpWNvCMti#qZ0?Fg!1CAL8%#6n)m!%^!
z<OWwle|`oBVpP16lNByQW!uKnK+Ymb`m=aw1Y0Q_?Bkz4!@E^xXMcT>3oH2sVscbW
z0o{nHlMZo)Fj(%(P4b6ET*{V<Y7zWmtp)3Z3-*Wg&QJ&fH7*h|a-0*m4ivm!RZM3<
zp!o3E*q#Qq3Syy0C-&*2;5-8eP!9$quY0QFpD*U-mWD1sGM4zdP3<8ecfQ}^)8KGU
zYe*|wz2mT|l=NZG<vr+$%{xbQL#wHY1a3yg?-F<8E!4TZT;=9_wF)IO>|Ok3kUhXo
zlp8V=sv(NskqU_h$q_d-Qh^`hD@6k>uyn3p0Ec@0ff9n!Poi3~%#yVE1sbh5=GN;?
zv<GD|5tv}pAu=SYHi(Y@ydLTvnhYLPV`4GbIgD;ZmBy5bA&2(d9NHX@RW5-m@4Q2A
zq(6sQXz`Vm)T9za&yM5Qy%<mCmy7x&Hq`*y=}935{|pt$m08!e$q)tc!cZO~swiF|
zBbs(>&=dR<#g~)P6O2OK{8-sUe+=aM;1nkaijU5um?K-91WL1<1=qDlfb8y#O*mvm
zD@=6wNSXZa=tGEjNz7}ZEY?p6Sic1kd~zA*uQt&SMC41+H$+geA!r+8Xyu&B6-ud?
zxbb|$o+-7__`BsL0+tb|NDo@dSNIVD&CSi?2uYZ4iC)O)RO<*A8$3;3p)b7OXqfkb
zIn!++yC-upCMGa1h<T2<-4t<k{WVrQ2#g^P-!b+`hWq-;bn~&SyVaj}JDt;7IZS^2
zTB$8Wc)}Nv8N*-F#^8;ibGcLeZ{2YT|KZ!a?#_;4?a;f@f0A+fy!=bf8$M>J|GoC@
zYLNebeqY?qMR(s^8{mHU+3&^H?mGSqh-3Sn^Z-+&QwhXlpHDScW@PaE<r80N037oj
z?|^1ws?9*;9-<+I<zlKy4Er2iex_wCD;wE5tF(}HLnkFW8cGE5I(g@u)%p(*?GmKk
zWA(Ob0eW>Zl-Ma#y|W;N3|`f#bAHI_|Ihsz_*<;O#Q2?Ab#W-tPMkb>&QREss-vG1
zC%J)nqEskKJr<X_?!IY#CRa<N-e^fEdhhk-e`g0ut#G<27AuJ`#ISEn&`)Mk!>#PI
znvDQ+kOdZlO0D)LQseGgG6WlkE<{e6pB8DhJDq`CM(<dHH5T&P<G<hlH1A-C4r4pM
zbPkJidL7tVfeB|+p5IGD1~;zHrLTX;L>h9FzRw}h>g^fuF}wpu2$2ON*C~JrvrlyU
zA-|#amZdJzo^4b|d?0JLKSxyk%Pj4v*XwS)I92-Fq1@=3Y<&-`_RuAHe>UGOu&_vN
zNZx*550Pge(jI#(jsgQ52E-Rftj6XUTnVq6#^%!{c76jih0?g8eXM57vey&yR0ru?
zcuKiSU-Ilu3gZ8T-hko<bBj0hty+MwmW!N<n2m(}>2~-se)Isi`3wUKlc=6LAgM4C
z0o;nyizOs|W!Y`6Xgw-&bKPJsG^vp7&$OFyZ9+OQ5c<kasN?mlP;=Q0_&zeucV!~4
zDP^ntMGXr9GBfwAU`Km61Q#fZl6VI#{tSr~Q&6NX(E4!~i`6;;2G;vyR@;jTIL^ij
zK%}Yo$g)ADRP?gGSV#z`0>+m?5O2!o>J82Z0Fq<P)vvb!d{+zQzkcg+sa5hZW@5%t
zQ^S0VM5US+6@5gqx!nScbn#E6r+~9Im2S9JvU#LBljn4!<G$;?Jg3aW6ds2Ig#P3N
zd!x<9rCZ(UelSmlx+xR+jbcZdj8NeIRK2ok!@=QBILx6~v5-DuGJ^vRgD&wcdK3WD
z8cvo<t)r3BumZWBojD*I+BtW|u7Lm|+bMv0ESYnEyLMTMZU>k&y>x}^j29=%v1{A7
z5u%vDHkJP`wby8CQ3Y_Sd)xxg4acn3WepJ%K#>aonI9>L_@4T-Sa{z7k<sSb*%(l=
z9m!yAf#{EZl4ZO`%e$Q7S#;5Sqv0M*iO-H%KLA|vHzG4Lv%>yy{7tlt!2ooI&}c&i
z+%IPUn;ZVotr>~ugLFRQkyZb*`Cp!{FC(U;_<s|b?{$`bhNzTElcLhJCK@b+uU!D*
z<S4eGLOgGgP6ltfTo9@aA>xKct)?yC!nGnf9AmK2?$Pdc*g_QOI80i9;XMrwE)2M2
zP{@QeH;IEflQ#D(YwO5mDs}9_DBMK>wCpdjR%zs|cPmZ1`3d9Gnz}GB>D}ki`zm~R
zmg)y^Ya&kb(+m9|JX83l$EMDvF{5Ks0<G(5BHH3f=k0M8pg?dkBR#WT^ur(KI^F#g
z$nNTj4xRujDX!5LHyX`OLnss^iI|KIkiXcO;WlAE{XY57XZ%i!TE}%)IMtRZ7(Eig
z#hE$&m4oLdW0R9Gyo(Xb^A$Tf9t^(!hK>f)2$G249N_ju1$H^>O|z_mC{!sy+=V{{
z{0f^+V0h3b?J6qC&mWhvNNsF&I^>XeofUalmbe<0ob0+C3pQGo%cp|HFmLSHM4uG{
z6xY-A_T^f@6mf)&A(hI2Ra2a8LDdHDLtQ_L<~o^X8M*8c5{S=>p5si^i$Hj-nh|S_
zU>n}`e?rEr5Zt%@e8EDim_|zlyU_@fZN}tA-#o18j0$cR!gG#52q#r=P;Gsh%T4QB
zU=Ew`BiX{N1@9ORC{_?^w%F}V-aq@>tO6}ZRyO<9Ibl%_AYIfXmCl!a$h{Ua0cCPd
zdou@u7H(6PKp_v!FQ<dJE{kXWy2fZfPVLWlye1st;6A|U!*r&NyFhxZX((k^AHPGT
z2mXQ&^BkCGZ$(`J23UFZ3&5k8K&j~2jnn8&!ZWnh1a%JFS$1>z%U5;WD4=(^XbRvz
z31q6y#0qAYmh2DG;)Atz*U2I|s;o|erY8V;+v|-ZU_FevYntfA#`~Noo-YsLSm(b`
zxdp%@@lF2Vv1#kzUkvS!8my{n5xnHF!Kh;LHj5=NlK{Mj4QErx^jj>C!m8#;9;x+z
zoHeM`4BXa$!_i<i7V%^MKPV!7792W-+|K>DG07k_o~X1&GL3<6dx!cH<&^2+Bwpqz
z8|d5LmTf9gju~vrjd@b9JAz=@?O%oP4hhxf@w$H&eqy71#c}sU!<stgxS_flf6u|%
z#Q<jUhPqSH$x_oHjqRKBCR!UxiWp1r0I6ZYflJNLFzvs;k<`sYOFxZl0Q$Ny4AuV~
zT`kuBJkI0cKKWe-UP?-;4-18e;@Mp+m7#pqQLWmXg$%D5NM^_5X&OIgnn5~yTIw{q
znXY<cbN;hi<7vhQi;)ETh>l9G0{VIX{Gn7IS>A381Y3z#CxA+<3X+AHJ~EbWkNndO
z+87juomTtvJ!{eIOa}>qUXI@=tN(QSBBC)&gPc1+79j<*!xo?{<CvJ8Y<XdP0d7zI
zf-EX7ZrfnujjQXMYiwa;Y)tI{wNO^6wVMs~J%iULx&olA5SdPqP{2QC;^w?IeOJ-O
zGY6EG0KQDE+VBG?+HG!tR!e6Cz!rp@m#^cg6iOQ027lcT#ST93x;w+9)9e4{UZ@AM
z8+#G&9;Y?h_%+@(d41LjKSV!-G|R>SH82|ofG_!=n@^)k1i@&2fBo3Mxhc${=5lpb
zu7YhZlpY&GeA5t6X^66IFz#@A5Kd-@Pigq$?LzW=y_}*eq0$VkSSgel2<g}MgJm?a
zvPGrMI+M8<goXu>d7z4ZwZq>+TfNGBqSmh}+nTQ;?iPgT5BS05%;pS16?mrRtImCJ
z^#IVcNCrU&aS#O?YOEEPiFwDkrLV4VDGwLRac{CtNgY_r4Fh~YZ+*Ve++fyPR6}Q0
zV+6o6+xjaR#CO>BUALW6R#>P0L*FC=*4^OzyTjJQ2t8iz^SAuyM1xXX`*dWtdH+#Z
zho%M*E_M{=Jmus`GJ)H<etY^dU)`6NItwLQegRncuc$Uf7hUv-p*aO=^^W}fT*UAn
zK?;$`lG1zC0v0O{Mh(c2YXJGT4X&cZ_M`_EM{j=#7~PZJ#OUQr{w(EhPEWm+adv4M
z7$~;<d^xX*8F9k_`#k?S8&>C6yP?Nz%~pHrG$l^q<8S}d=sJ;+2%(tu1o@?Iuu&Ew
zM!nO^iZXw$Hm_ELlZkyQ1%VWHk|<U>X!t7N?&Rwi!5JS9HSH>9Rh@|J+Mlg>gG7;C
zRlu_D@Og8oTW4hqvzT>6IHx)uz@S(H5eB_|MN-Nq7K%ylWnvRYB;$R=NKKl^=zP8%
z&K+AOfC@MOnosS_q<!?beuG_Z3bhXL-hpz%N&A7l5eQu<csCxUqWO|Vm|r}J$S@2*
zT-j~F6;`jhSZWO*jm)$uiZC-fNG2pPTy3MwlpjU`s-af1JK8;Lu>^)Sy@rlrIDMVc
znQ$cj`fh(35JYbT4Yl>2*H;N#b;C!}*Y8=RSqgG0sY0u(q&<t5Yt;FbVpt3~<yRWr
zkmW_wM2WDxo^Z%88S%!<qBk4Funn_yR8$jn&S{Ep=Dxxx$R{=!i!0`o&<H{=*(UMt
z2yVKX$uyf<uzg!H0WuYmRg>Agc_Yq>%73+=$4eN|#a0(Xl5(>cc}0YlD=sb!6yT)D
z1H92>X0Y7B{H4v71E5nE%QOoE>M+Z8HcS_mEMR;CnC$H<!Rf1qUUrqTCgw3)8HJeg
zl-OdYRJr}l4nVl$l~Q+l-1>I#v}?%?&gef#0f!?Or374>fTAkg=}qlNu5cMwtcuqb
zbP*|Pw{^`9eJ(Pn^R8rlau6@OThL|ydms5)u~dr47?&+?%G+iA+tRMSPvZnY)IlSU
zd?BQeS%bs89ta`qFI#aq)u>BC<x2gJ+SfK@Fzej`JBs7g3$S6AnjTb$@^;S3%k<_f
zG6OjnlnO#W#gfkjDMkJfw%jk|4XNd(fJKIO&uFhm{pH(pb(l}`8NhF)A(4xQoqm!)
z^rG*)ShY|=O6U2y(cpogg2iEfUh6d}{0;<L4!MTegm^Sqs@sq|r}`Gj^&h~!Ct>Pg
zs7U6z=|PdW@REwEV1>k2B{1321w`0)*{Yhp#y}i+|5a_II$#u$X|Cv<ySZkwWF>HF
zZ}Y^68O~k=M;Ocka{V;401G2veNsBT12&Iuu(nhQ&m*k_*MG7(?oxa9eV)K;;S+IV
z{3*muU9n<927!<gJnjk9-N#a8dKC*YGP0`&V`Jl@(&9m{;9mX(hE3K*1jFaY$H^F3
zdTAWILo>(SmHg_=j%0*te*Y^!k35!#A*FxT&9E$<=MPA}Vd82z*Q-~tU#8;QIV4%(
z-(o7%xxUncmd=!`Da&{ySsl<Uv*{<bCp54Sqf3gDlap*l93-ZsguE{NBX@0W-lnwY
z0Cv79de-;keoS%|6k0>hpjyB^bG2P_H&O6oc`=<E*M^$Qc{d`cK2_ia4r`PGf|C30
z1+A2TFjXk7;1RrAAM$f=%wBa%3r8ry^%7sxu26V`r~I%m)!MH9j|<@T0H&~6a=AYZ
zREbhIiF@Iw=#%M5J8X4YlLbY-N*1k@LFz1UL3^zm>CaYmN0>+Mr32S~V8_NML%&!V
z8M1h1x8C*y;&4KNL$tf5pOWNX;A&SxI&<w%us0s75cC>}h^-5$PixHT&2e>O9ouL^
zvzt_-p)?WXr7GEFBYkz@k^ti~N}u06R{@iwn%D`0(Yq>kcOt#*>7GeNZa(RHCDaw5
zExlAO(VMR6H-SH1G8j;Gt1y^~ib%0nZQN<m>2=SHSIuPdU`~A2;Zd#U-}~;<1ehWl
z-20E|dbQ^Uid>I+C=!N{NF?-(M_K-cPwZM^*rKfI8S%n(WJ~X$mV5)ktR$tx1sSSZ
zG*Gt&4Fa28G;g@j#_oa%Py^_lXREsWvx@*Pl}d`8?xrB%_jwd)uvF<TLxFi^t+!nC
z=*99<d8fDU@O<NEFvO6hlUDC=PDzenvyr`2v^zIf5PSr2<TBqQ25hV13ibZvTPyQ7
zS{;32!u`k|PdG}4bfR2t&zG}>4@3hkeFL6NuBvs3os!EVz{Tbde-vo1%sxx$X#4qY
z#eEroHJk*ZXEa7xG#1J=*Q(7r^F!Nm`xw=Mq5iLi<DN|%Oq(FoQJ^V*zQylPK_pYS
zpc6+0RGNy$-=Nd_ur@N)ws1*e-&D7(OlLbFQaH?=r(8yek)*asX*ezmt5*BDykg34
z(8oW8;sY#Kk_H@Fw{W<cMzcHknbxJJS*oo&wm0{|-3bP1$3JS2fE;i=4{^JMFSiup
zkpBS<=h5*=CI=p=$y*Go5?u`gqs~>iLVbd7lELh!#P3LxR;>fT^&(D7^jNQd#Vh(-
z`@h<i&56(hpGa&O4~7F<^xH+MkJ3}Ms3rtD^(r8^^@MT^SKzl6S_En?uZ*G+3vU41
zif;m;$bb0)fGy_EDQ2t2<&I(CAIb@vq<1nioWF8_AF}~sY!Jw$fyX@0`i4i{w_VQ{
z>7NM$9`;AVNQF%uwJ;)(q0kS-dQaL8JCp)C0*MFFO1)zV!Y^nqosJC%7QC3p=tiG#
z0DNrdwL^{Hn4=BAMqM%R?CtH7*WZnoJRbu>(5Rq}==6VoK}(U5N^?j2QZrjSSp}s3
zEK5o9{e`gP2LT9+-Cz6u?pAfg5#DCmhq>A>mNkv^k*&#DZ{i19M_<2gmwzT?1M6O?
z*la^gj-a{T)DJ#XYK7C@*2W=+mx%T)CqI8-%IkkoCZcijOn?#tWFT|>v~gM}sDCyd
zkR(CCuCrP4Q&|BT39as38^~K)&i^xN<aUqgc@|PsKsVld@8|Lm(&W(1SCF5tQ7s3j
z-zL>gYCS`7^PNr8Pat<$i6Ch$1g+7KQyWpuKV&}Y6Gj5Cj>g3j%7>!zK(YhGZr@(4
z=E+np=qEGQI^AY%LJ*j~&z<QvHvdeiKkQ>n-i=emUU=4Gb9w~?%QV{`wLq5TXCaXC
z$Ro!gQHZ46I2Sr<{R@oNVq;k6i>U2;J<_IOmM?gr?qGn!Er@g4D?2PV0@rZc8Y`!H
zBB>sSl%!Y$)HMy!NE)|Prq~t0&j=$u(f!)0KL?=2G47Zz)a(WaAxaU*nXsXug%t!T
z{l*g9XE9m$ew`Tx`B`hVI99~y5nLsavXIoZl9a0)2;BkVD54kbeD$KaKslSVmvi#>
z0jb6ZvK+nATj^ynChxwSh%uIcr!8AUQ+E%p>XNQTSPIb#zw^Z@rfST$@@%GGKE|g~
zE4V`th|4%JZlzGk(S}`VvMlx$wMIoN=5nFleoWeD57x@m5m#w-jczNf%1S#s;~IAx
z4n>!)&_Z2isX84HBy_-5Hw5Y+z+I)P$)!@O+jD=dVF|?FkUbkJO-BW(QKJJBDSfSU
z7<Hb(ZkK}{Z;O_e=cs^L^}#Cqi|Eu`+^?5aK<JNdMrEn5A{GuS088mUjZ%P8^tEtN
z61uITl3nYxw_CsWrHqSg&9u0^JdYjSLjq79<V})aZ6n|%Z*8pf$5{aaMcedE*{eHY
z(L$@H+JWxngi-spZCT!cNUM3yX+|G^=@JlPWH=eu&i0luoI$B%=h1RLNz&MPkoE$@
z8Uxaio6Bz8R;Mzf#GJ}B|E;Zb<|q*$^~L2Ii+LZHSDVAEI1`>Ev2tY^48ppVp=rih
zE1eL{zf#LFvSr6qZ)@_C&hk!j1>Ox%kH8761NwyC`?48WTH(Y11dI17Ypx5Yk9NC}
zp`mk2c<K(l)n8p=Tbn>{6BeJ_5<15KyD=W(oPahGN^d|Kmt};W=N+a@Rot`H?QY~r
zSa<*?(UShZ;VD#eJr2CDpWhk}x1Q?e>g36KSSs!gX}jk_d_$1ruw%HtD@~wNZvlK;
zfX)8%!?}cuo=|DS`ek<#BB~1p{&!B|*-vgWKt#ZlXH|vs&B6Z8)2x-}hn%W=JFYBk
z24f;0Rjwba`5Xgams4+lg#%WaZ{Lt3a6k$nSXh%XSZi1t3L6e>YfMicI!hq&T3?|6
zF;9-p%3#4?PgA2jrb1QxGlDpJzV>MarqtKhizCF57nLOvKy*1prN!iFhkiLlY(+@B
zSj>eg!_E0gw>;j&t{u{fpYWo_QnBTUAz4)APOhTzL0A>1-sY~>dERhIMbUxWkpVb?
z!S756R>bpjN8QD^RJ41L5-f;^NF@ngCycwXVc}{cMKEhD2uA!GewWC$(W^o)^=cb$
zKctW&xa(9&UajU}Rxx&4KkjD0Om9?DOC?_jQGPMyqNnGZSI7>zyMs&GmB!N}YdJYO
z9?#q@C@iGiD2yj`sh4>00R{#5ye(vj@?1vWJ+5{rZanNd4a&AW(noe#Ji39B%ghhW
zme<=HLRr1RxULGcc9S<&L||3P`hp=kk8(<Exnd1+2Vr}-6gK|+qt??#?ddCo-(w}l
z-H&X-{)h98p*L7Mig!<cP<eJ7HNXWaCl;3%DjEgdXIv^tEN9ob1;;ByU{g{TWj@UJ
z;=?8}6wQPD>H~HEC5AU5h6js8_5cD)pAVHvi&?I=K3O#b&=7zWpdl+IcrRky_wN4)
z10V51VxH?N(S8d_1pHtc-$QrczZd-`?sOnv)j2vE0V3-uh<9iKx`@lI(udek_~R(k
zZFHxDlyt4l=BaQA36!3Wj>~~CZM2>f8Joq@;aqa>dv^G64KTL#bbe6Eubf2|oB%?T
zLtXBZKE@&OkdbRc;!V50dL6xJ$tq{;keCBJIVg4V-TnBemw?xsO7xeRnVAf3kD(81
z0eHmIt?Lmb7u^hADDJjEqM*+7Cg*w52j0<j;lG)VpjV+X^XvDSDgOWD0)Bf}5GDQ>
zMuPnDKUWd{O_2oozr9rvb<B*y%c}K1;1l8pH#;I7WoTYr+`l(pLlP?g8(%0cN*w)<
ztReWF2;#G_L3CV9%ALRczu}b4flZaFh;(Tod-}WggH4jQE&n`vG}U8D8tMystb96-
zXY1Mcpkxi%KYzFi{DM8xD$On{`XhFfqKb@!xCHaK^ysL_#N<EE;RR`enUlV9rBy38
zYil_>+$_4&_Y!Nnwf!F=>*oKF1jWB$-;n&Dex5^2&CJcrE&!>=Gct=?LA(KBV_|W1
zb$N4fb+=6CMn6!0z6z?mNJ@%HO^P0Rf~R1mJae?n@dRrPN?X+lS`r)*4y$Y;evy|G
zzg|VakBNx|qB;4bm6fGMSR;d>T5c2jK+gxWLP$Nomw6m8)4!#pp=931ztD%>!ou3$
z6?q_a#$~P=2dn=E_9W&)4#R)}fMl%B<ee?LCDXIiEvc+TPrdXXrBImetNd~Xz)!5_
zW?YH#l5k-)H8p?#Jscl+j&pv1y-Sn-nuHb;8?)*0nv@|GFvyEVT?q#VYhPC<KO@IJ
zpA9?&g>j}ZIQUA+uVVIVnBIW6m^A*g*vIr&?OYODTuQ68g_$|uoBi2Cwum7(?db4l
z{&E{ie&8zrpW@l3o}H6fzK9gL{8lf$^ANi$EU_o7fF|a;!eLB^6D{G5{aFHk4y%w5
zcv36xdg&n>DWOY9;HA6-gW(B7;lO$Yo@9!Ljqt&{8MJ<&7*dhx$}Q_&Y>&fs!8mv=
zXarmUm^rTyCAa?Y*xxFh2HxkwXN3&N-Bbmhj_6h|=HI3M`Tv$;`iS6p#3!OW$dI`|
z_<)a$jLg1sAtWF`q~-G(tcAR*s|SS4+F}oo4hV&y&a+NUn(5eZKd+1?q2utqW?li;
zLR1G2Z$%4?C{kAz6a>sdI9*g~G#~5+BCLIIudJ-RmnLqudN}!9aPe5T&GtdZQ*lJp
zO9x5+St(U3y|*}+yl(Y6#CsUbEiPWpS7u#3_-XAu8;Q?Tf$%GI%?9*JOTJAXN?Drq
z9R>QmdmUnx)gt_Z-^+MMD=aKLAQD@#;D7P<R$+1U-<EI)7ThH`!9BRUdvJFNA-Fri
zU4y&3ySqCCcXxMb;H$jv|D5N$m^shP&Gbz-RCQNX_pi3Bz4l((pYgt%8Ur&LT0D0!
z6H5>0Tir*U$`78#`bBz$LbWiQ)3*p5S?o@p$M<Mdk~S^8ZLBYSc)RfghYlJ;^L%=t
z<EfR*Z<Zq%Cyjsrdfr_>6Ra1CKBe{-$s2u2gT;KCV^~#h_B0lQ@aG4dsqba49EG;O
zXJ!tAKq36TKuyYeqe%rAsbUx}6_LU=KRu_@pbsMs>b<Nci3o>37*9jHp(RiDGWU7p
z-+u@pRgcO#1f~!;U#&u>@p<0nnY609(q7k;Rvq3Su9V6=)l?PpxL-Srw#X8$htbN&
zS<wd$h<T8{d4*Nu98T5myy?7@%onLP2sL9(8VMocH@lxi7AGga8V3y`5n8I(XRMuW
zGm^2gVtj#5d`3L~Zlc6Q!+f)z?!Lli;bTcIzuvZ!PLaWDixai8&vkdwaK3nN+;?S^
zEzbMh-PTYG3u!<J9Nh0-hkJW-VtmE-vobQV93ygXP3*$V_G{~dxGz$z(4$t!D|)N@
zO2uVwwuXiV2ar}Nz77EW!0;&al{u|<M?OcPQCnT-ukwWaK6Gb2OE<y5V3vWatE<AO
z%pPiFwX;GQA;(9zXZ?t<KN+uX-8><on8~Yd&XwBbuoXE5T|B>tb>~989`^CiJ8kw?
zw_byGO_0Y?C${(C6739WHkGZB>R@@o{!q`AHXJR|d;54~^7Uu%x{}L)6u;HPIX15I
z!eUTCg!T8=Vgc;MsJ>e5$@HyJ?MafsC^lyHOlBiYibC<j!^0-GW+T~7qd#n`O1Vz5
z!)zgTRx>#o)u{czh)AbXiO2F2c9V<l<rdxCXE3<L4$m9a^%d@iQ_XzM_&Kmr!wg<=
zm+_W*K#RH4`e3~@F_(;4x7_s3v^*7yTKn<o&v%M1QF>g?F{8X$Eb2b1O>XU~Ynnw2
zZ?XD}s+B6jHj7(tKU!+~gA=Bj#S??8j3~ZDlB@#vp*l2o9C09tdMzoMp8_N4W3=&-
zlwy?)AnCYb<eD58=W#YN*Us%!YZ_(DVm`y+o&9m_D`A`aMm$_18DU&_)k9auS2#=U
z+O6r=pe3=4PJJ(ywkJL>HWMlKD$B>mtsUtD22WWD{iv?CwLH;3sAT23?H&PEJ$8u{
z)&#EY@s0xX*;Bs;<#3QJTRgJ)-AeTpq<co@otMYr;?R@wDde2KGO^vKaN&ob<IMpY
zJxidDh?OJ;#xeoCEa{VzliXAdb<H$h*AyLmHdB$aXU8dNhV)ML5{n<$LK;mbZyo~!
zVo4Z_6s%;Bzr}roAg2%Lt~L1D9=Zx-il@;AzECHPGcz&&oG&jYdn29|5`{I=>~TXG
zG{PT<r&0sfD-3)v>&dLp;Eo7Aal}VRxUQo}qr5`*&I}G#RJa=M#&i7-qCB5`et#Og
z%IrKmI@wZ|mzURt!Vn4eTDKnh_4w#d0*z=ify-w_3Wa!n0a-uR2R2ZD4Ja{|E4)sW
z1ER2LpinkuW?@@FvD(mqaTiRCwI+?<P!YI5s!50@pDFkXD7;3d0u!8c>RhU0=gBy$
zA1ib^=?^qC|C<+3!bi_mp%g_wuF2Zz{32)U0%3)1#2=~Dp7Y+kAtDGhO*_52Se?>>
zbI#7pzSCEM*M=_1h3Q61$BF^vUB~W^i;W{^=h!pDbE`j8h(x&JWUkh#i_f=Ue!S6Q
zpbHn~@zgm!?+Y1_^yF-7NF1P~qcfc;UPW)hY~G{33s=je%VN5%&W0vkuVrLplx80K
z65Q6v?+!vIi-HLc5GLHEiO!U*@EFJz$%cYQh>#OaXJKR&HGg`sN1?<k({;GJoyg!C
z723tfZ8He^trt$o7^ii&%&Ot?G=hQBTT3xX<T^c*#d$fqvS4i!{@#3ni-DBaC4%(=
z8&9p>?6S9(+DNz3aLimq*i&9sPR_BUwWOXsN`$A7Z7Iz=D!y1HNfO>Tome43Md}(O
z{8&I*sGruS)L&i(Sgoi#idzJF;vKWCCpb(F_v7%23dBHGk%<uZmbP{3CE$e7IMFtD
zeY0ZJW@9~Qw5nnIa$1y=XL6L}9H==;(E8*L_!paa?K`Y>tHEGO6G)(i)QJ-A)bkA_
zM?%EuWr)cO$TN3Dyi;M`YaMGzD|Oqnw;Mn8z`@}=v~eLE<1f~}&n&^ILue&7bT@$~
zGF!EJyu}6vLKTbw!t(~dzNx7VCYgL;emAgVWqMxF?U(t8eHuNHp4wR3$*9}24EwHD
ztbnmI;phHP-J%#RUi@jN(?bKRX@8`D6x(g)5A#=N!-=;Ob|VBlK5Q{KJng8C4#O)Z
z%%ZFuurUmfZ~QpR@v(Vr!6cyMh2fVwNIO|TmtxQiFAdM*R<sTMK%oB_78iqg!Jx<G
z`jT<v^Pp%LmZ-GAnKZd%a;WKrXk9sXoexg$vFZ~)Q&hJ1@M-`c8ZRd&#pQe){?Mk8
zKN|02JUc(VPO96Ni!b!CWx_^{wr3XueFW^M8K5q<^rBU7ot}`=(B-VVy&y8iRg3jx
z5UBNH1_WE|m1_deqiQ8CW*dTz2zNDmqwAgaNDW}a?kRN^um?wgt<RE;B7hN=(`vAc
z2;H}XG2^c~EeYYYzh<$%RMHOj?Tu_x%j(lN_wAaSo)a7l!t8#h)Y^Bjnr<Ld?zu8j
zh;{dbj|iVS?(lf~=!b^-D|-3PTzI4m@l%V<J`crub#$kISGZApiK^IKnI?fh8&Y>@
zRGTq6jRM{>A}p0lqXRHF7jf&0oc;AKj2sXcPTi)rIQw98xsl@4msJ#WnB9A*_t{1*
ztR`2bW`y%}e?dPj2b}<C4^>JEWuIUYuUY0wV4vs1uVSi95uDlMO%(g3H!?XXIe}ga
zCxYN)89%j=1UdI>3-5f{VWve)#NE|*xpTs*@DB8GZBC9ZGe`!g$m;z-i5~qv5mXE5
zC<2~7%S*SUl;nGYsX~dX92=)Ddb-alF@~c0_3JHO%n5wjPQWM!3{?l(lB&lWrw8A9
zfqR0bPnmpPp-9?t^ZDg8YUS{~OdgV}8;E5@NrGDhbZXUUJIV(EwFgFS-|BNNHkzXt
z6Va@{2qyOm1n*Ep5qLj8!l=M2+(qGFKDkwh>-E0txI6aZERVG8&O4?uGci3DDVLaG
z=Uj)W9k{$~H^WswC$@k!2)qpc=7=FX(z8Dea=tJ~EZHdHL;U~^F^c~d_4)`CfqbGb
z6QTZ=<C(!}8|rO->(5A={&cNn8q7<T)<%Hx@N_?}WfP!(1bW^poiQ1`jM+2=MaA=S
z_d}?*^>v=uH7V;eZS~DV7KaaY;LkbSjm&8}{_OQoEV3cS)}&AGq)fI|?<abj%2Vh}
zGrO=~Eyb$*)`pB%ruOzE&~33%g~0{>*<!v0(!&7G^FSDZhF+}OAc$B!gp!@ZS3$PO
zwkZE+VkPx@0(A36i4LxrA*ue$fF;G3oGC;UuajqX;{FRVeJ735SXIRVVyY~<0a=`=
z)P)LlIxW`gFAJEs5&AT~LOo!3-?2-H8#u1E!Db*}VFsr>kS_TB`LO~O@3Zu+O@i;e
zl2f}WM(3Heo#<3U30~c@;kO)mFT<43>$ersiM%l1eI$D9{PCMyWV)BPhq|Nv{UIov
z6TkF_0>vJJA{o-7_i)yuqa5&kpbw|tI8cMxWzy?Jao#53X6K_Su6jN&#x^-6rK>RV
z>Qzg`+`Q^50Ajvn_f!W$LlKt^Yu5dMIkCD+nVU@Kqwx#^eY(4KK<H!pRf92N0A=EC
zi+y-gg?#9BG5TkEPW0LS!t{Gt;8i!6m^!T(qm*ttYPq?nv?<|Wie`!h`M|B8<}X3S
z`lm1Z{eZaN(~7>CkF%t-bglWg`TN8<wJHnd;NQ4$#x9vH-<Ej=p>$qyEjm7an60iv
zIykR{wIren7g7=;3LFhNmPk?p_nbkyPQtbn)dsEVa(6c_96qL+`nPoj&ha%YES#B)
z+U25M&H#huwy%>hbdnIC*W-{RI=-}J;224bHFVP0@oc45g9qoBKoV7@ZfL@oONonR
zR|^67pv_kIO;UUep!F3V^L`E#M}N*$u;NLAoP=HbDLGERLWH3hL5h43Bb`MDohCA9
zZ=+xD&z*d(_+!A-xA=+Ilj)iRhlhfI(D;vDv)f!nd#m%|vVx$$1bjw+R^q~p&^;XJ
z`inP%l^r1F{cbGl@BxKnq^1G$bQ_dj25J7&n+CdjeMC-FSlg6blTS5iiVI|U9jb}?
zNj7Putw8Q#rZ&~MX;nc-#=L}*5!>+zxxr8}-i2Gxc=Q5I@-W{i60K_cpwsT@ZLKvn
zzij+w-={WLM6xt`Q}`=95guX;j-xqsWVu80%=f;RWDBXp9-wut!*C0Gm00hXwG4@n
zGZj#29aSTG2NE<@I;6g%-6N$H$8%&<kEFGYHb*#6r=jGBmD(Kmq-^Vrwup&P#L3}c
z((X^dq=sNBh-2hTAheOUu`ODu>d4C`AQ=LL6d9>{p2xjZKHY<JgzK*l+C_|7ax}{a
zmaluS8#;xC4!qkaVKOLa&xMM?391;<4va&>V)#G#!{{kHj5d_(fAd+^CkxqXN>aJ%
z^RKkA*h1f-;=!64u^3PH3*8qX@1h6+$P3h(Q1It8m<$JfzXxNptS9;cWpPPdb*(ar
z>Oqh<wP!e8v{9U<9WM_At1Y&0BzK@+qDk?tF%Wy>Y2ixkJV_Lqf`Z+8J51fx9{sRM
zcHi>aRN(DO1hPMZDs)*$hi3!vVNG<0&OO}>@8jD@Uz|P!eM%!ra?vMjaXzTXt3>#$
z$K?(4tN;k8E%^t%+lF&;+z`S^o%hISt7;ndXEkB(A#kUq8H#+)A*BfxMZKw~iou(P
z0zZ6{QlU0F4RyW8YxoTm>%M|PvlFg%yEk0O$;iO-qlb3y0tuBmUXKD9w#sVZA}fum
z{8bv)jMZ(~k9Dez6L8m<P893Cx|#;xAvD5Zws%IO<D0@sX-%!}zTh&!+^&1S1|Rx?
zwApJn8VV}~jx+8ie&wAMjM5r9b4f8-Y;f<xR5j~IWY^r5yiIq|CCXdSLej%W=F-~j
zbW{kyilIqfiWJ$J+vuMh9uDw$N6y&*F*f5SpF1dylU)CY%k?1)?c&!D#<*H@DRTgY
zmfsT;JT2HZ)85lV9A4Gpi$tKfa|NzIAt>);XWzZTxPgt0L*%87Px>+gBz?eG(z4xE
zm{iVr`n!HD%ZW@*3YRDge@EQ;pGy_2`#edEi+xX;hAt*)+>V$xIXlXQN(vN=HM2ig
zKiE$;|2b&V9y&>6z-6uPpK>}IVGZ`1KU>kq^M?*fW(1rL52B^#$$+ejx5&?{n~nKx
z>>5V)+tZCyv<se{zHN+#FYv7^>{k7sbc;1j{M+1~QuL%sl&7OPqL;B%wxqsYva(Zc
z^Lr1Ff}t&h9WZFtTlWU_7Ba8@_;PAqWwjjF(9K(EjPr|Bk1q`K1h6^*!w{G^S&S2D
zJj}+kQz%B_2ADxLM^p7^;RagsmfLm^ToSkWqc+GpNg;An^l6+yx@>l!L%8n~3ngl}
zyeD1jtGDjVvRZ6@?GP9SCQ3DSbJRAd-70-1YT?&`_>f(?tPZy}W)6#9HTAG3N5DAj
zUv0m5+HKFcQm*2|)V?~vW3wSgAg_~2fGP9huqpRsq4;f?YPQ-rO5*->{StykldYrW
z+(Xx2ibepe8rN4SH$>f`zCO~$2z{tP#*j05-}XY8W+o%@NNz`vasNpCl<eb~b{c4X
zgu{y#R_u29?nGcQozF}02@@{&wA&M!RJaCzuDkaINx!_&avg%oN53Z=9ODx&^z<Z(
z{|rdgc_oMQW{ccxy#VqiNuW<3{}(um2{!oG_(;d9R`(OcXJXCT?V|gORk#SqZl5>s
z#vzhwg6+OhZCZ4x<+wJFEheo#{YR~O+N#N{4x`h-5YurihU&WQoo;Om6t8e49C)!{
z2u<<ZpYq!b64J!j217o*Rb+MM3k9;`j<ov#WMMGsCYci{W;it90ueJ98}Y`#`C;!%
zgY{}bcD6#HV7oc1sGhYC2Cx1V(>(@(3e7X<sJ5lWZO!dLpxFQ(fg5i`uf^f~Bg;eB
z0b^UGrRQdfAW0xR9$ymLN%-8TUsh<6gkpWp){h?OAAC*hkF!@wQhbj37d|=tVFpd|
zQZmc6o{8};wfq#z_qJ%C2mSp6xJf7O4u8HlQ!NX{_z~Ei&wf7SAA6lMR~ZCFP`NH7
z;IAUtT&;=*lZs%_kwR|X`FV&qcR57n@U^|`8z;f`zfes56d;tl%@2J9-00b2TRLYv
zIu?*PiGx`XqT<=dzO?Kbm|C&9?0&m{eKOj%gu$*<rH473Zv6h94PMJsJB6KefRzI+
zJR<e}!KC9MvIO8N(N@Ym+PKCT1^cD>HuT!~#~Fz>+Rj1U%Ni&=VdG|d*kB|uhig{x
zT%k}OmWLw<o=gco!vmwZr;YZsPAkf}^Wcv|#T}stu5L2G@%0J?*W4nGcN)ISXFxtz
z>T_?y2uaSCm6xly5p`;;i%(|S@_(2Yz)VO0ng*ohq+;RK7QQXaO^@GO$LsqGB@P_^
zibtq@meLIXr5x`ecE&F#%irP+OWWuhU{K!8Y`{2xLqWn<hO#&IFceo56znG8lTm5Z
zEvBl^b;vyIU?7YqcItzbi99h>GRBpeVPCd`JQgQ+dh+8l66os{PnRmOFk72Oydndj
z*}+Z2pX3E<`@(5X+=X_4tW-8QO6~f@P6{&)eSn<Y28H?^ATB9as6wIwGnzdklpeV#
z70w4A<(CT$^FkG_s&YSIt9k6dc)dQ)S;n43DZ`$U6;l;=ng!*w4NV73r!MMRP<>4k
z%DfWRXlPdf<DW5%|2)TtqrN}+aDKLu+3H9P{TF@(LE|=751Hy&Bz*iGT5{tv`wg<z
zdqwUH4xRRwV^W;ZcAvD^IX`4B)Cys464JJHBnVP})-PF{jRzWoj<p3M&Byz{cmcp*
zqNevLuuD0^2)K*9)A9E+F?v^KN>lXsw{RUq*if|ODKF)k4?$FsWM$=FA1EI~U*tX3
z2!nk+s4AoNF)CKFDhd+j*YVxGzcs*8$7cq#4aMx=LTnk+V9TkTdGgQr$9<kNm`AO9
zM)PL^0Ww0+uFsE0Z#wQKtjHASX;s*SFnqMujmR-!5)u*uqWmv!xHRFnb#;l13|k7k
z7_QrcvgH1>m(hGp51T#7_WTPu$?ghYPboia@0=Fb0!iNxhPU07__rx7m@jHKgiR~K
z8<T{G6GWc~%riwQ{8laBDL@_k(n9}~cVfc+dxqSvkuOvv%);_&i6nMNMGXJJy8r(e
zHBf+wt7Bn)R`P9z<;7n^pX=n50nl>-0H<$`Ok>sj!k$wDP)KD3U$R)W=|9@Tm`5m~
zl$dQl{JKw0iY+@<a`9iLxYCQM{fn)$0GejNf@Wq0zz}>RCD4N2V=I2&WY20Ji*$sv
zVmrT*C|W02-J}dXjfNviW^#NnFcVuIfb-9Go2F5lQQ}2WDVQ7zk53NG&CSST;@<px
zI;zKhivtpvHw$=gq2vJmexiS-BrSa+ZFujkE*w33%ff4kPiLOlcd<Q)O9vqDArc>v
zr=i@QpRRXRc0}F}p<mx9)#V55DCkId2Vp}5fs1o^yoZUu@%t^y<j__@0O0*<H)z0n
zTfaRGl9El&%=Sph0Sb=7I({T?*i1~!iZe5@ib^vx-V^gez?D<<EPpqYvU3}loM!pz
z)UzuIoWCRJ7Px*)ufxe$eZ)77KVPpXgn<JM>#yhZ^9mw&egsBF{vQ;`{--j*fB&W*
zLP-B#f7CPa?A%;^U47H)nDRq0ulqxv;8}~~$B%0Nme7KSLnKnTH>}qN?qZ28R~ot9
zue2XBc$?mt0o`b)?ORC_BNF-rJJ4fDw{T!ni>%{~4Y%ty#6OB>{@AkTLBoj*8|VvE
zcro0Zp4ZBgR=lB!lmtzNdxKGg|0wJc^?{07Wo2c@EmK-&cSAor7gSDeO-0jjHy{#l
zVLvR!QP+DeI1S5h9uqm)cfP&Om+ASXdYVqwG*p}VAmFeqcDRcNgkmH@(Za#-`$~(3
zq8lV8(B2Soc~ElGYt|jk<F7p5UyRC~%$ITxS|bWA(&WMO0Q1&Ffo`5Vn{a6wHOLkj
zTZ6=7c8jVZZ`;G_ukU+rvMFpa?S#r@$|!~Xp;$(R^(V9U*H;bB4qdjJB}C#_g+c*v
zl6;>oFt{z3S}^2FmCJp1rj5j<F+VbK7|wo5+S_a}VsEti<F+z!2HXa)QUb!lMvp^V
zO*jN7k)>o(ahuXmTc?YCeGpgdHI`|XZu@j;nbFZUHv{7gdL6WSpMQn!{8PYvw2hgq
z*IHmQ8R1x#-xeMl8^@&ARc>>+>WcR{m`KBAG~fLt2+rr>(rMdE?jbWiw%+a@<fp^!
zytVHI{v4I6?+nQ9#)HuS0^xOlAP5{B9Dsdd3w&^Ob6xLnbO(r6Nz>n7#({!kcfM}`
zY)W!!t+QZ?Kr{gEY&CfVTqj+y*4H&yF5%#N)|*uu;vD0|N(M9tWOa1#p%0H~@I|A5
zje;ZVHcOdoEOq?&@#8Hlp>L4FWimyhR#kTRWogIF&5dJj9y32%VF#F0J7a&{Cz%$A
zhghsxe_Vqx3WrYF#cxLB1x%?M>YfHGbipfhz20T~%3>_)GnvX>S*h2l&?57L^6P!V
zK3&Qnz|ss0Q~LI?{pJ2Mi}7VPcn~P@F*P}vUb7{MH!PO%z0i1;byoDp*RMltye^@<
zGk}0G04DEGW@i3V@ZE-9v#d%N*nS+pdb!*JCtS=ifrFC{W7HA*8yyyYWir^0d_{Nv
z`uIW4;203$pyGy_l83%0RB!vnG7j`UyFI+|majCdH+hk?wzw};l&3asZ?3Pk!X?s{
zDAYooZ|TjJxz=jd|1>c%sa8tzAaYnOkdX!224rQ=W}APv8Oz%wsh21hZwUwXdxs4E
zsN`!0^p1~?naFr~UoW$Jf3lbPX*aoSeWAz<`F%Q>#>LxjBK5~q_9}<B_2G1*)%wr;
z_$xHxWh%4U^#r5QU>7av=UC*-uJ43d#zY~<>}DVGKOrdRs*eB4AAKtICA0Z*{5ZTr
zk-_gBd07dgXYe8@3drlmDt%nK{YrG9uOb9y_fHWsc(|Di=0531#-B<tJp@h%b*47u
zqZtOhHhowai}j{q?<>@9?CZTrB>RcI(ZnUHxOpJUz2fi&hgSgT2>GMHY9T9^zE0HN
z^ilMw2?>iZA_kVR@6a#a5T#ERYVB?hc1{j~Uk!=B?rOI>AppRSi}Y<gAPkkbeQ_~Y
zh-D%D2v5M}9}rx|00}3C7q)r#`4RMVlP{eJNcxdJRn(Y_3f(NpSE)s301a(JMksf<
z^Mi~m(FqCj)kcHpi2^b*;jRQXK7P>M(fgY$lG->>f0@aXq~8a1xSa^1xF-JL3lNhZ
zd?}Xi>`1CT7)znU08}{pA;cTL9w=y<QxnFfqzruQOfT?kg&+f@TC&T_$Mtad?D~44
zk#fJ}J|as*RFPx@BI)>u2(~t9q!;-iAt8^Q9#3|$!_iWHyJ7kzKGo2fkB=^xIi-bR
z?@Ee_d4^)a6&3W}uqa2T$2CrO%Z=9SHn1>AaE&!JzI27Uug?pWIxm-Re%q+n%vNKu
z`ET*mDl$?sLc}&B*+jg6ZKKqxI34*F|F0_Ld$e#2FwSBPqBUPSp~Le<^?0V;{Q;1R
zH8;Dp{Nn(KlCL<MF<=jeC1K0ln2aQt6n?|*mqzdOz98@x?hoB?I_|2=%`d+@+#&%4
zdIUYOUG`tbe}~giQ5^|ff~h;-pD(!sLT+-1?#>rJwm;im{i#(-y`(SK+<_0<vhKP9
zq>vw#MC$d|Jv^Mk*cHGy8nTkj=S#>wmlqTO95)p!?aqmyO^l)G20E?g(_gs=Jw;x<
zP<Obqe)_R(q*@=%&CS=`9D;Bse#HI(7LAZ_q|FF11Fxy6DIh2R%%B+?9o_XWuLFs5
z<2MBK)LZ+Daj(1xJ|UAu@PbSwYpLqNWTtmXQ0k^-+G3+4DQTYb#`<Iiulw_^<hu_z
zFg)-J$(JWwv2X$ya99g|KyddJkV?OeH^W5Cl?G(ki*-1lprFqGtTLo^BG)lh$*!=a
zc_c9C=vH{RW-jpo*XQ>B#=9DDS+IqHG8oBfwpe9ap2D}j<k9={&p^Zug<No0m^7M}
z8?{>TYPAtGob>2gYulqcEgjupBu;L)0>Yln>7j!7cX2!kQ@tvPtdCdgBPykfi;LK)
z*ho(YVP5cPN=k=na<rZt)d}q`TfW=3NhvA1%^qa85|sbCObAYN$*(Jq6KQ14R6!Kv
z<O6dip|7MbU2}p-u~FjqNZKfr3>i;eITyj499-BqIDDShvz{f~*7P4oUlV21jI9j}
zu6BpfoYmNa!7<+e>~R1AH!sJ|CI#XKLlMwsulr=E)#>VYvASd=7RiU>HQO_j<GjHK
z4vhr5-0B_qg%OKe3b|DC1FmL1+ejRMb2-vk-RA*Ahj&J?<^7fs-Amk7GKz^E?RIyB
zum*!0Z``C01K87>w5?`?(Se0Zy^GZjBi~n%x3_}vl<nTk`{OklR<ih|uHAg-&oRpu
za{t7!-)b8g_Pr3q2E;B4sEni()YO6`p0D@d2xm$hY2+_HpJ_GvJ@riuMSCKgsez}$
zR`$l_0s6gv+IdzQ%t^?sl=IE&OGee8WFC?T?xRF0R!{}Z`Muw0i<Dd&P8Z#d`>0&@
z{uOIg-lYI-H}J%%v3)(0peB_h`sfuU^s$7RRIV*E1r67ziLeWhXr7<H@AiWh@7##)
zi&pzMlE=nLMMXy!|Bu%Ya%6eTBn0IG^Df;U&e!To)x5uXgUpF8)=AQ*7m_qbKHnYB
z@w(rif|_rX$U2N4l%(|EJ6_f3^|t=;;os8r4*xR(dZ-<A_+LV}k2Fu&ypk<kTw>2q
zZY?dEDV;XfXn)5>Bl}C`<rh+rQFy<l5H-h(s@Tz6(T<HpARz2?dU;-hTzOs*iT~Nr
z8(u6h5Ma=VUhhQ#L+BLl7)%-Mnkb5Y1(*PQ$dg8ENrHcGs6oZAdVC}#xd1<JcXKK2
zRMHpW2oUIfAmsfL@DClUFLSK4(Hc-;y-rH8D*<$7XXd7T63^ntGA;i34tyWMeRf7?
zht#ht7idC8z6?ujY_d}Q8?4&F*m(4NznUBB4;2TGe36t_!?ND~mwsjkQ*|NGWka2F
z-MCW6!uo^eKSZxj5{Y;qZIss}(tj`b18MBPZ-Dr}3WaycX=&-2HhR3tW3RC&^?&>r
zM)5`k%#7#r9iU^h<@LGVd;y2aLZVv;5&<3_3JE`_uyF8|-tGQeqfT8R5@1~ojSCPj
zEid06F72>O<i87$0*bZgHtIvqvM0_L8@2Wq6+om%^?q9Z0vPYsem-bnBw4$Zy!`xr
z6rnhJr53=1Q1j+gRPb32)ag;^uGIZ(Wzqlf26_S-f8nsGc+7^nd?DfNI^mU+{&c*)
z{0Q~tl>tJ*spxK%QkB0UUa&Ttl0+jAUPD87YEryf#XxBFkEqb7(dtc?XpD;8;qZCg
z4*hWtlwyQGX0H-Dx{e=Ju}kHt7cEVwIIqAX76D4&K~Xr}uaYe0tA~Ig*CX6Gn9SH{
zb+44{C66ND-S+yN@I=eY!wZnvZPH?5rYlqc5&8#PV4aCn1W@H^879eXdy#cYk=C29
znV$vLgMQQ>&)pL&2C?#{(f(Ac<n*{i{s^oLxlA5QOPyFH{4v*s3f+}@d$sfyM-7SQ
z>%D{ub*KB8W|b4wg(8jLkjKZzZci@hJnq!Tx3+2z#itA(9uDXJIG<baQ5OzR<PJs-
zfSuA;*>9Tf4i8-x<pLf;oToboNxR9;U;@<KHY{~1s(4Gd=)KYX+B7)5gd#^KGY6Yt
za&fj=Z+}=_^%~^+f^axENaFIo3oyU4+Lp-v3k!(&%=%~HV0%s)P%Iac$n^3=3?LXd
zDkx92kXj-#1_5N8!Km7XYQ%_7CsW1XLYpGJBoq^A{&$G3yLt*)`aS_~VH0{CRh|!s
zZE|0^qZ@X}7qcnl()ru<uRf}qsdH?nu?}LHxL*zlx{E_&=OBMl!_fsA^CIxwowj5B
z{*W4>8Tnf;)>NCEB;a#7b<HuEj0(K%bPcIHz?g)63FX0XWI4tzlXVdtoJg-Jr$R^H
zCS)^A(uZNGv4rQ0^z#h5Z<Vzl>~4`g!DX@N%AwZF2GzumPU>)Vy1pbtrgNEU{k@<2
zG6j^C(RWd}2f*Z-^@b}^C9x*-iZohPtGD|XsZ0mOkqGk(3n@rR%XHc?p=sN^a-kCG
zb@%P0j%M-+`CNkifc%FR3Et&-_h=}agkG;Dytu+<tLIarb6sOY_2)(FF8^vY95!<f
zvqOCd99&#Ux47%wVIx!1KyYy3ULd>$ZW7bgLtB)s!F>kJ&CT6S*0s^;brf=Ba@yT?
ziC8E6Wdp8_Is>$GAd<)Cv9MWh!-UPiXm6A|<8nOVkhfcI|M{?6th5=UY~!85;~E5y
zi-U#5ZZ*3|5tS)0#wl;BvEOO2n3c_-*RF{|stCpHe7am~{}7ghb?<avD3|8zA?QR)
zd%YZ$*<>}YiKUikN|&<3HZ(8#7A6xO5wpiCSh}ZiHxNO%&@RsY-Y<<uA;-kXs6&iN
zXroW3+d}I7<{@`42X{bc@uwofFBd$l)@(Xw=X78qb%%ZMyHo4^S&PG2s7>V&b99)I
zI7xI~p?s#fS+JFonp!Vea1s;(uA6Ksqhrm_MuN3(IAUUfp+8HU)_`l9yR&iR_c*N5
zhY`^W$vEN0f>uf+uhgrJL@Q<I^_<2m0;D~*G7=edBeA*g8uCB$=|-e3QWyQTeE{(p
z;DEu(d2>;}SF@9aL`3k~Kg-nakI$EB`u!;wPknNmjBP2D{6h}303FU`*PiYqnHlH+
z_)ToPa;_-?v%Ni??D#VRF3Zp9v88SppL8x~-=wax@EzO*YvmGUnEl_sOu+I-<C-0|
zzQjTFxI3N2oIw?o(OT_?1Mz!u6d~_9zuAY|)%-9l6fatkS@X3CMw<jvET88KM8&7o
zdLxR~piDCio-j~LYl|?qZl_bbYuLVQDto*AOM~xArB3TW4;aCZ`64P<yg}>zF>bGY
z5x@{`w0XVmkEibL8u$5K!eY=U7i;D#tOWwm^QsBrNbdVDuOW1Jg?y>_2Ft}q`_=EO
z3CZ!z#>t(^$pZQa_>5y-ZLc9kI~?ua7jH$?xj^_Yr5<0T-E6l56#>u~d~Jp{;!DA?
z=+yf%G;7R;=MGCbD1YdnE@^Z+;qTI(gC4iQrBNToar(R4pbc1zyO339ozGW!ZTBGx
zA<)jqd$K6q96fvmVA@=JJzSkHR$rg*N_YLvxE+H-LX!8+dSNkBeoSrp43gyTs{Dg$
zfb_0QMNl~$Horyb@)E^L#nYP@TG$=$QVo}?l9g}v_W0kP9x*R{KcGv|t1%u%v|Jw5
zJzlGnm$HME`G|>$>GzD#<|4>aJ8wOe<&?f`Q&jD4k-BWyG1$Gn=Kg&=S*1nhXh(qp
zh>kr#k1<N0_T?x^@dR}BKYBgf)4{!ip5Sx~H$`Is!Cup)nLQBI7zF@%D1c6ZjLh|9
zIeo=B6rHN<(JN{1@o{Ho2dInndZ+*#064gqHPH<LJ!(m0a~lV_G~-D*gRg$QaL`3K
zlrRO+B9a(2$K7~Eg@w*f+hk6#bWAJayB~$&T@t8BKU`3-P?oTgk%=+|IA5%vEVtuQ
z5Rwvboj%w9+^D(P8wCRArc;4h16avn)aX2mr5c$o#tQ9@nFqqj6n)XZ5smjJ%mmEX
zd6MEknG+1FO>_+%am?)OLA+EvfCHzC=rlGoM@6pth)C7IDVdOKu=VnAhSj!fe6iT#
zN^?k&ME_{*@bkydZq3X4aol^27Go+>oF2c2vy0h=owF5Zz@LA1r4D^c%KN7D^1uOC
zKpHUQ9zzOqbv35d_iK`J<@=vM%%o^BXRonG7Hb7}4LU0&DwUWoR0)YViibx>+unR7
zxm)4}!N5c?fO{<|E4yd?o9B&vR8tc<vhB;(^wXQhEQ4adlVq6vt*p7RiK!i|psgV3
z(aAf_&+vXA298lv8j0(Apjt>6VJ*`z-(G~I`HSN{3Rl(F)9H2aa1V4>t~b5H(McjR
z0yfTKrVPfz^5%8_{Y6Sv_R*m#?m@3kWW5&J56KSJ2h8Yo`EF-m1%J`|!|&Aq`-2_B
zour@gu<G2H4C?+-FAh<}y@3KP-FwP;>L_nej~OmXQVo<YD3jy3?A%Vr*iNMIgHyqP
zVbN{3QyKoQ;)!)Q*Z43mtA#nH^~<P8Z2h_~gxBQs13h5X_{z0v>2C;!Kgxbc2ir(q
zd$f%fl<9%BS~X1_wt>OKk~_u!xn3ixEV2u%tU-CaN&cToCFpNKD3p3{9%<BFZb8=<
zi_JTMj<`0O?P89)FVq@Juu>n)%*-X$kfL-=t^%FKmag}{@oA8T09NkJB_}7x#lSy=
zsu4Iu*SA>!paD#x4v)7F((Pp$l-hDhykOGg=18|Vz><cJ0Zb<%eV(qT+ZG2cOPN>i
zvremX09mfTN{F90A|gH?`j)%zgUp?cFwy?C#}jSxPbB6qAU(_F20<bV={a*{wYU6h
zUDA*ZJpRX8Hp{i$t)ptdk&17Z?@95M9=8gd7RmzyRsh0fAd$U;({?W*pNH~HOP(wh
zF8amY$pSIWT0wJisK#L@CDFIK#-r!CpP8K=f?NhGG`cyDq~FDt9u0)Ks`#-VvI=Zg
z&>N}HPAN#q$kqS}`PUbu=!{_GJx<F377mu=N?DbHR(boB(>9l*SPgp*l&#JRu03-p
zU6{6DSD)KDv!z(i(ijRJmNL^bO<uP<0Fy0OtRGplHS*g_qJshAM1EL~1)^}Gs3f81
zIow9?a*5E;@SZU@(%nxNWq`WC2Od4w>wOqLkIkX!Z}-E$DUb@es+7w$>fL4+rvVVI
zDp<xTg~y`rl7>C!fe@C@`<&-grfKj`Z>_GM+d-vvm$<y1_m)RYHSx0)OE_lj!FaRV
ziRJ^rTCZ?#ymxUMmgF^P>BcI(1)tlEmW*s}+6z^;5L8>z0r$voKbgq?z7+O73Xj*0
z1+>v7kd(pc=r)*<4xq_Wa#94mhRQ&cC=ZZU_qR3BjEvaT*ySurk~yq|@<-w)wK-Z%
z2IsRde0-^{QqBQ*VrT8;A&t+wz%2r2XK=au+?Qi899yTvfvT_h-R3grflxh-ljv6B
z@E6}JA-@;sIR6m$yRB_Ct@dzAtlGz+wdJ{=6rA!Y%-$8duV0<Je{h=}W{oaX(jurg
znA{`)nWg>T*w^YqkJ&+FdZ!>U*ncLyY2+R5oh&r-V<d5PkbCU0_k9Jt&1URxCcCbd
ztlU!EcYq;H0-@Jeq*K_C(V?p>g3i6x?7RSYr=+2HSJgS^tFAOOLPCaC`%k8%O^Ysi
zu>eXMY0}ANW?`6yoEcqg^NyV3OAx>o4=YZ@V>R+!9MgpYSaB{d35V`LcaUjJVU8FA
zE{wuZ1#lN#OMQqGZNfL{1q+wwwEFP(l+SbA@};5-GfHoV7*>DZW)d}hhqN!W&@aJ0
zFYE{gE3US=`l24I+u;Gz4M8~7!TS>D@%OCy`ukx5r9;4{<v)Dt_Lh_d3zkwP2J6-{
z{{}M(dfLQ5;KcLAskStS1E1NGe)pP``{#Q^4)BEyLG%6{`A`1G39?Mc<A>n*oXTpQ
zu+XzT-5Z1=PO>Qfhzwh#QEEEATo0rd=c_IF1eo;l^M6gg$i$EjS%}EL37<DVC$ePc
z3(_houmwVJ7xsVAN)#`usOi=clTG{&5CQ?Ta5zXRy%w4SO&yZM!;sg-_s$gmCW&vt
z;qdT8`WzSv8l?RcUj3;<N&of~S%KZBPwJs5drAR~MQO3uWW+w<lK(j(?EWYg);k$=
zCsF$Eh?NT?{vT#$=%nfYX1|2+czXF#2`o%Z&y)w1Oq74MqtcYp{rf5l2FS?({|XRV
z@lM3wI-vi_SNkR*uZvt_zI;6-%_r?`>fQSk?`^Avs)LVD;t9^HqeC~|d1n1DmKEbJ
zDJ?HACHDqm-4Z|L;3u_;RZ_hC7Z@OV<2oE91#WKOvi|Q9U*!L>>*Rl*LtpXVpMz(V
zyuX7#R_k!5<_JmWXH(_o%m^uHintd8RvRf_Ck6FvM(z`tWWJ>53XYg+@A}UBzDMW7
z!6X^=hV}8Chl@+vOY?!(MAJ^&`HTH|dl$G6>IdL~^hxsX6Auw781QuYD;ffL`ky!Y
z{VFS?Rg(4_gOZk(_6~m^n$^O=!6^Wj0Vdb4w|Vvc{XFGs-gr`O_ty1+_GGtGgWNy@
zUFetF6B;tI{=b_qzYKv~xf~9OsHwTWH~d*((EI%N-?|;&n=BtcokU$-Etl6PR%!wi
zfsFL@*ZsSn=2)nhDQrg1pnwSg(L0=NR#G-r788T2cgN$RBqm<hk+<$Yj`w`IqoJY#
zrc{&Fr{1&c)Ow8rhG*W|;cPm0aPC)WtYWPF{)A)70n6-&qK?k%mS2#lsA#V^yxw-r
z?Rh%)(a{ke;{;#StDW676&2MB()s)K(`c*ng%lPY>8@j+mWasi(eJ|5yFA8j&YOLX
z@pL2J8BJN8R{-;z#Vy~WOr6F<9PApZvNgI}*=qbTHSU^y!*lS&d+Xlj{q9xxG7+~c
z4~!oB4qWRd(tSFG74AJtj)m>)%cuTGGJ0v8V%D4i7&HoXO^poBvs(9s^FRb#tJSuc
z^yCVBPIG0gbT-|LAjM8EN8P%tARoSZB~nG}RhNmjW`Ko#^>BlQj_$D5Bq*<UF&m=P
zkx2hQs4qnv9u;*l17uT?MZGf6EyL=q)g>h*-#sV#`Ue<2Jb*5y(=W@;W|ea?G}pGI
z&InX&3irqB!WX+Czk!VBc%_k{oT5Hxqs8%ILMMg85wsf-{Y^?5m(6na$Hw{MbS^-o
z&SMcP6^V%i7SJ#L6=%f8eA2=uTHEXp0QbG%t*Uf9nUB+~c+_onc{B9z;Hg(?O77I}
z0Qx54y$=nY<Qo2{Uca&Y7ZzYq=nL|-|32Z0e@DRPu~?pJV4;@E*0L7XG#Ce&j)>1a
zMXCN+ZqxF(H@eU-jm2(0OUcIOv;)Q7IBw+!g@nWD7I(t6FgvT9LVRdWG*?HdiGhi!
zc$~Ax=Y1dE8VCd#*@(^U?cVR%Y8Sd6KYj!fD65j}X>Wmd8nudD<AW)LR2Iwauj5;9
z?K6%5H6Sm5>F;_Se3_7%IZ>-zgn^a3)hiGLf0hUTPF+HMzjJoLHEEx6B0^`lZFp+I
zVj~6<LQXj~RacNe-dIYZAio%bNvAm_fv5BGAbZYFX=$<K`=*rBg6UydJ&KCc(`vVr
zm`;3Yo&|7X$%s?t7Z#8Z;psaA$F=Gx>FK?`&BHWfqPICrqn5a<EJmA-*A-n|<%*y7
zyE~I$11I+D0#P!~aWN!z8`X*=K616eBF7;%KKbc*uk`w+7A7P<Gm+s7ZBM(pGRWBm
z1qCBJy6=p$lc=*!VfTU)jW5A#M?h7T{2}mSquu-FSr+M)fJI=wN<o;KHeN5MstWl|
zj5DMd6XW;e(^IqbR<P|q$IN^*iH&21N=<boyw>FK?mpLP1qZ#3>a7%5p4k1d%*oBA
zdAPjpmmZ-RPhtPg&;aBXbyp@wRO{m@tU&FP)X{3TwlF(}_<>wmCg+OD(~p3WkgtuN
z+chmr5eK1y)%wcWnuXEsR>Hiv>RXBb^w1_zZTG2YShn!LhsTb+zPSOgEeCGLnW@>+
z`Sz6}#$4d=%ECqyZJaDDZ1(rG=}uhTg5B}%S+<Q$i%kJxScgtC`2?nuwjNiY{?^6|
zN=`cMn#=R_*0^>`jPYcCHJQ^3g|^KuA^-vm(qQ)c=(mWe#jPcOA>7l`qoANrU0n@_
z#gMb!;&jpA^vcyvz)OwPIQ^*e%e!lAiTQzG@c=LnN=klzt>|M2amYY}_Cf_PRe5O|
zO&tG#Bjb)!>uvew`y>@5_33)!;8@S;?eHJILOHc_Vs7r09|=afy6X+;E9^~{GBOfr
zCmcbB<5gR|MQwGKH>xS$7w*#)6%~IM${ARr5)!_jR?hsc_p5lrk5vX9xFw1bIkt72
zwP|*CHN}nNTI_{+d1cxSz6U9lKqR?@ny6N(tJC4|Lv)FU3?4W?(9vUEU0qUUP+$ds
zi7v@!+CoC;@p|8b&UMbW0Y!%9=J-)g3>yx-lprafNfguhuu9FqV9TY|c2$g+INR6v
zJ^f=p%1#`5;*_21y}(atBTE!#l0~Iy*_Tv$t!9r?>=oDpW#F6W%G{^$-eH^jO--72
zZN?K>?30$3mNI5)X3R0>mZZu|H<(;I+L$OWA+uDxH0KbTkx^ltW&NH1ej>dU6%`fV
zkvmWu$@TS^6&yHg?}m$~fwSeDS=6UTMubd8{`kNGF-e%64*P}Npr|CmP49jNMn(k@
z5&!wi+hL^)0%)pZM&Nyy-(QA%ErAywI)gHuw%LFeT^A6<Fu?OKXn)eb8wk88NdagB
zXvbrGhjevyB_<{Y0|SGEgxoJQpDV$5p&_$eX($IFtO5I820czxelXkUXirE`6%+*9
z3jwlgUYE<w)Xvy@`+AF|>;5pTx{sF2b<JL{TsJr97#Me_OUxuB!r#7Krs^I2^{<_!
z7f%kjbDElUW?L5*nW?GLdw2lOKbgtT?{+Jk+54UkeEG{2x3>;Zz}|1l8#la?&(F_|
z)*Eut(z!pViSqOEfaz}(WMtE#WMpLE;NUtsIyjKhGBUKZw0R<PWg4|jO&l%rQ&qQ(
zKaK*0gAm8Z#!mkfBI!u;0;8gwN>&|C=4IvOD*;A@a?cY`!EyhcmWFq)Mad2LWP19y
zyA!pP0#`HEy88O3r>7r~Ni~OJ(%%aK2Y>k2ging$l$^}ukG?!yG;7VaIQ}#T-5#NF
zzXR-$o9pYMnCEw(PVdatG6LA)7s3b}R=1aXIx_0z-3pynY8o0~f>W)Y3BWs$44^M4
z+ZC%-2x6g^ggaYr=XO4EyE_);4qd@DVWQUi=jZ!bbZ3Jr`dLy^l5M`~aEbr}qdzV^
zM?{5eL_Q9~3_bjMe6CbYuieeW)U=?eNTU98C<id#l7&L{8|3KZWE5&(b+xUzIkidI
zKm@K*EQj|S&)o*VP*_|9YWg9ep?31{IoZ6LTuS%gmT}a;392e8&a^sPhhm}k_y+_~
zeYI7KwUR*N!7Ucnw0erjSz6o@ItKx(Gfv-3cw|xxi$S|d;HlDRFcMfYr_ORS<Vu$<
zjwhIwC=q|2o}X)QC025>vjt0~xP7RkUFvkyDzvlPMNVXhsaROz_Op)wCkbG_`esN#
zNRX&_g4TG1E#HqyjiS;KDn+Htn`0wvk`#nQI5Iq}u%Bi0p3d!D6fD&3OWvesivRg@
za(cR~K^Qf?@=kWb;h|Y5j)RtY-X<9d$;|^bU?gAtEPu@84eNQo_9y59CD(!VG^!V>
zMp%2*IZ6N-`dk65>o`*vEAsNo-xTuH9(Qayc?gAc+j3LuSsbGF`v(VqQoh~iU^<yn
zb1Nw3kq#CRhW<h#;K`CLaKp$KrjAnJb`;W4;4`B5YndNSW?N!KdX1H1vu~B2pv|aU
zZJ@&sqvh>qzTzP`DkS@x7StefD-LXDTnVGern2S3P}hB9`7xCRww6%dSH(P~kEykv
zt%=SJwNNJ0>U5S=GbJ`0o?dG*ns7>`s!WrEQelqs!$h~!OIA4I_2q%zeqSa4AsdWI
zimq;1`GZl3XsQg2zKKb{t}!zj;7kjq>wp!iv~M)xi&Jm!j2JivoTQg$J>W9cDCfT=
z`%{Zqzy;tsIyzFHeWT8CI!}wkE(##0e3;@$H2!SGm-TZgO$5!NB+Fk!CE;YD^3NA2
zc<ipT17IP=shQ<yHCkDWt~6Rxolm{Po`~(Jo<8lwwV1`1{K%V1_$H>J5--*_;w+>Q
z8aUwV>r1)CxDgv4FRBG3T+JhDkWf%Fhq#a&%QB&!brE&>r~9=eZtvFzV1U`oQtdc!
zj|DK77N;{QQS^dSQi2isQ!F?#3JP|M#c0dIZCSa`)Hx0p>#qQDh^1pdmeW5l=a9Mu
zxShwB6p=APDU}r*q7xG<-yG~<+37Uv^e5%b*IHO*nKuG*aLKZ-@91*M%K?BFSMw(2
zwkwc;&AplecUrYdZ90oMf>V(<#4=l1JlDN$*unO4vwQE)Un>dn{d-ox1WS3zq1oBE
zfjr9ZZSD_|ACZ;VY{bB2JfCl~rC=hy2l)GcBO$|v#Y6u|NjOyp^ayH!0dQG8Fb*LL
z4Ih8p%Qw6xF*}<WA!j;C^9ik&CO7q4C@^@AQpL<HTiM*uJj6;)y0E$mfVotMgzFsc
z{eG~Dq)LMODnsR#dx0JqUyj($-4r)-e-`tIF-{K+1w-u@DT)$@mq+~dI1DH59TXv9
zfs<zF#n*#1l+TwuwW*^61N(>5xu+W9d)5<}n$($ReQ4t{aMXlSZ^CuUtej6NsHpKH
zHj#jD=&HQn?zBx+nS&XcqadvqISQQ-MnFU5zF~-smOxm5$h?96@S%vot0?w%t%>62
zU&jPW`RA|bXyElG)&p;*)!+X<o)P~qQ!0Lk?S`V@;JhRbab;zR%T7)(JYesv8sDCt
zwAIzRvauBJ`fny1gjVP{L!q#6gB0Wi`QOnoc1{55?1xP?;w}aO(X@hN^Cj2jOeLk{
zi|h1_-+4J%j{pd=E1!9}Hx2A|IT{-itEi|f^9%|p=Jh%DmP()~Atw7<n||+vgZsNj
z>G1d{8ai@Tkw~t!4BgywpQQo{3XX}ito+~P<b#(h%O#mAj;?>QW{IOjEIOJu7TW0F
z4YSaI!?_9xnb}4K-o{00D<ayNs}Bimxzv-Cp3M5tJF8gEzeY|<89Z47{2&6nLeqQP
z9TlJS$p3oW|4nB3?SNQPQ_KyBh*K7umLi_kirJJ|*%;?%XUj}82%dQzmXE%^<7@ip
zw!6c8`t-HFu&hi5SHfFLN(z2fY;R2t34E|w4hU^PCC8wkA3zu~Fxb!jb6rM6B=4DX
zZ+Fk)Y+xphYM2V(ZE-qo8}|%C?DNk6G%^GPgiac-`WBTPa@m3K`jChaTaD8mdnhk2
zFJ`z}Ao+^?%o+FuR;Q*_Ki`3gj`ze-W1lzy6$nKJZ@*tBKNgg9Y%M{PWnE;=>ap0>
z0UrDNx9bE6IXRobwMe&Jko_@e_X>@0hrgt_^fUJ7hMybfWs}Lhx<Sb;3r&(c*{TU1
zCMU>*SXelyDM?8~Aew@Sr2XoPt|$=G7p%#(in5&59MPK=Eue!Ml*Ls^ih##+IAWs5
zY+oCOMX$=7nv$|CnW>b?@44JzvJ&)gK_Q>MTIOoM-zlsiyD{~vIDe(Fhl*GE#@?yF
zzh5^)cMM5dLgLVJ)qV879564L{N4pdHjU>x0N=jDRag^jp}s<o&zs7iM0*slSPvKL
zN^;Ma#DT9rR~jNB<$m0q==QbmNhhwgp^SjEn3$Qk9ZshN8oCD`U8E`sC!ZWn)+3(O
zlC+YPY`%LzWwgGQyw6dg70#{+fqmG7o>L(U2}CvJoG1usuw1DCI<Ly*Qh}nQ()D8d
zpY#I|Fip1;!)f#-nq9Wj<t?YGh;nO3{JuoNNNgpdaVOYrW=65G$r1(;wtx{X^M=p1
z+Lk3XBV)b1s!C;4&6DnhjuTc3E|ESbV8&r_yvp(Cd_iG;DZA=Mt+%zLWJr6&TC9n5
z>ycwvlfCo6>}Qs!UfLkReZPJV!<Z;SYxPE;1G)~CdCaXTJ4TR%m9-^-9w6!5KG&bf
zXoLg|h(D*??;Y$!MMmnj8_uOJSSQs8QVzPxm21|!J>0K_VKH<x+do1=P(t3bF-}ZO
z0QG-td|FPtiQ?MA08xMNibrdwl{T{@!(3gl$xPl%UL(v&f}&q>z#}Gx(QC$EXT>>C
zyHk+FGcMr}$ScPk((-dk0DrM(KXS0?6_t}Sb5UP|XUaNjUX+!!xfhm*-SO_I;`#uD
z{;u<u>f-rSz}yK*s$ntnh>}W6WnHru#IuE#irmr!T5Xx>l2dwa5^{Q{q28Ov=^dGf
zX)y&E_uI>9jm%mHM#`@)d&?>X1Fw`$%Jum?<+_c5u=;{Ng7YNhxf^ZSLqg6p_0m#O
zGoH(%O^I2*Hb)Z~bQUVSUythp3j&XRy)iK{IqjS>Gcz3;IQ6|qh}HA=3r|}DoB)6x
zMN7@&dfErn$d)#|D$E-RIlV*#C1VJJq_OBsv^tEkKYaLBcw7>Tj`5k*aVE|k1!XYE
z+3dftfRlv^?y7fz&ABWXr=5qEi(+#xSb7JSecjvp+Z-bdS@>!^Caa#Nkb5-vmJ<f8
zmQ~A>0yfK)scM^mQP|%do|KB%xOW9(g5p>y$zr$nZl~_3pG{`|xCm^#eaZQ9YMTO;
zJq87z5dVAaykjSPGP%3J@9?sho|1{lyzY)NmjDpV?flF)lVX|I-7z~m3*;_Qgj6MD
z9<K+59*OkM*}^sb0yi1YV(b+`rw=>=)sk@}$DSaY<Aqty+H}f_rKnn?jsPi=;|N>^
zt!=yWv1S0`iFiqxs@dlpw<IE|^}g^*F*vx#SN@_|?cjR%I@Kie?(-V2qTECmC);?o
z++jVbOTsH$m>dZXb)U&oUZ=`vI2#=Do5IbNK(p4)ap8Oos5mS=xt{C(f6TpiI2HW=
zKi+mnNJtTGNmf?&E_?4onMua6Wn~>wBAe{J$C14W6(M`?kv$LDo8QxYzu))wGk@Rf
z`u+9ukL&834$gUv=ku|iy9`1?wI5X<^0Mf@=xKV@G=LfO%tyeK29m>Hr|$sBu^cb)
zx}_pH9>@_J-~Q|(>MdcD0;{lxsXa7&fCnKgkO=MDEa`<J&hNJ|{R_^&?Xe@xt5-5`
zv9UL~s2ihVwyVieqg%hJTD<HWAJ9Bh9!pMUbH4E4;R7NfwMYW!njJCrlVwgh$q5$)
z<J!ER4Gj%HMy&4^)##U-7s{qe1XM7U>cBzPS6YRBpzIkEe3QGFRoLeEef$YX?RZ+)
zG%jCyZTsdp?PG8-7=#-li$tUtEiel4_Q?B!f-~PMxB4#kn;%9R{wX3El2GHUg6n~O
zeS31UGm-Sf?Zm`JEfksB8zFLod;-%n8o3)BVaYk>JJCQAk?gpOGtb-mL<K1<Ep6^y
zRD?UvVr@B~ofAA!d8X?92i}coYq6_Wu4IRO*O5kh-MA;vwa|xLDS9OSQ%*r4@V*zg
zF^H)K@}Ends1~Fuix7lZ9lxi@9m0;BQ;SWGiT3q<Y%e97wp37{mD=c^a{oQ%nHEEw
zb^UY1Yg=1K%W<|&r?rh#ciNzD^G1X3@~>XI(zC6nc(ysT&en=7I||gHmIz4O7pGw~
z&9s&{3eNxhS-F4Bkfql7z?YgqQ#&K3Kg%@vsm5jcyJI(MmZt2jr@mZOOG;S^HN8e{
z_7K*Gh)NOKOWmGv<bCLLX#A*y(#{%?K5Du8EkcN{97mRxUK<-5x#x=|q(+7>UP<8#
zRISiY?jPtL+&SBb%{eFY8s3XJvlbAr3kfBJ(p)`3JMbrCz0%dyJy5tM^svwLe3uR`
zGdutX7feo{?afqt9v$7T#j#g2E8CQXR(O|OZ)|S<=qfp%0Lks!UEd6Xhkw;22-R2z
zN>uRJ6s8aHF0~)dGzASKNnh#HnxIf`dqSh`cz;TaR7_<z=O6bC?6u>VW~LKju04JY
zM|AmJv+6hB?qhS0?^N{;wVw^trM*wlI*9gq??q?j_J(q6Nfmo^nxplj`jDLmJ??dz
zppzve65AJBuC%DQxWX(vB0}P=fBZzLMdl#eI?e*~jnbl$JLVmI7k)H^7)UHREH~>C
z-M-z?+&rr*+k5|e`a-L$v~;)IH?H|t3)W2?=;4|YaW$rDmj%3l21Femf@%A3CwQsY
zXpwBO_x8@?CHbH$4t=3HPv2deyx~dQwHTEWI(_80j@C5Up`&7(qhRg3?v=Uv*?jE=
zNHoU$wGP;nh@F2aFNIW-8N7Un{1u+<T&|HC<ArKkyL7>WQdy(kg2O=~`ukDv9zfyw
z`-eJTtT#4)v{oX{9>b(L3Zr==G%kWZKaS64*<xFZ^mFoVK^Ln$Q*KwVlJE1U8t)ca
zQ&lYOvOTl1=!Aqa3X+12GU@<(j4|a%*H1;yulJ;Ho%pz@eNPt6-w`&jc*M6@W-{!V
zn20TLi9=KD@+-B=F4kwYXta!n-UWNq$~+UFNjL7g<X9#zRy1x3Z>g3Ueko~-D-Le3
za<1RCK02X5Qg*(@<;fX;wLXwW@9{0Wt+hQzbFpz2TkdGC{USi5WsUWJc4E&ck$Pyx
z-N8)9>XT7#<<(n28a`~|YCYnQyw@>Vxe!|&S#}tUHIKd>6OuqdNycqCz5fnN0C17+
zY}*BZ>8!29sgtMnEJyuI^-cX9_LuF=OuhzENFkU?)Kx-N>E;z;_&%=TIL9f;4fgb;
zRD0BL0n(zS75gyjl@ty4H?;dU?W)lo!D}fLlHHcuTRVP1eyLa#symkX5(u31x7}I<
zQ=^WU7f@PHs%TJUud;VuQ}a#Qw$2{uEG?wFLoWDwdz&|rx+!QsPPlipf;*r~nLj|V
z`@(QLzy1Pqe5%26mwv={MErE~VL%>{_To)O8m76T?_SsB;S5Ym&uEWhGdmSo_(e9D
z2b!9$R@G->?<Zok@QS|>P%tntk=s#6fm-eMwCzZy3%;Of<*h|YQ7(ug$cyEIZfq*9
zMS)76+j6o_l)R^ljFUO4Jjs5PYl>hh@|YRxie9>un3s1{R1^(P<mYEKn``wx<ZJxv
z6P2=ttTRFn5ts<vSni%*ftCvj<?G|gm>S~S4nwW6{PhIu^|++X_YMbWe;sbG^j69)
zh)RB;8&z(ucHOuY@KD)hF`z3qw(K4_Y>Uq3%((MuX&zQpTBbQ1D$;yP3hrqqi40C6
zF9ik|?ZAR7a)5=^h3;vKEw^B<({7>b;~8=AuV0PkC^XA=;l!c2czUr<3u<LhxVgPK
zt3AFzC{Bm|vj^`pN|ru(my+j2-j+a>sA3%N-IIA-rkq2sO))d(`wT_Mm4`7IXJO^q
z>W@;902Rs_Ok-j-^0AmfGc*9xox8|XosEVRBEwrRiFz_0=nWt<RY4g#zBF2HDZK9T
zmg0`%+T`;RJ2qmRoM8-J@x7s%!NO0>^4d5xc@xiS4!u;Ud>u5Lok^izJG(99yrP{$
zW`fQZ_VGQOH{Zq^%E~0@|8y9=n@UZi${vOScBZAZT~<MX*`31Q$Hyn`%e|WQ%o#EH
z!{m$kp2wH?CI(*_Emv+A55ruN?SZ=Y^x4)F;b~z+xcO<2si-IVwn#M$eK=2*kX7|0
zIr%$Q(R@c@Y<Rp*zww0}5!uX;)N>5({v4S&O?tjwts2jY7X$M!?{K&xP7Y>m?&E?8
z@&^$S5lkPWdGKJ7N_mPxUy&q7dcoC@A(0f(A2Dz{mqOBC)Fo;2HN94Eu!+1vdP+cg
z@)H@6)g%fHM0E`V?3(#%X#W^``@25|24wfk!>Rt%;%@AnR*vB0`wc}j%p4p)&)c-l
zEpn>tjyfAM)2!@_4<%uJh4qr*IYLX=@Zc%uAJTQcmklTX;tK10_|Bf6Q;8mjfBa`q
z^=2si>xDN@q%Og?Ul;%LgUbRBq+6v}9G;61l5tnFo!#&MfCerqCMKqhMItj^0hovz
z#}5E<H=h7^wn12UczRkoLpiW}8|GNRGd+#>e$acGv0<|T90MT%f&Qs@KrF{y_5q{S
zio!OQ4AG{*)%EWKs;b6vgtu=Sq3-fwMmbHoJPvfBx^7ZT9I7;iwa}!Vucdm*5J}8T
zF@eRRUHgL5^$sis_XIwCX%N>}y&fKH8(W?B@@uPG+|B)6EM#o@yEyHPi=|VP=11Lx
zX@69uS0${2t=2od<_+Wgj?wGq;A_&?KN)dki!T~s_)Av$D%nRTk`27`#;cy+;GpEP
z8yY*XrAb#(ymVoIrVk;N@{}e>6l*CTptu#T&*c<I3o~O`aUb+NC9BDcucbLawWX0!
z2s*8zX5VcPHWh0Gkg^{x?|h9duV+5e%OK#$SX~$Zv1xg|TT=wN*1C|-&=(8#@`xuh
z58)8e{_+|LcD8`NzKRpal?lu?FXi&A^RwnKr0V|uzG<~mhWRV+c}fF*qpbceSyZIe
zWL<A%>tvG}Lta}ncaza)TvbBX8|`x3aK?|zXvL1MvbMfG%=B6ts{u=CyryQE=@KOo
zYrFno3nwGXzHZtrqS69()suHdYgwZ<aPpB&C13oeG5nV5vgqZJo`UM~#Sy4eyK7S<
zs(5u?NeT$!Q>Gv_FXDNNYCY{$u#L}h>+bo%QDeVQh91xqRed)g2BLV&IKf<o@z}A&
zt{U$N(5z6N5liPh-NVsxeqQPjZuOOzfrdf|6{Y^sp*rb>z3@9|!OM^<8Ry6L)x%!j
z;h^$Ni4oxvtcXWi&YNx71^neErIlNI>=;Q#Ia%}WqN}P*3?w?0%aZJ>iFSj%EnOVr
zGj@o@0Hq)|ERz(#(rM;YsY^es%KINh2~@b(6%_ndZOH`Nkeh$-r3=SSu#LpUCFJ8d
z=5)mxpl8He6~6g~)5LRpzh=z^9g~QbFE(yl)9*4U>s{q!)X>t>oW!mc$A~`i_K#(?
zOgXvoZtbu&g4uDjDjT%vz)3S|t4D2P2(5oi4rOuId3ZpZ#ZgQr*>|)*)t8@bYs5c}
zjZ;i%+~km#oh`lba&$iTgEQb`k}&e1ps+X>Ba-bl9%J8xN15u=RV#W#Pe|JtH~)JV
zqvb$gF}frdC1CSy+6zkm$uZurEMHj}Ie-89ddos(58}Ib#dD1N>VNO7aMw#}s<uL;
z1Zc=P$Mv1RH@z3{z|j+MLGAAo?2=d`JD^y}wbzM^3VwkUvTH|kK97DLwp;e!8W#)f
zcDd>mXadE>y~3h}8r=neMm8#M=jG+yiks&O4jI<lEw<q=U%yFAtOK18B1e7;E*#?9
z#1Cm{-H)T5v@+2(XF9adt+|XV#`B1q3AuL&kSeMnm~=!Ve=xT&wCobD?g7>8lIa5K
z@de(_9Ha6Zl=||qyhgKkiZ8xfS|cR7mC^_bdu8$9&;dB+N}}E5kC3Lw!Y!<QtSEer
zqdSx=R8-&8{HpA2$E7wFyS|A6&ei)+F`X&>sQg$!r`kUK>C{(`C%gC4G2B)u!%N)x
zdc7Z50rv9F&Y`SGzd}t#Woe|3n%=+8e*|QqO_)L6wJWppv+DMQeA6Hkf}vHp#{zw#
zptw0Jx*@js=XkM3XQpC8&k^cyeSJYO;ItN1QZXYL1Ou-A!2Tl-<i~jLVOXB!z?VuN
zsik3dx1&8-IjOXydLwd%8&TVA8@t<Rj7aM|%bVjxHu6*1qmO<I6SEujl0?Z+89}gX
zlvVQK6|WCtV`ESP7wp`K_-y{}04FY%bCBUt+P!BDT(^mdy~l5i)|he2pY3e3jCaIe
z!=sS;fj@GYWANK$iZF#mbXPFhwtGS4@Xjx@)sO_E-G7>vzR@0WSy-{jp4b5{D*TY4
zU+{MWGy)z5%(GEAD(g@uEn)NFQ*bU%<vo+Ofss3-^rmsV7<QXYG2uzZu#$>FJW>I=
zWA*)y2DB!8n>Mpoj;@P{qzC1MJ~mU&OCHvJV*YO|ph1oV<e<CcV+&OsrDl7Uhu040
z9DO>odm)_xkPIpsfxtW74sWbqu-fnJQP45hTAyCZWsp~W(}U?_I|ThHL)D<~+1ZdG
zbfOZ0cM-K-*Jex>wCfz)p!kpxakQLF=5Uw~Q*?0Pa!iQG)vUA_=CJ7Dm~hm4K2894
z9)~?~=wgA4B(SAIhK5F5R^4NJp;k81Y+JdiHXvzMp%VZ2(PsLkY#~WD>GuAHfkTXo
zKx=F33<(|6N8qkdr^l7EiG(3Ny*)%k#4`L-)*xH0jBjXY=%G3|y4@0H_$cF+43)8B
zVlt<`X;MX2)UBRLvyQX9ixsiDj<JPhek6}l-VEyGAIUX6A3Nyn?WycVW+UhP5OeQH
zRn=2l&YPJuBq$U+BQwWEuCqWHTvN!`|EYq?e6TEDx9JOg9`4_55ElbIJ*VYoUCR~U
zgVXESeL+gk12T_A0Klmr(GzgjJskmd*!`gjQi0UwQ$#4kBrgH+9IIh=hh^I{(kFdg
zUDmoK9^cy=cgTkBwoDGLUU-QR6BB2&I|a($p%kBdJMC}`7}-a;kGydUr#qg67mOb{
zs-`nAJPsX&S~V+uXHSwE_y7^leD=ThPcYFvqOoKHtaZ_eAL8N~t|zrepD_hp1#5!a
zT%SjuNIDV_5TKuAWo0QzzguYAqh4dtD}5O}{HL&<FyAI_DXBC2wh@w+yFRPx<_?eV
zYkXm0cdhs`dCr&~o({$5bbfpS?gy8|3u|i*`&bzeUFot5M+AFWy7#H64Rp8$8v8T#
z5&>COE^P$qj`4Z|P{%pT4|rHjddu3OW=&3`VPyPQ6H{Y4;dxMkQNJD0;TOkkX%oA^
z6WK1U#*Xt(6J$v`T4*7O@Jn(#r&y*=uy}bZDXtxIypr}CS}9x~3NcVSnzH60d?^10
zY-s@G4IdbH+Suu=F#P#dk&|iU{qeCY`mB)VD>htKGWC(>UY$b?Lj$KSLeWy<8Fy8U
ze}D1y{MC22*Cg@%_!nvY7z>zxI|NgEiheLBbBh2)tEPsyza~-O@_MI=lW6G`X)_0q
zMie6F@VGu)RNWiTCc9pMhdj?R?`U`RX#O~7AaB`lOiM;)S>g>H?gQR-yEMn+K85-x
z3}`g>`uiG}BlQ{^15(D}l5YW~*H^f!xXk;ypfbR1sQ7Fhg6#V0>hl8x&ykO`i(c-?
z_{yl+B&#%lWP@8oWXVG^ReZsXrR&d-(9mg6QaP@_&c}!#{W^5`6tR>wt9~f?#jV~$
zS6j;}T|KzkCvwqKD>>U2a3?_Mpz?_mHm1Pcprd181_49=CPFCFZFhB2)=b2n6dT+5
zP|!qSfp=@^p~gvmU}0&pAJO*+W=)wHH>e3mA-4E)+@k<W<<+GA1i{pjO)<&Czk3=1
zdbYxln3ywSVeY|zzBRX1Yv|;VXI*yhuHl+IQ1;M!ao$}pkZ%Z$6-Ra_7ujvf!{wBA
z)Q3F1$6x~UR(|aD%()Qk4diK7Pi|c>d^B==w72Hs;$*wve(SFN{=U8p%JI7u_*Ii)
z60(Qb-5R&22I@`vROGZ>XAXNft%lJw>C7mh)87SJ0K==-dw1_jjMYRQ?yT4(5)$cW
zFTlhGl@R}HcQx{#A>_}9bQLN1+1%!DY`rxaYwYGq1&EMtwvYtia3fLB{qdJufxuZ;
zPR=!TrP2R&Iw+R*MSmktY)Q>=k^l5Fx5xhKXJmvuXDPoP-{HI6^0T$O@Kd1IWL&h!
z4Psv4E*Q%h8R%8sFt|T%>C~hf6{g7zr92wAsCggvEPTBIiZEPimF65L+OP$p@UU9c
zfl7VM02H&uMa7QmpO?zHySrjbN;m>i!}Sz3vphX7VRknI_NXcCmb#)HWaX>U8Hld_
zDI=0{uN(57+3h_jA^>>=uAVbaPg$9bmYbVeF#h5N4`&4pNm{<LjQq1l7fHji`*B~T
zrxS*T*7A~(lMHX6QqB&1x`L7puhfL+PZdVs^#~}|rSG=+w~;<f7-0^>Bp&Fi1v0oR
ztH`vxj!HKbMGz27ontWvf|J^x+S=Nz21=relyd{C$TNB6GVk~1MCM148gyo(3%anY
zb;>`j-E5_T0~;o1ays1sn5c+W0Wox4m|#4XbIkkENXqd#sle3>9(n-`;rKmfHh;WW
zwyeNKVPC(#k@mjfm5>mmK9_e}ndx52PR@uS?NL#ID$KA>{nvu&SlY&v=mZeox%x|Z
z&=N(e0Pu6(Bh>}2-?7ZuN~8h8>_S%1|7+v)|MLf*1|JNTn)jpiMf*cTL$&nFH#axY
ziIv`{AdqEeHPdAnK`W<Kj+BSYU;%j<nV08(e{HL~l61;VgT7W1U?L#KBO9ggHwAZq
zGtbVMk&$Qg;uViUgs5I`?YV&I>)s*0NKbUH5VN1o^vjuA-g6~+WG0C!+1~v%CcUcF
z`2eMJ<;*XvzA5Y2u#&LeF<x-?y*XQRGdKS%O-Y#fJh1cBxzW~0NJvPlx{z8jC@eTk
zN<n6%)J?-$iPeR;&f_b%6kTHP7#kZ?3Olc&&k&}w);tjPU^bXXPDyFYzCGV!$Oy?C
z=fYKw#56oc>Ed`JKVM&-PJ6sclv~A40jRwY;la(%T&kz2Kk#?PTcsISxUKB&Smx<e
zIq2u7M5RwuY(Omvi6C0jMST@P*Eu7?!n6e(^@Eqbp1K|7WM?le?Y)54zko^r&>X}n
zDj4G@iKl9(P8-Kgj20H8{5eLaR1u<I@SVhk0@Id)&8Sed8UQ?rjRhq6Eg_c}wIdc5
z7JyC@5f>kJPP4au5uB9t;!}paiKeo2NIk(ypENhe?6q^g`uC?k1Wk5UmXAc2iIRT}
z9X<W?lVi}nfyQLakAvy{{qG9!Uf6i|z!%Rw<(NC%Heb|>jdC<TmlYLY|He<E;{EF_
zU&zi0R#Q^?<?_?9H82;N=s0$(K%{%`@<QfxaQibdUMJp|fv&!SJEl*WRuL@>=Mu_n
zj{Yy=Tfp>T=`aauWXnc&40?LbOi%aq^&jG|cAmcj$7-&cnwq6mZ!=;J-(``ynT2?G
zcqE5R{aO4JFn~**p4r*iM|-QOjlj>!wn}lEbp0tP7>}(W`6Wn+zdztMla9Gig8<h<
z_0nYYk%A-ibs%YEIn+tX(XDeHuW@liT|70A41_d<5Q#OgCRM^srYWOtG*J4>3;_C}
z68+wd)N{DN;Ki#ysi>X`F3ipfxNX`U&LYoO<ngeby<LidfvNo`z8lhW7{LPW*+X1x
zw*F3uca}x3U(^5mNo2#IP4n<!L}a8!ZTx+;%fr`zxHUTe+t51zwpiBLjJAz^2B~yz
zNhvbTd~P#*GENx2*r?tvAclvBi8ZqlKqLy!w@<UIlY7id;}w)BJbP#_Yb#4?XK?;P
z%O9(9AB<nGlXpM=ou0UDQ64|~i*?V(|Ig^l|K$)lB|ARL>SCs&8>)~t0AdLn19~U;
zsKSqwRa8PlBhX`jpXoe%76s>($2y`MxP1YOk*aJx_ukOZTQR$v+plfMo6F2Ndq-Se
z=*h_V1_yUl6z)R3YJLPCm~H$*dS<#Xyn7p-;;XnHTd^aV$E$q(K4M0u)@+wKMnU<y
zHf0~I5|NTJ?Vrtl>U>CYzC=sCWqRBpHN>@KC##HUw2P9PDg>0B7NcM6--qu2z&-QO
z-<S-#=g5jj<eaW)KmOc;{F#-VE`!l?rn*#%+wbjs{Rg~Qe)qhzzDZDVml=Ry-NFJ{
z<NRZprZwU(sjtqmp;Sy=*Dy=h+2T(FxW0JW?Xl||M_01AV{gT9ScqV#$}P1kmyOMY
zBjP7b_X|9J<v{(gV9gU~8-FQJC;ebJ#~fpRS=5u_jM!<jjlQ$q8&a1f0ysuE2PQg%
z>Hb_@%Pl79B#phJn(E>46~I@AiuIu)gOzbC0)S90K@U}0-ZPNFOCP9&ukUEt9?hNk
zF!oP+`s`i>@59-$t}6TW?voA-KZpETz|oyzj2a^dY)<Z+6;@R2>x#X%p(HGee@HP_
zr}ymHKK-1ktLv9q6uu?@=uZHs&eKL{S(?t52d2L@xWwk<nzC|8yJf5flOCr-T>MVg
z6vyL!<#K8r#4{x+Oyh?d3&~Nr7=e%S3LHeGR-Lt>p)UytLO>f(gE}w;<ihkEvEuGP
zoh;is$5+Ey`5AWL>(}Wap0|2_6V%5qba3~ukJZ{AIdcy(>r{grGS~XKeowjLS7LXA
z)QRIumohFN_O<~j&c9;YSW>qHCt}3B=uymWZ(k1@b>ioXt)tEyD`b03y!_kzyI~0$
z!}K<Pe{iP8ptcSJT7-@Nq-SKTaoYM2e|m;#v6>J&>pj(cE`H#S$(J2vXJ?1`9ZUEB
zT0R;qoze{Sh?pBikBfC{-`pi5lVwXm_GSQo`^O*H+g<BZiyT@~&wPRs^L6;+3u5){
zKCx%Ifs9UJKkhtd!=Jtv2OAqgmHU-g6!U*2y@&x(xvPY8BM8Hh&OUQD*F|+hf~b*v
zvzk7M>%?1Bw?P)06|n_sRCi%_)4jc&)URUQz8QYLeo!0!o<6{dsU^OhF`8|#EnN5^
z6F__=8z1@{5zIv0QOg`-*w>a$rGo~GHBJPF2B$E5WUiUc?g}a>l#r@sEdBHX3of?V
zKz{lZtv3>{EY&=F?Yo|(K+d0a9=?ol>vHt{DEk8k2L^Ll8z+@)A8Z+y2~tyk8dd03
z^L&{J^68<EU%m*S-kxD<HZgNp-EUqJ-cnWfy7i011OPF40AQr0WEdD2dO*r<BqDN&
zU-9M3&;j9e`dp*AQNq#^jx)=_9vL~QV?CGRp4}e&26{%@Q8*Bi)KNKv<-GS4K#X?j
z_?X_SYv?(M5h^wA?y=o9;BPdVjjE~Md-KMrnXy@Qrr+Z$6trYqrp;jiDi%W}g<zHD
zAisC#75l&k!B|OA)%urNS4&xiZ)q2Y{2L1hf<uO1|Aom{f|-WKh8{Zwg%0qCRokyi
z^ll6DutvqxPIu_sy?YlR<>TYy_-ebUyzBCd4$BYd=%hw_3iL(GUNn{!$J=2BcHm4m
zUxmftF@lb)w}69*o`HVNdb0A>x9Ndgt=Q;Tx06kK7|vE3>5A{<tb_ME-KG#=Bt4v3
zP=SwRf6CbAVoTt0dZ}%$t*@W_`Sa%w8S_iFLLjEtT_2`pVOgLgdcx*qs;uFf-{9(#
zeClXET4=H~4Rlaee9uR?h(La%MyXlX9e#^=j+Rv0_W9KP-lU7T^);>=FTbZ<KXyHy
z(k~Yi7tj5GpE|AHFz$i~sOT0Lb+E|1B4OY~<R53mXY}e=r(Lt$2$OK)B021zvB+-u
zS#UHeHn!UIM@uSgP@&$%n<&OO3wIEF#E+JD>Itztd|2CUPhI|rdO{NK-X@RJe43{x
zoV2~?#mqjltL7wMYsDpb&K)de<u(?%FlvSebPc$;lVb18z(NDpR^AvhBW+}8oc7fF
z<U|oo2~BP7V}s)+Yz$ElU4$~v4C?MJ*_0c&>4>Pr4-2nf+p_ocGM41z<n(^M=dw%;
zKV)%vQLL%4Z~0-J{$KP!)-QgMTeWh3@d*DGW&d9;DR`Ctja)$G1gDKCm6qFp^5-XM
zM}DtDrZ);dV+~n8z{SND@##~}&o<D<amEqCYb<wI5r>j;Ba4O%rB}Fe8TDxH-+yd4
z5{4ZBCF5A>V0^X<W~4lp-Q5y=m1d8NN9O~Y6e$0)@Cff{d8L8I3S?zJw-`Xs+&ZOB
zOj;v=A5Ij>YQGLr8~n9N7W#wTBEXGZkE6bJ2I(uoVmpiaQxzYCZ2NJ05WB_rhyjL?
zR}<eZGd)0q<fLej%WT5D?OE&xTm&_xBwTOdBReqVFW^RcdfGiB-mV*cuN#h<C*3yK
zZ0Fkxizs%%?XhDvAPf$dk!v?dd0LU`v#HJ06W;M8Ot6=Kti`WU90>x{bZ>!ghZED<
z*+fZB4p$zUJAbn47|QME#VCt<3Ebl1BE@^cQ<$Y6yW`5`Ghs`r#KgqZYZBHxFDJ*C
z864%~1iFzCskO;M=f~+;w)68sItB*KsiN;`R*4>rr;QRd2UoAiVQnwy@&l23LHNvT
ziv+6Hb8*Z^26k#jdbaGWiYQ->?Z~jOhWO{to>f$&H8eEy2&_h&ym2YpXn{OBcB4Jk
zMYd7oZcKPiE>o_R*LccqdaDkA8jr5U?DcV1*$BSp%N!EJcwP019p@q=+btuvU`K8~
zkfx_MO*1JqKBI`S$eRJNP8=kQp=_&7+B@TUA#Uz3UdugKS3Ok9#%80JR`KNI7&$UI
z7<B2pvKz|DlCfL*P80L2*3M}W6Pr6)^3m5Hycl;Z*yr1jiP$I53aW(DadYo|uf&m5
zq?joqA(~Zv7R_a-X{o?GDx&Y_83=GBh^ChA)35{R14<;NaH%IsNwD-JGlxaKi?|-U
zVn&wUkKZW1XJmik+}vF+iJWJ$jCI*v{@K)|(S92|XFFVLg5O&-wMF8XeSLj<H2;#o
zQ)cH=eS8J!bcA3|IKFho_z~)-VnUGSt9_rc78~{pd%@tSqOI0u6w;%xf2QYiuz7&P
zO;yMZhOpz`Li4?uL}fpa5rkJcW0DGCo^U>ooNaSQ$AqJ`@EomaSZL^R*yfVES$IOD
znqT9*NfPVo8k5imMHR3-Wsx8X{?c{_9e<$xBdCyE6e$`;Z7QsPPsjDv&ihl<=TaaP
zQK;Qc-2uE!W$t4(4YnMtdJP2P`fr@yHM1@&^SRe>NzaGg^Ta`<ME3<f$oheT2`Z7!
z4ocKY*}+X)22SPc=zOH!xI#R7eRADbuUtXL<?c2IrAb6oFpudz-CsTk{!4&rLksY^
z#7?Br*7=l>h#$|{37}X380Z9gaF^Y6Wcs+Tr<cQuI+uZk<z$th@x<6qRoWahny>ve
z7~za%ygRY?5B9aWEelG?%tj`+`&%Q`uDl*Ed0JiS03y&!`PbG)W+uKE;>ai`QzZj3
z_Bw7QEhB^L<#u!7u0bkAuZhlmdl720RC9?=J=V##@2)K+^kKdtdEQDpQc}-``rE@F
zKc_C0fEd0Kax)i}Y29aw@`i?U;b!W?0p%LX2zjY}o}o5>Y=!=~*J1|l%K`oPl)@=l
zX;L9;jXO8b|4!631Q5WJr2W|*iZDh?ox4j-)%_;%kK++w>>fOL0D3!ylHNDbQ5AO_
z1=fzFWTZdZ@W9dmjpvvIgZB07*a+SG{n27#Vsr|BEuYEmf9T!~Ug>^l?Xu%EqKZ`7
z@gF`24M|XNCniO*GDl9?B-kt5J^u}s$y||C@csXbJM^+hPx*E1fhi5k0ptR_#P9KC
zGpSp1K9DHZI@C~Mm=htV6B-s;HS1U@k{T6the@a0mUiBooM*Nh^db&bfOe1EKkV##
z3n0AmLQQ~+pN|i#u+~mIXgNV$blxy6haYM-28Tp+bN5-LWke)KF0i)0&1O%P2)a>4
z`Yc&lUA-(HSqEN0P^}rDF6?}r@~K7b#METvPl{$deFxDfcKw*|$L6rdEeCZo%Rg@H
z7tTOI`14o|VbA<`?-3NFtfm&nX5R=>t#gcG`QxFcw2YjbcByMWfH-nGDOEl@%>=sM
zUl>Z7e*CZ)F9A=^`vW$@hl*o$dl&XnMz58Jx2m(+&$J;afusVtsvLP1dh35`Id+=X
z9Yo|*12Q^r;!Cy4nVISFaB7z3mm^|gWH2$Bnt`_D0P6y#3l$SLvgg&%%^YaVmtDwS
z@;+FdZ&##G9P$GkvDZj06<b|X^YF(ONky@8If!9RN6VPxf#cCCH?nZntQu6dG9;ce
zb{Dj@i^3FrPxpR{Qr7PdyZ*`G<>~45mk{R)13>g}u=7yl5Qsnyx5eW%8oEFCH|Jyr
zOIL<lKK%`)sQEenM<k_$CxZ)CCTOe!?+L1isNCnJM-J}ld^21TB~IeqTG(Bg40?GV
z!v;u#a=oOA3&0N$2RmAzT)+Bxm9R<ijf*p4vJSeI^&%gqy^isC7l)reTis5#qoJD2
z!auJj=@sv7@49ZzE`3E^mUtF$lX%X2yfUE1v~`yWrpbU^j#iMV9eM}!9AjN{Fm(1!
zBctR3*1@Ai1NIg<10!nRQmkJHqwbALvAxW1s-+E4ekd4#wT)o`mC1lTc`1Lpotm1G
z9Z-M0c7!s-I14Pl9zJ+%IsK;dasq6t{`?RBC?UJLCNRH86TI=eUr?5II>azBFiZ;!
z^3ERa0LI&qD5x>|Ud-gOchH?R0ms^qgef4s2CFL_mNfZ#%3rt3_{R1=l*br$`7MhQ
z{V=goa?yV}1ytxieU`L}4EpdiJUo2zOJK&wwl+D2({6FtlSv8txeU_d+g06Xg4GTr
z#KeZLUUe-Zeh0iDMiBFHWu~V)ukIz8W#15;3$T(P>?zlq)L_w5j{i_26&`zf8Ecz;
zjchBKWAP8{>mAYDkq<`}OVY)a<Qq|61a;C#L;I~6VXy=k(Dc4oclWe}ewWOItgFZD
zP=CDU*HBSe9?4yS^hdNF7V_@WIajiqa#5&iv2fj^pOx`4bv@km6Av3NA8vPcbfEqM
zr!X<*%7$tTsWSN0FR2Daj$QMk@C$uFEJ@xq+46n)ptz^66trR^_~vJqJTHMmnuo9b
z_O08~GYe*e3f>IHfM9%GUo1yIxQ>IP`t8H5TP|$0w6QJXYD+)c+dl;dzam3=NNbCH
zc~}#W$nnkK>`dWKXlNJ%9o-A8^{67&1_d7*o&%=?aF#YiRFV)pH83@gUhaC@Nu@3d
zV$apa(a3zMkiwbOKuSRg^2d`S_ho2Hl*eu}{PgkpqnE4a132)?LS#(Z9FtFBI#4AE
zGR6TkPdDuoqC>uM0Zz9c$JegV`-}`%h)>S8fZXtCeuoTo@$K?a=5mNSyL=3&Sd+41
zqJo>@@aQ9~Lr7J*EaZ8nct%&=C7)UPEo`&-0Dag+i4dbhbX`oiHZoRLk&Q;9igPTT
z$Duh(xu06W1ct=xl!O`lZ7+iM2s7ngjzWvqq``+b=khc1G(k)-`7MLy#j54;QAcQ>
zGvD`trvNn5w$&-h=+nzbi2|t2*qo5ixJ|H{N~_YI<A;e4-HuF<NH1?M)v6Rji{V21
zU%%c$6`72ASqsti{}rH9d!H)EYv0Jh<x*-kX?c`K&ha$*v(uK5T0=_O5C9ju<RgP=
zXO`o#tuAU@F2F-02BBE+aP|zstNJ%qM>k(*#OWGUZ;mA+VmAv0#@6=sQVud1#BIJi
z`P$XKrc|Iq=<e?Jiz6wTF|@M*UJu;0Ymi6D_tkEzQGO1qj)C90xqjtWa%?hpE4OL+
zz(kd8EYJ&vVbGqNH;y<{@KhjY9?Gb}d^~*_MT2QZ1_mM2Do=o4A$K<>ZN+W1p!Fq5
zOyX!~8vQ3a_b%L4$B7g}Kf$9tC5sP-iqg`_hwZMJPSC7_mp0E{N765&o#+=y5<yiL
zSu%$(aTb)`$kgeX>8n?+(pRib7U!eelcPa$qxjAdmy`ph0%tbAX*l|$UC};OT$Usj
zpDifhWBS#~bvxrhZDnPflg1rrCFG=}lG?<GOLI;&vfX0p?XVGQV=2ESG2rM+;6t_)
z*ClMM#*Jf2Xp!Y~baWk2d?)-JF(94Vr~e09JR}W8OQwe$AA9<5Z?|YDYgcUjTKgl1
zpxbIf&E6J0+@{6qUeBkIFbE7U__03nXElk7fA%~+3uv<8M2^hXAK}l{v3Q`Bj1>+b
zz{e|_jX}?*fk*Axv=e6HvWsZmWYPxze6`X*SokMdX@$H3Wpf((nM51z2s+8I$0lBl
z%h@?OszZnKL-zqc8h<K<zBQKs^_A+6bSQGGc#Ikr*ZF%7B1JCy;gWHhr{|8VXSPR$
z7-Xe2z%IDJGD#468a8Q}Dx&cE_2aA5R*Ed6%3O6%MehHkr*}O*rW(xGiqX1H1;_re
zwz~|?IdpmYD(f#B)$zUm6I4OJ@B|vSn-`?To~pr9{@2h7x7ehlKUIyFOKjm;`<6SL
z4?eyYbJ<xlG=Di(gpkc(mX?v$*{s%1R)!?vh`iBC!mWB}hfM~)+~psa&*!%wI5A#+
z(yE@DwFNmA;$mV^iMfXzphH`JncS~c@kW2^b~|*;fPm_WhWeNI*CwC-4jJer&tSJl
z_AQ2hW}A_trKM$;6Vr5>g$Y{hD!lAXeF$+xyD7D(Al=5Aa?DU;-`fETO|qTGnw1U+
zxEbL`pgXD^R?cNgpzylke<M0Ez;h7fTIeeEOt)$%r9pIZVKS%o1GG*JV0|GMnr-i+
z;k%&~bZ^SOIY-1rTYC&*qgu|4FniIgPSd9~SQRAWTot+C2+t-nRyeA7<ZvGLy!-?a
z58<n>jeSepd6T~u77S2af48s*9sbutKGlwE=XmJkiX%T&Mz)0Nf>*~#t`<ook+;``
zovppBynMQYJY?ur20}d#duNt-HkJbkp}z=yef^yp+`@ae9Jb~&!xUG=m6f}Z>>0{e
z8JU<)0QDLh&KmWSB`LKSjmW6C`~YEAT!KvFD_P}5zMHTOc=_5Ko=^4EKdH+qFll-J
zla0;Yowf?nif0}M<X^q2QHKZ25@4;)clT})-Gp_VzB007KKHS)Aa1@RS+ft6*f8Hw
z{xFKC{dL+8w$g7+O~z*24zr6Pw?c3Il$Ne8TgPVBqJ$>!zZWO`#J>N%HW9{PWf)z#
za>cddNU4qC-`%<d)joJa<%svP6KWHZLy}9v!s;Jk#dyyPOuN0upc9e8nFqE}w~XfP
zyup9*nnd5s*v!B<Cn@Pk0HFD18o7`oOPyKb0!Zh7au%H*pp&Z&7A=HWHG+u(PJ9KE
z9t7&tV&c47j;DflrG^lNg-_98ANMIC!f0d?Sn=>lK;e#$4KNry3Z7<*=POlZ2r~=5
zH>x}Zl)`})X?F?-4JJP|(|t;S8+w<7fEb<;I1+Ef$G|{$uIfcrT~GIgR^6KL)?HwA
z7A|&Lo%ZGZQ}O&C?+58>>h7>YF(B-53w++%bwXp#LkGnRrm?|)Sp51Qz+R;z5Czi5
z$i;G$Mm}Z1X8zwQ9^V6LXm-^rKC>>3(*E+TD^#{ZUA)+P@gy3(-rMH?IjtcrWqLY@
zl5mlQp8n$~!o%I;;7Kv0!~iWZCb1GS0RAJGJDfRKc?7LIpX1UaT3ShrY-Dv-7W&x@
zj`eISyBX(ZROe-)*uUQ0&!K(t`D7=P#b(^(HgLO}Y%}aju##Vbva7d8MR3=pt5i*Z
zb<JS2-9+SYcjah#juG8kK$88s*Zr3Vs?p6rDC`>fQ>ya}m>w~*__C5e&_9QQ%8gr0
zY1Qj<uUx%)zOOdEi_0>~VpBq*V@pe$zw5o97;S0kY_syb)=1_Y6nUCq8k|Mq!+zKH
z7gL&QFRRyohTVSo_!wA6{KeixhWjiD!dB_II-i)({xXIW-d~1@aVl?5FSz`0^$~|C
z(W^v^I5`WQGOB}B{boqvf)kwo24a(=<Jg3+GfhKi%_-`X1GBy&`SxRv9AXct_UhG3
zk?$t4Y#corl{sT^W7E@T+;{lEUIsj>7A^l@!1gu4TUoB0*1w-5s%FxQDD%^>%P5>D
zs7&7l0LcBzBs%oLqepUA$@pT5NNgc{LR&06VQfs``gQ5DkZVy5G!14wqx;f?0=sAH
z@2Tjev*FHm_#H^k9sHniYIb3+$#wsx*1WFRm4NI*L$oNCp!YM}bn3$KH%FVq^p73l
z$Z0Mt2OkXFR<=tDm@b2?E#Lo8nzb<fuceui|BFoI=YVUJ<Qcp}fko;1^fJV4ityq7
zP?(*Y+ratFj+o3`6>l-+T#Y{b+1B<;H?2gBKEhJLX1D(6&TcKFyVvwSqQy2nuR*PD
zhptUj<|JjkFtU_rdc#Mj5GU{vEwn93Ou*OD^It2sB@c4qyFV;G1_deZN3o9UU&EbN
zLYhv8Nt^Tc>+J8#G$p&T9P~_n%A(~^5@&p(0os~1*g;{z06@B)jM!UhaLDw#zc~BU
zq=>TR1RdXElpu2X0R)gNfAVDn26Re)DlE_Bxt4=@x=3@JldVa0)cUQz;BpCtTDxD;
z{{qaFzJ1u81(DFuYJZ+vHKy93>xy9!pfAb<exdhqHA>gJ60%(o<C${Lb;BYfjWrT>
zc`<ROhn1u^c}9%v01HIMtkvSia&aL?-eW8LgXbijIQ<RhxH?W>fn(|hCApoM{pEil
z#qRB<`>fu>cy@hh)Q<4GT3Y6%4=eGR_S_k0Db2~ceV>_`0)WS6Cn|nj2@-IY^sIEx
z0FMRHQQTHzYN+2iMVGw=zTi<*-E}T@O?5EC<nou()6pqOBr8*Z1TFy!&vK;V<1OMN
z`wO6w5*Po`6hxkB!?yddD&DRph}_}%stQWYq$f<;?m-4w#QGQU*4uyyC6C<LNem4Y
z*@-<+*fJTDEKOe49JDVn8Iik)x=5OgQ$x@a7QbX}@=A(~n39C$Pdce@hGz+G2n)P+
z*R>ue(l4nugA)=ILN<K%2x1at9{WWwb5XveAS0B;c|Ez*kyi;U<zc`IP>fN*!B3(;
zGMIuKN#%&cdx;30RUtkVG{Wz=CII$EXuM~JdE14-#P_o|Ly7+ffu?AzvH{&LqVxm!
zIaGaYY{%bB9ed$KvNUs;6u2&J;w*G%*e8bGWjFROEdANp+4=M5#x~EJ>7nbSEc|P>
zo@KHSWBZbMT=nh6x4^`w_;!D%!SN0%$Y4t6{4(ugn14hua#J%UXY?AjJ3!$j{e23I
zUztoU!m<`U7uj%SsB;6hnC+~l)7;6@EVZ!F&A@kO(#hKKeZS8lHv;7YbI8G%J6X^X
zzEBEw>qH^9X}k+I%HLA|JaeD1(N-(m|9vWYu#S_&&=;*L1VA|0bXqj-u_+*~8?3*r
zp&GR6+9%)Ap)+e~`I-KJR%3{+EF&}|M7dTuj9SJiU1X*%34IjS6BJeP3|Ck}Qj39}
z=HQ@r0UM(>nyRnbk}>IMN&@BJ;muIASf%l1-%mB0rR2$X%z<~=4!L>m_54XhETV}t
zEAL0LgVvXU{v7c7+Uoc|O?a++G%FZlP2|2ckM_1Ygtf0Lvq~vQPt7dgSE9yy#%^7Q
z`tsMpp(=wk{GZ>nqJPz!zZU*yzruedBbF3_O=|9o=EHo+>t6{6OF|+J)sjYchD9vY
zihvnJS2_L)mMorckE;5H(UzAFDD$bGV%-q~<a4~t5<S%h31<QF{&TalwY-_&cbvC~
zh3JH+v#{E?wQrLzs_r>2?k)CLM|yZ%*t!h06*w%-dK4<lY(6!vD#~amK7Ss)_V^G6
zR=h-UDF@P7aN18mO*?O#b#PfOGd^%en|8jlOD#1!IYfUh{_}`ZxC2RNlbjQiR%y!c
zqP;XY<G&;7nzx8hoIt_E@EODu6j<XLTXq+TpTWJW_XOgUBl4_~aQ|$@_L<67^4YEa
z3rEYoJjXxS)uUZz>I4OFwDZfBl5A)w`mBwr>gL-LM{6YatU9DwYC&l3+9bF`sQe0m
zI>*WK*lYu+Qc9A*lQb~9*g+_Gl^JV)ZKT*N_~6&3w4ZUcI(sf~>3No9t{sUX5g~cC
z#+>$?0504uz6bVeLloCt<lT|qQ`EVc{Bp*q4>7`D!w_LweTl}yL3f0a-%sCReZVVD
z6I7kL-d`d8iOs;GF_28l4If}Wu4TiL*BJCe`B=3Iw0dXnx(mkZaFP3l^!)Al*PEPf
zpepe`t=rr^j18m^k{M0`>&}6^X=%Flzu-Jo?iNQBln|qf<#K{gn_fKU9fn@ijOPr>
z4N4%|PaXYoLZhOFGBc&s)o*W2(gQ70XXK{;luEV9*UwL9unKi>oUR`9iutOz*JW?K
z)#1|7ksfD|?T_hc=b_!Erp4`S{?Rbx*KUEj5Jp@$Y)R0mVlC?G{tY^|DXMH?4I$2Q
zR39qnqa4*9-Q#rbGg(mvZ$XTSFqN=y-EnETl~>{p?^b(_{d`GK>&r+8ziQFwUv@fl
z%db(Q>>p%jg|0z8S4Z5?me=Xv`*#s%=Qqx8OifIq@D@QcY{1<i#7>=BkhKVh-LB&d
z*p=H}$ASKpjF51q)<9#Zoz?W7k>FTYa}p>hq28_92XFyEhvJjY*D><q1kT)YEQbKP
z0K<@FWSI5-Jljg{-8B#m0m@@*-1*V>(aGFx(($Mz9$9gOSHc^iOjo?My%&08)q7pB
z3j!LVs_gV^O90D*deluJettJ2J6+r=a_NT+kUDh<r{Y>NrFPEi|B1v>D^BlEea#U7
z&Ms^t7Q8zg))Bp*n<Yaezu@z;Xg;wo9p@iM(yoropq3k?N774-7Xyx<B*I@ES7dt$
z7-GrF$a0CrP{C9syD_)Ln40{;n7H{!RkUumgZb#xf{T~Mt7_sIA8{en7ya>TRjOI2
zTKgtYWHUpU5db4X%*>YHxMoSHONtIk6neU02o_xcTEI%o%1!Gyq?EH=VwX@o2wD*^
zZyOmK2f>J%mhEh~_Xr7ZWy(dlF0Uf>38sKT14fGl#v)C~gR&q_*P?QT*Jkrd(8*bA
z;I@Qq`(Y`x)omRuLSUON&m<Y00G)<?PFB_(8*a~f0)rL_;yve8FmsrXm*I}D16Kt8
zqscEez0tkKiz7}r^Re5U$@W~7CXKsK5H}%1Vf(TCUd&$^3aoq;FdVQn#wB1kxt~=Q
zdH1gK7Ko2e{Ev$8)6f(z${fnL9Llh<v4Ph}(<yZ5kJ<DR^-I3JEyM#^Q7&XIRb`vg
z=*blHZByPhQxHgy9#?^taI15Oq*Kz0Q;W}OnaCN;SDU%g{1|M8l1FiM9vLumguTgW
z?RI&)9Hx7hS-UC=JWw3+vd_znm;|f71UjpF%@6B!-Xk}v{%pOZpQNYuObq{l^Jg%h
zj#z#nmkj$95#ire=J{_dpz4Q(?C&%8uY*eMlrJ()<jEI!-TcpnVCoJmJo}}Q=TDw=
zIjy<wiqAK1P-DyZ5;(3g>y(6HreZsLTR>DJQF@m&@X<e!1xq`|b1~tNUF_$4kFyh*
zw=gBjkzn7?@^!Ds3el-b`iHIV;^*-ydmCvR;CQ$-%0YUau^cIxfRk&AyHqLM=6q+I
zx>X}L$&bKsy(foImFv9>e<mVF{oJy!F@1HbhCx^{dW6#OjZpB1pgTgS=_?~vkg7>c
zLcBgwxYgq&Yknp`DFq(5Rpgjo50@Y}rYR_OV=lV)9^IryDOqw}|DX(LYz6=$Z1lfp
z!1aQa+~`W{wNTsFujw4RRGE2s4`!O)H@tuE=~*{v;VL6-6StH#nTtj9!1<#w8ALdX
zC>m4|x68SYT@H6Jv#6mM$29trkGTgoq40%Htya^c1KESfc_pljmvj_dwFTUVkNGfm
z|J~n{yFE^Em0+)i=&8cp9afNR>v{*0BM^uRo$J51!0HM_VS_^nF3khe=T&1~cv817
zx4SHpDO(uTEnIY7R)@_?_E+1fxVC<zTe-^b(zr@-P0)zHUAOo(XN^3hg7~!vd)MIQ
zWTAU*tnnia_p)+wy0<}JxoGIATNKG;Q^-L%GFXy0e|9!ihaF$M$Z6QXx{~e}*`dc8
z<T5Sw>J<@&apW>^>&XPzrpbfD!2WhCT^-K_%(3>(?(y#p>K2A{mk;x<C!77}wPAG0
z7-!A^M1~_uUFa>>MvKA0`3%B8PpTd5M4fx3tNnBr$(oyCxL4x*aHX4fR@S0#dTS-4
zbiO6gAIGjI6-;V&$vlSUL$PZ<(w}GnXDZwq2YJS#Zql)go65`7Mu;DC4(>8DWI0LL
zzMl{mCV*PqCrFhjIx!#lCBaf1MqVkXn)Ym}$WwQlzVI&D&OFIY)?A0LkuSZs?k^0p
z8~2uVCbB0UU8_P1z7Xt*(XIVY{jWA^R#rySH267kxs=SHiJb~jCyrpUYsex9lLvW1
zcdAd|=jG*Pa}5E?ntt;~0c_nP6TW|BrarEb&92pve*Q5~Wt%7o*`f>jAK05S?{7{0
zNBkgJlC-pUfc{_TflMKhAzgs72<c1SS7YyOwv!$&=GB=my)Ms<9VxM>@6(0d2;C<n
zZDzEIu}Io2tWA_24TYqh9L5%%3=I!4X|48TDN|c^PP!(jKUueMz}RPc#+~O#41$zZ
z>3fEQbJzs9in6kTUkZwss5U9~U~B9MgolL*EMg93fA+pTx#nL$O2yDJTxCl(D%=^_
zgubmwEF%s;Ps#$G;A13yfg(aVFl%q4K3h+9q0J#B)#HSRf8GUwN_bo<(4w~UBqh?>
zS)}`&ga3|+Z`oGdLa|E{8mp&@b0v^mNJ3HH+4!;H^eY)DtI672Q||9|Nww;s6oRf&
zECcu0@C0?=U492di3+t~Qg)0C%Ya&8lCk~4!4iSM(3roj=@OMfeUDwp1SJ;MH5;Ck
z?J|E$1Zo}>bRf1r4_isNrkI-0W%hK3aqIUtQMAC)(u%T^M<c1OfV)CKNyW;y!AqAf
zA!DZT1j~^Wz9x`zid{#Hf*!y$vp?a5@KdQp_q|IsiievA?1D_ge%qU3EMa!P%9&+v
z**!@Yy($>FNL-9&%Dq-Y11t_>08bbQk>3~@&6m*kF6t1KhlpI`f0{2d*E%Bp;|Gi+
zc`?b;lk>qcGw>W$?&alu^XnIYc-xVBN>8jLmX_oL{zHNW-jA~z@gV8z9c6L8`f4u<
zjOHa6iX%Lw<&;W1ir-0*WK|3tvl5)uk@PuPphS-U&3iCa?|oM_1C$A@hE$IptqwqT
z=OS*--<Gjf6023(p<XSgwV1Fqr>Acr`srT05zcj-jg75RvrN$yi65aWgQ6xc!i<tq
z#5;8bhleDq{V3Sgo+qEFdApn}6W8Pz9VLfnl50&dJ?2yy4#h+L8}+!Mdes?6_G<DD
znGXFINY^m+JbB|Fm@{%&tz%<z`{iVKg0PDawcw1q;RB)hzUW?%Y~7>7@q_dYKeQ&D
zI30Ep$C@a{&YXFi{e~WA&;&X{Ht4={mXci(MMSQ)C0p~CLx;SWxQcdFK!k{97I#6|
zymY^2r<~MM{M$CnZBm1w&_$qxborZF8z#BSj$_O4(MIuA+90JSO%*p}ZH-_4T(RH2
zGN@LT?DBqXc$b_{i8BV{O+m4(qMp2Envfa3gP9CM=i1d3U@d|F^pnuT)n5Ij6dEGi
zeC?f7ou_*{lkr>52`ZKG%sp@D#u=!o>n+}C0ZlkkxE<5BHCKrC>Ty^iTa45bbUs!J
z_gRa~YL;@Q5d7#nZJA&D_ATW59CEH?#Z%0JhlYgUpkwR(8zDtA`>^cgw`$LJNhPiL
zKeeW1W@dA%XJ#Te;X3}A@=UJYGu<U)_3EeWX}Zg2o`*3KOFyN<DGpg6V{k@ndvQuv
z9Df@-Q7Or>lZ?v>NO}`?Q~&ysyTH$Fqt*J`9&mFHIxqh2BI8~x{n_Fi)s*~Bt~Brs
zx$aa^TmmcP=d4fEjb>>mnx=(>`1{MP34k8`(f6|6Q9Vn3!GUbch8ihej|3Iad<^+*
zUy@NQ#$Pvh+3Nb{Yyw0td&JQTEgA-^Jp6ojij$MSuq4)nDN31ldV0Dil4(sHi>*Zo
z)~JOG=a->7iqE1G9ryz(yTrI_*5Kvnx1T+K)~)q()9T}5xEFtXM2z}rF=~tiXH9cs
ztOl5sOEM^sT5ey99IY@LRd6ns**SnzuLO#-YDMJDGKd&9cI^mTPy8UVm?c;L`COza
z^G&ZT9aPkP`*o%AiUthHa?<%9Ck2cmCj&s)vyOx?Yvn1+^r}lW%@APKt<-uTyMXkH
zUZ#8zedglP%@!WGH|7TgHyNw-g&Ju?)6d7Z5v5Abq^QH~y@a1XJM`b#?*!>4EIwIu
z{1G(qQ^_+8o3Z@K_u}|K##^DG9FKp5;i;HCeDHv^l(uoIi~3XG#;VMOpHC7SCtpD~
z!W+*SuaHy*|8@1oZrILQf}a1UxG*9Zv3Eh^&1_$nqwv?oLLIed&3ds|&vp_y(gdGe
zwO_m4edKMQGgzq6y>dY?m43U+rpA>vJTY_oYtl=yJqrm11ul%}F5xQyJ&GL7tdcOb
zna1V0vn)D9e@yRMN)s3Na2MhGgKSe+Wb<#uvi950VLF`Ok!wGfDW$?l89(3X9RCBB
z6=^6~;!KBneG)XcBMkQx_BM&FoMp@+-6Z@c%2YHnBau~6p>ZPhRWv_n2B<%0OKDlo
z%Q4vW+QjHy;#+oj#dyGRT=?SWcd$wDmtmf9xKjx#=bYU;DpYM+oCkb$Fi%soes{G+
zDcX19MIq&f%+#21o@y}jLka~9CrgjHt?Hm6zBJ5h^sYij&}s7(i2qAQjONotXTo$q
zZ>=clb)oLUq-<@u<%B7yxc9#5ImzZcmqst_Q4XEWZhVr%6>#7ElA6a{^Sk?(&yOyu
z$+$Z8c*mul15|^cbF3`c_klYV5Xd3w<fW^XUC~qQs90vwpo)OwlmE=zA9E)*#9()A
zVrFXY>AOR7{u--)Y=^^}`I`ofBXL4=szMKYPI|sL6<-i`cP7uAVz5m6qt1TR)rWVy
z&dza<6O%KVO}JI8{O!ZFa8JuCw!$fLEAGdA*BKsku}+72$u9PPy7ZLO<(KJ`Una5L
z&~LnI=@=R+K+c>AHLHH_N{yMI?Q;3BeuU?PzAf`ZnUp`tv1i*On#+Ln$Tj=4yHypU
zL)M(r6Bi(wIjvq`Pw886{Nvug^|_5<@xMgYccMqYCzJB!={voW58IOK&lZ_q5K<Ad
zF8)8fy>(dD>DK<O<ER6O7?dDj&?#L4(%sx3Eg;=3Z2{8V-5ny0fYRNaD$=EN^IJEL
z?!9NvexGOm-uHO_n`34Ky!n2wb*;6|^K*JVLh%yPD%Yp-aQEn4Kp2RSciy&Pe)Hv%
z{gusQPmIF0OlpCG7qS5<20jM3RNS=ws+Z%+5^YRc+UkPa#_`L_Ev@Bd=NCccj)jS}
zfbg*+s5X;`eMm9Kf904S@&2J=i45vT#`G@oQ{fa(MBe`Ko5KN=YFD{a7{z3Hv>hpw
zaI`6GKKhbXia{J-b^YX`v&!IAC8hMN^piVFwLF@>VryF-Z0<$UR^E~2d*FXvpRQ_#
zqs>@}RS7=6!x&K3<*HVPi)B^qu9}TYc@~|fq2W~7tcr!DCcX0PnF)@cSG6}uInO30
z#T5H_Zb|5P3+N}?m4i$J$7_?Ec(}=At=HG@59ay;(!lVRp<{eRO)C{`Jka7eL;0Jt
zN3Cy%+_;IKm9?+=UA4l5#0mS&;5V&JoUV)+rt0sN5Vqv8oxf$~dueQ8+wyB+kb-Km
zeH4@AHUieHHpSMq<B#aFU<|mG9@Qi^p~hNdev``FaQ}P?Dyd|YKywCah6Okpvm-3c
z9TNnoB%E3e(`S%q<)V*1NJFAg>dXZA)4?1A-4LN^BJ@KF=+O_gf`K~J`G_-c>asjZ
zg8n?1sZ<J|@d8B`fQY10@P(x)y)bT>@V+vGVQd<gko{$>kwr?59**uP>H2S5V#0JB
zrsE}PubR6|IiZJs)I3vtd8f6lweNZmws1}}*Ld{&TAIC+0!oJW7QoD?J(X$IiWY!E
z2P*548`V;raTnq*`#MEiNLyvp4~FF^d0Zi^i+|e2+^NMexM`5kqZO=i?Z*ffGyA2C
zXR(?}6pUh1a6Y6<GN((%&(#da8EpVlVVjZJG^bxLaPbZ*2Mn}iXf;dBm{%n(UUUao
zz2mOvE&;&}+I{u(s<3oJiLZ6DXbk9h)S8t?z$PnJ%MJoU(B|SM8F)-q#%0(YDgq1f
zi?O!$QaL#eB$=GDtq@MnH41QOmD!wM+nPvFa}h3_e>d!c(dj%_cMCD-p>A8%bMU)b
zRrZ|%i;;FG#sbDTise}D<$7x$1J`)8u%MvPA|2z1e075ZKtnOTc@$&=J{Tjy>W8vp
zQ}b^Nwgwc=zla;Rw~)5X%T~{c!sZIkd?TpJWtQu*zoL2zJrN)GmQ0er9opn88}mN=
z8|k^l6?&6+>05_rdj`~tAc13QX`d1(3(4PoThH|EBSBEc?~kMh&%e6#-sv!Ws(-q|
zMZf<NYo+mm=<0*<7hLbSAp<JAH(ZZ@u|j#UZQ$s9scAb)CBI?37PcY~R?4qi%?x;j
zfK(P~lGZ5C9FXk3@A#zWLV0FkOP3z?>_B#W1|rWl?|4Mn|6Qh7Qflhn+T`J6)dYn^
zzlZ$u6wle04roK>YUbPxFFoY-J0n{+9mL{#3=UzL@cMUgC6BdZ;87ULcx4^T2F>&3
zsDxUTqW_!)@H^6Sc3CC^Ge^1j^`-AzBV&XYLv^VldKrB*__Ch$4;K?v%UwL(bj|wB
z@mp+_O}wH<9R%(yw$oJ?LWE@Zhn~cZ%}~N7I1*&cp$p&o@VLkX1-&?Go5;jifBAtE
zDVNHEZXn^?Fd~uSW&`v^6p<XUIC<G2?Lzj$lf3N7KT48wQf?C9%jd)l3<nAn2yAs^
zM4UrqMXKj5Xt*X8w?j3u+XCqO@B5<Gg*Cq#nG%b<VMg<UFmX#;7{k%AK%#li+!ZxK
z!*21sB;&iZ#SNw2!v{anK<3ZK7EwgIW22oLpf-reut&syz>@Nrt4Mn&i=Fi9Hi2;z
zUdlXA^^nrd_pYhdj@4AhiO(tq({VJj6U?V8tLNerN}O^S>`x|gS4<q`TTGKIU&Cb^
z#84UzdX5IYRIcuvp%hNVGNt*~vR&^v?)6ryxpwzl@U6S-euaZi;n_K*lFJL{sYPF1
z4~xg+5d@Z2#v?l^JNG2j^d(_)1UW_Di1O@Z!frc`5t)^Afyeb3a)``pe4Yty_EdwP
zx!<44Bw0J2>$wo=ANNpG+GwHH@%eXw01iPCL2o=nTvs>Zcr(;a+|`wLUwTY&bK~)*
zyJGEJ=*Y<Cu3P>(TiXK!PvEoc{R>&qlYcPpUUnzm>+G=%oigu5<Lw#zaCw)op<!Un
z@<<YpLJa6n!TtB%#0#xj`02UCouvZ@RGEyL`^2AhUVjr047?^SCgOZZs>08o^1|f8
zoW5~(R&T0kh>m9frQ7i3#`Dj!4(BO86kG~JLXh{4lY)^Jyl>Y3MPSMWKDoF*<swm<
zk%fg14xKWwAY0;74i11(1Ge!!QnMJ-du3}q7|RSslTV+YbYSG@C7ltAzOB13=e>D@
z<n<VFpAIa_UwC<;bZx|Lu1?wEqJtUIP8V^(dDme@b-6M>db$Xtf_v)69(P+O>eQq(
z@;w-l7+he%?rRNF+k7pANz{by2@Q;6!|U^mxZPl$8xl`i@9`M$HGa35gH55CQ~y$A
zGw>}4`&CEQmGoi$0FdMC)&Ie;9RdUH?2;TnmVW&@3(nW>gV^s|-+(^wfS^b74ASGG
zCnTgL+Y2QO!W8g#>7!=Z#1$1;NJ*PqnrX!@4FL83PrRz9@>QGfFoK0FZT-W9S*9xf
z=Brj#R<Jkub9QVbnXPQV)9)&^Isbs9qhs+Za`1@F%v@4Uco=-+rfQife-berT>*q|
z#;}@kSRY(b=QQdtsQPYqTUJU%WeK~C2J#;UK<m87Hk=h<NymHsV+5UMWxo0;2ylR)
z3phXO=-O`|k1ro`VPvu@YF1i^HcbA(<-)~(pWl#z!p^70^;nEb{x}|~bB_Z_7Wu)v
z@K}}2GBBzR=uhrTPQ$Ia+Ma3!Te8e#(5SSZI_eTSxi`ums2y=!o~1959~;46Cv@NP
z3Lo&^y=&Cb+6ro7(2@XR@??+xF8$r4#5)Obr}ARnGZMnbW?bZV0Rh{{;tDFQ<a3kW
zdg(mgm?l;KKBZgQkz+<f|Az5^$Y6(_TZ519r746^rd_2F+3s7<%1w^_bF`$p9Ro(;
zCP`e@Ue}kr_Q$%Qjxe1ZNH@hdvIq4$FYlCI1Fn3CYgxUy6Ct;N>^eZNKvZachf17L
zB93j=wZR46&FHR<mgKOc+<G%Gg5Hq7z|>}UwB-d#ZO0YP52fUP`tbhr<&nbQz+t83
z?RCW=AQLq<H*Rju!~$Y_&lLHoq<CTg;<W4fj0`CtIQ^Y(i~3>4bj9vOu{k7zd9D<-
z4(Y=gnaEW?v<o#<0mnE_miNuuxDB7*p#JekUtU}H(FqWRNYVzEhh)|q@V1`@ZPpnL
zrAE64pQ#ywH)tSiXuu8jF~=EogJ97^(h%(!(KdmTzlI`Ltj^`Mohmb!V_$II<q#y?
zviIF_bF>sM33=dj#nGK)Eb+S+CnxjSaR9eOZVZ$XSf!bc33A+~kLNk`r(!K{Hm^@D
zYAha{#szL6=QeL;t0`$&x@_~7edfE7vao3dm%QJP0IZX})#C>G{CPpNg_h3h?9^0&
z%-q5T5)zsct<9#yoEI!9O>7b|K?xDv&D~1>+zpF)`{d<%I^5=HaYpNQt)YMo4;Zw$
zXjCMAv}FONF=g@J+3$l0LyMe~D#i);1`@zRvkQ9p+ixa1?$%B2uZ^oAPndgbrF3+n
zF18x@E65mRDX`{(9`Q*=z>g-oDA94IscLtfWoa-3`P@nl4hI%L9hIw(7lNdqN>huJ
zFPAwP8UZrXGc=Tr0^laf?mtjb`x-;P0<?Em%v(HH__2?bKznEGC}6emSZ-Xqwvajg
z7T)Rs1CGSgmn3NX`R*$tr8>Pw?tb_=)@-p$!x<ZVQ7Wit=-~52MMv4L{)!Km{f(RG
zR=q|@Z*bp$D2Uoa(<Badl2&dIVoPm;swNri0Y(anvWun@G2<9%<gnw|p|;AF?S<ol
zJkNC4Ox<uZi-=NY5{9y-0p-?8LPA0%NtEh?72-IQ6>nFYr3g|8W?fpGR<oIvj(=-g
zw?qD-BwPs0QrbGVZuNVrVx-{SC8e#gJQi9*0QJMh*4j3jM;QEV;K;0rpq;L^-rdZQ
zPAW5(dpqCf?qjY|`<>lQZ{gEjOo6qjnwvy8L^teS1^2_I&@A7~WL}61+WO<^Y9}(P
z@h68vt4tzF#|H`;<g)=Y+++r70ewyWlbqlxg%Kau4v|GPr>78#xx2e=sy?-)^1~LJ
zYgqZQa~!f5zfdgUOH83kET-h@w}6O<Bs_<KN#y1yoJeLJQqHY8`~5b6!133cBTtUs
zLN@Cz0vHQSKPxLHVtzFzN(RdYC0tzDRIh-p#nBnlUv8=6tq5l>++$-+GY~2z+OxeO
z%|I!lNOPY?)gK4dqoFEDUr{&2yEl-H2q=HP#eA9Z&mIUov*MqgT#!^4OS<-G8|&xg
zW>65GF$#pt#Ag<<c9H&aEO)H<>aYhS73>u&f|TJs=djUVx3;yBl8}V0r{X=tQBeh<
z#2*5!1$B;MA|f)y$vdc<;xIB#NX>aJrVP1Cn3j=viMYZsNBh=|ljO3b^z?6?(Hben
zXo?*b9_m0jUP4hPh+7zmRGCbz@j%w;=h27$fv*EBkVduts1JoF{eS$A3Sggh_7L)b
z7V*p+d0}9fsQh>r1r=50@ztQv&{zYW7w~nSPZLmzG9zSUEVjPMA}us0SGF054GoNd
zKQ|8aIYTIT=ZEv9A|D1-XY1xDLMO!j**aLS+>uKrBkt<>RGw2=|Gcx=)YU3NY;Yf9
z;&G-l!PUFZl+|QR<Q>5;{GU>-0r)6@^0~(S#$vokR7}O&)TFN%W%A+IAwMdmW0Te9
zB0sP#ZJ?KHgT3k7_xfT374pI4Om(0^bqXoLX4-7J<o=i5>bNR<2HkoGPz@fv`mJtl
zio@x9?prT<W;k7AD=fkl`}A`CioDxq&uK=pERK85rJ^hez{WOQir~`knuDtoUdX?8
zLaN5qvT8q9r;+6c?iZr%rWXl`h^A}!op!Q+ERV1q?<*)O+5t)F=qQasMqb`}SYubY
zUw;btcUg5aJs($MZ<|XOP(`>*SG(AM>N)S=PyvLzc^CkpxafEmoAo;e9L5WF`3#w=
zO_yo%fD$e1ZDFDX*f5(hh?oOSEl&E}AumifHKU5!E@?oQ=cDWJReRp^FBTc~nGAZK
z00xhqNE<lcH4bDZRfqnQRd)SWF;EJm$ak;2Bb<9^e*)Vebl)p1W_B^$4k`_kZ;-Tc
zf(eM_i2%)5e0YuN<`9Ts`;H)w2z*48pLKqdJUra*zehMxg=ABFke1U#8p|p4$Uwyi
zcJYc;45EjzvrMYensmP^Le^XJQ&%q(FQk5sr&1)TEj0keojBd*8VwI4qxD#*A-o;T
z%4^VXzr66u;H44kq|?INyP|*VAEcsqr#Bl7G?i#FE-szvk1qMkYCb+ba3@>LzPK4X
zUF#&R1o*n%)4yYb$cP*OXoyYKsZCU;*-yR9h$bem#ou%s1XMd)-@f8p!(|w#(=NP-
ze06xFkI_X*K(@D14A<7O<2S>f-*DPz6{Z5Y1cZGcQ2<rM8$dZnM?>Oxdlz`^#V-=C
zNg{!0^{)kh#yomvGI!;+bA;`+60N3X<lLiSx#*;Ux;P#hn$-j^1r=#L%Ne1{z4E;c
zuKtoAxRJcn)CQ?{yoGmaA4#hFan=KHzplOx%+1)>vAOMcoK=jF%vSjET(~R`K|e=e
zYfJGMvY(Z&5Y(CS*eyjqfBt;;?s`eikjz_88Uk7M43L7s;0VNb2m1$b6?uDKjpw3g
zz2Ve*<>v`JvxR`8vc7!s_}x4kWlkoO$w1(e>gTe$cARR;#NWbxP)pKRQmJ6$ZPF?R
z$|W85=78Jyrd&oJ5??T3?2=a5t=tBU@tfHmkTISe6j@8gBp^u!Zv&s%Wa7OZn4DaS
zLa(`gLoAC=K)|MXEe`Wl=9-*>+C!%%>gXts%u@47*QwpQ=Dh#_W&mDcy1G4%g0rj=
z#xY>n1B@mU>Ks#lkWhcNN;2>?REA4HTMoqW^tXkAv_5IXX=WZ%@14JI+?6h9KVLI&
zL9opD<M2?vCWNGg0t<RUQTkrWRU#hh`}eKMj&|zy(J~vYB4>dn2h9L4>&wOD`Sa2&
zU(RZDU*kvC{Klq+Y!(IE>BTksMrm2u?^_N;5HX;l4VhQ!YUNL_BYORx5hcaQaIF;7
zo+PUW#fNvDy$p@uMMC@p>1w;8!zTcVVoZ3Ara^&$Egc=H3cNu;UQ0RZP|%W7kW1B~
zSPLAL7T6}d%bSEM{+?(*QQWf&Gu~(lW3cJz>{q$qkalwggaIQ&&g!sy$gQ)2b0_h)
zU+2B6ThvoUMMZaPF_EoP7z%~yr;mJe#rBe#`}lJfkV`AWOBJ#2M#i#e*GF@F(wc-_
zECw3Ap+X|O0C9=E9Wl8qq%Iejf(jBhA_C78V0(+-{Kjq5KyKxU;lK)UUbLu6VD{+g
z=}GM6KL`m4$rH^7cgAxSa6wSPC5gdyt{}s$mk9Y>+Fs%jhyV7U(oX(U$mTIQ4Cg>S
zhEPD9S#JIA5Fe8}T-*n-;1ve^4&)a!|9!grIAyBZ1;>i(^;z8!cgZ6LD>)!NzjwI5
z(-5wPyl0|o&V!Dr%q2uTF84l-4Fc+Fp3bJ`I-%IAT%X*4*%JecgIMX2NmZNG28xh{
zIjC@e2OTTYp;9-7>H3&``T7$lZl~`nO`T@)>5@q&a5SvxkFCcn_h%!-mrmza3zenb
zRroczNYH9jVA{<O!32F9eQUG{VXU-&NsWHh+z}vXl_)fVGKEappvMUu(yCAQ1Mz@=
z{6jmQjq|2B@+`6QMcSj=h1ZsjKHLq^>x>Dbl~O%yL-3p?J_lP7ehhBEUY{V|#yG%i
zZLJpG;B+#!m|T<8+^C|arA0nzk7(eMI*?&b1UoSNp$fv0Dgad~JF88!&X8rfz-Vmv
z-|3{7F!%r0ScQ!9Mc^iAM8jq_9Sb$X!n4vzo_q~IO}`D87K%vP$+Zj&jPlh=>vsEe
z0W?j%rcldGV8bbA4jdUqMpk+A+%6W^pUMhPp!qWr=)d&?E)_`AR>?-zr=6a_qJsPQ
zpvyX5cvXq^uq&Rv%9A$$Wc0(iYJi?`fd;aq%4`g*D&~yZzFDHRkQ@q7T*&@#IawJ!
zV&B}`+ebx1gIM_f{{H6CF*0X~$6w!zK+YYuFe|+9R$^A(V1R&k6AAqpkb}D{z8;se
z&-fg&XcfN!DVOa1ksWvq>yncJt}YeF))<;bbRbQ!<oK-wkf!M?8Csxum#Ov)77(>W
zDT5SUwKb;M)UD#JG@o!-#Q<9>G$ewETO072GR(`?CoB6(beg>ltKTdpr7EGiiYZCJ
zPcsQhV{qMrouyxJsW7!8I?NbcYzFaLTfQ!rcPsL()0pYVTe>?sVv(Ntu4$_KH1{We
zwO_r0z+}qxP==fw4L17|m<=#yu$zom#4+>$m;wsRXx_+j4Jbe<z-v-zv&uJE1ca8e
zzp@6r0<&|oVj^NiNd6F3zF&Y3oty0A$85kmaSBQod@X1IlD_Mhn4h}jPe?~cl_A=1
z#YV+wiB&ikS))+AdEs{A6y~wdVlstm!`!1cfa__<xUspB^{xI_onqqrA_Rr4PEuq=
zMfO=+SKC~vjQ5S}`%VZ$^u>Fg^|CTDU%Nh8w`BmrB(y`X!)oNM>1E_`Fr5Zw9k^t$
z(^(NhJ}C@5Z!r>NCq#Ka0zB5!?zyD5lvS2?yt=wcBax52ao|{oVA2T{OmSsF-7jCg
zLj7#UK*eFaNsysuY;4?bFkB5R|AHbyEt<CLG;XUa?Eb}XJpAzFB&m)Rp8*}FTPpK%
zHm+nehp2)=XdB-z%U?eNP^?qMwv6bNvbPK;J#67ZQ^cC|wHShCLF>KoogS!#jPL`0
zQ(s!PP;Du>hI)-@f%MLY^&0C4AP^6T&>O73a4E7XLgH{ozAt=E8D$jf{vEaYdZlfD
zxK4&YKx0_s<Tq=-%+FN@QMBKLbz*$AjX$Z`)E@}bOk~?EiO<@L0QQ;?3hA9a$}l$r
z^3Kf<AG3#2fqQJXW5;B9s8|m8QP_<YGhnRoBqn_TR-pS-4FxeV;29c$SOH^pMw@Tf
zSTMM}d^wzt3VnUA%tnHH<$*4l%`U?lbp5vXABJWNOED4{9%oHj&aIT>FJ}@_as!W`
zBbq+MV+uAHq9|FAl2CWE^FAG&+owR!N!%*fgI7L-6a%q9aco+o&HR(ocUj%!f7tKE
znxt<}3uWY`)UPb*r^x;}i|u*yc;61MFZrJ2zR>E>m`^x09;4Nj&3dqR7#8|+S~XYx
zsA!?Djiv&C-vxyBib7IGe7sv@(zyEOI%g=RTffQ~p_{ZEsHe8JoB*w{!?IRw;?>SN
zpCJ<*87Naxy&<Diwl)dlH_yjc_rIOg*I&knA_|19bdn&<?GqCd0jCLwL$DY|MYmFK
zc8(fY$jFP=4|RnvJyv*1>Bho=JR-!nu8IOK4N$8E8a0rm<L&RS=XwL;3!$%qaRh`p
zE1W<07^t8OhARxB4YRRgie0t!1Q7(nU6GTTDL1nm7l{-5Bz$!B2fuLe(El^bksUsK
z@&8L?fV2+C2EmFdG1+67F~c_Om4y$0mNrVthXpq<F$av&1sN?=!Pkw?YDi5?tl*$W
zVMqZOs<u^lQ$Wb{Fakm)k)PyI@RFqn9)Q!4!fQ<rMaE7cKRkL{er3T5L7%yfZlPNS
zlOEgpbn%m=);VB@XWu^+#1>-#@XzEQ7;zjfM*ZoMqfLNn*QmxW*WPXeBD%2Ot<Jcp
zG3j`A+fBR37a*rj^G#qo5lc)cDzb97E9=A$h~q{UB>3Ln&C6_;r^1$Q0k~Pu6+Pcr
zJ&MD6@YJZ&4ZUm*EcN>r_bzYaM@B@Hnao-(2i>2rU(qgzUVf+~FW#;l=pbf=YJURU
z0&4a5TRV9c;InEI1=^5~+l#gR&3VRjDb30b_k@Ikx_dB$t+ZLjJ0^`@Kh@NoX#P6W
z{5v|0By^siA{6MTM76cGL((OTCetMWhz-n`j!5<t2j#HFjtS~dV+c64nW}+YDrvts
z=AI5-b;4`Tw&^puIl~u@U;TC|24l`naQ2!}>WvoN({>o44^kHcx4~xI@M^zOzOuu|
z-7opoYXfx}gOC(l`^Zft7PgQR`$~E0v-lQ`V8j1B<0+l68O30V8fH3@gH%@16!$D^
z-5uy^-nDm(oMk%fxlV^lG;n$q`mB8a+dO=6@}9H9`e4y3<{pr8E8gPOdzHN&n*oYF
z<dzV{D;+Le6=4r93SJyz1f#=2=tdS8r6zV|_>#Tg01#6`e~MqY3dF<NcM1*){*Z^}
z1Psr8A-u2{Hlzje5b68UL{wi9g%1^GaqOd`AO*|9gDYtygfgx|il_6*io*qE<>+`0
z%Qn~ydy9E9xhyqgA#*}s`o1Mxg+>vgyrE9ub2nJEl%vd$j!8fGXQi9`ARpk9Ef2nC
zEne-v$xTXarLp&AbhExWpfF>jp}A4MarVo;59BFL?5kr}_25Pw|9*Jvgt0QUIF+F}
z?a;NEsV*-c^4m~prz-mP6(Q9C1|n@O9ewdtm_2Me+LYll+F6|P0?B7@@6>+yhj30#
zi#osqkG0YaP${KP^4~?4k3ecl_To_tSO$cB@hm~`ypwFVJOsIJcH>1}!PtVVX76W`
zuNMQ@xYt8z+7!e{S*4J_rJUq4(eNEuln@pB6rN^R#I{wrA0-j|o0J|9rqzSoGNLxS
zygV|F98zW}DZiG==X0#svQ<bpIz~I{Y=fXJMmbVgSa_GHCn1guSU>s&@c{YEGpYcm
zjuvaZ-TIhhzZ=)Fc$swupm~rZ<9s<S-t%r1PvzzGI@_3KgJf;!e>Jp+JL^D}7culj
ze+oW$QWuH$T-63H0G<U1Bfs$;(-O+;12d&!8k4sf@72fc(=sxQnT>^Hn+((M=V34_
z4zkPBh*D%-0GRX6nj2Wt$CDv6ci;RZcArkOW}@1>n{h@1Y%>%4G%%aF{m=lGBOPVn
zpdL0Hnx2mVg~CaHg`D}!)cxGtMv{in9k>-CUoRZ_fNs&`^SAHb{oIxZW7d__!f&Tl
zEL4m>aV_obIG^a^ge81$;;4F?X8hJM(;Uz~oeDWYOm~1d-V|1jWOl<%Orivuu9GN{
zwC$u|-?R3)P2B*}dsTl=PJF^;^X$-nRkheaOP9-J$=49JGl+iBk0q!Y8k^fsuQ9dL
zLsI*;gmQLvR}L?V;pxZYq`R!-0#^7GBeG;bK<%}8?sg7cz>5C{x}sDJ{p3`WKemEP
zx7CIf6Y-Mu$rX9Kjs7S!ebC_cUR}u?4{Cd&WpDnS-Z@w<82X1?nmpw6T2q4S#6}gy
zr&OzoOn2L^Gq33+C#!I5Y#;6W0HR=jZx7aav))TifBfqNmz;-3Gi`$GGmIwDfSRb6
zE4d%DwK$vsTBv*X?!jGTYh^N|NO0RHlB+prC>3~@Oa@qhC&T6~$;75n72xtucK^|%
zGY^s<uSCMV11+5TN(FY2&bYteCJu{PZr5jv?8OQ=kyP!?((rDO5W~_Y!@*jtEYrIy
zhtG%YQw0z8)*MhZFyCbsH<k8}K)-zLu;Linis{<j=cXCi<G#vQnMiSO-t4dTB&_Pr
z+1T&bSC8|rzT((74U=1@d#yqeKxUiduuT)fqe`tD&itHmc7jNA<rBxTIXVMGBr)(w
z)FlSEF`Xh<B>raZYV&-UwPzg^myH+SoxCz#HHj%RsBt(9zx#>?G(0)U*^Zl1@UohN
z__@aVuqz$iY~lnsX)p_>jAezQv4pFNKP-u#>0e~iD`)52Hq*nKH>UyzJ7$-VFJV-0
zthTOJYu70;!x9Yn7#Pxw%K>?BRN*wg2FQ`_LybM$(;%UescNTMrwC4YmWTQS{Vl+>
zoUF130jEJcWX%}aN6tQSC-J6MD5<<osG{)rsXimi9DfHWG9hQiZjIvj0p4IHz-5*C
z9S{ayrnWY45k-<1)!$>;ErXGJ1)(}o8e8#<1y0l*eiN9ajI)90f+Qnn_%xr=509Gx
zIV<zUW!By(rcijc+*jfQBwko|6wX_|OL+}es9|82f369!y5V%m9xz%Z&z=#aO2Vdn
z5z^I=?n^q4e?=fMq^717y(=<I&2qkvepj|3OAA8*JNd<3j!b#tYzr(-kH%^P)-DY(
zv0yn7bf=mhSFaZj&>#Jr1x)m(w%xpTO$G)J=Q(%oZ<(O!#w91;gYL<j6pQ<+B2^gY
zDYt@tvQ`lgCgFWgjQ^FD^ZV0wZZt*fqP{*9QPB>%S4LQ2@*=Kj{joW`6|aTXo(V;5
z_+h>Wc?yh8u&!TEf84}1nn?-PM7XRam8YcVV;_@N)|G_5faJ{fW(Fe)&e8V^%{-fk
zip_QY<$70>Yw+!A<PmZQ(ea9)8kqT9>K66-^)op>Z3dzQ5055zGU@53MN;4v&+Xh&
z1>{Pe$6d%Fz^Onr(T~vCbO1@$V@x225C5;m-pC#If5>Y6PtyzdLH<Ado-ZXP<xMlk
zvJp8@SD>i4S?j?h1aPkN^H>iZ_X=STmPG<wEo8UZ0KHX6a4>Ra@_c>6Tmeb*W6;a(
z9I@1?WzR4pn?$R@5%wcwwmle_qfvqM*nj3p&mvbG=@Kz@@TboWbkxd<R=QBBX=voj
z&v#A7TJOF2ysTING)9Ka>NUZM6rPL<DXg)yv@{w|)m6*s`m;avh`@swZ{I3*Uf_c1
zpXQFTYSmpc>$&bUV>BOBz_-7(-<^U%131t+G#4haLd@<nm%Mm&DJ?yn7OXIF(^}#6
zcQ!w2-+tTD9Kf18e(mPXl%%Y;#sP;}H(|#6aMTzosmqh~lk6b@Y0d7Q78w;WSPJ`S
z*1B>5ZlKyIynh8QjxDXNSU5P~tNsK;EaWdFv+6Ur1OK6Xuf)RE<LUA@9Ud3}w4uvi
za%0kVz%B+}sp%RQoKHlB&=y`eylPS9?dzM&?&pYG<9e*OCt_^mfPcJGIIM+*Kp+SH
zHN!3em6a;YR3TA8VWE)<3Tj8+b$&ax>_+sN<>d{hR82;{eRYTdd50gH1Nukcr}|`W
zixBN&eQ*u)np&+M0m2K3V20dU*jyT|kJoBy^J&MFnl1#;HZ?cLoCTdwQd7egp7{R#
z8TGC4%$Al7_0~3)$l4DT%GP;xb@$e?CScdQ@_WhG`FW*Uh5@Y~)^=cBgqpjZu2m-o
z_d#$R0PYinxRk%X4@7=4<nl^)Ma9H6ps<Dpj`%E|1qd?T1x>7s3WOPs6T&F_mF3`8
zzhpsG=i_mh5Xtr}<qx~0&rp}fIbvgCKFM%*caOrmb^|-RCpad?_;1QK(u{h}mUY68
z=ZmXPI1S8yVK15}o0p`>Ke_|civhxIwzl2if`kH1XEikdfWf!>5l#Wx|GN|vhRAdZ
zN4S>?tE+np!_kk;@A+UlI4X*Qjt(fk!u`bp5OZo!XY=UvqBypP8rtYv)8^!TG<;S?
zz!4*7BabE#!SLrG1Qwzh+GcYUA(C#g+S(ox8u9NYeSE?DBP#8)&XF*Dg7)iE>r=B*
zo3I_`uxR0jv8u3eMq=WYc<_jIri;|!%4qGb(6daarhaXJCbyU@{^-zkl-ZJ5US1xk
z%4%h81^nNJ)!3#kAQ=Fu&H&e}?yDC(xpCaEpbv?Qt9Ht$DmcZ$i)lYIGPi_=rT9AH
z?O!~og(UGy+XjsblyK&rd#<$yGXSHX#&YJ^s5TK$hqSh~hK*x|VNyJlwaXIafhH9&
zhxXt6#nseeJvxj|;zA&`7}kZ*222bls$fpW)+x)$$<3Z1pSj({UvjL~U1Hgj%-Fz@
zo!0><5`IY1n7$L}1myAIH#+gUA^(yphnR!}@)mrq?W5-u@^SeOF=l_Y1tXC)&;J52
z%^WwM$mfLAgSE-3&CSi`=4Jr0zuZ@XU`@E$&(6;Bo4;mY9)jnrJo2%k-A>%MapbS=
zC}YW3B>0~wcg-i5YXzk}cB|uH5zLG$m9n&?muEaU;ChP3w9sEBtu#sd=bwY&jkfle
z?Ae^FL>qc1f+Z>o;8O*idgPeJ_@`2<QB>rI?0SB?Bv>IV9Zxb2hr_tcOkGXxHnwAb
z=O7I;bJ!SjNionuv$L`UC;S4H0?qqUTMO?h!smn7h8V=M<KLaG3a@|;5hARR7<2%6
zL%M5HQBMnf3fpZdAW1bNLyPYjF|Fw^v|EPf=9&Ow2gak&2b|5e8;=yp%pg^m@PEs7
z%MlfUgimp$@>n)I?fpJoASxwZDYoeiUVlvf_U*gLcgDLzovOgj=+<25_{T{0GD&Kb
z|GTqqxqYM<mI_zb1s?Yslp|07iJt~_q_|jt@@r2C^zG?<Qrq(==q0xuceZYUn43v*
zM)Q);rNIu(K|bi}WDY%S^Py8=3W^D_?rHD0U3FX%6A*X`vuChO!&7=DRWas#a2Y;h
z+tnWcGktyCcl;{EX8<!yUMuTOcsWLeAbh|Q<@?ehMV#iw`hH_W0}ME7b&^&ZAw*;C
zbzos2Y_UR%2Ru6QU*%sK^TnHaU@GLQ!A-<-wq&S{oTem(cR50+t)rup97Wa+q%(3I
zp1222Co8wyBbk?n`yR!NW3wU<gG+}M&ra%|Y<^_a?@rAp?~yT|ek-%1vLv9v8-JqL
z5o>w>s}L{mi_%g%F{?J1F8&bE3$iDlJy4GDAQs_quLwO`XreI#feh1ii`8uKtb;G;
zDg^8$FyG&6Dgjy%i0o74&^hH;?21hRFmn3h!rC+hi%uOw<ul?qg|(y1yCj?X_-d!h
z^^wNB8-qqkREh<Vt6*rjs8n!K1FafKUo0}9kjKvEc00gyJe-4=O|dqyA1VuvJ_MYi
zkfTY6dxMyQL^RHGqOv!Qs^$;)q(AZ0|Lfk#6xyBr{foC27sCpY&lhlFtoaw>T|b_a
zl&mz$>9^~CQO#Ak;9}jCjZF!^407_wkP!JASrwt^ON*I>4e%8oP5!$1xt0~2djiKq
z1s|H9yJS3v@*|l-NVEXUU9Hn$=>eg^@1|cfgA_h3>WuBKEHZZ3(}W^q()o1$TvOH-
zPBRiCgl3H4026C#n~K+fbnWRQY!k{&fSPQ4-|WY|g&uf@>h#=~=exnaY+X9XsIRMw
zL>R*1^PFeUe0vd;Q?PHp_+NnhPs#&RCsoEr8XiNAG4c@093#RB9xE|t)jye7<Emtw
z)`j&Y_<VGbAE5p2WtSP2Wq=kdNWd~%t417>;Q>hi#kmvy`v>zp4Ug1)v^ap)Y|pkw
zK(BV2(|MrH5jQOyQi-0XX0Q$#EWPhhuCiVJ68xpGCkFH{FlDp}K_;z8BxL`zDbLt3
z|GQ8RL8Blc0S<@AA=9yzwpPH5$#zuYS!@rsE7^oqRvvuO6}RDBoSU12)fX8jr_*9`
z8ZxygGp9;td8fBDMNp6(irM8I0+>x8&+SC+OyGIr51T`z+~`WF14IYuG><A{5X6T^
z3(<?n$!#Q-&4-XlU*5rgP-pbJU<i;#dXGZWAY8~AeEw?9AaP<xPUjDA{cttjTqVP`
z8P+VdsTd!UgdKjCQPMw8l6YJ}P9@UO)|PB1>%VZqfBB2Hj^~vkT$TngQRND_sSm6b
zjR-0Wj=H`)1|XN+y3Klj!TQ5_2jmMjaC5sTSV7L)Ve`Ni5+~Ym=zw1}{oaAUSK#sE
zH~Db1v0jXZDOVY~*+<rwupNXRL%o*J3Zy2LcChDxH0+J<-+POr+#QhVa_5gn%|dR3
zEM!Bv+=iNghQ?F{<2>LSzWo^DSdW7io*Kp%l|#%tJPEW?2@HAS!?dTlPg{R%Y!<W~
z9h+)i9jXmiVB_GN?E~6#cIS!T_P&<84u1kb5q63!lJAsezdr5%77j_Mpa_MdU?K*5
zVQ+70Yv0a3cYWszjIoG#T-A=hkjJ8+phTD_xzEjgg?kfll+v+queDUO{Mi3T%ge|F
zs%ydLu-AC3m|zC6%YSkbvAoHHe)>1urz=gl8)7~BfWrkah{4qXuQ(oRCJA|QDkkCq
zh+^v*yyHy=cGW?;m#7MP#j5nWDJHO>%#^S_J#q2J)o;iQ8epf1$d(7%;pZ+MC;yZp
zZ!rMf=(BfTt;O<x4IPh+=0JNO)38H4#5rHxjT==~&QmQ*SJ>KaAO0Rf`o}jkHi<ZT
zmmy!Ew}Vh;Idi;MYwQZ%RHe=5FJbLUQZOLi)oQ?1jk&zLPWQN2Mp@ZmeXV+Zy1LeZ
zY-J+N8e)tw2=rRxXVv{~3J2J)4l$Dxv#oUH-Q}kN0bQmIlgmaiFow-vdmdcA3=3bI
z#V;glM?bdq&L<o0!C$^0*BtOc$w+@QG&CGsx)g1+gpr&asTmXdUJbO;LXM96LXf1%
zZyu&|jk)iLqLpIe?mKfx>`1n(MkPXoC<SJGP^bwx48o|iS?~=Bgs*jCUCF`G`<A|>
zvUPo*OB5+jpNN!Cw{n8#2DAtgrl}ceN@mn<V>bb%NJUO=KtFJgk#RHo6oI@%EQRr`
zwG*E*|Dz=Zw%OS;&H9I^?QCwh^4b5D$Fo*84*&Z(qu>6E^XpnLE((fQ=Qs-*3JQHK
zv8=yA!Bn-cq_1kJQ7e3{54E$>D55Y_f*ti|2Q2s0(p8(+a3y!MOkyUxPm^Mv$>W^5
zZR5FkR>V|KLIa6uXiWWldw$LWOxY*A=Mi3BUM`N&K-Z=}{laJLuV@Zu1+4tfo_o6N
z0v_>uf3G3V`CJd~mU8HRM5npY@mYMGkDmFAhr`HvX>s`$-Yqe4QT7h2#BsTH&_kQ>
z07Zv&(Kt9J#F)FscbuJwC?RhWOwhuxwIn7Zfvq$Z8~Ni$k3P)5mqvyO$Oir3GPKbS
zAP~lnJNf<wj{#hBr-O;b1y=Kv>GzBM1#~2(DO19~9bL#C1te262c6B3*<@vTDjW4y
zdQ6V0kr8Eyv5_Hrm#u=lyiYm)-GV#QAavK_&xQ3eQnQlj2aIDR3;Qo>U}7q&W$UG_
z!?JZfPWDTeFM*6&LQc#G-214kQMZ&ag}uFf-~ddlO-&^><B4G@mwgCXSC;!-K;cCv
zqMrcf!hNoKuz(fVTd($&h{I+bH3AE>_P6{!{2$JCf}YxF=3JvB8kJIu>1CjFP^1ug
zY|eKq_q<KX&PKJZF=;J=l>j+AKn(xf!~;=ZVUS(7;nh^Ubo@ht5%UiK!c0z%g@gR9
zlIdv8Z0{>iYl3-rdZTt&)k~a7Za}!e2m8#3FybEwTl9r-9$H#|T9`vWVeV-A(DDs@
zJeXqduR6rBukx>g-uz0n%RAecA=#iHFBFs%)271JS?I3iZ)HK8v-1qZgn?)99+7aL
z4Qxsw&vK5RI`aWPBWPC#rn?iyj$Mw)9}qwuN_H6h&Hmxqj!qYpC``CRtl&r|BPAv+
zu32dys-Zzx(%#xGFN1dV%9l|G)@rjYx9<E&o1A|>^&vRx7oAQeB~oy?1Ab>`DK1C~
zTk{EooSBL1>7~DEnby~kA9zAWZYp!`#!Vc3I#iV5txe+rHz6U?-FuRdq5QUgLOvqX
z+VzF`@MlW8P>$}7mQNba-;dbsIXF21QTRMgN?a1_RKL?9|E?)F3Gt3LcsRp+04e_S
z?uy5R8If6pyyIqSRNpoOT4<7YS87%WL{(6r$_NUJi&H(Mj;$Vo)nm3W(;a5hCMJ&n
zXaZkTh|5AJ0+%z1(b0!CAw~xo2Yw*1veQGCL<e~l0%4QgY@GxbBye1s4%ZM!TC?4T
z0X<V&Q&&N5G6O`1wh3{pj`_VUL8%~=Lv(|o0U@LCfRQz&Gvfo3<wj~G2L0CV5iF*q
zkl`pVSjuS3AZ8AE1~^9?IDRRe=@>OuAMP~(Kw0#;+7G$67)O&>t!Vb}(q0Q0`6W*a
zK*X$jFsi&tYU@;W|K#wg7(|i51uCPN*NEu>(_`?2&0fj=IPnKY8ZY>k{Q&Mbg>1Xi
zd|sKW`S^LkqI;>Pe{$VB0m6MC6do*;sYf=Sk1j&WG#JKu9^Cf(jwlI!h~r52Woisz
zyz4}m=#6tR`Yb~5__(zM=}kMi@Uj3dhH*SjQ=5+#k02tDy~8e%Sis9$kpaGGpUJ|H
zyLYZymC?>^VN?VFbg%a772Y@25gwOYTH>+z09LTCSeTT)#4rqeg#KL?9avvKN%DAb
z<z>^pO-XI3I<dRDv$K`#{K484-g|mW`n6|j+vE{&2?Jc0wQxxdMz=d?8sX%J_Qjgt
z7pQE4;@Ez-*gdk)DdlJ9ah|4bj@%QowI`e)&|<y^QLAv`f9g*E)ol-p-Jp7RWmg-P
z$q0o|kO_r_hCx50c(RlN6mvXMV!qjghS$H(d45+TN4T`PwfNgCPf1E?xW1VU#8~Hf
z==?1(D+)vaN(M=FBM{045MHN+-Dk&3+b}#oJGQE)m)eOTs-m8+K9dE;X1rLW=_iTV
z0YI0($cc`Qj`s;D@TS~YndGl!1v~9R(YYt#XZ+@}v}=J}SwE6=ZnnU8{e%tw{MX+7
z{}Be3ISpbgdARrGs=e!T$hQV%oIGo>sxc6G9=dMr!DOjJIypCYqEga0`WbkI-Raiz
zIU$1`^uOr%*}#yVK&=Xkh(PYG2i$;n3sA17kS6f3AUSZLG|nFsm-705b6d~p$^7R5
zW=CyWw!54a!!N`Y@`h0B&O<^hDlV>iwd{)n0wzES@uXpH3#()t@PoZN+^wk9RaKp=
zv>${5!8ZdPA22Da9PWqi;~+|UfU2y9UDeRogltJ_eGWJ#NdJE>ff%#T>yqzraaF5o
zY2}0$B<E)<xBj(_D8<Lc>#&JUOU~wN?U)bk{&-9XH}ag}yrh@%GEV}xMV6s3sts56
z1%`uh33r?xIAB3xA@WK}DUr6!pOzr^5j+FkU0Ld|e7DR`0SRlK@B5d|A*7NX=x<eO
zj09)hfs6GgHA)&odQ9h4$K?cWhl3AO$8el{NJs?=h#IRYTwlv>(KijGPX7SIgS7o1
zmgD$jwQ5w#|Kp2~3f}@lgU8k#p4Un02`S2H%gI`PZw^4&QaX7WEr~xtPRMN5SMEFy
zLTsP_{e>Do=APX2ceN5S%Nv0wW2S}?1@L<^GJViam{frk))b&8<L@Fk?4uXio;*2i
z)tz}x>l4xU1REV~XLWGi@!K|BWo7QuFo8Z88mVn#$~*@?KJ9I+f@}^l)lzeZtxtFJ
zBpg+uA+itP!r0i@8)^%%csRrFgr9WfLuL_bTxd6P8^$96`}97BzG}x^@RzVdG39#&
zAk$lmw_rwKgGF+;fM0{@U=w6Qja@#FoYq$<xeO{Bn5jTeIIQ`R+t+-+qh<LjXx%aS
zm7hhC@>&h;`)0K^_&(#JP-%c26BQK&@z}6R0XKcSmf~=M=WQ<Mt<Ggu)d?2)eNR+{
z0q&8B6~}MPDwmgzK!)i6Ed0i|aS@miD-)%!I3OA4eZHCDJh(+*o$YkEvwG~bI}#QU
z;8UQNgs`1T0-<@aLZ!%dDZ#iMNa}*Il?M4hKS0mPdkiCG<W<lu-tks2+%6Xv;^V?P
zO_OxqpOx7RWDZN{1M+iTUOw+|++VvJP5oJA<@4O*=CG}hMRsW?{?87{XK~RGVMj|{
zR~;D_r(R+0ZNbOK%u(<@yUY5|nNXY2mm6PZ%@Gbsp?IKDD|bOMn9sgBz(6yT8Gpb)
zIllH^iwqA}eD;{lDK9UM1`z<_5<qP?eWM4K%mZBtF=Qx<hJQLz=pLic@Ad=j{<Fvq
z)D6h(<&DFtZ@k!)f5ru}(3k9%U~ua(H6oqUdo2lxJutV84+`oPtHP3eV<i9_xXjG#
z2Z#dp?ydwLCn4sfU*o00qNHM@Ke+~t_aV;JCyD>;=>TyyS*zuoi6l*4&p2y=28LSk
z(_SdIh6{exODf-(#V!oj^KGG{r%T21eSbqi6%I;>wPiOFrlUD{v}fCY3w)8p+meUR
zTF0LyBXDZy2xNGpjPn$D1ZXvutHIN=V3+{lF_Lpp)CGl>$xLt`{19!r?r7-yZ|f}{
zs#jWk2iFd0TPqJAX#3`M!oi0_t&*9Wd)x88&2l;oxPfX{-1f&hmqoq2%<}OKPryv}
z=8ZS7-@MWn-5?HFO_5rsio<g2890kx@x82Ho4{ijczLO1WZy7Oc--GIk}HH1$t!At
zw+AY3U!l&gq1QA~NsdtxObUy63_aC$c8^1Y8CpypxW5B#g45iWFmW5%s*+OAVczIS
zHr*Sb6O`%xABuFP_2Jd-eRwJw8yd@JEC*9KymMpK#H<(&7Yo<xKU<K$fOV3h0dRJd
z6yy#LX2m;e9fN{z`8|NQ*wwmgi8DjOdj8`iz@(F>-)Gez3D^)0Pc-Tb@3Q9We19n$
z6Nx-Cx!PJw&c7|#cW_C3p<V|kBqT%zemIJZWe6Jw+kx@8L+5a;{yY;cyTj7c^SmFy
zNDM=x<F(as^Bwt&X@ZMTY<&*%Y9!<!=9iku_fjwu6LV%=!z1=$RanYU@W`eitMcL5
zh%2+re0$s!sbV0yfM8p;4o42aqW9%p!=XcmaJm1@#Qj&*&e|%IWHBEH$ymdYs!FL5
zlKc+SYlwK*EXb8WVs5>*68`)Kd^Z|{DEiYOUfW7^+>Qh8CQw=7`Y%-NtC+7om}+=4
z{Sp=9lb#Qt4yNZxgqcoAx>WYu{4@CTi7)@X+@8*@he9VYQ#3+C%i^Ck+6LDeM3t@a
z++|3BLVJ&=ASZ|1IX>zf7)~GoCy`C;@<4le1ORwI#jZY_?{>UY0=g>5eVACTX@-O?
z4|IGXAP_d1whtF*{!1X3Y1S;@8cP#?ApTlATbY6Jw;CG|&^=_f($agMgqS2aB-qY$
z8tXPD^_@GPtfxGKC4aV<g>cNvDh=j7-6eDc@)eXkQWDZ?$Ndc<kxU4*g1NVYE-)jT
zM*IyY)BSQ|V=F81(qePYD`{3c3o5~+j!vT#r~zhXW^0q<_8_N?pjD|fTFv&atmG^;
zBQoVwQ3wU!rp=S-7l4~wyJtY<AICx4|7h-$YXD%5<<M3`c;{X<vS}ArLD>7XoAOnf
zB5*z1QwNu5@ZUhlk*oSU>(ezct6y<%<Gy!ZWB{4Zar|X+?5BE9WhE#mX~9tY;si#{
z<!3N8uT;?R&vFtOo3lDMSj<;!`fXh)GoP%P>TLHL+5R~TD1i|eTpy^^6lIQ3%fFbL
z48&+Y`T&bHqoG3Zj;uLNLR+9aP;YS(>j0|<1q33?HHEU^%3liUJ=Ld>b+pD~bBC72
zuH}voG}ob_VTO<V#<Cuz<tCeeJLz=lLX~~x?&7e0{O0=&p9SNw0EYhD#djmG1@7HX
z0ohk_nDg;LCnO0VdzR3we{ERvZ5rBirqBN}s%8*>wQccfdY5?&QS#tQEH&!~!zu&)
zU9I9y+|ugzU%qH(PblDe0-UYkFi`31j7ap=Ul4KdJ4f$>(i$r4z#5VbzPQ(`gUI`u
z`0-U8a75YcUZ!W|pzPdy{krCD8C8MA|6-Krr+r&8G*tPWm88N`OmzwA?h$*7gk=t;
zr6}6ys2CW4?<`J|(J=dshvk~Q+DD6xVIHPTy`e079VwL7UD72Hg;-htgHh$tiSQ0E
zvj){l+et}_>ywdd$;@5*+05S8`Ps}`^LR9IslMTu$N5xH6Vl;(WvvkhVr;w|>zr}K
zB>DL2usAX#p?P^iC%1rd<&Uo#G2!7m-2#-I6y$sMY)A~Fdns0q(#Ga#^&F(@jQf^w
zJ^N7KR%e7{vw}JFTxP^&aJgb;FG&2*QwIbDP;&eLaj%pB7E^&M7+ipWzo~D2NaI5q
znhb*Z*{`z(l@OUwDaw2d(6>?F5-t6ona2_|7cXAwHBf?OkwJ9*=g{~A9hNuyv=CSM
zkD(=m-K|a6c3+<X=}hpYn}!&X%8}hste%{wp!Eh(EVPthFN?`mHYxFX4<s`%!)+B8
z1Kr{sje4aG9PI0jn>fW)x%5NuBFRX(<lScLip>L#YKoy!!DU*NA_HW=eGh&GwzDbN
zvi`XY<Gp(aVeU4&+qF0FT&=rLsyB4cw|wZi1MWhwASsY1pE7mMMZz^nCjO7VR^cx#
z$SS<?PgNMPnREdD;32@uOm9At5&5>?jzeBDaizL76vVdQ+elPm!P1UV@QR7vvMtp}
z(Ib}4@jW<k2Bb&gRQWwrLNOy`77d_v(phcpi#_>xo@pMaj^#eCH*VR2!$ieE)bcwx
znIenMH;BrU>V~a)U*09UN<@F8vS14r+=PB^aM8(<DgAZ~8Nw0i;puRmAm6G7SBM6m
z{Ms*f6!3y?9+eVuP)f_!$5&SuZ6VnvezX5W$XUi(z9W+i$ywgz(S7};o^#<ZU-DU5
zZ3MU-#Urb0_-Q6y5OT8GKwy9W&$xRolq`=-y`9-j9A{qmen(Ab87{`VC}!uCl}A-3
zA1SJEBu!-0pQthgDx7qrLhcp@zFA}QHwtpfrpBi5fUDHrSK+!U(J8}{OgVrdbh&cB
z``{9(%4S=yC*{*wd|S>%xn7_fh)Sx{0A5C(k$sdM*_4<|B19LB9aW%?Yu1u^k%9EG
zu;)Sgiom_>2gfnf82dhnk<a!5?Lp^E@$hWrbOF*bZRoxb9@D!OzT?(EGq2tH7Gw@T
z_Bq1;s@nd!{7&s7dJe9gcOVnkJTw}~OafQwu|9mYL_OpT_AFf!GhRtn#AsYf7~b}M
z1UfELq4K6)2Zq5|@gfY70Q-10=4Nyg6A2CvFTHKnxS0(#h?`5&b(Y9+d8j%EB&{77
ze^lMVe#X3T*)10s;hzHJG~KEsfjeZGFHbk4@$$EqAoR3RuR7Vz8HNFhWGsUv@X$dp
zfyZKkyTA7x5D_4s8SEcsWMT*n4+b;bqq4Mch(sN6oui2~?;9p&B^!25yj5oXw<+<3
zu$}F8NC3smUt3kt>~qTK??S_ak{GZ&>lgJW$}%%Ws^1>Kt(Kx-WPF51xwJS&qYRvs
z!?`LmmJ5l`6F+#RG-D7vv;hz>g<%#Xx`DVDSBEp*Hio6h%4%uJ$R_8{iW>(ps{dWZ
zrR-I_&1tKa{-Og~WU_#SRO~S_=wy8?8w~7CAD7)FCG|jFfeuvvyV<YzMVS4HdWi})
zHWKlW_GkhSqAcNm?q@eT|E`|}y`hc9*N0AXCgPh(F!%-3z5cikcS9sPE;SWd)uc=F
ztpvtbl9y$*#rGmVfw`pa774K!Uq7id%ze^c3!q7Yb*{Bb>Nr}=I38?<ith#3lMgWn
z-uU<tFtlioT%!W97@kau9Ypc9QMT>eTmf5rp;Lwv$m8ePyQyjwp$C%Hi)MDgjtK-_
zEE20N#B~Lp4@T!y=3li*MW_;VtPr9S;Nz3x1E9;t=<gUFFub=|dwACEg5pT#5cYTc
z=F=vV>9)T@HcXrx0Bxcml>Oi;bA#2J-Ma-X%|T2ARx}OWyWacPeBM-DXW9f68$^<3
zP5z7|%~la@yI1_%GHYdxpR0ID0?N(|#dnK>WD?rQc_jOyvc;nmK!Dx0@xvvm!@w%I
zLZsy~7m9)9nRz@BWevBKXM3MMgFCh&&VFq|8ET<z9#u?rx^$Efy+5f~Tdr~iDJ6q9
zZF+|O3TJt@Z5&k|yE+piD@g5E`>Uj3d0j@OJbGyphmF-ZA0a|g<Ti8--eRcHUP1*6
znF+`~7}7H^ukRmrECb=%?j9Xoz;A((<!nx}BIW4`nkj!Kr>THfEp9HpQXp;<%~@x?
z(>B(6WZA+|MI|CXu3M8sx+H&NxT(1@qE_VdTo12w_H0iPbsjZPD^%7fg+xTk>+t&0
zv5<>Himl%-{ccqtDK37fe=lq<H5%LLd!r8ynSb2lw~iz{r_;t$Kh#=abIYa9Ej68L
zGldcLb4LdmiJt>%0|{@B%*^DJv@|S2>@E#sV}0?#`|$8UKoPxjM}H=ngtB*VL_|bL
zM9Ly)V-`sVw}^hkQO7C&OrtI#F1Q2CJTKM)O&GSAx7Lw>LOog~dT{zHgu^N@72)gS
zK=u(xwkuZuFA6*7ks_OYY5=MV(7@#lR7<Vc$NPTC!g#CN@pMe#_b@v!-1Y*7+0iO0
zOwo4Rj-QfAeDna4b+tMOY5dLAbmF2GnC^K3%M{Fj%pi|^SUUfwvi?5ll!*)Ml_l#V
zrLQ&wzWEtL9z_E8y!E#ayr6@|6gF7#<-0OV2Cf^JVl#bJ>hxU7Vo05OJUM@KtGhmp
zOdBLk8yXE<MrF74MBCxazFK)*;wHrMRIny34YcZzrFX}EUi_?FlLM>I{s(F@A{PH%
z;pH%(!WWN4&}w}7scW96(<G;$)nIcwFVFIv&9E&sw@Cf_r<3~6_dPVxs`FD*zgmxF
zIAL%teHBZbhN#YD-1$nw3&{8NO1&^M@E{(^OCIwoU~U>C^Y~t(VuhE}tR31pIXNN;
zA@fH}--t<Rn+O7O2+<V)IR_(ex7{d?Vn@s_03l^jHxS_E5auOiXH#|uM9MOxTyNSS
zLg=(DAuuB$5P)ZcH{xpCXh@*Z8zVh1SbW5R7WIR<1TtBp)Gpx@cBVyg2WzXCI9ceS
z&4`=NrQo)NC}c>VR(;+cF84*j#`2Mowu;xu7ZApg(Mcu(h)g1{tHq8s)=Q~#LGE*3
z<7E}j=Q+%}lD`f!A6QKl7fgW-8?$Z60&A~C=hvt6XOmuLWLoT^VM(Q^%W*t$e5T$_
zY&-xhiU?q(YwjQ3UH+r7q2BX-42x--E5lXzU~0x8?;516I^Bo+I&s_V?eOnDbUzPp
zMt*Alm1wwDRYVT(PAv54JR~G(ZNs!`?+YEkWhG5QOFK1QZVw{P$OO1rX>XQx^6~M7
z72LRaa~UEnfD*jYxKviG2=g>#^1HQeC_;g<tp7$@Y8rBKG(EPC9Xv2F2qHrL4l8Jo
z$~H>QU|2ng&f=f|I>1=yK03$l!2a&;95}b=c`nQb!|s>7M4?9PNA@f8@=zg8&U9aN
z3|P7zS$r5G81GVJqbj)5ZA$c%Wx?wCI(L8zY=PjlwH#MhEPwWl=)J}MOK7)|cc}Gc
zdo)p)K+tGbuFUz##1H%5X8E!fS2e2|&1{}-Zt&sgIV_prrg@}Xdo|`P_5r1vNWsg;
zXS~u7&7ODA+_2Mq@(SbPSsI$c(}5P*`=dgz^(3Jc7e*&Cq;H8eGI!+K8rcEKE~L<R
zYA5a&Ce_b%B~VegJHndssB~$$JGkf0aO}SI;r2S&y?Zw-S^0#7Jp301JEpsf6Z((X
zB~TcxE9;@wj5cWv)ua1e!OO}*?wfr;ZdvWR%Hb527nkQ3mk02M&R9@h+704?!;i8|
z?Y)JpvT~OC;SQ#<oyp`0SduoxEtTKqf+_j%`YsOLV*#8WsSko!iLgQ0C8#3zSE!Qg
zcz<zI@*w)_+}CIfrWqDF4M2WI*Ce_A$eWEcUmU8&U%iFr3u)#L9ab8qCY^FHETog;
z3va@}O7QeZ(JaCY{7v#aO>R%c`XB#p+LBkOx`NGB?p9k^_)Weo18BxB$Aqp*N0~05
zN>Z$+PSbswd8z5M#lfvz2wByJr*r8YET~l~^mIWg`y)n`3PvlGw~vknO~t|ULJ|O(
zU`+9irbipIXo4@mjEu|-TZfo7ld5eI<0{J?z(DmcPaH#=8&_omLGURLZGQN*_zD)_
z(fg4p_%GhAP##@RN?KFfF|)^IA9cUWmCpW!(dFC@){Wv|P(aX5m;Z>Hg_Xs|&Q=i-
zPyPWR6Em~@s_k^CLrzlsN4QnMmY95rewr`E1Q>}1quFUNF*iZG_>t9os<0n)ZnFFO
zj1*4Q4mXdb4~=!Pbfd5R&D99`S=2fzi^8lS`s#wYuGTgzJS)r1w#UGjjdd!2F$)!8
z;O%p&DM`Zi;7$E?tZUaE!a?bLD3g<<5w8JcG$t^Y@B41~f`$!gb*D$X`iniQ=p!G$
z{41-bEsFm2*VA)5{D}OIb9$>|Whu9ZV4+nBCdT1R*_0q1p)k$ce&;+qCK6G`ephMT
za3_KrEF{j#Xn9=PUPw+1`~)#oIipQA$A=`O#HEJg9$Z1O-dtelB3Gv$OfKpHJtb&z
zAbIWxg6hNa=Vx5rxk)J`*WDN#A2PRb!9NaPdjoeLS)t$HXn0heOAHCu@Z##~J%t+q
z0-3|=j8kbk8xY(ZDXXV<Y4=`Q8cYD*^&@4#JH-P`c-uM|6cf~{d?cxjOyy0bGBu-x
z4mv%9k05*Lc6w(^cl-Pdog~)1<YXXIMVzL*t;<%F7L)T9`j|O^a9Df@>Do-zD?D8X
zvFc@x1o9XDBTj2CgG*Lid~@B7h6eTN$`**oU~2*!0*Ib~^q0+vIQX^6xDB=kh6V-k
z4n_d;4+Q9af|P?M(<QHvBY-H-KO`n`oIn2pmR*J;{&)qKe)liE)#*wZe<_m1WNZY6
zkai~k6WCgs^!Y!$ePvjcYq#!F3{W}@5D-B^Lb^jhN?J-lK<VyIQCdmq2I)ph8tIbm
znu17|baTdZeZBX$zw7MlTxb1SKNMl|zRxqpoyJIGH_}X%|3_#rsQ~m>J3(ue3*UZm
zhlIL1&qJ=Cn$5LgbGWNGBZ_C*iyz!~^jnAS{=CTH8uWW6$XdlQ{aSQ6^H)R!l}wD{
z`bc=9w{#rdKj_i#VLVf25x^j~UmuBJPZG-X44nl^d2Aon7MiMTcE$8uDB2Tx$Wfj^
zY0G1m`iqS)#bm6A%q3E3*>E}=kM+3RqPOnh&8R+ZlXJW@<P%$nq~CYqk5)MfurTT+
zL@+z0NKP*JWAyi`*g#>6Ph;3@@OQnqh$kduQIGd|dO%i+VjO@sFKe|4zIhz%CqPyV
zgsb9f8<w_z8xAC-Sq10a(e<m%t<BE`Ahx~elg50`#V}JjdqEt#+*f@N3qtw8h;c@l
z&Os1#KiirqDk_3OxWHRei__!lp2?`dZ?P$*QVxU0mqRG>P1-T=!6bP;Ov7`{=UVPa
zenyedsuQ@%pS=W@fX0!lC%)Ehu^fhwLF2)qSIbW0I}4`JOtu*L+#UknPn-}pNq-1{
zh_cS*!2N*Xz}Q~rwS3B84Obu$M^AV6hoi06M*}}iT>vu8A)pOT<P|NWUEzYMZ&K!J
zCQpS$QoXCDl$7hI)z%N6wMp`GoOSFbxF<aEvB6&|(T|jbW-T6m`Sge_4H-@RDBy^#
zC?XA{A`5Mnobk9BUOwHO90SR5Y2ovWvPqTnFovb4QP6lZvQg5LCnQ8jANd?H{aNOf
zGh4~8NT2|2sQ!kvwYAu8+3`^GM&jr5VbsFHrUVnPUD;UMfGw@7SE4J`er3Lm18DN^
znSYbUUNLq#_RA}^6?%@lW77V(>9nYknShWc6s8l)$In3g2#riQ)Zpys<O9hX+fsB#
z*SC{}yFb}NBO;V`3bj+YSXh`%NR+e8!$E*snXpf<6n#gN_G40%%Ils1Z+(Ca0)am`
zTvm(-uge%+8vEvrFwdnyL;IEH)m&kb%Ern{*v|e69<T2e$`HeJeDKg!YHY0>*&Y5y
z0OfbL*B`w97h#=EFnfT~2CBK1p&2-PyX@xe$EGu>TssPIzaOw~OhaVif&omEV}F4-
zO3F-!1MF|+=lJ=FV^}<RNdJ(EN(K3YXtcn0bvoi+5t8<ge0@aWuo0p_@ZH6M-Z;GP
zO9IIPQ1CVXv)d;cR=KuQbo{W1@<E(iw+cGCL0p|X8=v-%EW}5P9y)63FD8Y^*m4MF
znW=G;Jj#9fzn)?8j<9l-9)t5=R`z3FUS4dssrhReoWSgu-ztC$QWt|uDkA$8zf!8z
z1@W<~d5WqTi*)*jHPmsc)r*yjUDnHri-@Y382^Y6#a<3N@KoKrsIwG&GOe+D#6Wt`
z4PQooBYu&;zVe_4eG9AI;Ha#?guB!nks|G)J~?2wGJ?aBt5m3*X+GVvzFzIH4mCKA
z^k&BrUf4qJF9KG2!|u2L<h62LEzif{MOJ7R6qqNG)b3CtfK0Z+OYla2z3V3rIR>~a
z)dy?+S;YyJ-YsBYEIL|SE&)-)`|4|)m`j_S4ejly-jJbkyGI>j5{j(%a(=W0#l^-d
zW~;H?zyE6Q*=UsJ<8<{HE(2wh>TBRROJa9=#2!~+%G7G~p{}kjDG32Bn|uW>^IVj#
z;gF(ND-)LzFSS5ObPIm+ox&6xPs>OjF4Vg4@olRa-{E&V*3~l`&d^Z*Fk#i#Fcy7h
z4QacPvfT~h<B|R*1uya}t1%s2(lvXG!RLcMnCHaA*f)egqW4HpNK=y^9P0Gzn@RaC
zevm64Tnnv_o}Qi{GUQx$Cp=o`E_GO%krq?A-4hubs|JmX;3mEzgi4l1t)Q5YR(W$F
z^7A9M(~8&9>#;(@4YLi_iDE}320cPfSFT=rkod6U188=kM?qX1G8|h;n|-4ZkTmZX
z450CFp^^n6v9`>3l$nw74GH&`iv~!KdHe2drcCViw)ZGRyhwlRrYIYaEY4S~90(JU
z)R&1PTk!Jr<_feoeo=7=f50%4sWIwBo$g(3Bh`WDVJO*51`F}G^3@XU1O{uYSe&kU
zv#Wj;+~s1WU}dA<Yx2cfauT<+eD;iayDiY3nVng4;WNHbdp4Z$G<a0E70D#tc+R_@
z?@9*~9c)hH*+@xC*Vei<mmb7%VCxDgo0>yTq>fndx<0}#b*C9jo1WN0s5Hm;5>ygO
z(gbQ>Q%c^AzL%;%22X;yLq=A%_k^00b$R*XF}3}#)2nQ3N-&;!rKasvbK6cAyS264
zyd7%KGj|J*cn2;5GKJ4+O&DtR_Iv}7hFT~O?IJ<z73LFfrC;!zV4kySFZoS!SV*jR
zb`AH}DMaKbB^y0b%zN_<_B3GhXU>krIebySm(i+(HemO4n1=G`HqIf#Y6lEt5`130
zHGd~3oaB4TKfg<J06hZ|vv83&uC6TfeX~n9`KHG9Lt7__*Zl!LH2#tbR&dGQ@z`0&
zSLZO-N6=GIos+iWo|d;rYPh<&T0OXibsE8rOXd|q`sTqh1r5z3;9AJKDa?hG?r~en
zQR8#6FN$?wvjhYNhMEe|3%dF(FJ&1@xC2X*>aI;Vr$1u*LVOVWC7w;GU1?O_3+LIX
zqjR@oq=%P_MpcGiK?(SOHMPi)bKxPWcDxSqXMHcWZ)`g`ocEedR&&~l#P|Ff^_(m>
z#jCsQC<H1C9_K^xNqe*Acz}V4h)kHwbae1=?>)$9<KcpKD_ZVHIra%^=2TM@AD^I-
zdEsjWq=^Uk`+J@+o6cL()6<(a=2&S|t5M^_$)wjADVT+slj<C}f;vgIGc~^Bc5*;(
zuKBY41|z*{o#M8CQDnY4yV(eSBKExm%5SlLnAq@Sb32{RFF>x1`836&%<Z3DzHX@1
z4hNc|&Z1BpGwbgE(5<Fc43miF%wcLhT8^3#%kV1NQxqP%a<Q?S%N2DNwVI9))oV)S
z)SQzXPOmaD(JI<L@ZN59wAyWTGjn>jb~sBF4+E6Gw;pT0bnU#c>~{TJXxD7eM|v<*
z3JV>*^qejYezcHONqIL*m$04Y7RlRM)lPhzoOje-uP)GQpP!1{TqB$`GB$oN$8vZ;
zhN>8N=*G#~Tqo=yINngATI(+T>{%xOc#FL;zS|Dw)0pU}HFH)353cp6>M?YMpylfr
z8d^dUw1<Gl&=2>{>CH1l@Lq%JGDmWK*Y?BE&`>Bla6DZqmNtrm09*mLIse+k#Kd$n
z(45*kbvAckQ<F9|6;4-SmMk_G|Cq6;!Kx(Qm?)Ms4_+H%`wV_{{(H>3J1gHzEd3)Z
z>G<4MSQ}r2n4Ebmdvvdlb#t-U?d`5r+w$8FVff}*Y5e%ytvB`5pq=^P<3^@TJbtdw
z70bmL4VKJr;ZHa2UkXmN9PA(N9~_*l(ot6%c{g)M-+b`q-BP1feW~!bsh4+`pnb2!
z^~!g1MAc9G0ci~lo$RiGXgU_G{O}?=&;Hk!`#(l$7T(9WiahE3$PGT~-I*sfd5??5
z%jbP@E%hTl9v-<XF_e+t6}l#*KM=zxUs_tm@8c0Z&xuKxm7o8!YCx%-qwnD_t6y?N
zjR%)fpNWZ4fn#9uqf}AdOufrRgqD<Co?|f_j;4c`KLiHi;o|9}Ufg!_dK4HOEXF?<
zhOj7tYe_sMTfXvhu*X;ajx@QxHnCkh+qc5P@GW$xqH0MS-x_CrT|v=ICC*+}T2^hh
zd2Kp5H5GjtMI$UYz&ouu?J>Xnc?1O|<wCbt|3g<cxg@Skk#=X%M_e=#+}8~*y`^Jk
z-*>@^M4n>zTBM}-MHWrgBO4IrU5`PbmhzRXZiXL>na;<~m&uTKq+!4ci^K&ltaP-I
z`PlHhVQ<?!q4I~nPWJQ~KJpqxC1Xw&e}Md-&`Tn4LSPH|p;Lz;|D=%alhCKg|9OBC
zKmmWw3;XV=;e(E$p;CZx4q2F(Iw~DNkXWu~>TMC=<0A?)^CRUP>eI#0sHn%URWD!M
zKz`LDT!9H^Bl*V00xRS?SY|x<XmO@fDR*i4tp0HqgF?9!oCDs44G^iXaQg)5q`2U0
z62(+eR_-yFy@o;bvdZ15KddG5aeTIVeIoKS2;n{Ie>zZGeW2ePZFjc97USaLu!-d4
zmg5J?(}~zW!y!|D;6BN2anhL-Mt^TVVV$ghTa}Z7qSP(d-pyrSwbJ#cpL`SYN%5MO
zkUvw!y;2!Z6=X48UKSA02?Zf`c6KMbO9^5};2#f;TcXoN{Ur9md2c%+dc4*kiTZNp
zU$KB-(ZKa?dOFd-yWZanWRo=NY*nY&8myjpv|WO14C;HNr1h3Fm!Tp8dMAhl?5Bo?
z(w+_H0Me4HQdPI>Of%it%~e7;#`eYI;Jma$p?JJT?>&=@&hFmc+3D#>zUHdcG<h#m
zhvCp@+d;@=${!bRhDuApD2LeEiso>c$&^jX%gdiAHF+=3gGqRY2=84jq`C$92lafi
zCbh6&3I&-%WNT8&L-<A1J(0HyTVRM*@5~w6Lin(incTpT&v!1XAuZ!_S;%uckrDLt
zgz)mPZg|4m+uOaoypoe&ox)Xc#OHG0b@+nUL;g%{Z-0GUJ=dNd1qEd(1$^5;K|kQ6
zc3erLd939K>;L3Xx771Ev%8beB53JVOLZ4Y?`q39zK9+)%=ED%dO{XxPe?xR-z_>g
zFtE@aKbWf2RkC3a%VADgnA}H6%jw7O>*JM?k?wxDb%_rP4O2!!;#QqkJoJyJzt8NA
z4LZMxe55))!X1{KlPyHcX=}gb{OfYu`-R7@XDfEj$G4|Ko4uNMcQ0<^SA&f<Ha6$&
z+qv0yzW?R|PkY_a@c-iewlTr~@wUZoVfSuYZ#*}~*DGjOQ+)Wbj@;Up6*fSvE_D7x
z%5r+e4w!_Sw;tacL&)EUA4GfuIfqEdqh+8rO3hJ@fH4g7hWF(*SPk{MAQw02_ig;e
z_4H6)N=)qRaT)=^UGJ=<XrIe*Y{a()Sg(vW-!mg#e@Gh%nRs;`N$#I~f~91hMShGD
zt_#S?N!LSL7I^w?+nkkwK}PC{P6uuK;`C9C;CG9SJT9eNB{p{UTgbOMj7Q`-1^7!F
z-0rele~FB|#r}HuOMwPGegJ@%%z9n-6~W~#S1W4gwI1TMv33Md%`J|{47zTa4Piee
zB_kivL|Tkj=?&^j&!T<pHyX%8yLX>SfSP&<I*sBWp!kd3$E^6ysK=!HWNQHYfdCY;
z)xAz0M(+OFC*d+p+eKJa=s0o2w(%wtP+&)|4vlNdGpT4{qnM7=#N-(3ldcTqqU_Ls
zi{URH+VJ%XDlXZVHMYOX;zr-SdzV5`Za(v1p;xQ4p`bV+BST+JZQ?t^_r4t4+`()g
z_6g?MRXvnm{k>y0WX^hTVv>LXNhhMxj)(F7RzRDQ-yJPd#D9Nd)+W8U0DIgq#?t0z
zR|#F+`48DFBm&N+3KQ_vhGml+wF@&d4U8rSpm-$_+y_4;qXc|>wW{ri^?Utw+G-Jw
zq}DuBWjaywy5m?_9j5pLX1|`_rp`RC-xXM}H(iL2sd9GS*Wf1QS@97b`BGq|y1;Cn
z%Ay-{B5|NVC9}Y;u@xU%W>~iytVb#&&=6#;I=@}$dM_AW0ve(A@v$-dr9b|MJI>F;
z$jHPE{err~>K?0{x_XygdTxk?t*zbMk2$igZB>4QPfqWOJ_QBI0OaBR6f2$rMHt0T
z2stAkbz~v0v3e~}O!*LA;g7Qa%{{jG5BHdIo+A?hf!-3yQkbhE9mPXRw_pC-yoBGd
zz(93G=g-vo)FVHc0v`H+2Y<h|w6fa&zg$~#6mIm8TL)g&+!xuYTl9THLobVsy~Dzu
z_h>*qoOB#pzI<-R7Z|lBYD8>KW1^!`wR}H+{(RU}#l@pztRKljN^iVsh&+7SvA*>(
zgms3~50-1F&(bn7vMvp^xSyt>HCFslmG(TMQ;wd?VR?16!g$d6YwFdx3=y=O)vbY|
zL3f99q-keq@33o+jlVZgDbTb#9K(S!2?=*!8Dg14zA~fL3~z?_^Yil*M=XooQ&l#T
z#UI=5IosYwUU{TZNg5Op<@D1<p$S_AhqVWj<xcAE?po{ua88$+4m<#B^kM;M4kEfP
zLRf9VSvbz3uTk$TeaOvQ;8JQhkm_>#dM{OC?aA&f7ARlM?2Yfw6x-|}UNh?&8?lhn
z>Mm5SRZFO{<Eg0FgaXb({~u+g%Tze<AiSo@5s-X4Hdy1mgMGln$O<bKpY_rf#0Z7f
zZ+_Q;SX>24Df9juJ=lGqu(;a6?nSLRAOy?r7azxq272QRG!(p6GoI-CT0fetQX#Ly
zV{`MpypHJX*k5kUJdZa&-kb-aeE9G|v(}a1uXpCvG5WS(Vh%R8?B`{VD7sc63Le*L
zK07d8h*!l}Bb=&t@tBy;9y6W!+;S(A$?^@9hr@+=lPl~XnNlioELG{|?s%OWl?3H(
z=T>MF5J`6k2;5+l-+H(*lDo=l#rxJO+bH|w;JnQ0thMIqltOQ&_5)A_t?yX;8Yxhx
zVrFKhW)yE%)Nx=6AtK>u#sMyZ6pw`D7RjAEV@0pu4Q^zHA_|0Ed^e`yg_`vQGjo~w
z%p-bwY2+ytz$`K>vC^MwU@2!=KXb-iw(8i_B>Zbfm>1>`r=1nH2T#eqew|*cW{9o;
zF`)UBA(amK4?PA+`ByV*PB4Q)iMNlXzn|Y5d~lE;7jXn!_RY^AoN}4d@H@~lE2B9T
z7QHiSWhQs;+<Afp#k{Yez}3*<Z&$JUaVRk-L&PH$5Oj5P8?iLUZxu0S_RC<bvcC}`
zTxVT)|4t3|@cB?Z3CZPdZ-$#)O4PyT(7LSiz3|<3!Pkii=k->*T;)7dMFgh8YeYIr
zTH@A2Y`u41=+q0=Mx@o7@1Y7>z?89m);hVi!<bTAQ|rdRSns*}R7hUl>d(cy#Y@&U
zF*-h;4vrKuk)+fW3O?sU%V9MY;3@k;`rr}acRGFAEeroiOHP*St$NmDzS^0H$UQuO
zbTrF1Ra~|<8p~=W%HO_>y(m5f3<7GDf$fI~bqWn972g7$^35-fvkwN$#iq1Vb!KYZ
z-`T3EaZe=!Y)gK2I=(|#X55&E>+Ky;Mqu0OmqKoisCk$zCL)sl$u0AdQtlI9rK}g1
z;y}$0?(y1_y-@Rwo^>8=fqthk@qyOh@*w-k{q<Mf_p^MZq2Oc@?Z-}Zq_Ua1?-gIg
zJVklekbC;FKshECc=3ADm+FST-?_3VDD19LudfkwX8jrK<TM%g!^1<f_fb`c$A=IP
z@4VHZWkimAtu9gL$l$UD=+tX%6_%IpgRZIV0}*X42jhK4^&^1_v(33a0y361t?TBK
zpQXdFM8bAH>H6JmX>Ao}Pl>!=(rjz1SV|%Ai20eYu&|WyRCg@qO(Vj$Cfb<0-@*ta
zAII|`>SgQYo5U!o9(HvY<lKNf9?34;0gtMxDj^0#6C?5)*Q#j^R+;5h6og-2^xosL
z)$KnO5#o2;-Rcj}qg~^fd>=<fmcq`?u04@aYG-M=wRj4v`fB}-nd$xZ=3PgsMGYQ%
z5iybB0)?)1uQ**?<T(Y~tX)_}Z|v;qDy=icH+5E0#;vHDuKGQ<)xE}>H_*P)b-WY1
zPf1xWHO`DQ`dM2SxhBWlhfWnfM1=<e@@9lh$r@PA-|kegnLy^h?>4=9h3Q1z@;4%m
zbwUo~fxM3We2>+9K<Pjo+}YJ(F;#`OLeIcZ;Ci(EnzV6ay4KfF5jJ?GVa1j({+Sta
z-$4BB>v{K|9*BM*taMJ#&B#~?NvZ#-K_YtF^igkHqMZ00{6>%Tyk}0ej-l#KUN~mY
zCX+wj;S}{Edw=9$f$+4YRj#?CE0;e}cJZQIsN45|-J}2V2XPhI3ddh_a|+6SBkN<e
zgT)t*E6k^wDS25;h*m+cgIvF!htuRdKzo1e7fSBDyM{@YT98s~YqhW=3OlyN)Mp9A
zlX{tHZa`u}cyz?hHzn>jx7cq?v)N2YEjx}R&^@$m`SIu}da6j*%SbYt9Uo~QpKAsT
z@p}h5V)N~1;njE6F9VXY`sX^&XsR!j@C%qrzYqVg%r7;in?z+w#iP^gGx45I<gZ%h
z$lT-EIBPu#nVc;kuAbj-57Hp7hJ8*rm+X<l-U6GgbxhZD)W@0qI*{c#{7D7t#WU2K
z`utIRU!8!Iz^1hiTu+YgYx-J`<+Q&$?uYOtxAqN5oy^vODHocYpaNOF-d=-bFgiB!
z2AZLf(Or0C4$jZk?v}Kif=18DW?^Hz{`L%kaa~NhyBA&4@_xQLWN-})vqe_X1^WBr
z^opQ$;oc#p#2%TDEL4%x`29gPhkksjwC!Ie;(t9cv9Uf7cHJSLM{){hcg~rT#3JaF
zw$G{$xCGX{Cz!p^y}Hv_aBK$$M#2iFtoojqnbBuqlOdLtRv=|l7y&oCzrTc|qa%OP
zo}gm?So59!hQq_d({NuSFJTHY5wuv<`^}N`h_NwFGA1TUZnY|k2_gPRN5@}r;Rr*-
z6GqUU9G(y?VSB&j=T9yCgm;hd(dlGbMuyPpD?S-N+4c+hFkctzk!zpzghItt3exkZ
z^IbTeCPUbAiVIZMc)5mzM~9yu+3abd%sCugJfaN$5a|D{{)MMSc*uPnLNei5Mzqh|
zP^=oBudDy5xEP^}gcaI3GNb)FGM8NQr*RKUD2_xF6v$aQn@1<xIy;}qYRMumopvl~
zc{j@CBr4d*S{4_h(BK)|ZW8|AulxUYZVKDVr%^9>xpV7VzY+mKgeysE{wK3nuR>T5
z&COS;kzn(@?}EW?3BcxzCJXYn2=3e=v|Z5_a38obtNur*V)ipVNYy#TCt<gC<d+2D
z4K1trgyTk|(?iLKQ|;FvOD!WBUFR#Z0ECG4<weL0n@vwQc(;jpoVruQ9DWa|R!8F^
z&tde&AR0&0@<h1QL*3EO3*X^wsIN`a`*_RB%Ib*56fsVME8R}&i$xO4Wv2he;|YIP
zp`FHHiropO*~H{TWPw6OP_!!S!Q6JM_U0CdT9boccx@&|gR+2$Y&Shu^oV?_q2V^u
z=;U_-KSV}G1_>7=aE`3EBOJCKlaVVQ{uK*wLph_tqpUC-{_NJa?~mp`UCo`RS<yPw
zy$iRN%%|2yRHIj;jPz_~OWzTzL%EZGBO@%=N-}#Hw5sSv1pWpc0A&#n9IVA@;raG$
zW9M*g5GjwjvGMbC<6)TbhG{jloNL23hW|5ouqh}V&08#zduyo#HhgVNLcV!>)J{q^
z`h54ZV-8;4g>Q)m%Y#(3Cb{hE6EF&M{}YTbQ*4mg9h!<FB-jw1ic107bqLZM95_E8
zSNpK^_3UJf=--V)rvGUiLS0TiJR(c1<2$Kw+H+3nN)7q`-F#o;cDFkAZ6Xfy(vQWV
zznG)ass9MYA-yf2H>bPg^RKu>1kl@fb2`6HMfOaFCo2pr;D|;?M^E;}+z?>Y9zrce
zc3VU}u7OA_Gh=<q<*@$|me^?#q}Te4zTN&gEuG@}bDf@UE^JqW>0VZgDJf0C6lrBk
zY&T2{G-+wcv#nVa=b*0{X%yrF6``=OUkii27Y;u2sd@+5ZYDOiz5RWh!5NF0Cn0F6
z#g!5YRDr~NxA6G;owTj3KmW$F-2!qxLh*Hzl8MIf&~P#VLt_2m{4YEv0X{zB^3HO4
zb*xjnKjKCUUbfUjN{ScC(6^Mh)n}uzWyT=?4)_T@sL2@_ImyX>a^bc=HHfP=#_E1R
zC7XCPvDJJ3AV`V{453jSn7x*-RZX%C8}DeA5}y7r%xpzyCf6xP{+l^yQ1Rc+LE{e`
z+P(e}+?c-hPvAyaV`X4z(Z^HNs&7t>hjAPh(^Xb1C+1vSzb+UfzgN&}uFS3eI5{3(
z{fgp|9teoy{PpB4ZiznXpfmTc^%D~l;FKa^G0)qbX?W9M`txF{y!O4Y%G1Jo9>iau
zGgN{fU!o^Cj7%S&h=_dLOYQ9;_F%t!e;6doQG<P(3B!uTgqtqS2(`eU3wUrzWx86+
z4c80)Gf@oEnD}rys-)~kV40w&mlVGsGp3yPpT~J<NC$C|H9Sd^;x{kxra(auF`sLi
zSv9-1jJUX8U|?Bvd2uls8Ya%*kA!%K^)Uis0;Osh`U*VrFp1yOJp)YlvHT`Jg@v0i
zE{2%Tq#nKTte@97&)-xpysg=XfvPV-!h88ob^_qgsE;4t{X`kRbTa=ZJyGkn%HDkI
zveXYs&O-H)eQ-umBR<=8WqgaBsj(Uaq!efhQ^aw_4QP@Aq9Uy({<JkeE_vp@$=`7l
zKheFlVFe{=CA#Gw>wMN@;<M_I3;9kNu<BsLS18p!8&tAihdRvCuBMt+euk2mrANEk
z)5m*H)n(eZXBHl-y}?;tS^krq=<I8^1RX`tnFr1^rKA1``v}x1{FO5l!5!-Umk~yR
z^Pff-OTqgNtwE=Vk5ByGuTNE*ER@C!{L14|eYW%)UU~W+_yOSsU|Y~JFhFUyy15wK
z9(qFKP=DYdFoI%`j(Bs<&=vJmRJ13W`v-*4v8S6U7iyjD`cv&g>uM_2pXdtnmCm-U
zE%1Ldt#MhceK{c76gKyTYMro2avuA@HAw%&%J<2d8jc(7>wry4Hi<isQQ2x|?msXR
zchokhkoK*ZN%7Zo#C)?EpK?ECW>(m>m6zsSuVw0<%DByJI5_eRup@|=^ShSFW24;N
z7CuvF*R`G&S5?*eJSttzXs(hPAn#92S5m29O%)_WV&CF8Vwi#-FB88qlb`d<%-pj0
zl#y|*Eak?KqJWP__o6&pc3zudJ3o%I=!M&#v`ca0Q3gboN80`jdUws(#H6yomS7vh
zR>Jiq?~u=y+ncO`{(gS|sM)ioMAhyG5InvG8TV#tZ;FepgtWD#b}t?T1AYtIr*^TI
z+b0;mIRaL;M=JZj9*<GQ;NLht^s5V!u{6xuvUv9e7ypluA6|!Er=(X;s46C&luM1#
z4@8(4nK-P@U{nc;h}^BZUiGy7I!O4JmzNt4D8RaFpl?o2kIfihE%QEP?}MWC^DtY?
zE3`6VrlxBLBy`Aumop$H+BKkObb{VfKr&1V)NMlVgk5XhKsvCyyN7(ByiWV@hYiBc
zoq#n~p;ISA?uGM<Z)E-x^B_k7OB0z_`<n;<g}gXcV`XIp?WJ<@bCFqr;F=m&m>>^T
zeosVEhvTDNfMJ%JjVd4BKu5>mwkswTFnYTc%mPdz%pk6}%=?PIrmsfbrdM@6Zj7ng
zTSbFk9bnA=6>ynUIS)6TE!s52@{jCogym>my=--|q!(Po5T?$6{81=mk)njG+}vJu
z&R&>z8~PaGK4?#Ag3U(kyzZUHGSQN33}dB8Zsa;oxvZ4<+RX545IAM%XTYIuNyugo
zm>|F#8R;1q#HTI^&UQp><t!CNci8mtgWO=^286NY`1)T(3roXYD)0-xxkxW3C-<V#
zdH9!3o3ylaj$%F`Hg=J7`l@7M)Ie?Qf0ixqWyJ>`A0Luf^Wc9c4T+6Zu6I8pA|ct)
z?>*UF{uoiF6lZS+tO)US3>a3w&HzW!_Ec<9zB0I?B3c}_XUQMEeaQJ(3wg5hIq#uk
z-q;we*2=UeCL@MW_GVYkhZdT(noFM{)apx|+vwGuTaX|TNVKkNs$0{oM|0zeE==dL
zF`Rdi#hwoUd?6zvqo%&&flaFY@PFnXF0acZutFhRAyk3J#l}cf>8iJuKmYkm@)msz
zmzhsA9?7i*)`{%b)7Rw0KP9xz^F4?O%t%lF7Q=P@?PlId%tByX2Q77J#|_NX-W0MF
z0EI~TU7z$ajfIEn&PqaNF1==z<8j{dQvILg6HSf`vYu2W-%d$E<sB$%&gWniZ9d)I
zwH<o|6gS`2=p|FlYHNZE_tQfhOgRo;^8%<&8p*kPn}{|N8SeRaR)ThOrO&QypBM@T
zo=&X$sY}^*Lz!8K&m|NN!?TG!abz@sXnrhXZuy_00>)xdbYiQM1$qfSpeBjed6cr%
zuEu5vwcHq!0*wR*$L4flu&s@QIYLkXI0^Fq6(^xYg+|y?jCg#gqOR^T0P_6Sz=#>5
zJJ`|rr%99L4pvJ6Au&G+Q7X*FDLZ`4<&M{cB;@`^Ry@)72kF2Cl%qcQ1g~W?>zs2*
zMw3vi&-d8qPx+r}bz25*F7_O34q8BoaEC+(ME$g@$SakV(vh9{W~t5uwzjnRqy6=M
z=Gf|8=!sP*Q&WP>JLJ?)R*BTGKs)c@@$tq~9m+ED)W35mIr9^7T({>ud(~SPWF_0*
zaiH#vUZMO$O%1P*e39#Y9uhuR+dsJrIJk+lyM~5rr>-p8nT*uAoM8S`FE<}ARUL$`
z;0ZSKp)}Qx>*^OH>X3K?hN$qUkBBdJctb?G(ns4roA|w^t6iY+tQh(Wa*T7dB}gqc
zLz_ew)?SkYE{IA=p{qGvZ17#SftR={i8mrP_E8DNHKa7tmIuZGnObhfBruQvJ__e$
z<Ow9?Sja_#mikM0y!@(sS_fKUdWit%t+nc+goOf@63EpN-uOU#R8QrJeS5OfVHBXe
zbOC>RD#`GdzrNhS`LX(=x?ArqGl#{P?qB)-3y26kP}p$aJZs+mJ4EpB82|qQ5-_^_
z6G)J(!z@NoBL6}QP%M0o$1@jE=WSC#-{M&mRAhVWBo}qWrY+kEN7)#<Ubafx`lS4H
zA2@?*cPA;8l3U-R&WqQCm#&Y=GrWI!9ufQld5VjmauE^5{il0Tfi$@soeYJHWm&4Z
z9=Q56T8IBaVkkgV<8KxN1qB!~Bwa6%dc8#Nm0<|WEeYghvo)0Ua=Z;u_{5i5JTaw%
z>X@7RYf4IEJ;vO#kgM3FXur^o1a9ohnwR}VSNz%&TJTa*y&9sqTLNw?$jkd|crxH@
z3qmG~v-2f>i=_Pi(>JJU{F2%qnEIKJxWx93e0TG_f^FT1Iohdrz-elBHV)yvxz%+Y
zJ-zhILaN`Fn{P%I|Hs{4ynFaH+T%BVKg0spZT}s^{y*Gv|3cEccR&8PHZlz$#q5y3
z!ua;^&=An?5MQx&)XYM;aB}`c?C8c%n2-xKY9nn_#;tz_+<qJx8fw+_L-hIcun>Wv
z;o;Sxd^}>jo$oVlzrQa;45<ReczAixY51AJ#C_(e-lTn}AF%Veo=+V?o6t?fN5D*F
z5}3-K9d&YfROiFNqm-j;K9YJ=SdR__xe`C^(CDbeaE4vk%J4*~A$<Y@o|cezI5;?S
z86XjOuS_4uZb67goDd#f^LqMtt7r>eU==vTTm}aQLH6dp*;Cuz4qZaS2%qzetY{~U
zGy~nWsXF235_^Qhaja$!jONZ<>fw9wUj}hNG7-#&vLphnebA2xEvX!ml9I~|(^YmS
zBY|<+gf5%YwTlOJuj*;Ukq^V_Y4j|6ls5wee|ATXm%B}xs1%&9a2hU!q#)GEJOP<s
zSilvuga$H}27xEksKC?HMqOOGkl@Cfd7jy`k86cezCNW{;5v?BGAfK_XS1Z7qe!EB
z?fP}Nca+?VcGUlh1r(?~q-M-gUY~$;k+);dBqW?p_RS)Um5RGY+f<Hyt(%&f5cM8~
z`JWW3&55bg{_yZ%^4QuGj&BX-aargtAm)KjX`$~E4>MT)R@t(G8>#&T0B3=U3W=N>
zAa$-868XJ{5DLV8RGg|gj9gd$NiYvbfa_9&Ad`ZOjQLRx!Is5yh3BId6Csg_>~N2O
zD3x~wasUf|6b2dR7|Y9tdeEI9x5gVcZv3|rMXyE}P+t}~lEnrEzrQd+Xcg&F?3J1h
ze|D(nN8Qoj^#GYtKFD^j8so=ox%dR%n<<iS%F0^$Vczzcczd!BF&%U-!gOV6C7eb*
z!(-DOfKC{VGtx4yUB60x0iXy-<==jV)|yMEb$f0nUH99H$=e{mIaO_M1*{G|$}As9
zPg~lk8r(lRibF_=PJFBFM&EebBvIVQR@s+z%sXvs8#9%wo0}esBkRD&ycVp5z}<v!
z@hZ2~eK5z&3XqjkBi}(0Us7p`uN6yEUrBs?Lqk(2@HTG7M`*e^li`;cjLz)tLVsxy
z@1x~`{4NML_|8@9aZm@>E(9KVt~tWc6(3`>Pkh>CG&FWsA){BTCRw_=yy(3g$%IME
zXM$i-{(-?!8y>4Qh%!R8^H<t)xL2e<Y|Q24)P561xJhK^_N~%>;8#HKL)LC<XE!@1
zPO5EetXBW}Ec;`IxHa6A_kEPVoLlYh#@z1JjOYK!P?E3R(tSEpd;5lXK6lxxr~Wr2
z+GAG$ED_&lw-|4%@e%>qd6k3J6Vf!S8tY~2#R84rnjL(4_XdM7?D=QX5}{ES9-+-(
z;JAL>7vO#;ey8mgLhJ^Jf<+>7U+xm(PQazK6aiz)sS5}fbRnR$3dYh@@#k`iZxrTO
z&GW)Ohe2{^#G?ohw)(X(sLszFHRJg=dwH4hlvmTejNidY=Ox_R*)f@{(||{z*}xe;
z0zZN3L)5+J138M&8);~mWy{y(PK0Dtcg@x~sn!U&=MR>$>Iu}FMD24&zBK+4ax@1T
zkLx5kElpRx@p1}B44>DtE=q><z~b-8_ob{sRS??4E^1+sq*-QyoXo{TQw`r!cr^^M
zu~L+Os}R!Apl=Ysv$7cuhyZ!ytwDhOv@btL7vy6Kd=UpUI#3{jpG_yqRW$_#pDO_h
zOK}O!8*`B|OqV?;KRp2&0q-6i2ruDQlBX6HlAcw%<0!DO=;-_a`h6CQ87J~N!~h+v
zO^|Q6EgadduasHlSie6W4`<+WUNdZ`i*a#tb#0Tj92p$Md-q}d$<xi1pR}MPg;A_f
z`4iz~r!WmpL68FdMzPbV8?nrVEx$mD>dwYD06kF=_`xP5Bkb&e^t>DTVz~jq0iR=H
zRL#BNFgG=mB(J$jqmXN#pEI2EY}0#zk(Id_0f8-rnw2+N6p}?jg!As*TUb2+Z1ev<
z0knn$DefKY<lIcE1chvCkx{z>FenH`CcN94bIC3ubViM$4qi+J@8bNt*OZIn^hw}B
zA5PQLsDe_nWiTn|(!QGkZLm_NIq|a8E)^%I`0qmoUt~<;EvjFjzqGh`$T{}-h(N{o
z*aYl25YxZ6GRd<h94)+P{$eONfm;()0J`?eBW(O+bv7<8U-&DBYoIH=M7yN`vG2IL
zs@^!T4a9L*6x};Y^_rop#W{ahLSR$>DTLSuB^On1qL4?8rlUrcqtWb~H=_>l;J)tA
zpUm&DT$7qQ2eD6?GMyhRQxZQ>O#%J-s>5`;7$Z#Ypl2EsCt>4;;D#GqDyALH0}l53
zl@U+?{bqfClNec@qX+btb(Key!~Rg6&lIPp&leWMs@-+gGuGdptBksHNW@}pia2-c
z4_u&Er;D%n4t{B&k*KTpta(hejl*JNZ!DAR22ixbk;ITrw|$9k<;l*@p~<Dz%6C`?
zm<#ls!YaNO{M~vnT~OSeQo$HP(8WwTrCF-WlxhksvC+JIJImC7fOq@vx<=A!k(}Yc
z^%U~JJ3cT_+7q*=ocdS8pu%DA8#`i?nk`~Ed3n#Pmt!J)&&UM<?vap}Sh%ey)Rz1a
z+eV1LJzpLV@8j0iRy-y412-rJe%Ff2LH6?5i%3)qG`0#xU+ZHT78txS3}`7hDJuF>
zSeL@u5{OVvc#!%t<l%UM`xlHLYM<a}Q{q^L`$@a=3N<w&wE&ztt_(a(6@^=(7)OfY
zPOKoJc*G)A{(AiwDv>1<pNqwS683dit^3~b$u}umMON+@QtvBjW#(5^KHPvsT|87+
zP)n=+$@Qhxr7IT~!3v=sp-W4KTBJ!!(MxH~r{^^t0_eO&aPxvK;<vn_UW^IvqinzY
zRqpw=Q`NAf8;7io9(UaNklN)3oxw*XNDT?>nP~q}tN7ncQiueIa2ks&CO9|ijHDf{
z5!r#XrtGXN-O2Rq>`Lw78^Hhn9)yxo#E;q0iMU=uoX|qSZ?)nw+66noBW1&>(qB{F
zJI^8?#hBfG`aJzngw5&&mT=5xy@_%YTI9EO^zOm(<SWGZOhez3g#r*fftOh9u!75V
zs}DwZlv5PzjT>laM&oHBP)xBUtT0h-3x^@{fCv)+W`{ZC<42<JhmxChwQOaq0$x4^
zb{a0f8e2a9>@0X$yK-3kBO?Q>NXi(fs4r><_R>cs{{_7N7#mp*HBZq?hC_q@;(`bp
zvKVbQFCDy7qOITe&=>RGM7fg*h^0Vj43L5K?5Q_|?;kt5RMXi4yQfN$@bu7h?F$oV
zl(@OM0sQ*W#_huYE55=~bB~a%uec877_w85gFsgXz0<|Ox>pCDdZ}?}bci9M?jwbQ
zuyB*p+~J6sIyt+;L663V0@>i1_KKpSXl5Pb^k)$v`(HMS4Zk)nWi3q^GrU&SZdwQg
zKRi5|GD&Qo%+IQTeZ9+NN@2gZJUaSIMT||UEGw&BAo9#}ncy>ezPyguXn_I`FYoD?
zJg7=UHxUOajxP@Vn8-n1y#4+B-M7h#<Q}-NKS@$+RcLD14h#)}r@-!Frk=f^*YxH;
z7$s(+|1?T4)=s<Z8xD>2Of_l`MaxsatE_ch{*BnrV<u4CJ!S4I7Aquy;luQ0eJJ4Z
zEnP2*tcCxoy#SG|0+qDWQKQLd-E@Y&KIEDMp70`5!1WMZn)h(;#fNPl1Xm{V+1%<R
zr)I?Ns!!YQRC-jXwpwM>B&x`7UaC;NZ{|VDkADQJ=pyRZm*fX>jG#5{@x}4v_Zl9q
z38P(joLsne*CtD3Up+|%q)YiB3;0E@W0HJv`VqNjGE!zbZQPiK<}_O3+QDo)09=Oc
z!qin8N!19#^U0zNd+FEwO1YXCd!H<bD$Jdan@dDKF08ASDak9T0yYyIdp2`oXFMv8
zc!IE-UTN~hbTA#fw2gD5QDt|R)v+(c^WFLiTRfZ2{^y7;TIC!+*U_>9)T<0|M1GlM
z%1U2aS~62F7mRSO-5TgRzPs>R*ay&P1aPcICMK&u>E){xf0lRS>3-uD)pJIC{l3=U
zgd%@BG@f=~t%^d9u&C&q?(DtU&B09B-!BH0ZJ6#GCD+9yo<v^vx4RLNDl$pdZG`9t
z59sNM_dAZuRzolT6nm6!j=4j2pPw$qksE3NgemFe-oTW0cJ{HA5j&BAG+u5Pg<o_)
z83@QNs=*R#8!p-VqQuzF)wO04hvV?MlfyRL7Mw-yO~=?wMG2bDPGl_P@2}e2Zcu8}
zx3%rgFpGP6t1@|eYUL|~?epDNPZft1X9KzZNr=i8pp^F#ZR56Uxo5rpJ_bpcFxGWH
zTt_aXz@z|gwgvW%2bb_}vdJbgE(7*I2C#TbeFFF7$>E_m3D(<Y(}7Yn<6Mmj8HH*}
z5H)zw<qzh{T1a5ETrq}li%9~L;c`21OVptV>Y~diDC(uA#gP3M?rBuvnEk#m_;D4V
z<M+a%P`N)c01pNM>;sudBy=?oGVZ(grJyXCcKqo?bMsRvNwFvxKCvTl2SY9&o!Y+W
z=~N28IIv=&rZ|lY52q;Hy86-LAV|YcQz>7$%q#t&X(p)3AlU8aW{`-8o6OTxE>uka
zlrYk8{0MBzr%Q5E&3%}}oPJ(av1-=OKO;^KwCn2YFT8CQ$)5d%ff>C|tbT>DDve`!
zc=+-u3l7KZH9q&#7h+<!6F$5@JE_dNxZTp#E~hAm{V^=FtN$*iaM&|Yb^*9UfaGFm
zpYSN<yr`DRUuMZHGwQ#_9wrxJgVd;_qE~cWDG<KUI)0C(t*)wWw=r>-Yp&og#t+X-
za2T;0jXd3z^peWQQ>b%wq5!7wd-#*6d3mnWOpuL-j*N~v+?#itwfT8fd(*QPmLi^u
zDgVQv%0UAWVG-TD61=%LE#KZZ8CN;|(D%d-<Gl4k5OnIJ0|Slv;Ou!hS|HjuI0&nk
zxU>YH-5maTqBFmUIHq-H+oa2UQRsk&U(`?e`ZhK!6QVfy{ilT8Tx3Xg(bw0{qTuDd
zM+^gG(>(g!<G8e%sL?J!p;O4vb0GD|L&bXf6NqIJgZbn;mK8ElP%ih~oriwl4W6wi
za5=@Xo5u3%ao?i^*-7t@fEF@8BJG)+(X605slR{cLH|5cq<CJ7<<^OHyY1p3aG~Au
zK3}~AlZkDf{EBj&kW+i|Go?pgTj6a8e2T$pJTRsgBMD_!H4nkEfhxbeva-Rmdpk!6
zsWp7~@G4pPk<CJiCCo`FIzqxiAcODul9b3}!hoK3^!}Eu-BLhw!p@6Dj5v-lHuF*s
z#Cc`O!u&{wg2A+%t=)Z02rL~K7;Fo=N6v3xbJ2lvWfS{C2r`>zV)<<L+qQy3u8PTi
zN#UgshtdkQk-?uZ*L^n8<*?{?UBV(K{{->Jj`Sdmf%9NsY|Qc3K+ABB3Kk}&kN!lJ
zQx|A<<+z$V--_G}35kjl-m*f>xXpF9rvbDB5bzyBLZP!)HYbtm9_Et_x|M<@i{Fe!
zQ>N9mw8maR_@5@o;!<^hgwp?(pj6=MbmhBD0`D*+b0khXC)ZR~9+Bp%JjkNrSAkl9
zVGs-eb$toN<L(dEYh*Hbct0vE5X}wC1%Jf?fP=*>mKUF-B~g*bC7648=y)O(!>MYm
z1{zSM6z!|cc*PDeU7sP~8@b-NV;U<Kto_(jNfxFKv%YFlS?4J@=8H8aOfM8EJ}@$3
zt+D*5gg4D6C<s$XW1#n7{@N+J4oplqIDUC(-a-lrc(Lf3`12~=i+#}{55tUAawFP=
z#gD{n!_sJPGcmKjWqzlLQ+HYX7HVt}*6SsYo?2`vkfh^_3?LHvM{WtQP-8SFK_u5)
zqIUH2D-f!*R0C_(Lf%VhX&|Y<)QAsn+o=@35CzSWftxw?1#+@8;B!A|LNU8S@IapT
zMcV7Yh8K|K37|m~?*X~AwzhkersDg~hugW>euAY?a=mP*78uJ04aK;GgvPM+Q3h<;
zQ5b}>kT&&Rh})p(_?~vsEF?=$Iv57u(b|h0e$6c6`r)ve<@1p40&8otzJkzF31=;H
zgtqZ5xE(^0K4@=Irhd9%i<%_S`FA}r>cP_T#R(#r9uE>{s?VoX0jq(6^c2I(zS-er
z1P}Cp+>a)prTlXSMz263lk;tv*t6{1|JS~lzt5V>)hv1w_>;`#jrGz1xy4o(&g40<
z0Cr<q4Q!Z7o>~f+|B(OWJPW=A!sj))FD)%?*OXGFF#%t##|2Rptzur^7o#7QHy1(H
z#5~F1mj*B8;)n<GuPi>5zmK?l(z9<a76c&5;?!`p%i~#r2Dq@c4Ae8EdNhDFp^q#5
zZS;9?RU`}@<iyuF&j+e4ETrkbVWp%%s)=TeWib%Kv?_(%?rUGNvnAm4Lb-fdxzN^a
zd2gU|A_u??5D5YY+1lC+w$=5SO7+v)<A1fnq`6m%+QZ8fO~3*vuRONj`=HVVY3q2b
zCYNp;adYu8$TJ4pCMWe$x<KEuy+qMypwkxEKRh_t-!Ctxct>Dle8+zgRK;*wc?Rtf
z_o*l;twU`nSoJzi4qj6I7V*As_Ii4<pFj}<n@0~`TZQ=~VR0pRT(oW7oOea*yuDk(
z?<&wL<#?60*#(Q-yd^3ovZ!nW{2vj!MR$AqoiT*fao$~U<pDC()Bc*gI9Im5E~p-=
z%W@#k6R>G4smIK47xjC<wTL1tynFN~SLd+Q@7CT&Ml@<>2+HPPb1h)B{IH$G@78HX
z=(4-=Yc=F+rcB~WU$(Hb+VRA&2>|9~`v%=#is2MuVPq7Sl|68|a39)|*Zw5)qYX??
z&opIb+S&{t9~6vqznw?3>@hG<;+U+b{lWu8a=vQ74iqmFcE*1jD2v`_{G+cH7Z(@K
zS%typ|1eO7(T&*bcdJqdCpSE4E}@7}DR}NQtOmuf?5W#UpAsM+{^VpUr9BCVFc6~q
zg(*v`Llnf(DB{}UbVt9;r-O}|$*vRwM55bel*<rJS@I~x$XK7-a;xDRQAM6sNrB#~
zG9IOLdv)SZ$;gzCkq_z9Sr-4%L`3+V^ba%7<Nk_3bq+qax$#tq9sB%=oU9x=Th(x}
zZ$LqS_BqQUd9%uVZ&uisr+oR3BfnFCXweCI4ci;O+V2te#4@>zcm5=xReI_ktjWhz
zapru`BoE>w{F1~_ZrktQc@PykZCtQtSnYpMRhyWItFVxllWR941eHt!0zpc=F<SDt
z=ew5#UP}y(R*LJ{wY_^MX9LA%zWH$#ogEi$KYOG3@R)OLTuvx4h+uxX8X?U7o8^TE
z>lFdwXfX(Qp8IY;2O<VDr`D^1!$4+Ko#+Au*X{uYi-BrvlMbf!c7wOPihWM`ue7|q
z{O+^TRbNUzK4I=mP!hw84rL6Qc~@?--wU$K9c`Rx7ysW+mAGOO*8g^@biT|#*`UR8
zat*5^#rGWu3bV6~Hr?IQR%@Up7-=PbL*^ArB^$lFvCd=a<Kr`jkV#md9Y+%2bm;!$
zfccH-1Mup#A+Mk!j7bs7d2yef&#f(qhp|JvDWuwd)!93Mz&ftAd)vqe#1+ROBDS{p
z==7yQ0y=njV|MMX3rG0Ow;z&~TV6|P`abhoK~wM&KOR0&PZ`V`^O?R6B(8OKb^_HE
zCY^?Zf;%|SpAJGDuk>ctv?u%m#E~V|1V1m_rqFMoT~I!J*g@<1b$+r|=XR<JIFjgJ
z8=*}a?SB|&6guB{p*Xbolp^+Bkc5oPt?j_DRNTu!sKfzrcL;T_;I0@O19^z5=zqj$
z$`H?kbvG?F$Jj_!sOsAC*n>Cy4{Ngv3T}N*^8Zq4+|t<=OnOsQ?YfLCPzd>Xd6d!#
z=;>v)zi^8`=uR-PgxIbS5<1E1yfmF!-0rxseM21Vm-}lIpN#i%^g6?>md4%2+GnS$
zIjL!AUt7=A@7%<~!s`kqVqw^%rb1pn*L@~+Eq|SQ1C+(V$ogagj!>J?o^~7uSjIjZ
zm1LmumVqcxqJ%P4>wzxA029=siCtE{5|2w)>!gTzkXmYHl(x6GM|_=2^YEpU=a|c@
z#~(rxJT_i(T6~4+v&Ao>{e=Nl^QHH3w|y(EcUr$)rlGK+!=?_wQBzYJ%X?lHusSg;
z?&$2?*@2c#lMUN%BLdtEs2zebM~*JR_t>8wZ+@99=3P1XvhdnW$7a2gP0@OG>Z)yT
zcQ-mzTYobgO8XTmEEY+x>hmIH*AF5Q-ne+3qmy#I48ePKmB5y8Hc&c||7zX$6{TGG
z>X(%=LB~?N_x=0~Q0ksU{`WmoU)+U3!heqqPz)g|iEA;dOCOAG7iw-F>^xSk8LMJj
zm8nj;<&eN*Q}C}^AMNwMQ->Ave^Q5Xl1R@MS9)%4wewkQcsPEu&q8mE1E8;9Z-LK8
z%TU}8f*kH148jDMdhO|3*e)UqUvBV@+`Z5)OXM;bnNqc}UQG)Kc$9;Ijw&u8BlyI4
zt(_@M11wt`6BRetXX>0xz~U^V{Bn5-je}T&Sh4!I;3u;S$)f^D0*Wqd?xjT#6TKo#
zVS(czexBC~rp!@u&A(2W??ZmZ2a<5<gUttGxFHqr&pC6zs>&3?yv+b+Atp|^slt-f
zHB+Z|0@OKq@jqgrH;LB%ghKH?)8*oji|sCr^Q{Trse!7PsAoA<w!a46w%q(i-|bf8
z<^w)*U`!`jxp$W|0iDgNkTK&CQiGTUjoD+dsGtOSC+JU+O%mAIUsrc?;~R}A0PulY
zz^PF;N>9>!ruHu3@z=4jF%XTPbSNM<>IbOSpzOcO-7t~bj3O&LOZCSkVmFj`MOdWw
zX`1h~38Ivhl@-->(qUy^5_}`4LQ*C8wx*`07!=5UsLjD%LMhqVX!(EOUEQW#urWlR
z^4LzcFH>{k^$PcRDl1ZDjYF<OPR-K(be8rF-8+@*d|v18xr*$+Kgzz$HXJ-l`taeX
znOZ&UtcKa~5%V5|WO!CWR*#r;Qc_aJdqN}2+28uVe*GGuJA<4xumAQ_|2CpE#L6e5
zl(Mom3W&~&UB|a8N*3}K7Y(q(A3^=_kbvOl;TOja8-W3Me{US245wQApFX;xjg4XN
zXUm!|`i&4!3{O-ft}-Zc$Q@SF9uqvf=#f_GSuE@>@gDaVjfG)`*Wne33_Xdi4ZeHx
zSGdS^egHM+pNiXY!J103a=X{4r?x{v0w@N7CM9W9G65<$F0LIP%NH|U<;h8YAfYOO
zc2m7kr7%<k69wh$dHORE_hT<Vg12%21T}gDJMXO?)gIuH=2d!Z*2(P_mz8;o_<9v2
z&b+_<xcT}d=(R&Gr=(;AJrQx$7V->wWcfu}Nu)(wWpg}N#dQ+?LBK!-(?9DqJrH<!
zYYQjpvPTsL1_dP*5z%kG8DP0iwq<2x8n`#lu`OTMUB17j;8mAM5{sPKv4zfaLCg|!
z=Wa|)tWXu|)y#%o3jgNTw!3%l;Bzqf2g`~}N*XK${vL;k@#hJ4ZEa1TMJmcEqMzMi
zzz?`A@R1@gCm<lQ$|p7_C+tDJ#cv_j1;O*@3P>yb+z;HFCrUhxD(*453p)~8{p`qp
zv)$v?IUQ1m{y(|O|2{qc{*wP2WBUJ-FF}x)J(#(_G>qcUy|+?;C>8uIA;Wt5`sn}|
zT^%;2AC9k0R~!WLaHy9V(VyzRtabio^}PWwWtljp_2V)V<eMerejnev@RM+6(5Kc9
znk%1or(#MPWm^MRN%*Sl9;@ceXJ8NsxS#&!CFift<u;muEisPStP?=2AQJuu3t8FO
zfk~{h4WaLRgNb8U?LLF%JX*l^u<y)wpTlV4sdXMSUKZ3=b3k)}c~ybN+343ZN=nMG
z%K!?0CDTbrXqJYBXXjRrgMf=OK&try)ygmjP%G36x>=QgFly{+2cY-lWM>@qQ!nuQ
zhKCc_9QM%;K2pgf#j{uh!Jl>fp2Jok>`ppR;Zgr%gUWt$5{W-C)yw}7<y4kbmxLUL
zqU^LhiXg*r(k@WuB=Nc3A||di|8WePziu39xN7kV7Sr@_$|{5!OGYu!Ydl%2Kdi8C
z;`ZIZ4AWq4o9ru?J#V@WdWBN`vx&jQUb+`GeUSfejk>RWe~}>(QDb(~nPIu<GeK8#
zDVW&PlC%d=@dK(~UC}NvF3b7-Ie(_E5pO)^cA1F>HQM^bFNY;*O-=WWw@&oxWxN~q
zr(0izAy5k>XX4PjR1I*?vlnXn8<S$zju1EiCZFiIi`v%Pw3>7ZQ?~05X!<@GVBOQ!
zHS{Y5H`ca*GC;xwnm><Me&)v5==(RKMtnlwjdVn%AY_MVszg4Qa+Adk_{g+(W@=Bw
zwd(DOuj+RvB8>zvbDowNkQzrbI?W;SZ_~0O+?@W31&lxp44l*;DZYCLo3Yghy~@`$
zi+U*eeiGLezjA2m)K-9EmU}qIbR;vGT3U+lH}v9CyO~><yN2?VY^EF+!69Djv?E&e
zX6zzYr63<-HTIzPvH2GaPhC1SF=sUL+WS-EASFCB+0^P|eILc3EHD3+A&qGg*!P0m
zmjdqST0lcld>Xr6a)FR#VPTONBve(%%ufF~zvd+^mHb=dMt9?`IV@E}13x8U@2PQL
zcb3rac%J?WenO^IQ{^Rk#`~y}j^oyPQ1%k^tz9-0h><sp+wMOCznSyhYiw#HAh-Y#
zoc+p_(PU&k2xomnee45?B(z`Tt5q;FvlH%iJ#l2uoR+=)SQ8z01r&Idc39Hi3&Bv;
zBo+i=2s05~D$S?eUtS!7;@6T)A(FrXlEUY)xdhGEvY0^e7{VM^ZoV>;dz~<B%{vV$
zQo_2+lexZ+B==U@Wqfh6dcl8kupV`2Htx9m^C||Cec*hdJdzIH?eGIfEK=@Li(Y;T
zaGM_au0EqK0)MCT-ZIpVa_Y^^gTe6NW9IiQRW&vKJ=fSIcT6IFbdosa2ZK#>gC^|0
z*35BTzI@5GbCM~K`}&bI>env#9k&h^pg-nUp;-)bs`w2I47bDYf)yK>3^#B8pys?s
z6+~=-NO_mm1DR7CW+SB%B^jW~UmYmBnM1&bTdWU4R4984hy&5sv&Z|OcQlPBXcta!
za+n-#tI#}i*6WHG92|_W&wm58v~uDQL9IJg?NaZ6m|<+CaDjz1G&Zct6?6b-J>x6)
zI4<4l7u4Y6>rd(M@l5&pY*b0JS1V7Wma;;#%xLr$PAP;l@H-zuqv1`hdz<TV6)jgX
zsQLJ&Ct3*~pzXLWj+jwX%#+)Et+~o|;$(Rt2tqW|Gdh)mmmmUd4I-%?uuK2_nDpW^
zPhImx$?ygo60~72R8{{^XKx*qb@+DqB1%iAbT`r|UDDl1r-XEON!J6?-AGGGgS3Ez
zbazW54d=$+JMWrx*37Iq=RX$l08f3ddtZBhc6e%Dk+k%q7jJ(vN*5VA-|ASG7%0}7
zo}3I;<8!zdH#W|5&eU36ifIPs8Cb7URSPd#)WNq?<t$3G7APR|;J`Y#{C)PjB6{`-
zF4$|n&nENKsM2M3=>rV=--_Afwe?wyg`%JqW(+P|3b;gXT?SSQ-^xz>{{3wVVW<4V
zjpMVqr$Tubo5NK92VhiEG_s9}r4;t`P-;1V6XyN8dx9#YR~%nTzI#n{`dl(k6cRqG
zi1%^sjI|Fzl^W1x1UM+gpWpbyutJ`k38sB5Xm&;x8p^fmjZbpA;FCc23F3{}P;yWq
znduxE2rz<eKZNiMct3z&0mL<pM~=3}YV|^0=l1zsCr2FOHsV(NK$Us3%eltN<3o?P
znhID(m2c&t_!lVsRDmU@QOszy7yRvCs#n~w8L*X+*ubO*1eEY!m_0iQ0Nb~wBmFn2
zN{Kk)1t_16z-G8@^J5+-9MY^1ei+RXtYtD`(8~pFprXkVNZY?+qoYSEl%*O^H~Nle
z+f0t`J${+=hhJK3fCGRmE;Ct;@9)nbVk@e}bbR{5MbuP&z<JLGRPK4V`g|+eb!j@=
zqB7%~cMCicfk*x5Bj9u4)L!lzga3{XG;de6-3>Dh|I;p{PSvwN1wjM9vWA4ZOYcu?
zt9>h$Bq(SVm;I><?Xu|tx`bzB4p4LU#6SttWTU}KOXKk?7?`bc7NB;EG`@&=8AHg&
zSV2>%-;M~wZZaJO7}gYOjb1BR0JV((LwTl3`Di;?;1G^MHSc1%(kg+p*Vfn9$CCP0
zql{}4(2(r(0IK#I@OxP=?bq`%05hA<{>{Z<a{C>WvDx%RDw;i-9~%-#{iUU(s8uO1
zO-!7L0qc9=DaxB$-60Jo0uCD%pKZW8gO^e?%@W+w2U4u~ZjL-0GBJnCty*|!aar-f
zO^@of8;9W}xa$VH1D_3ezB=uHy&(4w4>VB(9pKs(5{Vn_=I9FYE5GiWWRsagLN_me
zSOcA6E>8#K+XLomy=Jl&>4VF1D+)slGn|V6DsEC*Rq|c*Tn!ET{;Mjp(?AK)7YNA6
zOVubEBb|WxE3B1+@R8vFm=0uQA`ZAJW#y!TIWKn_gs57QnDt^#jDI2KGNA=wo^@p|
zxB>D7+jS!uDD(mzl92{C<LS`D^^J{e!P5^-##^}kNWEO<i(0Q<thD>Q^Z8jfFd%md
zS2Z--^IbE0xq8JA#r8vo2*+@6`FD#?5Bz_8btbjIKM6nh8LSPWPbvaJUr<nzk%?SS
zTUuMwn2}-O09>yN@@2~I)78a97e(mNO3Ti-0SS3|<O!PC*sl-WrUZ5eToo3h>AwNO
z4^IkU&*vn`@`|hAMj0t6#QqIbnkV%N5V>~Ap3P{v_r<~mg@uEYIOHp0vp&d8(YW}u
zjmo63^#3H%GUc(E8C+k_Rbm0JTTo3Td~KHypLM#{9ZC~Ra!yD7tciM^>;15O{+r1p
zGOKQ#3I0u;v55b}9?-tuWeXyTOfJZr>grUz$7fJH&)*?MCM7K|FC`Zh9xHnvftrA=
zzlgWDXKiiO*VEf}c^*0Vz)<{eY<)DU;{bbjj)?RW@&3NgJ`re$5@aNcT<mNLva(1h
z$c6mR&x!%RBx7o7uq5v?A_)#uO|gKik^z0O?eA%>=zqSRnlq*}%NO@nw2Q7<N=02+
zB$0{sfTr(1gZT#O3Cv#J?G26mxnh6>B&k`F1^ZthA_5-X8`OD;bi%_FbdpQUt79|$
z)2+xPUR}RKV-bBpcT&8Nh=qMa`=4(|i+dY#-AwMAO8NXx{vSY2|A%>*{zn~<D}X4m
z)?#F9yJRQafzN48x|FXOi;+YX>=ywklyN;cBK>zxAYM_Xv|YK}IiFz$!%Iv@8Fv+v
zUd`~>fD-99Fj)QpZbRc29XmfA;!OVV)rTAh0l_vP9}Z~TB?aZ>IXNdo!u?iLWk@TS
zp~Oo--@yINX+3pow#p3NSD%NxGv-sD%mU6b4NXSX7k(fwrmU`h<1~{E9UoE?ei}8$
zu7>!y;I$H)R&Nap11q1(bMtpZ7g!QOoA5i=N%`xnsBE6)>1ho)5<dHC)s`4wFZi#U
zMGaX1m+_@mhuZq+XiMt7-Th&Mx>eBi1{X`bzg!zyp!M+i5&+M9S8wc})?NZxS4;tz
zJQOlrlCdnOil%_GBAymV8*{Qdz**#V5xh`w*9i9{*aM8^2iXfpLLSw3RRX{TV0^QP
z4}pz-Z1U=F>%Y>h(p@Uh#!SRIH!_LB6FA$PQ{8!+oz3Bbv4|zz!f7?dZ@;<vg+Md2
zFZTEJ_^<qmhClO_+8sr9Pwlk#2XO}RK_*uu%dxC^JGKjrVhZ`x(cGWr!h%8m`nS14
zGGSQ2;&(46FqF&7$@R!-$pb>DnEFoD2g{k<wm75`*O_)bH<IP08Vd_x4W{aT!)ZS0
zaD{1qiNmZ{URA}seGIbMMlE1vx7g}tojXJxJR8i|#s*TmJu@s?ujb=|=&USfl=xq<
z@-!y&v;6smnE?_Z!L4`esbDu3S~QO6Xzx1x>4V!&mtK@HP{VieqBs)AC#KU{42cy4
zesb8&iDqCr7>~0?-EO8PfU^pSl%5NsKfi*w*Rs8+2OH#46|)7wx~G%8(R&M#f}*=7
zzwf@u_O6ExvxXc|o2)omm+Q}5eT&HgisoCrKKxSPKq)V0e4vd2=a$se(l{zynMB(0
z6^G7@)Y{}GMxqT4^M`HZP*fsf4#OM>WPS5v0(*awtk^^%qxyu)pM5Zgp&lMTCwlkT
zEmCw-B3nMAkj$4l6;nkf4W|i~`3Ava(kLd@y))jl=h**d=x~Pu6yiT=?{)Fh(w;AO
znjOngbibDrn@q^SvE_V<VdnO7-|eht(9Dlf%oa$kq71bBAj3zr@F)%~Qg;)H3)(52
zukE_Au&_VORA{KEh_;`L?*Je4Xu5zMXfqmn3#@6pJ5BmQw~<MVd>g*zC!Jkj%2=+q
z<EF;B$?uD4IG*sBA}Q;Oep75`=+D=?OHBR&lUk9-^&;hWNsSWm1~ngr({WZC+#}!W
z)w12;Kn)0(V0{x0Piw}<0J)=3-}yGDE4!f2mX=mLkNcLEmcjR}qm$L~-7^*XEntq^
zya&1xpbN%{1ZgtrjkhQs|I&Nc-_w(m3!?HP>0F~Je0uyJ)SAbNfQb{B45CQhJ;s{(
z)!D9056;oWVv2zGHE#yQdlNet=xOv1h?Ml|l_0~q0M4{vjs?yUt$Lj)kYB8(MMQlC
z%$B|ncl!K(UCnjKf3t+V1i83ef%N`9_B&`S+}3+aQ@3u_Zw07A)(ir`umQP7GN;jB
z0u+5w;$U|;{JFq-*K}oX?ze?3u7wpA<?5XCD4T+zU1#R)!_3O@N=xVn@Yx=MG`X|}
z>uU1^cC<P2ShIGd`MZXvR5x7{$rzCyM1)t9^Yu0a7#M*Zp380T-3VRoXB|jLNH$w9
zJm28rhV}qsFu2xwUK<t_a}Iitw`K$DPJZvQ&s`Kg*BLmw4_y8I+rI9=xs$<z;ust_
zS8I(rk%9@Yx|<FRZ<`w+D$N~te1A3tqGrlFz`tJOaow5w43QCbN8-bt#|mfw^J5fD
z=CFp4=|~ZBIvR@DZRyT$$E_ix8$&Q7>_(*!bNA5!g;3$G<Nj2YZoWD4fCxuoQrh;@
zGU^Y7+fHC8RV!5~bm*1@@z~j(`WlCWqAv^@+pgsQ0{H}|J`yT`UK=M4GB@tOV=rwU
z(p(05z9D8qIpEa1{*VA1X5^>$bG5*BmC56D7In7=N^qB(e0CyZ3tIiI6yyy50HX@_
zZ{_jv^=^SCPD=SyM>C^MDX!xcKhg-w6mpOs2a%)(n@qa1RfR6P0H=h+#9(<6JCd6F
zq2#J&KIfs93c${dL_}CUNu0!TrvVbA{TD`Aov+p<JA|4WMe@V4TEIgTmR=pGM6ij{
zNA(l`g!Mk(^m-zZ*}xZ&XCd;}+@eWFKoOzdM}XStyNh-MBWuq*W%ucsXX)1>D@#i}
zG&IspXmcCeX%8%LcnJsz2|1w}%b<LqTgQae$`$p{6VNMJU`VdqbRdOAfuW<PJORn;
z6f2Jm_~&s#7u-t|Ak({wKvrYDQVF4A>Xic&*n5Jsts;N0)Xd=bh5jXPENUEExkM%d
zYHK5A=W2@;;ohPA(lBa>eYaJS=V&c;TLPHAOiWCJMGXzpJ0|R6vSWxJvzN+k{U0>`
zhZewDX-(SOQ=Qzi{!>bEw57r(lhI5a@wAG&N?$A*j9ExcK}yL5TpWKcf5>WU!ziTJ
zwIqSgf^*>u7EY>`mvAm$&b0=e)=RTFGvZ?53Tw^fRKL-s*4S*i7LB!Kdbt^S0*Jub
z(UKP+c(frj1u4j&VumPVvq{7!o{K+Uy;mZR86cG3AJ=Yoj)*|?>2tn+j*7T=Pxiv2
z+*50{bTE=eJ4m*zk4{cr92PoFS*f8SJ>-;>SX!CmU}VtIq4oXr%lF`*d_mS=0LxdY
zQ-iS`0YqY8?J^c*L}cvL8lV~{Ih|c>XP_0b4FG%r*lW1gge*#nglx`X7y2*~Fsu#$
zRFzK5jmDW!iKv0|_?+0nYYf~{{VCJOE*+-Z)pq{<i0l)W)#5G)R=<Y(lw|ux_tijf
zIh?1=Leg?I0OZ=Un1m^VNG{4pA0Hog(O435d^Lbiy5Uv*Ql`;`hCf+}+8aIsj!pEw
z#GG-ON&~DJ$v~J3tiz~R+bfUlX!CgJ>zVv_;A^LO8Vg#`x;$QPX9v>E1c0H2Wyz)U
z%5z5wX;gj4zGN){HlpS4UaI%5;$RsD9;1#cc-l5uIl03pSwE1wJlvmegChF^F8JG>
z25@M7eBfe!q0Ro6XfgS5PPGei==;-WdT}m{N+k21Z&UL^US0jtdLDy~LLME5ig9>k
zgv{Y{G~VaVq!iSxR{^u%)EVkRMgYDTnSi%d=h7-A_!jv<=)_yA)R790erGiEy%2g!
zFkdRWUnS|#6|d(tAWMW!mg>T_{Q*e^FroaOFbXXMDKskLvive|h@MQ@O`*xow}UY*
z9a4FP>2|yzVDdLg;O^?yJ0^eYT+RrVr4Im;j4c5X&32+Z+%&nd(Ji4Ux-eSc<Z$kH
zb+!EkVQqvHD}Zr;m44VWP#En@?`B7EX&bz)vcX3R{IC)Wz1MFS4FNIjl~y;|_qty5
zi63e0Z`KP{X%vX~J$H}ty$Bj?QaF9gl?>7DWA{{xT#nc5ch;8Ftv>(`f6^0<leH8+
zV`B#&%6y#>1^#@i!w}e$P_>xLr@z6$*>>HZ&9{gJIA(&=JNq#Is*gy7ZtosJR9x=c
zJJcic&5QLLCsrXrL1OvXbe3Oc9^18R0RA!G=v4)_WLf%($yFa}EFa0oU!?K6NIE-T
zlsX+H3sklOXz=~{+EW#v_JIvhopUdn6a&CL^~VC~!5qcnw!E{mGoNOua^*}|XnbMV
zVi*Z!-5>C~z$uiKj&9E5kY^B6?}lHsU9cS}5YBoBx0@jrD=!{mq_Gz+cYf*ATW2@9
zYg|8JzOxxnayLwwH96|<?*3t>@SK}I8;P&2si7NtF^xk-?Cy!U0u8dZJ+WZn4@frW
zAod;5LXjEno{*JAysj;p8#fmxHK;-bBBd@DC+Meh`v?g%8kH)ge#egxXcm5sdX9YZ
z{NVfe_qrG$g1LHRcr%(5Yh-*4DQ*oZcgHCr*PTU?&l$#D!s3zSZHZnhDJj8HAP(=$
zS5ehW;I~Cq_WJX4YN|{FDLXVSn?2;@4ShU+Or~w}aB*S|UHnroD*toTm+imzGB=@F
z(va}sLOuZjfpk%fZ^U;@b)r8j$l`%ANYNj42t0HE75eiFgKnF7G|)8)kc4A44al~Z
zl3txUJ@R(36k=n<@$P%e5T-6kJ{aW31(#!9^nd+g4_TEJVG-$TBDz`OcGx+W6FDjn
zFWhX9HTPX^P5^IVH{18=3KM>>fP)_;lMir!(Fw5*9hP36k_K#sgDno2sen@sEI|#L
z?dgh3o-wG8)>uEJ^Q8VA%3>AC#3zKVR{w1(q|gKZ-_df~YAG3M`KgJ?|Ljj9;N#xX
z!8~E4LPvsj0daQBNAg$C$E=9gI{5eqO@0*4pRlw5NV7keD(#<xh>pH<CBPpYQ7S+J
zWC&H9Z5T%=!5tTjg#cpm!p)R8_ijQ+=c}%>#qcmNA;y#ce&_}@s57~uz8)C73L=&4
zu>cD;BoLE;q`0g?_2&;!g@OCF%Kze+lWlgq*i@EALc-&d9vsXi=?)Q9UbS0Hl2n(F
zkku0d?=I4(EBDAe&%YDx<A3jI5Yf#NPSn?7k^STsz@HDcM%veAkbfWje?S5MA5M_Z
zckcfUP56I%6W2}R5HQyRbHhK?^^6L!6wmYTAssVwc6@vQSO`qiThA<a_%Ywts+DWi
z$b6v(XTJ6ALfK?N?`zVck&%&usWMP>?Y8rai1odmUYmBUIiMIwwR&A0JwDvcSshFi
z4o#J5QjnAPq=C!yXy&_Q2!y=$BbJ7$s+jHi_IUn#ka{#t5_dvDK>^A+gb+MHK&<BX
zypXy^RV|Wx1HA13QzPZ5Q)hX)Jwh<3Jv}{rwAgf>%5FjF6eG4jSsLWg31wnzoF(WJ
z;qlB_jU$&OlfVcbZ}+(q4*=J=Yi@rg=kx6mU>7tWs!}gY0vrcJ!yISxXnanPodQ?V
zF%Y5gGB7YuMg=3z{Cr;@?2z9lMCn&Bj%8#7N>Y9gm&vBJo|pTg<Hca`16#>!O>zj7
zIbO4jg2J!KNi4_(@J}l%D?cB3RXFIPqyp9b{itwaf*rShcIkUQ-t$gi)2sPozp#US
z0tmwE`<wIe@p0oCtEsPhySpEn9AR2k=STy9V>sb6G6AumHy-Z^C8dk;lF$9M!ytqT
zq!_{Sr!YN8N=8m@cn$<N2jEbN!KkJWm~;>XO*%@-R|rxh7viAUsi-Fa2F7jwaIV&P
zgw2cAn}S78$p+ZWdLyurkdRtj4m7~O9A_rj1qt}oEew8FnBIWRWC_SDqhkOBPEW95
z@+_4cwH%S3pP#$AeM1jQ{_Aa$?w+;v5{GM0iA`q7B3$Qnb7p2bU8%S5;|DbU(Oj*C
zeRy!7KRfh6rN{ZU+wn3svIN5HYZMg8mR(|Tj7batuYe2QOQ2C4s{!)k246rk_8$(c
zPVLX{3-j_OzL^an;l34qzm7IuFB-bGFYTqXD`X`GO^=LA(DznAxaM`R&P=6VZ^9IS
z?(ZEnwY1PsQVwL8k_}Oauk>(u20m__P`r-`GqIWaI`wCvk+tRoJ+~M6^=l=(2dwBp
zo8p%{NVri2dW0dGFHp*L8{f+Ou<4!*{{tRs(PR_c2>^V=VSb4&9_o}uJ=hDy!k%I^
zN!os^-{uLEt#bXuEJ+w+{aVjzzOEEBP!u>u!JJ1W>&|^M8%Ki;#6^)z>$leMq%LfE
zakSJDs`<v8m_11Kb8Qe3CoL^}3utq(m(EE51`<mc0rVaA9hfM&4{GkpVJ_<#5n=-^
z<BR$-5T{VtGM9ttfqwl-|G}QwUVM9kk294-MXVegYUVqI%uE+JPJu(5PgG{h*dZVE
zTW?ZbMF)hWjk2VFJV+G{<z>KN#F5&6>PZ*G!tRL>zgpFgsxwVa=_G<{RK^m6ZoD?>
zj|nfM#sGts==2D5q*=qZy<2xQY!~AqVz0XDE2MBrH0l@i;pnX8F(BtV@fiB*nna6-
zS-&-mAUlPkHgx@MIfK^F_}e36(cDgs^`h_?GM&(cJW~<di2?+EJX7N?G5jkxhiWZV
z;9*61q1NPRwwYtHi;<@@Ag-Q5Zo2Lo<pQ0~LwIGqSWgvd!idMC@c~#KN=v_Ym@tCM
z@|h}w_tc2+yhSrgh^NC5hPe{R+22^$*%NsA7(>U%0VWa$3ws(tilO910s7A#8<Pj&
z7a8kmoYw0<I?-4N;);3R@rakhA%q8_izuQEbk_&;BJ9ZWQ>;T3MoLq%VbCaK@Fc<f
z4BIkOVEao>med0!QBUbJ;cyz3dU-I@&-S`4L?pa_o1X{|W<Ovq9GxscIr5KaQm)>I
z9i>o9bSEUe7&8nrrKSR=!4vQ#IW<PR3oj%phMFM@W>zD5RdOv8--;Jfj+^OD`eU6(
ze9}V7@FTeQc;1RKE}&U_=ciZyO1XKHHsTs0)f{levi{o_56K(>6J>8MN91Ke@1V%Y
z_Y;LIegry-2J&-goNwe!-}!se{dpP<Y&aT|A)AY9&|)p?*n#-==rV8JrMMTXdi2=d
zG5dVX74mqkYA&7XCXs3~x>JWK`X~)HX9XnR1`&?7-5+FM!<I{acZh6!4a~2M=W{<z
zYI=~B2iVAR?5YI|Ey$?jV$;!+?rq+OD;jO+hi|>$T>bOygv!1@_>=I8sgBZ#VYUBY
z6q@vv(lB}p;+M~jxnoqKx&CmZU%9o=-Tk7%dzWyyRT-aBjHF%+V=toAu$WU&Avq|J
zvVjI9s3@4EDAQ~E>*{d6wMD~iD!Uek#@;)%@_H?bkkMRLEHTW1_*S=M|Ca}{WO`7_
zT&+I1-wJ3ZAl~KETF$w_V`xSA2aPGHQ~}!9U*1rnC$Xjk;+cRwMK!K0(XyOLp-AL9
z!6&sC!0LJ7vhBSn-^#@z@kTo=Rm*c+(U~;;7h17`_~NiFq$b5kv_Ljuz(*4D(kyCE
z!YDjD?c6!Xqy!Fz5}^+14{a6^-p4VH5=?a?*fF@o!R^5<hcrrxA7m-^!vyBoFgb0M
znt>Tu5Nk1h@eE-~dqjK2w_cWl<yRQCx4knqzdnWW?!G>xm4h~ad4#S{YAmSVaq{W(
z@5_oXf#E;UecHknlvNM+9P|U8bkeROpVysbJD7ibL9nG%K<8t8qxUHjmsw&jb=XfD
zVZyC<u`g@%BTewV2^RI@=N2tuas+0_#SZ(8IQ=Ducb(Rc;Q9KUdrg7N_TF%-x}l+u
zK>PHeQ0^O(4!M?zy<(3%9JfI^vKCSAfGqK<V8~q+UhDwEvSPPre~ZB4W5K!EUo@0p
zyy~*JkljXHtnjKBWy6O~#0c)3yfAbT{KyiXw<&0%)3!vP!8KyXP{yGVn>{z6=Z@_n
z)bzA-&E4Q_5&D*h0EQ;4tr3?YaZYueHu;N?T7mCO(k89ndpBq=aE9m!p_Lg7^Lp4L
zQ@eDinxrTd>+{(m<KbeMzu~(tcgMliOzZ=$1F7>%9O4YO@)cf^i1!TN<Hq>pV5F%P
zUKHT{Lf09jD=idhVWZ(~MAF5mPQWA3ie>duV!=SBKX*386quXGP8M!eF{D(h(80zP
z`xUG2d&&_oq20NF_DvxG&k+0Du!0t~Xp%(y!ezMGg8Z-lp#{8^<|w(Cf?Qd1agPa1
zjupuhIIQlz*6@+un$sDy?aN_z{Cw6S^(z^2eTKDR3}3f)n~e2&E()PPCkLJNDP_6!
z9qP>cR<_(WCEG_?8J%HQ&EY@2y5GSA<}HLs0kKz&YoCz~T3|i8j$@t+REoorPv`25
zer=tF7ZMLeLwH<>=%Cx<19!aLdx!Pu?OYxcZ<naCp`rcX!?{Jo&H|D03fqMSG!?LA
zx;Z2}iY?Km#mbXq4kV!ZbhI1fOg(|2?X>k1`&5A82M3q{dQ8{#V_W=)UC5)wdN{C9
z6_A%-M3V4zPau&&W1?I+gXeuax>>-chesGC-p9NsOxsxgm|iHVrEYgB)KnvZP6D4<
zm)&%C(fH1r-i)F9u#D?dVYQGf6JPQA06$hOTKa*-Rtb#xFT8`hDh-jUn`60R>py3j
zoGe)3*qYVLG*aXWdixC=-x1BtfALj7(PaGEyH<Ub#%&kVO%*F9Juv$5M;R18{FC`m
zKPRK$B}}6t#~)KyX^gQhekte?(X6Vu#m*+o{J4o&b!mEB%ypNyn`|buNuv#pWd_X%
zWC!Z8va;Tv6`|i^nEvPx;YY$Sm{jy|CbrA&nNb#zjo55u*mkJLGM+~uTZx4ZU9cw^
z?S|{SBet_U&ZzqHozZ?{pusb|&s|v9KaR!{-440dY<-&9bNf5o8c{9fcM8nbfU*xw
zXJDK?(=gfPJu<VWpmYdr^$NSn$*UkY9eMrPAm`ZVhpo=*oK^Gao31v3eaxX;yl&Ag
z_o~!C;e;1T-qo-hAs*BUNX9Cc`%{=mh9UmPRHkjZy(Ltk-4p@CKk^s^n<GVx0<cJM
zzxbwHMdsMC_%3^I|H^zff!^5Kb^C%U_|c@2#ctg(kj#*(yHsRX<V+Y=4VM~Dwgqn{
zAsi2Xh-)pShS_(YrBPave8DP>AjM;V$PzdF^Uxn>Q)^rzoKci{Kn?EH?kp|WZ{t$~
z4*V;}Tdf;j`4q|FbRN_c^}SI6Z}iisRV`;RM@ex<uMyuG(N;tyf?sUZBI|Xzn(KyC
zRk*3_ux5<s9$n0k^Fqq)Zo}@av|4`HkdOUK!p0(7<2U!Hs?@y45gs3y*oxcGu5iF2
zA-A)NFIcY!b$nnk@{+DmmwtKX$5a1;u{55-fTKSp3Hx9W(1X@bZ2n>=S-8`Gry++A
zEW~Qe<+t+Ricv>qC2{~7_4(;WKbtHVDSA<l4|~&fJ_#I-<p#yoD{RQOUawJ?U@pej
zq>hGY44j$Zb6EPv7`b2xokNd#=1WE!hOQzrq$Rb|d`@7d=jWhVUIaiXcp))R;{sPh
zUxR0k7b$=Pwb+Fo4e_mwj0q=k;B(o>GKZ?j>E<!J@w*W5{=Bi+<OCrc=5J0LUEo$A
zUzUp;XDClx-w(Nj$_xmB{Q_0{3OjFfR{ZcaL)`E+?pw-Tb7$Cf^>0NH=P#QQvX66q
z@(zw6#?8Zj^*z-R-x{-UH=j^mT~r7ic6D$)A^*|Txm$gmyU^5@bLNz0xGEy#@@F2~
zM1-3XSH-upCeC`jrbK9=@a;KgI`{WYG~CaRm_k>fCcWMz%P~anL}|J_u!#~g*kPOe
zXXwn;TSdi{Ll|Bt7c)07fCtIcCs5J6T97=_hGc)Z;{1lBNX~H?`@CJpQNfGsh$%SE
zE->SIQuMJ)o~#j$zJr99<T%cMA#ax!{^`Zpu7$#?jmRrQiR7D)A_FnrC^EOw_>1Z_
zCnklXqief=aI?Ffh;x?i`Q0FY4j4M%CTi7koRZ-@glcFY3p-+FkkQ}4#&`;kWh1UO
zYgw;;B43E#ABKEK-~{>=`*-H=t4{h!kT*fmue?yZ-VeTQg#n@9;lELa3TM7_K4v=|
z(u0cwqf_K(6_tvjQUSEp0NlesDYDOQ#vAV&v2IXo@5Y+iczHi0n94nOPZ+cOc#bG-
z!+m^-X9Tassnu{ER_}vZV6mrLA$*fM0nM~|!!J*(Vd-<y%dVnis_(mAeDAm|D+zbZ
zl}`2Y{JU__t!D@&)@I?=<?+bb6Lf(n`KCc`rvk=}Mp(AWBXy$-0ve9H9sM~HN(7pF
z5K0gl8N%DwLa^{*kp_XJ-X!h)vcNI<>c84~Qn9v&DE}?3eck`jK>k+^KL6V@_y2tf
z(Et5S03)O@z!k`AOGrpdi|C7x3K4$X`zTFEhcGBjS4#Jzu~SsG<7-XGm&*9|ub+i|
zoyjpayeYbg{Z6i8!$F9t0G`~!#DoG1(bh%Y1$!#Epa&dh5yHcvZ`PDl)zwv%r+$xz
zE6PO0#A3I{#7wJOr6pkvjP^goxzTuM!GlBZq|&p205K-3s39&M9p@Askq(IYq(bC8
zwR!Lw8fp{MV{&o|7>Ke@h?n&EIJg6f(ya1&NVYzs)ldKg5P=nfE`1V*fr%mHeJ|y4
zkpNX%P@0>YSCEkiVZ<VImr|1w;)SoaqAP2E!~&KDsqx%S)K3g_^khGA(6Q;_vJtMO
zd5(GRL|@d5O;{vGLw$h#jt7=8bbLT4Dy1tkY{ME*loT~4zo*Rb$@N#`Y(Rq_48(m&
zR$!@Y7+;WA5ZtRmDnx?T|L-OyI5GbFtE*K|N^zR27IVG|_RC18dZ_nxLh+rE0ca|9
ztI5*O^4$LtmG~cJrmKSjl9-qnp_>9!@hRs1e`G~(p~sJ@#@at8a@|nNCZ?67z%fXF
zRR3`C8%3HytGJ_~rOBMtEp2McVli{<YxsYP#_^yKJtQZtPr+3|R{mY<v7x_#uyh#&
z>_;;M{kENV=mrNvZrYH}x-p6FyJj}pO@9|j6UkG&d}b`%Jl^M%m-_6)fUS`qqyFPr
z6E2rQhxeDn#L4~|gOTR?Px>tZ84>FAoVIi2iS_DAhGR?Vja7Qh5yN05J3BjXvrs*C
zyyQh;lE1bg+4k47-mX9EQyU?@dPS?#P_~|@Gdq*{?S3yqW6*oxNOTATY5DXRTkDys
zvf^R_EIjYCftnq~Y>E!u<0Br^!3+uDDxAHyom3L=@k!=IiYFGbH3m4ozNv$FNn5}N
zx$-)0w0%gLi`+qUbezba?XX@6jYG|+juJs#ip~6KTV0~0s*4m}S69caUsb8!j8BM1
zd1N(J=@QLXe}R0V@6pERJMc$rH*~mtOOViiO|49MX?C*bsg2~!r_G0|Tbsj4un7Iv
zVv4i^h&VYF{{o)2WM@SMh008yJN$ZUz)@=VxWwm8k<8si!^D4FpQIWr(w5K-m-@O~
zmao0_4b`>f%SST{Lo@WFhsV8fr|f%nnkG+@J7a9ys`5pgyS4n*JmcE%jxwvS209JA
zg5)ZTU(m3f#?6AXVn65l{&wgfKfTWJ>dYTLC~%)TYXFTYiQld_aj$RJ<)7}d2I|Un
zD^!YcMiupZy(m=czSyk{e-(-LdKVkqelb|Vd%lltn?995tYGYX7}9&tdp0wD7=;3P
z&^0&KHRdDZ<Jt|MDLW_L(-!(tQu0-$!po~x#tamj24;77T+D<g1`i)IS@XICw?fu~
z1p2N19+ZErcyoU-mH$AKuz}elL+@;3q~8|UP&!W2kyHF>N3^Y#9W|9pWnh4(!=7nk
zzE|#05=H8spJ|q=iqy}wl3}6<+lIl}vdCb9pKrJOt|itWs||!b2S&SuZsi~z2$7)S
zP?;?JLx=Z>$Mr0n8=Ge4gqdw<G?9_c@L^IvP*1<Kzr0)Ev<<!=+F?#j0cDw_wkvIs
zz<5&Vgd6|4os~h~W?&!}BrUoEy6X3*fM1Q}l(#s^R(I~5GXgS7ljB-MR{OHl4yz|@
zst|r5XbRF8mQ#2<RtBOpxV^BCyQpF&VysKn!X%SXZBkwWSE6!C($WZU?VhI?dnqNB
z5)v>rRtLMAtXgU%U-KOI4tx8rNT%%;tE)_eSUc43xX`$j<Ku}nE0gIo%_oCv@YC=;
zP>W4w6qFRubQ|p!*;v_$xXoH~YsQ~GCls#f)Y}0(gWPrzDa}&br?zId{b^nhbvmke
zN6TV$j|bw9YoWq=2Aahw(rqiAWe0me%od5~z~3k-uS{x^RfH>R_ntodVmH$>+n_dG
z6lj_(%}cQHZQ59XE83a@&QHeb>#TVD(ttso+-o1ZMa`*kE1q%^EQB+4j!9)n2~|CQ
z#FlD=LCAZjF~aQopbd(AcJ42UaWROGq;yp|i3hq^H5DbREZ;595D}+5U1`-j_|6>m
zxCoc4oX>AbR&K>Iw7I`7S=Qxeh;Cn&n^_fT=HUe^SQ%qPXmeMpy4fq%G|(^2YwS(K
z<|BEp7g~Rsp7aRIl3?8wV_&1KksE2xWKGqf_OmliZb+@+A&}4TonlZXJX4mC&G$T3
z*qY}87@p0Y)odr=-g<+F-zfn3C8wwu8y$}Q8=%GGlM@V@+&yMPS+Lc=G|6r^{+T4E
zrymnq{V{iLZ!kaSR-#>u(~4F?B8_aHu0S$c=L8Gd>xzB#taS;bQUQ5F=Kd?l*W5nc
zBDI!yH6CpjXHQwr&}!zknqs!c$59o(j(&}LG?$%r`AI)fBaHaRYCw+1(T&{jD4<FX
z*UM_g(W+M3u$~*|rG2zpAx^0F-I@oLIWziI{R+gI^^)}jngWglC^of8e{{M-blUCd
zoF_8V8}IHXMw{zgu0vU*#XwgNS_tnusA$klxp8H;Qst-}P}&##+6`a3LpccZeGGyS
zVzt~SyQNt1eAbsEW$OM27k{^34(h{~{?uF8<VTeGQRI+`%IuRvQ+{Y=qMG<FNA#|U
zMcJ^VC**yJ<wsY2!3vu)NlS?VxVg0RmaA8Ok`0A&L&=XPKd=5Kbrc{af6@?oG%-Cn
z*Cg?|H=V{gyT44A<?i-*(2*mCbqFGSP}%OKPd;z+RU~99Aft>Fk&d*_mUBaML^Q{X
zdb^wZ7pYH-GfxOXdE9J)<8zP;Age}ET@*|+FUip-;xKWeN2Yy|XGlz%gIh4a%>DbR
zd=dNpkn{D|n70XQ^d6b*<lyzM*eOH<0S@AtzOs^%Z4IcjmjT7q<@G{ztb=#;+?4U3
zi_AaR91c?STThjm9gp3JNtKk4QSvuGT}519KT?!LtZ(;{L6$pwEOaa7?tT#&j!xE=
z#kPI@`eg04yKA%?9#`rT1%l9p)~XsBN8`oC3tjmv=E2O$c?DG7%wZkC-mEVBD4ais
z*x9~6)xrJ9r2iu)k;@7S3MpP%Ttv<LIJ+e`g6$6#CnpbI(EIzOsf-A%SaHfNLKJ=)
zY;5cS!J5%y@8!1{yv({{OLu>RdqZ*vE|Mr~L0++XJtslG?IciC6h$24)_*&gB+RXm
zBpjjRT`U>Id04*iO5=Emb-hA}QnZGCtKht?YKdv7F6-<lzpp{Vs(HTZm)`qfg~gCv
z4Cr#s+u6u;#Gf*-8dQ{U<gYE1^D!{e`q+r0e^&6OYH^oS4GgIt&GW7MtftN}px^w|
z==`RjE-<uSv}K!<r=QsoL)g=LQuRfT$t+q<Y^YVIC@s_xLjpsga%HJsiWCa>;sRSO
zr?QEzoKs7qOK~MKw=oXaPC-tGaS0JN>{AE7(^Rvx-k!Gvw%MztD4FD8DMeI|_%~VI
z-^rI@I)i_6OvEBbf*Eo1{Z2MgW0y4o3L+PiIX%r~m|~GJt!5uBgL^?id16``xt{(&
zB6?~^31R^Dn>XR&Dk|Sfuqg{DpKR9vbB?$y@e-*VrOk^+F;l73%8Ze~NF^px%Gg-N
z7-x?+snGTBA5|6A(UxrNvlk!U7O%W-8P+bS%w7KOk&ppn7*$$YCQ?K@z%cn$m%s-g
zLvh@my=w+i_9qnw+$*=OBPKi%5vde130rF6iB)R3GM8Wd{>-N{2{8!>aF&57tRuE}
z(nz$2?!idviJ$$WcDGvGErR}UM=mNWjrNXyCW`*>ziqyn3i_3%ZTRrAKJE`(^e464
z;brU$_yi=U()Z^rcbiKUaF9r@mkBA5z>bS2=Bo2g3e*<cm3$oDu;tVba#WPv0|9c%
z8mc2wqhoCBY-K5L&Q#TYwfbV@oAk7|b=+-U_7Y&UK>}2>9^I-YY83=F<MAeC6^AZw
zOUK&Z{NxvK72J92@QDmUNrB;nmG}jCz;6()-;*qUMl$|n6w^63r)tqd7+f~*YSU;m
z#V7Tq!_9Y^O9PD%I59xW55P!@e&1K^p}`8GQ29BJc=`>P8Mtky?$=YFmd1t>nVrsc
zwttT_nAx7%0aHMX?PP1sC_y%r6E0b?axJwF+~0(wzU=gdu1rzm{lz!%dD3S_HLG@)
z-_%Q+7%<)ho%s-u;9BVaAm6EsU0Yk={v?*C+W4!w{--)4Gwe1$i6C$5aZX%4ImN5g
zxVV&ldo;^#vO=3jUw_zkwMZ_eYyl6%1F7K~pNncRb_Kr*F|~f!Ga1c?LwTy{s!w#G
z8-!xz1wr;;68PGPhA>kyBOO+!zDF9jSGnd-Z{gcQyoTJBh>D~-gDk)`L}TW6Q~eFI
zM7aI%fWJ9g9sTL%*j{1}rKu(U8`4{9WdysoD;U`yDwq4)4=v93B1g7h8MCWr>|`gu
z=2;tkUe#%66P!6BU;Nz8Tb{02|K5uOnd1F`n)?-+h8VOFC#OJWPYGTP|GF`?S%p|u
zN4#nrZua+x*RP|Wt`XLyI|^U|9riwcoG+5xn&(FL_<Q@1DL0CMUKjC~3B6TTdf>5a
zs#JO~jF;=p6$7-leF6DHP;Q|!Q$!(kvABhRwgd<@@;{YG{YcYm5aqo)(i@JzJ@?qK
z)tiT{sXjq9()v|{n<X=MW)>R#X3gQ!6Y$U0cr%A4ROb2S^*mk0N-Pg<NBWBTGMndw
zTD=Ug6rosoz+9ouIb~jv_TD!_yxyHX`dZT=a@_@gG9=`8jdlP1)yZIY{}{;)V-)dp
zqqS15qeRauGv8rkBR0!-Dbm>V>S*5<DQ3~!?3PPcN?tT0ztL>bCvtW?Pm8`fUL3OJ
z;d!->hB;+726e1yhu>&vY-ZxKu#r@NjrDHNRn#06y}l>x>&(~je7jMo4*zMQc~Luo
z>&59<k-cqXQjl}RmYpt*_#${c_f!C@_6v-gA>}-3zh36@%1l;5un3ObMt^@5L6#Pj
zqc&MkiO%%BZ1RNbYB{q_&++eX)-yPiULM)%`6@C}H?IyZief#jPlOzak_*GLb)p}|
z4j_1X&h|xQx8plL&PtYZ)6uFJ2^$pTL-n?KCg$Fr(<FlqsoB%PTdG$xS&yh$WKzY}
zpZ@Oo7}{9!@SQ&{CqP`vIPw4Bt#8>*Ra3jRwcIF8{CscF(a~WlqS3gr><u43Y47fL
z%+R=IPR6n4bEzQd*$kHELNCCB7!e(=SG!mrYhr*Ws&$E8?f!Ui^Y>C0cugDn<v}e{
zSdfSqT=yQBQ_tcbLgQER?U*?^>w~;dS6%(=M;}jr(_9{|5Ns!C?F1~{)s*I!VPc_u
z_qwaRE}t?U{j2xV?+N>|GpE`65i%T_<`f7&6CiLG;;mXK>Tw?e8=ArIxwvsICNYtc
zk_!3_v6mjvZjDxA1YY<)4lK6W(qx1eF{L-w9{b0U^tl_z)DIBGxJy+u*RPgz=>@&p
zV%~x!ns+0m8#<30Y(Ulxc|H3v8U$59-{B|imc7j5cWZF#Ys)6s@9HNxxWW*S{py~?
zKU_a$eerNTZ0#`{l-`vk>G>*n15^0qw}B=Y{WYn`HuCeO??JTF&eQ7Nk`OAw4e9Z=
zqe{^iqD|$2$QkgeqY{@Kq8<B2_PDy+x!BxDab6FFyK{Cna_M`lJJ?R;O+n~l(oH;g
zWo68)repgaPC^}9isTSuYyJ<@-I_K|*@p(LFOG4lSFS|p9nhp8ymQyG6uhWTG?^Yz
zB-tA?Qg(Ip3K@~t#cu~49D#jNHf?Nd5S{%?vvOlsW_-s{aBNiB6XI6Ku(VgmN((Ds
zcrSY!H-bW+U~9Jcy&1hJN@!2ZVhhG6ClUe7yaN`8i8dFo6$V*4cnAptQ^R8-a1dhx
z1EF76RAnO{U?h=c|3Gpc$bkI|>a735mglh7K8CrIl$7Tt5hjy*tFERAs}vMsk^a4n
z&CMwf)=ICVKG^3YNQDbkNJvQ5R8#)-Mo>&J(3)*Z%eT`er^!3b)Pv=qFZO&;22@Rr
zcAOu49Fu%JesEeKz|`|^+z{1prYJ5z`xeEp)`55%#iISG#S{hZCPY<Abedw}X>0D<
zv%N_aI%FF23F_k@-E~3}QcZORqV(`n8u~-BMG)vH#+10GF+W~v2j}yY#EYQ&tU*++
z3_t%XH)4tjtkK?gk+?_6TU$?=D`nK66Z4B7&7x!k?Ng~e0bK;kq9o`<J*falhW|PF
zpkx@In3M&|a_Hl-Q8V10WfpPDK7?S?u76_5v&Bb7dVJ`7=6EnRA}zv7MMg#>_AL4}
z=6_2q;0EF{f_ow66N>OXtiRfogn>SV`#*mfl7^9;D8;^KA!hI%cSnG#zEc6>C)WdH
zDCnELE;Ii~5G0Pv3kn2ldL?0q3S>%M4I3K^6M_MAmj7~QY_?NaTbq}@($L_HZtb#I
z3CK@A>c|22<?io&d9L@{!OK}9;zt-|TuMekZqX-WLs}Zs$K<qIgZn+$voB$1@Wd)I
zI##*ZkT44^|D<nLK*0*Q_wE$S1JM&K3B-Fd$OJ7NJ&>D9XzAz%7~nTUDVPM9=%}d3
zcuUcgxl*+(_cS>hswX(}$}ZT^;_-F}-u%4|63VxECT?nm|FbN`kzoJ-2$cYY2+X6N
z+p`)KM?wHkc~ejT{bWk_{0I%iBEN!o8<YF_{Y#v0KD`K_Bq1Oe3i}t}340|)0bei-
z*O;G|2lO)V1CS8fXe?oX#|6F^z=8dbFUSc%doYQJn8L`V(O%m9mw&1$K=c-LR-`=Y
zQX**cA)xaB&}zwlu%4S1(DbxyY$_LV;+r`U->@gf#*|c5gUTq!75~|vgeb=(L74?O
x(E~Hhoa+M#6cp6cle`hsIrsqfc{qOwg+CCUoe|m43_b%TEukP@DQXz_{{SDbgKPi*

literal 0
HcmV?d00001

diff --git a/docs/images/haproxy-settings.png b/docs/images/haproxy-settings.png
new file mode 100644
index 0000000000000000000000000000000000000000..ab0e3dd44fc58cbdea180fc734db0c490b590088
GIT binary patch
literal 52820
zcmd43RZtvV+b$eJ2o^lJ1rP3S!QI{6J;>lBxD(tVxa+{+Oz;E^?ry=|ZFipMeXIVX
z|KO{=cWsJ;p_!guJ-zx~*L_JxC@V^#AQ2$Fdi4rLMp|6;)hpO{uU@@=i|`uQ;&GPy
z{OT3@D;aSSb<eEBY&hTdQiNgLpF{)O+S=?~!qybe$cvhR*KKY5T?Ub2E})Oc-_UP!
zmVWpzwslbOzJ|LOf<FIQIXpi6$$#>=o82K-i%vq;5P->~-@JC*74#OR95L_%Lg0tT
z!`u7&PQQ!mUx_rDdrXq?!2(DaY{AsPzYqdXS2z2jaL00lCWYU+ySr;hspLzNeJT9U
zo-{75u42d?-dD1Ij~^41rMm**Cf|sl1HaEbZ%_!-XJ!1!WjccY`}SQCnwB>%UJus}
z=t4hzr2jcO0$-kJ$j0jTcnT>Gch~8E_YPJ<S3;sDbolojnjgLe{yHK1_n6vWKOyD+
z`x1dGTpIJA9au!f6aJnGLLee}!oMFOj~-9?&lcmraLRv%^ae|u^4}fPK9I}&9psy?
zHyASi9)tRS`cZ4q(&Yvv*Y^s9(X<*BTFb7+PC4yfjX%CT?lPrSJPjaV(@k{-Js{)I
zStlD7XvQe$aqCdc+*fhoS`B9X;(~t?zPJ9d27`!6`TOsP)@h2oE_QNqa!^O96|=Nm
zQ;ZjI6S<96`V}(Y5em2sTpwkeDty#0M1R4d)4%=QC8k;OCuD?>yREs|{AXI8@w#Y_
zR7t5;+ws%G4d>s}zTInfUJt~SIhd&e^Ie4?$vm7NLDb9CuKp~$j#l!@r7}zhJH778
zdxMBIn$F4Z^xWPRs57Mhequ)<liOj5qxR(oA7?-mCRL<W#74$H^Ch|xyk^stR{ehB
zXFP?9N(R_BUOEz=eP=CC4B|M?XR_pJ=AB0#5*9~L=Q31Wht;24qim?;G+r*Tcztvk
zH@u3B!z`ag`D-Bm4Ptj+P$+7(W`TG6?HP?y=F<0d(s**IiJDvv_s=dpzAtu-MlFK+
z&CYaIu~#pA?t5GNJA8J>44YRb-NETlYZ1udJWmdbmuW--6`guzt^M@*^ues#pCwk+
zLg{{Q6e2e3?AiP2gPF^tRc`%T=i+Upw2x$CktBlmR#EVM0#WfaaLQEC`1Hj)3>+uh
zL#b9HS=i*_;gu=-bDRA!gjS<jGTGFe0~SN6go2K4{qp!FV;OapJ-Y59du&BgafD(@
zF+}X;+GlY))9n@)E?5I?t*zy8+jL2pT&}vMzw_qb5_5Vqu)bI_W`Itn#jt>D92|hA
zm;L@Da3vCsxHtxC<9kMPg;#4pt7xP`fA;RqcMrxZ2FkJNXR8ep86?hA9CYCj3Cz#B
z`?4b6^VVl(F23XvGiWb)x&*<aRSQ9mepegk1y*QQo?l-pCev+SJMg39+#zq--TL%M
z#gVv(RBG3Wh9MR(#bWbo_VmZ3{rr3DfA)X6zgn7ioth6rBfa;0SZek!D76}Iv=c%K
zBx?CA8He$7d$zfMjg(B+8F0dHws5JOC#q4dPwTkUtU$nZeRU;appeD4cU`quAQe*_
zi%^!=6E<CCFaUXUbnK#qk_@>h3$WR&l=o#!+d=GCFd22#6<b<bZAMi~o%5~^W`qN-
zvpOK%A;?Gbjf-7<0zU@^!h&i|dMM>`+BGsY7n>ZQUKc5rD$+-M5TkbI@xg8SiDISM
zMjx$ms7ui7W6Q-ZV}?<qcVqgbm3TB>ol0W=W`DHb+2dVZ!9aYK`rX2`-IC%odWIT}
z()d4jmXX9!BW--rTz4ux<%muEdp2?Dd~uPWw+D08J#C<q=#n&$7K0wE=h}zZ`5O}^
zV7_i=XxO2%qOvh4*S<1Ivy90k=J!qtmw3EAQx=e4`I9_zwBUC9``7;cHSr=e;AJK4
z^UJdziIx1>`NEvjC*j~xu+`XY8n;u<a+?R#|EdlTgIu!IuqcDied{#7jJ<f9`CG0*
zIZIxTJRZOQKrC@mmRcN%(BX6wcUK`zT(0$Vf4QfGVARo4ovSevhKNQc<4ydf$b+%B
z*~kLtRd_7<jIf#FFSWuCNR93nII;2iRk}@|L7;$(ofsR(-fsw?Dg&^jpExS{o3U)c
z0oK>m?u%UP#Up6~E(w-<WgsD;Bff^kt;Vwx=nDz^XO8kwyPmh|<9DvRsmunWoC9&h
zz}I33R5PoQv|j_4_-w)NuqVn#;Qp2=qps4#*AiqlicU?e15n>P%sq5|MSC;vDeLh$
z<Any7f}HNcAtBxT-iWDzZ)9TBx8jG*E|)_S7SaLtQ#S7tSetN}4ZkN&lqfk}xsl7W
zn)U6^v{V?$2&Gk^%r${d4zy|zKDb0D{7hh^H^F>5ToLq177YYjjT*Ljpxou_<SPgJ
zDodAE@VIQe0fA^(KNtSYfYvdRh~RdcJ-6KSMWx2Q{HoA;K~D{ddf#gLbu)Vr)C>n2
zif0cy3k+2t;Iv;tC+<(#=%r13=DVAX+@_zRef?RMOe8QEF+3gL$F^XW+MCA19*Vk+
z<7m#z>D1Z&bnhGe{`_PoCi8q}sGxc*k^5#{EX;;U;qOw?341x)06q0{Af};^sWI%Z
zT`8RZ$yyK^M>PI@<%HXDNqO&VV_<VNliO)uYo)^{HBA<%cuF}uzXsmnvkx2ajB)i8
z$|M?cVELso86uIA`ELD;zdErBK_P_b4DEEZ-dvt}mGA}=H#z7vVSLhsdJrQ;#64Ue
zPmZm$yG(kXRb@79^u|=gBJL*9YH@jA{`vVD7Z(>wc~v9K!nm@pQK8#lA5kgbv1Q$$
zbi$HeZ~sfRVop9rm(zBpyeu|8Q=|NO5Ju084(?8)-mQ!=<wpX!WHeqn*nH-Za(t7u
zK(a=+MHeln!|y>8%3#>;>EGDtF82_Ce9MU-==pT-jw%^P#0jh@+j6P+goAcHl92U$
z@d#1S)@Y{Hd9chsD~B)qpA)jPnvRn;xc9rOGN%0wljS3~5t~vm#7{oU_p-f9Eq-AE
z6jHJ0YtOLmI>87SX$u;Bhx3hX2AOduLIctGuH*H6`)LuplJbe5bQ$q)_&wMPdK~<>
zyCPeP#lz{1V|C+po8Q*O5Glx#(dGA#h~U^e&Sc%@A~tC_<cPvqhJTBQdDyRZxkfY(
z=Wt7bNo(r68$5?n7$`XUAO^rx_x1CWaT$NCXpJsZNKFZtfBDQB4yl~4uaA?QQt&%m
zD2ob!{5W2!yHqdy+2pjUNgH2qD=~DLQ?6aM0n}q8T*mGcB0^`nv+lbKpn!{!WZxgC
z-#V{1IW1QI1s~nem@@^3#&MjFe0x!y%hwxs7dQ%;51lu}td{0@L;OSBPD>vg<2m(k
zo(M#FGFIE4T~c?S!q85H^R@yvde1h?CJQ0=qqzH#%TzmNPfsLc8-3?nzXVPHIFAGn
z@%p}TKbIRNvTt>`JZH-pOyezh9_0+A^$)zoWxnU6@B0MLpws?le!w-cM0y<*@<J|y
z8ktHDs%`@vYnCau7#u({ETF2$Jitv;Y~NTudpKQ?dS9cRm(M}5Acy>64!u#Wqu{44
zBBU&)ok0iuo>sTvj5LPXuz9Z9%x5!(gCfqX#$hZ+u$ArKl@59Fq<;Rv;LDfuB50y`
zWs%pW<smByG3#(oPmmX=|8mcLf0|LRlc-HgA`07KzLhFaEZ|{)gmA`z$8W!36?a@P
zDg>F7<gPnMWfkTrfm(sfd+P=2k;5aCFkT>8!Q6HSKM3}kEbe@I@P=Lqd2f+23#jZk
z3bs<o<wSo|f_{BEdGQN4NO3646%HVCY;UHLO^zmD)a??5vzsk*XpiDkWxg`fAL7?=
z+32I9ALygV4GclP+MCWK<{r_R(;3qG@G`@w7ZahBBOrnRKrU(I57zT=7dRYtE5l&%
zGobt=(W#Y-^axvyWZfMv^T(l+5c7jFxIxEPcC(@H2(q414|@|Y3Ar8T(r8_ab)nN-
zooiHof$0m<b>~sdL1DlhZj;k;tAs#=U(++}0~m(euAcz}iqmbhgB<)uMeNJs^Zi*n
zX1Q^6q!3;t11^S6R}`!eA1^{z>&yl+xNZ7z;{5093Z%4Z^sC_B)Swsww{ok^CUu2V
z4`UYegJq?*nw9)!nz6=!2QfmlOS{Ka27vz>Pv%JSB%|VpxJ=i+iQIb--W#tcg!KD{
zz9VGw+9<S9E1st}Ec_Y2;9=e5xxUd8hH7W@YMgj#4){7MCz>2rCW`$Qo!5Ih9+u>E
zHKU0IL;1Mur@mp<=RvHyx@i+1JI7W_Wz3!}Qey%lC>aeK@QNOGzryZ6__^JrPnKX&
z$+lbFko;3SpEc6TFvN;iEgsH63Hq2+vW0%cukRbZvhPv$aX)IG&dO>C`8r!F4I*6+
z6^~?Tf^AXEkgMlwJyx<>E_Q~INd%fJGBXpTB=wi|#lnz|a=%SS&$EM$=kmlS&}2XP
zAX!9s?yolG{?pM2Gk-;wsSk5SLi7cG{8s&1M3L~>DBEmeGPzdTtZF(|<vi`W3g4{=
zJ+DqZjGqN4QAvOM{wXi8!8WdX`Cmv~b{9$h%SM@Iw%TB}GwnUC+U4Q$!Pc)t*!!y{
zKKJeO?SWBS9{T&s{ink{_9LiB+=^h}8^nbcF`6eS(togs)i%9j)4$EgW3%sG)8gN)
zBIy3I|0i0M|Bc<w|Ma7}m6#H`L(p&qz1=3&j*pLjCD05#%UzdGSJ(!gc5LkL5D5D}
z8g~WSbVFr_(^z{#Q7WFeon2gLjq-fcSWI|EGZ^iF`pzkGtF#fl3qWeO9fov2KR<kF
zG!lW^iyyfKQqkVmhw0aXDh=8yQ%aY3tSg;<guPThqxU9pne`vnd*BsAka4SBo0#_4
z3!$zLqmv~{V>!G9h^vCwbQ%mg<>poUoG}rJB?|Kp_k(uci-z3z4<dma4l50%R&@h$
zq*Ad&Uj0*huDiomyB!=_2au}dt^*e1zd+UX0af9Y`%*M0G~hjx>KtP;p+NJC@t?K4
zFjSH$e_NJhuA@Z~LGO11ipw2-zW(=g$bqz@;e`MKVo2i-0I=Y@Lh%T!m*;_#f`OR2
zjE-l6!4&4%2A#>+BYvXCi#4k6=_LQ<0v>Kou&5NLoQz)pSf!ZDmksWCxSH>9)q3DM
z;weJxzL70sD`K}C)b4a^(W)`*i@^nrKDGeke>vDPdTxILfU{=7=cj&@40Lp7mt`Lh
znysaF8SueuO=1GSQ%+aU+a~*&^SSYYg@7OcblC--8f`~G7PU(Zc>?_Rw`gS&s3QnC
z>1atvNE{ZM^jbWoE4{!K>Q5R5lCr7C2GcH2Z=tjIRS?TFp^p1Y+ocB9fh+%-*;*Gd
z_pcQd2e&etb~Dv|E<oRw!eBHgVB%{XHcC7YO<EC)MJX@+=_kb4eSZd@({$_W6MWLU
zR-p9!@P{RrjO=yE;&I6rkNJGO)FSlsfJ($xsvq*X^8FQ|-BdZN-En23;lanu@^~Z1
zt9>r}rSRtWd&sFws@q||O+?k&5irP|iC9g0ZNSC5L%DHgsy}_7ic#n_Yplmxi&z8T
zu0%EWNn1h_N;l`~%;HG6y$@m?qEZ?2>>(P2Lbkm>x?p2yIbQeu0J#nqzmqV4*tX23
z!~mVEWs`~lyIXIqXb7_V(Te*dWF)azQ4?1$nGyhuVxcH10}_!qdy7zJ_&m{vX;y^=
z4l|nQO~Z5fZy#Xxbm}eBh3rBN8+lwdC)fZQ#FTv3do#eTp(C_tb(+%^cerSd4syaV
zY>q{(v{Y|)uoQA3o5ECt>BSdk*!p>X=SVL!hKPi=J{JX#A2p#w`fE$M*<>fZT6Lx4
zj|`(*+j>WL>(oxzdxyEh5QT{}NL9H`Am0(cyYj#r9$JzR%0!@am5PgI!Xe?*R*f(7
zgF?}WV?{S^f!68fcqIx~xDyA@d?Y94^<)Ilvg_|QcB-W+l8^~Z(U!m$?9G9GPbpV<
zH_l(|RBD40zQc(SB!`FW4ra?iEdiJ|xOF%W5u`!?*c*vm;XF?6px3B@gc#lvL(EC7
zk{@ilg#U6dJ*y<2mVu69;qFpCRTlb=RJUE+<w=Jl@K~>Wx>U$@l;IF*?0d8(*iB?u
zo3%<de0vT3d}~B5r((9sX1N;W0lfdd->AvI<1Pw^L8q=kCu#?1=%`qAFRk^{nfzL9
z*h_$xD5JADZt6;<K*DUwX{p|3KiWnnk!q4u1iT4*W#yIfF&1Q6Xf}7xIft3@<0B!9
z=cibGUYF2}50CHPbo0v$JCqh_)ja8Yr8*jH(1fpc$lcf^mH-TnCcrsJ6A3#CfDdb?
zA0I7mPlplwAMUeaQa?O5&`$E8%IP+r(lr4!u1GF7XN)Ke0poRv^4%=mJvhy1-qj?l
zB2FQLlXcV(>A0_oh~Hy4&GYv6IvFgyD>}a;5vfzIq5*%dpzHNz*`#NYC1YlV-Ra>Y
zx9j~ds>33@tGh+VpX1|dwo8WNbT*ChYlj8!whGu|gw0~;8wrQBa%9-SdVN<<7!m(x
z`^6cDLU5|oRJlV1S5H{%Poob3+eY+y$=|#sqOR+ZY$l7U^o#1N3Bx}x12lkcayeFi
zjMZS>Rm4XDO4M?7r84y*%+!!~7=dOBk#jte-{?N*@PUr<n+OfhN3;1y2socEetcc=
z^T9Fz)5(N?BP$Sp(0+HkEkg9h#f9ub(SWZ;r!iw192ckb(gmBQtVAUIRY*FWuBcT=
zX=O=%Js8i&<6yi@Y+$lP(V*pX2<&qY*C8jvlmFg^M0H+Xz2%TC9nzD`=~`F1{tKU1
zy-HB%5DxRvTnj};#3d20t9p%2fzsHDyX~{25~t%r@0?5Sv3nH$g&BY5wZWg?dE^q&
zrNZ>Omw(D18z$CF#BzkZCd$2r1lvFbDQP@ax*8XRAMz-4-tb|<^kj1TI3@}c81V#{
z^p?ikzGYM?r<}A^?_rF5dblPPJZIJa+8jr~xc>`_rs2nro@GI=$gSb;6rm_5(*;(M
zNwoYP`=yG!f_Mr8ok7J+MtK67tX>mahRZ(G3K<POG{h0>A+>nmz=P>Zr!j~^_9x?b
z9+{1SIFbV-nL6_`%;z@0gOvKy8`6~;y|&n(Us%*O9`e@L(K`CI_Is-DG?v}>Ca50K
zkmR=`NF+Xy3V!abDb}FVs?qVg9@d#kO8%4PViwPzhO~aV;O-BmGx@1ZHd(ARp!W8X
zkfrwJi~W2(>%?@~g1as51p@%3KN6r|^vqOQj%QpV<Xa7wvQmV_d{i%VKEtF^=R=}(
zOJg}&XvpOEQGAF!x{?wPM>m{*H8%K-)~r|_zYTN*@t)oXh%H*FV3%uBj<v&iumT|$
zuiGihLpxAwf4^BTS(96RtB}RRiaf$zG9~~}K6R<w0YYQleK|sYKruqcrq|L1dyhoz
zj=A7tmB??fxoZInyH3c|L)9^`B*nC>qgSX`ecrE8^BznbP(s&!*Rt5;bW!Kqhs5o)
zGUa#tbDcso41y|5DV_G^)dWC<Dj*Xv+0O+>U}{#V9-SA-`7SkqnCT%c;GHFCK(6+9
zcwSGF{Yw6wgT|%tT`~a40dD33L-^<A$<fgW$8dLrX|gPRN{ur9TSS5et6W0?RI5T&
zXPLNM0m(?0EIM~t^WVS{s(>71W;>g=oEH=(8ur|rX15A?3VOH!5DBS}@9q7xU3=A$
zLGz)k2Hj0v?+=yI7S~<>)3vXBjUFQz$v{(~$<zPq`fynede9qzrADo=zBZiB{;_bv
zV(1+)hxi4l91f!))KL&#uq|7!)l}#DaK6cLelW%2SfB;q3}n2I1-vw?^!vI1NOOC0
zwn?)hBxHY6x=74%m`I~EZ2|xCcmX!Sw5&X8dpQ$AQ5%9(>G6Iau+yq>KUoos{mTZK
z;(|rsN%_4iRa+tlKcs(EhK(gPSpYE`wwrs`cJLT|eRMK}k_b4nh<-z4c1fV5l1nxw
zTrk`Lnp#GK{P&5~t7naNZZHtpG}r0K<jcJdU_LB|XMcyCsn(Gb_;t+y8$(tMhaQZO
z+~Ir2HZX^Vk!>OtD(H1C4*l>cXnbW3r2HiVI!z#8UF$7UE;W0s4F{)OY!@lG$mRZ8
z@rQN~v5rI6q{wB`-j&lzyGrrH^~fSXNA1rz+KM(gE^nA!{$cf9c?!_CUuoWJYK4;B
zmcHKzQdBP}(;eB5P8|XGSNY*K!>4=k5@&=X-KL^02f4tT?=UaV4^FX0oxU>f6M63W
zb3p+AVLzRpynu5!S#eWHn<y1WROOh?VS-s54eQ3}(gt_2gEiaBn!;o#+hHKf|J}zv
zR|0f%FnO}v2Ey|N7=zE-qYCbk@986*NX>o`-C**5-kPwG18|cXAPsb9*1j=E>D>s$
zejA&K;xmy*DI+@QbhTeP1hhH5e6TO0;Tr_vZ%q<_63}sR#i-iw(XOlwRA~kGdK7Cw
zskiD6bJm8C$Kl-9eA78F!Ue-Rui3&o-zGjgJ}Z_J)pz=F<C_P~aA>3Uh3^wAy_{fA
z5;=5KvvAEaUq#3UJX|xDe1v8Ujb#bNh^m$}hc*&Sg74?5q_|@VU&f`GFAAjM=0>G+
z1n{HIk+A7ME*m3_H_D|lkv?7+x15s(eN2iWj>&5IT+e47JN{ILK~8lT5sgS1D^sDK
zKB33uq?k+AGtesRpFrnsYr5Avp{=(6)s4pyp-KgAGq&Gqyyr7VcMI6cr8vAW#*i=*
zV$J1osSP2pDLq<*q^}G?!h=E;a>#W6*bFeZUq2#azzy^@yKG9Hki2*b=9{I)ouP^9
z%j+IuVh)jg4jNcBN%x!18q5*h`lwQ?luv!%fs)DLZ8rYLmQ)j%x<9)#9dt3c#8`Wy
zNSV#U;{p-IB=9($rbYeC#jtdWV|%0!;vO{ydK*ZDe0yOCtpGCCSc%JWSo=LDy*ub;
zam!Tq^CKIl&qx2fda@pSrEy&F&gk(%8M0tL+#5|!Su&fHC+k5;%{Tg2$ger@j$-_-
z#vx^Agev*swA!V{q0#u4G}N+L+9Q90XFRKAr<&Z3<{@QR#<}!CJ%Y{i;2rz(h0=g6
zT6;2w`T9QF?Jw+zSX{<P!!JFg7QTBMMTflpd6W$9$`Tx$DLtON9*51Xp~(rI_okc{
z8E6=$Mc>wHpwHxo@0ksK39`bS;!P#acg8Ao+_+#`n$I@8e4yK#)AU+XSGc1_>a0+p
z0vdFD)_8f2(V#Tk-H9Q*b#?cBe!NR#eIl2vG)!t&TeAh4O<|PLa7s&x{_AiP3Z71%
zn^+RC%gyP<?ahfFQMJ7o(Ht~4IgCJkm<gx`URV2^r0KMXwctT+%S@>8S3nY|*PePR
zFx|_inzR}Ncx6>U_dz8U5dYria;9CwZh@J?;s;KUI6atkdREDvbrKK|2yBDfom(8x
zQ@S}jn^{dfg;XM6ndz4c!3g+2@@VX<i@TxgWo!$6!6=Zbx2UxnsMh0lS_iE>Ubyfb
zs;QUjw|K<pLbrxZ<Y}UVamZG_0aO{zA9GW8iVdd+$WhTyl8N95jz$#qh<kkRTiL!r
zY>@rp*O$JLItoh$$l2V8s!_msoR6QcI+$oK;JaS)shizGgAK3c1ZT&rOHX|aI)k=y
zdGv2{h%-xpbxMxvkWsc4vr!qW<&w-KHANd5DPQn$!`7iGgRtw{3vZwRxG&$`2wuY*
z5x9b9LE`u-umJA2$nZLO5K223sMc!yjgn(`ywXw-%X+@pBup}J+tAg!^eeVMF9;sE
zG3BIR(Heg&Fql)6;Fzs2NL4ZONik5o_D-vAcx8HsF_O=Ar8xdt=)cn~Nbj27#$52N
zWZFf%#T%Ox)}p2yrg5S<2;(2!Nx0C_kN^nYSFG!}*u{^qTV{uIb!7<D<#(_zXaR8N
z;hyiviuAocH`>f+BpHi5RUTx=#qBuxzU!Gx<t(jXUd+fST0UOtREXr0K*qBA+^Ah+
zm<@<hlB0k8NPEO$ya>Fk?BRpFQ7sS}Ly?Gev4V5qti&;4qen0noq{(&Y0J2bx`k*g
z`l078%?tM^{!X_Kq`(E~pH;%+Ho0sbFHy{%*%g4WXK*?#6l)MxFf-bvxKErF3`Bb4
z&;y-5RLCzKRambbd6zk<MtkLB0y-8z3qEu>K4s22^+pmSYZQ9iBk)MXVPx}$W)o<t
z0L`ditrL{a3!s|0y&Y7WXcRKUYvd9rBb-)6ZSE9WeTg`I%@cPN;8F3XN=3xVNrnA=
zaR!PaQ+=IRosgqDB7oK_Ed{Kw$TeA_;B#wZ`dfsb?oN8H-7^9+ky^f?12i5eAtw2*
z!~KHVaPGESJVX{-8_8+mkJe%P-MKf;&6E-b<78Y}cTp5BXFyNKEMq1r$7{k$y2Gz>
z%Mf=$en$XYFV?Oc&lVGLGl=+@su0z}3>>lr91G-rkw@cuzj>6&9WdqeT_}ZCuisi)
zjppHq9Wxk@-()G;hSZ4Gpw)BFZ-_{V?*Wd8=MVqqG~TSdX!!qf0e)|>*x6S%w&m2x
zXNH8r&+P76*~HjJ)344@EV#L~Hq42V=nNudT#N&tH^+!Y4Gya_{c}|!TGKBb{+ppO
z(~9|w!%BWWSL3fy&!E!r<Yh6s{pxeICOUVeYKre9eau#S$aCy7Gs0;Vf*~{TWkQ|C
zW7W%sgzZyx&p0ixi;zCU-+eHf1F>L*_Ma?wYd4%d0R6ugvFvkYJQsV{;BL|T(qklY
zS?aO8s#+owBdk&$8)}N31gM&VDa!N*tfFymGKnAikx*ks)UE=BAA%}ZnG9NcJqQoy
zJETrDr@Qs-GZ0g!D~wVbBMH7pg3feCb9j4JUb{$D#=rLQ#+iJxZbiltAb$?1gO9Uy
zYEtC=Dctn@N*Vh%)CH@vg7;V1ERK&Y;N7X@VW!Dq`6K@CHP6_|ui=ncHtQYPN4(Yp
zLt?_`pk6&$w(?d?j|JnTkXf`pi@AL_CjlHkBEX`iI!m=GJux^<J_j?50*V7n*&nel
z#7nBP=Y?AVs-tA4MsGFW0$G&e{d1fo%5q>E@m<3MI;SqjXR}<4h#xCo&!><c6`?DB
zE==Y{I^6<11=0BI8w_j~qr*7SQ98}9w6JLmm#~L4@vv-Ss`#6>n|#M3X!@1VU-qXf
zGVsOq)2bFh`?c0xqGqkDdK7yTsurTkjs6u5z8q90wjy(9PIVhO`zT~18+<{!-+wSI
z449<`_*0;r$n=%@2Zf@{?R<yP;5$<8kc_$9n*=-09&Ua&@uH6F>7z)PEBPV9u6IMq
z@xlKUw14|XPE;lT6d_PB*f1?!eL0iMiOXe>Qg(E>i{g(TJo&K8D(f~&ym7GiV2**0
z@|eKr@^bc`^TM!A@yzYZBdM^752}|qAy-|yL`A(7ZUjOi>$igMd_XZw=XAyKVX9+f
zsc-o7nsYKwE$k-_9_nG(z8=@VvkV5|V8%gjAc8QpuIJNAy<f#<4fg`r!AJ3f@`vA?
z=BH~rjG5rXsANovGPN3}wqV194*8m!-P2i-2UB%`h2c7W0+h~_vxE;KuZO}P3M?`;
zWna~O&0Iay`^JErEEWZjZ-DjS`gkR%%Xs%=tq1W!1@~&jbZMvKrgvjC`}R~BG)FLC
zw4bR1oklS$G=|XT`K_>IU&&~eWSC+G-@KN;uEcEwf_!|hw!>^I<Ja`$3N44FR$7lN
zo@G8zkIv=(;sXHS-v~$Jj-_+L*DO>3vgRlZAr*u8;kNJADMqn|C33~3x{Ye)^Lqw@
ze5qLyUe|5yPH(vS0)SG%qLJ6FzcqXH9W-VruRf&7xGO9mx~S<ey_f;;ntbm2Q(HD_
zT=v(437m4k=F6rGXKuhHk*|8Vr<_KcNKHsO5IkP3&{nAf-e^nTLyTDidmJxoKt-N3
z=(YS<ka2%&0`h0Qw_K8q@h2#Z!(!udgTqBP6>@qhMB8wMBji)xnc09&6d@KsSn7WN
z1XC{H@i@m>p-D(8=r`D~&uQn31m!h3^n8*m&RTxBIVHu?`>X7-j*g}sCH+!E)K~Gt
zX*A$>A1^SHLM4^-JzQ>^-G}p~C*okxQxu5Jns@Eh<rrENXfTgXgL&{623P|fjxht4
zxE3zQCC@N4Vomp4K|36|(<?%5`=$CafG!ej^#FZ~5PneHO<BFk<ij9Z1_-cxizsHJ
zPPRVG`g-`c(I2!A8Xf!glLumns4nyC<8YZBQ|xsdR#B`>3%m$9ZRB_Mg^T4Gzui7O
zuL4S`UbEYHBqx1(ber2@W$tHFmW)`x5i*LfxYGxiczm^{lNFT$j}g?P1^#CdT_1?U
z7~&foz*dpLX@&#CxZh}VP>fk5%i%C}8JPVv@+IS&<-CiTiLpK?hEVYOPdo+CzHUW$
zUF;T_VEnn2iKa|n&%EPHWi~1nxaBj=!b^SzOIBh})88$Ejy~#?Q{JT=&(ZzX$X)=+
zr?YJX_91G;Y>vhLdA=`UTuu}AGneT<3+CCau+V0J8uzs$PF&Zxr#pkJN>kW~kYsC(
zn=IWW{S`v%Tq|8;Y5f&J%B;<DOo-ETabsAR&+3Ywpr~hUR}Hl5=v6*NWyv(RU)C2>
zVZZaKz13Dq^1h>fy0LU&(D5NJfVM)$a)n<iH)qzpYZwWKl0GV=k-7c(tvQJ|bYDcD
ziXm;*`ed&OK{;5H-Q7QKYT4Y_J+7LdwQ{~$yI#qt?~drC`0>LsSC|{gMwLJ$;6Y>E
zEjc^Lnmn%($zqVA8xH}vVpFdpzQp=5^;bWxE<hkveibtm_fa<U$8n38AF#^xi`dRP
z9FO=k_tfdce}3yfVa(73tEa143?^5pU2tn5Ll~7zPQO0CL?Hz88g+W&f4`<YPht{l
z<*b+~ZDXlQqE+K~?8u`=5Ee4pMia$vqU_{~g}>O8iks%HcBpGAB^UEyTJgAUgh#e3
z!A`KGg<Qj-$Jc`f_n;&_4d(95gc+W@KA@93DKZ;W!kKH?5!yqzhIU5l=bng8<lo$<
z3T<nv_h&aCoQ5A1-_3F(;Y%A893B=MaypE#>-uu3d*ABp)fdsf=oW$E3?Wu!Ny!Gh
z)x~jeBb6*L1Xs`ca(H?5010l?pv`K!7?DV+n91Z2=P1Y_a!ZR){(@I+j7FLZ0vc=1
zr;r3vILdC|x|0f{)?SMeVp#sTnZI9+PG=YNzP0YHU4Nb>?FPM`JX*bZo>|3s|BT%o
ziku0onY`eg!zSO7F5cgt?Bf=Ez8)_A2z0#~oMsZyPg5Ap<>z)h<k@6?jnIuYqBZaM
zSDXc`VdIFyxJ`fU9Dwpf@c*Xr6li1gB`UK*E_{ut%b?L%<R1YJJ@_OT)JeK>@9TND
z6Ewy@qLYOyBhnr68FB9)kv;H(uhSdk{q6v=W#M+ur{_Jn5!$RJM`TRe=#P~DoNlM9
zzNpum2y|UnBrEX*qj$8;ng8)SE^lsN2uRO;)BS;1D}C;RCS&@qPw|llUFow6$|=1h
z46Y1WpxwW=LE-m`!Je-x%O5+3{<FW>dhi#-+or{>#pi$C^630V|Hscb8Ki&y`rqk1
z{2yp>!X#v3!QogG#eWCutI!!QO#pzau>O%4TF2^YtELmVbjoz<IWomzZI1Y;s3>ZL
z+>dGOH{C9YAVvdrr{P{=In68U=}|#X=fBGBEs`{)47xwwAT~W~q1+hl#jZJ{2BlRC
zrUt=Z$iI@*MIq|xX$_pYsPRQdc%f=YWOX|0&1owma=)TtqCkjjG$H-<rAa|t<!Y<T
z@rIFHs#=7C?W~;!G|zwY`{?qJPm1$58R&I3eJWi+teHeyoy$tXnxo^sS@z(xreb!7
z!+4}4<HDbaM0k|3T#D2j=xmlm#0J&c2klzpDu1VDi>`XuiuV31;`e0wJQZ}oh{PGg
z6rpiHTnZ5|QsuKWc|bz3f=hzl5L>AG`saG`EJ>kQ(l@|jxHnzgGu1`GW60^CSVGN6
z9*S0@xILKQ&|f=#Z;(Z>2>Sl)_5{5~$xNs>xfZ2Xai_wdjZ6|0D`v?PbrA_wx3P@D
z^Km|+-p?1FH6)IauqX&yERcxZ_|Ae(Xa2K#M2|UBKrK0JK!-DxRms%yJ*Qr%JY7Jm
z{Ym6iTWVFFk-mXJm1FO#nb9m#KJ$-)A*RgP9N7sKaltgZu{mGxjo)EMrm9EqvRh^I
z`VKRv*H>mX8jqd3`z?4(goM;lf~8_N3EbPQAE%<rCO`jf)+A<osro!EI5ev|`gYo`
z44L{Jo+`xJr2{W1Ma?a%j^dWtAyPf7h$6h?Sg*x@{gzfkHd&(y&&NUZh0F`Q{hMf_
z!K0%KYrt`#u?KMK#et5O?dHlDd3S4*T6~5ePyB8wT3i)sM#+i(qzjE&nQvnn17e8@
zJg$G9LA5H%geFA#+0@jNV+GMpR>Dl3^qK>oQ3$pQ27Z)#EnWA~YsqJ8w3%Y7Vh$)7
zYn<gRdzVEWXqJUi9U3*lT!drNCdd|!(4gWC{@#%#G0{+?_t_DaJxFz2^*)+bw7Bw_
z&gg$+eTPXQ^{Acps^#_1OhNb^ad7nEJnlgw;}=V31=P?82lfTi{Ta`cI+uK@2!h|L
z>)MsN+Hh5XTKeRAC0U+JW$@M=S7R-(a*v$=IkfD8M*-d6wi7u%iBIRe^N3HufTc!r
zh}w$TAdSsB_`I*D?W)t`Lh{#YIZ7@Yj8?v3Hv%b_y=Ty;2uxPhH03;E^FY#fgmlrZ
zY4b_)NzA3X#R7&lmzTee9<F55DQ(7Ph^IKm3&c%wW-j80DT*^QR|O0zM7J^FkU)fd
zwKB7)d14{^i`8Ha#=y6TvO8UYZ{0zl+}{DGU7G`3$4mX-P`9IaN|EkS*oSLk!K`2J
zm=AA7KDMOy418wszJLEr%;N~CdtuS$-fLzEap<i1l4?yXA+wdryxv=-_me(xcoX?P
zG|!nG_GjSTu@k{&BNi<Zcb5!v+Kqu&pUWwk)DI%f^-67ua<f%stJOtg{JE?h5A=P;
zHL?BqZ(YvX3}gg-LcWq2_)yCwdERcFy{FbstA*%^_6s~T9N{s05TSuUBO8-gy%Abq
ziA~AuMeLvHZEoxNn%t(Ze!e!q7aMQC!;r-2x%;I?!eMcGYF6@GKAu0`jy>evv{wpo
z6BH0orBYZa^jLm2lXUyD8ucqw4MLU2N5;^nOuX*Mi%QC+pWdCbr&?&gRP=N^&z|N;
zpM06POf#0nq*Ghlnx>Qf>u{~EAaQr3c<@4t$rXfLeZSG2EZ6WVaP2NC6@{-M2Wo1w
zD4da0yL9_vcrbo<`fD?&?b`X}(oL^B6cJ0%b_!N14iC$y-PdcU`)(^D(OKTEfW*Jz
zl70ZAJEUZe=tDAQe-yXJ4#!chS&8CydHQ6r+N^bo$@%q>p2pgh9=B9uxbaAR|EH7Z
z@j3@6YfseHh!Spv+mv>`=h@=*p5mxLAo^?!f7A34=?c_nuQ4`AWs=&Js%h$>@jmGe
zoawfAx*o)3Hi!3CVquF`>gurR<<EMGV4JtYDgo!`@W)B!|8fE56@$9-7wy|}rV>$#
zt*{4;TKvfxN3zgXKg^}~-yM_pZ5wQ1KycbqwT>O!$4iP%oxWE{d7(4ohi%mGJ-rb8
zs)eo`y-l56W+T;@o&YowVI=Fag{z}qF>|Ly6<R_bOJQhxs>S4q#18=UXq}H>FZm^2
zRbTpgMB_m1M2~>R)@v-my8{5LRB6{$r7G3=onIgu=T~-K^vV9Wx2ywNj`|ha`EL2Q
zh@%FrbIo=SP*Q=@t1G|LKkF5<H7+x#=S``<E^wJeL)cp4H7si|g1Apsez{}{3383-
zO@O9qfsxG(1>A);Mrqcl<Fa7XADDRSeETjE>T%?CG&3Ty`7{&DGvhn&s>(vwE%j_5
zWI<h$ws<HQZgDfNM$?Ld|9vLV2leTfe!cUOInkf!KIF@xZ?uBCjf(+W-#&XGJyLf|
zzchOs>>%Y((Tt}5a`~#?(sVd~w{x_(hSR|Yx=TnVoVCL-YOz_F(ATN=Ihxxa<6AJ*
zz<a!9#s_m)uiCE0i}_w&`R%T)Y``I5)T<K1A5x9a)~vSg+)gxB<cX$TE>9EARwP%k
z*zM)toUC5dN#4m8ma280tfp2NJ&dm2@Cf-m>!*|F;H#GKx<6N1MyR+GvYl>B4-vgQ
zox;Qi2^EA2`rnIRz@G@Wm*lN@`%pl`<);{oT*mjYIh=Y3pcs?+ef7mdUyAZX(rucB
zEF1m|ua+=py=V_ShOD&vO*%*iL=G%rQM;w_C6`yvx2t4pbVy?BPCW$i9^O}F7F$ST
z3X?UNEo$!J))>kpe87MoGi?7*%K@zYiB@B!YEbiG{SNyOS(Jma>!~h=c({SFtO>Pm
zYe^#5JXa;oaBif0r{jqOD=9y)$?D#fO)463<lfaQAGh-kdJ1`6t1s(y==WJ1%$6?J
z)#=?F@4FA=JjCGFIUZO-Nm`s^jq%25yWIu+?z_Dx*;ws7ejo9ACk4p&7tb7g_wbLo
zcucqYDoW2)Imuumu^HtL;||wIr)gO4fo-vNJJkX<bj1Z|Xq$r^gN5B%0_y9GanC5h
zrhX}TEhlpt*^n&&VeEPz+^N&6nH0@>x6UyqURVJ%pL(7r?Tk$deJ)FqHt$lqs~-5{
z5Mh(!+s0CPk=uwn4|1EH*eY-;(}ZyATM7~(MPl%Ams34&$gJ_RaioR_oCg-d>COX{
zRWXN+J8q?prr9llJCU%W{)`|hn+QHfxsKIyq=kGI!_brg1M55sT?+I&iBhO}1SZDw
z`gh+tOxs+zK;H$UA5v>0>_svI94YK_T$Zwvwy1}5G3C?t^V$k2w3sw4?l-Zj($2@{
z64XQHh*+e2CO0B`YDHX;WS%$2%hj+CRTGGKS<ufmtLs7cl7)=JL<X6Sra?ik-~Wu)
z+v5tMd&P3b?v8P=VHz+qj#JUil4=BXr|{_?4j|#*up4K+{$x^%b?Nh<*?X-KCFuJY
z?ukf7no=vGudnG@)zopY7Gd@ai)u9SDAmCSgoTB)e*87b4efY#`B1FG|DxDDkNof%
zU1aNUXPJM>Ab2K8^mQ@*yHH(H9&han_@Af*vc#mkUio4Lmcg;#IEOb{z!pYr7FZ%R
zfGNF#Zcemt_jYg6TaD=H;7#KUx8Z?Sl}I|cP)^ut-qZ(4<|6ZbuIcn}jb=Bh*^FA6
z+Biy2+l~L}E$c#qc^COe8>rRqq*_BWm|aRf`;V1RE|R>Fu;26WbzbntZ|~o%BS?Rc
zpB~O&P{EX)DBW?|Cn#1u%-T0D)ocPQ5OJ!SFVB60!ZJ!q^NzD-vDtdRnAvuq+QLub
zj@9T?Ct%8y?%PD|+}JJ~x(;HavzgBq8$~<*AV?-+bywii?CBLAu^y|M-*797HZHA<
zy^O=7BXrom?Hj^<M`izNM7$khucDM+ehoo@TQ6B(bZA-*xc#Ql{JeTL8L(G!+C4-)
zV(fCabq7wgQnE|&Z03`|`?a{38KNFLtaEiDu*su6Qu=aPHe^UWTwuj)sLgHnJdUE5
zzBtu)eC$7-1kBXsjsT-4Zp;3phd7clFj}s_%*AYpVDS;+Q&?{dHeplsgSFmA+lG%S
z-J#FTUARk(&AK7<KSu_3vlmNJN#sd;xljm6HRn6ep7CH*(YLErs#RZDDLBIf{I2cC
z)`jDx-e>M1QRU^HKTkRO4+yR73%&#95Yl9~8!_8=?atS2sWk?|J|<~ORVH#n_W|h2
zEzaBL!m7fz*b#=*Dg7JMm;Li{xLBD}kK{?o=&Rlbtm_yR6qYjl>|{1?^~jaXP{qA3
zo0Np2&J1JInS<c25_y2o2wfUGTHMcEirEE5!lPwJR#-DsA%?CXKiv>l`B0@C!J!Nx
z*w^ER)Ne3rJv^)`C*l#bo1ZaUBDTD*?y*sBXC53PDP^jvtw5L#vOj;Pg=>1AUzSZL
zPucCSVGt8?qwTG`Y+f_I_6fe_fR5loy>v<WAL58e_-yo9z~2LHsqVY!{0>$OD!3e!
znfLeTx?a+BYl0TKMxP!KB)}8KW~p3D=Q4c!>qu+&M*;eAj+%SL)iNgh@{g0zsJ;b^
zib;b=x)X!StOie;OWShel7|~)owSVW+5oWh=ro}G1%oY@WXibWm$o_-&2w<fxVZlu
z4ye~N?4dDCdX=|7%Mv-{zNabRyTd5<x==G10`;<Al=pLRxUW9{By)m%bYydPju`xu
zw+gtK<SB3Q=18aGmmKlIi9mhuKHvynsLJG_mNtZhm)IC+TQ)k(ncJ^^<;>*nCe3c~
z6mlHaCKC|&_|_`@HSMqYs9j<K1h{lwhx@BV2p)JOfvdw%eWYHKMA)a*W!)NWq0nvJ
z^u6(BtV2IGo$D_45DqprO?{)+tm4b;--)1%EDE|I70jx$es0Jskav<#WPm#>S9LGf
zD{?K^w-)_kKa=K&j}EbUklM7zXR9mu?JgZ~Wy*#=ZqinwJ1IOhFi17@XPJOjwD%_l
z#d4FUM}vAZi@%e*^)rRUMqz6RrBc#XfA*p+tlbl21jTMfF_(>#Ke)dGjh+Se>4-`W
zHKIlzD#<&oM}cKIrVNwJThOm{%E0M;Z$2rn%~A`i+NPQuG!VBRA)nhj9Gm;x+$cW$
zT_^i~I)k%PJ)h$aEtk!t|Mxh}XjVS|6r8;g#A)s@PSK$<&``SKDWzjPfV!WiGoi$k
z78{9*2SeC{NY0(fc+oY5aRT>M|GHVQH^#PXG6#NfwN4<b#QD~u&+UhEzo8rhdy+b=
z0gB&Dx}R7Y4dEMMJuG(_i~{BJ1THig{B{p2CbFI3GChur5tQ_JX0N@~W(#YHsh@2m
z;XB8Xc4aN#Y%`4$j(u6C*l}N+rr-3TW%C%eI;&hSw7xqofi?r27wc+Y)Z*berCb&s
z?w2ptv$YYH`0D^XrMT{CRR&ul;{-66!)8SI;|Tve>aQZjsW-@I?B4@Bsg{|i_Z&ci
zQLy@5p2az}Z7_b{7kD%J9PkpU?TS3jxg1PF5-q(dLKz_|4*ZzxaU@i>xm?6IL;{~Q
zQAs!gw(Hp>1m-aitZ0?C!ZGw-R>G~j_D4vwInS^oJDjhOMo8`FJJ`+kIZ(={$#+cT
zomAUMz{qw7IPQeMO^5Yj52Pz8{s5_rQ?cwut+f4ZI?VWeUVC&x4M-ac(*7I(_yC6w
z9v0B07k9!+3w-Gi_Q@WFECg!MOWqtqeS2EDLw_t5(8K{<^>EV3&c5t((g?cD`QCCd
zte(IlVB@$u=v{sY(3@7g$o%<Yq(FRM?UlW1!$eRueS$LUXDfe6Bx|P+7112AgL8Fw
z<T=|{uMVX%l`FD%3Qf!P*A!$@X@B!)&nJc4<QwC`lS!shs>l-nt>)@vkQY)a(d&cw
zZ_-+gkBxR84MkN~0p-K1d+%a*>dLyH4qP1bXI$$gpL|`gCVO#8j*-vJ6!H!qL^O9(
zw<8kRYR&XWDkySLx2^DCKKAVwdjQ#V8i2Q2+^%G6xU}6pTg#l<MlS~B>$PsS31>WP
zCjuAl@bx<0W@kbuYr9+kLL@%O{%P*`tv`<1U!+eAIdnB2+(?J6Z8TOy?*Xt#|3$B;
zoC85Kl1{L8kUmUoJ8vHU@3b0lJVKVU$UubAb?il4^NGU!SZPQ-nciq_a_~0B5bEc;
zF>GVTx9Byfh1{*w55kbi;BcCm6AGHkFzGzx_x7ywg^MTfgooI-Hd+t)hVE#$IyP!J
z_X(%-G<Uwt#d{V>U=@d6B7DtsoM?ot(1V}7!RK|8o;5t&tS!$G2=EvPc;+g`K>FP*
z*H(mO#ZhW#w~>{O!rw?dQAER!oV5F6yvO0eZI<Zs<1nqG34!u>{1q67gx~$VX=Y^V
zAt8e*|9893?hWed)i_yTquEO*fW&niaxr3ZS&XHV!sDx#Tj$HIv>JZ^CRZ5ZHXuYj
z?vz^S%I_0mB30o26gtuh^1j{(399!xnzMcI7H`Ufg?Ibo?K~pci^L}xk|eKFYwML`
z4@Jjjp(aOa+8%7Py<fWN?3A0SS_!zUb$t6LE*t*ZAr1U{gz+|FvIKAy+UxQ^EuKh*
z<4Huk-}|v2Beb$Y2y!45G>i0)3=t9ubk`$}puDfvX^ORmqfWCL%f-k_;{c`j<1GGW
zAZ$E@VZ1r_v7z=GR7c$CpDfnib-lZ9+!5r%q8AOyA7}{)#9*3W;B(S$GAyOq%nZob
zmbkUwW1pzHT7axk6bqT|i*Le(=f$|<y4C_rl-d1yW9B6G2)Fsh+=>I=1V!3*f_sH3
z_4Q(V!Q|dkmw~sVUc&^ZHcM-SaaBhvP)?ZSOIa@Z<=<hG_W})T3&!|To&~?Xe8-2w
zH^nn{y8IN(hMie0=6Mx%ERwA%Z{en}?H5|Izw5rl8qmJlv^yLwtMugvOGCwa;V5`n
z&cG^S`(-{Gi=jq+ZL=63^2UXNTwBwBbIeQ%l}NDOv`5#B97c3%7ijdj>{rVXyT?N0
z0P+5{o7nHP_=Xx-$0(}ey|!GX9HFbLT<Y4?2*EU6(J-W{PJ<0n?Ra7T`>DD|wmyJ=
z)Gs`HDjZArpt$4?#wnyr8+w^$wUE#Ks^z3_1yLilA=ga5qe~`>-MDG39`Rkv<pY?<
z)bNmi&hbqm6VZ@!|C>>|pIZUp^|dRSdRa(;Oh?bws-?DYGxL`rK~A^}6Gb}oY=;7+
z%xx+1_L@%aQw@)fqD7(ZPl?ztLBPFwKj5F{N%Y6~JOW+lu`!dof%$E`o9)msk%izD
zGoEcq?ngad3mkG8gCCpn1K~hOpCTON=C0%oA|{(S!a)AKu<wj_Hud-FPvGbznz5Wa
z*OrYhV_armmUO=-MZ(~HAN_1!9eDb*=0k6MGU10CPZ=T@V0F2yXl07lp!H=be>0m6
zzP-*1_W@iwOYJM%ar6+K^ItANVExVEVXbQ_r(Y;Z&)fMNi*haprkAO+=>u*f)!MQ1
z5OCQv_eu=QWV^Gb8-Yfu<@`#ydcIp#WHSHd!4dQw2fPtOQ}<btn9%dsK9~hYZx4cY
zvI_Nmav3cyIEuk|snCAA0HkOst}AD4Uhg9{FrU8F^o8KVs!x8R)%e6O_dekijL9Jy
zi~!S0CY^>3MAmOlVQQYDKeX>K08zYfJTg=0cuzzY;RRLf=i4op+%Lh6mD=qd8sCFi
zJMnp3Ad8BA-a0g&ek&ik&inHU`_9#-PZXL7+s)=aG?L;>z4ZyGdEr$85Wa85wp4T{
z|LY!aIFZ}2^Yy!3idD(Zf+MbfX#U_DsZRhEkGAxGmwhK&Bj3xe`HvuAhT#l@WgLIG
zUKRKMl?a-py{|O?qr>Dmi~e|{PwDjl=oym#*(P#(y21Hc68Xbud-K!tuP8L9j{j;O
zIcPPjodNeiOi$6j?dU1U3RCHy#~`fphv7{;NR4rpAQbZ=pHZf2IT?t)0U;ij!y*6Y
zSr5K6?H5m{GbeC)XhJ6(RxXB=Hv3PMPIvX0|2#fHnC#pv;a_FrfBZm%|A8#=_lW<8
zAJg#vH>&l_NJ?(*CLr$)g!c)sCX3}VS=A)rK`pH<fDw3wA~<YEn8?Toh{XbVH{NDJ
zrImI>OzJ5jQB)vJ$e`K~j`PX1KYFj%;DwKgiHXAo2rM<6eEF!7pY%~j^q(AL%`i8n
z3}9Bm=e3*yq+ZEb;zo;snXh7RC1Qzmvgwp-jmJ$Th?fr5kH>*j9ZTL5zZidWPMF7^
zsji2rrl7@us%tyIU&s*_oyn8K1`k53hWpklgE{-M33AW+=#mc@TC7)LFv!K{K+XYC
znv91AU!?P8DE#*815yEp6PL}3`hUjJgf0UlNJ#*HQD?`4?0ZJTL9qEAW|3j1C#%=}
z``2;{O;iT=Zo8w|K3Dt6*Kp!-B-x(Ysj=BwRoX><FhF#wMx~<onpnA1dL8=m%n#Uv
z!^!>$@x4J_6{RGD<8oSPH(q(1tueYd1B_iy4_B)#epcP$5tY^EVkL4n)fF>UIZf8j
zq%qG3m|HJ>QP})AvUWgjCMXO==G%v_vhPR)JcnkgG^-670gn=p^a(}69(0kJC{hYI
z{K;C;3xvet5z!1<KkMXmheVfzU&^Nm#1H#i?G=d{d0lK13)=|5t69n)Ej6;ks}x8Q
zbGV)MGiEk-01?fk(T@hjZnMV*SH2k>cB*ZP4rZfQgi|$urvzK4-nVSw%TNO6(4`JL
z<amzDy`RIp=o*D~N5}rt>a){or$QoEOb#BWZUc}tRb?Ioe75y*5h?|$#^g%-6i31V
z<FC7eiBc<+9lJI{GMk+6g>3>mjd%eE4TL%D9jPpOd`=9maE@$A^8QQ>H>hjL-SEKY
z<^YS!UOPD!=65;3fu?iW@i~;@hN8@~ZVn{eed&Vj4t-+scmm|v;M^Q1vV=78I3gia
z`LnZYd@l1pK#DRZ0*JdDan}YUeN<_6Kj!*hw7q3m)!pCiD=3oE-QC^Y-QC^Y9io(U
zgM@T9NQ0z=(%p?9-JNIpf1YQbcjwyIIs3f5Z)GhPzcuGK#uy)yqr0F`xaY~zypK%=
zUp(zJs~i_Ai<+BnKaso@3xN?a&GPkNwHjS%m#V4GY99#4DX=(9jg?CTyL2<DI9&=(
z+bM3Z>=m*1ANJ?lo%X+5Yz;(JOf9+}t~3rWao8<4If^a5M<CogIFOYH`#><ZNNC_U
zk|r1&41P~{cXtiebN)|hE-+BzTiN75A-L4Sg8}65&YLgir06Qt<!+BR$BG2JgbRUh
zQka2jiXsYAtLozL#GpMa20QF!q7zoUKYuX%<Jowy9;XA%fsQ-{DZYwy-p>%5`QlZO
zR<Yz|Uo!=i*S81P72jIj%Hv?#<MTufe>k()HB|yLO%|_@Z2f@3=~@S$`<=1}1P_<P
zn)~yT$Gf$Bi6}|6imSHk!&G_$*NeX227F#3*dOZj<0wyNo4rE9QTV*}*aJ_ViWxF?
z#xlQLSx**R6LD``6b&ojaR~VS(RO=W4*GXcA&0-4?qmh;iSo($`U2w`1vZh}#ni+9
z`aok>>v^c~cVe-8%6Iki#PJ+~zuUuKnZCr}3%WeL^Y8=_9*6T)e{-#x-Q=|Bhf@WX
zftMDjb-CRh<QoH;jMswJ@t#g{$zc+_&$kGKJXg|w_33w--UDyXF|e=3X)zj+Fcv9l
zR2e#q9r09XJp>$0b_^bP*r^uE_Z*iqVvXfcUG<85RWu+H^gcUTZ3liDtD!_5hqi`2
z+GDp|&V^0i%iU3s@4zuExbfwdsL5$rv8qHVtJ86m*T~4|IP(+pQfmP8&iZ$s%NE#e
zlp1Mm+YDxv-l={$0l%AQyS1*s^}vZY9?z7(nQ{3?MK30N7+5acZf1;1hEixB|NKTn
z9gHOu(<AXLBPP<S(r>i5#6$#70P_s#%S3Vm!*`q0?2baCHt(`Ir^ax|fmnh}WZekU
zexokmDgq%C9@oOi6k6q`{QgJ~^WbndVe;owZ7dF(<z{~9e>rc5{5=vv5RDz-f%QqS
zST?0xcGiePF52XN%0e<BnOr8ZLaUlK^j%=qQ<S&liuXC;O4s<H*`T0f5{eA3*A2ZI
zH|hRlffP8$l(Hxl`odA*v1pF&?Cfl&OWJ*RhJYtDCZcY;&(qC~&*drPK|1VTa>F2x
z>#ngN;-!rnbW94j3@Tj=loFxP3x!oINNfoEfR##+FVOC32l4kPy&fEVR!IrYW57Cz
zNW?2&U}Hqo)Div>JOYWMeI-iSQyV;PyDR^cp?O!Ks?r&G=O)tw3P;I4-rl(=Zo5OX
z<*i0nCm?c3ybun923^268t5_;^8?%CIklkwjvG09d6kp|wYIrF))f$4itDPp8AWv=
z7ygx6BukZ8a>X8+7ku?TkNH0-NFh$$T39k66yelB5r0~fM0GEnECHokJeu)xwn?^~
z;@Gnq&ay`o;c!=0p~U3n=lA-W+#DC@yWehcs0js!LA>C6xLZZ`1?jKXokbmx4-yF2
zK8q%1>N!J_@DFPnKi}<+X5OAYSH+gdXSlws@Kh`>e!>F>Fsk$Ei2zsix;L=A#F5Zt
zjdvo)Bv+~(HvhQ4+!;v^?x5PD7|mptLbNr)34tNOzjjRtB480m9kn}xH_Ke<aQnK4
z^=KDIBqWKK#p4zxuKUk-2ozlH&M&>dX9ACL-xYozD1DSP<l^x`GIKd>XoW#m*XfL4
z+0(n~Hh-T!^qdoYw}LC`Ur}SdE==AtcFacy;(<J`aRso2xj(l|woIDEe9aQ_%6mDz
zP9U)L)ns}#Y;%_x&9Wab=<-ykhe3oyfFbK81RA7&XAi`%q7K*;gZPruT<ra+k{mw2
zSdFdO3N304AcR|>pQgWTcu}01B$ImOcmCucc%ATfNz!Y9NIsd`rLI?Ek#gJY0{u4#
z-WlovwkFeo$TA~L8dq}xS~GI#iPtW)F!H6Ao~YM_Qr++VHW>{zNCf<)0Tv5(diAy*
zubt1cgCVeJia7$oX*hbu*9Y^nk3j=mYmEs6%|Cp?+fX!AX)K0Q{%M8p>bBX3>24VC
zJMkr>hi<c&e9GTsS7h3){qXTRT?^Rk4F$O}BRO0|utnAC4vHp;6iUVGjvCnikps#4
zM`1NvDdzO_Emk<4mQLnFfmAAqA@qWQSkoYW_p|u(?;wB$S<iO1i6e>qQ6Kn!EyNV!
zif5{{upH1?&40cBfENNsaIldB4g1O;`10)z+06$S-)9)J1r`QPxCUDs3W+7Zn=RjP
z9xvtEEL7R8mjzdc012&8iR0>wjcS44ck|KjpfdVHqpH2C$R5fg2#OK?BsMKY&pmZs
z2#j*&Tw{o#ux#l}#wv$|YW+@JCPV%P;@jQdnO?xsEQ=)>i^^kNn+qmK6P>I*Kwxh~
zEEM_onJS*<=mCRX{p`Plo@;Fenan1=z<O0;vMo6P2Iy;v0)9X;`KM8(sMaD(7y*Nq
z-J!HA%K^z$8gH(qWYlahR^eq-uc`EP@Dw;9L`nqxUMhji)Pw;9OL?8ulIV8@EH?oq
zUkZ(07$ivcD$~Ee_^-^9fX+~9-@7xDEL{)N{>Vnt>qr7WPsMb>6m8MJv00UjX2WG3
z!<rGO6#5+>N008^S}KfAJ0BK-tP=@`#eI8D;a?)uTq~WG3_iOtvf6Hw!7@;@H@M!*
zLR&~DagHAAH507_8v8|Z4}rKLEPBHh+fmyfjlW|bSJd=6TxX{!<Q|Z4Yu!#6(bs;N
zkX3fZLjMaUfxIE&{^YAss_yc<bWQsVmfP@H^hay;gEy;uvMIE!0f(H+e+dO#|BSy4
zRLtaw*$=#}HV9AIuP=65YDz!mjO?pUy-E3<Mb&((cM8%W@X%(xRt&p*SIYthfgrDX
zy}@K_Mg}}DtcGF;usqin{lj!QYg`%pF02sDHKT@6Ul}FcKi*6RLw^`}Z#j}K^Rhox
zbT~1mlxh0LLAOCMm7eCku<stTNisxjI~VXSt{==Uwz=V<+D?T;{P!oTkGlAzJvmS2
zo;ER=FWK&MS^UsL?&t08T|0a^w!1^fX#~Ts-QlBPy5MY*Bj|H*r|=hOdnLn>^J+vq
zbcEPLp#6l4YambvT)qiyl6oO|J*Qm0mbACNM>=`gx_28D3`v05EFFQZR}r};s5^bv
zhQLyI8psoNHXen=^z_=ne=zn^yi~@%bvtznJvt}-YrXvTKj}z^=L!;2UB5uMkY<(k
zeh$-L`2RFj!phI{Nr8@{VK8-OkBEaP^#5s6-(|hZ0vXjmNgj#tzpvnbEAqJiUn}w+
zk(&MgXBO~3DR`pH44<w>RCLig<%-w1|EnD|{sImo=sn+v|CNgum@59CH`4R&|Nd|P
z=d$wtpPI1$BME*XMA<-wEfs|s6TCNBU^SAa@~`cI3^vy72H}QED=jV#(^&M{8^_00
z&(YxWrnH?Y&E#}orA(z!+Xe2bHt+NN>_iH=RP*17qnTX)Jbu2WqZu6cw?DriJ%Rcr
z3Dk2rydJV>A>G@XKff#x7N>xNWP32qZk^~=q=W>fSLqWQDXe0SV8Gr4$+H<SQvg3*
z)pIjANu_^ypM!Jwr@1rm@Cp$4{Mp&LzFiN5{(#Fan@kPLf<GJJM9Lt3hx)4km|VZW
zqP_ne3uU`bvBeIgcAL(s<UDVx;u#Hi{{&T3&<z={cLogEVNol;*+*ux909onLIDrS
z*dsA`Tr&*+UM_`J<5xThYy&>O_Zc_}$%_>-Q|0GsjB1$Jf46GanR=b90Iy=WrOS8z
zaDy<A5P_E2>T#$Erg5qziVpN6i{Lo<#$$FmSy(8a?h4ZI2J~1hhQvR&f}sSk_ktP~
zDy{%qGNEw$@KA0ueSrEsX~a^098nJX!I*(MiD_SWNF}l=`o+`z<%oZS3CK4{GpIJ~
zkVT|XE!;S|IbM#!WRTsuKAhJWgQ)?r7CC%gV|U!uBMD?*Ud}<0#^-sYJg8G|S=8`Q
z#-P{44=T{Nx?phY?d>e@$lserA|R?%7P<1nCke7E;4w80gio49QE66c<Es^dUl#~u
zGh{m?wgicAm!~VONxjY@z(#9x06dSn0{t#snY!@Dk}SVs)K;V)bNGD{-N6W8t3N6U
zuLR7kR0^dNIPB&?PZNSj&<1)=I<4x$(wmc_QjqyF-JU23+GCAU<-D1J)G<(K+xRar
z_+0z}4fsad5J>mZs>jBLARHx4#({63vY2~;r6BnW>No*#ClU^#g3vpl3m4qxco%8S
zjz~=sBPOA4_rw2QwGmrEoJ|!9v6L)GMx$q;`~Y{=m^u$G=wMYGLb~S+e;KJD!tSaE
zz5!OV&32X+K@6VzDxsw0Z<E6^Gl)m~s={|r`ZXqXkl3d>nB}BJeStIeXFan)LxzS*
zN*1=7H>n+-hyBt~`L~tQ*t&0xcJr>?X`>)U1VoMTY;0!>`0e?cjSb{aJ^BN$bQdf3
z@`G)dONkgxtvsT9m12D~%E?p>RZF-{dK;fcJ1Dl_Arb1g+7UX~-fJfty4u4E{hnsA
zpUsXg0AC^2*k~T0{9d_BcyD5aE!AVd4fmeOOD82#n*T;A*g0D0&%@c~&*_b50*mUd
zrwe#7!^UV0tRyzV#6uhC3>d$;BfU<RthX1FQXe|HbuLJ<;^;Ihl^@?2nbN{}{;Z4f
zIGig(ND=x&HWyTodwxwgLw|yDIiW`>Ecxrg4E&OYMhEJ<D@|%-jy*n4`Xr9ohq{1=
zFCzeTFg5pC|J@6p41%t15@oTLwS~QI(R6zQC2NoZ-3SZ#R=8vA%OmOkgegf%Q%G;q
z*VmW!^70zgK9BGn6Sv+oo8pKnVohL{Ve6UZ`Xkxp`iW@0-HWN|`fpC4Yh^=dhZI|3
zx?R;!oOrj9HN=-JM8Yqt#^?N#YZm5X<W)NQ@7Ll@elBcCI+}DVOWTG>nT0U#wxa6w
zRko(VW4GC2v)P&6(u!pSnQiY)(FL6@n0$VU;jnNv1i=XI#fD3=_mBgy0fXDpCD=_d
z!ozHXZkVTG1HE<S?oWu%qV?0e>QcWUrx8UXNm6E@W&{+!amzb3DY;CXB36b*d``8h
zmiR>5rNnD>4OedFAwYwFsKnlZWmKu8s6T$*;diS%-tYzudsBF}2|d`ajCi)Mdk>dZ
z5raMIvkTcgvzn{Gv$cj!k&U&(H~N(PKp%D@jj=ldN?OEN0={A$a#rOxL%(DAB}QdV
zFxA7{NgsQQ14@hvbR<JuEA=C~eva%>(uOWrobfghA<kSmRfewBDt@xE%ILwKk!r(!
zH1938kA~rAwGe}438{1QGh1;f1DRiu4%5-@?-EJ%n(Q?#l$-Kc)t`soRVpspc@ooE
zLRFWXULCsa42Alc+)!lEPMm6vvtp*0C|YQQ6<^OHY%4ayd9({uOw%8Ht}CuCanmr$
zY~%Zez$sSG+^Wh~>^vH~gD0o>*3|Nm-Z^(EX%;eW+pw?Nw_&!P*-7@-uOf<c%~`Ta
zSqYVt%feOc)o`J(_p3dngRs_^^)nowUC`Z9=Y;(xebv)b8wdz8dM=J*aI=R|lMQoi
ztx*JCnb<L)X7iwGov%?cr7DeI^(C{@N-ddD{d3n?Avi=4-G4sXCoLU97F?>UwF>6q
z>-8#0Zb&6MA7U};E1SIG#rT?+lkYbJkA`6L1asN*`7JcIid-taif+p1EHHMkRHG!k
zMmZheFL&qSEQBP?=>Jh`*0^D;ZAzVn-Xtn$i?E>?O}lnAnb9wp7Hrh@(V=mvK2)Yd
zx6yV0z2I>>uLTcIxNO2?guRK0(8R$Sp3sUvG+DjTESHrpUr0TMS?wSSTKp&p?<Eu+
zH}%2|0`*G~5)SF|@5?f%ia{0fUBbq+i7!QvUc&HhL)>)<NaLb8HmN>xY{9!4IOQ6h
zmO60LSl|ZKs8Ya~si3;y4gX!BUZ#q##y4y9-%q7PeT&Vm$3q6(cfzS)(wCkaLrbt9
zXD6!?IlZiLB)=opHRK4jOb=%9!|+ynFWECQm-rFqo|#Nn0Nv<kjQrY6vaYcTe}Ytn
z9yL-`xeydngq>!_r>RsrtyonP5?{wFsQJ=~3?Y@(kl=zhE7Bx&VwG}k)<SohC;1$Z
zc6M>HCaAU$!U@_o%3hQzx<~?rLtz^OOkH)xyaNQuksD~+22f7cZQm`1StsmczA@$w
zWfU1*iTjNznqUj^#|G_}C!^27>NPuBe6r426K{at&hXJ?V!&vws^Kk)<C|FbayRy9
zKypF%h&q3k*7F*KNI=CvwahExUHZIJA-{(Ui7<pkQVS{o5x;U1X_XkUpD@!seDE0-
z#D}_r=(wMAYYvQD&0uA%lc)|d#^HXvJ3(<N(+y@UCW}sx@Y9aLtqivu)U5@TV@Err
zIqd_~Ocv?n<Q>i^Doo+X0s65dlnZ@}^5|6SRqjd7Tk{ZMI-M#UeD<<kB<1nsMcQ!3
zaa48mjS`YG3Dm4n)Gu>Zs#a?pxD76aF3}OzsV9AE%<e3jjK#wqF(VhDzf+8f=eqYO
z2%huCNOgINm_~J6c~0!7rR*@Bf{gRu;4^E)cXi;`(vHle_4Y~#6+fxt(-qGB84sUL
zLFO>E>D7@PqyL3am}8nTzgilZjtBpnTV)VETA7n)Ls%p7BF`HFk_~}}!@E*hP?0TI
zZHNIkkNFBWl-*Z@?u>YUy2OfQ5W-BOh`Ic_^`H)F^doc`O*+(v`tbeY!rj_+0&RGQ
z{L{P%U;4gT++RXzYjVNNAJh=q5Q148%sX_Vm-YU18ysMdOGK$i^G3x;SKyromr903
zELHYxmisPx;x`U7xWnf)V3SvwyZ40b{fbd!XCU8y;Emf0<t2tbsKz6?-~Nzt=V>f7
z6M7$<LNQ$qw;f1gf1>P7`>Rh(ts>np2ByRQVfVYhQA#8uu@!p6WIq{=x_ciBVupba
zX9Z<`!xaruK0+)8YV-6=hyXS`Ek*9Nhp~sbW8-8&iC!z8#z%Sd<pPDYzwA+TwO04m
zI-n&TCPqxoW^Q9rJ2U2&=ug6KeK;%OZ?l+!k>xP`d<VB{>{{G#2T|mGhXo-;90G^i
z$frg6aurwlp}fG6rO}_DLPczq22UW|ZWb~qP_oogXMM}i8OmE_?4TpsYCCNQXJDND
zb5Nd}hCNNLWT{T{7kp;e5gCU}Zfn(1MXWvMJhm2WHF>eNfR7OrPulM~rSmuUY<OYq
z3X-m1YAyE-p3@N360j}9`F$>!Em$L5qg-;JV5mwz!TGpW-Zr;s+4yv4C%<X_vR|Nq
zc)({zpSx(~LY&AfUeU?5`&*i991eqak0vd{QQ%!&atA4~{cMCGnOPYAVd$Spe}5;D
zF5!EorI`2XOo!Sg`h~hCw29U~@p)X;%he+|P2L>#;E}Z;aRgs5UGmPV5OLHWSbOqH
zrwn~YpFX;6e{08r8N911G5hpozk|G7Qu7s+u-2<xgADrvupBIsTB*Ek8kJBh<y6ti
zz|^y_9v5Ygk}uJV5M4x*@iw_m4PznFtJvOuKr9w`Bq0~>L)jUOOdSmH;fJ*|-=p!{
zZKXvp8*ex=sZp1eRPzd8G~vgkQitZY_M{+nNI~8T{$Skzlj4d@FY?t`Yrty;Qr8Gt
zvqZGNsd>T8%l4r#k6C4>@kpmr7mjo%2BVqPdvM}Y8Yx+ZplT9(^I>Y46E+EaBnDj=
zs;DEbUWDEm|3OM19g!$y+t0ix4=+%7!7ZzZK}7^^o9_t@vd%}2$0|cPRIgEQM6^k3
z<UU1WF)8Zfh$vNEw{e?<h|i=Y(rQ(YXzxPq_#JbUS(d<~|M~QhRM>cS$;c5_2<|ge
zV%luDMtMK97@|N$jwly)oQ4nzsU>xJ0M0<uY%%4%IcTW@y`)}0V84G;y!(1Ol_|Ic
zGc5Zj%k5O7mcN&E!F6ghgC)#Z>*PIN?|z^sUtAQ*(SYayZd3|%K3a2c_2(BTC*5M<
z&yXz$kn_cm2`;6Scyus7SsUz~^3Ko`+mK0BYbX~)XGB89_E2sftpnj~5I#=O^u@<R
zg3ANbaz3I64;SXLwpqVv9+Wiw<sj!N+BPs&d)iNf#oBEJhe*K-8C_m_rHH9zpXS+A
zzsi=ylGq<p2WOp7EILutjpi~}B<+nn2Xu8zrFW!Y-8p(AQ?bqiI++XcwmQl6$%GhU
zvRWXl%q+ov*-D+j<7A#fe0lO~JqyyS@F9!2HHCqcDrW(VWvFaiAm@{r9_{rK^zm-a
zL;?n4Mpi=pIGtpz|4BZAeaOBFDIE+X$t?)sbC5@{4j|CZ>iE9DccM7zJXA4ZEdj#3
zL3Z)6)A)sxZmDV!T!Ep0Xh*hb`EUC?iy3%N@nB?IS@KD~HVal`4SyJyFapPgT9G2Q
zvss9p#YQ_UM5%x-@z)^oRRtaet9NR{^G9*GvY{aoR?52Do;_9-yT&006HVIOGmyz5
z|1%3{{Hav#h39_u`wl`9!ViX9;JIIuDmot45j1zUbn&!w?ce7MGqM<!Yo`a%#q>uH
zt}B@uLWsh<16}a2ly0Xd8nR|@m7NFW-+tRNk{9{lR9*7u0=*zWX_taW89Fka$;DKs
zQ;=Nj*Af+hSrd72eRb7WNsv5rH3`QLwHr=j+zz43yBAL~5JMAq_YQLe?JapL_MZm4
zFgX$xIc^k=5M@|wu5!rz-&;y?BPLPWoOYVi4#c=d643^NdA72<l`iQp4$UzxD}R)J
z7##1UW2##8OXsRr_U{u6AYDTE;os3`BwUor%o{={^unb<M7SGQnK_j?)cm^`#FC|y
zIr(8o$IGLxyA#jv>Tjn?S~C6bFBW<E$ga@s-WCgFd~Kv*F#cgE5R188$yk7)9<xU<
zsz`Tk?MW3Q)Nb*J&e;8CM)5=IzHij3eC0gstvFW#$utI3u8GY%3y+(lL2a^cO!K8R
zI{U_LmB`<;6--~{e|sZzoYUZ?ibc}m1&JY1XKdxFtHYU@RfNLVzLslLJiHF$6pxOv
z3=65PMu%P!yZ>+@n!dqZF7gpRw6pbKha9y=m)F#8<$JF(nJ-c2Z;?OZDVxVz>tDoO
zZ#gO}810Km>)-H~B^sGh1#hu|(9`r0w+MxmJTN0`X;OcH09NC@BNr!A)n^<vsEZP)
zv>!1>8yx*>rFoKf?EcBex=SpGlBFp0-$>$`n*%H&OL@4qFe}&S5lT^L4Rt4kcpX*!
zoQr(b<}jgCyX*E(^Pj`teI$?Q$)VF?<VU%LfN<XC@}1H8qE4QqW3+EtZ9@HhICwah
z?TX1^pIK+?uCjA|%y_NN3_86c9Tm^@X;`c{ZjL@lBnFow&G&p#@pXVK)mDSw603+D
z|7cyO=aYG8-<$3q)P)a_%qNL)=yz36=x<#^iauQ+-Z5En=p}>@(d#u;THd$HnLU7s
z%}^MZAsF!)hnNI+nw<af=Hp3#%C45J(AhFyZgMCXT-@#!U~$(-8*B(pdplJmC)J(P
zF5M$tTGO_MIsMVgn4#hATa3TqQF&amK^iKZ{yxuX&aub!_$zW`+fevF;tO>sy&uA1
zaK?gmh&iU-ei`ak4`ybs<YYN#r8nPKdq7zns>gpqCl44*c{jqsz)!|?z?Rf0j6|L6
z36`DiXapiAd+3~!1PkLod@i|vnSACYT`Bu|E`Y?(WT^!E_QCCqJ9R-=ghE`FGR;s}
zOONHR58KVG@9FT9;nec>l@HLP?d!B(<qzPdEvdS@^LuX&ulSRz`z{DxMJe6tkLj2o
zs%pw+CtpAim}Q#wZ<o-j_H9|)!B3{ru2H^|%A4I6prMt4rzYFXJGiA0gr7v=4Ob~%
z<7j#~MxsMTE*(%Ul2xgN$71A0w6#s0>+XmbdW)lHiXSj{n-Pnv`6K*Dqe9aLVz38>
zBPgj)LzQn?3z0kYdAT|n(mdn_#yW`>TLJN=Sb;$#AmB5JaiiwFh)bO>G<9ulKwci0
zq9MrrV7BAdn^rN3_S&MtRGv=D*v2Cedhq+%17EL+%xopn<a23R;ckzv)nYwKYKFDZ
zDVI#m68PeO>}J&Ff_R0$xTF~KvY-3O)Q&-(0o@qvc5fm#-wfWC=QL<HJ7xubzX)8{
z5s8ssXQ-9vs36>1Ct^um`TR_saJ7iaYi0b)NWAd)@Hjc<;bZHhD)V&n`IApg-D1_+
z4xB!?jp-`f^6f<!w9`+l7}jqLZ~{{`J0N#*qGlh>Uw&x!%%DxoM?iiB*XmLX1qC8i
z?r9iwBnt0jVNU-X>Niiwb&}6SGOFC(U#Dkec&ZE_*{K3vfmy*QW~Rn^qyMNQ%#=@@
zMd$s%Je$5>!HM0|BrNpv9Yyf^f#DB^I!4?@&NEA-61u~{;X>%H0WSM0S;z5@?1390
zF?H?Y+^HX6rfW@&(~+UvmfmV}JkG00>vkX7d32yzTsGzgUX|?d&BH*HXQBPPH+t>&
z86;x|!><Mgk;+fB<P7oA%+5Ory-nmoF``qQhUC973Ht=?guQ$MucQJgV9MFbkolgE
z9yeZ5X4+vC?+Bo8^Tm@W<RmB7a$IbBZ1y10Q6KqY*VRxuKbYPdA)%w{Sw1Mi!mSIf
zEB^Pi_(}NP%l`^4hWy_eR&Pdqq@n@VToSP`_7@sI5fobWQe+a*QXyNi^{H1!7Z(>;
zJkHAYc0a%@sW$3zd?4!wgY(`%OezUgu&f1RPHY-g^6RhFHTtctAlb3zoK8as9}GKl
zEx>O2b*UFjc{w&8-})qjR{+D*uDY|We)z#a?|)P6JEX0VQ}VnRI86FqSAk&o8G-_T
zZuId!v^4ScHGE`TcBWLN-u(A>FazDr!9ed6n<|tMyRrrkT>jC&k-Q%_nv85V|9zES
z^OX?vu;{nn?_F|VI{-{Y73^!{o{RasPC!}ut{<6FKJCATj%v@pw?HbQ+YT6KrdKFy
z;k!ivF-DQx*Q*Kmo^mj%2JnsSWu+X!s+V0OkbA6FEMHbp2fj8evt>dS!h#{rrh~Cn
zFUa)G)~Q`+>R^Bj#-$ZOB&Xh2ARdN?Q8~B!{_^kax{0MxbljhU7i%{F`vByVo`QSn
z`$g7zhj+`owy8#HV0%x09sy`AAZ0ntv{Z=YI2Rk854_sU@cjHO*y5TOy^!mG7%W&>
zn^Yrzs;oK9K$Xwpiu?WCAD>zt>W|gGl~f2F+@EcVU4MD+upF{G1m@s%q!0bPS7aSH
zAl3QZyG-Rim_<bn%^nc#zV>uj(**{=C=9yn+hAjR`tjkatnT~y_Mp;NMuHRyE?k|I
zcr|gyv2Q%vxk_~(GPGX#FksOrqtU3wz%aA)V?43QjM1Qc20KmToZsh9@eWD}JQl`A
z+RyuHjU@vH2dAgy?(`zBcJJA-FbPRSL%{fW`e=x}ltv)dW$NGJuSDvqYpWU$b+QaR
zDJHP`yZiexD%b0A#Uj+%=eJQ+whA%}`8$}S7g|%_Ek`3^Q6dV5?O%szl=`G+`r&4)
zuF(5)U96p>r)OtV%8!?ul{8}7Yaz1bplGmHOQP4cQFYTak{<N9v~jhjWXlh4j~2z6
z*oVOY&H9N-DchJte0#1+uf%hC7W=PR0;$Bz`j;u4PXAU*t6vNCZa~j-3SniqA}OHV
zVHJ#JnXl2w9SWt-tcV{Nb2?xq=y!u)(EsiylzhdVDTfFv(Kcy1Qp+89o?BEbnMN<5
zFJUxU<a~U5SY(jPMA>X|)`F&Tq8<nSmT!aSk6GhrsS$oPp4Y<`gT!o2^o>e%T;m7S
zkTPk4B&7OqUditpTPaq5ML;B_Bt8fP?H?S3?sD2WKb}>oA3;mbp#sv2m>>*B{WP<|
zeq-Gt0hM%UBtmmaOHcLv282swwPabX(R`gX&wLgy?OgAMPnIeMVD@ctl7}@@aNG#X
zD!Mw{H<0}M^YMDmE~9Q(dZN@|3?5d$aU~>2kwO}c4>E%=qC4_)(RT@STspb)JwCz2
z(k1-5VT+OHkroi9=Q2^k54o%y$cvI@M8xl%tNWfk%HA~5Qn#pteK<#|@t6iKPNgh+
z%M5H3X3&182IUQ>r%m?FNDIKI72e9MG}xeBB=G+P5#o+L%xRM-q`#nI>u~7AdVkRH
z9LqFGvqb9~2%j2bYl;nM+bw-|Js_fa)8;>0u3?RGB$6JFQZ3$@s}()_hgAdN+DiuI
zE7-+o9oJOn+5d7u_*A~y8IW0G?5#;b0=->#05h96^R=^}Y|;u)n|2t(sA9y9XRc?k
zR>f9PhTK`QLebSU^A?F%Z;tc<G{uj&8{n`G4>pwOH{o>5(Wtt=Y%xagmKwh$B+41)
zAI(osAGouEX^oDG2xsm=mY$#wBy<AnCvZwoUi9Hd|I|P$7jWLXv$lk?)V%t@Rqp@v
zmMxO-?KHjH2q*wxV9u2_H%GE6)1GytE=*8GlaY0WYnYi>#q1EHMiE94K6i?UyOOC;
z8?>pAmj@08Wt4M7g&DsOFc(>;HTBGEphnvD2q+nEP-u}@9q!Gd;}LcR1AARJERF4I
zumHi<GlY_(ek1TpN&~fgq|Zi!9Evo|Kbqzs4~AY|x+a+hJrhTZgWjR{^Q@hid?{_b
z<SGgyd#8rBTzyDFT0m<;XReQpId2qQ#QVwq2H00p+*<iRxt6dBW$}0n5ge$J`BLhd
z$q+j(!;o3Ai}4XJ#PUHU1#f27eg8!4VS7Xx5?h*`)~MuTgJE3pmIfRv$(BTgE7oz@
zaxjXoLWEW>Hh)xY(u4GU#4<^+wXk?Z-Qym-ZglxMQzJ|~X<nYSt;N|M-j-5w4C;Yy
zJgYGSK5_ECY30|n`0sF|FY%K{3$5U?xfTA@yd2LYZ!oam12c_u86(KV%ChmIees=r
zu!!{$m8chEYw%hxZS(3rI6b<bar%7{<2;%)F>(;SabtPY`x&w{^%)i(I+vdimt1)4
zv{@9aG`@er%5)XhS}ZFdlX$Fjh}4)<dd05qCF{i<e<=jEZS&@rMh8;O+7f<ec<;r6
zbzoF(>bVIipe)rw8t`zXKLT+XX=uERm5q!qpPoE)_e}5Skl%EPFPxO$=1t8Z!Cp!r
z1|>pyAnmPm2`z3h@pZ2XY+w%71I4348if@SWN9ZGlp2*(gDuTvi?JU%snCQdNCMSk
zW%ICFKJiY$`$DKI<zdW7WtTQ&Wkg(OlM+h>U+Rm$Y2@s*Q{s)&98BwY;Y#$u^eX$H
zBS>1vtZv@XsUbeAZX7|F2Y1j~oJ;r%QvpoB&>yfMKKsUkc=#SX3f4;F9bs*`2tQ0h
zc66)?wZaKjb`+%&B8^Iwn%HyguP!elU0OK&9wo7*r0?lFKBY{3Dz%;VBS63zjm-l4
za(^W5OGQ++kPfJvrFv$@44yeJ`I$df81~F#i~1u!#>8W_7&I%f>!Fh31=;rJ50i>I
zZHh#1+r*8lP3Khf_%kf#>TapNo{w?+R!GHnWn<VmR%nL@^STz)dE(=7eX@`0G0;p5
zjq`OYD<%#N1kw#{k!)OzD98_kh1#GIfa@+S4HAo8?t|EqC}yW*b`|@GV^>INJY+nR
zP<%%09`~{p%aV04VagAAESJE}7Xat}0nen*DQzsqg#2Bk@AI!A@2g@p>J)oAxY>?k
z0SgM!m{k)DIM(cZJswK;l0&W8CG<=RhynZ4nz9O^=1$LJU4zK|^h@p{%~>QF?N#X)
zYSccQI?|b0a6tpvn>VS_nCW|JylrK0$!dRmHMTvQNmx3E8HqFVD;TNMV{ZKKi$xrD
z^8x6EzEk8WvC-3|>*&a^$!v7$kd-_1y{Z47S-@|lEL9P2eG{+~U34eg6$v*qa>q5Q
z+R)xdxEPH2&#d84k1)eRbZQ-EaJ*cLbmj$x4^opYJ>y>6ldkF$oz+)yq2Zwv8R-t;
zDzP5$7>6(*9!PKU%$2xRvxGr_kJrB&U7AEgj@5$H<w_<9J2NsFS&JGJd=jRlo4Cs~
zN$&2bDs)Y$E!YIxxeEAV;vx8{^g8*Gk>)Bjx^&^;$UMKkG7<HV4=$n-ix{I+)%g~M
z4X8L}lz@E#h(s&@pzx?(uZ_zf<~FI|J0abOw}nBM-*6y7F**fLYei5ltTZ`HYx)@q
zbx^b>UYbhxn%J+B)@tgSklf%@1PNZ2Apb1dHYE*?V>F3syv^hAYK;UfKhd4h>R93w
z)C95{Lz*rx4xfX;x|R*oejP8E&1wvtT3HxYXFHn)E@G8e11ckY`C3iWY}D3a13N<{
z5bm~of%ZDz(^`Z)Lt`7yh1r~)&+}g*kv}x|<<?CE8r7NUL5vwCVKIB``To%SHXZnp
zBU`G+<}8297+@Pv=p^`w5fidt0<b>m<T%HIHGiv1hb!3R?vk)>dOAKGWx}=i6~l>Q
zRocxCm%qyw)I#baT@2%;4jf9RS)|HukRR75S2qc3YMV49NDz@%IWRPROMiZy-fdWy
zZcW3`Urd0UFhcrZnG^-38-`$`=UGV|=dv`niQANuCYxS<?c~ifPkFE}uf?D7cK~o7
zY3~}mP7Q5Kx|-~fmN5G*GplKfdZl0P&n0n@6(kMpnRd}-quz^zI}4XZJKaz(ROgpW
zsIsG24zQ?Dk6whu9EhAqROCU;p5O_{Ax&*x(L};ARNNBh$LoHn?S^>oL_Y=U*97>!
zjw`Kj<>f1^^yNn=%0Fa~$#^jl?wa6Eo`qLU3kkk`op~X9mNSUnzambQkZAI5J4c@t
z;dF@%L~$MnYW43u(EjoUL!l}I#cj&W%si1+gErfGC9$c0Eq>De2!B234N!B`{Kz2(
z{H0j71oGl^hvlZtETH14Rz3SfZ#c`+^PYof`#Nn5c&Q_|Oi)d6mq8i9CV+)@*{xFU
z<h5<ClUpE>7LukllaKRd_@E0E{rcmm>uZjoh+of%8*ud$?~JZft8aMJ-*nR^uqx}a
zLl=n(q0~)$?cy!=n4xDHAOy}`oaFr&9CV&N@7>&m26IsT(r^-`b4K?ont!&7hbd&s
zL)9|&>(^vtevU8wc)bC?972<7ss^R|>42CudJ}r|JDWuMzAvRQv``8#Mmhf8sTHO)
zcSJy3d>aGyq_}ETGHSV6k?1s{OcUauY-xVJ;a=^D)@!g<sTNUHcEu>lt+G~{O0S>o
zuq}yRqgp8ILv}?&n_chE3$059;*N>5cS18?o1%$Z_H$QS-KLM&1wH=wUZuXMCS&Lq
zbXr==7e3z}FH40)u$~bwt@qUEmv?Z|;T2=M^NK}7x<NGM<)|7FQ*23ysVJ=0Ca7`P
z&P*^($Hm}{BD{mtLV(L~0nP&7zorep)UK!UEQ$QYB<t(kM)T2axDHM>;7LKVxBkZJ
zqrB=Djg|+=HV5x-MI=_U<*N`O$t}?v?_Rek6u5>VuiOGxdJBXe^<O`g48-x>MbRN1
z{OZHc&GD-Xu=%-W0kOoV#yv@?ALn~V_^~c*FSMkDYB}%*t{@2cW-ZLcKL%{Jfwo{m
zZXg;52r*)bbFrQl)B3ux30@|Hn*8UU1pV62;R}_&o6Bsq(5pb&e$zK<b=?7NTRxe?
zX%WXz3f&-blY!I1mQr(Wb+VA>zsG6}>-m`TPgKV|uCp^lMv6j8JX%*6ez;JsJ;&g}
zR&Fdr3f4=qpdvN-Xc=do?Rv1N={TdyR-Zi;4|ViIThX@vk-_$cq2K-~gLO{unO<)Q
z>|)4NAOc%1ct77dpXGe#4%UEZ2j#mc|G%6%2p9PLc+k@l!q_&ZU&NSnnv^*_B+UgO
zb2;i?(~T^3eQ@J!*D78g;GzKZ%p-XMe(#AZsqR+{Y&($X>#pcmW+YRq@db<&&DLY8
z*#G`%2c?hK7?#8TP>CwJFaO6xl|%UdnUebdyYlOwdQRkj8w3071&hnR2Ov>uMT(>6
zP9A}FbNQ{5Ful#aWFb<s2O8UbF^`LM+x>BaDS&gcG~YKm8dCxg1IlRcHqijNhves%
z6TTLqfUqmg{hv}X!~z!O$r)#48;6JOUgK+q0e&7QORb_sk?o!*Gw(L}EGH&<ys?*G
zUH|^Bdj1rGh|y+qX$jP4bpoKxY5|ad{%9Pv0QppU9IY@I6w${F;$ClA0Fz)BK^8=j
zhvx>~yT9uopdDYpRb43>Q$QEcbJ#b(m;xo_@K?qtfTK9e`)SnS`w#y!3b<pu9(#p>
z(Eu-$^AgaQ6ASwOX8Y9xpn(Rb+Z1?cZk<22GX(ZP0*30OP%5p#l6Pv=H{Y)Le+ikz
zRha|PM0g-4IpsyFKnMV4s$+*WsJXm0e}D$mF7=liNKyspo;K6bp|RDrQVuluzEC;L
zFhn$6gY|q5Il;EJ)^dODu}r3#7jegQ0jIG)Hc33y>$!q>G9p3#l?K4+1VpO8w&X1q
z03Xau#pOHsKs3g5Q|zp*dJd=EL)fSxnPd#JWPgQ54X49y1MtZ_BJO>qb|DoIkQ&1$
z8;sWNvUw|KxE)manhU`%`dS0L1R4*ebp?kr6$P=|eGzQ`yf~}A{r_4(MU9t6xc&*Z
z?Tr0;%SzqmHef;8?ENxbpWkym@b|{FUx1)FZ)e{Fe8jKwzq?2!BE`|lN*=#}DEZry
z`4aPe)&In?(ki}l+5M)2*KAKJ095S<-$4}U6pfyzeHO1-#?%DpMDrO(^**jFiP^eA
zDE)0w-V_C(pP$B*^4S3UX6f-cDhfW7{4WPcmpoVo!nOt4EWskuBMhJe#>l*Xj(eXc
z`o%Mz@d^LO^-ZVydE(1DxUgcZwg;l3?yIhK2hVB@N}6Q9wHsHvT<r%7NL7C$lZ?As
z`tAZ!wShiZ4GZs!;RQMkb|Qsr>I6Na)vsET16(bwc>tt+H2TKVB;$pI^qy7m?e;6h
zAX7$v3<5rHcyJTJQcMnek9K>68l{TyO4JZUiO3lG$Ey|=1cBpe?{v1nlgL@RC9i{A
z=p0gs*pT{Oiz@y0$X|7WqBfDh1y#MicY6iwWgy`135`l(3RsG?w@Pgmm_T%xY$|Q5
z^9$s25Uoa_1YD&-hv!x4Bv4G^u~-($#$mIVMq{&Z|4QaTLpx5CkOSX>?&FTf8yfAF
z4S?bVu!W$KJ+54$`49vgR2x))vxx<+JiS&~3&Hm;u=y98ck{NdIWti{m|``3kvm)w
z+1xIyHs1?@wN0}G4wLro>AoI}VM-C`)XTfos}%o(aO;62Z)<JSnXQwo!i~w~6m&Vd
z>pMsL8Hyxib3mT_%~C}%CX<8b<g4IkZ|;mZ3!?qfke9d6{JvM#eG{84lO#XGBx5iY
zEK-26Z}@A?NEX}IS3n9z78LbPAtbYmK0_fb-3CP1fAj(WyR+9C?}^+4^be&`Z*lWn
zrYQj)Bb(hs^<bvV+qBlWM_m&|&?2<pk0*r*K||g;1Ip{GyS_6Rdvd&@@W}oFY{fq#
z>1K1$IyFXJCzBP>gg(a^9Cn&Dd5ypeNH=djnu_5Cf`t<RE~v}*+7&3!!}Guw-d?-8
zQ#EA>SPey*IIXV+#|Zcc`MtaQCJMZibe;Z$tC(~9&p2N@ii2oq;6rN<T<<JPDw*nP
zXe!709v4a6#Odopz<*{{wQlQ!$+SysaJO&L(;X{xSO<VN01Gh=Qr)$N!+hL!N3%Kp
z0);4HWr5}BW><+)4h!Z3(%$LzHk)r>DKM%KSFu{1PwzZT{L}<;^>8oUcFQVD7w$>3
z0cE6e-45LcgngjIJQ)uH52vO(!X}Pd$#ycbA@^tC;MwBgX$&~Lv5-qW(BgDjGzI*k
zOfJVU0E|nm(v9!6{qk+O!O8D&?ijFt<9m%s0&70t6)R-{0VC%ehWFd4N2H_iGaN3@
z6<}O~$Dmm$)Il4)Kt(-l2B=j=0A&JJnD(2!V%VTFrEiOl!NA*Gqgz)lzsM?!&GK_o
zpVQZYd^eAAp*3Kznt%`d0>;jVv6yh4=ye=dpRjpv^g0ptnw?)nZ+!34h)p27c)r_t
z0qmmx5ARJ<61XC1^t(z=f@Qsw&EMNpd#I9v^MF@V1c!7Yq#U_9kprC|4*W#oL$#Je
z$rP7&EZbLjG;vn2;}Y<gF8bA`J}0K>7J7pqbGg#6)wiz}1^;xlzFDFI^KKp3xyZ7m
ziFj6&ZjKi_toDa202~+uqT|i`0I&mK41EMHYojLD(Q;A=_yQ94sIP_64cPziYfg{!
zA-EaAc#Y#K?I%uvnFx$>kwtlo$f~lb{5W~J<7?JSVJ|+sNj+J7Uh+yFCkyvL`V1Ig
z67BT(oT3U;<`N0qfKv#5G)I~x2q}ADPbdcvNr&|&0*jHQHsB%z$Y7tVvrU93x036z
zZ-UcRZd#FbF2PzLDm|THL9a}=Y6)<22I2_DIRXi}YrPjy=SJzYD%GK|*=*SjMnr&(
z#%*V;=wU{r?F>z=RynU!r683FumZE%GjbqdVpS9}SryVPfD4wNU$j!EQP&{4#58@r
z&Hx(0dv(bpnv78pP+&dg7+UmlJ_h_Q0a4nT+d-Sc>aZRby6@qHtu;I1jY9=8`MqxN
ztK))!N*Yy`>W<g)4;a|OA(aifs*jrh^WK5k5qI5mp+ZH;wzhUH;41)Ty8`1+0^qqk
zUKWos8;o$<ez*qMAE5HZ%8~KiB9EB1`qeGccC`=lr`c{*(_&aRG_(RZy&<S1P{Fyk
zdn@$ON@U;{lR?u+aZF}3QzKBJ2crP)pP(orZ88C=xU>hYX<<0H^Z4Bkt`;WE)MXP3
zW$teQ+x=i0m~`*P?<zrw&~fQA$nCUx^J;bnUK*rqGaA+P0yG}0<<Kuxr|Th&e!08;
z0RSLsc38|H(~5O58$kU|T3v53jQKp!AB71R>>q&v5tK6kF3(o1lxP6g`9HG&r-haT
zjpKZYILW@PiJmw`G=fh;JD)a?^X`C-y25>BsIfvz<Ngxs*LW8JpO<=x_B>@{p%~b|
z==`$vBqm?`p#gv4G`~qi8nzJK+{^_Hix%+I3Coza2k)W23?V|FN12^3u9{k@ql5fd
zq&F9<nbwr&>kE9!e2u5Sd}nT|zwZpIR5w*EA-8|$_1J#+K#7eA08v9-pkC432R<-F
z!j-JImQfQXz07zhe9;(usq6Kk4~uWqq+bP}OUAPkI1Sn)Kj7YbKaO(AB$698xwmG-
zmo{c_o^4d70KWOcQutBV=_;9I>DNv06dwFTRfX4&7sCs&V83sZq9Nz@-$Uk%%WeT|
z)ct;GQj2cvKfucsUbANfJMrDQ{M^pN;+v#yqeILg@jE*_8PU0MvsrGZo>CMthaBs1
zN~ELZ8bm@NU;oXgQ1P2C{hL?(v2Orv)0+M9q7T*sSxCe`NbC+8!&~zwgUu8<J!iNg
zN?`t+$<I)-xe9T@*ie)bxu4H|w;)yc3GMH?4DbtWW*f98NR6x@2zd@gTj6m!a@&sV
zvD>Huj<~Lbue-Ahpdv+JP<j4RCbCG%tXQXG9Wq($wbWdFxPFg>fA!K)Gh0Rx^%W3$
zLzp>KZLZ5_&4Hq)p)Mti?2$q$7Hu#Njd4n;&N&*L$8|tHonH>U%lEk423zvDa}iVK
zc;`{OA*y$IS!#V_o_<KUM^;5fpbzsgLcEEc4_Pli0;W#82;_;s>-rt&+p!|>)CbM>
z+4tR4Oo@JnuSQnD<4sIkc3|aq*NL!?N?qOw6JKo>K?=3k)vw9J`Re8DDXj%Y%M1j7
zOJ)V=Mt+~myC0Wz8Kn!F1*(6}9vX9MivxhkvD42=fCS3x)=t|=%&zPDhO_C0Z#|CS
zYVDTD&dYDVR|z5PeEjo%RRC`7OUnYZPhOyT2NtLN0(Q>Lyu0h}Py{akIpy1A14gKL
zdYN+q!;SsLvC#0*!EW)Qh?kUR!NRTD#?b2OxDap=sNF-)IROt8IfDEwrDA#?EwyQ(
zG{CWMWpDxdA6yUTkGkxt=B%?c;-{}Jf{E{7$eJ3A_yb*lZHcW!sXktHe<Y(cwMZ_t
zRG`c>yB|>N%Gdkx*NQbV)7>m@4yM~ZqBNtY+)^=AL1mv@PMl-p`UEK4tRBx32|s~t
zJ~~;(^wL0Q_mr>Mss3%~Ww~k|Yo_%BjXp*%HK_M^Twhr2cImebY79Gdn=Ksx*ydlU
z>o;dVUA}1@?}aW?2Hnd5?20CCF=w#*0I;gH?@b}w9++cPcYC_5WI(C(t<rTP6)7Vp
z+L$dN5L{~}55zY(D(NXhS`7jmCM)myLM(l3)EPcJXTLmfxY~kr_yb(@g+s2IYg!~c
z*5tQ0_`pMHJThd6w+mVd*%|6$C9Q7&Z(Z>I14jw9Rwq8eOhdx@GSX3GIaUff{h-cL
zemt-Hfp#<CEyPs)M5hsY@qTynvjZE0&Qfu5i8igT+5#*+0q;B?Ht55V-p**|*ML{h
zkzXVT7;RAiyK|ja-4eQ{vpl-g>q5OAQqXtq<|Pi>%^G#nkTaBr4@c`IS~;NVN!z^#
z9PQ$m3|k0tj|26PZjNC*(GW#0r=`Li*Tzc1XCym@fnfksRS%0UP|g#}`vSAbdWQG%
zGFVqI$lmov6%ykKRNbU}?hhXWXz#BvMQXvOTK=N@<t;G!N;*{P-^4MaqCi4Y*)ZU(
z*@rye?8EExh6uNL?Msfdehgmc7;fj7XmiM{T&%Yk`qrw{)d{elvp=bhGyoi6&JYKa
zNmmt+GKFr5jNh)M#nvx;_hHkMODGVp`;dejG?Ycf#b*jC9M;j)<$2(SY?V#fqKG6*
z0g%Nfse-U0x`a-X=LcGi3UA%1_UohAuPXOwxup4;0QU&WZ`5_r5Qza8CCt+NOBH8k
z97^vOCC46)G`kQOlnJW?k-oNK#q9E~svYd?lg5ufLAz@Pom7Hcy-jnz)&F`FbF&n0
z&<}vm_m}$+p~Bi=^Z+ivU@XVQwv_DH{GzA5)=jZ6D#gSW(;ZpzYJ+-4y&HRvgV~-;
zF54;T<7bn%dd>Dlod6;#ox+Pzj{CXY@2{f*vOTDuzBI>yeprA7<7UhjP+xny*M`Nw
z_g^lBm*es1NEpR@^cw}+ww92bbCKJiBEl?aD)!fNx(&W@e>5%F>G&;NXq+cHOYanP
zySK_Fzrc+B!&0XZAn51nTdY2PYz#jSVzON*C5aMy606{>n)9iOL#2QtOQ`p`{A*UF
zQ7zhf)b*5KE#wGW=XJ1@eu!h*0#cnr0xu*I$ajxsE9L+>a&>sX1%Z&eMQWU|es`2|
zp&b-)%SLXJ#tK>dp&i*^K)bQJ)L^|@uQU!ifQ`h3`cnXb|F{FLXM!ISV9j(gk}fcR
zgU;ue5?CdQENTRQQ2SVKKDh;~b$HFLmDqyrX#mME%vq(KiQ4YCUYzB7oN$3$;RImk
z%l;u^ZSDuI`&$%UgFX&@M4(w^&7L1zwmQ%6m&0P}f3<A%zh1o~co7YS5B-4G<dbBH
zzy8C;?WR&EqwCzS?cXPDK#g&Iuv#!5dinR+?W+ym1qiUPvNeJxHF^65fpqNkY4H-E
z(ye~&-BwdWaK1xUo7q<@xd+AE_xFM93!NUzkru;b5|P@~qCW0y^J>P82glR(Ud@C6
zY;xSINp`%_>A*+FK@S6$N=g7=;EQejg=I;wEhlS@pnLdu!zd{v5sTUieE2%Ez-VT?
zbqD*vw+c5SHa}({8AGrNYHth_DW^J<Dk#n*N<~`z24}!y0+d8<;L5z-c1sT2y}~IP
zPQ~H&R+bq@eHo8ApK6q9UJLN`3pu-cJnaIsj{J`{He;2G^!Kz{Wj{b+=Wj_ltaXoV
zoyF^ZG|@^H`?Um|PnD<RcLi!eXA~{uvdPkqwjuCXv3pU0oef3Cx3tnATI9MSjDBoD
z0e`*2?v_dCNrkYf!G4{Zlpw*poS#%O`qy=5=f~3z%sYSS;%jV+jAF2mzeb{Rl%vWh
zex(Hso&CUlm%}SVd@#Uea6Na%(NxZ-U~>ey-@u>*9U~|p3qmh{XEOS6Rq}hY0RIQm
z-Dvl3W_kNBY^gQ;GM_dWgH$!6#5hm2jnWZGb&vWlvDUlTP(qx>u_O`&<%B!p&PNZK
z3O(96!5-NHYkVy%L#SsqV=l<u@0?-I{Gl!`?lyD2ri#(~@c22DV`qP$#DBc>wDX=w
zFSJmnvzi)C=8Wo{^i$yZZEk#bHk*qmNm;x7&%c70@-;}xQLw#%ku`WS4_G#<O&ojy
zbYE-Kom~Da6X{)ej^=+0di-IHuKw4|FNMjM>i6g<gZ(dMLJ+pl(|OXa0IHLgyB~hH
z52KkSOh(*ytTvyJ$H`!Ntzgl|w|_)MV1qt>!X&%P-)HCH`mg6l1CR_u;tp(bVqwt)
z97{=m#|b~4M@?<{yc0P?`n=`y&7X?KwosaAEwIJyG@F}71o=rOx>QB%3u3_O=G#%7
zzDp3dq1@Sb`EL_Q*ZOxnJEzNC<|&!@sRTHmV{V{UI=z7R7>OHslm`6S-oT{5$;)@z
z<gKl(D2KZVz$GmDh6E<$txNr@mHshFwiNQa5|^cae<Jh)&Oz)Qc)@Q$#1ofanOw+p
z-=KhhO3*a-u@5ADBLB*2&hR)JT+jx+HNgr9`1$u%&M3J5`anJ%bIu$0{0V&n{_=b1
ztv;>W{{Q)Ze+J3_%eyO&3~aZe#;nF0pKNE#ZT^k5<7@u-{L@GwTW^#oW^<Pzg5h3>
zQ}6sG|G%sT82sd%47<;7CuP90=xt~DUzC48fH?P&=32!)5&ZQ}HOD@G#>L=*kYT9T
z%~KK|%x%GkyIFDGC=eG;4m_?9bV57CD&X_3y<5uuyT0Ohd3F|#%Tc~x2ArY5V>-i`
z)yEA4$Lw7HCZ)(BpDr*YR1et8#`XFA4xVhDyFfNWxtgP+<J&KYOW)lN^LL{DG8x7*
ztB^idulTsuT<da~jg0{7I;Y*@N}5T>`|IZ8B|(QdcL0rvLTAV?;rj)S)>r!L*E<3%
zcH1Ls@b-FWI=4La`lL}noPqZCJZ@7-+w~D4gKh(;!8-yjG56UVr&{1FXaN`&A%M+(
z=1g-`51cn-Ksh9*N&l~%{HEj9QUqX=;JTqPYFhymBUZ~XcAup`V7pNfpV6@bKE;=c
zLWQqQx<J94S_Ol{S_pct4Rj-xM06U}KV7HK4w;1X+O@1ZLkKwBccX_~;OI%?^eG28
z<vDvDo*kVZ3!A}TlmW;Y1l6phodX!Wx|c?!zR5u$4K;aetL1Pp1BKjI*KZ&p>s28L
z8cERmF8*@>^a^l!0&}r*Y7KQFsZ=a@uLWRc$YAt;759~4RjpmSh#=A+-6~xI(nv^1
zhjh1ecP>Cck?!tp>24&XTe^GE-EbcF`_=i*xvuXzzs{fSW-gd>t~sA)#69kDj~370
z$C*H1M0J<Nup0%S%$rj2Q)0Th%K+Et2__3)2Oe9e)l+?B6%41fTkmnQv%7JHjtj^Z
zY7%b%2--UuOy^y0b@F&<yZ{Th6Ym(jr!MhGF!+1-?(w0XWgYYov%1~JeCdmhBn8u|
zK>X9pb}x7YSXSL(B=bi~3o|Z93#>WIPFJ?!*xXToO$XG0>IYq+>x`EU0KgV_N%Y|4
zUB;PV<NbFD4O|BuQIPQ2e*vT2fWXhXYxHzpx&AMu#~R5IYd(OfY^|;eUI!F}Hv)x+
z2y`;um6h45?Ki>?Pw=o8?>o-6N0v31TQ%EHSO+x4(Cq(SK)ecf$c_ti4^M%W)*4cV
zFQL)oUaBA-)Z%fOE1u}<2V#J1Gw{?((t}9JZ$Tp}WB$+XADD{~r0Yj*Pby4AU=H;!
z=;TFs-OSM6RYkbp7GI|JxG-DwEf{yJ4T$K8gyPniR%GP~(7pw)I{~}|9_Pay^(-I&
z9O!V?g9@@SuY1q~PTXK$<ajw2MIi&c?58j$o%$Gdk6OJB{+>E8xYcR5^OKV&h=Pb4
z1eVs;)}qKw(42z(763+GhDjx@hO5-3Qao4bME^LD#ApE^iljR8RVegt_dHw#xTf`T
z>qL=EF&rY6ZOR+N?{rgMi<NH0JnR4h140A#bYOro36IP5S$jH2*xx{aO3nQMEw2X1
zgw-&^NN-L!WqZO2z`zEVC0_9Y@ZQBj@a+y$+`|68rnVj+@Dz+gSM*e8+tJAf<`Nul
z4H5mds6L+EE>T;9NhF*)Dav~)0RKZWVzpcFce40XqzGmwN+-Wt9LMpB+5sgzAf=$P
z%T)=m|BIc)vpRRD=4E#|{11;ik=f8mpac|vLcHMJ+JZIm?^wX+Ck)azkF8HGKt||X
zSEw@nU&?U46ZI5GD@TgdAtc+!fmn}iON+nw0FDh{pFg@Ke-J_IGmt%#_Wn%)I!^0s
zmc6bHQ<dFEGXxF0!<-JF?DPMuZlR0_Dyt-{-sjBs2azl?Nm87!muq?-`NChn6hM8-
z+P;B$HywaI3Ph30mBl~$_od}Ecs(?h3XL-e_<bpgAl?Q$WSYt;Y4TAT8(2+-*4phG
z&ZqX$zkff)z$J?b4r+me|1zJWnGggOn?{>8pKuCuV1#u;ffa3C3!Vp#EWe!v6`w03
zX=}Sw<PAUqt*(pG#NGn)3rE<`7bx@!ZdLR2f;U{`uW^>%8cr=9`e!jy>h_(%aYb#M
z9cu4<&IHy6F2DWjbppg?isi3cyMC2&#`_Fc0%-mRlCl^5V~T+H^CUT5Zo~cSD&tpD
zw!vT__uEr=xhTri*Dr^^{^<xceI~*So`J5fLmGAaTOj^@*LP-8nS%w_foLES8ua`>
zenWP>dK>XLol;&T6npokYP;@eaRThI`)7i$DZ+w-2U-Hq*-ZXAG9jO9p%JXV5{w${
zZZ}ZngwaeeiDSJJ0S}LQG7*?EOk0H$gI;6GtJ{O*yKpivX33TGum8<(C8Z{pKmyJ1
z<!^-D>YJKgM5n(3rkpq(5CPiU&dxW3+sE1d`K}DWg|~|TI~%y<H<R_hWG?<c4><xa
z`u|x?@C}BDLS)vbqUn-M5G#cMO^52E8GhM?`Z<?yFgCbos<<et-v_5P1z6o0v*kZS
zLo#6cDWQpo!WxAHopRv@Fbe#}LvifhUp?pA1QYFzCUWKSA6{<!j;;C}*_m|gXSm->
zBcHuNA0eP~?>fiXYmVX-2kJ&Zpo{?^LUZw`Gd}#P*JdyA-Vtk)u^LNXu$YbKz$0P5
zmcQHj!GzOF3CfNr1mmEPC#frZ4jn6&E#(1MTBiy<-5AP#co{>dT<IPP{nwR(@!sJw
zs(snMB>Cq`FMco)l<S^qtp-rpZ~S(I`1&JG_Quky;L>ZI1AF_Ym3vL<n~lWiOU$=$
zJKt|np{j+q#Q^~b7CWY6Sx;^&AAvm&+_9Xk<_4QPI#0II<w^(W_-WKxr81~j0<eeO
z>Q9MDdRjLCkpOB8ILdt;-QBseEsdq~wT0?U#tYXcVE{>4U(e33Go7kjI=TSDL&GTN
z`?IVdq1}l)h~M{cK2U*A;4)GG(AQ7hCVq$E!5@)t0kOJGr0^B^(CuXHTSdw@B)m0D
zM$MYvk*wQ51`gQYgB8rux#~*>`Gv*BmLs3mT*-Jx#5H@6RE!7X(o6QwvTg&QKsVoO
z5xms24=zjd^O{wbHMXkrXjXhuuHVr}wt#37v_b#Z_uRvjqI-+Y8M`%N9@pQ~(=OKq
zm;~>QL8Zz-ek3cLjIY)HCWz|ZN9|&Lp3^2@I$g+SsR1IE_!&gFKo#%v%`_dS%|e&Z
zcNC(z0=sOAzNo{+76jJO{bU({=*~2oPSnb@-rw*F`Ey-N>(W7hP@qjq%Sif%UORA&
z$#uyX27UGyq2IcGvmD`;YCbMyJhS@~O)bmJ22OcnQKMUDwdf3d2&8?EKAiA3XzZ~1
zlcf&olZde__CVjp{KF;tYMWqK3U}iLl$6JD$B|%sdpOzzm|u8goPB|Ur@1MM<rWW4
zr=IH1nL@bl6zVlc4sVb*dUL_Ad5n$<f)ec2v8@1@5Y(UZu>;m>uEuJv#H?S57VzzF
zuTKp5NOTvQm4kuK5kH{(0$Lh{N`YFY@HW~&JfrF~o6XIbDaoC}cb#qP)F;zxF;J!k
zqvi+TlO6~H3<A(_ibVRNv^^a8oX>$;<pYr9bKW@CkDY4oc+P4(+||6U7sBg#Jo<j1
zI)%@omg+tS7}{#@<ws!zbo+AC$IitjXFCj9`yAlb9af-Qgw)mxK&|iLW;?xD<tOkM
z?dOTCZ$(0wz4l#)FAt~1KJD%SZK=IF4ILs5>2w}Ig12nBz3llRVKZ9(EdTOop3~`c
zQX~)ym57^okAlw}&}6bi#*i`SolAf|TC>-K`(+9DPAq@`Y%{9E(1aVsj?%(O`3SiU
zuvO8>*m(sz{n1GOty=dwuwZf`e`K!KrdNGjH~>*56hED)r5TO%I@-Vkmr3-mE5wu|
zU^PkMaD&FlXeLA#sjF}(*|x8Ioprdc1RfrY+XOxT^-^{3azHiev?r7ZTq~yl9Gmnf
z!z%Vd*@BuJ|9Ei_jR+*v{#FJPw8C}xKy|j<8Bm1dcHzEe&2kbk5G!{5?hPk$ftD#U
zYSifI3iGj8H`n)z)X1#|_s)h1lA{uF-j-UYLOd>IQ+X+kOA@fCWL6q_kk6l4OouR{
z3st0YLy~+1!C-3uIu|5{LRJMj!Cdh%VPebWM#yYbF0nt-!8TFsUJtcusZOX-dx#lp
z`AjBxz#CI8(Y#5UV-KKTR!`*+H&}lQ;yj>y=c{};x+?tZ+tqy0z@wD&IHok1YI+KJ
zB7F+<f6HfCZ_Duh0#+o5Se>Bsxo$tKUqzMuY!E0WgL0PsMuL3*>A?^ec9Z)MA<*+o
zWVN__xI+ihU;F9{ibgp6Lf2rTwc%4b0r|oF5(t~Y#!osvdnJwhnp!SJI`S>NW+xC`
z^u9UGJ%Fc=V@&5XAw?)LAb7FJaCy6Nvi|7zg4qk>k==YM<-OVIexlcSGRz3z5)h!&
z*(?_Qt7sLIWf0j23RWScWL6p>Ah^jAN~$vjJCPEtWca-SB7C8k&BDr5p@m7?)Nzdk
zSQ8-Oa4wyXDvh5O1yWZH_S=ouW^iEy>>8z{uP9}uZ?oWo6>?=`X&tuQ+op^p$x|_~
zt5$%%rFcH*8mOLYGGW>UZKLGg-wEhlvGHkZKjC=2F1a1Mj6DDa-Kugb)1V!7F3YYt
zcCRy}HCpx4FT^vf$!nCnK;v^PPuZg8_*2q!fjSmzl`0B?AqMMDg_<Di4KQZadbHqK
zvCc%Mc^NNszbKYIQHe{>q15uG^8RkNg6Y0wq0uSW%7~(~L*QwlW<rE4oeyICw*)B?
zgpIi=|I=<3w76I<R!&(Ah=x3Y;<<?3Bk%DxfJqy^6aTSPOXk$&r$WvyyPR8Lw^_ZH
zjHP#aDsF0t;yTW?M8ja~P6zSBcWS`)pcnt#M&q*^^2@Qk*JAo-jpb65m_xJM#8y<U
zR7Hxh?9FDp?x-hC=SWB-PBB$jdIq8ZJBX^%zqz*ZxZa-AN|_sZ!^z)p0xHG{R#)#l
zE|dIQ5RB&dza&sN^FUyhu;t{e2I6sx9zehl6n><V7z($r|E)6Q&Nh}us{Qa?YppAg
zgx7b>S7>de`)s?*!_d=R025Rx%Fu?va1sA)RlNaiqk(vO?L0OFFs|2NQxJ|zVmt>>
zMW)FroX&6`C;XpY0GY#&Z_IE9rti06=jl?F?T=RulOR<<H=i~bAva>>cjm8d-rx#!
zSsEqe*C$vMuT$KPSKeHl01_F1(^lH?gQqIM;I%)dm;Pm)Vn2MYC*V3l2GW6OWY@Z@
zyf`t|N-x>kCAX;gu}%KF)JdZP)C+dl5bw<(oPO0R<eo!YP)%UZ|LF0caWVaA0QYFF
z!UA+G!6~}&c);edhP{&TPUS5mMFoR>4N$gz-ypxG1;qq$p8g}(kk1-2*RzP8K$?2u
zE0UQ;$IObZ((i}6s|Wt&wvl0Ma=QAa<&O$wcQjzmRPmS*6TJsWy!;^%E=Qgv<0Jx|
zSE*%bk4slACp|8$M<wIRjOW~jppzJYV0z`5=hyL(g@{jljy4t}S_g@!qB{o<DsB6v
z-6E;1UJRelShrjr8)kIeCVRmoPq8i!U0oRrVgqKc=&I{4k48iHV+R(5)=!gtZQ>@Y
zgf!N=RWxbPHWhlEN>`9Q0YZ|??c^>f`OPKUO)|E=Pz_&RYIL#yu5WuJb;Q7RC*#fB
zcF&Kp`r9X%;b4mG))#}MxV80$cVWPknZ@a2&^Z=xmMxc4f8se&!1=D<`^I=M0U)lc
z*Fe(|v?;09Rb|!Oj+-$j8$^tBBjcTKz6=Kyjs?I01O<1CBg|);DMpchht_t=CmDtR
zBKPkFaEY3yVkCt`bioV*0s*Vhmt~QbYNA2*W6Hwg1G`4DgTx`wb0Zng_{&{&2p4p!
zc|YzqoUY@0r*KtF9gHy?eZj9F@iX_Nl#9HNpiJn}J7HLDuo~ddWz94!<1LA05BMzy
zb8lkz6Ob|5WFNmNB=Xu-N+J@xr{E~`Wan3Jd#_&k1@J4U?irpa%>!Q++`?*Cn~sGL
zB!vm~_gE7W4c%|6XSo9XW5qnlK&AJocG3e4ZtHoKoBdlr@wUYIaHbH_fsg4$m~w;Y
z6O8wu^QTauMzUn4q8g^tnkBg(m57}pjR1IE0Cbd|X^e=!P6Z_x=%We{Wvu-QB$ywd
zo5hPC9$LqoK^-)q!k{uY^{r9RKU@e3Al_5p1v$x7YckdbaRGF)*iYJQGDkl7(rPOE
zfbVTa3a^(h%S5S|%c*{Es?1>_YaYuz2sZ&l5*n8JAv3hnc;t`G$0uF;jn8LTpF;7N
zNW<gCE`-l0A52FqYb}>LeQN->>v#4mN-3oRCH=)lCn#=6`b%#R){mQrKY92qhjxz+
z_Po~Y*|^k9<pB}V1}z9iiWSR#&h1|UDWia?=@gQ?PIS~)2z#dthk;~&V25v=_K@&s
zwK5gD0d`jIv{_?hxa8@^F7QzC7*E_bd0WcS+9+|BXK7Qa+a!2a<tZR#u~2PSG+Agd
zS)}iI(Yb_gIor5-8@fk83&?hXM4V`IJJ8tTOJm{*AyNV7d%%bq(&SjKb18G*8xCZ7
zd;f)tJSvQoJ7|tZw?gP)dC%fmzTC)?SUBmyV*VAF*gdwd&EpJY+TtVy%5A*2e`-_7
zq!I%`wM(n{!lQ$cWY%~t^Ituo;%%;vzGLg)=WrHggY(~jOhHIiVK93N*gi4EpS=K=
zEq5S>fX8(QRKSRN-)5Az+DtW5R;(dT82<SWUI2(a)7gJ5^0@-44SsZ)Zj1F|^AxCS
zhyqt;*~JXo+|qcZR9B)~mxejhq8bk128&Mgf%x-mzN$Acv!zmXKqE{#nY~3lc#G&y
zDH*$GP9yw;QC%H~qaF}Y)!Lj>(_;NtX6jVQv^;@vqn1m4#i_Hv!Khg^gqd+VQ`Qk5
z23hTer%&RBh-Og)BA}7xz^4FK&`<(LwsYzna{N2<rK0Zh!U@ijD=c9^h5V&j#SAoW
z8PxQ^sN@f|Hq-Y@7(Dd`H$nIC$kJ&XiB`|n=hrTKR$?R+!P4S3zE{ImJBgwMb-cVK
zXcg!BOeg=`R%mkM=j3LNLTu`uAIH(FQ8e;zhiE4`fV5U;tx`g{{&~D|=q_kFY<7KI
zpi5n3IjUQNE}GN7{MuS|_DZxKRPK4b)<(p*o@GwIekW+zwkv!Kw3ab!Yr`*NIeEQ2
zTg!ndKoxyF?UtHn!2!*SfIKzFKh}Yt<G*jJ_P{3kalkN~i5RTJAv{8Xo<X7MKdzmC
z%Gi3M=g$aRw_?4|Z}Ir<dvP*-oDK9+#)R1W)hJjwY+OtLtN4rUdKtj3{`<&-d(R)@
zul_mwKapcs5vV{+4|Ney1nPemb%*e))Kr!;<<KJxkq~_O2j%yI*WnmIgAM4|*<k?L
z)#A4H6L#AzbcPs4%|E|>2|r~9zZUfUOP2$@%cR$ynw}5{P@BF3ov=VZ58_9bfdoLJ
zZ%8;H-sVU~&bQ}(`CsO~$Ea=(x9s$A*b3)6V}M(p4}o~yY~p=M<nIT{YhVnn$w*r1
z(;HU7YYx48wRONx0s@6VpW66<etknXQ|Q&McNQ-&-X-hog4bIq0^W}xa^|w|el%Z;
z_Y=}6*Zca&BK#c%+>k^0FOZp5h46!x*6{G~OBpVZ3@5UhOtK94{e#jU54l|*zv&_4
zaWq9aCA!bC`kN4&KJ&*J1PJAMo73OEUa*mh1fX3CA54Z*fHooJ>z?Kd=oJ0XDONGy
z)zC74+S8A~q4R!FAm8qb4oE3<2GlGvfJK62iOp;rL%J1m=X|)(;FfjUq3DaS5GDy4
z>$H%b$G_7y$c(0tcxAsu{^s2S;NUz+Cce*Y3|Uxeg;)%J)|Zw5nvy`zk@k5nU=CCM
z0u2a}Sx+~nMJYguVN1M7?z_rBA@I)|1M%nwKkyVy%-F2uH#0>&o1OM>Pr^Z?=bIo}
zR!Y^zDv;BId4Y<nK|l@x@Y=sA`X9Oy58(h<9w_>2HgunE4y5yWsPI+Tu6BO0R%V*|
z49(0N%E~T^rd6b>=60&Sg?E_9ukvS9$oa8!4IEB(Ql1=V>4%eX00#V}fAFPh&_7v}
zC;?m*kW>nh3^l!COQAAT4fx@g?1G{CDBcej@oBFXPsL1*G#<t43sWP+KNL`P;unN1
z%>lLVuC0c6q|>p*#ncWtWJ3-u(d3C{HQ1VodH<GAb8sIz1V;_r*I9qO(`~h!lc|Mg
zu5Au0WW;2A4Tg1AQA;O8$QSNMi&*!X20BfQjXd29T%>ddfmhwJ&eqn};I*u?rS#P|
z66Yp@mGq<X4e0LC!sYjLecy4-UR7aS0(&5;NK<Ao|M|;aeS1=OwJYw=o*6ryJo41w
zSa#UbQb~hbN5wJ&V$8-}Li$hZD<5r5F9}mjSag09Bu}R2LS*n8xHdq;Y(Y4RFySho
zOc(jrI>WNbZw)3Y)9Z)k%<D*Kj_s=PJ9V6zeR)Noq9vS+L05J03Wdd8gwxAj4<pez
z+Ui*dV_CV0RIQ&<)jFaR4Wc4`1IrK}Xaxj#$mRQRO!5~GQf7St<5Aq`Yp@q$bvqWG
ztx!`BuaW-LB#oHM1~<t>Tp6nrpO6{;RPNwDB^yuc4yuRs!Hcg?v-(0R;<guOdzU@@
zhiDdGYRA(rE?#c9L>;@=`)m%xvl`i#Ea7#Oi-W%D-1vAr{?4V?>es2E5K~-_EY<Ry
zdb@Sf56;rL1@W@S*r0*I&cPvDQB^~aN~g*g72zeaC>~#()jUU*E$DVKJ{@HUCOuWf
zGYo@<)9nyI@fGVyEk+sa-dkGthLMP?64wPK7G~O?Zu9|_iPfBANRMYdW^^vhKpZ17
z5eGxf>#-qUuV*7`K6Cnc!1T-j-5Zj!SAAMf&x70@ST1el*zjaiw#G-Gs^c$JF2;!@
zs|Gh~hq8WQ^`%>ppPGCrddCc2*Wp_B5_}QG-$mNAOcro*Jj(Dqwr6tBpd`l2Qp1aH
z9)KaM21?dXxOvW5{olnh0%xKWaq>$|M}R3DJF2d|y;BT8Bk8=TO36^K57CGo4y6;y
zt9yR?Jo6Vjm+9#Okbg|`^#i&9=FW|MwJ`1jL@YIw?1g1O6>cPr4-kYDy#x8I=Bl;I
z-7n1J>`alvLT^?&%iW4Z%M&$~5E6}L9WrM?@0%~(Te6||N6?1d-aNx0HF*0!0fAP+
zklJ=SjA0lhlKkq_u$D;K;<b2F<=RH2;yI7TLRA)aZNuCU8GQ|}36lrSgt<Utb%DQf
zrz!^S*%#7fU;gCisC~d2rMj1bSLXp-U<`B{DCM!zMxd_<g00Wzs_DNw==SZmLdHZi
zg`r`L3Bj98dt4@+5UWw9%lF$p{JFl;7&Onr*n_PKUYX-2%R8^l9GSgvF*lbF+oqi&
z`EA!|2+RpFxkRXmOu8)hMIs(f0m_KLuol^MIti8g1xYxh*aX4{t4J}1)bH|I1tXRL
zZIVng@62}dh=Hs1l|w!W(4ENpDadKL+`5QAm65B~O2dNYo_71pfi-Su($|PJZjwF}
z+b7eM!3TEx$Ln?}XzAbtPy|v)*zLoZ5IcCE5XnyQzE)lH^=<*4L-<s1G_TRYTusc^
zLkeNOjV*(Zxy-|MxG|x)8SPLKHiqz?3M)0sZ(CUk2|o@$mcFl^{tV39FTK|Wb`Q5s
zlJ)>~Al*pMpD0oqs#Ug1x7KhWfy>ok`QX~nVRuu36?ApfN~CX2os>(fM8C`AK(nqN
z|5*l|i)t!ra3aKQb2mXiO|Q^+OwfB2^Edg>xC))zL%R;=EbhlDY0_)RzHU5TQX-=~
z^8QysdHgtwqS;;KR~4S-9ZLEab-C(LV5q<0a9D?VJI$95c|JWp#6(-DVP_R{eM$?#
z+az-$4q^AeHL@%i!A;<KMfjzor`}LVIkR<yfAQ;yCZ9Iz86D3fi#Eb$9pq1&Z(*uw
zoXXoss_`ok>9QQ1Yor>E>{5LA5ae~T_tTHNl)q&*3(2^4sET1t<1+inUtaEHiBwfk
zP6$HV(dorE3?#*ed)m{Kx3qlT=F|73h!qSG^CsId)9v5zAskMc{#^lvE*bYUQB%5|
zkNaQDE$V8A7t;MEv3obKM!GO*xNc;lXkB>>X_5^Um|>?%9vh+z=X^0zj00oV_(~1d
ze^|$LtK^wcRKVvBHAo-$eTG>dsO4c``mtMxUxqZx;yP*D*{{4G>ARcEh5enLec;7g
zB6IT&k*ngFaAj4@7ZkEm2*rFKKHe9$#RRynjU`bQgvnHSZR%)aW)mV}PCW2x$l&uT
zwY)Dml{ZvI6%vZ4lZQXpXOA(f+KFg;ltrJan+vJBa`Y%IN_2|0TD(|L^J3vAY5TL4
zabIGC{}W2df3W;(QkG4sO|9ltzGHFTa$<7BRVzHzi?=rk&njc5ica3Wsz6%9WvG-v
z)+<Z4M26uaS>sHwt1#$}d#7C_J>4JY`j&g=(<Y1`btHoRJQO!AE4dD>E}mBLySF<0
zZgg~M<}3YNVK@JuOI&)*<)|HPjlygs7D=0$+BozoN`YvE&?@+?lGd~99^aFamPqT7
zYni6LKgBfnhK*?bPwLUv9AMM))Slj>{p`}lP*+Nx-fvJlNcR3C1zzlYTj0+)G8&k<
z^iTE1#!`8H*vm#E=zDr~gIZdB3WB)_gmjpM#7RiWw0HUa=at5hfl4ARtp+1Uvkv(x
zxSOtNl?Q0W-;qYYfMrTGLC~L`XJNB%@tDR1`>h>YLM_TpXL9-b8+T($`2+1hNO_uG
zU?SkCPQL2BX41BNOBIn$qdR4lmr=}2_{dH*UatcG8KX_!KJ7Z^m4sz{LHw)p;p_tU
z<{0}T8AS?shmduq*z(18e7&Z49i<Q7d4(XTbYAz@CB|&QP_a&|k*)xDclRQqzC`^&
z_!tp*ipk)YDph&Di%6T^iE-y5^WWcF;gUcLJm`mBb+Z2qKj2G!W_$-5V4R<9x%cz+
zn&hoXTY_=f{q;+OauGi}{kgUvutA(dmhn+m3>4UcJt$*-$gkp+BZcT*RV8)nvtX3O
zO^fb>h4GASz@p8CAwwx4F($pHk}`#s6WX2a%<C&+48L}Uw&bJ#kx{EYV$be2M*T*m
zc+k#yUyJ#Z{EPik5LiNWV2eeZ?M@gHZGDp-D)Mxel;G)=i(*>7-&%eRZT+FJ>KpRM
z^k|pCOq!MLfJ(D0>t^1O1W3+Nomer~U>ztL67mJMfW?pZnpp^&4o@%Il8<Ql{;njR
z`G9I3md2H5q>}+ektHgbwY6V(#2aSP$o_O#Z;zyhKW6~#)_2x<i4M4tU2uYFx6^3_
zuy^Poko6|P%lov#4>dJ3y=O7+8H@5ZBIl4<zb{CqTaTQwe^~s&BYZOf?qWF|ODqE;
zVcx2meJInb#V;|+4R6;k*T70;NZ*~Z_Xmz_AwJ<xX8<`tzo|Ik9h?FcWS+3n)esD|
z{&V#t+Y<FGXS7?ts#>NJ0#=F=vF}R$D6v(B4oK@%XgTVaMW2OwG|T0KLWe41+sj=(
z>nUNc`{(J+;4f#GXz4#|bfP0y@q3m$oG#GD^4T)jN;r`tIIJjaZvU4jGA@HDuf?t7
z3yMW^LWT=DPTC*Uk+D-R0%$M$!^`yhjEa2PSn`}Zi-J{@ZC*o1O{;5>*ei%Vt)6xF
zq4Yb4pY9G~RF~UD`mgbVguo9r!8zLOnIpdXOpz7MZ#7!zn!!yaXRxX=?PKn&M2^22
zf2wKoH+Y^8rAd@@h93lW;VLqyq@-o#dM(QlE*Z)tV%J<tK&#5<FyukDkG=AO?>;6J
zb?znbr-~|Kg?Oh~qdz78Y&pGqQr9I?{LmpVLzuQ3%Ygp!D>0Yt$141Gpd!wlYk~db
zia25Yp3w(w_U+hyV!`g~hY~W;?1GmxwI?0EW?Kv04pXW~N*~1q-DYSF4W-bhxGv{a
zW;7;EdeM5qqvaRnLDOn+s_8`jgyQWC+nTq@Pq3H{Vg){q+}gvkM!~^-vfmyK{nNq!
z^5xhb;F{&4TMDDqsv3AYwuAnnbBp>t08EN7O+_U|lspea<gWd9UI2UcN4-oA@S#}k
z&gVb2t{+k4&D`iC-iynhC;BZnyb=DA(vNW<B+nk)*&Pmw7HU=EHlj5rxS~|2KQw<6
zM=N7$|IN7t$@N$!g9q8~A`o*aPrD|CwE9oty{w4(Yt=(c2<}}AVBwKy^i7=pobQ%I
zCrm4Qs#P(}snGygBcU^0PTFJaBEC`@AOOdshfA$7;1$twdiMHZ9_#5{p0iML`KwC%
zu9&CMOkuXyp@C5uR^06<$Kg9TI8&b$KY<AwwtxC5BQu{5WtJa+*+F!FU2<22ncAN>
z1uO_>Y$_esM&4f^DamROePLAsdB0&l?8zeG?r<sMcJ&7*-YO1NR*6DR2F%yxs>0VR
zjKON;e#b0@$%7W19p<<IM2AQOQn~&3Br6r}UcSVOq0#i`VjJ>a%wcBNo?@EIx3Oey
z{lPgy-}aP#QBzTaMJI%0*D<0KNTh%I>(`!B2gOTLy*~4I<=d1YGtSX1z$LfP?PKMe
zOiim0XrL;@9?qa+iLNmyAohN8+wbPa#~#Go?|Adw^cli3m)(9{X?ab-NEnHRkI%cs
zuLR`fC3$A^AWPH3@sCqD`m88pY!c@T9r``u9357;TePcIg)bntn$W|-=<Snsv3W1t
z_X4-)fiR@6gNZ=xU>^=Q<m1Is0ng(pUX$heF%kk%wO05h<dRxCCa5kx5XT&G&Cw}j
z$biYa*W@A}aF9HK=6a7VwE@5A5S;rxR%(UW1QnmpQT_cBkBakY8Gc(uGBI9zx?ay0
z10yGFofd8j_u%!ao)j|{Zw_C-iY+o?Jc({I;usNco*Q7{-tOeTWZ3*2=|{rC_*w8B
zc~l&uW*+}-mBiDhlKrl)>+CfJA3IDbzOLQKAQT!3?8^yXw6Q+fw{6#phc*4Wc63IJ
zaOqJ-E&fnF3F7kVkMN6wx1XQ3`tiaZn7R^|C2kpdBKK!rwk{>0pQp&suYJTSu+cYt
zY=7!p8=&9hLU>B2#29k_y~CeC_k$R&aeZB|#O9ppHjNtbTLt_h&id8U&KY%HB3IhR
zJvaQVcZlgT0;*x0K0Aq!Ha402Wqhb=8?(WM(GRBH?$b~^$nA|}(OZlY?~_)YPq2_k
zV{@EGHXLeuw3uKkJFT1%=YU7Y3&O-XN>#lqxintHb3D??WQALLi{-6Fau3f~aX<kC
zw1&>`u=}r?|6n|DSRxdO?YJXtkFoZG*Q!5=xho$b3WC>1?P<GhcbXQRSAjn$u)sV6
z(2EHxgYoE*BbWYY(VS27a+#YU1PG}WAa)A;Wy$=*mJsr3Tf_xLD<B4Vb9)Q^FXG2v
zEh_-T#Dkn#ER^s9fGVKw;o{(+=uOQHpiC&!o8+x^z?ga?{2ho+QOKpGgsTYXtUdMa
zs?OaBcPWidO#D?p6A669eQmMouCgG@2sCL#8D}8%!0cQ-<<hMZVeq-1JMNAH<`+4D
zQ)Z@~W}2{$3;I36*G(#q5D_W-DJ}JNzp(gJ!ganaR-w;QwU~ORVbO8`F+Tvg@MSGz
zE`OxOy=g(E%%G;G<`CK32rGhQ_DjIW*AWr^Ftb<Ead%R(sU}G&U5RhLCJtU1rg1rJ
zF|e+BFP#ZIT@AY7ECGOOVm3ePcXKy@R)j&0&Z^%DcP8aV0<p>g6*vL{f*|iw$v2B*
z@g876hRsqG1tX(Ou>#W!fDLeZf~Gh)#hk#rGn;lh<hx-pK^IcS1;HjOZS6%cEo*4i
ztm$4#^H@Get)?fa8UWd}5tDIr<JiYYdhj8^2Mw#I{Np!UDck!6ENu^$^FuG=@9#Ys
zr^c)ef<i(jAMr^@Qq$6`NiF8k&0qyKBq$|1N-u90U6z%(-sv=Rv9g{W)Ge!cm^;fC
z8mYc+J?SCxxH`0QxYID%a(%gFx{CB5``vKQ(*cbH6|E$Yl9I9*e4{#R?d|MuA0}i$
znzM>7aQ`{^@SZ>am@FtdCI;JRJ4o|eZl~oQ0Ba%VV_-hRg%V3)i93MckDAZI=B^$e
z?p&%#jc&lRnC8#&^XE>fqGZ37R0oJw;po)QoW%`4bpBE6+~)kDlrWZRoI3Y_Fu~3b
z1n`S))yEt!PzkHeCh|aMGySR4p*~D0YN3!js9giJMCnB~mTJwf{>-7V04>WA?PW2Z
z<rLO|o`q&6KW;UMu&^KZmZ(@$px>}(|G>ZnZBS6q+>z0-TpEQ$|ATVQSYY9>;E<gy
zbZ_tM^mK4Ofc_lE(>&4%My<^YB1S)E8KnBD^z?Q(z!&Q2a8N@)tY*_g{H7!Jq>-fB
zD;34eflg+(c^O87c9lacci2W*UOrPrdADgC)1d&BgcREhNQn;g_3fHcZnejm&w{#q
zqxaLJEJuE<Db`$pq!@rGrwU8+Ov_k$kxbh(HWiFZC%<qbH5NvnY}dSC%#F58l}`4X
zf)TaQqk*les>1OK<Cq=WZyHZ)Y7KX6ZMd9c+Zy(ps!ObTuwKikD>V$joh)X%V|I(8
zDC}S-A896NFw9CE2Ee3vQ%9=HQsK{M+xm+0qlcM(U|iO~WHN_A*UNCu>F?ZJ<r?0-
z*aKfPLPrqZav-3XkJz~|kf6;^C$7{Hb9y=X=bqfO3}e$FQ9B`&0iXIQNw(7%Kruys
zO0*gjYG`Wqe_9S>-ls13$WzZkU2I8vTeDYOLU64cNP7vZ@i6XfnX|`G1Xu}4GItC-
z4sZW1;5pOf1Q+}8t;?psvw2oBj2qjXTjV+%6HxJySM@b#279cEcavRX-aS>g?eTUG
z%AWux7f|oUXwIRdS%Sy3%5G?yO+98-aQltZawZ}nfy;WKKFnA#QsLoclA_F02mx!z
z&kQWxROt`l_@iSqJ796AqG-X_4_sU>bVIrr4~QHt{-|@@9k^g+IB2I+$fWVQt+anN
zPja%>r+PFmsToOV=|qFpsSGJL#Wf~Q6&uBUd-dwo&n;5M0|bOW=Fw4646JXC2!x6F
z{M_@D2ozH2mnKz>UU-_CnkEmpvq1o03uPbO^*5LbxxcJxkjh8!xZJlp<li&JcAV}_
zN6^|Z@UU(OH`V=YQ)7oS$GOF`ruJ{QBPgn>*d*YvC7ml-^k#QKXjZ|}avvB~Wlj6E
zA!0^ec6Q~HqRO@#N<!r{Q2aMhf9dq;uH);(#6(S#hBLkE2>#p-K}_UM$w!hQBt0j4
ztHs7C(-sk>zMz|#9JkZ6vv>w|1#Rt8zpmlb4~!-b@$MKw!NDYQe>a`|z1xa;{Y;wX
zA$gGnE-o%lc-+BHj?f!Gpt+D$DzOqUNnV7z7FuL?PIibdN0I{b>E>D?9(S`T0kwbL
zLPwlQb?%@}eKb2hdxKJnBr?t#8cD;Zj01PWcjDAlZY5Hpf(TmM1|CbsWa_n+v%p2u
z(b0vx6WYi|cA6fdNM%Z5Jqpn0PCmP`=1Ckf{32f8lftyap^>fOL_WYhzfVpww8avJ
zRo?@)Jorg6p^;hm{SQya!owm8ZpFIlMQfMVgt@3;q3Sxv^H{icyicN{pc`*5Y8FO!
z)!l;>6LYMOQO{>@PlG}N1_p*dpkf~U!w^C73<gH+wFE2-O!>zsI2ahcuM~(dFzubn
zi*_F<C@47I)A2Gea24zwEucES@emf4v9eNEHd0+Q^j!&%dwsfE*GO^A7k=trUthnI
z5L8sOpOO;PFZuk~U`$?qEHd(W^lh9<44(EyK@XgOCwwG&+Z1KT(JCY=%KggP+WZ|2
z!xw?CHoNgL*d$omuA4!tw7z7mKYj-+Hzuv1hlGc7F62Z97WEf7G&C%b5b=vqcObU7
zfBW|Rk1Jc)`wn!nPaD5%v}KN)Agi@JIm*^UObl!=%Q=er-Q{m*ZLvDg(?!8AxDnr5
zQ%h7t%ERx|9UDOzMgzb7AD^!3>*IuUA(G|e>PA}D2d)H^k%KSCi|kbg+&wXNm$JvP
zQ;<G-YrFLEuW8JiW6d;p0nTXf!2Y+#1}pIj2F3?IiUK@a<bNJCu6UG>g-L&?VxCO8
zF$|37*ZC_HTW$L%FI~uW$JUl{Z%p0OrLoGE+4JM)U%!66TJl~t3>T<1xylcR?6Ekk
zWl;wI`t?g-@uBe9xfUYCok^|I7AP1n@t<|(20zs+bBe)TXIV=}z0H2>FtXWvx~7ZL
zK9YkX>9*Bi@(xF5uEtPR@AZYobtHj<@gf({syJwhq2QL={sE&q*&?A}^zA}MqvmW-
zotd-MMQALSo~&#!BHp0`#ytXbu9vtUew#XKz3M{uj);0+K2#j;eRcBTNJCy-{igG*
zc*$*#<oS-ECC7a5NJ&v?X=)YoFWVv_Cr6PVp}{TNUp=OqpT?R$on;#u@Gn;E&14!%
z+3148w6}8RlJ{QAX{G)1dfCPkV$Sz;MMXuDeWQNiUJrk8bfM|*+fztMF}<cCE=Ny}
z%Vge9_q&4=^oN=R*bAWzgtiA@#;Yzt)TR`{87r)xZ|lSF>|{=>$5|#X{x3Ti;FfA_
zmNevb#=P9c#Qc4HeCn@t==e+T^oF)Bh)hfd)$NwG1JH;)FGkAX;9h)TNV0*MmaC(Z
zhy*$$7Ut$lH+`2cJbv|;Ekw_7N=$fM?Uq{aD)zDtNDeq#&pxh^sj#!N6Zm-lZi=|t
z%YWSdy-F_kG_A-}K`Nl{`|SE_SlG+FgXFr+%`Fms+Z_Wh!QqA!EU_>=t>4oPj>{XZ
zFKizi4H3msO=s0jhW1Y1ho_?;qbJ93sBa_ToiX9!;XocfEc4o(cO@#SZ&!^F482&P
zu9P)NM0d1~NK7OkBeQ|=%E%`7y)l=Nueizh`Sa)LnUIo|jFle714?~bBg<nL8TZ!x
z`9k9U36`d8(t-0`db)>MS3+bVc|cjci;<wt;~rDn+~}wtI8jB#*a?8P?#0B!;1pT6
z`;R3TXBIhZPC!Y#mn*HOt0yilCMi7j6^Vf7{sZT-$6?*bCDEvN`*!LCj1OsHG&$@_
zO(Tm09TR<e)ob!h7hh6()Fd`1P(4p{=LO~T-t>E&^e%pPViGJ842;hTS_UvM?mxjZ
z^5NX;Ijn^=U7ZIVUDWipnw8bjW6d=<^#+pnvTH-ei<-PHA_EAC2$Pct!9u#K9Dn~D
zX4C<!E|}&-Mt1h8Quyzv(zD*z<$Grc2nf9wLG+CZlUt|A$wRofq&kY)Rxs1QVi2*0
zH@50)el&HUyJqeY-H?!A`dGC4tsGr4q0Jmzf<ky*`qILJ^mjNIuiR|#Wm55(fk|xt
zzwYG!w3xOZBq}-CM8rN3_%JD=%rBC?i}+8I5%5yk9|i{1O+rLasV+JvX>M*KhvNCM
z5wM3rUw+8|Lr4M);imd=Qz}KQva-2UigJ5?VYey;k@ef_)x95{*Nh{+0?hpUOQrCH
zL`2VFEm_9KK2e59BBxI>(H2%T6jm1X|2OL<YO%{s_x?Q_SAFNh!L#W|*>4Ew#Q21`
z?hW-b$1gk3bw&PKN~2?sC<+N>r<!59?|C^hA#oMvdwYAR?ZJt6fwENQP;)+h*@Tx~
z*BEcfyo#lKm*bL>%w6gJiyxRr=!gILy(LpHzY`j9SQMA~pI)Gh?yncwDXdQf*6+XD
z!2f)5|EI6{A0G98{ew5Z>yacdSrnrKP(t^x$Z*ZTd0hk6=8CFv<FBy4;HktDrB&wU
z<q?vqbGhz^Jd(achJmp~-TytH;eD8}8rgn*?fMJi5-OP-#r7Ng?XdwZ%Sm7)OYhGO
zqQf%^2?f+Z6yW}@{kwkbM6_qH=EkFPHb7RL6+}>4EWxS>pmCCiHLUMDpfEE(#dr>m
z<hw?+*FPN8X4*kezzNgW1Yy^mqq^!Ip27HxoV@<JY8(X)11|vn``^9ob;xMJj~Oos
zj^rU27{|6^!WG>18WzW`&}?goaH7%a@>xRjy-F7nuH(9?(90KK^;?1S*l;pH=Bg16
zOX%KxIKL!(kZrK*JZ|9Zrl7XIpQ?HRlQ9pR`qGebvgb&tOsI^e_mx854X+GWox@Wz
znHRm;WO@CwzFa&cw%ldZY_Y-QF^`#y)8KgfD^mUn=U^(?r@4NAecFJf`<+gc-mKfM
zeDABw{(){y?>mM5Nur*`+Lett#ukO!{2Un?re=HdU$rSM0Yjyz3B1nxr#JoW=8^*r
zSEM}m!;M>8TY?kRp>0l&6>T=dOBHfwA?isijy*9gOl^v;r-K{b4W-NVnCbUh-ThLZ
zo(T#P2)J@F&>2i97Qc`t<$SwNwLK!QsdIBu1_X4LZ|~v<&X5@etQ{4O&b=Y!LtW8(
zbw-fNd0Y%;<K2Z0PMI+29c3Nc-L53LVQ=@(WoStpV^wmKmiWo(8p_&Q=8vh{d^h5*
z(n^Pq<N-@M#fXCXnb9f?GNc0IxO((l&bL+5{GU;6c9~k2w^~TNTp%Y6$h*rP1;-*P
z60(moMg&F2sml+uV^;#so+-i9m6s2j+S|E#e2%K=lY+@<?yZgWgD@+l^;C$*=3{|~
z9r~G);e#lB)$56EUgzui#Znq!WfIwnCf?g$mwqXnqLZKphb1{)omLENo4IfG&Kurd
zCe|B(kw7Q98u;^VM}?suV#)kPYPDwAR>M9$P=}V%G-nB4452S4GqZgPrYTH%xc1AG
z$J}<_x3M-?ux2@pn@u7mB*2_tl9(7O4d@o#E3|*f7q){_+$$M=?m8I79Z3GYnjf`<
zv6!ZhvEUt}jT<3xNv{!nJn<RA3l~@SJms1aUS4U$0Iz*^C&uKkuyLtuy!_?k&F)Jm
zVQyd~q8%$~1E<$9jLg+FmRX^GResX^!3Qd3w|uJa-8CVHIRbNoVn;;$M_XC@TARK}
zR+sDO_+OvhzP?2aG*@q4Q-~y;R#irTLoib=I+oFBD1k}_+H<ueMk1SV^UI2OY9)sk
zUM-)-BciauxU$em_^9s1j?1+Tq5R6MZ59&PGR&otl&s~uFd-Qb&L)q4g7#HNv4(lq
zOGr%Z%6t$TOfMwAT1n2|*ymHS-N-RSy_jOR@IJMe;uU3-O!vGxootv09^RTMHm`j=
zlylF>3J$xK^1cyS9xJ5Q+*8mMck_AwyjRgmRsbT3virgKI(M+DN!NAAZEKZ)Qxz{3
zmw14IC)%)qW6Ie1ewp5#*-<6w6^X;zrs6DJ{w5jE?BtA^edg-}dKVhO$rMuWx60qY
z4=1@hUcA@@IO4>`<lsGp*KZ#$EYbAET9+#_-RX(OprWzhZ3+~^^7Yv^Xd#j@q*vtV
zZqGwmHRwWVH_Qt`%)jggXhY#K^`aBF4tVqO+jk5OUd#{HbW>5w*01Ak$~D}D?LY`&
zJmDl>txWCLINg$96ONCeocJMdOitk$r?G2<Z>kP&oF_BW@o>vOs6#m<C7Sdn8LMid
zo_l*NyA>keg(poziVekSKWRO+x|cj}K4o<J)J<^_CJ9}vTs&s(ecNC6LYANmK|T=i
zV7X_*BM#4GyGTw3;@yKsz`;87vYgh2hCjXTQo!4gjg#nIz2|L;!n>)yn21E2jFscj
z;u{fl&8rX%E-4aoI=n*f<H@|#Y>fedQtzoa!dL~i*urzY_8b;bi!H~^!JDupoxU67
zxfIf!ql{s(SQwHgbEu;tSuRx6>}t8<>_*k$lK4H$HEiQNOquazW%q@geHuRJYxUXi
zMkkbH8EsV=)X*^A?7~b+`IktDe{3k_*o_$B^Ql1c(z57=8jAXKZJd&*2KS<Fu*~V*
z<8E81I<MF#%uP+JB?$*Z!|cVM>3KbQ98870*~58|vgYZ1jmD}=lQziS7+LWowm?DK
zDd{hE#m7yKSX+g>B@7Jw(MJVRbbk4<#52l<n_uJksHt|@MT*<bB(}}i*yB;l1zM`w
zT3P959%!j^_1UNPcGNZ_Hv`{q>37pbZxV0LJ3H3PAP0S@ZPzV~%%hP3&yKw)z}i=|
z$}1`mA>r|}NwSnhL_thD*@3W<wT$3mWGskxCq(={PS_C1zCgl{{TRcVi04?WD%IlT
zh7ev%WW5$dIb1A5`k~XbWm)009`jZ^&PBdWaa+0${zb{%%~O%$?o0sDd~@_fvWwO2
z(e_1j)022|y!Czm!E6(nRv)yye>|-vPi4`>9fOm3HugsO``EnV)t_bW^U0seWvOaa
z4MQlTo^Si+nwy@wSjh2)6(0HyCozpL*9x0tAm+ETXZdxqRtvK?2$Q-x-X_^K+bnrD
z15Rrf%1@J3d2e+gMouU$jj)~wi&j8F{NlctK#rI9AhYR3wN`?sI*D+_L)1G@=aN(V
zNFBZ=h|SvX%&OM2DOSxZig1#j<kfjJa!BF94XXpel1y3)w@m_!*JE{x6ZxsLwY_$z
z5mEUeN8ZAV!p4V2UU((7Sqg2vi#)o!1HUyFXj}_E992yVOg_h>mnd3blWo!8DJdKZ
zmFbt&QWuF$yM-qG@Yl)4%PrR6c$7k(A6%KGR=6-7?>D;5PJR4RcjkzbIH}7GjdS#{
zf;idj?sPjCL}N|gZ%kh(Pm#0;=klLDJ&gI1C-yfg3EO+N3^O;)#|_F5vn#1j?*19r
zMulnhk$kms@Xjc0u?DJ~D@JRE)$=Z$Y>N7g#o5mTZ`WB*<ta2unht&a=p&t_4^Fn1
z!w()h?ot!^3m%%bt}`8+{Fc_{JjYN3p6_xkPXmnI`6`Tch~=}QgUOj}o4-BwhSo+S
zU8W0RSS>G=7?UqXB!suaelC61R9U^fFIouEVawm}9GIFd0x5e;KX=g(O+EpO_g3FX
zS)lXrK2~9d)A3MvwWXc&&ojphS!*x%sn{y+bsJ6F3C=^b(4bLG_B{s@T3$D*r{lgz
zWMjI`{zaFWK|&cxbLyoUrPLhiKb{8aqacvBEG#UvW;~uCs3U;+88Et2a6Ge9>D#&G
ztO`$1x;$7$Uv}R~_w9CN{IG4k-GVGdtLc-vlCYI_@~25Rld?iZb0b$u9K$&+?a9(~
z@zi7ulWp1z_tChAQ$!~V>zkqAucfMf?2l(SdN9pha?T~r7GA(4q|2+yt545)f9WgL
z2$OJ%xx|{+l32Hz)Ac?m84!pZC#ic+I!>NJjR?R67mKeAwAm;yt;G!ujrB?pVRlNs
zO`Q>)<3OcWI^Ia-I8{>+A*OE_H?j-FQna^Wr#G$CKQkP$T@;86(%gDY0ppJUZsEm$
zU;rHl6ovJ*{eR<1T2cyTfH{~*F%f|u`Mdq#dO*x5Cs+$|ixovQoqi`5OpqFMLQhHD
z)WI2i!aqZ!H0AdX71FfoTOJoG3_socJv^;Ao;BHRn?BDOecyZeb0YxmMQ)dCB?E{&
zYcdJP@6-`c!(9_7`Vz+nsDqF!IW*Ni+q!=K@%JhuK^DbIqi#p%CIL(yURCOK2=(yb
z&JY%)0Y>pZ<u@-)EiKu=ov(->Dtv@MTEGcms3jv{q2_yk!(1+TU+mA?+A`tb+xhq@
zkW-2?;#sT4sN#dqOpWqHzjkzVI5+XVW`0fKFK7-z;kIIs;g=M!4N^!v6_=KxqM%U7
zfo$PXnn1zKtZ=BDAdEsnE{2+&odZ4q4gt>g4CD|ix*+)(80e>`qZ>q#u*6)&42w_J
zd<qT;K|w`UR+gxt1Oa%)wt}^iuCA`CW<H^U)Y#4$io_!s49wG0xcyBvxSJP$ld$J7
Y4%UK~%p}E{;0TPwCs~o7LVCXc3uLGL(f|Me

literal 0
HcmV?d00001

diff --git a/frontend/src/features/node-detail/HAProxyConfiguration.tsx b/frontend/src/features/node-detail/HAProxyConfiguration.tsx
new file mode 100644
index 0000000..2087782
--- /dev/null
+++ b/frontend/src/features/node-detail/HAProxyConfiguration.tsx
@@ -0,0 +1,126 @@
+import { Alert, Button, Group, NumberInput, Select, SimpleGrid, Stack, Tabs, Text, Textarea, TextInput } from '@mantine/core';
+import { useEffect, useState } from 'react';
+import { useQuery } from '@tanstack/react-query';
+import { api, APIError } from '../../lib/api';
+import type { NodeRecord } from '../../lib/contracts';
+
+type Settings = { max_connections?: number; threads?: number; timeout_connect?: string; timeout_client?: string; timeout_server?: string };
+type Revision = { revision: number; config: string; note?: string; metadata: Record<string, unknown> };
+type ConfigState = { desired_revision: number | null; actual_revision: number | null; state: string; last_error?: string };
+
+export function HAProxyConfiguration({ node, demo, onSaved, onEditorState }: { node: NodeRecord; demo: boolean; onSaved: (node: NodeRecord) => void; onEditorState: (dirty: boolean, busy: boolean) => void }) {
+  const base = `/api/v1/nodes/${node.id}`;
+  const [settings, setSettings] = useState<Settings>((node.metadata?.haproxy_settings as Settings) ?? {});
+  const [config, setConfig] = useState('');
+  const [savedConfig, setSavedConfig] = useState('');
+  const [revision, setRevision] = useState<string | null>(null);
+  const [note, setNote] = useState('');
+  const [busy, setBusy] = useState(false);
+  const [error, setError] = useState('');
+  const [message, setMessage] = useState('');
+  const dirty = config !== savedConfig;
+  const settingsDirty = JSON.stringify(settings) !== JSON.stringify((node.metadata?.haproxy_settings as Settings) ?? {});
+  useEffect(() => { onEditorState(dirty || settingsDirty, busy); }, [dirty, settingsDirty, busy, onEditorState]);
+  const query = useQuery({
+    queryKey: ['haproxy-config', node.id], enabled: !demo,
+    queryFn: async () => {
+      const revisions = await api<Revision[]>(`${base}/config-revisions`);
+      const state = revisions.length ? await api<ConfigState>(`${base}/config-state`).catch((error: unknown) => {
+        if (error instanceof APIError && error.status === 404) return null;
+        throw error;
+      }) : null;
+      const active = revisions.find((r) => r.revision === state?.desired_revision)
+        ?? (state?.desired_revision ? await api<Revision>(`${base}/config-revisions/${state.desired_revision}`) : null);
+      return { revisions, state, active };
+    }, refetchInterval: 5000,
+  });
+  const state = query.data?.state;
+  const manual = query.data?.active?.metadata.source === 'advanced_editor';
+  useEffect(() => {
+    if (!dirty && !settingsDirty) return;
+    const warn = (event: BeforeUnloadEvent) => { event.preventDefault(); };
+    window.addEventListener('beforeunload', warn);
+    return () => window.removeEventListener('beforeunload', warn);
+  }, [dirty, settingsDirty]);
+  const run = async (action: () => Promise<void>) => {
+    setBusy(true); setError(''); setMessage('');
+    try { await action(); } catch (error) { setError(error instanceof Error ? error.message : 'Операция не выполнена'); }
+    finally { setBusy(false); }
+  };
+  const replace = async (action: () => Promise<void>) => {
+    if (dirty && !window.confirm('Заменить несохранённый текст конфигурации?')) return;
+    await run(action);
+  };
+  const loadRevision = async (value: string) => {
+    const loaded = await api<Revision>(`${base}/config-revisions/${value}`);
+    setConfig(loaded.config); setSavedConfig(loaded.config); setRevision(value); setNote(loaded.note ?? '');
+  };
+  const saveSettings = () => run(async () => {
+    // Read current metadata so opening this editor does not overwrite newer node settings.
+    const current = await api<NodeRecord>(base);
+    const updated = await api<NodeRecord>(base, { method: 'PUT', body: JSON.stringify({ name: current.name, address: current.address, metadata: { ...current.metadata, haproxy_settings: settings } }) });
+    onSaved(updated); setMessage(manual ? 'Параметры сохранены для следующей сборки из маршрутов. Ручной конфиг не изменён.' : (state?.desired_revision ? 'Параметры сохранены. Активная конфигурация из маршрутов будет обновлена агентом.' : 'Параметры сохранены для следующей сборки из маршрутов.'));
+    await query.refetch();
+  });
+  const generate = () => {
+    if (settingsDirty) { setError('Сначала сохраните параметры Global / defaults, чтобы они вошли в сборку.'); return; }
+    return replace(async () => {
+    const rendered = await api<{config: string}>(`${base}/render-config`, { method: 'POST' });
+    setConfig(rendered.config); setSavedConfig(''); setRevision(null); setNote('');
+    setMessage('Загружена сборка из сохранённых маршрутов и параметров. Текст можно редактировать и сохранить как ручную версию.');
+    });
+  };
+  const saveDraft = () => run(async () => {
+    const created = await api<Revision>(`${base}/config-revisions`, { method: 'POST', body: JSON.stringify({config, note, metadata: {source: 'advanced_editor'}}) });
+    setRevision(String(created.revision)); setSavedConfig(config); setMessage(`Версия ${created.revision} сохранена. Для отправки на ноду нажмите «Применить версию».`); await query.refetch();
+  });
+  const assign = () => run(async () => {
+    await api(`${base}/desired-revision`, {method: 'PUT', body: JSON.stringify({revision: Number(revision)})});
+    setMessage('Версия назначена. Агент проверит конфиг перед применением; результат появится ниже.'); await query.refetch();
+  });
+  const resume = async () => {
+    if (settingsDirty) { setError('Сначала сохраните параметры Global / defaults.'); return; }
+    if (!window.confirm('Вернуться к конфигурации из сохранённых маршрутов? Ручная версия останется в истории.')) return;
+    await replace(async () => {
+      const created = await api<Revision>(`${base}/generated-config`, {method: 'POST'});
+      setConfig(created.config); setSavedConfig(created.config); setRevision(String(created.revision)); setNote(created.note ?? '');
+      setMessage('Назначена конфигурация из маршрутов. Ожидается применение агентом.'); await query.refetch();
+    });
+  };
+  return <Stack>
+    {demo && <Alert>Демонстрация интерфейса. Сохранение и применение доступны при подключении к Panel API.</Alert>}
+    <Text size="sm">Режим: {manual ? 'Advanced — ручная конфигурация' : 'Сборка из маршрутов'}. Назначена: {state?.desired_revision ?? '—'} · Применена: {state?.actual_revision ?? '—'} · Статус: {state?.state ?? 'нет данных'}</Text>
+    {state?.last_error && <Alert color="red" title="Ошибка применения">{state.last_error}</Alert>}
+    {(error || query.error) && <Alert color="red">{error || query.error?.message}</Alert>}
+    {message && <Alert color="teal">{message}</Alert>}
+    <Tabs defaultValue="settings">
+      <Tabs.List><Tabs.Tab value="settings">Global / defaults</Tabs.Tab><Tabs.Tab value="advanced">Advanced</Tabs.Tab></Tabs.List>
+      <Tabs.Panel value="settings" pt="md"><Stack>
+        <Text size="sm" c="dimmed">Параметры HAProxy для всех маршрутов этой ноды. Пустые поля используют значения по умолчанию. Сохранение обновляет активную сборку из маршрутов.</Text>
+        <SimpleGrid cols={{base: 1, sm: 2}}>
+        <NumberInput label="Максимум соединений · maxconn" placeholder="Автоматически" min={1} max={10000000} allowDecimal={false} value={settings.max_connections || ''} onChange={(v) => setSettings({...settings, max_connections: typeof v === 'number' ? v : undefined})} />
+        <NumberInput label="Потоки · nbthread" placeholder="Автоматически" min={1} max={256} allowDecimal={false} value={settings.threads || ''} onChange={(v) => setSettings({...settings, threads: typeof v === 'number' ? v : undefined})} />
+        </SimpleGrid>
+        <SimpleGrid cols={{base: 1, sm: 3}}>
+        {(['connect', 'client', 'server'] as const).map((key) => <TextInput key={key} label={`timeout ${key}`} placeholder={key === 'connect' ? '5s' : '15m'} description="Положительное значение с единицей ms, s, m или h" value={settings[`timeout_${key}`] ?? ''} onChange={(e) => setSettings({...settings, [`timeout_${key}`]: e.currentTarget.value})} />)}
+        </SimpleGrid>
+        <Button disabled={demo || busy || query.isLoading || query.isError} loading={busy} onClick={saveSettings}>Сохранить параметры</Button>
+      </Stack></Tabs.Panel>
+      <Tabs.Panel value="advanced" pt="md"><Stack>
+        <Alert color="yellow">При применении ручной версии автоматическая публикация маршрутов блокируется до возврата к сборке из UI. Произвольный конфиг не синхронизируется обратно в формы маршрутов. Runtime-метрики, квоты и управление firewall зависят от структуры конфигурации.</Alert>
+        <Group>
+          <Button variant="default" disabled={demo || busy} onClick={generate}>Загрузить из UI</Button>
+          <Button variant="default" disabled={demo || busy || !state?.desired_revision} onClick={() => replace(() => loadRevision(String(state?.desired_revision)))}>Загрузить назначенную</Button>
+          <Button variant="default" disabled={demo || busy} onClick={resume}>Вернуться к сборке из UI</Button>
+        </Group>
+        <Select label="История конфигураций" placeholder="Загрузить версию" value={revision} data={(query.data?.revisions ?? []).map((r) => ({value: String(r.revision), label: `v${r.revision}${r.note ? ` · ${r.note}` : ''}`}))} disabled={demo || busy} onChange={(v) => { if (v) void replace(() => loadRevision(v)); }} />
+        <Textarea label="haproxy.cfg" disabled={busy} description={dirty ? 'Есть несохранённые изменения' : 'Сохранённый текст'} value={config} onChange={(e) => {setConfig(e.currentTarget.value);}} autosize minRows={18} maxRows={30} spellCheck={false} styles={{input: {fontFamily: 'monospace', fontSize: 13, tabSize: 4}}} />
+        <TextInput label="Комментарий к версии" maxLength={500} value={note} onChange={(e) => setNote(e.currentTarget.value)} />
+        <Group justify="space-between"><Text size="xs" c="dimmed">Лимит: 512 КиБ. Проверка HAProxy выполняется агентом перед применением.</Text><Group>
+          <Button variant="default" disabled={demo || busy || !config.trim() || new TextEncoder().encode(config).length > 524288} onClick={saveDraft}>Сохранить версию</Button>
+          <Button disabled={demo || busy || dirty || !revision} onClick={assign}>Применить версию</Button>
+        </Group></Group>
+      </Stack></Tabs.Panel>
+    </Tabs>
+  </Stack>;
+}
diff --git a/frontend/src/pages/NodeDetailPage.tsx b/frontend/src/pages/NodeDetailPage.tsx
index b4ab036..c6c55a7 100644
--- a/frontend/src/pages/NodeDetailPage.tsx
+++ b/frontend/src/pages/NodeDetailPage.tsx
@@ -1,12 +1,13 @@
 import { ActionIcon, Alert, Button, Group, Menu, Modal, Skeleton, Stack, Switch, Text, TextInput } from '@mantine/core';
 import { useQueryClient } from '@tanstack/react-query';
 import { IconDots, IconEdit, IconInfoCircle, IconPlus, IconPower, IconRefresh, IconServerCog, IconSettings, IconTrash } from '@tabler/icons-react';
-import { useEffect, useMemo, useRef, useState } from 'react';
+import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
 import { Link, useLocation, useNavigate, useParams } from 'react-router-dom';
 import { LoginPanel } from '../components/LoginPanel';
 import { PageHeader } from '../components/PageHeader';
 import { RetryButton, StateView } from '../components/StateView';
 import { Surface } from '../components/Surface';
+import { HAProxyConfiguration } from '../features/node-detail/HAProxyConfiguration';
 import { NodeKpiGrid } from '../features/node-detail/NodeKpiGrid';
 import { NodeOperationalPanels } from '../features/node-detail/NodeOperationalPanels';
 import { NodeRoutesTable } from '../features/node-detail/NodeRoutesTable';
@@ -59,6 +60,10 @@ export function NodeDetailPage() {
   const [updateOverride, setUpdateOverride] = useState<NodeAgentUpdateState | null>(null);
   const [nodeOverride, setNodeOverride] = useState<NodeRecord | null>(null);
   const [nodeSettingsOpened, setNodeSettingsOpened] = useState(false);
+  const [configOpened, setConfigOpened] = useState(false);
+  const [configDirty, setConfigDirty] = useState(false);
+  const [configBusy, setConfigBusy] = useState(false);
+  const onConfigEditorState = useCallback((dirty: boolean, busy: boolean) => { setConfigDirty(dirty); setConfigBusy(busy); }, []);
   const [reinstallOpened, setReinstallOpened] = useState(false);
   const [nodeName, setNodeName] = useState('');
   const [nodeAddress, setNodeAddress] = useState('');
@@ -406,6 +411,7 @@ export function NodeDetailPage() {
         meta={<><code>{node.address}</code><span className={`nf-detail-status is-${displayStatus}`}><i />{stateCopy[displayStatus]}</span><span className="nf-detail-heartbeat">Последний сигнал: {timeAgo(node.last_seen_at)}</span></>}
         actions={<>
           <Button component={Link} to={`/nodes/${nodeId}/routes/new${demoQuery}`} className="nf-primary-action" leftSection={<IconPlus size={18} />}>Добавить маршрут</Button>
+          <Button variant="default" onClick={() => { setConfigDirty(false); setConfigBusy(false); setConfigOpened(true); }}>Конфигурация HAProxy</Button>
           <ActionIcon variant="default" size="lg" onClick={openNodeSettings} aria-label="Настройки ноды"><IconSettings size={18} /></ActionIcon>
           <Menu position="bottom-end" withinPortal>
             <Menu.Target><ActionIcon variant="default" size="lg" aria-label="Действия ноды"><IconDots size={19} /></ActionIcon></Menu.Target>
@@ -547,6 +553,9 @@ export function NodeDetailPage() {
           </Group>
         </Stack>
       </Modal>
+      <Modal opened={configOpened} onClose={() => { if (!configBusy && (!configDirty || window.confirm('Закрыть редактор? Несохранённые изменения будут потеряны.'))) setConfigOpened(false); }} title="Конфигурация HAProxy" size="xl" closeOnClickOutside={false}>
+        {configOpened && <HAProxyConfiguration node={node} demo={demo} onEditorState={onConfigEditorState} onSaved={(updated) => { setNodeOverride(updated); void invalidate(); }} />}
+      </Modal>
       <AddNodeDialog
         opened={reinstallOpened}
         onClose={() => setReinstallOpened(false)}
diff --git a/internal/panel/haproxy_renderer.go b/internal/panel/haproxy_renderer.go
index d59a9aa..c5c21c9 100644
--- a/internal/panel/haproxy_renderer.go
+++ b/internal/panel/haproxy_renderer.go
@@ -185,6 +185,9 @@ func renderHAProxyConfigForLifecycle(routes []Route, facts NodeRenderFacts) (HAP
 }
 
 func renderHAProxyConfig(routes []Route, facts NodeRenderFacts, allowEmpty bool) (HAProxyRenderResult, error) {
+	if err := facts.HAProxySettings.validate(); err != nil {
+		return HAProxyRenderResult{}, err
+	}
 	result := HAProxyRenderResult{
 		Renderer:          HAProxyRendererVersion,
 		PipeSize:          facts.PipeSize(),
@@ -408,6 +411,12 @@ func renderHAProxyConfig(routes []Route, facts NodeRenderFacts, allowEmpty bool)
 	b.WriteString("# Generated by NodeFlow. Do not edit.\n")
 	b.WriteString("# renderer: " + result.Renderer + "\n\n")
 	b.WriteString("global\n")
+	if facts.HAProxySettings.MaxConnections > 0 {
+		fmt.Fprintf(&b, "    maxconn %d\n", facts.HAProxySettings.MaxConnections)
+	}
+	if facts.HAProxySettings.Threads > 0 {
+		fmt.Fprintf(&b, "    nbthread %d\n", facts.HAProxySettings.Threads)
+	}
 	// Connection logging (rsyslog -> /var/log/haproxy.log on Debian/Ubuntu)
 	// is on by default. With the node setting off no log target exists at
 	// all; startup alerts still reach stderr, i.e. the systemd journal.
@@ -454,9 +463,9 @@ func renderHAProxyConfig(routes []Route, facts NodeRenderFacts, allowEmpty bool)
 	b.WriteString("        option splice-request\n")
 	b.WriteString("        option splice-response\n")
 	b.WriteString("    .endif\n")
-	b.WriteString("    timeout connect 5s\n")
-	b.WriteString("    timeout client 15m\n")
-	b.WriteString("    timeout server 15m\n")
+	fmt.Fprintf(&b, "    timeout connect %s\n", timeoutOr(facts.HAProxySettings.TimeoutConnect, "5s"))
+	fmt.Fprintf(&b, "    timeout client %s\n", timeoutOr(facts.HAProxySettings.TimeoutClient, "15m"))
+	fmt.Fprintf(&b, "    timeout server %s\n", timeoutOr(facts.HAProxySettings.TimeoutServer, "15m"))
 	if hasDynamicDNS {
 		b.WriteString("\nresolvers nf_dns\n")
 		b.WriteString("    nameserver adguard_local 127.0.0.1:53\n")
diff --git a/internal/panel/haproxy_renderer_http_test.go b/internal/panel/haproxy_renderer_http_test.go
index 00921f2..df441b6 100644
--- a/internal/panel/haproxy_renderer_http_test.go
+++ b/internal/panel/haproxy_renderer_http_test.go
@@ -23,11 +23,12 @@ func TestRenderConfigPreviewEndpoint(t *testing.T) {
 	assert.Equal(t, http.StatusMethodNotAllowed, w.Code)
 }
 
-func TestRenderConfigPreviewRejectsNoEnabledRoutes(t *testing.T) {
+func TestRenderConfigPreviewAllowsEmptyBaseConfig(t *testing.T) {
 	f := &fakeStore{routes: []Route{{ID: testRouteID, Enabled: false}}}
 	w := request(t, handler(f), http.MethodPost, "/api/v1/nodes/"+testNodeID+"/render-config", "", testAdminToken)
-	require.Equal(t, http.StatusUnprocessableEntity, w.Code, w.Body.String())
-	assert.JSONEq(t, `{"error":{"code":"no_enabled_routes","message":"node has no enabled routes to render"}}`, w.Body.String())
+	require.Equal(t, http.StatusOK, w.Code, w.Body.String())
+	assert.Contains(t, w.Body.String(), `"enabled_routes":0`)
+	assert.Contains(t, w.Body.String(), `global\n`)
 }
 
 func TestCreateConfigRevisionFromRoutesDoesNotAssignDesired(t *testing.T) {
diff --git a/internal/panel/haproxy_settings.go b/internal/panel/haproxy_settings.go
new file mode 100644
index 0000000..757562f
--- /dev/null
+++ b/internal/panel/haproxy_settings.go
@@ -0,0 +1,99 @@
+package panel
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io"
+	"regexp"
+
+	"github.com/jackc/pgx/v5"
+)
+
+const nodeHAProxySettingsKey = "haproxy_settings"
+
+// Zero values preserve the existing renderer defaults.
+type HAProxySettings struct {
+	MaxConnections int    `json:"max_connections,omitempty"`
+	Threads        int    `json:"threads,omitempty"`
+	TimeoutConnect string `json:"timeout_connect,omitempty"`
+	TimeoutClient  string `json:"timeout_client,omitempty"`
+	TimeoutServer  string `json:"timeout_server,omitempty"`
+}
+
+var haproxyTimeoutPattern = regexp.MustCompile(`^[1-9][0-9]{0,7}(ms|s|m|h)$`)
+var ErrAdvancedConfig = errors.New("manual HAProxy configuration is active; return to generated configuration before changing routes")
+
+func (s HAProxySettings) validate() error {
+	if s.MaxConnections < 0 || s.MaxConnections > 10000000 {
+		return fmt.Errorf("max_connections must be between 0 (automatic) and 10000000")
+	}
+	if s.Threads < 0 || s.Threads > 256 {
+		return fmt.Errorf("threads must be between 0 (automatic) and 256")
+	}
+	for name, value := range map[string]string{"timeout_connect": s.TimeoutConnect, "timeout_client": s.TimeoutClient, "timeout_server": s.TimeoutServer} {
+		if value != "" && !haproxyTimeoutPattern.MatchString(value) {
+			return fmt.Errorf("%s must be a positive duration with ms, s, m or h suffix", name)
+		}
+	}
+	return nil
+}
+
+func parseHAProxySettings(value any) (HAProxySettings, error) {
+	var settings HAProxySettings
+	if value == nil {
+		return settings, errors.New("haproxy_settings must be an object")
+	}
+	raw, err := json.Marshal(value)
+	if err != nil {
+		return settings, err
+	}
+	decoder := json.NewDecoder(bytes.NewReader(raw))
+	decoder.DisallowUnknownFields()
+	if err := decoder.Decode(&settings); err != nil {
+		return settings, fmt.Errorf("invalid haproxy_settings: %w", err)
+	}
+	if err := decoder.Decode(new(any)); err != io.EOF {
+		return settings, errors.New("invalid haproxy_settings")
+	}
+	return settings, settings.validate()
+}
+
+func settingsFromMetadata(metadata map[string]any) (HAProxySettings, error) {
+	value, exists := metadata[nodeHAProxySettingsKey]
+	if !exists {
+		return HAProxySettings{}, nil
+	}
+	return parseHAProxySettings(value)
+}
+
+func timeoutOr(value, fallback string) string {
+	if value == "" {
+		return fallback
+	}
+	return value
+}
+
+// ResumeGeneratedConfig renders and assigns under the same node lock as route
+// mutations. This prevents a stale preview from replacing newer route intent.
+func (s *PGStore) ResumeGeneratedConfig(ctx context.Context, nodeID string) (ConfigRevision, error) {
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return ConfigRevision{}, err
+	}
+	defer tx.Rollback(ctx)
+	var exists bool
+	if err := tx.QueryRow(ctx, `SELECT true FROM nodes WHERE id=$1 FOR UPDATE`, nodeID).Scan(&exists); err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return ConfigRevision{}, ErrNotFound
+		}
+		return ConfigRevision{}, err
+	}
+	revision, err := createAndAssignGeneratedRevisionTx(ctx, tx, nodeID, "", "Resume generated configuration", true)
+	if err != nil {
+		return ConfigRevision{}, err
+	}
+	return revision, tx.Commit(ctx)
+}
diff --git a/internal/panel/haproxy_settings_integration_test.go b/internal/panel/haproxy_settings_integration_test.go
new file mode 100644
index 0000000..25932f3
--- /dev/null
+++ b/internal/panel/haproxy_settings_integration_test.go
@@ -0,0 +1,90 @@
+package panel
+
+import (
+	"context"
+	"fmt"
+	"os"
+	"testing"
+	"time"
+
+	"github.com/jackc/pgx/v5/pgxpool"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func TestPGStoreHAProxySettingsAndAdvancedMode(t *testing.T) {
+	databaseURL := os.Getenv("NODEFLOW_TEST_DATABASE_URL")
+	if databaseURL == "" {
+		t.Skip("NODEFLOW_TEST_DATABASE_URL is not set")
+	}
+	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
+	defer cancel()
+	pool, err := pgxpool.New(ctx, databaseURL)
+	require.NoError(t, err)
+	defer pool.Close()
+	store := NewPGStore(pool)
+	seed := time.Now().UnixNano()
+	node, err := store.CreateNode(ctx, fmt.Sprintf("configuration-%d", seed), fmt.Sprintf("2001:db8:%x:%x::1", uint16(seed), uint16(seed>>16)), map[string]any{})
+	require.NoError(t, err)
+	defer func() { _ = store.DeleteNode(context.Background(), node.ID) }()
+	spec, err := validatePayload(t, `{"name":"example","match_mode":"fallback","listener_port":16443,"target_host":"192.0.2.10","target_port":443,"enabled":true}`)
+	require.NoError(t, err)
+	created, err := store.CreateRoute(ctx, node.ID, spec)
+	require.NoError(t, err)
+	spec.ExpectedVersion = revision(created.Version)
+	spec.Enabled = true
+	created, err = store.UpdateRoute(ctx, node.ID, created.ID, spec)
+	require.NoError(t, err)
+	spec.ExpectedVersion = revision(created.Version)
+	before, err := store.GetConfigState(ctx, node.ID)
+	require.NoError(t, err)
+	_, err = store.UpdateNode(ctx, node.ID, node.Name, node.Address, map[string]any{nodeHAProxySettingsKey: map[string]any{"max_connections": 40000, "timeout_client": "1h"}})
+	require.NoError(t, err)
+	after, err := store.GetConfigState(ctx, node.ID)
+	require.NoError(t, err)
+	require.Greater(t, *after.DesiredRevision, *before.DesiredRevision)
+	generated, err := store.GetConfigRevision(ctx, node.ID, *after.DesiredRevision)
+	require.NoError(t, err)
+	assert.Contains(t, generated.Config, "maxconn 40000")
+	assert.Contains(t, generated.Config, "timeout client 1h")
+	// Omission by an older client must not reset tuning or publish another revision.
+	_, err = store.UpdateNode(ctx, node.ID, node.Name, node.Address, map[string]any{})
+	require.NoError(t, err)
+	same, err := store.GetConfigState(ctx, node.ID)
+	require.NoError(t, err)
+	assert.Equal(t, after.DesiredRevision, same.DesiredRevision)
+	manual, err := store.CreateConfigRevision(ctx, node.ID, generated.Config+"\n# manual\n", "manual", map[string]any{"source": "advanced_editor"})
+	require.NoError(t, err)
+	_, err = store.AssignDesiredRevision(ctx, node.ID, manual.Revision)
+	require.NoError(t, err)
+	// A publishing route mutation fails atomically while advanced mode is active.
+	spec.Name = "blocked"
+	spec.ListenerPort = 17443
+	_, err = store.UpdateRoute(ctx, node.ID, created.ID, spec)
+	require.ErrorIs(t, err, ErrAdvancedConfig)
+	routes, err := store.ListRoutes(ctx, node.ID)
+	require.NoError(t, err)
+	require.Len(t, routes, 1)
+	assert.Equal(t, "example", routes[0].Name)
+	state, err := store.GetConfigState(ctx, node.ID)
+	require.NoError(t, err)
+	require.Equal(t, manual.Revision, *state.DesiredRevision)
+	// Tuning is stored for later generated mode and never overwrites manual text.
+	_, err = store.UpdateNode(ctx, node.ID, node.Name, node.Address, map[string]any{nodeHAProxySettingsKey: map[string]any{"max_connections": 50000}})
+	require.NoError(t, err)
+	state, err = store.GetConfigState(ctx, node.ID)
+	require.NoError(t, err)
+	require.Equal(t, manual.Revision, *state.DesiredRevision)
+	// Resuming builds current intent and restores route lifecycle tracking atomically.
+	resumed, err := store.ResumeGeneratedConfig(ctx, node.ID)
+	require.NoError(t, err)
+	assert.Equal(t, "route_lifecycle", resumed.CreatedBy)
+	assert.Contains(t, resumed.Config, "maxconn 50000")
+	_, err = store.UpdateRoute(ctx, node.ID, created.ID, spec)
+	require.NoError(t, err)
+	state, err = store.GetConfigState(ctx, node.ID)
+	require.NoError(t, err)
+	latest, err := store.GetConfigRevision(ctx, node.ID, *state.DesiredRevision)
+	require.NoError(t, err)
+	assert.Contains(t, latest.Config, "maxconn 50000")
+}
diff --git a/internal/panel/haproxy_settings_test.go b/internal/panel/haproxy_settings_test.go
new file mode 100644
index 0000000..bab51ba
--- /dev/null
+++ b/internal/panel/haproxy_settings_test.go
@@ -0,0 +1,78 @@
+package panel
+
+import (
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func TestHAProxySettingsValidation(t *testing.T) {
+	for _, raw := range []string{`null`, `[]`, `{"threads":257}`, `{"threads":1.5}`, `{"max_connections":-1}`, `{"timeout_client":"1s\nfrontend injected"}`, `{"timeout_server":"0s"}`, `{"unknown":true}`} {
+		t.Run(raw, func(t *testing.T) {
+			var value any
+			require.NoError(t, json.Unmarshal([]byte(raw), &value))
+			_, err := parseHAProxySettings(value)
+			require.Error(t, err)
+		})
+	}
+}
+
+func TestHAProxySettingsRenderAndDefaultCompatibility(t *testing.T) {
+	route := fallbackRoute(testRouteID)
+	baseline, err := RenderHAProxyConfig([]Route{route})
+	require.NoError(t, err)
+	defaults, err := RenderHAProxyConfigForNode([]Route{route}, NodeRenderFacts{HAProxySettings: HAProxySettings{}})
+	require.NoError(t, err)
+	require.Equal(t, baseline, defaults)
+	tuned, err := RenderHAProxyConfigForNode([]Route{route}, NodeRenderFacts{HAProxySettings: HAProxySettings{MaxConnections: 50000, Threads: 4, TimeoutConnect: "10s", TimeoutClient: "1h", TimeoutServer: "30m"}})
+	require.NoError(t, err)
+	for _, directive := range []string{"maxconn 50000", "nbthread 4", "timeout connect 10s", "timeout client 1h", "timeout server 30m"} {
+		assert.Contains(t, tuned.Config, directive)
+	}
+	assert.NotEqual(t, baseline.SHA256, tuned.SHA256)
+	assert.NotContains(t, tuned.Config, "timeout connect 5s")
+	assert.Equal(t, 1, strings.Count(tuned.Config, "timeout client"))
+	assert.Equal(t, baseline.RuntimeNames, tuned.RuntimeNames)
+}
+
+func TestHAProxySettingsHTTPValidationAndPreservation(t *testing.T) {
+	f := &fakeStore{}
+	w := request(t, handler(f), http.MethodPut, "/api/v1/nodes/"+testNodeID, `{"name":"node","address":"192.0.2.1","metadata":{"haproxy_settings":{"threads":-1}}}`, testAdminToken)
+	require.Equal(t, http.StatusBadRequest, w.Code, w.Body.String())
+	previous := map[string]any{nodeHAProxySettingsKey: map[string]any{"threads": float64(4)}}
+	merged := mergeNodeMetadata(previous, map[string]any{"agent_port": float64(4200)})
+	require.Equal(t, previous[nodeHAProxySettingsKey], merged[nodeHAProxySettingsKey])
+	reset := mergeNodeMetadata(previous, map[string]any{nodeHAProxySettingsKey: map[string]any{}})
+	settings, err := settingsFromMetadata(reset)
+	require.NoError(t, err)
+	assert.Equal(t, HAProxySettings{}, settings)
+}
+
+func TestAdvancedConfigurationConflictResponse(t *testing.T) {
+	w := httptest.NewRecorder()
+	// Use the common store response mapper, shared by every route mutation.
+	respondStore(w, nil, ErrAdvancedConfig, http.StatusOK)
+	assert.Equal(t, http.StatusConflict, w.Code)
+	assert.Contains(t, w.Body.String(), "advanced_config_active")
+}
+
+func TestResumeGeneratedConfigEndpoint(t *testing.T) {
+	f := &fakeStore{}
+	h := handler(f)
+	path := "/api/v1/nodes/" + testNodeID + "/generated-config"
+	w := request(t, h, http.MethodPost, path, "", "")
+	require.Equal(t, http.StatusUnauthorized, w.Code)
+	assert.Zero(t, f.desiredRevision)
+	w = request(t, h, http.MethodGet, path, "", testAdminToken)
+	require.Equal(t, http.StatusMethodNotAllowed, w.Code)
+	w = request(t, h, http.MethodPost, path, "", testAdminToken)
+	require.Equal(t, http.StatusCreated, w.Code, w.Body.String())
+	assert.EqualValues(t, 1, f.desiredRevision)
+	require.NotEmpty(t, f.auditEvents)
+	assert.Equal(t, "revision.resume_generated", f.auditEvents[len(f.auditEvents)-1].Action)
+}
diff --git a/internal/panel/http.go b/internal/panel/http.go
index 83efa0a..f4d99fa 100644
--- a/internal/panel/http.go
+++ b/internal/panel/http.go
@@ -450,6 +450,8 @@ func auditEventForRequest(r *http.Request, status int) AuditEvent {
 			event.Action = "agent.update.rollback"
 		case len(parts) >= 3 && parts[2] == "config-revisions":
 			event.Action, event.ResourceType = "revision.create", "config_revision"
+		case len(parts) == 3 && parts[2] == "generated-config":
+			event.Action, event.ResourceType = "revision.resume_generated", "config_revision"
 		case len(parts) == 3 && parts[2] == "desired-revision":
 			event.Action, event.ResourceType = "revision.assign", "config_revision"
 		case len(parts) == 3 && parts[2] == "enrollment-tokens":
@@ -662,6 +664,15 @@ func (a *API) api(w http.ResponseWriter, r *http.Request) {
 			a.configRevision(w, r, nodeID, revision)
 			return
 		}
+		if len(parts) == 3 && parts[2] == "generated-config" {
+			if r.Method != http.MethodPost {
+				methodNotAllowed(w, "POST")
+				return
+			}
+			revision, err := a.store.ResumeGeneratedConfig(r.Context(), nodeID)
+			respondStore(w, revision, err, http.StatusCreated)
+			return
+		}
 		if len(parts) == 3 && parts[2] == "config-state" {
 			a.configState(w, r, nodeID)
 			return
@@ -1145,7 +1156,7 @@ func (a *API) renderConfig(w http.ResponseWriter, r *http.Request, nodeID string
 		methodNotAllowed(w, "POST")
 		return
 	}
-	result, err := a.renderCurrentRoutes(r.Context(), nodeID)
+	result, err := a.renderCurrentRoutesAllowEmpty(r.Context(), nodeID, true)
 	if err != nil {
 		if errors.Is(err, ErrNotFound) {
 			respondStore(w, nil, err, http.StatusOK)
@@ -1194,6 +1205,10 @@ func (a *API) configRevisionFromRoutes(w http.ResponseWriter, r *http.Request, n
 }
 
 func (a *API) renderCurrentRoutes(ctx context.Context, nodeID string) (HAProxyRenderResult, error) {
+	return a.renderCurrentRoutesAllowEmpty(ctx, nodeID, false)
+}
+
+func (a *API) renderCurrentRoutesAllowEmpty(ctx context.Context, nodeID string, allowEmpty bool) (HAProxyRenderResult, error) {
 	if _, err := a.store.GetNode(ctx, nodeID); err != nil {
 		return HAProxyRenderResult{}, err
 	}
@@ -1224,7 +1239,7 @@ func (a *API) renderCurrentRoutes(ctx context.Context, nodeID string) (HAProxyRe
 	if err != nil {
 		return HAProxyRenderResult{}, err
 	}
-	return RenderHAProxyConfigForNode(routes, facts)
+	return renderHAProxyConfig(routes, facts, allowEmpty)
 }
 
 // withStickyTableEffective adds sticky_table_entries_effective to GET
@@ -1876,6 +1891,9 @@ type nodeInput struct {
 // normalizeNodeSettings folds the top-level node settings into metadata and
 // validates the panel-owned metadata keys.
 func (in *nodeInput) normalizeNodeSettings() error {
+	if _, err := settingsFromMetadata(in.Metadata); err != nil {
+		return err
+	}
 	if in.Metadata == nil {
 		in.Metadata = map[string]any{}
 	}
@@ -2712,6 +2730,10 @@ func decode(w http.ResponseWriter, r *http.Request, dst any) bool {
 	return true
 }
 func respondStore(w http.ResponseWriter, v any, err error, status int) {
+	if errors.Is(err, ErrAdvancedConfig) {
+		writeError(w, http.StatusConflict, "advanced_config_active", err.Error())
+		return
+	}
 	if errors.Is(err, ErrNotFound) {
 		writeError(w, 404, "not_found", "resource not found")
 		return
diff --git a/internal/panel/http_test.go b/internal/panel/http_test.go
index 400c7a8..e972d75 100644
--- a/internal/panel/http_test.go
+++ b/internal/panel/http_test.go
@@ -2016,3 +2016,8 @@ func TestValidateHAProxyServiceReportAcceptsRestartAcknowledgement(t *testing.T)
 func jsonDecode(body string, dst any) error {
 	return json.NewDecoder(strings.NewReader(body)).Decode(dst)
 }
+
+func (f *fakeStore) ResumeGeneratedConfig(_ context.Context, nodeID string) (ConfigRevision, error) {
+	f.desiredRevision = 1
+	return ConfigRevision{NodeID: nodeID, Revision: 1}, f.routeErr
+}
diff --git a/internal/panel/node_facts.go b/internal/panel/node_facts.go
index 284a3d6..a986815 100644
--- a/internal/panel/node_facts.go
+++ b/internal/panel/node_facts.go
@@ -34,6 +34,7 @@ const (
 // change the rendered configuration. The zero value (nothing known) renders
 // 256 KiB pipes and 1m auto stick-tables.
 type NodeRenderFacts struct {
+	HAProxySettings HAProxySettings `json:"haproxy_settings,omitempty"`
 	// KernelPipesTuned: the Agent reported pipe-max-size >= 1 MiB and
 	// pipe-user-pages-soft == 0 (1 MiB splice pipes are safe).
 	KernelPipesTuned bool `json:"kernel_pipes_tuned"`
@@ -136,20 +137,36 @@ func nodeRenderFactsTx(ctx context.Context, q interface {
 	if err != nil {
 		return NodeRenderFacts{}, err
 	}
+	var settingsRaw []byte
+	if err := q.QueryRow(ctx, `SELECT COALESCE(metadata->'haproxy_settings','{}'::jsonb) FROM nodes WHERE id=$1`, nodeID).Scan(&settingsRaw); err != nil && !errors.Is(err, pgx.ErrNoRows) {
+		return NodeRenderFacts{}, err
+	}
+	settings := HAProxySettings{}
+	if len(settingsRaw) > 0 {
+		var value any
+		if err := json.Unmarshal(settingsRaw, &value); err != nil {
+			return NodeRenderFacts{}, err
+		}
+		settings, err = parseHAProxySettings(value)
+		if err != nil {
+			return NodeRenderFacts{}, err
+		}
+	}
 	var raw []byte
 	err = q.QueryRow(ctx, `SELECT metrics FROM node_heartbeats WHERE node_id=$1`, nodeID).Scan(&raw)
 	if errors.Is(err, pgx.ErrNoRows) {
-		return NodeRenderFacts{HAProxyLogsDisabled: logsDisabled}, nil
+		return NodeRenderFacts{HAProxyLogsDisabled: logsDisabled, HAProxySettings: settings}, nil
 	}
 	if err != nil {
 		return NodeRenderFacts{}, err
 	}
 	var metrics map[string]any
 	if json.Unmarshal(raw, &metrics) != nil {
-		return NodeRenderFacts{HAProxyLogsDisabled: logsDisabled}, nil
+		return NodeRenderFacts{HAProxyLogsDisabled: logsDisabled, HAProxySettings: settings}, nil
 	}
 	facts := nodeRenderFactsFromMetrics(metrics)
 	facts.HAProxyLogsDisabled = logsDisabled
+	facts.HAProxySettings = settings
 	return facts, nil
 }
 
diff --git a/internal/panel/store.go b/internal/panel/store.go
index 3c29e3c..2a9b072 100644
--- a/internal/panel/store.go
+++ b/internal/panel/store.go
@@ -87,6 +87,7 @@ type Store interface {
 	ListConfigRevisions(context.Context, string) ([]ConfigRevision, error)
 	GetConfigRevision(context.Context, string, int64) (ConfigRevision, error)
 	AssignDesiredRevision(context.Context, string, int64) (NodeConfigState, error)
+	ResumeGeneratedConfig(context.Context, string) (ConfigRevision, error)
 	GetConfigState(context.Context, string) (NodeConfigState, error)
 	IngestApplyReport(context.Context, string, ApplyReport) (NodeConfigState, error)
 }
@@ -433,9 +434,9 @@ func (s *PGStore) GetNodeOperationalDetail(ctx context.Context, id string) (Node
 }
 
 // UpdateNode replaces name, address and metadata. Settings owned by the
-// Panel (haproxy_logs) survive a metadata object that omits them, so older
-// clients cannot silently reset them. When the effective HAProxy logging
-// setting changes, a new route revision is published in the same
+// Panel (haproxy_logs and haproxy_settings) survive a metadata object that
+// omits them, so older clients cannot silently reset them. When effective
+// HAProxy settings change, a new route revision is published in the same
 // transaction; the Agent applies it with a graceful reload.
 func (s *PGStore) UpdateNode(ctx context.Context, id, name, address string, metadata map[string]any) (Node, error) {
 	tx, err := s.pool.Begin(ctx)
@@ -456,6 +457,14 @@ func (s *PGStore) UpdateNode(ctx context.Context, id, name, address string, meta
 		_ = json.Unmarshal(raw, &previous)
 	}
 	merged := mergeNodeMetadata(previous, metadata)
+	previousSettings, err := settingsFromMetadata(previous)
+	if err != nil {
+		return Node{}, err
+	}
+	nextSettings, err := settingsFromMetadata(merged)
+	if err != nil {
+		return Node{}, err
+	}
 	b, err := json.Marshal(merged)
 	if err != nil {
 		return Node{}, err
@@ -464,7 +473,7 @@ func (s *PGStore) UpdateNode(ctx context.Context, id, name, address string, meta
 	if err != nil {
 		return Node{}, err
 	}
-	if haproxyLogsEnabled(previous) != haproxyLogsEnabled(merged) {
+	if haproxyLogsEnabled(previous) != haproxyLogsEnabled(merged) || previousSettings != nextSettings {
 		if err = republishOnNodeSettingChangeTx(ctx, tx, id); err != nil {
 			return Node{}, err
 		}
@@ -474,7 +483,7 @@ func (s *PGStore) UpdateNode(ctx context.Context, id, name, address string, meta
 
 // panelOwnedNodeMetadataKeys are node metadata keys a client may omit on
 // update without resetting them.
-var panelOwnedNodeMetadataKeys = []string{nodeMetadataHAProxyLogsKey}
+var panelOwnedNodeMetadataKeys = []string{nodeMetadataHAProxyLogsKey, nodeHAProxySettingsKey}
 
 // mergeNodeMetadata returns next with panel-owned keys carried over from
 // previous when next omits them. next is not modified.
@@ -514,7 +523,7 @@ func republishOnNodeSettingChangeTx(ctx context.Context, tx pgx.Tx, nodeID strin
 	if createdBy != "route_lifecycle" {
 		return nil
 	}
-	_, err = createAndAssignRouteRevisionTx(ctx, tx, nodeID, "", "node setting changed (HAProxy connection logs)")
+	_, err = createAndAssignRouteRevisionTx(ctx, tx, nodeID, "", "node setting changed (HAProxy global/defaults and logs)")
 	return err
 }
 func (s *PGStore) DeleteNode(ctx context.Context, id string) error {
@@ -1223,6 +1232,18 @@ func listRoutesTx(ctx context.Context, tx pgx.Tx, nodeID string) ([]Route, error
 // node row is already locked by the caller, so concurrent mutations serialize
 // into monotonically increasing immutable revisions without a stale render.
 func createAndAssignRouteRevisionTx(ctx context.Context, tx pgx.Tx, nodeID, affectedRouteID, note string) (ConfigRevision, error) {
+	return createAndAssignGeneratedRevisionTx(ctx, tx, nodeID, affectedRouteID, note, false)
+}
+
+// Only an explicit resume operation may replace an advanced configuration.
+func createAndAssignGeneratedRevisionTx(ctx context.Context, tx pgx.Tx, nodeID, affectedRouteID, note string, resume bool) (ConfigRevision, error) {
+	var manual bool
+	if err := tx.QueryRow(ctx, `SELECT EXISTS(SELECT 1 FROM node_config_state s JOIN config_revisions r ON r.node_id=s.node_id AND r.revision=s.desired_revision WHERE s.node_id=$1 AND r.metadata->>'source'='advanced_editor')`, nodeID).Scan(&manual); err != nil {
+		return ConfigRevision{}, err
+	}
+	if manual && !resume {
+		return ConfigRevision{}, ErrAdvancedConfig
+	}
 	routes, err := listRoutesTx(ctx, tx, nodeID)
 	if err != nil {
 		return ConfigRevision{}, err
@@ -2026,7 +2047,19 @@ func scanConfigState(row pgx.Row) (NodeConfigState, error) {
 }
 
 func (s *PGStore) AssignDesiredRevision(ctx context.Context, nodeID string, revision int64) (NodeConfigState, error) {
-	return scanConfigState(s.pool.QueryRow(ctx, `
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return NodeConfigState{}, err
+	}
+	defer tx.Rollback(ctx)
+	var exists bool
+	if err := tx.QueryRow(ctx, `SELECT true FROM nodes WHERE id=$1 FOR UPDATE`, nodeID).Scan(&exists); err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return NodeConfigState{}, ErrNotFound
+		}
+		return NodeConfigState{}, err
+	}
+	state, err := scanConfigState(tx.QueryRow(ctx, `
 		INSERT INTO node_config_state(node_id,desired_revision,state,updated_at)
 		SELECT $1,$2,CASE WHEN s.actual_revision=$2 THEN 'in_sync' ELSE 'pending' END,now()
 		FROM config_revisions r LEFT JOIN node_config_state s ON s.node_id=r.node_id
@@ -2035,6 +2068,10 @@ func (s *PGStore) AssignDesiredRevision(ctx context.Context, nodeID string, revi
 		state=CASE WHEN node_config_state.actual_revision=EXCLUDED.desired_revision THEN 'in_sync' ELSE 'pending' END,
 		last_error='',updated_at=now()
 		RETURNING node_id::text,desired_revision,actual_revision,state,last_error,last_report_at,updated_at`, nodeID, revision))
+	if err != nil {
+		return NodeConfigState{}, err
+	}
+	return state, tx.Commit(ctx)
 }
 
 func (s *PGStore) GetConfigState(ctx context.Context, nodeID string) (NodeConfigState, error) {

From 6d24ecd4e055f139df65b6e63dcf1511a690b31f Mon Sep 17 00:00:00 2001
From: shokov <shokov@local>
Date: Tue, 29 Sep 2026 07:28:54 +0300
Subject: [PATCH 2/4] HAProxy editor: Monaco page, strict linter, manual
 revision firewall plan, agent haproxy -c detail

---
 docs/api-contract.md                          |  80 +-
 frontend/package-lock.json                    |  37 +
 frontend/package.json                         |   2 +
 frontend/src/app/App.tsx                      |   2 +
 .../src/features/haproxy-editor/demoConfig.ts |  56 ++
 .../features/haproxy-editor/haproxyDocs.ts    | 395 ++++++++
 .../haproxy-editor/haproxyKeywords.json       | 529 +++++++++++
 .../haproxy-editor/haproxyLintRules.ts        | 268 ++++++
 .../features/haproxy-editor/haproxyModel.ts   | 401 +++++++++
 .../features/haproxy-editor/monacoSetup.ts    | 258 ++++++
 .../node-detail/HAProxyConfiguration.tsx      | 126 ---
 .../src/features/node-detail/nodeSettings.ts  |  68 +-
 frontend/src/lib/api.ts                       |   4 +-
 frontend/src/lib/contracts.ts                 |  26 +
 frontend/src/lib/navigation.ts                |   1 +
 .../src/pages/HAProxyApplyErrorDetail.tsx     |  29 +
 frontend/src/pages/HAProxyConfigPage.tsx      | 488 ++++++++++
 frontend/src/pages/NodeDetailPage.tsx         |  46 +-
 frontend/src/pages/haproxy-config.css         |  27 +
 frontend/src/styles/global.css                |   5 +
 frontend/tests/haproxyEditor.test.ts          | 326 +++++++
 frontend/tests/nodeSettings.test.ts           |  13 +
 frontend/tsconfig.app.json                    |   1 +
 internal/agent/manager.go                     |  15 +-
 internal/agent/reconcile.go                   |   5 +
 internal/agent/validation_detail.go           |  71 ++
 internal/agent/validation_detail_test.go      |  79 ++
 internal/panel/config_error_detail.go         |  24 +
 internal/panel/firewall.go                    |  65 +-
 internal/panel/firewall_integration_test.go   |  36 +
 internal/panel/haproxy_keywords.json          | 529 +++++++++++
 internal/panel/haproxy_lint.go                | 852 ++++++++++++++++++
 internal/panel/haproxy_lint_checks.go         | 316 +++++++
 internal/panel/haproxy_lint_http_test.go      | 151 ++++
 internal/panel/haproxy_lint_keywords.go       | 186 ++++
 internal/panel/haproxy_lint_test.go           | 357 ++++++++
 internal/panel/http.go                        | 117 ++-
 internal/panel/http_test.go                   |  35 +
 internal/panel/models.go                      |   1 +
 internal/panel/store.go                       |  41 +-
 .../000055_config_state_error_detail.down.sql |   2 +
 .../000055_config_state_error_detail.up.sql   |   5 +
 42 files changed, 5887 insertions(+), 188 deletions(-)
 create mode 100644 frontend/src/features/haproxy-editor/demoConfig.ts
 create mode 100644 frontend/src/features/haproxy-editor/haproxyDocs.ts
 create mode 100644 frontend/src/features/haproxy-editor/haproxyKeywords.json
 create mode 100644 frontend/src/features/haproxy-editor/haproxyLintRules.ts
 create mode 100644 frontend/src/features/haproxy-editor/haproxyModel.ts
 create mode 100644 frontend/src/features/haproxy-editor/monacoSetup.ts
 delete mode 100644 frontend/src/features/node-detail/HAProxyConfiguration.tsx
 create mode 100644 frontend/src/pages/HAProxyApplyErrorDetail.tsx
 create mode 100644 frontend/src/pages/HAProxyConfigPage.tsx
 create mode 100644 frontend/src/pages/haproxy-config.css
 create mode 100644 frontend/tests/haproxyEditor.test.ts
 create mode 100644 internal/agent/validation_detail.go
 create mode 100644 internal/agent/validation_detail_test.go
 create mode 100644 internal/panel/config_error_detail.go
 create mode 100644 internal/panel/haproxy_keywords.json
 create mode 100644 internal/panel/haproxy_lint.go
 create mode 100644 internal/panel/haproxy_lint_checks.go
 create mode 100644 internal/panel/haproxy_lint_http_test.go
 create mode 100644 internal/panel/haproxy_lint_keywords.go
 create mode 100644 internal/panel/haproxy_lint_test.go
 create mode 100644 migrations/000055_config_state_error_detail.down.sql
 create mode 100644 migrations/000055_config_state_error_detail.up.sql

diff --git a/docs/api-contract.md b/docs/api-contract.md
index 2956532..8c010e2 100644
--- a/docs/api-contract.md
+++ b/docs/api-contract.md
@@ -39,7 +39,8 @@ once and atomically bound to the verified leaf before subsequent use.
 | `POST` | `/api/v1/nodes/{node_id}/render-config` | Deterministically preview a complete HAProxy config from enabled routes. |
 | `GET` | `/api/v1/dns/resolve?host={hostname}` | Resolve a DNS hostname from the Panel host so the route editor can offer a `preferred_ip`; see "DNS resolve helper". |
 | `POST` | `/api/v1/nodes/{node_id}/enrollment-tokens` | Issue a bearer token; plaintext is returned once, hash is stored. |
-| `GET, POST` | `/api/v1/nodes/{node_id}/config-revisions` | List/create immutable, monotonically numbered HAProxy configurations. |
+| `GET, POST` | `/api/v1/nodes/{node_id}/config-revisions` | List/create immutable, monotonically numbered HAProxy configurations (`advanced_editor` revisions are linted; see "Advanced editor"). |
+| `POST` | `/api/v1/nodes/{node_id}/config-lint` | Static, read-only lint of an advanced-editor draft. |
 | `POST` | `/api/v1/nodes/{node_id}/config-revisions/from-routes` | Render enabled routes and create an immutable revision without assigning it. |
 | `GET` | `/api/v1/nodes/{node_id}/config-revisions/{revision}` | Read one immutable configuration revision. |
 | `GET` | `/api/v1/nodes/{node_id}/config-state` | Read desired/actual revision and convergence state. |
@@ -751,6 +752,76 @@ The created immutable revision metadata includes `source`, `renderer`, counts,
 `route_fingerprints: {route_uuid: desired_spec_sha256}`. This endpoint never changes
 `desired_revision`; use `PUT .../desired-revision` as a separate explicit step.
 
+### Advanced editor: lint and manual revisions
+
+```http
+POST /api/v1/nodes/{node_id}/config-lint
+Content-Type: application/json
+
+{"config":"global\n    daemon\n..."}
+```
+
+Admin-authenticated, read-only static check (nothing stored, not audited). The
+Panel has no `haproxy` binary: this is a structural best-effort check, the
+Agent's `haproxy -c` before apply stays the final gate. `config` is limited to
+524288 bytes (`400 validation_error`); unknown node → `404 not_found`.
+Response `200`:
+
+```json
+{
+  "valid": false,
+  "issues": [
+    {"line": 12, "column": 5, "end_column": 16, "severity": "error",
+     "code": "undefined_backend", "message": "Backend «x» не определён"}
+  ],
+  "listener_tcp_ports": [443, 8443],
+  "sections": [{"type": "frontend", "name": "fe", "line": 10}]
+}
+```
+
+`valid` is `true` when there are no `error` issues. `issues` is sorted by
+line/column (1-based; `end_column` exclusive), at most 500 plus a final
+`too_many_issues` warning; messages are short Russian text. `listener_tcp_ports`
+are sorted unique TCP ports from `bind` lines of `frontend`/`listen` sections
+(ranges expanded; Unix/abns/UDP/QUIC binds ignored). `sections` lists every
+section header in order (`name` is `""` for `global`/`defaults`).
+
+Error codes: `outside_section`, `unknown_section`, `missing_name`,
+`invalid_name`, `duplicate_proxy`, `duplicate_section`, `undefined_backend`
+(skipped for dynamic `%[...]`/`{...}` names), `server_missing_name`,
+`server_missing_address`, `duplicate_server`, `invalid_address`,
+`invalid_port`, `bind_missing_address`, `bind_not_allowed`,
+`server_not_allowed`, `use_backend_not_allowed`, `missing_backend`,
+`invalid_timeout` (value must match `^[0-9]+(us|ms|s|m|h|d)?$`),
+`timeout_missing_kind`, `timeout_missing_value`, `cond_unbalanced`,
+`cond_missing_expression`, `unterminated_quote`, `too_many_words`,
+`too_many_ports`, `invalid_server_template_count`, `server_template_incomplete`,
+`missing_address`, `nul_byte`, `invalid_utf8`, `config_empty`,
+`config_too_large`. Warning codes: `unknown_directive`, `unknown_timeout`,
+`server_port_missing`, `default_backend_ignored`, `runtime_name_missing`
+(a `nf_be_*` backend or `nf_srv_*` server that the generated configuration of
+the node's current routes defines is missing — traffic statistics and quotas
+depend on these names), `too_many_issues`. Any config produced by the renderer
+lints with zero issues.
+
+`POST /api/v1/nodes/{node_id}/config-revisions` with
+`metadata.source:"advanced_editor"` runs the same lint server-side:
+
+- with lint errors and without `"force":true` →
+  `422 {"error":{"code":"config_lint_failed","message":"..."},"issues":[...]}`
+  (issues as above); nothing is stored;
+- otherwise the revision is stored (`201`) with `metadata.renderer:"manual"`,
+  `metadata.lint:{"errors":n,"warnings":n}` and
+  `metadata.listener_tcp_ports` (the linted bind ports; omitted only when bind
+  lines expand to more than 1024 ports);
+- a first line `# Generated by NodeFlow. Do not edit.` is replaced with
+  `# Edited manually in NodeFlow advanced editor.` before storing.
+
+`force` is accepted only for `advanced_editor` revisions (otherwise
+`400 validation_error`); other revisions keep the previous behavior (no lint).
+A forced revision with lint errors may still be assigned via
+`PUT .../desired-revision`.
+
 ## Current MVP: Agent API (default `127.0.0.1:4200`)
 
 All endpoints except health require `Authorization: Bearer $NODE_AGENT_TOKEN`.
@@ -825,6 +896,13 @@ new node starts in Panel mode `apply` (existing nodes are unchanged). After a
 route revision becomes actual, its HAProxy TCP listener ports are therefore
 opened automatically with exact `nodeflow`-tagged UFW rules; disabling
 or deleting the last route on a port removes only that tagged stale rule.
+Advanced-editor revisions (`metadata.source:"advanced_editor"`) with
+`metadata.listener_tcp_ports` are complete listener plans too (ports come from
+the Panel linter, see "Advanced editor: lint and manual revisions"). A legacy
+manual revision without `listener_tcp_ports` never fails the heartbeat: while
+it is desired, `firewall_assignment.mode` degrades to `observe` (no
+transition, current rules kept, nothing pruned) and the config is still
+delivered.
 
 The Agent treats Panel's integer revision as decimal string `"42"` in its local revision marker. The marker is published only after a successful HAProxy reload, and idempotency requires both the marker and managed-config SHA-256 to match. Configurations are limited to 524288 bytes; the ten newest known-good backups are retained. Assignment checksum mismatch, validation and activation failures produce bounded reports with stable error codes only; raw HAProxy/systemd output is never reported.
 
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index a5d35da..2aa3e03 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -10,10 +10,12 @@
       "dependencies": {
         "@mantine/core": "^8.3.10",
         "@mantine/hooks": "^8.3.10",
+        "@monaco-editor/react": "^4.7.0",
         "@tabler/icons-react": "^3.36.1",
         "@tanstack/react-query": "^5.90.20",
         "echarts": "^6.0.0",
         "echarts-for-react": "^3.0.6",
+        "monaco-editor": "^0.52.2",
         "react": "^19.2.4",
         "react-dom": "^19.2.4",
         "react-router-dom": "^7.13.0"
@@ -890,6 +892,29 @@
         "react": "^18.x || ^19.x"
       }
     },
+    "node_modules/@monaco-editor/loader": {
+      "version": "1.7.0",
+      "resolved": "https://registry.npmjs.org/@monaco-editor/loader/-/loader-1.7.0.tgz",
+      "integrity": "sha512-gIwR1HrJrrx+vfyOhYmCZ0/JcWqG5kbfG7+d3f/C1LXk2EvzAbHSg3MQ5lO2sMlo9izoAZ04shohfKLVT6crVA==",
+      "license": "MIT",
+      "dependencies": {
+        "state-local": "^1.0.6"
+      }
+    },
+    "node_modules/@monaco-editor/react": {
+      "version": "4.7.0",
+      "resolved": "https://registry.npmjs.org/@monaco-editor/react/-/react-4.7.0.tgz",
+      "integrity": "sha512-cyzXQCtO47ydzxpQtCGSQGOC8Gk3ZUeBXFAxD+CWXYFo5OqZyZUonFl0DwUlTyAfRHntBfw2p3w4s9R6oe1eCA==",
+      "license": "MIT",
+      "dependencies": {
+        "@monaco-editor/loader": "^1.5.0"
+      },
+      "peerDependencies": {
+        "monaco-editor": ">= 0.25.0 < 1",
+        "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0",
+        "react-dom": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
+      }
+    },
     "node_modules/@rolldown/pluginutils": {
       "version": "1.0.0-rc.3",
       "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-rc.3.tgz",
@@ -1704,6 +1729,12 @@
         "yallist": "^3.0.2"
       }
     },
+    "node_modules/monaco-editor": {
+      "version": "0.52.2",
+      "resolved": "https://registry.npmjs.org/monaco-editor/-/monaco-editor-0.52.2.tgz",
+      "integrity": "sha512-GEQWEZmfkOGLdd3XK8ryrfWz3AIP8YymVXiPHEdewrUq7mh0qrKrfHLNCXcbB6sTnMLnOZ3ztSiKcciFUkIJwQ==",
+      "license": "MIT"
+    },
     "node_modules/ms": {
       "version": "2.1.3",
       "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
@@ -2037,6 +2068,12 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/state-local": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/state-local/-/state-local-1.0.7.tgz",
+      "integrity": "sha512-HTEHMNieakEnoe33shBYcZ7NX83ACUjCu8c40iOGEZsngj9zRnkqS9j1pqQPXwobB0ZcVTk27REb7COQ0UR59w==",
+      "license": "MIT"
+    },
     "node_modules/tabbable": {
       "version": "6.5.0",
       "resolved": "https://registry.npmjs.org/tabbable/-/tabbable-6.5.0.tgz",
diff --git a/frontend/package.json b/frontend/package.json
index 782d69a..a5c77bc 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -13,10 +13,12 @@
   "dependencies": {
     "@mantine/core": "^8.3.10",
     "@mantine/hooks": "^8.3.10",
+    "@monaco-editor/react": "^4.7.0",
     "@tabler/icons-react": "^3.36.1",
     "@tanstack/react-query": "^5.90.20",
     "echarts": "^6.0.0",
     "echarts-for-react": "^3.0.6",
+    "monaco-editor": "^0.52.2",
     "react": "^19.2.4",
     "react-dom": "^19.2.4",
     "react-router-dom": "^7.13.0"
diff --git a/frontend/src/app/App.tsx b/frontend/src/app/App.tsx
index 845ccd6..adcf310 100644
--- a/frontend/src/app/App.tsx
+++ b/frontend/src/app/App.tsx
@@ -7,6 +7,7 @@ const NodesOverviewPage = lazy(() => import('../pages/NodesOverviewPage').then((
 const NodeDetailPage = lazy(() => import('../pages/NodeDetailPage').then((module) => ({ default: module.NodeDetailPage })));
 const RouteEditorPage = lazy(() => import('../pages/RouteEditorPage').then((module) => ({ default: module.RouteEditorPage })));
 const SettingsPage = lazy(() => import('../pages/SettingsPage').then((module) => ({ default: module.SettingsPage })));
+const HAProxyConfigPage = lazy(() => import('../pages/HAProxyConfigPage').then((module) => ({ default: module.HAProxyConfigPage })));
 const TrafficPage = lazy(() => import('../pages/TrafficPage').then((module) => ({ default: module.TrafficPage })));
 
 export function App() {
@@ -18,6 +19,7 @@ export function App() {
         <Route index element={<Navigate to={nodesURL} replace />} />
         <Route path="/nodes" element={<Suspense fallback={<div className="nf-route-loader" aria-label="Загрузка интерфейса" />}><NodesOverviewPage /></Suspense>} />
         <Route path="/nodes/:nodeId" element={<Suspense fallback={<div className="nf-route-loader" aria-label="Загрузка ноды" />}><NodeDetailPage /></Suspense>} />
+        <Route path="/nodes/:nodeId/haproxy" element={<Suspense fallback={<div className="nf-route-loader" aria-label="Загрузка редактора конфигурации" />}><HAProxyConfigPage /></Suspense>} />
         <Route path="/nodes/:nodeId/routes/new" element={<Suspense fallback={<div className="nf-route-loader" aria-label="Загрузка редактора маршрута" />}><RouteEditorPage /></Suspense>} />
         <Route path="/nodes/:nodeId/routes/:routeId/edit" element={<Suspense fallback={<div className="nf-route-loader" aria-label="Загрузка редактора маршрута" />}><RouteEditorPage /></Suspense>} />
         <Route path="/nodes/:nodeId/routes/:routeId" element={<Suspense fallback={<div className="nf-route-loader" aria-label="Загрузка редактора маршрута" />}><RouteEditorPage /></Suspense>} />
diff --git a/frontend/src/features/haproxy-editor/demoConfig.ts b/frontend/src/features/haproxy-editor/demoConfig.ts
new file mode 100644
index 0000000..2e0038e
--- /dev/null
+++ b/frontend/src/features/haproxy-editor/demoConfig.ts
@@ -0,0 +1,56 @@
+// Sample configuration shown by the HAProxy editor in demo mode.
+export const DEMO_HAPROXY_CONFIG = `# Generated by NodeFlow. Do not edit.
+# renderer: haproxy-tcp-sni-v21
+
+global
+    maxconn 20000
+    log /dev/log local0
+    log /dev/log local1 notice
+    stats socket /run/haproxy/admin.sock mode 660 level admin expose-fd listeners
+    stats timeout 30s
+    user haproxy
+    group haproxy
+    tune.pipesize 262144
+    localpeer nf_local
+
+defaults
+    log global
+    mode tcp
+    option tcplog
+    option dontlognull
+    option clitcpka
+    option srvtcpka
+    .if enabled(SPLICE)
+        option splice-request
+        option splice-response
+    .endif
+    timeout connect 5s
+    timeout client 15m
+    timeout server 15m
+
+peers nf_peers
+    bind unix@/run/haproxy/nf_peers.sock
+    server nf_local
+
+frontend nf_fe_any_443_1a2b3c4d
+    bind :443
+    mode tcp
+    option tcplog
+    tcp-request inspect-delay 5s
+    tcp-request content accept if { req.ssl_hello_type 1 }
+    acl nf_sni_7f3e req.ssl_sni -i vpn.example.com
+    use_backend nf_be_7f3e if nf_sni_7f3e
+    default_backend nf_be_91aa
+
+backend nf_be_7f3e
+    mode tcp
+    # nodeflow route_id=7f3e0000-0000-0000-0000-000000000001
+    balance leastconn
+    option redispatch
+    server nf_srv_7f3e 192.0.2.10:443 check inter 5s fall 3 rise 2 send-proxy-v2 check-send-proxy
+
+backend nf_be_91aa
+    mode tcp
+    # nodeflow route_id=91aa0000-0000-0000-0000-000000000002
+    server nf_srv_91aa 192.0.2.20:8443 check inter 5s fall 3 rise 2
+`;
diff --git a/frontend/src/features/haproxy-editor/haproxyDocs.ts b/frontend/src/features/haproxy-editor/haproxyDocs.ts
new file mode 100644
index 0000000..e5515a5
--- /dev/null
+++ b/frontend/src/features/haproxy-editor/haproxyDocs.ts
@@ -0,0 +1,395 @@
+// Russian hover documentation for haproxy.cfg. Pure data: no runtime imports,
+// so node --test can load it with built-in type stripping.
+//
+// Keys are lowercase. Compound directives ("timeout connect", "option tcplog")
+// are keyed by their full phrase. Argument docs are grouped by the directive
+// that owns them (server options, bind options, balance algorithms…).
+
+export type SectionKind = 'global' | 'defaults' | 'frontend' | 'backend' | 'listen' | 'resolvers' | 'peers' | 'userlist' | 'cache' | 'program' | 'ring' | 'http-errors' | 'crt-store' | 'mailers' | 'log-forward';
+
+export interface HAProxyDoc {
+  /** 1–2 sentences, Russian. */
+  summary: string;
+  /** One syntax line, rendered as a haproxy code block. */
+  syntax?: string;
+  /** Markdown warning line, «⚠ Если **…**, то …». */
+  warning?: string;
+  /** Sections where a directive is valid (used for completion). */
+  sections?: SectionKind[];
+}
+
+const PROXY: SectionKind[] = ['defaults', 'frontend', 'backend', 'listen'];
+const FE: SectionKind[] = ['defaults', 'frontend', 'listen'];
+const BE: SectionKind[] = ['defaults', 'backend', 'listen'];
+const BE_ONLY: SectionKind[] = ['backend', 'listen'];
+const GLOBAL: SectionKind[] = ['global'];
+const RESOLVERS: SectionKind[] = ['resolvers'];
+
+export const SECTION_KEYWORDS: readonly string[] = ['global', 'defaults', 'frontend', 'backend', 'listen', 'resolvers', 'peers', 'userlist', 'cache', 'program', 'ring', 'http-errors', 'crt-store', 'mailers', 'log-forward'];
+
+export const GENERATED_NAME_DOC: HAProxyDoc = {
+  summary: 'Имя сгенерировано NodeFlow; на него завязаны метрики и квоты. **Не переименовывать.**',
+};
+
+export const sectionDocs: Record<string, HAProxyDoc> = {
+  global: { summary: 'Параметры процесса HAProxy: лимиты, потоки, логи, stats-сокет, пользователь. Секция одна на весь конфиг.', syntax: 'global' },
+  defaults: { summary: 'Значения по умолчанию для всех следующих frontend/backend/listen: режим, таймауты, опции логирования.', syntax: 'defaults [<имя>]', warning: '⚠ Если добавить **второй defaults**, то он применяется только к секциям ниже него.' },
+  frontend: { summary: 'Точка входа: слушает порты (bind), принимает соединения и выбирает backend по правилам.', syntax: 'frontend <имя>' },
+  backend: { summary: 'Группа серверов назначения, алгоритм балансировки и проверки здоровья.', syntax: 'backend <имя>' },
+  listen: { summary: 'Frontend и backend в одной секции: bind и server рядом. Удобно для простых TCP-прокси.', syntax: 'listen <имя>' },
+  resolvers: { summary: 'Набор DNS-серверов, через которые HAProxy перерезолвит имена серверов во время работы.', syntax: 'resolvers <имя>' },
+  peers: { summary: 'Синхронизация stick-table между процессами HAProxy (в NodeFlow — между старым и новым процессом при reload).', syntax: 'peers <имя>' },
+  userlist: { summary: 'Список пользователей и групп для HTTP basic-auth.', syntax: 'userlist <имя>' },
+  cache: { summary: 'Кеш HTTP-ответов в памяти. Для TCP-маршрутов не используется.', syntax: 'cache <имя>' },
+  program: { summary: 'Внешняя программа, которую запускает и перезапускает master-процесс HAProxy.', syntax: 'program <имя>' },
+  ring: { summary: 'Кольцевой буфер в памяти для логов и трассировок.', syntax: 'ring <имя>' },
+  'http-errors': { summary: 'Набор пользовательских страниц ошибок (errorfile) для HTTP-режима.', syntax: 'http-errors <имя>' },
+  'crt-store': { summary: 'Хранилище сертификатов и ключей, на которые ссылаются bind-строки.', syntax: 'crt-store [<имя>]' },
+  mailers: { summary: 'SMTP-серверы для почтовых уведомлений об изменении состояния серверов.', syntax: 'mailers <имя>' },
+  'log-forward': { summary: 'Приём и пересылка syslog-сообщений через HAProxy.', syntax: 'log-forward <имя>' },
+};
+
+export const directiveDocs: Record<string, HAProxyDoc> = {
+  // ---- conditional blocks
+  '.if': { summary: 'Условный блок конфигурации: строки до .endif читаются, только если условие истинно (проверяется при загрузке конфига).', syntax: '.if <условие> … [.elif …] [.else] .endif', warning: '⚠ Если не закрыть блок **.endif**, то HAProxy не загрузит конфиг.' },
+  '.elif': { summary: 'Альтернативная ветка условного блока .if.', syntax: '.elif <условие>' },
+  '.else': { summary: 'Ветка «иначе» условного блока .if.', syntax: '.else' },
+  '.endif': { summary: 'Закрывает условный блок .if.', syntax: '.endif' },
+  '.notice': { summary: 'Выводит сообщение уровня notice при загрузке конфига.', syntax: '.notice "<текст>"' },
+  '.warning': { summary: 'Выводит предупреждение при загрузке конфига.', syntax: '.warning "<текст>"' },
+  '.alert': { summary: 'Выводит ошибку и прерывает загрузку конфига.', syntax: '.alert "<текст>"' },
+  '.diag': { summary: 'Выводит диагностическое сообщение (только с ключом -dD).', syntax: '.diag "<текст>"' },
+
+  // ---- global
+  maxconn: { summary: 'Максимум одновременных соединений: в global — на весь процесс, во frontend — на этот вход. Лишние соединения ждут в очереди ядра.', syntax: 'maxconn <число>', warning: '⚠ Если поставить **слишком мало**, то новые клиенты будут ждать или отваливаться по таймауту.', sections: ['global', 'defaults', 'frontend', 'listen'] },
+  nbthread: { summary: 'Число рабочих потоков HAProxy. По умолчанию — по числу доступных CPU.', syntax: 'nbthread <число>', warning: '⚠ Если указать **больше ядер**, чем есть, то потоки конкурируют и задержка растёт.', sections: GLOBAL },
+  log: { summary: 'Куда отправлять логи: syslog-адрес или сокет, facility и уровень. «log global» в прокси берёт настройки из global.', syntax: 'log <адрес> [len <n>] <facility> [<уровень>] | log global', warning: '⚠ Если писать лог **каждого соединения** на маленький диск, то syslog быстро заполнит место.', sections: ['global', 'defaults', 'frontend', 'backend', 'listen'] },
+  'log global': { summary: 'Использовать те же log-цели, что заданы в секции global.', syntax: 'log global', sections: PROXY },
+  'log-format': { summary: 'Шаблон строки лога соединения с переменными вида %ci, %ft, %B.', syntax: 'log-format "<формат>"', sections: PROXY },
+  'stats socket': { summary: 'UNIX-сокет Runtime API: статистика, включение/выключение серверов, веса, таблицы. NodeFlow Agent читает через него метрики и управляет квотами.', syntax: 'stats socket <путь> [mode <права>] [level <уровень>] [expose-fd listeners]', warning: '⚠ Если **удалить или переименовать** /run/haproxy/admin.sock, то метрики, квоты и мягкий reload в NodeFlow перестанут работать.', sections: GLOBAL },
+  'stats timeout': { summary: 'Сколько ждать команду на stats-сокете, прежде чем закрыть соединение.', syntax: 'stats timeout <время>', sections: GLOBAL },
+  user: { summary: 'Пользователь, от имени которого работает HAProxy после старта.', syntax: 'user <имя>', sections: GLOBAL },
+  group: { summary: 'Группа, от имени которой работает HAProxy после старта.', syntax: 'group <имя>', sections: GLOBAL },
+  pidfile: { summary: 'Файл, в который записывается PID процесса.', syntax: 'pidfile <путь>', sections: GLOBAL },
+  daemon: { summary: 'Запуск в фоне. Под systemd обычно не нужен: сервис использует master-worker режим.', syntax: 'daemon', sections: GLOBAL },
+  'master-worker': { summary: 'Режим master-worker: мастер-процесс перезапускает воркеры при reload без потери сокетов.', syntax: 'master-worker', sections: GLOBAL },
+  chroot: { summary: 'Переводит процесс в chroot-каталог после старта.', syntax: 'chroot <каталог>', warning: '⚠ Если включить **chroot**, то пути к файлам (acl -f, errorfile) должны быть доступны внутри каталога.', sections: GLOBAL },
+  'hard-stop-after': { summary: 'Сколько старый процесс может дожидаться завершения соединений после reload, прежде чем закрыть их принудительно.', syntax: 'hard-stop-after <время>', warning: '⚠ Если значение **не задано**, то старые процессы с долгими TCP-сессиями живут неограниченно и держат память.', sections: GLOBAL },
+  'ssl-default-bind-ciphers': { summary: 'Список шифров TLS ≤1.2 по умолчанию для bind с ssl.', syntax: 'ssl-default-bind-ciphers <список>', sections: GLOBAL },
+  'ssl-default-bind-ciphersuites': { summary: 'Список шифров TLS 1.3 по умолчанию для bind с ssl.', syntax: 'ssl-default-bind-ciphersuites <список>', sections: GLOBAL },
+  'ssl-default-bind-options': { summary: 'Опции TLS по умолчанию для bind: минимальная версия, отключение tickets и т.п.', syntax: 'ssl-default-bind-options ssl-min-ver TLSv1.2 …', sections: GLOBAL },
+  'ssl-default-server-ciphers': { summary: 'Список шифров по умолчанию для TLS-соединений к серверам.', syntax: 'ssl-default-server-ciphers <список>', sections: GLOBAL },
+  'ssl-default-server-options': { summary: 'Опции TLS по умолчанию для соединений к серверам.', syntax: 'ssl-default-server-options <опции>', sections: GLOBAL },
+  'tune.pipesize': { summary: 'Размер pipe-буфера ядра для splice. NodeFlow подбирает его по объёму памяти ноды.', syntax: 'tune.pipesize <байт>', warning: '⚠ Если задать **слишком большой** размер на ноде с малой памятью, то под нагрузкой не хватит RAM.', sections: GLOBAL },
+  'tune.bufsize': { summary: 'Размер буфера на соединение. Влияет на память и на максимальный размер заголовков.', syntax: 'tune.bufsize <байт>', warning: '⚠ Если **увеличить** bufsize, то память на maxconn соединений растёт пропорционально.', sections: GLOBAL },
+  'tune.maxrewrite': { summary: 'Резерв буфера под перезапись HTTP-заголовков.', syntax: 'tune.maxrewrite <байт>', sections: GLOBAL },
+  'tune.ssl.default-dh-param': { summary: 'Размер DH-параметров для TLS.', syntax: 'tune.ssl.default-dh-param <бит>', sections: GLOBAL },
+  localpeer: { summary: 'Имя этого процесса в секции peers. NodeFlow использует его для переноса stick-table между процессами при reload.', syntax: 'localpeer <имя>', sections: GLOBAL },
+  noreuseport: { summary: 'Отключает SO_REUSEPORT на слушающих сокетах.', syntax: 'noreuseport', sections: GLOBAL },
+  'cpu-map': { summary: 'Привязка потоков HAProxy к ядрам CPU.', syntax: 'cpu-map [auto:]<поток> <cpu>', sections: GLOBAL },
+  'ulimit-n': { summary: 'Лимит открытых файлов процесса. По умолчанию вычисляется из maxconn.', syntax: 'ulimit-n <число>', sections: GLOBAL },
+  'expose-experimental-directives': { summary: 'Разрешает экспериментальные директивы.', syntax: 'expose-experimental-directives', sections: GLOBAL },
+
+  // ---- defaults / proxies
+  mode: { summary: 'Режим прокси: tcp — прозрачная пересылка байтов (NodeFlow), http — разбор HTTP.', syntax: 'mode tcp|http', warning: '⚠ Если frontend и backend в **разных режимах**, то HAProxy откажется загружать конфиг.', sections: PROXY },
+  'timeout connect': { summary: 'Сколько ждать установления TCP-соединения с сервером.', syntax: 'timeout connect <время>', warning: '⚠ Если значение **слишком большое**, то клиент долго ждёт при недоступном сервере вместо перехода на другой.', sections: PROXY },
+  'timeout client': { summary: 'Максимальная пауза без данных со стороны клиента. После неё соединение закрывается.', syntax: 'timeout client <время>', warning: '⚠ Если поставить **слишком мало** для VPN/прокси-трафика, то простаивающие сессии будут рваться.', sections: FE },
+  'timeout server': { summary: 'Максимальная пауза без данных со стороны сервера.', syntax: 'timeout server <время>', warning: '⚠ Если значение **меньше timeout client**, то длинные сессии обрываются со стороны сервера.', sections: BE },
+  'timeout tunnel': { summary: 'Таймаут бездействия для установившегося туннеля (WebSocket, CONNECT, TCP). Заменяет client/server после установления.', syntax: 'timeout tunnel <время>', sections: BE },
+  'timeout check': { summary: 'Дополнительный таймаут на чтение ответа health-check после соединения.', syntax: 'timeout check <время>', sections: BE },
+  'timeout queue': { summary: 'Сколько соединение может ждать в очереди, когда у серверов исчерпан maxconn.', syntax: 'timeout queue <время>', sections: BE },
+  'timeout client-fin': { summary: 'Таймаут бездействия клиента после полузакрытия соединения (FIN).', syntax: 'timeout client-fin <время>', sections: FE },
+  'timeout server-fin': { summary: 'Таймаут бездействия сервера после полузакрытия соединения (FIN).', syntax: 'timeout server-fin <время>', sections: BE },
+  'timeout http-request': { summary: 'Время на получение полного HTTP-запроса (защита от slowloris).', syntax: 'timeout http-request <время>', sections: FE },
+  'timeout http-keep-alive': { summary: 'Сколько ждать следующий HTTP-запрос в keep-alive соединении.', syntax: 'timeout http-keep-alive <время>', sections: PROXY },
+  'timeout resolve': { summary: 'Интервал периодического перерезолва имён в секции resolvers.', syntax: 'timeout resolve <время>', sections: RESOLVERS },
+  'timeout retry': { summary: 'Сколько ждать ответа DNS-сервера перед повторным запросом.', syntax: 'timeout retry <время>', sections: RESOLVERS },
+  'option tcplog': { summary: 'Расширенный формат лога для TCP: адреса, время, байты, состояние завершения.', syntax: 'option tcplog', sections: PROXY },
+  'option httplog': { summary: 'Расширенный формат лога для HTTP.', syntax: 'option httplog', sections: PROXY },
+  'option dontlognull': { summary: 'Не логировать соединения без данных (сканеры портов, проверки балансировщиков).', syntax: 'option dontlognull', sections: FE },
+  'option splice-request': { summary: 'Пересылка данных клиент→сервер через splice ядра без копирования в user space. Экономит CPU.', syntax: 'option splice-request', sections: PROXY },
+  'option splice-response': { summary: 'Пересылка данных сервер→клиент через splice ядра без копирования в user space.', syntax: 'option splice-response', sections: PROXY },
+  'option splice-auto': { summary: 'HAProxy сам решает, когда использовать splice.', syntax: 'option splice-auto', sections: PROXY },
+  'option redispatch': { summary: 'При неудачном подключении разрешает повтор на другой сервер, даже если клиент «прилип» к исходному.', syntax: 'option redispatch [<интервал>]', sections: BE },
+  'option tcp-check': { summary: 'Health-check через TCP-сценарий (tcp-check connect/send/expect). Без правил — просто проверка соединения.', syntax: 'option tcp-check', sections: BE },
+  'option httpchk': { summary: 'Health-check HTTP-запросом; сервер считается живым при ответе 2xx/3xx.', syntax: 'option httpchk [<метод> <uri>]', sections: BE },
+  'option allbackups': { summary: 'Когда все основные серверы недоступны — балансировать между всеми backup-серверами, а не только первым.', syntax: 'option allbackups', sections: BE },
+  'option clitcpka': { summary: 'Включить TCP keepalive к клиенту: ядро будет замечать «мёртвые» клиентские соединения.', syntax: 'option clitcpka', sections: FE },
+  'option srvtcpka': { summary: 'Включить TCP keepalive к серверу.', syntax: 'option srvtcpka', sections: BE },
+  'option tcpka': { summary: 'TCP keepalive в обе стороны.', syntax: 'option tcpka', sections: PROXY },
+  'option forwardfor': { summary: 'Добавлять заголовок X-Forwarded-For (только HTTP-режим).', syntax: 'option forwardfor', sections: PROXY },
+  'option abortonclose': { summary: 'Снимать запрос из очереди, если клиент уже закрыл соединение.', syntax: 'option abortonclose', sections: BE },
+  'option log-health-checks': { summary: 'Логировать смену результатов health-check.', syntax: 'option log-health-checks', sections: BE },
+  'no option': { summary: 'Отключает опцию, унаследованную из defaults.', syntax: 'no option <опция>', sections: PROXY },
+  'clitcpka-idle': { summary: 'Через сколько простоя ядро начинает слать keepalive-пробы клиенту.', syntax: 'clitcpka-idle <время>', sections: FE },
+  'clitcpka-intvl': { summary: 'Интервал между keepalive-пробами клиенту.', syntax: 'clitcpka-intvl <время>', sections: FE },
+  'clitcpka-cnt': { summary: 'Сколько неотвеченных keepalive-проб до закрытия клиентского соединения.', syntax: 'clitcpka-cnt <число>', sections: FE },
+  'srvtcpka-idle': { summary: 'Через сколько простоя ядро начинает слать keepalive-пробы серверу.', syntax: 'srvtcpka-idle <время>', sections: BE },
+  'srvtcpka-intvl': { summary: 'Интервал между keepalive-пробами серверу.', syntax: 'srvtcpka-intvl <время>', sections: BE },
+  'srvtcpka-cnt': { summary: 'Сколько неотвеченных keepalive-проб до закрытия серверного соединения.', syntax: 'srvtcpka-cnt <число>', sections: BE },
+  retries: { summary: 'Сколько раз повторять неудачное подключение к серверу.', syntax: 'retries <число>', sections: BE },
+  balance: { summary: 'Алгоритм выбора сервера в backend.', syntax: 'balance roundrobin|static-rr|leastconn|first|source|random[(<n>)]|hash <выражение>', warning: '⚠ Если сменить алгоритм **с source/hash**, то клиенты потеряют привязку к серверам.', sections: BE },
+  'hash-type': { summary: 'Как хеш (balance source/hash) отображается на серверы: map-based — быстро, consistent — минимальные перестановки при изменениях.', syntax: 'hash-type map-based|consistent [<функция>] [<модификатор>]', sections: BE },
+  'hash-balance-factor': { summary: 'Для consistent-хеша: сервер не получит больше указанного процента от средней нагрузки.', syntax: 'hash-balance-factor <процент>', sections: BE },
+  bind: { summary: 'Адрес и порт, на которых слушает frontend. Можно указать несколько bind.', syntax: 'bind [<адрес>]:<порт>[,…] [опции]', warning: '⚠ Если порт **уже занят** другим процессом, то HAProxy не запустится после reload.', sections: ['frontend', 'listen', 'peers', 'log-forward'] },
+  'tcp-request inspect-delay': { summary: 'Сколько ждать данные клиента для проверки content-правил (например, SNI из TLS ClientHello).', syntax: 'tcp-request inspect-delay <время>', warning: '⚠ Если убрать **inspect-delay**, то SNI-правила не успеют увидеть ClientHello и трафик уйдёт в default_backend.', sections: PROXY },
+  'tcp-request content': { summary: 'Правило над содержимым соединения после inspect-delay: accept, reject, установка лимитов и т.п.', syntax: 'tcp-request content <действие> [if|unless <условие>]', sections: PROXY },
+  'tcp-request connection': { summary: 'Правило сразу после accept(), до чтения данных: принять, отклонить, ожидать PROXY-заголовок.', syntax: 'tcp-request connection <действие> [if|unless <условие>]', sections: FE },
+  'tcp-request session': { summary: 'Правило после handshake (PROXY/TLS), до чтения данных.', syntax: 'tcp-request session <действие> [if|unless <условие>]', sections: FE },
+  'tcp-response content': { summary: 'Правило над данными от сервера.', syntax: 'tcp-response content <действие> [if|unless <условие>]', sections: BE },
+  'tcp-check connect': { summary: 'Шаг TCP health-check: открыть соединение.', syntax: 'tcp-check connect [port <n>] [send-proxy]', sections: BE },
+  'tcp-check send': { summary: 'Шаг TCP health-check: отправить строку.', syntax: 'tcp-check send <строка>', sections: BE },
+  'tcp-check expect': { summary: 'Шаг TCP health-check: ожидаемый ответ.', syntax: 'tcp-check expect string|rstring <шаблон>', sections: BE },
+  use_backend: { summary: 'Отправить соединение в указанный backend, если условие истинно. Правила проверяются по порядку.', syntax: 'use_backend <backend> [if|unless <условие>]', warning: '⚠ Если backend **не существует**, то HAProxy не загрузит конфиг.', sections: FE },
+  default_backend: { summary: 'Backend для соединений, не подошедших ни под одно use_backend.', syntax: 'default_backend <backend>', sections: FE },
+  acl: { summary: 'Именованное условие: выборка (src, req.ssl_sni…) плюс значения для сравнения. Используется в if/unless.', syntax: 'acl <имя> <выборка> [флаги] <значения>', sections: PROXY },
+  server: { summary: 'Сервер назначения в backend: имя, адрес:порт и опции проверок, веса, PROXY protocol.', syntax: 'server <имя> <адрес>[:<порт>] [опции]', warning: '⚠ Если **переименовать** сервер nf_srv_*, то NodeFlow потеряет его метрики и квоты.', sections: ['backend', 'listen', 'peers'] },
+  'server-template': { summary: 'Создаёт N серверов из одного DNS-имени: каждый слот получает один из адресов записи.', syntax: 'server-template <префикс> <кол-во> <fqdn>:<порт> [опции]', sections: BE_ONLY },
+  'default-server': { summary: 'Опции по умолчанию для всех server в секции.', syntax: 'default-server [опции]', sections: BE },
+  'stick-table': { summary: 'Таблица в памяти для привязки клиентов к серверам или счётчиков (скорость, соединения).', syntax: 'stick-table type <тип> size <n> [expire <время>] [peers <секция>] [store <данные>]', warning: '⚠ Если **size** мал для числа клиентов, то старые записи вытесняются и привязка теряется.', sections: PROXY },
+  'stick on': { summary: 'Запомнить в stick-table, на какой сервер ушёл клиент, и отправлять его туда же.', syntax: 'stick on <выражение> [table <таблица>]', sections: BE_ONLY },
+  'stick match': { summary: 'Искать клиента в stick-table без записи.', syntax: 'stick match <выражение> [table <таблица>]', sections: BE_ONLY },
+  'stick store-request': { summary: 'Записывать клиента в stick-table без поиска.', syntax: 'stick store-request <выражение>', sections: BE_ONLY },
+  'filter bwlim-in': { summary: 'Фильтр ограничения скорости входящего (upload) трафика. Лимит применяется через tcp-request content set-bandwidth-limit.', syntax: 'filter bwlim-in <имя> limit <скорость> key <выражение> [table <таблица>] [min-size <байт>]', sections: PROXY },
+  'filter bwlim-out': { summary: 'Фильтр ограничения скорости исходящего (download) трафика.', syntax: 'filter bwlim-out <имя> limit <скорость> key <выражение> [table <таблица>] [min-size <байт>]', sections: PROXY },
+  filter: { summary: 'Подключает фильтр потока данных (bwlim-in/out, compression, trace…).', syntax: 'filter <тип> [параметры]', sections: PROXY },
+  errorfile: { summary: 'Файл ответа для HTTP-кода ошибки.', syntax: 'errorfile <код> <файл>', sections: PROXY },
+  'http-request': { summary: 'Правило обработки HTTP-запроса (только mode http).', syntax: 'http-request <действие> [if|unless <условие>]', sections: PROXY },
+  'http-response': { summary: 'Правило обработки HTTP-ответа (только mode http).', syntax: 'http-response <действие> [if|unless <условие>]', sections: PROXY },
+  'http-check': { summary: 'Шаг HTTP health-check.', syntax: 'http-check <действие> …', sections: BE },
+  fullconn: { summary: 'Нагрузка на backend, при которой серверы используют полный maxconn (для динамического minconn).', syntax: 'fullconn <число>', sections: BE },
+  backlog: { summary: 'Длина очереди ядра для ещё не принятых соединений.', syntax: 'backlog <число>', sections: FE },
+  'rate-limit sessions': { summary: 'Ограничение новых сессий в секунду на frontend.', syntax: 'rate-limit sessions <число>', sections: FE },
+  description: { summary: 'Текстовое описание секции (видно в статистике).', syntax: 'description <текст>', sections: PROXY },
+  disabled: { summary: 'Секция загружается, но не работает.', syntax: 'disabled', sections: PROXY },
+  enabled: { summary: 'Явно включает секцию (по умолчанию).', syntax: 'enabled', sections: PROXY },
+  'monitor-uri': { summary: 'URI для внешних health-проверок самого HAProxy.', syntax: 'monitor-uri <uri>', sections: FE },
+  source: { summary: 'Исходный адрес для соединений к серверам.', syntax: 'source <адрес>[:<порт>]', sections: BE },
+
+  // ---- resolvers
+  nameserver: { summary: 'DNS-сервер для этой секции resolvers.', syntax: 'nameserver <имя> <адрес>:<порт>', sections: RESOLVERS },
+  resolve_retries: { summary: 'Сколько раз повторять DNS-запрос, прежде чем считать резолв неудачным.', syntax: 'resolve_retries <число>', sections: RESOLVERS },
+  hold: { summary: 'Сколько хранить последний результат DNS для заданного статуса ответа (valid, nx, timeout…).', syntax: 'hold <статус> <время>', warning: '⚠ Если **hold valid** слишком велик, то смена IP у бэкенда подхватится с задержкой.', sections: RESOLVERS },
+  'parse-resolv-conf': { summary: 'Взять nameserver-ы из /etc/resolv.conf.', syntax: 'parse-resolv-conf', sections: RESOLVERS },
+  'accepted_payload_size': { summary: 'Максимальный размер DNS-ответа по UDP (EDNS0).', syntax: 'accepted_payload_size <байт>', sections: RESOLVERS },
+  peer: { summary: 'Участник синхронизации stick-table.', syntax: 'peer <имя> <адрес>:<порт>', sections: ['peers'] },
+};
+
+/** Arguments/options, grouped by the directive that owns them. */
+const serverOptions: Record<string, HAProxyDoc> = {
+  check: { summary: 'Включает health-check сервера. Упавший сервер исключается из балансировки.', syntax: 'server … check [inter <время>] [fall <n>] [rise <n>]', warning: '⚠ Если **check** не указан, то HAProxy шлёт трафик на сервер, даже если он недоступен.' },
+  inter: { summary: 'Интервал между health-check.', syntax: 'inter <время>   # по умолчанию 2s' },
+  fastinter: { summary: 'Интервал проверок во время перехода состояния.', syntax: 'fastinter <время>' },
+  downinter: { summary: 'Интервал проверок, пока сервер лежит.', syntax: 'downinter <время>' },
+  fall: { summary: 'Сколько подряд неудачных проверок до статуса DOWN.', syntax: 'fall <число>   # по умолчанию 3' },
+  rise: { summary: 'Сколько подряд успешных проверок до статуса UP.', syntax: 'rise <число>   # по умолчанию 2' },
+  weight: { summary: 'Вес сервера при балансировке: доля трафика пропорциональна весу. 0 — сервер не получает новых соединений.', syntax: 'weight <0-256>', warning: '⚠ Если NodeFlow управляет весами (leastping), то ручные **weight** перезапишутся Agent-ом.' },
+  backup: { summary: 'Резервный сервер: получает трафик, только когда все основные недоступны.', syntax: 'server … backup' },
+  'send-proxy': { summary: 'Отправлять серверу PROXY protocol v1 (текстовый) с реальным адресом клиента.', syntax: 'server … send-proxy', warning: '⚠ Если сервер **не ждёт** PROXY-заголовок, то все соединения к нему будут ломаться.' },
+  'send-proxy-v2': { summary: 'Отправлять серверу PROXY protocol v2 (бинарный) с реальным адресом клиента.', syntax: 'server … send-proxy-v2', warning: '⚠ Если сервер **не ждёт** PROXY v2, то все соединения к нему будут ломаться.' },
+  'check-send-proxy': { summary: 'Слать PROXY-заголовок и в health-check, когда сервер требует его на каждом соединении.', syntax: 'server … check send-proxy-v2 check-send-proxy', warning: '⚠ Если сервер ждёт PROXY, а **check-send-proxy** не указан, то проверки падают и сервер помечается DOWN.' },
+  resolvers: { summary: 'Секция resolvers для перерезолва DNS-имени сервера во время работы.', syntax: 'resolvers <секция>' },
+  'init-addr': { summary: 'Как получить адрес при старте: last — из state-файла, libc — системным резолвером, none — стартовать без адреса.', syntax: 'init-addr last,libc,none|<ip>', warning: '⚠ Если **none** не указан, а DNS недоступен при старте, то HAProxy не запустится.' },
+  maxconn: { summary: 'Максимум одновременных соединений к этому серверу; остальные ждут в очереди backend.', syntax: 'maxconn <число>' },
+  slowstart: { summary: 'Плавный разгон веса сервера после возврата в UP, чтобы не завалить его трафиком.', syntax: 'slowstart <время>' },
+  'resolve-opts': { summary: 'Опции DNS-резолва сервера: prevent-dup-ip — не давать двум слотам один IP, allow-dup-ip, ignore-weight.', syntax: 'resolve-opts prevent-dup-ip[,…]' },
+  'resolve-prefer': { summary: 'Предпочитаемое семейство адресов при резолве.', syntax: 'resolve-prefer ipv4|ipv6' },
+  'hash-key': { summary: 'Что использовать как ключ сервера для consistent-хеша: id, addr или addr-port. addr сохраняет привязку при смене порядка слотов.', syntax: 'hash-key id|addr|addr-port' },
+  disabled: { summary: 'Сервер в режиме обслуживания (MAINT) с момента запуска.', syntax: 'server … disabled' },
+  ssl: { summary: 'Шифровать соединение к серверу TLS.', syntax: 'server … ssl [verify none|required]' },
+  verify: { summary: 'Проверка сертификата сервера.', syntax: 'verify none|required' },
+  sni: { summary: 'SNI для TLS-соединения к серверу.', syntax: 'sni <выражение>' },
+  port: { summary: 'Порт для health-check, если отличается от порта трафика.', syntax: 'port <порт>' },
+  addr: { summary: 'Адрес для health-check, если отличается от адреса трафика.', syntax: 'addr <адрес>' },
+  'agent-check': { summary: 'Включить agent-check: внешний агент сообщает вес и состояние сервера.', syntax: 'agent-check agent-port <порт>' },
+  'on-marked-down': { summary: 'Что делать при падении сервера: shutdown-sessions — закрыть его сессии.', syntax: 'on-marked-down shutdown-sessions' },
+  'on-marked-up': { summary: 'Что делать при возврате сервера: shutdown-backup-sessions.', syntax: 'on-marked-up shutdown-backup-sessions' },
+  observe: { summary: 'Пассивная проверка здоровья по ошибкам реального трафика.', syntax: 'observe layer4|layer7' },
+  track: { summary: 'Брать состояние из другого сервера вместо своих проверок.', syntax: 'track [<backend>/]<сервер>' },
+  cookie: { summary: 'Значение cookie для привязки в HTTP-режиме.', syntax: 'cookie <значение>' },
+  id: { summary: 'Числовой идентификатор сервера.', syntax: 'id <число>' },
+};
+
+const bindOptions: Record<string, HAProxyDoc> = {
+  'accept-proxy': { summary: 'Требовать PROXY protocol (v1/v2) от каждого входящего соединения — адрес клиента берётся из заголовка.', syntax: 'bind :443 accept-proxy', warning: '⚠ Если клиенты подключаются **напрямую**, без PROXY-заголовка, то их соединения будут отклонены.' },
+  v4v6: { summary: 'Слушать IPv4 и IPv6 на одном сокете «::».', syntax: 'bind :::443 v4v6' },
+  v6only: { summary: 'Сокет «::» принимает только IPv6.', syntax: 'bind :::443 v6only' },
+  reuseport: { summary: 'В HAProxy это не опция bind: SO_REUSEPORT включён по умолчанию, а отключается глобальной директивой noreuseport.', syntax: 'global\n    noreuseport' },
+  transparent: { summary: 'Слушать нелокальный адрес (TPROXY).', syntax: 'bind 10.0.0.1:443 transparent' },
+  tfo: { summary: 'Разрешить TCP Fast Open для входящих соединений.', syntax: 'bind :443 tfo' },
+  'defer-accept': { summary: 'Будить HAProxy только когда клиент прислал данные.', syntax: 'bind :443 defer-accept' },
+  interface: { summary: 'Слушать только на указанном сетевом интерфейсе.', syntax: 'bind :443 interface eth0' },
+  name: { summary: 'Имя слушающего сокета в статистике.', syntax: 'name <имя>' },
+  ssl: { summary: 'Терминировать TLS на этом bind.', syntax: 'bind :443 ssl crt <файл>', warning: '⚠ Если включить **ssl** на SNI-маршрутизации NodeFlow, то HAProxy расшифрует трафик вместо прозрачной пересылки.' },
+  crt: { summary: 'Сертификат (PEM с ключом) или каталог сертификатов для ssl.', syntax: 'crt <путь>' },
+  alpn: { summary: 'Список ALPN-протоколов для TLS.', syntax: 'alpn h2,http/1.1' },
+  thread: { summary: 'Какими потоками обслуживать этот bind.', syntax: 'thread <потоки>' },
+  backlog: { summary: 'Очередь ядра для этого сокета.', syntax: 'backlog <число>' },
+  maxconn: { summary: 'Максимум одновременных соединений через этот bind.', syntax: 'maxconn <число>' },
+  mode: { summary: 'Права на UNIX-сокет (восьмеричные).', syntax: 'mode 660' },
+  user: { summary: 'Владелец UNIX-сокета.', syntax: 'user <имя>' },
+  group: { summary: 'Группа UNIX-сокета.', syntax: 'group <имя>' },
+  level: { summary: 'Уровень доступа к stats-сокету: user, operator или admin.', syntax: 'level user|operator|admin', warning: '⚠ Если понизить **level admin**, то NodeFlow Agent не сможет управлять весами и квотами.' },
+  admin: { summary: 'Полный уровень доступа к Runtime API.', syntax: 'level admin' },
+  'expose-fd': { summary: 'Разрешить передачу слушающих сокетов новому процессу при reload — соединения не теряются.', syntax: 'expose-fd listeners', warning: '⚠ Если убрать **expose-fd listeners**, то при reload возможны отказы в соединении.' },
+  listeners: { summary: 'Аргумент expose-fd: передавать слушающие сокеты.', syntax: 'expose-fd listeners' },
+  namespace: { summary: 'Слушать в указанном network namespace.', syntax: 'namespace <имя>' },
+};
+
+const balanceArgs: Record<string, HAProxyDoc> = {
+  roundrobin: { summary: 'По очереди с учётом весов; веса можно менять на лету.', syntax: 'balance roundrobin' },
+  'static-rr': { summary: 'По очереди с учётом весов, без ограничения на число серверов; веса не меняются на лету.', syntax: 'balance static-rr' },
+  leastconn: { summary: 'Сервер с наименьшим числом активных соединений (с учётом веса). Подходит для долгих TCP-сессий.', syntax: 'balance leastconn' },
+  first: { summary: 'Первый сервер с свободными слотами maxconn; остальные включаются по мере заполнения.', syntax: 'balance first' },
+  source: { summary: 'Хеш IP клиента: один клиент попадает на один сервер, пока набор серверов не меняется.', syntax: 'balance source', warning: '⚠ Если клиенты за **общим NAT**, то они все уйдут на один сервер.' },
+  random: { summary: 'Случайный выбор; random(N) — лучший из N случайных по числу соединений («power of two choices»).', syntax: 'balance random[(<N>)]' },
+  hash: { summary: 'Хеш произвольного выражения, например src,ipmask(32,64) — привязка по подсети.', syntax: 'balance hash <выражение>' },
+  uri: { summary: 'Хеш URI запроса (HTTP).', syntax: 'balance uri' },
+  hdr: { summary: 'Хеш HTTP-заголовка.', syntax: 'balance hdr(<имя>)' },
+  'rdp-cookie': { summary: 'Хеш RDP-cookie.', syntax: 'balance rdp-cookie' },
+};
+
+const hashTypeArgs: Record<string, HAProxyDoc> = {
+  'map-based': { summary: 'Статическая таблица: быстро, но при изменении набора серверов перераспределяется большинство клиентов.', syntax: 'hash-type map-based' },
+  consistent: { summary: 'Кольцо хешей: при добавлении/удалении сервера переезжает лишь малая доля клиентов.', syntax: 'hash-type consistent' },
+  sdbm: { summary: 'Хеш-функция sdbm (по умолчанию).', syntax: 'hash-type consistent sdbm' },
+  djb2: { summary: 'Хеш-функция djb2.', syntax: 'hash-type consistent djb2' },
+  wt6: { summary: 'Хеш-функция wt6.', syntax: 'hash-type consistent wt6' },
+  crc32: { summary: 'Хеш-функция crc32.', syntax: 'hash-type consistent crc32' },
+  none: { summary: 'Без хеш-функции: значение используется как есть.', syntax: 'hash-type consistent none' },
+  avalanche: { summary: 'Дополнительное перемешивание хеша — равномернее распределяет похожие ключи (соседние IP).', syntax: 'hash-type consistent sdbm avalanche' },
+};
+
+const stickTableArgs: Record<string, HAProxyDoc> = {
+  type: { summary: 'Тип ключа таблицы: ip, ipv6, integer, string, binary.', syntax: 'type ip|ipv6|integer|string [len <n>]' },
+  ip: { summary: 'Ключ — IPv4-адрес клиента.', syntax: 'type ip' },
+  ipv6: { summary: 'Ключ — IPv6-адрес (IPv4 хранится как отображённый).', syntax: 'type ipv6' },
+  integer: { summary: 'Ключ — целое число.', syntax: 'type integer' },
+  string: { summary: 'Ключ — строка.', syntax: 'type string len <n>' },
+  size: { summary: 'Максимум записей; суффиксы k, m, g.', syntax: 'size <число>[k|m|g]', warning: '⚠ Если таблица **переполнена**, то вытесняются самые старые записи.' },
+  expire: { summary: 'Время жизни неиспользуемой записи.', syntax: 'expire <время>' },
+  peers: { summary: 'Секция peers для синхронизации таблицы; в NodeFlow сохраняет привязки при reload.', syntax: 'peers <секция>' },
+  store: { summary: 'Какие счётчики хранить в записи.', syntax: 'store <счётчик>[,…]' },
+  nopurge: { summary: 'Не вытеснять записи при переполнении.', syntax: 'nopurge' },
+  bytes_in_rate: { summary: 'Скорость входящих байт за период — основа лимита upload.', syntax: 'store bytes_in_rate(<период>)' },
+  bytes_out_rate: { summary: 'Скорость исходящих байт за период — основа лимита download.', syntax: 'store bytes_out_rate(<период>)' },
+  conn_cur: { summary: 'Текущее число соединений ключа.', syntax: 'store conn_cur' },
+  conn_rate: { summary: 'Скорость новых соединений ключа.', syntax: 'store conn_rate(<период>)' },
+  server_id: { summary: 'ID сервера, к которому привязан ключ.', syntax: 'store server_id' },
+};
+
+const tcpRequestArgs: Record<string, HAProxyDoc> = {
+  accept: { summary: 'Принять соединение и прекратить проверку остальных правил этого уровня.', syntax: 'tcp-request content accept [if <условие>]' },
+  reject: { summary: 'Закрыть соединение.', syntax: 'tcp-request content reject [if <условие>]' },
+  'expect-proxy': { summary: 'Ожидать PROXY protocol заголовок на этом соединении.', syntax: 'tcp-request connection expect-proxy layer4 [if <условие>]', warning: '⚠ Если заголовок ждётся от **всех** источников, то прямые клиенты без PROXY не подключатся.' },
+  layer4: { summary: 'Уровень правила: сразу после accept().', syntax: 'expect-proxy layer4' },
+  'set-bandwidth-limit': { summary: 'Включить фильтр bwlim для соединения, опционально с лимитом и периодом.', syntax: 'tcp-request content set-bandwidth-limit <фильтр> [limit <v>] [period <t>]' },
+  'track-sc0': { summary: 'Учитывать соединение в stick-table (счётчик sc0).', syntax: 'track-sc0 <ключ> [table <таблица>]' },
+  'track-sc1': { summary: 'Учитывать соединение в stick-table (счётчик sc1).', syntax: 'track-sc1 <ключ> [table <таблица>]' },
+  'silent-drop': { summary: 'Молча сбросить соединение без RST клиенту.', syntax: 'tcp-request … silent-drop' },
+  'set-var': { summary: 'Записать значение в переменную.', syntax: 'set-var(<имя>) <выражение>' },
+  content: { summary: 'Уровень правил над содержимым (после inspect-delay).', syntax: 'tcp-request content …' },
+  connection: { summary: 'Уровень правил сразу после accept().', syntax: 'tcp-request connection …' },
+  session: { summary: 'Уровень правил после handshake.', syntax: 'tcp-request session …' },
+};
+
+const filterArgs: Record<string, HAProxyDoc> = {
+  'bwlim-in': { summary: 'Ограничение скорости входящего (upload) трафика.', syntax: 'filter bwlim-in <имя> …' },
+  'bwlim-out': { summary: 'Ограничение скорости исходящего (download) трафика.', syntax: 'filter bwlim-out <имя> …' },
+  limit: { summary: 'Лимит скорости в байтах в секунду (суффиксы k, m, g).', syntax: 'limit <байт/с>' },
+  key: { summary: 'Выражение-ключ, по которому считается лимит (обычно адрес клиента).', syntax: 'key <выражение>' },
+  table: { summary: 'Stick-table, где хранится текущая скорость по ключу.', syntax: 'table <таблица>' },
+  'min-size': { summary: 'Минимальный размер порции данных, который фильтр пропускает за раз.', syntax: 'min-size <байт>' },
+  period: { summary: 'Период усреднения скорости.', syntax: 'period <время>' },
+  'default-limit': { summary: 'Лимит по умолчанию для фильтра без ключа.', syntax: 'default-limit <байт/с>' },
+  'default-period': { summary: 'Период по умолчанию.', syntax: 'default-period <время>' },
+};
+
+const holdArgs: Record<string, HAProxyDoc> = {
+  valid: { summary: 'Сколько использовать успешный ответ DNS до обновления.', syntax: 'hold valid <время>' },
+  nx: { summary: 'Сколько держать старый адрес при ответе NXDOMAIN.', syntax: 'hold nx <время>' },
+  obsolete: { summary: 'Сколько держать адрес, исчезнувший из ответа DNS.', syntax: 'hold obsolete <время>' },
+  timeout: { summary: 'Сколько держать старый адрес при таймауте DNS.', syntax: 'hold timeout <время>' },
+  refused: { summary: 'Сколько держать старый адрес при ответе REFUSED.', syntax: 'hold refused <время>' },
+  other: { summary: 'Сколько держать старый адрес при прочих ошибках DNS.', syntax: 'hold other <время>' },
+};
+
+const logArgs: Record<string, HAProxyDoc> = {
+  global: { summary: 'Использовать log-цели из секции global.', syntax: 'log global' },
+  notice: { summary: 'Уровень syslog notice: только значимые события (смена состояния серверов).', syntax: 'log <адрес> <facility> notice' },
+  info: { summary: 'Уровень syslog info: включает лог каждого соединения.', syntax: 'log <адрес> <facility> info' },
+  local0: { summary: 'Syslog facility local0 — лог соединений HAProxy.', syntax: 'log /dev/log local0' },
+  local1: { summary: 'Syslog facility local1.', syntax: 'log /dev/log local1 notice' },
+};
+
+const modeArgs: Record<string, HAProxyDoc> = {
+  tcp: { summary: 'Прозрачная TCP-пересылка без разбора протокола. Так работают все маршруты NodeFlow.', syntax: 'mode tcp' },
+  http: { summary: 'Разбор HTTP: заголовки, http-request правила, cookies.', syntax: 'mode http' },
+};
+
+const initAddrArgs: Record<string, HAProxyDoc> = {
+  last: { summary: 'Взять последний известный адрес из state-файла.', syntax: 'init-addr last' },
+  libc: { summary: 'Резолвить системным резолвером при старте.', syntax: 'init-addr libc' },
+  none: { summary: 'Разрешить старт без адреса: сервер в MAINT, пока DNS не ответит.', syntax: 'init-addr none' },
+};
+
+export const argDocs: Record<string, Record<string, HAProxyDoc>> = {
+  server: serverOptions,
+  'server-template': serverOptions,
+  'default-server': serverOptions,
+  bind: bindOptions,
+  'stats socket': bindOptions,
+  balance: balanceArgs,
+  'hash-type': hashTypeArgs,
+  'stick-table': stickTableArgs,
+  'tcp-request': tcpRequestArgs,
+  filter: filterArgs,
+  hold: holdArgs,
+  log: logArgs,
+  mode: modeArgs,
+  'init-addr': initAddrArgs,
+  'resolve-opts': {
+    'prevent-dup-ip': { summary: 'Не назначать один и тот же IP двум слотам server-template — каждый адрес DNS-записи получает свой слот.', syntax: 'resolve-opts prevent-dup-ip' },
+    'allow-dup-ip': { summary: 'Разрешить нескольким слотам получить один IP.', syntax: 'resolve-opts allow-dup-ip' },
+    'ignore-weight': { summary: 'Не брать вес из SRV-записей DNS.', syntax: 'resolve-opts ignore-weight' },
+  },
+  'hash-key': {
+    id: { summary: 'Ключ consistent-хеша — числовой ID сервера.', syntax: 'hash-key id' },
+    addr: { summary: 'Ключ consistent-хеша — IP сервера: привязка клиентов сохраняется, даже если слот сменил адрес.', syntax: 'hash-key addr' },
+    'addr-port': { summary: 'Ключ consistent-хеша — IP и порт сервера.', syntax: 'hash-key addr-port' },
+  },
+};
+
+/** Tokens meaningful anywhere: conditions, fetches, ACL flags, functions. */
+export const keywordDocs: Record<string, HAProxyDoc> = {
+  '{': { summary: 'Начало анонимного ACL: условие записывается прямо в правиле, без отдельной строки acl.', syntax: 'if { <выборка> [флаги] <значения> }', warning: '⚠ Если забыть **пробел** после { или перед }, то HAProxy не распознает условие.' },
+  '}': { summary: 'Конец анонимного ACL.', syntax: 'if { <выборка> <значения> }' },
+  if: { summary: 'Правило срабатывает, только если условие истинно. Несколько ACL подряд — «И», «||» или or — «ИЛИ».', syntax: '<правило> if <acl> [<acl>…] [|| <acl>]' },
+  unless: { summary: 'Правило срабатывает, только если условие ложно.', syntax: '<правило> unless <acl>' },
+  or: { summary: 'Логическое «ИЛИ» между ACL в условии.', syntax: 'if acl1 or acl2' },
+  '||': { summary: 'Логическое «ИЛИ» между ACL в условии.', syntax: 'if acl1 || acl2' },
+  '!': { summary: 'Отрицание ACL.', syntax: 'if !acl1' },
+  src: { summary: 'Выборка: IP-адрес клиента (после PROXY protocol — реальный адрес из заголовка).', syntax: 'acl <имя> src <сеть>[ …] | -f <файл>' },
+  dst: { summary: 'Выборка: локальный IP, на который пришло соединение.', syntax: 'acl <имя> dst <адрес>' },
+  dst_port: { summary: 'Выборка: локальный порт, на который пришло соединение.', syntax: 'acl <имя> dst_port <порт>[:<порт>]' },
+  src_port: { summary: 'Выборка: порт клиента.', syntax: 'acl <имя> src_port <порт>' },
+  'req.ssl_sni': { summary: 'Выборка: имя сервера (SNI) из TLS ClientHello без расшифровки. Требует tcp-request inspect-delay.', syntax: 'acl <имя> req.ssl_sni -i <домен>[ …]', warning: '⚠ Если клиент **не передаёт SNI** (старый клиент, IP вместо домена), то сработает default_backend.' },
+  'req_ssl_sni': { summary: 'Устаревшее имя req.ssl_sni: SNI из TLS ClientHello.', syntax: 'req_ssl_sni -i <домен>' },
+  'req.ssl_hello_type': { summary: 'Выборка: тип TLS handshake-сообщения; 1 — ClientHello. Используется, чтобы принять соединение, как только SNI получен.', syntax: 'tcp-request content accept if { req.ssl_hello_type 1 }' },
+  'req.len': { summary: 'Выборка: сколько байт запроса уже получено в буфере.', syntax: 'req.len gt 0' },
+  'req.ssl_ver': { summary: 'Выборка: версия TLS из ClientHello.', syntax: 'req.ssl_ver ge 3.3' },
+  'ssl_fc_sni': { summary: 'Выборка: SNI при TLS-терминации на bind ssl.', syntax: 'ssl_fc_sni -i <домен>' },
+  'sc0_bytes_out_rate': { summary: 'Скорость исходящих байт по счётчику sc0.', syntax: 'sc0_bytes_out_rate gt <n>' },
+  ipmask: { summary: 'Преобразователь: маскирует адрес до сети (IPv4-префикс, IPv6-префикс). src,ipmask(32,64) — привязка по /64 для IPv6.', syntax: 'src,ipmask(<v4-маска>[,<v6-маска>])' },
+  '-i': { summary: 'Флаг ACL: сравнение без учёта регистра.', syntax: 'acl <имя> <выборка> -i <значения>' },
+  '-m': { summary: 'Флаг ACL: метод сравнения — str, beg, end, sub, reg, found, ip, int…', syntax: 'acl <имя> <выборка> -m <метод> <значения>' },
+  '-f': { summary: 'Флаг ACL: загрузить значения из файла (по одному на строку).', syntax: 'acl <имя> src -f <файл>', warning: '⚠ Если **файла нет** на ноде, то HAProxy не загрузит конфиг.' },
+  '-n': { summary: 'Флаг ACL: не резолвить DNS-имена в значениях.', syntax: 'acl <имя> src -n <значения>' },
+  enabled: { summary: 'Функция условия .if: истинна, если возможность (например SPLICE) поддерживается и не выключена.', syntax: '.if enabled(<возможность>)' },
+  defined: { summary: 'Функция условия .if: истинна, если переменная окружения определена.', syntax: '.if defined(<переменная>)' },
+  version_atleast: { summary: 'Функция условия .if: версия HAProxy не ниже указанной.', syntax: '.if version_atleast(2.8)' },
+  feature: { summary: 'Функция условия .if: сборка поддерживает возможность.', syntax: '.if feature(OPENSSL)' },
+};
+
+/** Tokens that take a value right after them (the value gets a duration/number doc). */
+export const DURATION_UNITS: Record<string, string> = { us: 'микросекунд', ms: 'миллисекунд', s: 'секунд', m: 'минут', h: 'часов', d: 'дней' };
diff --git a/frontend/src/features/haproxy-editor/haproxyKeywords.json b/frontend/src/features/haproxy-editor/haproxyKeywords.json
new file mode 100644
index 0000000..6e7c39b
--- /dev/null
+++ b/frontend/src/features/haproxy-editor/haproxyKeywords.json
@@ -0,0 +1,529 @@
+{
+  "_comment": "HAProxy 2.8-3.2 keyword allowlists (+3.3 additions accepted leniently). Source: doc/configuration.txt and src/*.c keyword tables. Section letters: d=defaults, n=named defaults only, f=frontend, l=listen, b=backend. Server/bind values: number of value arguments (-1 = variable). Keep internal/panel/haproxy_keywords.json identical (TestLintKeywordsJSONInSync).",
+  "global": {
+    "keywords": ["anonkey", "busy-polling", "ca-base", "chroot", "close-spread-time", "cluster-secret", "cpu-affinity", "cpu-map", "cpu-policy", "cpu-set", "crt-base", "daemon", "debug.counters", "default-path", "description", "dns-accept-family", "expose-deprecated-directives", "expose-experimental-directives", "external-check", "fd-hard-limit", "force-cfg-parser-pause", "gid", "grace", "group", "h1-accept-payload-with-any-method", "h1-case-adjust", "h1-case-adjust-file", "h1-do-not-close-on-insecure-transfer-encoding", "h2-workaround-bogus-websocket-clients", "hard-stop-after", "http-err-codes", "http-fail-codes", "insecure-fork-wanted", "insecure-setuid-wanted", "issuers-chain-path", "key-base", "limited-quic", "localpeer", "log", "log-send-hostname", "log-tag", "lua-load", "lua-load-per-thread", "lua-prepend-path", "master-worker", "max-spread-checks", "max-threads-per-group", "maxcompcpuusage", "maxcomprate", "maxconn", "maxconnrate", "maxpipes", "maxsessrate", "maxsslconn", "maxsslrate", "maxzlibmem", "mworker-max-reloads", "nbthread", "no-memory-trimming", "no-quic", "node", "noepoll", "noevports", "nogetaddrinfo", "nokqueue", "noktls", "nopoll", "noreuseport", "nosplice", "numa-cpu-mapping", "pidfile", "pp2-never-send-local", "prealloc-fd", "presetenv", "quick-exit", "quiet", "resetenv", "server-state-base", "server-state-file", "set-dumpable", "set-var", "set-var-fmt", "setcap", "setenv", "shm-stats-file", "shm-stats-file-max-objects", "spread-checks", "stats", "stats-file", "stress-level", "strict-limits", "thread-group", "thread-groups", "thread-hard-limit", "uid", "ulimit-n", "unix-bind", "unsetenv", "user", "warn-blocked-traffic-after", "worker-id", "zero-warning"],
+    "prefixes": ["tune.", "ssl-", "httpclient.", "profiling.", "ocsp-update.", "harden.", "51degrees-", "wurfl-", "deviceatlas-", "acme.", "jwt."],
+    "negatable": ["log", "busy-polling", "set-dumpable", "strict-limits", "insecure-fork-wanted", "numa-cpu-mapping"]
+  },
+  "proxy": {
+    "acl": "nflb",
+    "backlog": "dfl",
+    "balance": "dlb",
+    "be-unpublished": "lb",
+    "bind": "fl",
+    "capture": "fl",
+    "clitcpka-cnt": "dfl",
+    "clitcpka-idle": "dfl",
+    "clitcpka-intvl": "dfl",
+    "compression": "dflb",
+    "cookie": "dlb",
+    "declare": "fl",
+    "decompression": "dflb",
+    "default-server": "dlb",
+    "default_backend": "dfl",
+    "description": "flb",
+    "disabled": "dflb",
+    "dispatch": "lb",
+    "dynamic-cookie-key": "dlb",
+    "email-alert": "dflb",
+    "enabled": "dflb",
+    "error-log-format": "dfl",
+    "errorfile": "dflb",
+    "errorfiles": "dflb",
+    "errorloc": "dflb",
+    "errorloc302": "dflb",
+    "errorloc303": "dflb",
+    "external-check": "dlb",
+    "filter": "flb",
+    "force-be-switch": "fl",
+    "force-persist": "lb",
+    "fullconn": "dlb",
+    "guid": "flb",
+    "hash-balance-factor": "dlb",
+    "hash-preserve-affinity": "dlb",
+    "hash-type": "dlb",
+    "http-after-response": "nflb",
+    "http-check": "dlb",
+    "http-error": "dflb",
+    "http-request": "nflb",
+    "http-response": "nflb",
+    "http-reuse": "dlb",
+    "http-send-name-header": "dlb",
+    "id": "flb",
+    "ignore-persist": "lb",
+    "load-server-state-from-file": "dlb",
+    "log": "dflb",
+    "log-format": "dfl",
+    "log-format-sd": "dfl",
+    "log-steps": "dfl",
+    "log-tag": "dflb",
+    "max-keep-alive-queue": "dlb",
+    "max-session-srv-conns": "dfl",
+    "maxconn": "dfl",
+    "mode": "dflb",
+    "monitor": "fl",
+    "monitor-uri": "dfl",
+    "option": "dflb",
+    "persist": "dlb",
+    "quic-initial": "nfl",
+    "rate-limit": "dfl",
+    "redirect": "flb",
+    "retries": "dlb",
+    "retry-on": "dlb",
+    "server": "lb",
+    "server-state-file-name": "dlb",
+    "server-template": "lb",
+    "source": "dlb",
+    "srvtcpka-cnt": "dlb",
+    "srvtcpka-idle": "dlb",
+    "srvtcpka-intvl": "dlb",
+    "ssl-f-use": "fl",
+    "stats": "dflb",
+    "stick": "lb",
+    "stick-table": "flb",
+    "tcp-check": "dlb",
+    "tcp-request": "nflb",
+    "tcp-response": "nlb",
+    "timeout": "dflb",
+    "transparent": "dlb",
+    "unique-id-format": "dflb",
+    "unique-id-header": "dfl",
+    "use-fcgi-app": "lb",
+    "use-server": "lb",
+    "use_backend": "fl"
+  },
+  "proxy_sub": {
+    "capture cookie": "fl",
+    "capture request": "fl",
+    "capture response": "fl",
+    "declare capture": "fl",
+    "email-alert from": "dflb",
+    "email-alert level": "dflb",
+    "email-alert mailers": "dflb",
+    "email-alert myhostname": "dflb",
+    "email-alert to": "dflb",
+    "external-check command": "dlb",
+    "external-check path": "dlb",
+    "http-check comment": "dlb",
+    "http-check connect": "dlb",
+    "http-check disable-on-404": "dlb",
+    "http-check expect": "dlb",
+    "http-check send": "dlb",
+    "http-check send-state": "dlb",
+    "http-check set-var": "dlb",
+    "http-check unset-var": "dlb",
+    "monitor fail": "fl",
+    "persist rdp-cookie": "dlb",
+    "rate-limit sessions": "dfl",
+    "stats admin": "flb",
+    "stats auth": "dflb",
+    "stats enable": "dflb",
+    "stats hide-version": "dflb",
+    "stats http-request": "flb",
+    "stats realm": "dflb",
+    "stats refresh": "dflb",
+    "stats scope": "dflb",
+    "stats show-desc": "dflb",
+    "stats show-legends": "dflb",
+    "stats show-node": "dflb",
+    "stats show-version": "dflb",
+    "stats uri": "dflb",
+    "stick match": "lb",
+    "stick on": "lb",
+    "stick store-request": "lb",
+    "stick store-response": "lb",
+    "tcp-check comment": "dlb",
+    "tcp-check connect": "dlb",
+    "tcp-check expect": "dlb",
+    "tcp-check send": "dlb",
+    "tcp-check send-binary": "dlb",
+    "tcp-check send-binary-lf": "dlb",
+    "tcp-check send-lf": "dlb",
+    "tcp-check set-var": "dlb",
+    "tcp-check unset-var": "dlb",
+    "tcp-request connection": "nfl",
+    "tcp-request content": "nflb",
+    "tcp-request inspect-delay": "nflb",
+    "tcp-request session": "nfl",
+    "tcp-response content": "nlb",
+    "tcp-response inspect-delay": "nlb",
+    "timeout check": "dlb",
+    "timeout client": "dfl",
+    "timeout client-fin": "dfl",
+    "timeout client-hs": "dfl",
+    "timeout connect": "dlb",
+    "timeout http-keep-alive": "dflb",
+    "timeout http-request": "dflb",
+    "timeout queue": "dlb",
+    "timeout server": "dlb",
+    "timeout server-fin": "dlb",
+    "timeout tarpit": "dflb",
+    "timeout tunnel": "dlb"
+  },
+  "proxy_strict_sub": ["capture", "declare", "email-alert", "external-check", "monitor", "persist", "rate-limit", "stick", "tcp-request", "tcp-response"],
+  "proxy_negatable": ["option", "log"],
+  "options": {
+    "abortonclose": "dlb",
+    "accept-invalid-http-request": "dfl",
+    "accept-invalid-http-response": "dlb",
+    "accept-unsafe-violations-in-http-request": "dfl",
+    "accept-unsafe-violations-in-http-response": "dlb",
+    "allbackups": "dlb",
+    "assume-rfc6587-ntf": "dfl",
+    "checkcache": "dlb",
+    "clitcpka": "dfl",
+    "contstats": "dfl",
+    "disable-h2-upgrade": "dfl",
+    "dont-parse-log": "dfl",
+    "dontlog-normal": "dfl",
+    "dontlognull": "dfl",
+    "external-check": "dlb",
+    "forwarded": "dlb",
+    "forwardfor": "dflb",
+    "h1-case-adjust-bogus-client": "dfl",
+    "h1-case-adjust-bogus-server": "dlb",
+    "http-buffer-request": "dflb",
+    "http-drop-request-trailers": "dlb",
+    "http-drop-response-trailers": "dfl",
+    "http-ignore-probes": "dfl",
+    "http-keep-alive": "dflb",
+    "http-no-delay": "dflb",
+    "http-pretend-keepalive": "dlb",
+    "http-restrict-req-hdr-names": "dflb",
+    "http-server-close": "dflb",
+    "http-use-proxy-header": "dfl",
+    "httpchk": "dlb",
+    "httpclose": "dflb",
+    "httplog": "dfl",
+    "httpslog": "dfl",
+    "idle-close-on-response": "dfl",
+    "independent-streams": "dflb",
+    "ldap-check": "dlb",
+    "log-health-checks": "dlb",
+    "log-separate-errors": "dfl",
+    "logasap": "dfl",
+    "mysql-check": "dlb",
+    "nolinger": "dflb",
+    "originalto": "dflb",
+    "persist": "dlb",
+    "pgsql-check": "dlb",
+    "prefer-last-server": "dlb",
+    "redis-check": "dlb",
+    "redispatch": "dlb",
+    "smtpchk": "dlb",
+    "socket-stats": "dfl",
+    "splice-auto": "dflb",
+    "splice-request": "dflb",
+    "splice-response": "dflb",
+    "spop-check": "dlb",
+    "srvtcpka": "dlb",
+    "ssl-hello-chk": "dlb",
+    "tcp-check": "dlb",
+    "tcp-smart-accept": "dfl",
+    "tcp-smart-connect": "dlb",
+    "tcpka": "dflb",
+    "tcplog": "dfl",
+    "transparent": "dlb",
+    "use-small-buffers": "dlb"
+  },
+  "options_no_negation": ["external-check", "forwardfor", "http-restrict-req-hdr-names", "httpchk", "httplog", "httpslog", "ldap-check", "mysql-check", "originalto", "pgsql-check", "redis-check", "smtpchk", "spop-check", "ssl-hello-chk", "tcp-check", "tcpka", "tcplog"],
+  "option_args": {
+    "abortonclose": "none",
+    "accept-invalid-http-request": "none",
+    "accept-invalid-http-response": "none",
+    "accept-unsafe-violations-in-http-request": "none",
+    "accept-unsafe-violations-in-http-response": "none",
+    "allbackups": "none",
+    "assume-rfc6587-ntf": "none",
+    "checkcache": "none",
+    "clitcpka": "none",
+    "contstats": "none",
+    "disable-h2-upgrade": "none",
+    "dont-parse-log": "none",
+    "dontlog-normal": "none",
+    "dontlognull": "none",
+    "h1-case-adjust-bogus-client": "none",
+    "h1-case-adjust-bogus-server": "none",
+    "http-buffer-request": "none",
+    "http-drop-request-trailers": "none",
+    "http-drop-response-trailers": "none",
+    "http-ignore-probes": "none",
+    "http-keep-alive": "none",
+    "http-no-delay": "none",
+    "http-pretend-keepalive": "none",
+    "http-server-close": "none",
+    "http-use-proxy-header": "none",
+    "httpclose": "none",
+    "httplog": "clf",
+    "idle-close-on-response": "none",
+    "independent-streams": "none",
+    "log-health-checks": "none",
+    "log-separate-errors": "none",
+    "logasap": "none",
+    "nolinger": "none",
+    "persist": "none",
+    "prefer-last-server": "none",
+    "socket-stats": "none",
+    "splice-auto": "none",
+    "splice-request": "none",
+    "splice-response": "none",
+    "srvtcpka": "none",
+    "tcp-smart-accept": "none",
+    "tcp-smart-connect": "none",
+    "tcpka": "none",
+    "tcplog": "clf",
+    "transparent": "none"
+  },
+  "server": {
+    "addr": 1,
+    "agent-addr": 1,
+    "agent-check": 0,
+    "agent-inter": 1,
+    "agent-port": 1,
+    "agent-send": 1,
+    "allow-0rtt": 0,
+    "alpn": 1,
+    "backup": 0,
+    "ca-file": 1,
+    "cc": 1,
+    "check": 0,
+    "check-alpn": 1,
+    "check-pool-conn-name": 1,
+    "check-proto": 1,
+    "check-reuse-pool": 0,
+    "check-send-proxy": 0,
+    "check-sni": 1,
+    "check-sni-auto": 0,
+    "check-ssl": 0,
+    "check-via-socks4": 0,
+    "ciphers": 1,
+    "ciphersuites": 1,
+    "client-sigalgs": 1,
+    "cookie": 1,
+    "crl-file": 1,
+    "crt": 1,
+    "curves": 1,
+    "disabled": 0,
+    "downinter": 1,
+    "enabled": 0,
+    "error-limit": 1,
+    "fall": 1,
+    "fastinter": 1,
+    "force-sslv3": 0,
+    "force-tlsv10": 0,
+    "force-tlsv11": 0,
+    "force-tlsv12": 0,
+    "force-tlsv13": 0,
+    "guid": 1,
+    "hash-key": 1,
+    "healthcheck": 1,
+    "id": 1,
+    "idle-ping": 1,
+    "init-addr": 1,
+    "init-state": 1,
+    "inter": 1,
+    "ktls": 1,
+    "log-bufsize": 1,
+    "log-proto": 1,
+    "max-reuse": 1,
+    "maxconn": 1,
+    "maxqueue": 1,
+    "minconn": 1,
+    "namespace": 1,
+    "no-agent-check": 0,
+    "no-backup": 0,
+    "no-check": 0,
+    "no-check-reuse-pool": 0,
+    "no-check-send-proxy": 0,
+    "no-check-sni-auto": 0,
+    "no-check-ssl": 0,
+    "no-renegotiate": 0,
+    "no-send-proxy": 0,
+    "no-send-proxy-v2": 0,
+    "no-send-proxy-v2-ssl": 0,
+    "no-send-proxy-v2-ssl-cn": 0,
+    "no-sni-auto": 0,
+    "no-ssl": 0,
+    "no-ssl-reuse": 0,
+    "no-sslv3": 0,
+    "no-tfo": 0,
+    "no-tls-tickets": 0,
+    "no-tlsv10": 0,
+    "no-tlsv11": 0,
+    "no-tlsv12": 0,
+    "no-tlsv13": 0,
+    "no-verifyhost": 0,
+    "non-stick": 0,
+    "npn": 1,
+    "observe": 1,
+    "on-error": 1,
+    "on-marked-down": 1,
+    "on-marked-up": 1,
+    "pool-conn-name": 1,
+    "pool-low-conn": 1,
+    "pool-max-conn": 1,
+    "pool-purge-delay": 1,
+    "port": 1,
+    "proto": 1,
+    "proxy-v2-options": 1,
+    "quic-cc-algo": 1,
+    "redir": 1,
+    "renegotiate": 0,
+    "resolve-net": 1,
+    "resolve-opts": 1,
+    "resolve-prefer": 1,
+    "resolvers": 1,
+    "rise": 1,
+    "send-proxy": 0,
+    "send-proxy-v2": 0,
+    "send-proxy-v2-ssl": 0,
+    "send-proxy-v2-ssl-cn": 0,
+    "set-proxy-v2-tlv-fmt": 1,
+    "shard": 1,
+    "sigalgs": 1,
+    "slowstart": 1,
+    "sni": 1,
+    "sni-auto": 0,
+    "socks4": 1,
+    "source": -1,
+    "ssl": 0,
+    "ssl-max-ver": 1,
+    "ssl-min-ver": 1,
+    "ssl-reuse": 0,
+    "stick": 0,
+    "strict-maxconn": 0,
+    "tcp-md5sig": 1,
+    "tcp-ut": 1,
+    "tfo": 0,
+    "tls-tickets": 0,
+    "track": 1,
+    "usesrc": 1,
+    "verify": 1,
+    "verifyhost": 1,
+    "weight": 1,
+    "ws": 1
+  },
+  "bind": {
+    "accept-netscaler-cip": 1,
+    "accept-proxy": 0,
+    "allow-0rtt": 0,
+    "alpn": 1,
+    "backlog": 1,
+    "ca-file": 1,
+    "ca-ignore-err": 1,
+    "ca-sign-file": 1,
+    "ca-sign-pass": 1,
+    "ca-verify-file": 1,
+    "cc": 1,
+    "ciphers": 1,
+    "ciphersuites": 1,
+    "client-sigalgs": 1,
+    "crl-file": 1,
+    "crt": 1,
+    "crt-ignore-err": 1,
+    "crt-list": 1,
+    "curves": 1,
+    "default-crt": 1,
+    "defer-accept": 0,
+    "ecdhe": 1,
+    "ech": 1,
+    "expose-fd": 1,
+    "force-sslv3": 0,
+    "force-tlsv10": 0,
+    "force-tlsv11": 0,
+    "force-tlsv12": 0,
+    "force-tlsv13": 0,
+    "generate-certificates": 0,
+    "gid": 1,
+    "group": 1,
+    "guid-prefix": 1,
+    "id": 1,
+    "idle-ping": 1,
+    "interface": 1,
+    "ktls": 1,
+    "label": 1,
+    "level": 1,
+    "maxconn": 1,
+    "mode": 1,
+    "mss": 1,
+    "name": 1,
+    "namespace": 1,
+    "nbconn": 1,
+    "nice": 1,
+    "no-alpn": 0,
+    "no-ca-names": 0,
+    "no-sslv3": 0,
+    "no-strict-sni": 0,
+    "no-tls-tickets": 0,
+    "no-tlsv10": 0,
+    "no-tlsv11": 0,
+    "no-tlsv12": 0,
+    "no-tlsv13": 0,
+    "npn": 1,
+    "ocsp-update": 1,
+    "prefer-client-ciphers": 0,
+    "process": 1,
+    "proto": 1,
+    "quic-cc-algo": 1,
+    "quic-force-retry": 0,
+    "quic-socket": 1,
+    "severity-output": 1,
+    "shards": 1,
+    "sigalgs": 1,
+    "ssl": 0,
+    "ssl-max-ver": 1,
+    "ssl-min-ver": 1,
+    "strict-sni": 0,
+    "tcp-md5sig": 1,
+    "tcp-ss": 1,
+    "tcp-ut": 1,
+    "tfo": 0,
+    "thread": 1,
+    "tls-ticket-keys": 1,
+    "tls-tickets": 0,
+    "transparent": 0,
+    "uid": 1,
+    "user": 1,
+    "v4v6": 0,
+    "v6only": 0,
+    "verify": 1
+  },
+  "timeouts": {
+    "proxy": ["check", "client", "client-fin", "client-hs", "connect", "http-keep-alive", "http-request", "queue", "server", "server-fin", "tarpit", "tunnel"],
+    "resolvers": ["resolve", "retry"],
+    "ring": ["connect", "server"],
+    "log-forward": ["client"],
+    "mailers": ["mail"]
+  },
+  "modes": {
+    "tcp": "dflb",
+    "http": "dflb",
+    "log": "dlb",
+    "spop": "dlb"
+  },
+  "balance": ["first", "hash", "hdr", "leastconn", "log-hash", "random", "rdp-cookie", "roundrobin", "source", "static-rr", "sticky", "uri", "url_param"],
+  "hash_type": {
+    "methods": ["consistent", "map-based"],
+    "functions": ["crc32", "djb2", "none", "sdbm", "wt6"],
+    "modifiers": ["avalanche"]
+  },
+  "log": {
+    "facilities": ["kern", "user", "mail", "daemon", "auth", "syslog", "lpr", "news", "uucp", "cron", "auth2", "ftp", "ntp", "audit", "alert", "cron2", "local0", "local1", "local2", "local3", "local4", "local5", "local6", "local7"],
+    "levels": ["emerg", "alert", "crit", "err", "warning", "notice", "info", "debug"],
+    "options": ["format", "len", "profile", "sample"]
+  },
+  "other_sections": {
+    "resolvers": ["accepted_payload_size", "hold", "nameserver", "parse-resolv-conf", "resolution_pool_size", "resolve_retries", "timeout"],
+    "peers": ["bind", "default-bind", "default-server", "disabled", "enable", "enabled", "log", "peer", "server", "shards", "table"],
+    "userlist": ["group", "user"],
+    "cache": ["max-age", "max-object-size", "max-secondary-entries", "process-vary", "total-max-size"],
+    "program": ["command", "group", "no", "option", "user"],
+    "http-errors": ["errorfile"],
+    "ring": ["backing-file", "description", "format", "maxlen", "server", "size", "timeout"],
+    "log-forward": ["backlog", "bind", "dgram-bind", "log", "maxconn", "no", "option", "timeout"],
+    "mailers": ["mailer", "timeout"],
+    "crt-store": ["crt-base", "key-base", "load"],
+    "traces": ["trace"],
+    "acme": ["account-key", "bits", "challenge", "contact", "curves", "directory", "keytype", "map"]
+  }
+}
diff --git a/frontend/src/features/haproxy-editor/haproxyLintRules.ts b/frontend/src/features/haproxy-editor/haproxyLintRules.ts
new file mode 100644
index 0000000..2fa2b4f
--- /dev/null
+++ b/frontend/src/features/haproxy-editor/haproxyLintRules.ts
@@ -0,0 +1,268 @@
+// Keyword-level checks of the offline linter. Mirrors
+// internal/panel/haproxy_lint_checks.go: both read haproxyKeywords.json (the Go
+// side embeds a byte-identical copy) and must report the same codes.
+import KEYWORDS from './haproxyKeywords.json' with { type: 'json' };
+
+export interface RuleWord { text: string; start: number; end: number; quoted: boolean }
+export type RuleEmit = (word: RuleWord, code: string, message: string, severity?: 'error' | 'warning') => void;
+
+interface KeywordData {
+  global: { keywords: string[]; prefixes: string[]; negatable: string[] };
+  proxy: Record<string, string>;
+  proxy_sub: Record<string, string>;
+  proxy_strict_sub: string[];
+  proxy_negatable: string[];
+  options: Record<string, string>;
+  options_no_negation: string[];
+  option_args: Record<string, string>;
+  server: Record<string, number>;
+  bind: Record<string, number>;
+  timeouts: Record<string, string[]>;
+  modes: Record<string, string>;
+  balance: string[];
+  hash_type: { methods: string[]; functions: string[]; modifiers: string[] };
+  log: { facilities: string[]; levels: string[]; options: string[] };
+  other_sections: Record<string, string[]>;
+}
+
+const K = KEYWORDS as unknown as KeywordData;
+const set = (words: string[]) => new Set(words);
+const GLOBAL = set(K.global.keywords);
+const GLOBAL_NEGATABLE = set(K.global.negatable);
+const STRICT_SUB = set(K.proxy_strict_sub);
+const OPTIONS_NO_NEG = set(K.options_no_negation);
+const TIMEOUTS = Object.fromEntries(Object.entries(K.timeouts).map(([k, v]) => [k, set(v)]));
+const OTHER = Object.fromEntries(Object.entries(K.other_sections).map(([k, v]) => [k, set(v)]));
+const BALANCE = set(K.balance);
+const HASH = [set(K.hash_type.methods), set(K.hash_type.functions), set(K.hash_type.modifiers)];
+const LOG_FACILITIES = set(K.log.facilities);
+const LOG_LEVELS = set(K.log.levels);
+const LOG_OPTIONS = set(K.log.options);
+const DURATION_RE = /^\d+(us|ms|s|m|h|d)?$/;
+const SERVER_DURATION = set(['inter', 'fastinter', 'downinter', 'slowstart', 'agent-inter', 'pool-purge-delay']);
+const FREE_TEXT = set([
+  'acl', 'bind', 'capture', 'description', 'email-alert', 'error-log-format', 'errorfile', 'errorfiles',
+  'errorloc', 'errorloc302', 'errorloc303', 'filter', 'http-after-response', 'http-check', 'http-error',
+  'http-request', 'http-response', 'log-format', 'log-format-sd', 'log-tag', 'monitor-uri', 'node',
+  'presetenv', 'redirect', 'set-var', 'set-var-fmt', 'setenv', 'stats', 'tcp-check', 'tcp-request',
+  'tcp-response', 'unique-id-format', 'unique-id-header', 'use_backend', 'default_backend', 'use-server',
+  'stick', 'balance', 'command', 'user', 'group', 'lua-load', 'lua-load-per-thread', 'lua-prepend-path',
+  'hash-type', 'server', 'server-template', 'default-server', 'option', 'timeout', 'mode', 'log',
+]);
+
+/** Sections the linter knows; hover docs only cover SECTION_KEYWORDS. */
+export const LINT_SECTIONS = new Set(['global', 'defaults', 'frontend', 'backend', 'listen', 'resolvers', 'peers', 'userlist', 'cache', 'program', 'http-errors', 'ring', 'log-forward', 'mailers', 'crt-store', 'traces', 'acme']);
+
+const has = (o: Record<string, unknown>, k: string) => Object.prototype.hasOwnProperty.call(o, k);
+
+export const isProxySection = (section: string) => section === 'defaults' || section === 'frontend' || section === 'backend' || section === 'listen';
+
+export function knownKeyword(section: string, kw: string): boolean {
+  if (section === 'global') return GLOBAL.has(kw) || K.global.prefixes.some((p) => kw.startsWith(p));
+  if (isProxySection(section)) return has(K.proxy, kw);
+  return OTHER[section]?.has(kw) ?? false;
+}
+
+/** Section letters: d=defaults, n=named defaults only, f=frontend, l=listen, b=backend. */
+function sectionAllowed(flags: string, section: string, namedDefaults: boolean): { allowed: boolean; anonymous: boolean } {
+  switch (section) {
+    case 'defaults':
+      if (flags.includes('d')) return { allowed: true, anonymous: false };
+      if (flags.includes('n')) return { allowed: namedDefaults, anonymous: !namedDefaults };
+      return { allowed: false, anonymous: false };
+    case 'frontend': return { allowed: flags.includes('f'), anonymous: false };
+    case 'listen': return { allowed: flags.includes('l'), anonymous: false };
+    case 'backend': return { allowed: flags.includes('b'), anonymous: false };
+  }
+  return { allowed: true, anonymous: false };
+}
+
+export function trailingPunct(text: string): [string, number] {
+  const base = text.replace(/[,;:.]+$/, '');
+  return [base, text.length - base.length];
+}
+
+/** Narrows a word to its trailing punctuation (marker range). */
+export function punctWord(w: RuleWord, n: number): RuleWord {
+  if (w.quoted || n === 0) return w;
+  return { ...w, start: w.end - n };
+}
+
+const stray = (emit: RuleEmit, w: RuleWord, base: string, n: number) => emit(punctWord(w, n), 'stray_punctuation', `Лишний символ «${w.text.slice(base.length)}» после «${base}»`);
+
+export function negatable(section: string, kw: string): boolean {
+  return section === 'global' ? GLOBAL_NEGATABLE.has(kw) : kw === 'option' || kw === 'log';
+}
+
+export function unknownDirective(section: string, kw: RuleWord, emit: RuleEmit): void {
+  const [base, n] = trailingPunct(kw.text);
+  if (n > 0 && knownKeyword(section, base)) { stray(emit, kw, base, n); return; }
+  emit(kw, 'unknown_directive', `Неизвестная директива «${kw.text}» в секции ${section}`, section === 'global' || isProxySection(section) ? 'error' : 'warning');
+}
+
+function sectionAllows(section: string, namedDefaults: boolean, w: RuleWord, name: string, flags: string, emit: RuleEmit): boolean {
+  const { allowed, anonymous } = sectionAllowed(flags, section, namedDefaults);
+  if (allowed) return true;
+  emit(w, 'keyword_not_allowed', anonymous ? `«${name}» недопустим в безымянной секции defaults (задайте ей имя)` : `«${name}» недопустим в секции ${section}`);
+  return false;
+}
+
+/** HAProxy 4.1 keyword matrix; false when the keyword is refused here. */
+export function proxyKeywordAllowed(section: string, namedDefaults: boolean, words: RuleWord[], emit: RuleEmit): boolean {
+  const kw = words[0];
+  if (!sectionAllows(section, namedDefaults, kw, kw.text, K.proxy[kw.text] ?? '', emit)) return false;
+  if (kw.text === 'timeout' || kw.text === 'option' || words.length < 2) return true;
+  const sub = words[1];
+  const key = `${kw.text} ${sub.text}`;
+  if (has(K.proxy_sub, key)) return sectionAllows(section, namedDefaults, sub, key, K.proxy_sub[key], emit);
+  if (!STRICT_SUB.has(kw.text)) return true;
+  const [base, n] = trailingPunct(sub.text);
+  if (n > 0 && has(K.proxy_sub, `${kw.text} ${base}`)) { stray(emit, sub, base, n); return false; }
+  emit(sub, 'unknown_keyword', `Неизвестный параметр «${sub.text}» у ${kw.text}`);
+  return false;
+}
+
+export function checkTimeoutKind(section: string, words: RuleWord[], emit: RuleEmit): boolean {
+  if (words.length < 2) return true;
+  const cls = isProxySection(section) ? 'proxy' : section;
+  const kinds = TIMEOUTS[cls];
+  const kind = words[1];
+  if (kinds && !kinds.has(kind.text)) {
+    const [base, n] = trailingPunct(kind.text);
+    if (n > 0 && kinds.has(base)) stray(emit, kind, base, n);
+    else emit(kind, 'unknown_timeout', `Неизвестный тип timeout «${kind.text}»`);
+    return false;
+  }
+  if (cls === 'proxy') {
+    const flags = K.proxy_sub[`timeout ${kind.text}`];
+    if (flags && !sectionAllowed(flags, section, true).allowed) emit(kind, 'timeout_ignored', `timeout ${kind.text} игнорируется в секции ${section}`, 'warning');
+  }
+  return true;
+}
+
+export function checkOption(section: string, words: RuleWord[], modifier: string, emit: RuleEmit): void {
+  if (words.length < 2) { emit(words[0], 'option_missing_name', 'У option не указано имя'); return; }
+  const name = words[1];
+  if (!has(K.options, name.text)) {
+    const [base, n] = trailingPunct(name.text);
+    if (n > 0 && has(K.options, base)) emit(punctWord(name, n), 'unknown_option', `Неизвестная опция «${name.text}» — лишний символ «${name.text.slice(base.length)}»`);
+    else emit(name, 'unknown_option', `Неизвестная опция «${name.text}»`);
+    return;
+  }
+  if (modifier && OPTIONS_NO_NEG.has(name.text)) { emit(name, 'negation_not_supported', `Префикс «${modifier}» не поддерживается для option ${name.text}`); return; }
+  if (!sectionAllowed(K.options[name.text], section, true).allowed) emit(name, 'option_ignored', `option ${name.text} игнорируется в секции ${section}`, 'warning');
+  const args = K.option_args[name.text];
+  if (args === 'none' && words.length > 2) emit(words[2], 'too_many_args', `option ${name.text} не принимает аргументов`);
+  if (args === 'clf') {
+    if (words.length > 2 && words[2].text !== 'clf') emit(words[2], 'invalid_option_arg', `option ${name.text} принимает только «clf»`);
+    else if (words.length > 3) emit(words[3], 'too_many_args', `Лишний аргумент option ${name.text}`);
+  }
+}
+
+export function checkMode(section: string, words: RuleWord[], emit: RuleEmit): void {
+  if (words.length < 2) { emit(words[0], 'invalid_mode', 'У mode не указан режим (tcp или http)'); return; }
+  const value = words[1];
+  if (value.text === 'health') { emit(value, 'invalid_mode', 'mode health больше не поддерживается'); return; }
+  if (!has(K.modes, value.text)) {
+    const [base, n] = trailingPunct(value.text);
+    if (n > 0 && has(K.modes, base)) stray(emit, value, base, n);
+    else emit(value, 'invalid_mode', `Неизвестный режим «${value.text}» (tcp, http, log, spop)`);
+    return;
+  }
+  if (!sectionAllowed(K.modes[value.text], section, true).allowed) emit(value, 'invalid_mode', `mode ${value.text} недопустим в секции ${section}`);
+  else if (words.length > 2) emit(words[2], 'too_many_args', 'Лишний аргумент mode');
+}
+
+export function checkBalance(words: RuleWord[], emit: RuleEmit): void {
+  if (words.length < 2) { emit(words[0], 'invalid_balance', 'У balance не указан алгоритм'); return; }
+  const algo = words[1];
+  if (BALANCE.has(algo.text.split('(')[0])) return;
+  const [base, n] = trailingPunct(algo.text);
+  if (n > 0 && BALANCE.has(base)) stray(emit, algo, base, n);
+  else emit(algo, 'invalid_balance', `Неизвестный алгоритм balance «${algo.text}»`);
+}
+
+export function checkHashType(words: RuleWord[], emit: RuleEmit): void {
+  if (words.length < 2) { emit(words[0], 'invalid_hash_type', 'hash-type: укажите consistent или map-based'); return; }
+  for (let i = 1; i < words.length; i++) {
+    const w = words[i];
+    const allowed = HASH[i - 1];
+    if (!allowed) { emit(w, 'too_many_args', 'Лишний аргумент hash-type'); return; }
+    if (allowed.has(w.text)) continue;
+    const [base, n] = trailingPunct(w.text);
+    if (n > 0 && allowed.has(base)) stray(emit, w, base, n);
+    else emit(w, 'invalid_hash_type', `Неверный аргумент hash-type «${w.text}»`);
+    return;
+  }
+}
+
+export function checkLog(section: string, words: RuleWord[], emit: RuleEmit): void {
+  if (words.length < 2) { emit(words[0], 'log_missing_target', 'У log не указан адрес'); return; }
+  if (words[1].text === 'global' && section !== 'global') {
+    if (words.length > 2) emit(words[2], 'too_many_args', 'Лишний аргумент log global');
+    return;
+  }
+  let i = 2;
+  while (i < words.length && LOG_OPTIONS.has(words[i].text)) i += 2;
+  if (i >= words.length) { emit(words[words.length - 1], 'log_missing_facility', 'У log не указан facility (например local0)'); return; }
+  for (let n = 0; i + n < words.length; n++) {
+    const w = words[i + n];
+    if (n > 2) { emit(w, 'too_many_args', `Лишний аргумент log «${w.text}»`); return; }
+    const allowed = n === 0 ? LOG_FACILITIES : LOG_LEVELS;
+    if (w.text.includes('$') || allowed.has(w.text)) continue;
+    const [base, cut] = trailingPunct(w.text);
+    if (cut > 0 && allowed.has(base)) stray(emit, w, base, cut);
+    else emit(w, 'invalid_log', `Неизвестный ${n === 0 ? 'facility' : 'уровень'} log «${w.text}»`);
+    return;
+  }
+}
+
+function keywordArgs(words: RuleWord[], start: number, table: Record<string, number>, code: string, what: string, emit: RuleEmit, check?: (kw: string, value: RuleWord) => void): void {
+  for (let i = start; i < words.length;) {
+    const w = words[i];
+    const name = w.text.split('(')[0];
+    if (!has(table, name)) {
+      const [base, cut] = trailingPunct(w.text);
+      if (cut > 0 && has(table, base)) stray(emit, w, base, cut);
+      else emit(w, code, `Неизвестный параметр ${what} «${w.text}»`);
+      i++;
+      continue;
+    }
+    const n = table[name];
+    if (n < 0) {
+      i += 2;
+      while (i + 1 < words.length && (words[i].text === 'usesrc' || words[i].text === 'interface')) i += 2;
+      continue;
+    }
+    if (n > 0 && i + n >= words.length) { emit(w, 'missing_value', `У параметра «${w.text}» нет значения`); return; }
+    if (n > 0 && check) check(name, words[i + 1]);
+    i += 1 + n;
+  }
+}
+
+export function checkServerKeywords(words: RuleWord[], start: number, emit: RuleEmit): void {
+  keywordArgs(words, start, K.server, 'unknown_server_keyword', 'server', emit, (kw, value) => {
+    if (value.text.includes('$')) return;
+    if (SERVER_DURATION.has(kw)) {
+      if (!DURATION_RE.test(value.text)) emit(value, 'invalid_duration', `«${value.text}» — неверное время для ${kw} (пример: 5s, 500ms)`);
+    } else if (kw === 'fall' || kw === 'rise') {
+      if (!/^[1-9]\d*$/.test(value.text)) emit(value, 'invalid_number', `${kw} ожидает целое число ≥ 1`);
+    } else if (kw === 'weight') {
+      if (!/^\d+$/.test(value.text) || Number(value.text) > 256) emit(value, 'invalid_weight', 'weight — целое число 0–256');
+    }
+  });
+}
+
+export function checkBindKeywords(words: RuleWord[], start: number, emit: RuleEmit): void {
+  keywordArgs(words, start, K.bind, 'unknown_bind_keyword', 'bind', emit);
+}
+
+/** Bare trailing ',' or ';' after a plain-value directive (maxconn 100;). Returns the marker word or null. */
+export function strayTail(words: RuleWord[]): { word: RuleWord; punct: string } | null {
+  if (FREE_TEXT.has(words[0].text) || words.length < 2) return null;
+  const last = words[words.length - 1];
+  if (last.quoted || last.text.includes('%[') || /[{}]/.test(last.text)) return null;
+  const base = last.text.replace(/[,;]+$/, '');
+  if (base === last.text) return null;
+  return { word: punctWord(last, last.text.length - base.length), punct: last.text.slice(base.length) };
+}
diff --git a/frontend/src/features/haproxy-editor/haproxyModel.ts b/frontend/src/features/haproxy-editor/haproxyModel.ts
new file mode 100644
index 0000000..3230d23
--- /dev/null
+++ b/frontend/src/features/haproxy-editor/haproxyModel.ts
@@ -0,0 +1,401 @@
+// Pure haproxy.cfg helpers shared by the Monaco editor and node --test:
+// tokenizer, hover resolution, client-side formatter and fallback linter.
+// Only type-free runtime imports with explicit .ts extensions are allowed here.
+import {
+  argDocs, directiveDocs, DURATION_UNITS, GENERATED_NAME_DOC, keywordDocs, SECTION_KEYWORDS, sectionDocs,
+  type HAProxyDoc,
+} from './haproxyDocs.ts';
+import {
+  checkBalance, checkBindKeywords, checkHashType, checkLog, checkMode, checkOption, checkServerKeywords, checkTimeoutKind,
+  isProxySection, knownKeyword, LINT_SECTIONS, negatable, proxyKeywordAllowed, punctWord, strayTail, trailingPunct, unknownDirective,
+  type RuleEmit, type RuleWord,
+} from './haproxyLintRules.ts';
+
+export interface LineToken { text: string; start: number; end: number }
+
+export type LintSeverity = 'error' | 'warning';
+export interface LintIssue { line: number; column: number; end_column: number; severity: LintSeverity; code: string; message: string }
+export interface LintSection { type: string; name: string; line: number }
+export interface LintResult { valid: boolean; issues: LintIssue[]; listener_tcp_ports: number[]; sections: LintSection[] }
+
+export const MAX_CONFIG_BYTES = 512 * 1024;
+const SECTION_SET = new Set(SECTION_KEYWORDS);
+const NAMED_SECTIONS = new Set(['frontend', 'backend', 'listen', 'resolvers', 'peers', 'userlist', 'cache', 'program', 'ring', 'http-errors', 'mailers', 'log-forward']);
+const PROXY_SECTIONS = new Set(['frontend', 'backend', 'listen', 'defaults']);
+const CONDITIONALS = new Set(['.if', '.elif', '.else', '.endif', '.notice', '.warning', '.alert', '.diag']);
+const DURATION_RE = /^\d+(us|ms|s|m|h|d)?$/;
+const GENERATED_RE = /^nf_[a-z0-9_]+$/i;
+
+/** Splits one line into whitespace-separated words; stops at an unquoted #. */
+export function tokenizeLine(line: string): LineToken[] {
+  const tokens: LineToken[] = [];
+  let i = 0;
+  while (i < line.length) {
+    while (i < line.length && /\s/.test(line[i])) i++;
+    if (i >= line.length || line[i] === '#') break;
+    const start = i;
+    let quote = '';
+    while (i < line.length) {
+      const ch = line[i];
+      if (quote) {
+        if (ch === '\\' && quote === '"') { i += 2; continue; }
+        if (ch === quote) quote = '';
+        i++; continue;
+      }
+      if (ch === '"' || ch === "'") { quote = ch; i++; continue; }
+      if (ch === '\\') { i += 2; continue; }
+      if (/\s/.test(ch)) break;
+      i++;
+    }
+    tokens.push({ text: line.slice(start, Math.min(i, line.length)), start, end: Math.min(i, line.length) });
+  }
+  return tokens;
+}
+
+function sectionAt(lines: string[], index: number): { type: string; line: number } | null {
+  for (let i = index; i >= 0; i--) {
+    const first = tokenizeLine(lines[i])[0]?.text.toLowerCase();
+    if (first && SECTION_SET.has(first)) return { type: first, line: i };
+  }
+  return null;
+}
+
+/** Longest known directive phrase at the start of a line («timeout connect», «option tcplog», «maxconn»). */
+export function directiveKey(words: string[]): { key: string; length: number } | null {
+  const lower = words.map((w) => w.toLowerCase());
+  for (let length = Math.min(3, lower.length); length >= 1; length--) {
+    const key = lower.slice(0, length).join(' ');
+    if (directiveDocs[key]) return { key, length };
+  }
+  if (lower[0] === 'no' && lower[1] === 'option') return { key: 'no option', length: 2 };
+  return null;
+}
+
+export type HoverKind = 'section' | 'section-name' | 'directive' | 'argument' | 'keyword' | 'value' | 'generated' | 'fallback';
+export interface HoverResult {
+  title: string;
+  kind: HoverKind;
+  doc: HAProxyDoc;
+  /** Extra first line, e.g. «Значение `15m` = 15 минут». */
+  value?: string;
+  /** Section the hovered line belongs to. */
+  section?: string;
+  start: number;
+  end: number;
+}
+
+function describeValue(word: string): string | null {
+  const duration = /^(\d+)(us|ms|s|m|h|d)$/i.exec(word);
+  if (duration) return `Значение \`${word}\` = ${duration[1]} ${DURATION_UNITS[duration[2].toLowerCase()]}`;
+  if (/^\d+$/.test(word)) return `Значение \`${word}\``;
+  const size = /^(\d+)([kmg])$/i.exec(word);
+  if (size) return `Значение \`${word}\` = ${size[1]} ${{ k: 'тысяч', m: 'миллионов', g: 'миллиардов' }[size[2].toLowerCase() as 'k' | 'm' | 'g']}`;
+  if (/^(unix@|abns@)?\//.test(word)) return `Путь \`${word}\``;
+  const address = parseAddress(word);
+  if (address) return address.port ? `Адрес \`${address.host || '*'}\`, порт ${address.port}` : `Адрес \`${address.host}\``;
+  return null;
+}
+
+function parseAddress(word: string): { host: string; port: string } | null {
+  const plain = word.replace(/^(ipv4|ipv6|tcp|tcp4|tcp6)@/i, '');
+  const bracket = /^\[([0-9a-f:.]+)\](?::([\d-]+))?$/i.exec(plain);
+  if (bracket) return { host: bracket[1], port: bracket[2] ?? '' };
+  const v4 = /^(\d{1,3}(?:\.\d{1,3}){3}|\*)?(?:\/\d+)?(?::([\d-]+))?$/.exec(plain);
+  if (v4 && (v4[1] || v4[2])) return { host: v4[1] ?? '', port: v4[2] ?? '' };
+  if (/^[0-9a-f]*:[0-9a-f:]*:[0-9a-f.:]*$/i.test(plain)) {
+    const idx = plain.lastIndexOf(':');
+    return { host: plain.slice(0, idx), port: plain.slice(idx + 1) };
+  }
+  return null;
+}
+
+/** Splits `src,ipmask(32,64)` into its function/argument parts (addresses are kept whole). */
+function subParts(token: LineToken): LineToken[] {
+  if (!/[,()]/.test(token.text) || /^["']/.test(token.text)) return [token];
+  const parts: LineToken[] = [];
+  const re = /[^,()]+/g;
+  let match: RegExpExecArray | null;
+  while ((match = re.exec(token.text))) parts.push({ text: match[0], start: token.start + match.index, end: token.start + match.index + match[0].length });
+  return parts.length ? parts : [token];
+}
+
+/** Resolves the documentation shown for the character at (lineIndex, column), both 0-based. */
+export function resolveHover(lines: string[], lineIndex: number, column: number): HoverResult | null {
+  const line = lines[lineIndex] ?? '';
+  const tokens = tokenizeLine(line);
+  const index = tokens.findIndex((t) => column >= t.start && column < t.end);
+  if (index < 0) return null;
+  const words = tokens.map((t) => t.text);
+  const lower = words.map((w) => w.toLowerCase());
+  const token = tokens[index];
+  const section = sectionAt(lines, lineIndex)?.type;
+
+  if (SECTION_SET.has(lower[0])) {
+    if (index === 0) return { title: lower[0], kind: 'section', doc: sectionDocs[lower[0]], start: token.start, end: token.end };
+    if (index === 1) {
+      if (GENERATED_RE.test(words[1])) return { title: words[1], kind: 'generated', doc: GENERATED_NAME_DOC, section: lower[0], start: token.start, end: token.end };
+      return { title: words[1], kind: 'section-name', doc: { summary: `Имя секции ${lower[0]}. На него ссылаются use_backend, default_backend и статистика.`, syntax: sectionDocs[lower[0]].syntax }, section: lower[0], start: token.start, end: token.end };
+    }
+  }
+
+  const directive = directiveKey(words);
+  if (directive && index < directive.length) {
+    const t0 = tokens[0];
+    const tl = tokens[directive.length - 1];
+    return { title: directive.key, kind: 'directive', doc: directiveDocs[directive.key], section, start: t0.start, end: tl.end };
+  }
+
+  const parts = subParts(token);
+  const part = parts.find((p) => column >= p.start && column < p.end) ?? token;
+  const word = part.text.toLowerCase();
+  const prev = index > 0 ? lower[index - 1] : '';
+  const partIndex = parts.indexOf(part);
+  const range = { start: part.start, end: part.end };
+
+  if (GENERATED_RE.test(part.text)) return { title: part.text, kind: 'generated', doc: GENERATED_NAME_DOC, section, ...range };
+  if (keywordDocs[word] && !(directive && argDocs[directive.key]?.[word]) && !argDocs[lower[0]]?.[word]) {
+    return { title: word, kind: 'keyword', doc: keywordDocs[word], section, ...range };
+  }
+  // Value of an option that owns its own vocabulary: init-addr last,none / hash-key addr.
+  if (argDocs[prev]?.[word]) return { title: word, kind: 'argument', doc: argDocs[prev][word], section, value: `Значение опции \`${prev}\``, ...range };
+  const ownerDocs = (directive && argDocs[directive.key]) || argDocs[lower[0]];
+  if (ownerDocs?.[word] && (partIndex === 0 || lower[0] === 'balance' || lower[0] === 'stick-table')) {
+    return { title: word, kind: 'argument', doc: ownerDocs[word], section, ...range };
+  }
+  if (keywordDocs[word]) return { title: word, kind: 'keyword', doc: keywordDocs[word], section, ...range };
+
+  const valueLine = describeValue(part.text) ?? describeValue(token.text);
+  const ownerKey = directive?.key ?? lower[0];
+  if (valueLine) {
+    const optionDoc = ownerDocs?.[prev];
+    if (optionDoc) return { title: prev, kind: 'value', doc: optionDoc, value: valueLine, section, ...range };
+    const doc = directiveDocs[ownerKey];
+    if (doc) return { title: ownerKey, kind: 'value', doc, value: valueLine, section, ...range };
+    return null;
+  }
+  const doc = directive ? directiveDocs[directive.key] : undefined;
+  if (doc) return { title: directive!.key, kind: 'fallback', doc, value: `Аргумент \`${part.text}\``, section, ...range };
+  return null;
+}
+
+const KIND_LABEL: Record<HoverKind, string> = {
+  section: 'секция', 'section-name': 'имя секции', directive: 'директива', argument: 'опция', keyword: 'выражение', value: 'значение', generated: 'имя NodeFlow', fallback: 'аргумент',
+};
+
+export function hoverMarkdown(result: HoverResult): string {
+  const context = result.section && result.kind !== 'section' ? ` · ${result.section}` : '';
+  const out = [`**\`${result.title}\`** — ${KIND_LABEL[result.kind]}${context}`];
+  if (result.value) out.push(result.value);
+  out.push(result.doc.summary);
+  if (result.doc.syntax) out.push('```haproxy\n' + result.doc.syntax + '\n```');
+  if (result.doc.warning) out.push(result.doc.warning);
+  return out.join('\n\n');
+}
+
+/** Section keywords at column 0, everything else 4 spaces (+4 per .if level), no trailing spaces, max one blank line. */
+export function formatConfig(text: string): string {
+  const out: string[] = [];
+  let inSection = false;
+  let depth = 0;
+  let blank = false;
+  for (const raw of text.replace(/\r\n?/g, '\n').split('\n')) {
+    const body = raw.trim();
+    if (!body) { blank = out.length > 0; continue; }
+    if (blank) { out.push(''); blank = false; }
+    const first = tokenizeLine(body)[0]?.text.toLowerCase() ?? '';
+    const base = inSection ? 1 : 0;
+    if (SECTION_SET.has(first)) {
+      inSection = true; depth = 0;
+      out.push(body);
+      continue;
+    }
+    if (first === '.endif' || first === '.else' || first === '.elif') {
+      if (first === '.endif') depth = Math.max(0, depth - 1);
+      out.push(' '.repeat((base + Math.max(0, depth - (first === '.endif' ? 0 : 1))) * 4) + body);
+      continue;
+    }
+    out.push(' '.repeat((base + depth) * 4) + body);
+    if (first === '.if') depth++;
+  }
+  return out.length ? out.join('\n') + '\n' : '';
+}
+
+function issue(list: LintIssue[], line: number, token: LineToken | undefined, lineText: string, severity: LintSeverity, code: string, message: string) {
+  const start = token ? token.start : lineText.length - lineText.trimStart().length;
+  const end = token ? token.end : Math.max(start + 1, lineText.trimEnd().length);
+  list.push({ line, column: start + 1, end_column: end + 1, severity, code, message });
+}
+
+function validPort(value: string): boolean {
+  const range = /^(\d+)(?:-(\d+))?$/.exec(value);
+  if (!range) return false;
+  const low = Number(range[1]); const high = Number(range[2] ?? range[1]);
+  return low >= 1 && high <= 65535 && low <= high;
+}
+
+/** Token with HAProxy quoting removed (the raw range stays for markers). */
+function ruleWord(t: LineToken): RuleWord {
+  const quoted = /["'\\]/.test(t.text);
+  const text = quoted ? t.text.replace(/\\(.)|["']/g, (_m, ch: string | undefined) => ch ?? '') : t.text;
+  return { text, start: t.start, end: t.end, quoted };
+}
+
+/** Offline linter used when POST /config-lint is unavailable. */
+export function lintConfig(text: string): LintResult {
+  const issues: LintIssue[] = [];
+  const sections: LintSection[] = [];
+  const ports = new Set<number>();
+  const lines = text.replace(/\r\n?/g, '\n').split('\n');
+  const proxyNames = new Map<string, number>();
+  const backendRefs: { name: string; line: number; token: LineToken; text: string }[] = [];
+  const ifStack: number[] = [];
+  let current: { type: string; name: string; line: number; binds: number } | null = null;
+  let namedDefaults = false;
+  const finishSection = () => {
+    if (current && (current.type === 'frontend' || current.type === 'listen') && current.binds === 0) {
+      issues.push({ line: current.line, column: 1, end_column: current.type.length + 1, severity: 'warning', code: 'no_bind', message: `В ${current.type} «${current.name}» нет ни одного bind — секция не принимает соединения.` });
+    }
+  };
+  if (new TextEncoder().encode(text).length > MAX_CONFIG_BYTES) {
+    issues.push({ line: 1, column: 1, end_column: 2, severity: 'error', code: 'too_large', message: 'Конфиг больше 512 КиБ.' });
+  }
+  if (!text.trim()) issues.push({ line: 1, column: 1, end_column: 1, severity: 'error', code: 'empty', message: 'Конфиг пуст.' });
+
+  lines.forEach((lineText, i) => {
+    const lineNo = i + 1;
+    const tokens = tokenizeLine(lineText);
+    if (!tokens.length) return;
+    const lower = tokens.map((t) => t.text.toLowerCase());
+    const first = lower[0];
+    const indented = /^\s/.test(lineText);
+    const opens = lower.filter((w) => w === '{').length;
+    const closes = lower.filter((w) => w === '}').length;
+    if (opens !== closes) issue(issues, lineNo, undefined, lineText, 'error', 'unbalanced_braces', 'Непарные фигурные скобки { } в условии.');
+    for (const t of tokens) {
+      if (/^["']/.test(t.text) && (t.text.length < 2 || t.text[t.text.length - 1] !== t.text[0])) issue(issues, lineNo, t, lineText, 'error', 'unterminated_quote', 'Незакрытая кавычка.');
+    }
+
+    if (CONDITIONALS.has(first)) {
+      if (first === '.if') ifStack.push(lineNo);
+      else if (first === '.elif' || first === '.else') { if (!ifStack.length) issue(issues, lineNo, tokens[0], lineText, 'error', 'conditional_unbalanced', `${first} без открывающего .if.`); }
+      else if (first === '.endif') { if (!ifStack.pop()) issue(issues, lineNo, tokens[0], lineText, 'error', 'conditional_unbalanced', '.endif без открывающего .if.'); }
+      if ((first === '.if' || first === '.elif') && tokens.length < 2) issue(issues, lineNo, tokens[0], lineText, 'error', 'conditional_missing', `После ${first} нужно условие.`);
+      return;
+    }
+
+    if (LINT_SECTIONS.has(tokens[0].text)) {
+      finishSection();
+      const name = tokens[1]?.text ?? '';
+      if (indented) issue(issues, lineNo, tokens[0], lineText, 'warning', 'section_indent', `Секция ${first} должна начинаться с первой колонки.`);
+      if (NAMED_SECTIONS.has(first) && !name) issue(issues, lineNo, tokens[0], lineText, 'error', 'section_name_missing', `У секции ${first} должно быть имя.`);
+      if (first === 'global' && tokens.length > 1) issue(issues, lineNo, tokens[1], lineText, 'error', 'unexpected_argument', 'У секции global нет имени.');
+      if (name && PROXY_SECTIONS.has(first) && first !== 'defaults') {
+        const key = `${first === 'frontend' ? 'fe' : 'be'}:${name}`;
+        const listenKey = `${first === 'frontend' ? 'be' : 'fe'}:${name}`;
+        if (proxyNames.has(key) || (first === 'listen' && proxyNames.has(listenKey)) || proxyNames.has(`listen:${name}`)) {
+          issue(issues, lineNo, tokens[1], lineText, 'error', 'duplicate_proxy', `Имя «${name}» уже используется в строке ${proxyNames.get(key) ?? proxyNames.get(listenKey) ?? proxyNames.get(`listen:${name}`)}.`);
+        }
+        if (first === 'listen') { proxyNames.set(`listen:${name}`, lineNo); proxyNames.set(`fe:${name}`, lineNo); proxyNames.set(`be:${name}`, lineNo); }
+        else proxyNames.set(key, lineNo);
+      }
+      if (first === 'defaults') namedDefaults = Boolean(name) && !(name === 'from' && tokens.length === 3);
+      current = { type: first, name, line: lineNo, binds: 0 };
+      sections.push({ type: first, name, line: lineNo });
+      return;
+    }
+
+    if (!current) {
+      issue(issues, lineNo, tokens[0], lineText, 'error', 'outside_section', `«${tokens[0].text}» вне секции: сначала объявите global, defaults, frontend или backend.`);
+      return;
+    }
+    const section = current.type;
+    let words = tokens.map(ruleWord);
+    const emit: RuleEmit = (w, code, message, severity = 'error') => issue(issues, lineNo, { text: w.text, start: w.start, end: w.end }, lineText, severity, code, message);
+    // «no»/«default» modifiers shift the arguments like cfgparse.c does.
+    let modifier = '';
+    if ((words[0].text === 'no' || words[0].text === 'default') && words.length > 1) { modifier = words[0].text; words = words.slice(1); }
+    const kw = words[0];
+    const known = knownKeyword(section, kw.text);
+    if (!indented && !known && !modifier) {
+      const [base, n] = trailingPunct(kw.text);
+      if (n > 0 && knownKeyword(section, base)) emit(punctWord(kw, n), 'stray_punctuation', `Лишний символ «${kw.text.slice(base.length)}» после «${base}»`);
+      else issue(issues, lineNo, tokens[0], lineText, 'error', 'unknown_section', `Неизвестная секция «${tokens[0].text}».`);
+      return;
+    }
+    if (!indented) issue(issues, lineNo, tokens[0], lineText, 'warning', 'indentation', 'Директива внутри секции обычно пишется с отступом.');
+    if (!known) { unknownDirective(section, kw, emit); return; }
+    if (modifier && !negatable(section, kw.text)) { emit(kw, 'negation_not_supported', `Префикс «${modifier}» не поддерживается для «${kw.text}»`); return; }
+    if (isProxySection(section) && !proxyKeywordAllowed(section, namedDefaults, words, emit)) return;
+    const before = issues.length;
+    const proxy = isProxySection(section);
+    switch (kw.text) {
+      case 'option': if (proxy) checkOption(section, words, modifier, emit); break;
+      case 'mode': if (proxy) checkMode(section, words, emit); break;
+      case 'balance': if (proxy) checkBalance(words, emit); break;
+      case 'hash-type': if (proxy) checkHashType(words, emit); break;
+      case 'log': if ((proxy || section === 'global') && !modifier) checkLog(section, words, emit); break;
+      case 'stats': if (section === 'global' && words.length > 2 && words[1].text === 'socket') checkBindKeywords(words, 3, emit); break;
+      case 'default-server': checkServerKeywords(words, 1, emit); break;
+      case 'bind': if (words.length > 1) checkBindKeywords(words, 2, emit); break;
+      case 'server': if (['backend', 'listen', 'peers', 'ring'].includes(section) && words.length > 2) checkServerKeywords(words, 3, emit); break;
+      case 'server-template': if (['backend', 'listen'].includes(section) && words.length > 3) checkServerKeywords(words, 4, emit); break;
+    }
+    if (kw.text === 'timeout' && !checkTimeoutKind(section, words, emit)) return;
+    const tail = strayTail(words);
+    if (tail && !issues.slice(before).some((i) => i.line === lineNo && i.column <= tail.word.start + 1 && tail.word.start + 1 < i.end_column)) {
+      emit(tail.word, 'stray_punctuation', `Лишний символ «${tail.punct}» в конце строки`);
+    }
+
+    if (first === 'timeout' || first === 'hard-stop-after' || (first === 'tcp-request' && lower[1] === 'inspect-delay') || (first === 'hold' && current.type === 'resolvers') || (first === 'stats' && lower[1] === 'timeout')) {
+      const valueIndex = first === 'hard-stop-after' ? 1 : 2;
+      const value = tokens[valueIndex];
+      if (!value) issue(issues, lineNo, tokens[valueIndex - 1] ?? tokens[0], lineText, 'error', 'timeout_missing', 'Не указано значение времени, например 5s или 15m.');
+      else if (!DURATION_RE.test(value.text)) issue(issues, lineNo, value, lineText, 'error', 'timeout_format', `«${value.text}» — неверное время. Формат: число и единица us, ms, s, m, h или d (например 5s).`);
+    }
+
+    if (first === 'bind') {
+      current.binds++;
+      const addr = tokens[1];
+      if (!addr) issue(issues, lineNo, tokens[0], lineText, 'error', 'bind_address_missing', 'У bind не указан адрес и порт.');
+      else {
+        for (const piece of addr.text.split(',')) {
+          if (/^(unix@|abns@|fd@|sockpair@|\/|quic)/i.test(piece)) continue;
+          const parsed = parseAddress(piece);
+          if (!parsed || !parsed.port) { issue(issues, lineNo, addr, lineText, 'error', 'bind_port_missing', `В «${piece}» не указан порт (пример :443).`); continue; }
+          if (!validPort(parsed.port)) { issue(issues, lineNo, addr, lineText, 'error', 'port_range', `Порт «${parsed.port}» вне диапазона 1–65535.`); continue; }
+          if (current.type === 'frontend' || current.type === 'listen') {
+            const [low, high = low] = parsed.port.split('-').map(Number);
+            for (let p = low; p <= high && p - low < 1024; p++) ports.add(p);
+          }
+        }
+      }
+    }
+
+    if (first === 'server' || first === 'server-template') {
+      const addr = tokens[first === 'server' ? 2 : 3];
+      if (!addr && !(current.type === 'peers')) issue(issues, lineNo, tokens[1] ?? tokens[0], lineText, 'error', 'server_address_missing', 'У server не указан адрес.');
+      else if (addr && !/^(unix@|abns@|\/|\$)/i.test(addr.text)) {
+        const parsed = parseAddress(addr.text) ?? (/:([^:\]]+)$/.exec(addr.text) ? { host: '', port: /:([^:\]]+)$/.exec(addr.text)![1] } : null);
+        if (parsed?.port && !/^[+-]/.test(parsed.port) && !validPort(parsed.port)) issue(issues, lineNo, addr, lineText, 'error', 'port_range', `Порт «${parsed.port}» вне диапазона 1–65535.`);
+      }
+    }
+
+    if ((first === 'use_backend' || first === 'default_backend') && tokens[1] && !tokens[1].text.includes('%[')) {
+      backendRefs.push({ name: tokens[1].text, line: lineNo, token: tokens[1], text: lineText });
+    }
+    if ((first === 'use_backend' || first === 'default_backend') && !tokens[1]) issue(issues, lineNo, tokens[0], lineText, 'error', 'backend_missing', `У ${first} не указан backend.`);
+    if (first === 'use_backend' && tokens[1] && tokens.length > 2 && !['if', 'unless'].includes(lower[2])) issue(issues, lineNo, tokens[2], lineText, 'error', 'condition_keyword', 'После имени backend ожидается if или unless.');
+  });
+  finishSection();
+  for (const line of ifStack) issues.push({ line, column: 1, end_column: 1 + (lines[line - 1]?.length ?? 1), severity: 'error', code: 'conditional_unbalanced', message: '.if без закрывающего .endif.' });
+  for (const ref of backendRefs) {
+    if (!proxyNames.has(`be:${ref.name}`)) issue(issues, ref.line, ref.token, ref.text, 'error', 'unknown_backend', `Backend «${ref.name}» не объявлен.`);
+  }
+  issues.sort((a, b) => a.line - b.line || a.column - b.column);
+  return { valid: !issues.some((i) => i.severity === 'error'), issues, listener_tcp_ports: [...ports].sort((a, b) => a - b), sections };
+}
+
+/** Section kind for completion at a line (0-based). */
+export function sectionKindAt(lines: string[], lineIndex: number): string | null {
+  return sectionAt(lines, lineIndex)?.type ?? null;
+}
diff --git a/frontend/src/features/haproxy-editor/monacoSetup.ts b/frontend/src/features/haproxy-editor/monacoSetup.ts
new file mode 100644
index 0000000..ed179e0
--- /dev/null
+++ b/frontend/src/features/haproxy-editor/monacoSetup.ts
@@ -0,0 +1,258 @@
+// Local Monaco bundle for the haproxy.cfg editor. Loaded only by the lazy
+// HAProxy config page: no CDN, one editor worker, no bundled languages.
+// Curated subset of monaco-editor/esm/vs/editor/editor.all.js: only the
+// contributions this editor uses, to keep the lazy chunk small.
+import 'monaco-editor/esm/vs/editor/browser/coreCommands.js';
+import 'monaco-editor/esm/vs/editor/browser/widget/codeEditor/codeEditorWidget.js';
+import 'monaco-editor/esm/vs/editor/browser/widget/diffEditor/diffEditor.contribution.js';
+import 'monaco-editor/esm/vs/editor/contrib/bracketMatching/browser/bracketMatching.js';
+import 'monaco-editor/esm/vs/editor/contrib/clipboard/browser/clipboard.js';
+import 'monaco-editor/esm/vs/editor/contrib/comment/browser/comment.js';
+import 'monaco-editor/esm/vs/editor/contrib/contextmenu/browser/contextmenu.js';
+import 'monaco-editor/esm/vs/editor/contrib/cursorUndo/browser/cursorUndo.js';
+import 'monaco-editor/esm/vs/editor/contrib/find/browser/findController.js';
+import 'monaco-editor/esm/vs/editor/contrib/folding/browser/folding.js';
+import 'monaco-editor/esm/vs/editor/contrib/format/browser/formatActions.js';
+import 'monaco-editor/esm/vs/editor/contrib/gotoError/browser/gotoError.js';
+import 'monaco-editor/esm/vs/editor/contrib/hover/browser/hoverContribution.js';
+import 'monaco-editor/esm/vs/editor/contrib/indentation/browser/indentation.js';
+import 'monaco-editor/esm/vs/editor/contrib/linesOperations/browser/linesOperations.js';
+import 'monaco-editor/esm/vs/editor/contrib/multicursor/browser/multicursor.js';
+import 'monaco-editor/esm/vs/editor/contrib/suggest/browser/suggestController.js';
+import 'monaco-editor/esm/vs/editor/contrib/tokenization/browser/tokenization.js';
+import 'monaco-editor/esm/vs/editor/contrib/wordHighlighter/browser/wordHighlighter.js';
+import 'monaco-editor/esm/vs/editor/contrib/wordOperations/browser/wordOperations.js';
+import 'monaco-editor/esm/vs/editor/contrib/readOnlyMessage/browser/contribution.js';
+import 'monaco-editor/esm/vs/editor/common/standaloneStrings.js';
+import 'monaco-editor/esm/vs/base/browser/ui/codicons/codiconStyles.js';
+import 'monaco-editor/esm/vs/editor/standalone/browser/quickAccess/standaloneGotoLineQuickAccess.js';
+import 'monaco-editor/esm/vs/editor/standalone/browser/quickAccess/standaloneCommandsQuickAccess.js';
+import * as monaco from 'monaco-editor/esm/vs/editor/editor.api.js';
+import EditorWorker from 'monaco-editor/esm/vs/editor/editor.worker.js?worker';
+import { loader } from '@monaco-editor/react';
+import { argDocs, directiveDocs, keywordDocs, SECTION_KEYWORDS, sectionDocs, type HAProxyDoc } from './haproxyDocs.ts';
+import { formatConfig, hoverMarkdown, resolveHover, sectionKindAt, tokenizeLine } from './haproxyModel.ts';
+
+export const HAPROXY_LANGUAGE = 'haproxy';
+export const HAPROXY_THEME = 'nodeflow-dark';
+
+declare global {
+  interface Window { MonacoEnvironment?: monaco.Environment }
+}
+
+self.MonacoEnvironment = { getWorker: () => new EditorWorker() };
+loader.config({ monaco });
+
+const optionWords = [...new Set(Object.values(argDocs).flatMap((group) => Object.keys(group)))].filter((word) => /^[a-z][\w.-]*$/.test(word));
+
+function docMarkdown(title: string, doc: HAProxyDoc): string {
+  return [`**\`${title}\`**`, doc.summary, doc.syntax ? '```haproxy\n' + doc.syntax + '\n```' : '', doc.warning ?? ''].filter(Boolean).join('\n\n');
+}
+
+function registerLanguage() {
+  monaco.languages.register({ id: HAPROXY_LANGUAGE, extensions: ['.cfg'], aliases: ['HAProxy', 'haproxy'] });
+  monaco.languages.setLanguageConfiguration(HAPROXY_LANGUAGE, {
+    comments: { lineComment: '#' },
+    brackets: [['{', '}'], ['(', ')']],
+    autoClosingPairs: [{ open: '{', close: '}' }, { open: '(', close: ')' }, { open: '"', close: '"' }],
+    wordPattern: /[^\s,()#]+/,
+    indentationRules: { increaseIndentPattern: new RegExp(`^(${SECTION_KEYWORDS.join('|')})\\b.*$`), decreaseIndentPattern: /^\s*\.endif\b/ },
+  });
+  const sectionRe = SECTION_KEYWORDS.map((s) => s.replace('-', '\\-')).join('|');
+  monaco.languages.setMonarchTokensProvider(HAPROXY_LANGUAGE, {
+    ignoreCase: true,
+    optionWords,
+    tokenizer: {
+      root: [
+        [/^\s*#.*$/, 'comment'],
+        [new RegExp(`^(${sectionRe})(\\s+)([^\\s#]+)`), ['keyword.section', 'white', 'type.section']],
+        [new RegExp(`^(${sectionRe})(?=\\s|$)`), 'keyword.section'],
+        [/^(\s*)(\.(?:if|elif|else|endif|notice|warning|alert|diag))\b/, ['white', 'keyword.conditional']],
+        [/^(\s+)(timeout|option|no\s+option|tcp-request|tcp-response|http-request|http-response|stats|stick|tcp-check|http-check|filter|hold|rate-limit)(\s+)([a-z][\w.-]*)/, ['white', 'keyword.directive', 'white', 'keyword.directive']],
+        [/^(\s+)([a-z_][\w.-]*)/, ['white', 'keyword.directive']],
+        [/#.*$/, 'comment'],
+        [/"([^"\\]|\\.)*"?/, 'string'],
+        [/'[^']*'?/, 'string'],
+        [/\b(if|unless|or)\b/, 'keyword.condition'],
+        [/\|\||!/, 'operator'],
+        [/[{}]/, 'delimiter.bracket'],
+        [/[(),]/, 'delimiter'],
+        [/nf_\w+/, 'variable.generated'],
+        [/\[[0-9a-f:.]+\](:\d+(-\d+)?)?/, 'number.address'],
+        [/(ipv4@|ipv6@)?\d{1,3}(\.\d{1,3}){3}(\/\d+)?(:\d+(-\d+)?)?/, 'number.address'],
+        [/(ipv6@)?[0-9a-f]*::?[0-9a-f:]*:\d+\b/, 'number.address'],
+        [/:\d+(-\d+)?\b/, 'number.address'],
+        [/(unix@|abns@)?\/[^\s,#]*/, 'string.path'],
+        [/(req|res|ssl_fc|ssl_c|ssl_s|sc\d|sc_|src|dst|fc|bc)[._][\w.]+/, 'predefined'],
+        [/\b(src|dst|dst_port|src_port|always_true|always_false)\b/, 'predefined'],
+        [/-[a-z]\b/, 'attribute.flag'],
+        [/\d+(us|ms|s|m|h|d|k|g)?\b/, 'number'],
+        [/[a-z][\w.-]*/, { cases: { '@optionWords': 'attribute', '@default': 'identifier' } }],
+        [/\s+/, 'white'],
+      ],
+    },
+  } as monaco.languages.IMonarchLanguage);
+
+  monaco.languages.registerHoverProvider(HAPROXY_LANGUAGE, {
+    provideHover(model, position) {
+      const lines = model.getLinesContent();
+      const hover = resolveHover(lines, position.lineNumber - 1, position.column - 1);
+      if (!hover) return null;
+      return {
+        range: new monaco.Range(position.lineNumber, hover.start + 1, position.lineNumber, hover.end + 1),
+        contents: [{ value: hoverMarkdown(hover) }],
+      };
+    },
+  });
+
+  monaco.languages.registerCompletionItemProvider(HAPROXY_LANGUAGE, {
+    triggerCharacters: [' '],
+    provideCompletionItems(model, position) {
+      const line = model.getLineContent(position.lineNumber);
+      const before = line.slice(0, position.column - 1);
+      const word = model.getWordUntilPosition(position);
+      const range = new monaco.Range(position.lineNumber, word.startColumn, position.lineNumber, word.endColumn);
+      const kinds = monaco.languages.CompletionItemKind;
+      const item = (label: string, doc: HAProxyDoc, kind: monaco.languages.CompletionItemKind) => ({
+        label, kind, insertText: label, range, detail: doc.syntax, documentation: { value: docMarkdown(label, doc) },
+      });
+      if (/^\S*$/.test(before)) return { suggestions: Object.entries(sectionDocs).map(([key, doc]) => item(key, doc, kinds.Module)) };
+      const tokens = tokenizeLine(before);
+      const atFirstWord = /^\s+\S*$/.test(before);
+      if (atFirstWord) {
+        const section = sectionKindAt(model.getLinesContent(), position.lineNumber - 1);
+        return {
+          suggestions: Object.entries(directiveDocs)
+            .filter(([, doc]) => !section || !doc.sections || doc.sections.includes(section as never))
+            .map(([key, doc]) => item(key, doc, kinds.Keyword)),
+        };
+      }
+      const owner = tokens[0]?.text.toLowerCase() ?? '';
+      const group = argDocs[owner] ?? (owner === 'tcp-request' ? argDocs['tcp-request'] : undefined);
+      const suggestions = group ? Object.entries(group).map(([key, doc]) => item(key, doc, kinds.Property)) : [];
+      suggestions.push(...['if', 'unless', 'src', 'dst_port', 'req.ssl_sni'].map((key) => item(key, keywordDocs[key], kinds.Function)));
+      return { suggestions };
+    },
+  });
+
+  monaco.languages.registerDocumentFormattingEditProvider(HAPROXY_LANGUAGE, {
+    provideDocumentFormattingEdits(model) {
+      return [{ range: model.getFullModelRange(), text: formatConfig(model.getValue()) }];
+    },
+  });
+}
+
+const themeRules: monaco.editor.ITokenThemeRule[] = [
+  { token: 'keyword.section', foreground: '5fd38d', fontStyle: 'bold' },
+  { token: 'type.section', foreground: 'e5c07b', fontStyle: 'bold' },
+  { token: 'keyword.conditional', foreground: 'c678dd', fontStyle: 'bold' },
+  { token: 'keyword.directive', foreground: '61afef' },
+  { token: 'keyword.condition', foreground: 'c678dd' },
+  { token: 'operator', foreground: 'c678dd' },
+  { token: 'attribute', foreground: '56b6c2' },
+  { token: 'attribute.flag', foreground: 'd19a66' },
+  { token: 'predefined', foreground: 'e06c75' },
+  { token: 'number', foreground: 'd19a66' },
+  { token: 'number.address', foreground: 'b5cea8' },
+  { token: 'string', foreground: '98c379' },
+  { token: 'string.path', foreground: '98c379' },
+  { token: 'variable.generated', foreground: 'e5c07b' },
+  { token: 'comment', foreground: '6b7f78', fontStyle: 'italic' },
+  { token: 'delimiter.bracket', foreground: 'abb2bf' },
+  { token: 'identifier', foreground: 'd7dfdb' },
+];
+
+const themeColors: monaco.editor.IColors = {
+  'editor.background': '#07110f',
+  'editor.foreground': '#d7dfdb',
+  'editorLineNumber.foreground': '#4b5f58',
+  'editorLineNumber.activeForeground': '#9fb3ab',
+  'editor.lineHighlightBackground': '#0f1d18',
+  'editor.selectionBackground': '#1f4a33',
+  'editorGutter.background': '#07110f',
+  'minimap.background': '#081411',
+  'editorHoverWidget.background': '#0d1a16',
+  'editorHoverWidget.border': '#2c4a3d',
+  'editorHoverWidget.foreground': '#d7dfdb',
+  'editorSuggestWidget.background': '#0d1a16',
+  'editorSuggestWidget.border': '#2c4a3d',
+  'editorSuggestWidget.selectedBackground': '#13271d',
+  'editorWidget.background': '#0d1a16',
+  'editorWidget.border': '#2c4a3d',
+  'textCodeBlock.background': '#07110f',
+  'textLink.foreground': '#5fd38d',
+  'scrollbarSlider.background': '#5fd38d22',
+  'scrollbarSlider.hoverBackground': '#5fd38d44',
+  'editorError.foreground': '#ff6b6b',
+  'editorWarning.foreground': '#e5c07b',
+  'diffEditor.insertedTextBackground': '#2ea04333',
+  'diffEditor.removedTextBackground': '#f8514933',
+};
+
+/** Resolves a CSS color (any syntax, incl. var()/oklch) to #rrggbb[aa] via a canvas pixel. */
+function cssColor(expression: string, fallback: string): string {
+  try {
+    const probe = document.createElement('span');
+    probe.style.color = expression;
+    document.body.appendChild(probe);
+    const computed = getComputedStyle(probe).color;
+    probe.remove();
+    const canvas = document.createElement('canvas');
+    canvas.width = canvas.height = 1;
+    const context = canvas.getContext('2d', { willReadFrequently: true });
+    if (!context || !computed) return fallback;
+    context.fillStyle = computed;
+    context.fillRect(0, 0, 1, 1);
+    const [r, g, b, a] = context.getImageData(0, 0, 1, 1).data;
+    const hex = (value: number) => value.toString(16).padStart(2, '0');
+    return `#${hex(r)}${hex(g)}${hex(b)}${a < 255 ? hex(a) : ''}`;
+  } catch {
+    return fallback;
+  }
+}
+
+/** Re-tints the editor chrome with the active NodeFlow appearance theme. */
+function applyAppearance() {
+  const field = cssColor('var(--nf-field)', '#07110f');
+  const surface = cssColor('var(--nf-surface-soft)', '#0d1a16');
+  const raised = cssColor('var(--nf-surface-raised)', '#0f1d18');
+  const border = cssColor('var(--nf-border-strong)', '#2c4a3d');
+  const accent = cssColor('var(--nf-accent)', '#5fd38d');
+  const accentSoft = cssColor('var(--nf-accent-soft)', '#1f4a33');
+  const text = cssColor('var(--nf-text)', '#d7dfdb');
+  const muted = cssColor('var(--nf-text-tertiary)', '#4b5f58');
+  monaco.editor.defineTheme(HAPROXY_THEME, {
+    base: 'vs-dark',
+    inherit: true,
+    rules: [...themeRules, { token: 'keyword.section', foreground: accent.slice(1, 7), fontStyle: 'bold' }],
+    colors: {
+      ...themeColors,
+      'editor.background': field,
+      'editorGutter.background': field,
+      'editor.foreground': text,
+      'editorLineNumber.foreground': muted,
+      'editor.lineHighlightBackground': raised,
+      'editor.selectionBackground': accentSoft.length === 9 ? accentSoft.slice(0, 7) + '66' : accentSoft,
+      'minimap.background': field,
+      'editorHoverWidget.background': surface,
+      'editorHoverWidget.border': border,
+      'editorHoverWidget.foreground': text,
+      'editorSuggestWidget.background': surface,
+      'editorSuggestWidget.border': border,
+      'editorSuggestWidget.selectedBackground': raised,
+      'editorWidget.background': surface,
+      'editorWidget.border': border,
+      'textCodeBlock.background': field,
+      'textLink.foreground': accent,
+    },
+  });
+}
+
+let registered = false;
+export function setupHAProxyMonaco(): typeof monaco {
+  if (!registered) { registerLanguage(); registered = true; }
+  applyAppearance();
+  return monaco;
+}
+
+export { monaco };
diff --git a/frontend/src/features/node-detail/HAProxyConfiguration.tsx b/frontend/src/features/node-detail/HAProxyConfiguration.tsx
deleted file mode 100644
index 2087782..0000000
--- a/frontend/src/features/node-detail/HAProxyConfiguration.tsx
+++ /dev/null
@@ -1,126 +0,0 @@
-import { Alert, Button, Group, NumberInput, Select, SimpleGrid, Stack, Tabs, Text, Textarea, TextInput } from '@mantine/core';
-import { useEffect, useState } from 'react';
-import { useQuery } from '@tanstack/react-query';
-import { api, APIError } from '../../lib/api';
-import type { NodeRecord } from '../../lib/contracts';
-
-type Settings = { max_connections?: number; threads?: number; timeout_connect?: string; timeout_client?: string; timeout_server?: string };
-type Revision = { revision: number; config: string; note?: string; metadata: Record<string, unknown> };
-type ConfigState = { desired_revision: number | null; actual_revision: number | null; state: string; last_error?: string };
-
-export function HAProxyConfiguration({ node, demo, onSaved, onEditorState }: { node: NodeRecord; demo: boolean; onSaved: (node: NodeRecord) => void; onEditorState: (dirty: boolean, busy: boolean) => void }) {
-  const base = `/api/v1/nodes/${node.id}`;
-  const [settings, setSettings] = useState<Settings>((node.metadata?.haproxy_settings as Settings) ?? {});
-  const [config, setConfig] = useState('');
-  const [savedConfig, setSavedConfig] = useState('');
-  const [revision, setRevision] = useState<string | null>(null);
-  const [note, setNote] = useState('');
-  const [busy, setBusy] = useState(false);
-  const [error, setError] = useState('');
-  const [message, setMessage] = useState('');
-  const dirty = config !== savedConfig;
-  const settingsDirty = JSON.stringify(settings) !== JSON.stringify((node.metadata?.haproxy_settings as Settings) ?? {});
-  useEffect(() => { onEditorState(dirty || settingsDirty, busy); }, [dirty, settingsDirty, busy, onEditorState]);
-  const query = useQuery({
-    queryKey: ['haproxy-config', node.id], enabled: !demo,
-    queryFn: async () => {
-      const revisions = await api<Revision[]>(`${base}/config-revisions`);
-      const state = revisions.length ? await api<ConfigState>(`${base}/config-state`).catch((error: unknown) => {
-        if (error instanceof APIError && error.status === 404) return null;
-        throw error;
-      }) : null;
-      const active = revisions.find((r) => r.revision === state?.desired_revision)
-        ?? (state?.desired_revision ? await api<Revision>(`${base}/config-revisions/${state.desired_revision}`) : null);
-      return { revisions, state, active };
-    }, refetchInterval: 5000,
-  });
-  const state = query.data?.state;
-  const manual = query.data?.active?.metadata.source === 'advanced_editor';
-  useEffect(() => {
-    if (!dirty && !settingsDirty) return;
-    const warn = (event: BeforeUnloadEvent) => { event.preventDefault(); };
-    window.addEventListener('beforeunload', warn);
-    return () => window.removeEventListener('beforeunload', warn);
-  }, [dirty, settingsDirty]);
-  const run = async (action: () => Promise<void>) => {
-    setBusy(true); setError(''); setMessage('');
-    try { await action(); } catch (error) { setError(error instanceof Error ? error.message : 'Операция не выполнена'); }
-    finally { setBusy(false); }
-  };
-  const replace = async (action: () => Promise<void>) => {
-    if (dirty && !window.confirm('Заменить несохранённый текст конфигурации?')) return;
-    await run(action);
-  };
-  const loadRevision = async (value: string) => {
-    const loaded = await api<Revision>(`${base}/config-revisions/${value}`);
-    setConfig(loaded.config); setSavedConfig(loaded.config); setRevision(value); setNote(loaded.note ?? '');
-  };
-  const saveSettings = () => run(async () => {
-    // Read current metadata so opening this editor does not overwrite newer node settings.
-    const current = await api<NodeRecord>(base);
-    const updated = await api<NodeRecord>(base, { method: 'PUT', body: JSON.stringify({ name: current.name, address: current.address, metadata: { ...current.metadata, haproxy_settings: settings } }) });
-    onSaved(updated); setMessage(manual ? 'Параметры сохранены для следующей сборки из маршрутов. Ручной конфиг не изменён.' : (state?.desired_revision ? 'Параметры сохранены. Активная конфигурация из маршрутов будет обновлена агентом.' : 'Параметры сохранены для следующей сборки из маршрутов.'));
-    await query.refetch();
-  });
-  const generate = () => {
-    if (settingsDirty) { setError('Сначала сохраните параметры Global / defaults, чтобы они вошли в сборку.'); return; }
-    return replace(async () => {
-    const rendered = await api<{config: string}>(`${base}/render-config`, { method: 'POST' });
-    setConfig(rendered.config); setSavedConfig(''); setRevision(null); setNote('');
-    setMessage('Загружена сборка из сохранённых маршрутов и параметров. Текст можно редактировать и сохранить как ручную версию.');
-    });
-  };
-  const saveDraft = () => run(async () => {
-    const created = await api<Revision>(`${base}/config-revisions`, { method: 'POST', body: JSON.stringify({config, note, metadata: {source: 'advanced_editor'}}) });
-    setRevision(String(created.revision)); setSavedConfig(config); setMessage(`Версия ${created.revision} сохранена. Для отправки на ноду нажмите «Применить версию».`); await query.refetch();
-  });
-  const assign = () => run(async () => {
-    await api(`${base}/desired-revision`, {method: 'PUT', body: JSON.stringify({revision: Number(revision)})});
-    setMessage('Версия назначена. Агент проверит конфиг перед применением; результат появится ниже.'); await query.refetch();
-  });
-  const resume = async () => {
-    if (settingsDirty) { setError('Сначала сохраните параметры Global / defaults.'); return; }
-    if (!window.confirm('Вернуться к конфигурации из сохранённых маршрутов? Ручная версия останется в истории.')) return;
-    await replace(async () => {
-      const created = await api<Revision>(`${base}/generated-config`, {method: 'POST'});
-      setConfig(created.config); setSavedConfig(created.config); setRevision(String(created.revision)); setNote(created.note ?? '');
-      setMessage('Назначена конфигурация из маршрутов. Ожидается применение агентом.'); await query.refetch();
-    });
-  };
-  return <Stack>
-    {demo && <Alert>Демонстрация интерфейса. Сохранение и применение доступны при подключении к Panel API.</Alert>}
-    <Text size="sm">Режим: {manual ? 'Advanced — ручная конфигурация' : 'Сборка из маршрутов'}. Назначена: {state?.desired_revision ?? '—'} · Применена: {state?.actual_revision ?? '—'} · Статус: {state?.state ?? 'нет данных'}</Text>
-    {state?.last_error && <Alert color="red" title="Ошибка применения">{state.last_error}</Alert>}
-    {(error || query.error) && <Alert color="red">{error || query.error?.message}</Alert>}
-    {message && <Alert color="teal">{message}</Alert>}
-    <Tabs defaultValue="settings">
-      <Tabs.List><Tabs.Tab value="settings">Global / defaults</Tabs.Tab><Tabs.Tab value="advanced">Advanced</Tabs.Tab></Tabs.List>
-      <Tabs.Panel value="settings" pt="md"><Stack>
-        <Text size="sm" c="dimmed">Параметры HAProxy для всех маршрутов этой ноды. Пустые поля используют значения по умолчанию. Сохранение обновляет активную сборку из маршрутов.</Text>
-        <SimpleGrid cols={{base: 1, sm: 2}}>
-        <NumberInput label="Максимум соединений · maxconn" placeholder="Автоматически" min={1} max={10000000} allowDecimal={false} value={settings.max_connections || ''} onChange={(v) => setSettings({...settings, max_connections: typeof v === 'number' ? v : undefined})} />
-        <NumberInput label="Потоки · nbthread" placeholder="Автоматически" min={1} max={256} allowDecimal={false} value={settings.threads || ''} onChange={(v) => setSettings({...settings, threads: typeof v === 'number' ? v : undefined})} />
-        </SimpleGrid>
-        <SimpleGrid cols={{base: 1, sm: 3}}>
-        {(['connect', 'client', 'server'] as const).map((key) => <TextInput key={key} label={`timeout ${key}`} placeholder={key === 'connect' ? '5s' : '15m'} description="Положительное значение с единицей ms, s, m или h" value={settings[`timeout_${key}`] ?? ''} onChange={(e) => setSettings({...settings, [`timeout_${key}`]: e.currentTarget.value})} />)}
-        </SimpleGrid>
-        <Button disabled={demo || busy || query.isLoading || query.isError} loading={busy} onClick={saveSettings}>Сохранить параметры</Button>
-      </Stack></Tabs.Panel>
-      <Tabs.Panel value="advanced" pt="md"><Stack>
-        <Alert color="yellow">При применении ручной версии автоматическая публикация маршрутов блокируется до возврата к сборке из UI. Произвольный конфиг не синхронизируется обратно в формы маршрутов. Runtime-метрики, квоты и управление firewall зависят от структуры конфигурации.</Alert>
-        <Group>
-          <Button variant="default" disabled={demo || busy} onClick={generate}>Загрузить из UI</Button>
-          <Button variant="default" disabled={demo || busy || !state?.desired_revision} onClick={() => replace(() => loadRevision(String(state?.desired_revision)))}>Загрузить назначенную</Button>
-          <Button variant="default" disabled={demo || busy} onClick={resume}>Вернуться к сборке из UI</Button>
-        </Group>
-        <Select label="История конфигураций" placeholder="Загрузить версию" value={revision} data={(query.data?.revisions ?? []).map((r) => ({value: String(r.revision), label: `v${r.revision}${r.note ? ` · ${r.note}` : ''}`}))} disabled={demo || busy} onChange={(v) => { if (v) void replace(() => loadRevision(v)); }} />
-        <Textarea label="haproxy.cfg" disabled={busy} description={dirty ? 'Есть несохранённые изменения' : 'Сохранённый текст'} value={config} onChange={(e) => {setConfig(e.currentTarget.value);}} autosize minRows={18} maxRows={30} spellCheck={false} styles={{input: {fontFamily: 'monospace', fontSize: 13, tabSize: 4}}} />
-        <TextInput label="Комментарий к версии" maxLength={500} value={note} onChange={(e) => setNote(e.currentTarget.value)} />
-        <Group justify="space-between"><Text size="xs" c="dimmed">Лимит: 512 КиБ. Проверка HAProxy выполняется агентом перед применением.</Text><Group>
-          <Button variant="default" disabled={demo || busy || !config.trim() || new TextEncoder().encode(config).length > 524288} onClick={saveDraft}>Сохранить версию</Button>
-          <Button disabled={demo || busy || dirty || !revision} onClick={assign}>Применить версию</Button>
-        </Group></Group>
-      </Stack></Tabs.Panel>
-    </Tabs>
-  </Stack>;
-}
diff --git a/frontend/src/features/node-detail/nodeSettings.ts b/frontend/src/features/node-detail/nodeSettings.ts
index e96d535..60f8040 100644
--- a/frontend/src/features/node-detail/nodeSettings.ts
+++ b/frontend/src/features/node-detail/nodeSettings.ts
@@ -15,13 +15,75 @@ export function nodeHAProxyLogs(node: Pick<NodeRecord, 'metadata'> & { haproxy_l
 
 /**
  * PUT /api/v1/nodes/{id} body. metadata is sent back unchanged apart from the
- * logging key, so other node metadata (ports, traffic limits) is preserved.
+ * logging key (and haproxy_settings when given), so other node metadata
+ * (ports, traffic limits) is preserved.
  */
-export function nodeSettingsPayload(node: Pick<NodeRecord, 'metadata'>, name: string, address: string, haproxyLogs: boolean) {
+export function nodeSettingsPayload(node: Pick<NodeRecord, 'metadata'>, name: string, address: string, haproxyLogs: boolean, haproxySettings?: HAProxyTuning) {
   return {
     name,
     address,
-    metadata: { ...(node.metadata ?? {}), haproxy_logs: haproxyLogs },
+    metadata: { ...(node.metadata ?? {}), haproxy_logs: haproxyLogs, ...(haproxySettings ? { haproxy_settings: haproxySettings } : {}) },
     haproxy_logs: haproxyLogs,
   };
 }
+
+/** metadata.haproxy_settings; every field optional (= renderer default). */
+export interface HAProxyTuning {
+  max_connections?: number;
+  threads?: number;
+  timeout_connect?: string;
+  timeout_client?: string;
+  timeout_server?: string;
+}
+
+/** Form state of the «HAProxy» block: raw strings, empty = default. */
+export interface HAProxyTuningForm {
+  maxconn: string;
+  nbthread: string;
+  timeoutConnect: string;
+  timeoutClient: string;
+  timeoutServer: string;
+}
+
+const TIMEOUT_PATTERN = /^[1-9][0-9]{0,7}(ms|s|m|h)$/;
+
+export function haproxyTuningForm(node: Pick<NodeRecord, 'metadata'>): HAProxyTuningForm {
+  const raw = node.metadata?.haproxy_settings;
+  const value = (raw && typeof raw === 'object' ? raw : {}) as Record<string, unknown>;
+  const text = (key: string) => (typeof value[key] === 'string' ? value[key] as string : typeof value[key] === 'number' && value[key] ? String(value[key]) : '');
+  return {
+    maxconn: text('max_connections'),
+    nbthread: text('threads'),
+    timeoutConnect: text('timeout_connect'),
+    timeoutClient: text('timeout_client'),
+    timeoutServer: text('timeout_server'),
+  };
+}
+
+/** Field errors (Russian) keyed like the form; empty object = valid. */
+export function validateHAProxyTuning(form: HAProxyTuningForm): Partial<Record<keyof HAProxyTuningForm, string>> {
+  const errors: Partial<Record<keyof HAProxyTuningForm, string>> = {};
+  const integer = (key: 'maxconn' | 'nbthread', max: number) => {
+    const value = form[key].trim();
+    if (!value) return;
+    if (!/^\d+$/.test(value) || Number(value) < 1 || Number(value) > max) errors[key] = `Целое число 1–${max.toLocaleString('ru-RU')}`;
+  };
+  integer('maxconn', 10_000_000);
+  integer('nbthread', 256);
+  for (const key of ['timeoutConnect', 'timeoutClient', 'timeoutServer'] as const) {
+    const value = form[key].trim();
+    if (value && !TIMEOUT_PATTERN.test(value)) errors[key] = 'Формат: 5s, 15m';
+  }
+  return errors;
+}
+
+/** metadata.haproxy_settings value: empty fields omitted, {} resets to defaults. */
+export function haproxyTuningPayload(form: HAProxyTuningForm): HAProxyTuning {
+  const out: HAProxyTuning = {};
+  if (form.maxconn.trim()) out.max_connections = Number(form.maxconn.trim());
+  if (form.nbthread.trim()) out.threads = Number(form.nbthread.trim());
+  if (form.timeoutConnect.trim()) out.timeout_connect = form.timeoutConnect.trim();
+  if (form.timeoutClient.trim()) out.timeout_client = form.timeoutClient.trim();
+  if (form.timeoutServer.trim()) out.timeout_server = form.timeoutServer.trim();
+  return out;
+}
diff --git a/frontend/src/lib/api.ts b/frontend/src/lib/api.ts
index 59e4786..4aa4317 100644
--- a/frontend/src/lib/api.ts
+++ b/frontend/src/lib/api.ts
@@ -5,6 +5,8 @@ export class APIError extends Error {
     message: string,
     readonly status: number,
     readonly code?: string,
+    /** Parsed error body, for endpoints that return details (e.g. lint issues). */
+    readonly payload?: unknown,
   ) {
     super(message);
     this.name = 'APIError';
@@ -30,7 +32,7 @@ export async function api<T>(path: string, init: RequestInit = {}): Promise<T> {
     const body = payload as APIErrorPayload | null;
     const structured = typeof body?.error === 'object' ? body.error : null;
     const message = structured?.message ?? (typeof body?.error === 'string' ? body.error : `HTTP ${response.status}`);
-    throw new APIError(message, response.status, structured?.code);
+    throw new APIError(message, response.status, structured?.code, payload);
   }
   return payload as T;
 }
diff --git a/frontend/src/lib/contracts.ts b/frontend/src/lib/contracts.ts
index 160ee06..da9a038 100644
--- a/frontend/src/lib/contracts.ts
+++ b/frontend/src/lib/contracts.ts
@@ -484,3 +484,29 @@ export interface BootstrapJobResponse {
   failure_code?: string;
   exit_code?: number;
 }
+
+/** Immutable HAProxy configuration revision of a node. */
+export interface ConfigRevision {
+  id?: string;
+  node_id?: string;
+  revision: number;
+  config: string;
+  sha256?: string;
+  note?: string;
+  metadata: Record<string, unknown> | null;
+  created_by?: string;
+  created_at?: string;
+}
+
+/** Desired/actual revision convergence of a node. */
+export interface NodeConfigState {
+  node_id?: string;
+  desired_revision: number | null;
+  actual_revision: number | null;
+  state: string;
+  last_error?: string;
+  /** haproxy -c excerpt from Agents that report it; absent for older Agents. */
+  last_error_detail?: string;
+  last_report_at?: string;
+  updated_at?: string;
+}
diff --git a/frontend/src/lib/navigation.ts b/frontend/src/lib/navigation.ts
index 2fc7062..14e2c91 100644
--- a/frontend/src/lib/navigation.ts
+++ b/frontend/src/lib/navigation.ts
@@ -10,6 +10,7 @@ type RoutePreloader = {
 const routePreloaders: RoutePreloader[] = [
   { matches: (pathname) => pathname === '/nodes', load: () => import('../pages/NodesOverviewPage') },
   { matches: (pathname) => /^\/nodes\/[^/]+\/routes\/(?:new|[^/]+(?:\/edit)?)$/.test(pathname), load: () => import('../pages/RouteEditorPage') },
+  { matches: (pathname) => /^\/nodes\/[^/]+\/haproxy$/.test(pathname), load: () => import('../pages/HAProxyConfigPage') },
   { matches: (pathname) => /^\/nodes\/[^/]+$/.test(pathname), load: () => import('../pages/NodeDetailPage') },
   { matches: (pathname) => pathname === '/traffic', load: () => import('../pages/TrafficPage') },
   { matches: (pathname) => pathname === '/settings', load: () => import('../pages/SettingsPage') },
diff --git a/frontend/src/pages/HAProxyApplyErrorDetail.tsx b/frontend/src/pages/HAProxyApplyErrorDetail.tsx
new file mode 100644
index 0000000..0676ac7
--- /dev/null
+++ b/frontend/src/pages/HAProxyApplyErrorDetail.tsx
@@ -0,0 +1,29 @@
+import { Anchor, Code } from '@mantine/core';
+import type { ReactNode } from 'react';
+
+// Matches haproxy -c line references: "[haproxy.cfg:12]" or "line 12".
+const LINE_REF = /(\[haproxy\.cfg:(\d+)\]|\bline (\d+)\b)/g;
+
+/** Renders the haproxy -c excerpt reported by the Agent; line references reveal that line in the editor. */
+export function HAProxyApplyErrorDetail({ detail, onRevealLine }: { detail?: string; onRevealLine: (line: number) => void }) {
+  if (!detail) return null;
+  const parts: ReactNode[] = [];
+  let last = 0;
+  for (const match of detail.matchAll(LINE_REF)) {
+    const index = match.index ?? 0;
+    const line = Number(match[2] ?? match[3]);
+    parts.push(detail.slice(last, index));
+    parts.push(
+      <Anchor key={index} component="button" type="button" fz="inherit" ff="inherit" onClick={() => onRevealLine(line)}>
+        {match[0]}
+      </Anchor>,
+    );
+    last = index + match[0].length;
+  }
+  parts.push(detail.slice(last));
+  return (
+    <Code block mt="xs" style={{ whiteSpace: 'pre-wrap', wordBreak: 'break-word' }}>
+      {parts}
+    </Code>
+  );
+}
diff --git a/frontend/src/pages/HAProxyConfigPage.tsx b/frontend/src/pages/HAProxyConfigPage.tsx
new file mode 100644
index 0000000..336ed09
--- /dev/null
+++ b/frontend/src/pages/HAProxyConfigPage.tsx
@@ -0,0 +1,488 @@
+import { Alert, Badge, Button, Group, Modal, Select, Stack, Text, TextInput, Tooltip } from '@mantine/core';
+import { useQuery, useQueryClient } from '@tanstack/react-query';
+import { IconAlertTriangle, IconArrowBackUp, IconArrowLeft, IconCircleCheck, IconCircleX, IconDeviceFloppy, IconDownload, IconSend, IconWand } from '@tabler/icons-react';
+import Editor, { DiffEditor, type OnMount } from '@monaco-editor/react';
+import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+import { Link, useBeforeUnload, useBlocker, useLocation, useNavigate, useParams } from 'react-router-dom';
+import { LoginPanel } from '../components/LoginPanel';
+import { PageHeader } from '../components/PageHeader';
+import { StateView } from '../components/StateView';
+import { DEMO_HAPROXY_CONFIG } from '../features/haproxy-editor/demoConfig';
+import { formatConfig, lintConfig, MAX_CONFIG_BYTES, type LintIssue, type LintResult } from '../features/haproxy-editor/haproxyModel';
+import { HAPROXY_LANGUAGE, HAPROXY_THEME, monaco, setupHAProxyMonaco } from '../features/haproxy-editor/monacoSetup';
+import { isNodeDetailDemoMode } from '../features/node-detail/useNodeDetail';
+import { api, APIError, isUnauthorized } from '../lib/api';
+import type { ConfigRevision, NodeConfigState, NodeRecord } from '../lib/contracts';
+import { demoSuffix } from '../lib/navigation';
+import { HAProxyApplyErrorDetail } from './HAProxyApplyErrorDetail';
+import './haproxy-config.css';
+
+type Baseline = { text: string; revision: number | null };
+type LintView = LintResult & { checkedAt: Date; local: boolean };
+type ServerLint = { text: string; result: LintResult; checkedAt: Date };
+type Notice = { tone: 'teal' | 'red' | 'yellow'; text: string } | null;
+
+const MARKER_OWNER = 'haproxy-lint';
+const stateCopy: Record<string, string> = {
+  in_sync: 'применена', pending: 'ожидает агента', applying: 'применяется', applied: 'применена', failed: 'ошибка применения', drifted: 'расхождение', rolled_back: 'откат',
+};
+const stateColor: Record<string, string> = { in_sync: 'teal', applied: 'teal', pending: 'yellow', applying: 'yellow', failed: 'red', drifted: 'orange', rolled_back: 'orange' };
+
+function plural(count: number, one: string, few: string, many: string): string {
+  const mod10 = count % 10; const mod100 = count % 100;
+  if (mod10 === 1 && mod100 !== 11) return one;
+  if (mod10 >= 2 && mod10 <= 4 && (mod100 < 12 || mod100 > 14)) return few;
+  return many;
+}
+
+function errorText(error: unknown, fallback: string): string {
+  return error instanceof Error ? error.message : fallback;
+}
+
+function isManual(revision: ConfigRevision | undefined): boolean {
+  return revision?.metadata?.source === 'advanced_editor';
+}
+
+function lintIssuesFromPayload(payload: unknown): LintIssue[] | null {
+  const issues = (payload as { issues?: unknown } | null)?.issues;
+  return Array.isArray(issues) ? issues as LintIssue[] : null;
+}
+
+/**
+ * Server result for the same text wins; local errors the server did not
+ * report are kept, so the status never says «valid» while the browser linter
+ * sees an error.
+ */
+function mergeLint(local: LintResult, server: ServerLint | null, text: string, localAt: Date): LintView {
+  if (!server || server.text !== text) return { ...local, checkedAt: localAt, local: true };
+  const key = (issue: LintIssue) => `${issue.line}:${issue.column}:${issue.code}`;
+  const seen = new Set(server.result.issues.map(key));
+  const extra = local.issues.filter((issue) => issue.severity === 'error' && !seen.has(key(issue))
+    && !server.result.issues.some((other) => other.line === issue.line && other.severity === 'error'));
+  const issues = extra.length ? [...server.result.issues, ...extra].sort((a, b) => a.line - b.line || a.column - b.column) : server.result.issues;
+  return { ...server.result, issues, valid: !issues.some((issue) => issue.severity === 'error'), checkedAt: server.checkedAt, local: false };
+}
+
+export function HAProxyConfigPage() {
+  const { nodeId = '' } = useParams();
+  const navigate = useNavigate();
+  const location = useLocation();
+  const queryClient = useQueryClient();
+  const demo = isNodeDetailDemoMode();
+  const suffix = demo ? '?demo=1' : demoSuffix(location.search);
+  const base = `/api/v1/nodes/${encodeURIComponent(nodeId)}`;
+  const nodeURL = `/nodes/${encodeURIComponent(nodeId)}${suffix}`;
+
+  const editorRef = useRef<monaco.editor.IStandaloneCodeEditor | null>(null);
+  const [text, setText] = useState('');
+  const [baseline, setBaseline] = useState<Baseline | null>(null);
+  const [note, setNote] = useState('');
+  const [busy, setBusy] = useState('');
+  const [notice, setNotice] = useState<Notice>(null);
+  const [serverResult, setServerResult] = useState<ServerLint | null>(null);
+  const [serverLint, setServerLint] = useState(!demo);
+  const [applyOpened, setApplyOpened] = useState(false);
+  const [appliedText, setAppliedText] = useState<string | null>(null);
+  const [initError, setInitError] = useState('');
+  const bypassBlocker = useRef(false);
+
+  const nodeQuery = useQuery({
+    queryKey: ['haproxy-editor-node', nodeId, demo],
+    queryFn: async (): Promise<NodeRecord> => {
+      if (!demo) return api<NodeRecord>(base);
+      const { demoNodeBundles } = await import('../fixtures/demo');
+      return (demoNodeBundles.find((bundle) => bundle.node.id === nodeId) ?? demoNodeBundles[0]).node;
+    },
+  });
+  const stateQuery = useQuery({
+    queryKey: ['haproxy-config-state', nodeId],
+    enabled: !demo,
+    refetchInterval: 5000,
+    queryFn: () => api<NodeConfigState>(`${base}/config-state`).catch((error: unknown) => {
+      if (error instanceof APIError && error.status === 404) return null;
+      throw error;
+    }),
+  });
+  const revisionsQuery = useQuery({
+    queryKey: ['haproxy-config-revisions', nodeId],
+    enabled: !demo,
+    queryFn: () => api<ConfigRevision[]>(`${base}/config-revisions`),
+  });
+  const configState = stateQuery.data ?? null;
+  const revisions = useMemo(() => [...(revisionsQuery.data ?? [])].sort((a, b) => b.revision - a.revision), [revisionsQuery.data]);
+  const desiredRevision = revisions.find((revision) => revision.revision === configState?.desired_revision);
+  const manual = isManual(desiredRevision);
+
+  // Instant local pass on every keystroke; the server result replaces it when
+  // it arrives for the same text.
+  const localLint = useMemo(() => (baseline === null ? null : { result: lintConfig(text), at: new Date() }), [baseline, text]);
+  const lint = useMemo<LintView | null>(() => (localLint ? mergeLint(localLint.result, serverResult, text, localLint.at) : null), [localLint, serverResult, text]);
+
+  const dirty = baseline !== null && text !== baseline.text;
+  const needsSave = baseline !== null && (dirty || baseline.revision === null);
+  const errors = lint?.issues.filter((issue) => issue.severity === 'error').length ?? 0;
+  const warnings = (lint?.issues.length ?? 0) - errors;
+  const tooLarge = new TextEncoder().encode(text).length > MAX_CONFIG_BYTES;
+  const canEdit = !demo && baseline !== null && !busy;
+  const canSave = canEdit && needsSave && text.trim() !== '' && !tooLarge;
+  const alreadyDesired = !needsSave && baseline?.revision != null && baseline.revision === configState?.desired_revision;
+
+  // Replaces editor text while keeping the undo stack. Model edits work even
+  // while the editor is read-only (executeEdits would be ignored then).
+  const replaceText = useCallback((value: string) => {
+    const model = editorRef.current?.getModel();
+    if (model && model.getValue() !== value) {
+      model.pushStackElement();
+      model.pushEditOperations([], [{ range: model.getFullModelRange(), text: value }], () => null);
+      model.pushStackElement();
+    }
+    setText(value);
+  }, []);
+
+  const loadBaseline = useCallback((value: string, revision: number | null) => {
+    replaceText(value);
+    setBaseline({ text: value, revision });
+  }, [replaceText]);
+
+  // Initial content: desired revision, or a fresh render from routes.
+  const initialised = useRef(false);
+  useEffect(() => {
+    if (initialised.current) return;
+    if (demo) { initialised.current = true; loadBaseline(DEMO_HAPROXY_CONFIG, null); return; }
+    if (!stateQuery.isSuccess || !revisionsQuery.isSuccess) return;
+    initialised.current = true;
+    const desired = stateQuery.data?.desired_revision;
+    (async () => {
+      try {
+        if (desired) {
+          const revision = await api<ConfigRevision>(`${base}/config-revisions/${desired}`);
+          loadBaseline(revision.config, revision.revision);
+          setNote('');
+        } else {
+          const rendered = await api<{ config: string }>(`${base}/render-config`, { method: 'POST' });
+          loadBaseline(rendered.config, null);
+          setNotice({ tone: 'yellow', text: 'Назначенной версии нет. Загружена сборка из маршрутов — сохраните её, чтобы применить.' });
+        }
+      } catch (error) {
+        setInitError(errorText(error, 'Конфигурация не загрузилась'));
+      }
+    })();
+  }, [base, demo, loadBaseline, revisionsQuery.isSuccess, stateQuery.data, stateQuery.isSuccess]);
+
+  // Debounced server linter (full check incl. runtime names); stale responses
+  // are dropped, and a response only applies to the text it was computed for.
+  const lintSeq = useRef(0);
+  useEffect(() => {
+    if (baseline === null || !serverLint || demo) return;
+    const seq = ++lintSeq.current;
+    const config = text;
+    const timer = window.setTimeout(async () => {
+      try {
+        const result = await api<LintResult>(`${base}/config-lint`, { method: 'POST', body: JSON.stringify({ config }) });
+        if (seq !== lintSeq.current) return;
+        setServerResult({ text: config, checkedAt: new Date(), result: { ...result, issues: result.issues ?? [], listener_tcp_ports: result.listener_tcp_ports ?? [], sections: result.sections ?? [] } });
+      } catch (error) {
+        if (error instanceof APIError && (error.status === 404 || error.status === 405)) setServerLint(false);
+      }
+    }, 250);
+    return () => window.clearTimeout(timer);
+  }, [base, baseline, demo, serverLint, text]);
+
+  // Lint issues → Monaco markers (shown squiggly and at the top of the hover).
+  useEffect(() => {
+    const model = editorRef.current?.getModel();
+    if (!model) return;
+    const lines = model.getLineCount();
+    monaco.editor.setModelMarkers(model, MARKER_OWNER, (lint?.issues ?? []).map((issue) => {
+      const line = Math.min(Math.max(1, issue.line), lines);
+      const maxColumn = model.getLineMaxColumn(line);
+      const start = Math.min(Math.max(1, issue.column || 1), maxColumn);
+      const end = Math.max(start + 1, Math.min(issue.end_column || maxColumn, maxColumn));
+      return {
+        startLineNumber: line, startColumn: start, endLineNumber: line, endColumn: end === start ? maxColumn : end,
+        severity: issue.severity === 'error' ? monaco.MarkerSeverity.Error : monaco.MarkerSeverity.Warning,
+        message: issue.message, code: issue.code, source: lint?.local ? 'NodeFlow (локально)' : 'NodeFlow',
+      };
+    }));
+  }, [lint]);
+
+  const refreshAll = useCallback(async () => {
+    await Promise.all([
+      queryClient.invalidateQueries({ queryKey: ['haproxy-config-state', nodeId] }),
+      queryClient.invalidateQueries({ queryKey: ['haproxy-config-revisions', nodeId] }),
+      queryClient.invalidateQueries({ queryKey: ['node-detail', nodeId] }),
+    ]);
+  }, [nodeId, queryClient]);
+
+  const run = async (label: string, action: () => Promise<void>) => {
+    setBusy(label); setNotice(null);
+    try { await action(); } catch (error) { setNotice({ tone: 'red', text: errorText(error, 'Операция не выполнена') }); } finally { setBusy(''); }
+  };
+
+  /** Creates a revision from the editor text; null when the server rejected it by lint. */
+  const saveRevision = async (force: boolean): Promise<ConfigRevision | null> => {
+    const config = text;
+    try {
+      const created = await api<ConfigRevision>(`${base}/config-revisions`, {
+        method: 'POST',
+        body: JSON.stringify({ config, note: note.trim(), metadata: { source: 'advanced_editor' }, ...(force ? { force: true } : {}) }),
+      });
+      // The Panel may rewrite the generated header; keep the stored text as the baseline.
+      loadBaseline(created.config ?? config, created.revision);
+      setNote('');
+      await queryClient.invalidateQueries({ queryKey: ['haproxy-config-revisions', nodeId] });
+      return created;
+    } catch (error) {
+      if (error instanceof APIError && error.status === 422 && error.code === 'config_lint_failed') {
+        const issues = lintIssuesFromPayload(error.payload);
+        if (issues) setServerResult({ text: config, checkedAt: new Date(), result: { valid: false, issues, listener_tcp_ports: lint?.listener_tcp_ports ?? [], sections: lint?.sections ?? [] } });
+        const count = issues?.filter((issue) => issue.severity === 'error').length ?? 0;
+        setNotice({ tone: 'red', text: `Не сохранено: ${count || 'есть'} ${plural(count || 5, 'ошибка', 'ошибки', 'ошибок')} проверки. Исправьте их или нажмите «Всё равно сохранить».` });
+        return null;
+      }
+      throw error;
+    }
+  };
+
+  const save = (force = false) => {
+    if (!canSave) return;
+    void run(force ? 'force' : 'save', async () => {
+      const created = await saveRevision(force);
+      if (created) setNotice({ tone: 'teal', text: `Версия v${created.revision} сохранена. Нажмите «Применить на ноду», чтобы отправить её агенту.` });
+    });
+  };
+  const saveRef = useRef(save);
+  saveRef.current = save;
+
+  useEffect(() => {
+    const onKey = (event: KeyboardEvent) => {
+      if ((event.ctrlKey || event.metaKey) && !event.altKey && event.key.toLowerCase() === 's') {
+        event.preventDefault();
+        saveRef.current(false);
+      }
+    };
+    window.addEventListener('keydown', onKey);
+    return () => window.removeEventListener('keydown', onKey);
+  }, []);
+
+  const openApply = () => {
+    if (!canEdit || !text.trim()) return;
+    if (errors > 0 && !window.confirm(`В конфиге ${errors} ${plural(errors, 'ошибка', 'ошибки', 'ошибок')}, агент скорее всего отклонит его (haproxy -c). Всё равно применить?`)) return;
+    setAppliedText(null);
+    setApplyOpened(true);
+    const actual = configState?.actual_revision;
+    if (!actual) { setAppliedText(''); return; }
+    api<ConfigRevision>(`${base}/config-revisions/${actual}`)
+      .then((revision) => setAppliedText(revision.config))
+      .catch(() => setAppliedText(''));
+  };
+
+  const apply = () => run('apply', async () => {
+    let revision = baseline?.revision ?? null;
+    if (needsSave) {
+      // Errors were explicitly confirmed in openApply.
+      const created = await saveRevision(errors > 0);
+      if (!created) { setApplyOpened(false); return; }
+      revision = created.revision;
+    }
+    if (!revision) return;
+    await api(`${base}/desired-revision`, { method: 'PUT', body: JSON.stringify({ revision }) });
+    setApplyOpened(false);
+    setNotice({ tone: 'teal', text: `Версия v${revision} назначена. Агент проверит её через haproxy -c и применит мягким reload — статус обновится выше.` });
+    await refreshAll();
+  });
+
+  const confirmReplace = (question: string) => !dirty || window.confirm(question);
+
+  const loadFromRoutes = () => {
+    if (!confirmReplace('Заменить несохранённый текст сборкой из маршрутов?')) return;
+    void run('render', async () => {
+      const rendered = await api<{ config: string }>(`${base}/render-config`, { method: 'POST' });
+      loadBaseline(rendered.config, null);
+      setNotice({ tone: 'teal', text: 'Загружена сборка из текущих маршрутов и настроек ноды. Её можно отредактировать и сохранить как ручную версию.' });
+    });
+  };
+
+  const resumeGenerated = () => {
+    if (!window.confirm('Вернуться к сборке из маршрутов UI? Будет назначена конфигурация из текущих маршрутов, ручные версии останутся в истории.')) return;
+    void run('resume', async () => {
+      const created = await api<ConfigRevision>(`${base}/generated-config`, { method: 'POST' });
+      loadBaseline(created.config, created.revision);
+      setNotice({ tone: 'teal', text: `Назначена сборка из маршрутов (v${created.revision}). Изменения маршрутов в UI снова доступны.` });
+      await refreshAll();
+    });
+  };
+
+  const loadRevision = (value: string | null) => {
+    if (!value || Number(value) === baseline?.revision) return;
+    if (!confirmReplace(`Загрузить v${value}? Несохранённые изменения будут потеряны.`)) return;
+    void run('history', async () => {
+      const revision = await api<ConfigRevision>(`${base}/config-revisions/${value}`);
+      loadBaseline(revision.config, revision.revision);
+      setNotice({ tone: 'teal', text: `Загружена версия v${revision.revision}${revision.note ? ` · ${revision.note}` : ''}.` });
+    });
+  };
+
+  const format = () => {
+    const formatted = formatConfig(text);
+    if (formatted !== text) replaceText(formatted);
+    editorRef.current?.focus();
+  };
+
+  const jumpToFirstIssue = () => {
+    const first = lint?.issues.find((issue) => issue.severity === 'error') ?? lint?.issues[0];
+    const editor = editorRef.current;
+    if (!first || !editor) return;
+    editor.revealLineInCenter(first.line);
+    editor.setPosition({ lineNumber: first.line, column: Math.max(1, first.column) });
+    editor.focus();
+  };
+
+  // Leaving with unsaved text: router blocker + browser unload prompt.
+  const blocker = useBlocker(({ currentLocation, nextLocation }) => !bypassBlocker.current && dirty && currentLocation.pathname !== nextLocation.pathname);
+  useBeforeUnload((event) => {
+    if (!dirty) return;
+    event.preventDefault();
+    event.returnValue = '';
+  });
+
+  const textRef = useRef(text);
+  textRef.current = text;
+  const onMount: OnMount = (editor) => {
+    editorRef.current = editor;
+    // Text loaded before Monaco finished mounting.
+    if (textRef.current) editor.setValue(textRef.current);
+  };
+
+  if (nodeQuery.isError && isUnauthorized(nodeQuery.error)) return <LoginPanel onSuccess={() => { void nodeQuery.refetch(); }} />;
+  const node = nodeQuery.data;
+  const loadError = initError || (stateQuery.error ? errorText(stateQuery.error, '') : '') || (revisionsQuery.error ? errorText(revisionsQuery.error, '') : '');
+  if (loadError && baseline === null) {
+    return <main className="nf-page"><StateView title="Конфигурация не загрузилась" description={loadError} tone="error" action={<Button variant="default" onClick={() => navigate(nodeURL)}>К ноде</Button>} /></main>;
+  }
+
+  const statusText = !lint
+    ? 'Проверка…'
+    : errors || warnings
+      ? `${lint.checkedAt.toLocaleTimeString('ru-RU')} | ${[errors ? `${errors} ${plural(errors, 'ошибка', 'ошибки', 'ошибок')}` : '', warnings ? `${warnings} ${plural(warnings, 'предупреждение', 'предупреждения', 'предупреждений')}` : ''].filter(Boolean).join(', ')}`
+      : `${lint.checkedAt.toLocaleTimeString('ru-RU')} | Конфиг валиден`;
+  const statusTone = !lint ? 'is-pending' : errors ? 'is-error' : warnings ? 'is-warning' : 'is-valid';
+  const history = revisions.map((revision) => ({
+    value: String(revision.revision),
+    label: [
+      `v${revision.revision}`,
+      isManual(revision) ? 'ручной' : 'из маршрутов',
+      revision.revision === configState?.desired_revision ? 'назначена' : '',
+      revision.revision === configState?.actual_revision ? 'применена' : '',
+      revision.note ?? '',
+    ].filter(Boolean).join(' · '),
+  }));
+
+  return (
+    <main className="nf-page nf-haproxy-editor-page">
+      <PageHeader
+        breadcrumb={<><Link to={`/nodes${suffix}`}>Ноды</Link><span>/</span><Link to={nodeURL}>{node?.name ?? nodeId}</Link><span>/</span><span aria-current="page">HAProxy</span></>}
+        backAction={<Button variant="subtle" color="gray" px={6} onClick={() => navigate(nodeURL)} aria-label="Назад к ноде"><IconArrowLeft size={20} /></Button>}
+        title={`Конфигурация HAProxy${node ? ` · ${node.name}` : ''}`}
+        badge={<Badge variant="light" color={manual ? 'orange' : 'teal'}>{manual ? 'Ручной конфиг' : 'Сборка из маршрутов'}</Badge>}
+        meta={<>
+          {node && <code>{node.address}</code>}
+          {!demo && <span className="nf-haproxy-editor__revisions">
+            Назначена {configState?.desired_revision ? `v${configState.desired_revision}` : '—'} · Применена {configState?.actual_revision ? `v${configState.actual_revision}` : '—'} · <Text span inherit c={stateColor[configState?.state ?? ''] ?? 'dimmed'}>{configState ? stateCopy[configState.state] ?? configState.state : 'нет данных'}</Text>
+          </span>}
+        </>}
+      />
+
+      {demo && <Alert color="yellow" mb="sm">Демонстрация: показан пример конфигурации только для чтения. Сохранение и применение доступны при подключении к Panel API.</Alert>}
+      {configState?.last_error && <Alert color="red" mb="sm" icon={<IconAlertTriangle size={18} />} title="Ошибка применения на ноде">{configState.last_error}<HAProxyApplyErrorDetail detail={configState.last_error_detail} onRevealLine={(line) => { const editor = editorRef.current; if (!editor) return; editor.revealLineInCenter(line); editor.setPosition({ lineNumber: line, column: 1 }); editor.focus(); }} /></Alert>}
+      {notice && <Alert color={notice.tone} mb="sm" withCloseButton onClose={() => setNotice(null)}>{notice.text}</Alert>}
+
+      <section className="nf-haproxy-editor">
+        <div className={`nf-haproxy-editor__status ${statusTone}`}>
+          <button type="button" onClick={jumpToFirstIssue} disabled={!lint?.issues.length} title={lint?.issues.length ? 'Перейти к первой проблеме' : undefined}>
+            {errors ? <IconCircleX size={16} /> : warnings ? <IconAlertTriangle size={16} /> : <IconCircleCheck size={16} />}
+            <span>{statusText}</span>
+          </button>
+          <Group gap={8} wrap="nowrap">
+            {lint?.local && !demo && <Tooltip label={serverLint ? 'Показана мгновенная проверка в браузере, проверка на сервере выполняется' : 'Проверка на сервере недоступна — используется проверка в браузере'}><Badge variant="outline" color="gray">локальная проверка</Badge></Tooltip>}
+            {!!lint?.listener_tcp_ports.length && <Badge variant="light" color="gray" className="nf-haproxy-editor__ports">Порты: {lint.listener_tcp_ports.join(', ')}</Badge>}
+            {dirty && <Badge variant="light" color="yellow">Есть несохранённые изменения</Badge>}
+          </Group>
+        </div>
+        <div className="nf-haproxy-editor__monaco">
+          <Editor
+            language={HAPROXY_LANGUAGE}
+            theme={HAPROXY_THEME}
+            defaultValue=""
+            beforeMount={() => { setupHAProxyMonaco(); }}
+            onMount={onMount}
+            onChange={(value) => setText(value ?? '')}
+            loading={<div className="nf-route-loader" aria-label="Загрузка редактора" />}
+            options={{
+              readOnly: demo || baseline === null,
+              fontFamily: 'ui-monospace, SFMono-Regular, Menlo, Consolas, monospace',
+              fontSize: 13,
+              tabSize: 4,
+              insertSpaces: true,
+              minimap: { enabled: true },
+              wordWrap: 'off',
+              automaticLayout: true,
+              scrollBeyondLastLine: false,
+              renderWhitespace: 'selection',
+              fixedOverflowWidgets: true,
+              hover: { enabled: true, delay: 250, sticky: true },
+              quickSuggestions: { other: true, comments: false, strings: false },
+              padding: { top: 8 },
+            }}
+          />
+        </div>
+        <div className="nf-haproxy-editor__toolbar">
+          <Group gap={8} wrap="wrap">
+            <Button leftSection={<IconDeviceFloppy size={16} />} disabled={!canSave} loading={busy === 'save'} onClick={() => save(false)}>Сохранить</Button>
+            {errors > 0 && <Button color="red" variant="light" disabled={!canSave} loading={busy === 'force'} onClick={() => save(true)}>Всё равно сохранить</Button>}
+            <Button variant="default" leftSection={<IconWand size={16} />} disabled={demo || baseline === null || !!busy} onClick={format}>Форматировать</Button>
+            <TextInput className="nf-haproxy-editor__note" placeholder="Комментарий" aria-label="Комментарий к версии" maxLength={500} value={note} disabled={!canEdit} onChange={(event) => setNote(event.currentTarget.value)} />
+            <span className="nf-haproxy-editor__divider" />
+            <Tooltip label={alreadyDesired ? 'Эта версия уже назначена ноде' : needsSave ? 'Сохранит текст новой версией и назначит её ноде' : 'Назначить версию ноде'}>
+              <Button color="teal" variant="filled" leftSection={<IconSend size={16} />} disabled={!canEdit || !text.trim() || tooLarge || alreadyDesired} loading={busy === 'apply'} onClick={openApply}>Применить на ноду</Button>
+            </Tooltip>
+          </Group>
+          <Group gap={8} wrap="wrap" className="nf-haproxy-editor__toolbar-right">
+            <Select className="nf-haproxy-editor__history" placeholder="История" aria-label="История версий" data={history} value={baseline?.revision != null ? String(baseline.revision) : null} onChange={loadRevision} disabled={!canEdit || !history.length} searchable nothingFoundMessage="Нет версий" comboboxProps={{ width: 360, position: 'top-end' }} />
+            <Button variant="default" leftSection={<IconDownload size={16} />} disabled={!canEdit} loading={busy === 'render'} onClick={loadFromRoutes}>Загрузить из маршрутов</Button>
+            <Tooltip label={manual ? 'Назначить конфиг из текущих маршрутов' : 'Уже используется сборка из маршрутов'}>
+              <Button variant="default" leftSection={<IconArrowBackUp size={16} />} disabled={!canEdit || !manual} loading={busy === 'resume'} onClick={resumeGenerated}>Вернуться к сборке из UI</Button>
+            </Tooltip>
+          </Group>
+        </div>
+        {tooLarge && <Text size="xs" c="red" mt={6}>Конфиг больше 512 КиБ — сохранение невозможно.</Text>}
+      </section>
+
+      <Modal opened={applyOpened} onClose={() => !busy && setApplyOpened(false)} title="Применить конфигурацию на ноду?" size="90%" closeOnClickOutside={!busy} classNames={{ content: 'nf-dialog', header: 'nf-dialog__header', body: 'nf-dialog__body' }}>
+        <Stack gap="sm">
+          <Text size="sm" c="dimmed">
+            Слева — {configState?.actual_revision ? `применённая v${configState.actual_revision}` : 'на ноде ещё нет применённой версии'}, справа — {needsSave ? 'текст из редактора (будет сохранён новой версией)' : `v${baseline?.revision}`}.
+          </Text>
+          <div className="nf-haproxy-editor__diff">
+            {appliedText === null
+              ? <div className="nf-route-loader" aria-label="Загрузка применённой версии" />
+              : <DiffEditor original={appliedText} modified={text} language={HAPROXY_LANGUAGE} theme={HAPROXY_THEME} originalModelPath={`inmemory://nodeflow/${nodeId}/applied.cfg`} modifiedModelPath={`inmemory://nodeflow/${nodeId}/pending.cfg`} keepCurrentOriginalModel keepCurrentModifiedModel beforeMount={() => { setupHAProxyMonaco(); }} options={{ readOnly: true, originalEditable: false, renderSideBySide: true, minimap: { enabled: false }, fontSize: 13, automaticLayout: true, scrollBeyondLastLine: false }} />}
+          </div>
+          <Alert color="yellow" icon={<IconAlertTriangle size={18} />}>Пока активен ручной конфиг, изменения маршрутов в UI блокируются (409). Агент проверит конфиг через haproxy -c перед применением.</Alert>
+          {errors > 0 && <Alert color="red">В конфиге {errors} {plural(errors, 'ошибка', 'ошибки', 'ошибок')} проверки — агент скорее всего отклонит его. Версия будет сохранена принудительно.</Alert>}
+          <Group justify="flex-end">
+            <Button variant="default" disabled={!!busy} onClick={() => setApplyOpened(false)}>Отмена</Button>
+            <Button color="teal" leftSection={<IconSend size={16} />} loading={busy === 'apply'} onClick={apply}>{needsSave ? 'Сохранить и применить' : 'Применить'}</Button>
+          </Group>
+        </Stack>
+      </Modal>
+
+      <Modal opened={blocker.state === 'blocked'} onClose={() => blocker.state === 'blocked' && blocker.reset()} title="Выйти без сохранения?" size="sm" classNames={{ content: 'nf-dialog', header: 'nf-dialog__header', body: 'nf-dialog__body' }}>
+        <div className="nf-confirm-dialog"><p>Несохранённые изменения конфигурации будут потеряны. Нода не изменится.</p><div>
+          <Button variant="default" onClick={() => blocker.state === 'blocked' && blocker.reset()}>Остаться</Button>
+          <Button color="red" onClick={() => { bypassBlocker.current = true; if (blocker.state === 'blocked') blocker.proceed(); }}>Выйти</Button>
+        </div></div>
+      </Modal>
+    </main>
+  );
+}
diff --git a/frontend/src/pages/NodeDetailPage.tsx b/frontend/src/pages/NodeDetailPage.tsx
index c6c55a7..719f08e 100644
--- a/frontend/src/pages/NodeDetailPage.tsx
+++ b/frontend/src/pages/NodeDetailPage.tsx
@@ -1,17 +1,16 @@
-import { ActionIcon, Alert, Button, Group, Menu, Modal, Skeleton, Stack, Switch, Text, TextInput } from '@mantine/core';
+import { ActionIcon, Alert, Button, Group, Menu, Modal, NumberInput, Skeleton, Stack, Switch, Text, TextInput } from '@mantine/core';
 import { useQueryClient } from '@tanstack/react-query';
-import { IconDots, IconEdit, IconInfoCircle, IconPlus, IconPower, IconRefresh, IconServerCog, IconSettings, IconTrash } from '@tabler/icons-react';
-import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+import { IconCode, IconDots, IconEdit, IconInfoCircle, IconPlus, IconPower, IconRefresh, IconServerCog, IconSettings, IconTrash } from '@tabler/icons-react';
+import { useEffect, useMemo, useRef, useState } from 'react';
 import { Link, useLocation, useNavigate, useParams } from 'react-router-dom';
 import { LoginPanel } from '../components/LoginPanel';
 import { PageHeader } from '../components/PageHeader';
 import { RetryButton, StateView } from '../components/StateView';
 import { Surface } from '../components/Surface';
-import { HAProxyConfiguration } from '../features/node-detail/HAProxyConfiguration';
 import { NodeKpiGrid } from '../features/node-detail/NodeKpiGrid';
 import { NodeOperationalPanels } from '../features/node-detail/NodeOperationalPanels';
 import { NodeRoutesTable } from '../features/node-detail/NodeRoutesTable';
-import { nodeHAProxyLogs, nodeSettingsPayload } from '../features/node-detail/nodeSettings';
+import { haproxyTuningForm, haproxyTuningPayload, nodeHAProxyLogs, nodeSettingsPayload, validateHAProxyTuning, type HAProxyTuningForm } from '../features/node-detail/nodeSettings';
 import { agentReleasesQueryKey } from '../lib/polling';
 import { isNodeDetailDemoMode, useNodeDetail, type NodeDetailData } from '../features/node-detail/useNodeDetail';
 import { AddNodeDialog } from '../features/nodes/AddNodeDialog';
@@ -60,14 +59,12 @@ export function NodeDetailPage() {
   const [updateOverride, setUpdateOverride] = useState<NodeAgentUpdateState | null>(null);
   const [nodeOverride, setNodeOverride] = useState<NodeRecord | null>(null);
   const [nodeSettingsOpened, setNodeSettingsOpened] = useState(false);
-  const [configOpened, setConfigOpened] = useState(false);
-  const [configDirty, setConfigDirty] = useState(false);
-  const [configBusy, setConfigBusy] = useState(false);
-  const onConfigEditorState = useCallback((dirty: boolean, busy: boolean) => { setConfigDirty(dirty); setConfigBusy(busy); }, []);
   const [reinstallOpened, setReinstallOpened] = useState(false);
   const [nodeName, setNodeName] = useState('');
   const [nodeAddress, setNodeAddress] = useState('');
   const [nodeHAProxyLogsOn, setNodeHAProxyLogsOn] = useState(true);
+  const [nodeTuning, setNodeTuning] = useState<HAProxyTuningForm>({ maxconn: '', nbthread: '', timeoutConnect: '', timeoutClient: '', timeoutServer: '' });
+  const [nodeTuningTouched, setNodeTuningTouched] = useState(false);
   const [nodeEditBusy, setNodeEditBusy] = useState(false);
   const [nodeEditError, setNodeEditError] = useState('');
   const [nodeDeleteOpened, setNodeDeleteOpened] = useState(false);
@@ -144,11 +141,14 @@ export function NodeDetailPage() {
   const haproxyControl = haproxyOverride ?? bundle.operational?.haproxy_control;
   const haproxyEnabled = haproxyControl?.desired_enabled !== false;
   const displayStatus = !haproxyEnabled && status !== 'offline' ? 'stopped' : status;
+  const tuningErrors = validateHAProxyTuning(nodeTuning);
 
   const openNodeSettings = () => {
     setNodeName(node.name);
     setNodeAddress(node.address);
     setNodeHAProxyLogsOn(nodeHAProxyLogs(node));
+    setNodeTuning(haproxyTuningForm(node));
+    setNodeTuningTouched(false);
     setNodeEditError('');
     setNodeSettingsOpened(true);
   };
@@ -189,14 +189,22 @@ export function NodeDetailPage() {
       setNodeEditError('Укажите название и IP-адрес ноды.');
       return;
     }
+    setNodeTuningTouched(true);
+    if (Object.keys(validateHAProxyTuning(nodeTuning)).length) {
+      setNodeEditError('Исправьте параметры HAProxy.');
+      return;
+    }
+    const tuning = haproxyTuningPayload(nodeTuning);
     setNodeEditBusy(true);
     setNodeEditError('');
     try {
+      // Re-read the node so metadata written elsewhere since the page loaded is kept.
+      const current = demo ? node : await api<NodeRecord>(`/api/v1/nodes/${nodeId}`);
       const updated = demo
-        ? { ...node, ...nodeSettingsPayload(node, name, address, nodeHAProxyLogsOn), updated_at: new Date().toISOString() }
+        ? { ...node, ...nodeSettingsPayload(node, name, address, nodeHAProxyLogsOn, tuning), updated_at: new Date().toISOString() }
         : await api<NodeRecord>(`/api/v1/nodes/${nodeId}`, {
           method: 'PUT',
-          body: JSON.stringify(nodeSettingsPayload(node, name, address, nodeHAProxyLogsOn)),
+          body: JSON.stringify(nodeSettingsPayload(current, name, address, nodeHAProxyLogsOn, tuning)),
         });
       setNodeOverride(updated);
       if (!demo) await invalidate();
@@ -411,7 +419,7 @@ export function NodeDetailPage() {
         meta={<><code>{node.address}</code><span className={`nf-detail-status is-${displayStatus}`}><i />{stateCopy[displayStatus]}</span><span className="nf-detail-heartbeat">Последний сигнал: {timeAgo(node.last_seen_at)}</span></>}
         actions={<>
           <Button component={Link} to={`/nodes/${nodeId}/routes/new${demoQuery}`} className="nf-primary-action" leftSection={<IconPlus size={18} />}>Добавить маршрут</Button>
-          <Button variant="default" onClick={() => { setConfigDirty(false); setConfigBusy(false); setConfigOpened(true); }}>Конфигурация HAProxy</Button>
+          <Button component={Link} to={`/nodes/${nodeId}/haproxy${demoQuery}`} variant="default" leftSection={<IconCode size={17} />}>Конфигурация HAProxy</Button>
           <ActionIcon variant="default" size="lg" onClick={openNodeSettings} aria-label="Настройки ноды"><IconSettings size={18} /></ActionIcon>
           <Menu position="bottom-end" withinPortal>
             <Menu.Target><ActionIcon variant="default" size="lg" aria-label="Действия ноды"><IconDots size={19} /></ActionIcon></Menu.Target>
@@ -540,6 +548,17 @@ export function NodeDetailPage() {
               description="Каждое соединение пишется в syslog. На маленьких дисках выключите."
             />
           </Stack>
+          <Stack gap={6} className="nf-node-haproxy-tuning">
+            <Text fw={600} size="sm">HAProxy</Text>
+            <div className="nf-node-haproxy-tuning__row">
+              <NumberInput label="maxconn" placeholder="авто" min={1} max={10000000} allowDecimal={false} allowNegative={false} hideControls disabled={nodeEditBusy} value={nodeTuning.maxconn} onChange={(value) => setNodeTuning((current) => ({ ...current, maxconn: String(value) }))} error={nodeTuningTouched && tuningErrors.maxconn} />
+              <NumberInput label="nbthread" placeholder="авто" min={1} max={256} allowDecimal={false} allowNegative={false} hideControls disabled={nodeEditBusy} value={nodeTuning.nbthread} onChange={(value) => setNodeTuning((current) => ({ ...current, nbthread: String(value) }))} error={nodeTuningTouched && tuningErrors.nbthread} />
+              <TextInput label="timeout connect" placeholder="5s" disabled={nodeEditBusy} value={nodeTuning.timeoutConnect} onChange={(event) => { const value = event.currentTarget.value; setNodeTuning((current) => ({ ...current, timeoutConnect: value })); }} onBlur={() => setNodeTuningTouched(true)} error={nodeTuningTouched && tuningErrors.timeoutConnect} />
+              <TextInput label="timeout client" placeholder="15m" disabled={nodeEditBusy} value={nodeTuning.timeoutClient} onChange={(event) => { const value = event.currentTarget.value; setNodeTuning((current) => ({ ...current, timeoutClient: value })); }} onBlur={() => setNodeTuningTouched(true)} error={nodeTuningTouched && tuningErrors.timeoutClient} />
+              <TextInput label="timeout server" placeholder="15m" disabled={nodeEditBusy} value={nodeTuning.timeoutServer} onChange={(event) => { const value = event.currentTarget.value; setNodeTuning((current) => ({ ...current, timeoutServer: value })); }} onBlur={() => setNodeTuningTouched(true)} error={nodeTuningTouched && tuningErrors.timeoutServer} />
+            </div>
+            <Text size="xs" c="dimmed">Пусто = значение по умолчанию. Применяется ко всем маршрутам ноды мягким reload.</Text>
+          </Stack>
           {nodeEditError && <div className="nf-inline-error" role="alert">{nodeEditError}</div>}
           <Alert color="gray" icon={<IconInfoCircle size={18} />} title="Переустановка Node Agent">
             <Stack gap={8}>
@@ -553,9 +572,6 @@ export function NodeDetailPage() {
           </Group>
         </Stack>
       </Modal>
-      <Modal opened={configOpened} onClose={() => { if (!configBusy && (!configDirty || window.confirm('Закрыть редактор? Несохранённые изменения будут потеряны.'))) setConfigOpened(false); }} title="Конфигурация HAProxy" size="xl" closeOnClickOutside={false}>
-        {configOpened && <HAProxyConfiguration node={node} demo={demo} onEditorState={onConfigEditorState} onSaved={(updated) => { setNodeOverride(updated); void invalidate(); }} />}
-      </Modal>
       <AddNodeDialog
         opened={reinstallOpened}
         onClose={() => setReinstallOpened(false)}
diff --git a/frontend/src/pages/haproxy-config.css b/frontend/src/pages/haproxy-config.css
new file mode 100644
index 0000000..f83336b
--- /dev/null
+++ b/frontend/src/pages/haproxy-config.css
@@ -0,0 +1,27 @@
+/* HAProxy config editor page: full width, editor fills the viewport. */
+.nf-haproxy-editor-page { max-width: none; display: flex; flex-direction: column; min-height: calc(100dvh - 8px); }
+.nf-haproxy-editor__revisions { color: var(--nf-text-secondary); font-size: 12px; white-space: nowrap; }
+.nf-haproxy-editor { flex: 1 1 auto; min-height: 0; display: flex; flex-direction: column; border: 1px solid var(--nf-border); border-radius: var(--nf-radius-module); background: var(--nf-field); overflow: hidden; }
+.nf-haproxy-editor__status { display: flex; align-items: center; justify-content: space-between; gap: 12px; min-height: 38px; padding: 4px 12px; border-bottom: 1px solid var(--nf-border-soft); background: var(--nf-surface-soft); }
+.nf-haproxy-editor__status > button { display: inline-flex; align-items: center; gap: 8px; padding: 4px 6px; border: 0; border-radius: 6px; background: transparent; color: inherit; font: 500 13px/1.3 var(--nf-font-mono); cursor: pointer; }
+.nf-haproxy-editor__status > button:disabled { cursor: default; }
+.nf-haproxy-editor__status > button:not(:disabled):hover { background: var(--nf-accent-faint); }
+.nf-haproxy-editor__status.is-valid > button { color: var(--nf-success); }
+.nf-haproxy-editor__status.is-error > button { color: var(--nf-danger); }
+.nf-haproxy-editor__status.is-warning > button { color: var(--nf-warning); }
+.nf-haproxy-editor__status.is-pending > button { color: var(--nf-text-tertiary); }
+.nf-haproxy-editor__ports { font-family: var(--nf-font-mono); text-transform: none; }
+.nf-haproxy-editor__monaco { flex: 1 1 auto; height: max(480px, calc(100dvh - 300px)); }
+.nf-haproxy-editor__toolbar { display: flex; align-items: center; justify-content: space-between; flex-wrap: wrap; gap: 8px; padding: 10px 12px; border-top: 1px solid var(--nf-border-soft); background: var(--nf-surface-soft); }
+.nf-haproxy-editor__note { width: 200px; }
+.nf-haproxy-editor__history { width: 260px; }
+.nf-haproxy-editor__divider { width: 1px; height: 26px; background: var(--nf-border); margin: 0 4px; }
+.nf-haproxy-editor__diff { height: min(48vh, 560px); border: 1px solid var(--nf-border); border-radius: var(--nf-radius-control); overflow: hidden; }
+.nf-haproxy-editor__diff > section { height: 100%; }
+
+/* Monaco hover in the Remnawave style: dark, compact, close to the token. */
+.nf-haproxy-editor .monaco-hover { border-radius: 8px; box-shadow: 0 10px 28px rgb(0 0 0 / 0.45); max-width: 560px; }
+.nf-haproxy-editor .monaco-hover .hover-contents { font-size: 12.5px; line-height: 1.5; }
+.nf-haproxy-editor .monaco-hover code { font-family: var(--nf-font-mono); }
+.nf-haproxy-editor .monaco-hover .hover-row.status-bar { display: none; }
+.nf-haproxy-editor .monaco-hover p { margin: 4px 0; }
diff --git a/frontend/src/styles/global.css b/frontend/src/styles/global.css
index e49c852..e9d455a 100644
--- a/frontend/src/styles/global.css
+++ b/frontend/src/styles/global.css
@@ -1011,3 +1011,8 @@ button, a { touch-action: manipulation; }
 
 
 
+
+/* Node settings → HAProxy tuning: short fields in one row, labels on top. */
+.nf-node-haproxy-tuning__row { display: grid; grid-template-columns: repeat(5, minmax(0, 1fr)); gap: 10px; align-items: start; }
+.nf-node-haproxy-tuning__row .mantine-InputWrapper-label { font-family: var(--nf-font-mono); font-size: 12px; white-space: nowrap; }
+@media (max-width: 640px) { .nf-node-haproxy-tuning__row { grid-template-columns: repeat(2, minmax(0, 1fr)); } }
diff --git a/frontend/tests/haproxyEditor.test.ts b/frontend/tests/haproxyEditor.test.ts
new file mode 100644
index 0000000..fbf236f
--- /dev/null
+++ b/frontend/tests/haproxyEditor.test.ts
@@ -0,0 +1,326 @@
+// Run: npm test. Covers the haproxy.cfg editor helpers: docs coverage of every
+// directive/option emitted by internal/panel/haproxy_renderer.go, hover
+// resolution, formatter and the offline linter.
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { readdirSync, readFileSync } from 'node:fs';
+import { argDocs, directiveDocs, keywordDocs, sectionDocs } from '../src/features/haproxy-editor/haproxyDocs.ts';
+import KEYWORDS from '../src/features/haproxy-editor/haproxyKeywords.json' with { type: 'json' };
+import { formatConfig, hoverMarkdown, lintConfig, resolveHover, tokenizeLine } from '../src/features/haproxy-editor/haproxyModel.ts';
+
+const rendererSource = readFileSync(new URL('../../internal/panel/haproxy_renderer.go', import.meta.url), 'utf8');
+
+/** String literals written into the config by the Go renderer. */
+function renderedLiterals(): string[] {
+  const literals: string[] = [];
+  for (const line of rendererSource.split('\n')) {
+    if (!/WriteString|Fprintf|condition :?=/.test(line)) continue;
+    for (const match of line.matchAll(/"((?:[^"\\]|\\.)*)"/g)) {
+      literals.push(match[1].replace(/\\n/g, '\n').replace(/\\t/g, '\t').replace(/%d/g, '1000').replace(/%s/g, '5s').replace(/%\.2f/g, '1.00'));
+    }
+  }
+  return literals;
+}
+
+// Free-form names/values the renderer writes; they are not directives.
+const VALUE_WORDS = new Set(['haproxy', 'splice', 'download', 'upload', 'renderer:', 'generated', 'by', 'nodeflow.', 'do', 'not', 'edit.', 'adguard_local', 'systemd_resolved', 'cloudflare', 'google', 'quad9']);
+
+const allArgs = new Set(Object.values(argDocs).flatMap((group) => Object.keys(group)));
+const hasDoc = (word: string) => Boolean(directiveDocs[word] || sectionDocs[word] || keywordDocs[word] || allArgs.has(word) || Object.keys(directiveDocs).some((key) => key.split(' ').includes(word)));
+
+test('docs have an entry for every directive and option emitted by haproxy_renderer.go', () => {
+  const missing = new Set<string>();
+  let checked = 0;
+  for (const literal of renderedLiterals()) {
+    for (const rawLine of literal.split('\n')) {
+      const line = rawLine.replace(/#.*/, '');
+      for (const token of tokenizeLine(line)) {
+        for (const part of token.text.toLowerCase().split(/[,()]/)) {
+          if (!/^[.a-z][a-z0-9._-]*$/.test(part) || /^nf_/.test(part) || VALUE_WORDS.has(part)) continue;
+          checked++;
+          if (!hasDoc(part)) missing.add(part);
+        }
+      }
+    }
+  }
+  assert.ok(checked > 80, `too few renderer tokens found (${checked}); did the renderer move?`);
+  assert.deepEqual([...missing].sort(), []);
+});
+
+const RENDERED_SAMPLE = `global
+    maxconn 20000
+    nbthread 2
+    log /dev/log local0
+    stats socket /run/haproxy/admin.sock mode 660 level admin expose-fd listeners
+    stats timeout 30s
+    user haproxy
+    tune.pipesize 262144
+    localpeer nf_local
+defaults
+    log global
+    mode tcp
+    option tcplog
+    clitcpka-idle 300s
+    .if enabled(SPLICE)
+        option splice-request
+    .endif
+    timeout connect 5s
+    timeout client 15m
+resolvers nf_dns
+    nameserver cloudflare 1.1.1.1:53
+    hold valid 10s
+frontend nf_fe_any_443_abcd
+    bind :443
+    tcp-request connection expect-proxy layer4 if { src 10.0.0.0/8 } || nf_pp_trusted
+    acl nf_pp_trusted src -f /etc/haproxy/pp.lst
+    filter bwlim-out nf_bw_download_x limit 1000 key src table nf_bw_download_table_x min-size 2896
+    tcp-request inspect-delay 5s
+    tcp-request content accept if { req.ssl_hello_type 1 }
+    acl nf_sni_x req.ssl_sni -i example.com
+    use_backend nf_be_x if nf_sni_x
+    default_backend nf_be_x
+backend nf_be_x
+    balance hash src,ipmask(32,64)
+    hash-type consistent sdbm avalanche
+    stick-table type ipv6 size 1m expire 1h peers nf_peers store bytes_out_rate(1s)
+    stick on src
+    option redispatch
+    server nf_srv_x 192.0.2.10:443 weight 10 slowstart 30s check inter 5s fall 3 rise 2 send-proxy-v2 check-send-proxy backup
+    server-template nf_srv_y_ 10 192.0.2.11:443 check resolvers nf_dns init-addr last,none resolve-opts prevent-dup-ip hash-key addr
+`;
+
+test('every keyword token of a rendered config resolves to a hover', () => {
+  const lines = RENDERED_SAMPLE.split('\n');
+  const free = new Set(['haproxy', 'cloudflare', 'example.com', 'splice']);
+  lines.forEach((line, index) => {
+    for (const token of tokenizeLine(line)) {
+      for (const match of token.text.matchAll(/[^,()]+/g)) {
+        const word = match[0];
+        if (free.has(word.toLowerCase())) continue;
+        const hover = resolveHover(lines, index, token.start + (match.index ?? 0));
+        assert.ok(hover, `no hover for «${word}» in line ${index + 1}: ${line.trim()}`);
+        assert.notEqual(hover.kind, 'fallback', `fallback hover for «${word}» in line ${index + 1}`);
+      }
+    }
+  });
+});
+
+test('hover picks argument docs, generated names, case-insensitive', () => {
+  const lines = RENDERED_SAMPLE.split('\n');
+  const at = (lineText: string, word: string) => {
+    const index = lines.findIndex((l) => l.includes(lineText));
+    return resolveHover(lines, index, lines[index].indexOf(word) + 1);
+  };
+  assert.equal(at('check-send-proxy backup', 'check-send-proxy')?.doc, argDocs.server['check-send-proxy']);
+  assert.equal(at('check-send-proxy backup', 'backup')?.doc, argDocs.server.backup);
+  assert.match(at('backend nf_be_x', 'nf_be_x')?.doc.summary ?? '', /Не переименовывать/);
+  assert.equal(at('timeout client 15m', 'client')?.title, 'timeout client');
+  assert.match(at('timeout client 15m', '15m')?.value ?? '', /15 минут/);
+  assert.equal(at('balance hash', 'hash')?.doc, argDocs.balance.hash);
+  assert.equal(at('req.ssl_sni', 'req.ssl_sni')?.doc, keywordDocs['req.ssl_sni']);
+  assert.equal(at('use_backend', ' if ')?.doc, keywordDocs.if);
+  const upper = ['BACKEND x', '    SERVER a 1.2.3.4:80 CHECK'];
+  assert.equal(resolveHover(upper, 0, 1)?.doc, sectionDocs.backend);
+  assert.equal(resolveHover(upper, 1, upper[1].indexOf('CHECK'))?.doc, argDocs.server.check);
+  const md = hoverMarkdown(at('check-send-proxy backup', 'check-send-proxy')!);
+  assert.match(md, /```haproxy/);
+  assert.match(md, /⚠ Если .*\*\*/);
+});
+
+test('formatter normalises indentation, blank lines and trailing spaces', () => {
+  const input = '  global  \n maxconn 10   \n\n\n\n# note\ndefaults\n  mode tcp\n.if enabled(SPLICE)\noption splice-request\n.endif\nbackend b\n\tserver s 1.2.3.4:80\n';
+  assert.equal(formatConfig(input), 'global\n    maxconn 10\n\n    # note\ndefaults\n    mode tcp\n    .if enabled(SPLICE)\n        option splice-request\n    .endif\nbackend b\n    server s 1.2.3.4:80\n');
+  assert.equal(formatConfig(formatConfig(input)), formatConfig(input));
+});
+
+test('fallback linter accepts a rendered config', () => {
+  const result = lintConfig(RENDERED_SAMPLE);
+  assert.deepEqual(result.issues.filter((i) => i.severity === 'error'), []);
+  assert.equal(result.valid, true);
+  assert.deepEqual(result.listener_tcp_ports, [443]);
+  assert.deepEqual(result.sections.map((s) => s.type), ['global', 'defaults', 'resolvers', 'frontend', 'backend']);
+});
+
+test('fallback linter reports typical mistakes', () => {
+  const codes = (text: string) => lintConfig(text).issues.map((i) => `${i.line}:${i.code}`);
+  assert.deepEqual(codes('defaults\n    timeout client 15x\n'), ['2:timeout_format']);
+  assert.deepEqual(codes('frontend f\n    bind :70000\n'), ['2:port_range']);
+  assert.deepEqual(codes('defaults\n    .if enabled(SPLICE)\n    mode tcp\n'), ['2:conditional_unbalanced']);
+  assert.deepEqual(codes('defaults\n    .endif\n'), ['2:conditional_unbalanced']);
+  assert.deepEqual(codes('frontnd f\n    bind :80\n'), ['1:outside_section', '2:outside_section']);
+  assert.deepEqual(codes('frontend f\n    bind :80\n    use_backend nope\n'), ['3:unknown_backend']);
+  assert.deepEqual(codes('frontend f\n    bind :80\n    mode tcp\n    frobnicate 1\n'), ['4:unknown_directive']);
+  assert.equal(lintConfig('frontend f\n    bind :80\n    frobnicate 1\n').issues[0].severity, 'error');
+  assert.equal(lintConfig('resolvers r\n    nameserver a 1.1.1.1:53\n    frobnicate 1\n').issues[0].severity, 'warning');
+  const issue = lintConfig('defaults\n    timeout client 15x\n').issues[0];
+  assert.deepEqual([issue.column, issue.end_column, issue.severity], [20, 23, 'error']);
+  assert.equal(lintConfig('').valid, false);
+});
+
+test('keyword lists are shared with the Go linter byte for byte', () => {
+  const ts = readFileSync(new URL('../src/features/haproxy-editor/haproxyKeywords.json', import.meta.url));
+  const go = readFileSync(new URL('../../internal/panel/haproxy_keywords.json', import.meta.url));
+  assert.ok(ts.equals(go), 'internal/panel/haproxy_keywords.json must equal frontend/src/features/haproxy-editor/haproxyKeywords.json');
+});
+
+test('fallback linter: every golden renderer config is clean (no errors, no warnings)', () => {
+  const dir = new URL('../../internal/panel/testdata/', import.meta.url);
+  const files = readdirSync(dir).filter((f) => f.endsWith('.golden.cfg'));
+  assert.ok(files.length >= 4);
+  for (const file of files) {
+    const text = readFileSync(new URL(file, dir), 'utf8');
+    const lines = text.split('\n');
+    assert.deepEqual(lintConfig(text).issues.map((i) => `${i.line}:${i.code} ${lines[i.line - 1]}`), [], file);
+  }
+});
+
+test('fallback linter: every directive line emitted by haproxy_renderer.go is clean', () => {
+  // Wrap each rendered line into a section that accepts it and lint it alone.
+  const wrappers = ['global\n', 'defaults\n', 'frontend f\n    bind :1\n', 'backend b\n', 'resolvers r\n', 'peers p\n'];
+  let checked = 0;
+  let fragments = 0;
+  for (const literal of renderedLiterals()) {
+    for (const raw of literal.split('\n')) {
+      // " check inter 5s …", " send-proxy-v2", " backup": server option fragments.
+      if (/^ [a-z][a-z0-9-]*( |$)/.test(raw) && !/^ {4}/.test(raw) && !raw.includes('=')) {
+        const words = tokenizeLine(raw).map((t) => t.text);
+        // Filter/stick-table tails (" min-size 2896") are covered by the goldens.
+        if (!words.length || !(words[0] in KEYWORDS.server)) continue;
+        const line = `backend b\n    server s 192.0.2.1:443${raw.trimEnd()}${raw.endsWith(' ') ? ' 1' : ''}\n`;
+        assert.deepEqual(lintConfig(line).issues.map((i) => i.code), [], `server fragment: ${raw}`);
+        fragments++;
+        continue;
+      }
+      // Lines continued by string concatenation are checked through goldens.
+      if (!/^ {4}[a-z]/.test(raw) || raw !== raw.trimEnd()) continue;
+      const clean = wrappers.some((w) => lintConfig(w + raw + '\n').issues.length === 0);
+      assert.ok(clean, `renderer line is not clean in any section: ${raw}`);
+      checked++;
+    }
+  }
+  assert.ok(fragments >= 8, `too few server option fragments (${fragments})`);
+  assert.ok(checked > 50, `too few renderer lines (${checked})`);
+});
+
+// Mirrors TestLintStrictKeywordErrors in internal/panel/haproxy_lint_test.go.
+const STRICT_CASES: [name: string, cfg: string, line: number, code: string, column?: number, end?: number][] = [
+  ['option trailing comma', 'defaults\n    option tcplog,\n', 2, 'unknown_option', 18, 19],
+  ['option typo', 'defaults\n    option tcplogg\n', 2, 'unknown_option', 12, 19],
+  ['no option typo', 'defaults\n    no option tcplogg\n', 2, 'unknown_option', 15, 22],
+  ['option args', 'defaults\n    option dontlognull 1\n', 2, 'too_many_args'],
+  ['option in global', 'global\n    option tcplog\n', 2, 'unknown_directive'],
+  ['server keyword typo', 'backend b\n    server s1 1.2.3.4:443 chek\n', 2, 'unknown_server_keyword', 27, 31],
+  ['server keyword comma', 'backend b\n    server s1 1.2.3.4:443 check,\n', 2, 'stray_punctuation', 32, 33],
+  ['server-template keyword', 'backend b\n    server-template s 3 x.example.com:443 check resolverz dns\n', 2, 'unknown_server_keyword'],
+  ['default-server keyword', 'backend b\n    default-server inetr 3s\n', 2, 'unknown_server_keyword'],
+  ['server bad inter', 'backend b\n    server s1 1.2.3.4:443 check inter 5x\n', 2, 'invalid_duration'],
+  ['server missing value', 'backend b\n    server s1 1.2.3.4:443 check inter\n', 2, 'missing_value'],
+  ['bind keyword typo', 'frontend f\n    bind :443 acept-proxy\n', 2, 'unknown_bind_keyword', 15, 26],
+  ['bind in backend', 'backend b\n    bind :443\n', 2, 'keyword_not_allowed', 5, 9],
+  ['bind in defaults', 'defaults\n    bind :443\n', 2, 'keyword_not_allowed'],
+  ['server in frontend', 'frontend f\n    server s 1.2.3.4:80\n', 2, 'keyword_not_allowed'],
+  ['use_backend in backend', 'backend b\n    use_backend b\n', 2, 'keyword_not_allowed'],
+  ['tcp-request connection in backend', 'backend b\n    tcp-request connection accept\n', 2, 'keyword_not_allowed'],
+  ['tcp-request in anonymous defaults', 'defaults\n    tcp-request inspect-delay 5s\n', 2, 'keyword_not_allowed'],
+  ['tcp-request sub typo', 'frontend f\n    tcp-request contnet accept\n', 2, 'unknown_keyword'],
+  ['timeout typo', 'defaults\n    timeout clinet 5s\n', 2, 'unknown_timeout', 13, 19],
+  ['timeout comma', 'defaults\n    timeout client, 5s\n', 2, 'stray_punctuation', 19, 20],
+  ['mode typo', 'defaults\n    mode tpc\n', 2, 'invalid_mode'],
+  ['mode comma', 'defaults\n    mode tcp,\n', 2, 'stray_punctuation', 13, 14],
+  ['mode health', 'defaults\n    mode health\n', 2, 'invalid_mode'],
+  ['mode log in frontend', 'frontend f\n    mode log\n', 2, 'invalid_mode'],
+  ['balance typo', 'backend b\n    balance roundrobbin\n', 2, 'invalid_balance'],
+  ['hash-type typo', 'backend b\n    hash-type consistant\n', 2, 'invalid_hash_type'],
+  ['log facility typo', 'global\n    log /dev/log locl0\n', 2, 'invalid_log'],
+  ['log level typo', 'global\n    log /dev/log local0 notise\n', 2, 'invalid_log'],
+  ['directive typo in defaults', 'defaults\n    maxconnn 10\n', 2, 'unknown_directive'],
+  ['directive comma', 'defaults\n    maxconn, 10\n', 2, 'stray_punctuation', 12, 13],
+  ['trailing semicolon', 'defaults\n    retries 3;\n', 2, 'stray_punctuation', 14, 15],
+  ['global typo', 'global\n    nbthreads 2\n', 2, 'unknown_directive'],
+  ['negation unsupported', 'defaults\n    no retries 3\n', 2, 'negation_not_supported'],
+  ['no on tcplog', 'defaults\n    no option tcplog\n', 2, 'negation_not_supported'],
+  ['stats socket keyword', 'global\n    stats socket /run/h.sock mode 660 levle admin\n', 2, 'unknown_bind_keyword'],
+];
+
+test('fallback linter rejects what haproxy -c rejects (mirrors the Go table)', () => {
+  for (const [name, cfg, line, code, column, end] of STRICT_CASES) {
+    const result = lintConfig(cfg);
+    assert.equal(result.valid, false, name);
+    const found = result.issues.find((i) => i.line === line && i.code === code);
+    assert.ok(found, `${name}: want ${line}:${code}, got ${JSON.stringify(result.issues.map((i) => `${i.line}:${i.code}`))}`);
+    assert.equal(found.severity, 'error', name);
+    if (column) assert.deepEqual([found.column, found.end_column], [column, end], `${name}: ${found.message}`);
+  }
+  assert.equal(lintConfig('defaults\n    option tcplog,\n').issues[0].message, 'Неизвестная опция «tcplog,» — лишний символ «,»');
+});
+
+test('fallback linter accepts valid HAProxy 3.x syntax', () => {
+  const cfg = [
+    'global',
+    '    log stdout format raw local0 info',
+    '    log 127.0.0.1:514 len 2048 local1 notice err',
+    '    no busy-polling',
+    '    stats socket ipv4@127.0.0.1:9999 level admin expose-fd listeners',
+    '    tune.ssl.default-dh-param 2048',
+    '    ssl-default-bind-options ssl-min-ver TLSv1.2 no-tls-tickets',
+    '    set-var proc.x str(a,b)',
+    '    cpu-map auto:1/1-4 0-3',
+    'defaults named',
+    '    mode http',
+    '    option httplog clf',
+    '    no option http-server-close',
+    '    default option redispatch',
+    '    option forwardfor except 127.0.0.0/8 header X-Real-IP',
+    '    option httpchk GET /health',
+    '    option redispatch 1',
+    '    tcp-request inspect-delay 5s',
+    '    http-request set-header X-A "a, b;" if { path_beg /a, }',
+    '    log-format "%ci:%cp [%tr] %ft %b/%s %TR/%Tw/%Tc/%Tr/%Ta %ST %B %CC %CS %tsc %ac/%fc/%bc/%sc/%rc %sq/%bq %hr %hs %{+Q}r"',
+    '    timeout http-request 10s',
+    '    timeout http-keep-alive 2s',
+    '    balance random(2)',
+    '    hash-type map-based crc32',
+    '    no log',
+    'frontend web from named',
+    '    bind :443 ssl crt /etc/ssl/a.pem alpn h2,http/1.1 ssl-min-ver TLSv1.2 accept-proxy',
+    '    bind quic4@:443 ssl crt /etc/ssl/a.pem alpn h3 thread 1-2 shards by-thread',
+    '    bind unix@/run/x.sock mode 600 user haproxy group haproxy',
+    '    capture request header Host len 64',
+    '    rate-limit sessions 100',
+    '    stats uri /stats',
+    '    stick-table type ip size 1m expire 10m store http_req_rate(10s)',
+    '    tcp-request connection track-sc0 src',
+    '    use_backend app if { hdr(host) -i a.example.com }',
+    '    default_backend app',
+    'backend app',
+    '    balance hdr(host)',
+    '    hash-type consistent sdbm avalanche',
+    '    http-check send meth GET uri /health ver HTTP/1.1 hdr Host a',
+    '    http-check expect status 200',
+    '    stick on src',
+    '    default-server inter 3s fall 3 rise 2 check-sni a.example.com',
+    '    server s1 10.0.0.1:443 ssl verify none sni str(a) check weight 100 maxconn 50 source 10.0.0.9 usesrc clientip',
+    '    server s2 10.0.0.2:443 check agent-check agent-port 8080 agent-inter 5s on-marked-down shutdown-sessions',
+    '    server s3 10.0.0.3:443 set-proxy-v2-tlv-fmt(0x20) %[fc_pp_tlv(0x20)] send-proxy-v2 proxy-v2-options ssl,cert-cn',
+    '    server s4 10.0.0.4:80 track app/s1 cookie s4 observe layer4 error-limit 10 on-error mark-down',
+    '    server-template srv 1-3 pool.example.com:443 resolvers dns resolve-prefer ipv4 init-addr none',
+    'listen stats',
+    '    bind 127.0.0.1:8404',
+    '    mode http',
+    '    stats enable',
+    '    stats refresh 10s',
+    'resolvers dns',
+    '    nameserver ns1 1.1.1.1:53',
+    '    accepted_payload_size 8192',
+    '',
+  ].join('\n');
+  const lines = cfg.split('\n');
+  assert.deepEqual(lintConfig(cfg).issues.map((i) => `${i.line}:${i.code} ${lines[i.line - 1]}`), []);
+});
+
+test('hover never throws on unknown or malformed options', () => {
+  const lines = ['defaults', '    option tcplog,', '    option frobnicate', '    no option', 'backend b', '    server s 1.2.3.4:1 chek, weight', '    bind'];
+  lines.forEach((line, index) => {
+    for (let column = 0; column <= line.length; column++) resolveHover(lines, index, column);
+  });
+});
diff --git a/frontend/tests/nodeSettings.test.ts b/frontend/tests/nodeSettings.test.ts
index a4a78ff..98c8318 100644
--- a/frontend/tests/nodeSettings.test.ts
+++ b/frontend/tests/nodeSettings.test.ts
@@ -23,3 +23,16 @@ test('settings payload keeps other metadata and sends the toggle', () => {
   assert.deepEqual(node.metadata, { agent_port: 4317, ssh_port: 2222, traffic_limit_bytes: 10 });
   assert.equal(nodeSettingsPayload({ metadata: null }, 'a', '192.0.2.2', true).metadata.haproxy_logs, true);
 });
+
+test('HAProxy tuning: validation, omitted empties, reset and metadata preservation', async () => {
+  const { haproxyTuningForm, haproxyTuningPayload, validateHAProxyTuning } = await import('../src/features/node-detail/nodeSettings.ts');
+  const node = { metadata: { agent_port: 4317, haproxy_settings: { max_connections: 5000, timeout_client: '30m' } } };
+  const form = haproxyTuningForm(node);
+  assert.deepEqual(form, { maxconn: '5000', nbthread: '', timeoutConnect: '', timeoutClient: '30m', timeoutServer: '' });
+  assert.deepEqual(haproxyTuningPayload(form), { max_connections: 5000, timeout_client: '30m' });
+  assert.deepEqual(haproxyTuningPayload({ maxconn: '', nbthread: '', timeoutConnect: '', timeoutClient: '', timeoutServer: '' }), {});
+  assert.deepEqual(validateHAProxyTuning(form), {});
+  assert.deepEqual(Object.keys(validateHAProxyTuning({ maxconn: '0', nbthread: '257', timeoutConnect: '5', timeoutClient: '05s', timeoutServer: '1d' })).sort(), ['maxconn', 'nbthread', 'timeoutClient', 'timeoutConnect', 'timeoutServer']);
+  const payload = nodeSettingsPayload(node, 'edge', '192.0.2.1', true, { threads: 2 });
+  assert.deepEqual(payload.metadata, { agent_port: 4317, haproxy_settings: { threads: 2 }, haproxy_logs: true });
+});
diff --git a/frontend/tsconfig.app.json b/frontend/tsconfig.app.json
index ddd0e17..1d8c04d 100644
--- a/frontend/tsconfig.app.json
+++ b/frontend/tsconfig.app.json
@@ -12,6 +12,7 @@
     "forceConsistentCasingInFileNames": true,
     "module": "ESNext",
     "moduleResolution": "Bundler",
+    "allowImportingTsExtensions": true,
     "resolveJsonModule": true,
     "isolatedModules": true,
     "moduleDetection": "force",
diff --git a/internal/agent/manager.go b/internal/agent/manager.go
index 035377b..70247b2 100644
--- a/internal/agent/manager.go
+++ b/internal/agent/manager.go
@@ -3,6 +3,7 @@ package agent
 import (
 	"context"
 	"crypto/sha256"
+	"errors"
 	"fmt"
 	"os"
 	"path/filepath"
@@ -64,7 +65,10 @@ type ApplyError struct {
 	Code              string
 	RollbackAttempted bool
 	RollbackSucceeded *bool
-	cause             error
+	// Detail is an optional operator-facing excerpt (for example the
+	// [ALERT] lines of haproxy -c) reported alongside Code.
+	Detail string
+	cause  error
 }
 
 func (e *ApplyError) Error() string { return e.Code }
@@ -113,7 +117,7 @@ func (m *ConfigManager) validate(ctx context.Context, config []byte) error {
 	}
 	output, err := m.Runner.Run(ctx, m.HAProxyBinary, "-c", "-f", name)
 	if err != nil {
-		return fmt.Errorf("haproxy validation failed: %s", output)
+		return &validationError{detail: ValidationDetail(output, name), output: string(output)}
 	}
 	return nil
 }
@@ -157,7 +161,12 @@ func (m *ConfigManager) applyRevision(ctx context.Context, config []byte, revisi
 		return ApplyResult{Revision: revision, Idempotent: true}, "", nil
 	}
 	if err := m.validate(ctx, config); err != nil {
-		return ApplyResult{}, "", applyError("validation_failed", err)
+		typed := applyError("validation_failed", err)
+		var validation *validationError
+		if errors.As(err, &validation) {
+			typed.Detail = validation.detail
+		}
+		return ApplyResult{}, "", typed
 	}
 	dir := filepath.Dir(m.ManagedConfig)
 	if err := os.MkdirAll(dir, 0755); err != nil {
diff --git a/internal/agent/reconcile.go b/internal/agent/reconcile.go
index 5999448..3701e58 100644
--- a/internal/agent/reconcile.go
+++ b/internal/agent/reconcile.go
@@ -115,6 +115,11 @@ func (r *Reconciler) Reconcile(ctx context.Context, assignment ConfigAssignment)
 		report.Details["reason"] = code
 		report.RollbackAttempted = typed.RollbackAttempted
 		report.RollbackSucceeded = typed.RollbackSucceeded
+		if typed.Detail != "" {
+			// Carried inside the free-form details object so Panels that
+			// predate error_detail (strict top-level decoding) still accept it.
+			report.Details["error_detail"] = typed.Detail
+		}
 		if typed.RollbackAttempted && typed.RollbackSucceeded != nil && *typed.RollbackSucceeded {
 			report.State = "rolled_back"
 		}
diff --git a/internal/agent/validation_detail.go b/internal/agent/validation_detail.go
new file mode 100644
index 0000000..b9f9d06
--- /dev/null
+++ b/internal/agent/validation_detail.go
@@ -0,0 +1,71 @@
+package agent
+
+import (
+	"path/filepath"
+	"regexp"
+	"strings"
+	"unicode/utf8"
+)
+
+// maxValidationDetailBytes bounds the haproxy -c excerpt reported to the
+// Panel so a pathological config cannot bloat apply reports.
+const maxValidationDetailBytes = 1500
+
+var (
+	ansiEscapePattern     = regexp.MustCompile(`\x1b\[[0-9;?]*[ -/]*[@-~]`)
+	validateTempPathRegex = regexp.MustCompile(`(?:[^\s'"\[\]]*/)?\.nodeflow-validate-[A-Za-z0-9]+`)
+	sensitiveLinePattern  = regexp.MustCompile(`(?i)password|secret`)
+)
+
+// ValidationDetail returns the operator-facing excerpt of a failed
+// haproxy -c run: [ALERT]/[WARNING] lines (falling back to all non-empty
+// lines), ANSI stripped, the temporary validation file renamed to
+// haproxy.cfg and the result truncated to maxValidationDetailBytes.
+func ValidationDetail(output []byte, tempPath string) string {
+	text := ansiEscapePattern.ReplaceAllString(string(output), "")
+	text = strings.ReplaceAll(text, "\r", "")
+	if tempPath != "" {
+		text = strings.ReplaceAll(text, tempPath, "haproxy.cfg")
+		text = strings.ReplaceAll(text, filepath.Base(tempPath), "haproxy.cfg")
+	}
+	text = validateTempPathRegex.ReplaceAllString(text, "haproxy.cfg")
+	var alerts, other []string
+	for _, line := range strings.Split(text, "\n") {
+		line = strings.TrimSpace(line)
+		if line == "" || sensitiveLinePattern.MatchString(line) {
+			continue
+		}
+		upper := strings.ToUpper(line)
+		if strings.Contains(upper, "[ALERT]") || strings.Contains(upper, "[WARNING]") {
+			alerts = append(alerts, line)
+		} else {
+			other = append(other, line)
+		}
+	}
+	lines := alerts
+	if len(lines) == 0 {
+		lines = other
+	}
+	return truncateUTF8(strings.Join(lines, "\n"), maxValidationDetailBytes)
+}
+
+func truncateUTF8(value string, limit int) string {
+	if len(value) <= limit {
+		return value
+	}
+	const marker = "\n…"
+	cut := limit - len(marker)
+	for cut > 0 && !utf8.RuneStart(value[cut]) {
+		cut--
+	}
+	return strings.TrimRight(value[:cut], "\n") + marker
+}
+
+// validationError keeps the sanitized haproxy -c excerpt next to the raw
+// failure so ApplyRevision can report it without re-parsing.
+type validationError struct {
+	detail string
+	output string
+}
+
+func (e *validationError) Error() string { return "haproxy validation failed: " + e.output }
diff --git a/internal/agent/validation_detail_test.go b/internal/agent/validation_detail_test.go
new file mode 100644
index 0000000..0255e0b
--- /dev/null
+++ b/internal/agent/validation_detail_test.go
@@ -0,0 +1,79 @@
+package agent
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"net/http"
+	"net/http/httptest"
+	"path/filepath"
+	"strings"
+	"testing"
+)
+
+type alertValidatorRunner struct{}
+
+func (alertValidatorRunner) Run(_ context.Context, name string, args ...string) ([]byte, error) {
+	if name != "haproxy" {
+		return nil, nil
+	}
+	path := args[len(args)-1]
+	out := "\x1b[1;31m[NOTICE]\x1b[0m   (1) : haproxy version is 3.0.5\n" +
+		"\x1b[1;31m[ALERT]\x1b[0m    (1) : config : parsing [" + path + ":12] : unknown keyword 'bindd' in 'frontend' section\n" +
+		"[ALERT]    (1) : config : userlist admin: password hash rejected at [" + path + ":20]\n" +
+		"[WARNING]  (1) : config : parsing [" + path + ":7] : 'option httplog' not usable with frontend 'fe' (needs 'mode http').\n" +
+		"[ALERT]    (1) : config : Error(s) found in configuration file : " + path + "\n"
+	return []byte(out), errors.New("exit status 1")
+}
+
+func TestValidationDetailExtractsAlertsAndReplacesTempPath(t *testing.T) {
+	manager := &ConfigManager{Runner: alertValidatorRunner{}, ManagedConfig: filepath.Join(t.TempDir(), "nodeflow.cfg"), HAProxyBinary: "haproxy", ServiceName: "haproxy.service"}
+	_, _, err := manager.ApplyRevision(context.Background(), []byte("global\n"), "147")
+	var typed *ApplyError
+	if !errors.As(err, &typed) || typed.Code != "validation_failed" {
+		t.Fatalf("err=%v", err)
+	}
+	want := "[ALERT]    (1) : config : parsing [haproxy.cfg:12] : unknown keyword 'bindd' in 'frontend' section\n" +
+		"[WARNING]  (1) : config : parsing [haproxy.cfg:7] : 'option httplog' not usable with frontend 'fe' (needs 'mode http').\n" +
+		"[ALERT]    (1) : config : Error(s) found in configuration file : haproxy.cfg"
+	if typed.Detail != want {
+		t.Fatalf("detail=%q", typed.Detail)
+	}
+	if strings.Contains(typed.Detail, ".nodeflow-validate-") || strings.Contains(typed.Detail, "\x1b") || strings.Contains(typed.Detail, "password") {
+		t.Fatalf("unsanitized detail=%q", typed.Detail)
+	}
+}
+
+func TestValidationDetailFallbackAndTruncation(t *testing.T) {
+	if got := ValidationDetail([]byte("plain failure\n\nsecret=x\n"), ""); got != "plain failure" {
+		t.Fatalf("fallback=%q", got)
+	}
+	long := strings.Repeat("[ALERT] (1) : config : parsing [/etc/haproxy/.nodeflow-validate-123:1] : bad\n", 100)
+	got := ValidationDetail([]byte(long), "")
+	if len(got) > maxValidationDetailBytes || !strings.HasSuffix(got, "…") || strings.Contains(got, "nodeflow-validate") {
+		t.Fatalf("len=%d detail=%q", len(got), got[:80])
+	}
+}
+
+func TestReconcileReportsValidationDetail(t *testing.T) {
+	var report ConfigReport
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		var got ConfigReport
+		_ = json.NewDecoder(r.Body).Decode(&got)
+		if got.State == "failed" {
+			report = got
+		}
+		w.WriteHeader(http.StatusAccepted)
+	}))
+	defer server.Close()
+	manager := &ConfigManager{Runner: alertValidatorRunner{}, ManagedConfig: filepath.Join(t.TempDir(), "nodeflow.cfg"), HAProxyBinary: "haproxy", ServiceName: "haproxy.service"}
+	reconciler := &Reconciler{Manager: manager, Reporter: ConfigReporter{URL: server.URL, Token: "t", Client: server.Client()}}
+	err := reconciler.Reconcile(context.Background(), assignment(147, "global\n"))
+	if err == nil || err.Error() != "revision 147 validation_failed" {
+		t.Fatalf("err=%v", err)
+	}
+	detail, _ := report.Details["error_detail"].(string)
+	if report.Error != "validation_failed" || !strings.Contains(detail, "[haproxy.cfg:12] : unknown keyword 'bindd'") {
+		t.Fatalf("report=%+v", report)
+	}
+}
diff --git a/internal/panel/config_error_detail.go b/internal/panel/config_error_detail.go
new file mode 100644
index 0000000..76138d7
--- /dev/null
+++ b/internal/panel/config_error_detail.go
@@ -0,0 +1,24 @@
+package panel
+
+import (
+	"strings"
+	"unicode/utf8"
+)
+
+// maxConfigErrorDetailBytes bounds the stored apply failure excerpt.
+const maxConfigErrorDetailBytes = 2048
+
+// applyReportErrorDetail extracts the optional operator-facing failure
+// excerpt newer Agents send as details.error_detail. Older Agents omit it.
+func applyReportErrorDetail(details map[string]any) string {
+	raw, _ := details["error_detail"].(string)
+	raw = strings.ToValidUTF8(strings.TrimSpace(raw), "")
+	if len(raw) > maxConfigErrorDetailBytes {
+		cut := maxConfigErrorDetailBytes
+		for cut > 0 && !utf8.RuneStart(raw[cut]) {
+			cut--
+		}
+		raw = raw[:cut]
+	}
+	return raw
+}
diff --git a/internal/panel/firewall.go b/internal/panel/firewall.go
index c524a92..8fcae72 100644
--- a/internal/panel/firewall.go
+++ b/internal/panel/firewall.go
@@ -4,6 +4,7 @@ import (
 	"context"
 	"encoding/json"
 	"errors"
+	"log/slog"
 	"sort"
 
 	"github.com/jackc/pgx/v5"
@@ -24,38 +25,60 @@ func normalizeFirewallMode(mode string) (string, bool) {
 // and prune only after activation succeeds.
 func buildFirewallAssignment(ctx context.Context, tx pgx.Tx, nodeID, mode string, includeDesired bool) (*FirewallAssignment, error) {
 	mode, _ = normalizeFirewallMode(mode)
-	includeDesired = includeDesired && mode == "apply"
-	assignment := &FirewallAssignment{Mode: mode, TCPPorts: []int{}, ActivePlanComplete: true}
 	if mode == "off" {
-		return assignment, nil
+		return resolveFirewallAssignment(nodeID, mode, includeDesired, firewallPlanRow{})
 	}
-	var actualRevision, desiredRevision *int64
-	var actualRaw, desiredRaw []byte
-	var actualComplete, desiredComplete bool
+	var row firewallPlanRow
 	err := tx.QueryRow(ctx, `
 		SELECT state.actual_revision,state.desired_revision,
 		       actual.metadata->'listener_tcp_ports',
-		       COALESCE(actual.metadata->>'renderer'=ANY($2::text[])
-		                AND actual.metadata ? 'listener_tcp_ports',false),
+		       COALESCE(`+firewallPlanCompleteSQL("actual")+`,false),
 		       desired.metadata->'listener_tcp_ports',
-		       COALESCE(desired.metadata->>'renderer'=ANY($2::text[])
-		                AND desired.metadata ? 'listener_tcp_ports',false)
+		       COALESCE(`+firewallPlanCompleteSQL("desired")+`,false)
 		FROM node_config_state AS state
 		LEFT JOIN config_revisions AS actual
 		  ON actual.node_id=state.node_id AND actual.revision=state.actual_revision
 		LEFT JOIN config_revisions AS desired
 		  ON desired.node_id=state.node_id AND desired.revision=state.desired_revision
 		WHERE state.node_id=$1`, nodeID, supportedHAProxyRenderers()).Scan(
-		&actualRevision, &desiredRevision, &actualRaw, &actualComplete, &desiredRaw, &desiredComplete,
+		&row.ActualRevision, &row.DesiredRevision, &row.ActualPorts, &row.ActualComplete, &row.DesiredPorts, &row.DesiredComplete,
 	)
 	if errors.Is(err, pgx.ErrNoRows) {
-		return assignment, nil
+		return resolveFirewallAssignment(nodeID, mode, includeDesired, firewallPlanRow{})
 	}
 	if err != nil {
 		return nil, err
 	}
-	if actualRevision != nil {
-		if !actualComplete {
+	return resolveFirewallAssignment(nodeID, mode, includeDesired, row)
+}
+
+// firewallPlanCompleteSQL reports whether a revision carries a trustworthy
+// listener plan: a known renderer, or an advanced-editor revision whose
+// ports were extracted by the Panel linter. $2 is supportedHAProxyRenderers().
+func firewallPlanCompleteSQL(alias string) string {
+	return `((` + alias + `.metadata->>'renderer'=ANY($2::text[])
+	          OR ` + alias + `.metadata->>'source'='advanced_editor')
+	         AND ` + alias + `.metadata ? 'listener_tcp_ports')`
+}
+
+type firewallPlanRow struct {
+	ActualRevision, DesiredRevision *int64
+	ActualPorts, DesiredPorts       []byte
+	ActualComplete, DesiredComplete bool
+}
+
+// resolveFirewallAssignment turns the active/desired listener plans into
+// the heartbeat assignment. An incomplete plan never prunes managed rules and
+// never fails the heartbeat: the Agent must still receive its config.
+func resolveFirewallAssignment(nodeID, mode string, includeDesired bool, row firewallPlanRow) (*FirewallAssignment, error) {
+	mode, _ = normalizeFirewallMode(mode)
+	includeDesired = includeDesired && mode == "apply"
+	assignment := &FirewallAssignment{Mode: mode, TCPPorts: []int{}, ActivePlanComplete: true}
+	if mode == "off" {
+		return assignment, nil
+	}
+	if row.ActualRevision != nil {
+		if !row.ActualComplete {
 			assignment.ActivePlanComplete = false
 			if !includeDesired {
 				// Never prune every managed rule merely because a legacy revision
@@ -64,7 +87,7 @@ func buildFirewallAssignment(ctx context.Context, tx pgx.Tx, nodeID, mode string
 				return assignment, nil
 			}
 		} else {
-			ports, parseErr := parseFirewallPorts(actualRaw)
+			ports, parseErr := parseFirewallPorts(row.ActualPorts)
 			if parseErr != nil {
 				return nil, parseErr
 			}
@@ -74,10 +97,16 @@ func buildFirewallAssignment(ctx context.Context, tx pgx.Tx, nodeID, mode string
 	if !includeDesired {
 		return assignment, nil
 	}
-	if desiredRevision == nil || !desiredComplete {
-		return nil, errors.New("desired firewall listener plan is incomplete")
+	if row.DesiredRevision == nil || !row.DesiredComplete {
+		// A legacy manual revision (saved before the Panel extracted its
+		// bind ports) has no plan. Degrade to observe for this transition:
+		// the config is still delivered, current rules stay untouched and
+		// nothing is pruned.
+		slog.Warn("desired firewall listener plan is incomplete; firewall kept in observe mode for this config transition", "node_id", nodeID)
+		assignment.Mode = "observe"
+		return assignment, nil
 	}
-	desiredPorts, err := parseFirewallPorts(desiredRaw)
+	desiredPorts, err := parseFirewallPorts(row.DesiredPorts)
 	if err != nil {
 		return nil, err
 	}
diff --git a/internal/panel/firewall_integration_test.go b/internal/panel/firewall_integration_test.go
index 27ef3c8..7a0ff32 100644
--- a/internal/panel/firewall_integration_test.go
+++ b/internal/panel/firewall_integration_test.go
@@ -74,4 +74,40 @@ func TestPGStoreFirewallAssignmentCarriesActiveAndDesiredListenerPlans(t *testin
 	assert.Equal(t, []int{443}, activeOnly.TCPPorts)
 	assert.Empty(t, activeOnly.DesiredTCPPorts)
 	assert.False(t, activeOnly.Transition)
+	require.NoError(t, tx.Rollback(ctx))
+
+	// Lab regression: an advanced-editor revision with lint-extracted ports is
+	// a complete plan; a legacy one without ports degrades to observe instead
+	// of failing every heartbeat.
+	manualConfig := "global\n    daemon\ndefaults\n    mode tcp\nfrontend fe\n    bind :443\n    bind :9443\n    default_backend be\nbackend be\n    server s 192.0.2.31:443\n"
+	lint := LintHAProxyConfig(manualConfig)
+	manual, err := store.CreateConfigRevision(ctx, node.ID, manualConfig, "manual", map[string]any{
+		"source": "advanced_editor", "renderer": "manual", "listener_tcp_ports": lint.ListenerTCPPorts,
+	})
+	require.NoError(t, err)
+	_, err = store.AssignDesiredRevision(ctx, node.ID, manual.Revision)
+	require.NoError(t, err)
+	tx, err = pool.Begin(ctx)
+	require.NoError(t, err)
+	defer tx.Rollback(ctx)
+	assignment, err = buildFirewallAssignment(ctx, tx, node.ID, "apply", true)
+	require.NoError(t, err)
+	assert.Equal(t, "apply", assignment.Mode)
+	assert.Equal(t, []int{443}, assignment.TCPPorts)
+	assert.Equal(t, []int{443, 9443}, assignment.DesiredTCPPorts)
+	assert.True(t, assignment.Transition)
+	require.NoError(t, tx.Rollback(ctx))
+
+	legacy, err := store.CreateConfigRevision(ctx, node.ID, manualConfig, "legacy manual", map[string]any{"source": "advanced_editor"})
+	require.NoError(t, err)
+	_, err = store.AssignDesiredRevision(ctx, node.ID, legacy.Revision)
+	require.NoError(t, err)
+	tx, err = pool.Begin(ctx)
+	require.NoError(t, err)
+	defer tx.Rollback(ctx)
+	assignment, err = buildFirewallAssignment(ctx, tx, node.ID, "apply", true)
+	require.NoError(t, err)
+	assert.Equal(t, "observe", assignment.Mode)
+	assert.False(t, assignment.Transition)
+	assert.Equal(t, []int{443}, assignment.TCPPorts)
 }
diff --git a/internal/panel/haproxy_keywords.json b/internal/panel/haproxy_keywords.json
new file mode 100644
index 0000000..6e7c39b
--- /dev/null
+++ b/internal/panel/haproxy_keywords.json
@@ -0,0 +1,529 @@
+{
+  "_comment": "HAProxy 2.8-3.2 keyword allowlists (+3.3 additions accepted leniently). Source: doc/configuration.txt and src/*.c keyword tables. Section letters: d=defaults, n=named defaults only, f=frontend, l=listen, b=backend. Server/bind values: number of value arguments (-1 = variable). Keep internal/panel/haproxy_keywords.json identical (TestLintKeywordsJSONInSync).",
+  "global": {
+    "keywords": ["anonkey", "busy-polling", "ca-base", "chroot", "close-spread-time", "cluster-secret", "cpu-affinity", "cpu-map", "cpu-policy", "cpu-set", "crt-base", "daemon", "debug.counters", "default-path", "description", "dns-accept-family", "expose-deprecated-directives", "expose-experimental-directives", "external-check", "fd-hard-limit", "force-cfg-parser-pause", "gid", "grace", "group", "h1-accept-payload-with-any-method", "h1-case-adjust", "h1-case-adjust-file", "h1-do-not-close-on-insecure-transfer-encoding", "h2-workaround-bogus-websocket-clients", "hard-stop-after", "http-err-codes", "http-fail-codes", "insecure-fork-wanted", "insecure-setuid-wanted", "issuers-chain-path", "key-base", "limited-quic", "localpeer", "log", "log-send-hostname", "log-tag", "lua-load", "lua-load-per-thread", "lua-prepend-path", "master-worker", "max-spread-checks", "max-threads-per-group", "maxcompcpuusage", "maxcomprate", "maxconn", "maxconnrate", "maxpipes", "maxsessrate", "maxsslconn", "maxsslrate", "maxzlibmem", "mworker-max-reloads", "nbthread", "no-memory-trimming", "no-quic", "node", "noepoll", "noevports", "nogetaddrinfo", "nokqueue", "noktls", "nopoll", "noreuseport", "nosplice", "numa-cpu-mapping", "pidfile", "pp2-never-send-local", "prealloc-fd", "presetenv", "quick-exit", "quiet", "resetenv", "server-state-base", "server-state-file", "set-dumpable", "set-var", "set-var-fmt", "setcap", "setenv", "shm-stats-file", "shm-stats-file-max-objects", "spread-checks", "stats", "stats-file", "stress-level", "strict-limits", "thread-group", "thread-groups", "thread-hard-limit", "uid", "ulimit-n", "unix-bind", "unsetenv", "user", "warn-blocked-traffic-after", "worker-id", "zero-warning"],
+    "prefixes": ["tune.", "ssl-", "httpclient.", "profiling.", "ocsp-update.", "harden.", "51degrees-", "wurfl-", "deviceatlas-", "acme.", "jwt."],
+    "negatable": ["log", "busy-polling", "set-dumpable", "strict-limits", "insecure-fork-wanted", "numa-cpu-mapping"]
+  },
+  "proxy": {
+    "acl": "nflb",
+    "backlog": "dfl",
+    "balance": "dlb",
+    "be-unpublished": "lb",
+    "bind": "fl",
+    "capture": "fl",
+    "clitcpka-cnt": "dfl",
+    "clitcpka-idle": "dfl",
+    "clitcpka-intvl": "dfl",
+    "compression": "dflb",
+    "cookie": "dlb",
+    "declare": "fl",
+    "decompression": "dflb",
+    "default-server": "dlb",
+    "default_backend": "dfl",
+    "description": "flb",
+    "disabled": "dflb",
+    "dispatch": "lb",
+    "dynamic-cookie-key": "dlb",
+    "email-alert": "dflb",
+    "enabled": "dflb",
+    "error-log-format": "dfl",
+    "errorfile": "dflb",
+    "errorfiles": "dflb",
+    "errorloc": "dflb",
+    "errorloc302": "dflb",
+    "errorloc303": "dflb",
+    "external-check": "dlb",
+    "filter": "flb",
+    "force-be-switch": "fl",
+    "force-persist": "lb",
+    "fullconn": "dlb",
+    "guid": "flb",
+    "hash-balance-factor": "dlb",
+    "hash-preserve-affinity": "dlb",
+    "hash-type": "dlb",
+    "http-after-response": "nflb",
+    "http-check": "dlb",
+    "http-error": "dflb",
+    "http-request": "nflb",
+    "http-response": "nflb",
+    "http-reuse": "dlb",
+    "http-send-name-header": "dlb",
+    "id": "flb",
+    "ignore-persist": "lb",
+    "load-server-state-from-file": "dlb",
+    "log": "dflb",
+    "log-format": "dfl",
+    "log-format-sd": "dfl",
+    "log-steps": "dfl",
+    "log-tag": "dflb",
+    "max-keep-alive-queue": "dlb",
+    "max-session-srv-conns": "dfl",
+    "maxconn": "dfl",
+    "mode": "dflb",
+    "monitor": "fl",
+    "monitor-uri": "dfl",
+    "option": "dflb",
+    "persist": "dlb",
+    "quic-initial": "nfl",
+    "rate-limit": "dfl",
+    "redirect": "flb",
+    "retries": "dlb",
+    "retry-on": "dlb",
+    "server": "lb",
+    "server-state-file-name": "dlb",
+    "server-template": "lb",
+    "source": "dlb",
+    "srvtcpka-cnt": "dlb",
+    "srvtcpka-idle": "dlb",
+    "srvtcpka-intvl": "dlb",
+    "ssl-f-use": "fl",
+    "stats": "dflb",
+    "stick": "lb",
+    "stick-table": "flb",
+    "tcp-check": "dlb",
+    "tcp-request": "nflb",
+    "tcp-response": "nlb",
+    "timeout": "dflb",
+    "transparent": "dlb",
+    "unique-id-format": "dflb",
+    "unique-id-header": "dfl",
+    "use-fcgi-app": "lb",
+    "use-server": "lb",
+    "use_backend": "fl"
+  },
+  "proxy_sub": {
+    "capture cookie": "fl",
+    "capture request": "fl",
+    "capture response": "fl",
+    "declare capture": "fl",
+    "email-alert from": "dflb",
+    "email-alert level": "dflb",
+    "email-alert mailers": "dflb",
+    "email-alert myhostname": "dflb",
+    "email-alert to": "dflb",
+    "external-check command": "dlb",
+    "external-check path": "dlb",
+    "http-check comment": "dlb",
+    "http-check connect": "dlb",
+    "http-check disable-on-404": "dlb",
+    "http-check expect": "dlb",
+    "http-check send": "dlb",
+    "http-check send-state": "dlb",
+    "http-check set-var": "dlb",
+    "http-check unset-var": "dlb",
+    "monitor fail": "fl",
+    "persist rdp-cookie": "dlb",
+    "rate-limit sessions": "dfl",
+    "stats admin": "flb",
+    "stats auth": "dflb",
+    "stats enable": "dflb",
+    "stats hide-version": "dflb",
+    "stats http-request": "flb",
+    "stats realm": "dflb",
+    "stats refresh": "dflb",
+    "stats scope": "dflb",
+    "stats show-desc": "dflb",
+    "stats show-legends": "dflb",
+    "stats show-node": "dflb",
+    "stats show-version": "dflb",
+    "stats uri": "dflb",
+    "stick match": "lb",
+    "stick on": "lb",
+    "stick store-request": "lb",
+    "stick store-response": "lb",
+    "tcp-check comment": "dlb",
+    "tcp-check connect": "dlb",
+    "tcp-check expect": "dlb",
+    "tcp-check send": "dlb",
+    "tcp-check send-binary": "dlb",
+    "tcp-check send-binary-lf": "dlb",
+    "tcp-check send-lf": "dlb",
+    "tcp-check set-var": "dlb",
+    "tcp-check unset-var": "dlb",
+    "tcp-request connection": "nfl",
+    "tcp-request content": "nflb",
+    "tcp-request inspect-delay": "nflb",
+    "tcp-request session": "nfl",
+    "tcp-response content": "nlb",
+    "tcp-response inspect-delay": "nlb",
+    "timeout check": "dlb",
+    "timeout client": "dfl",
+    "timeout client-fin": "dfl",
+    "timeout client-hs": "dfl",
+    "timeout connect": "dlb",
+    "timeout http-keep-alive": "dflb",
+    "timeout http-request": "dflb",
+    "timeout queue": "dlb",
+    "timeout server": "dlb",
+    "timeout server-fin": "dlb",
+    "timeout tarpit": "dflb",
+    "timeout tunnel": "dlb"
+  },
+  "proxy_strict_sub": ["capture", "declare", "email-alert", "external-check", "monitor", "persist", "rate-limit", "stick", "tcp-request", "tcp-response"],
+  "proxy_negatable": ["option", "log"],
+  "options": {
+    "abortonclose": "dlb",
+    "accept-invalid-http-request": "dfl",
+    "accept-invalid-http-response": "dlb",
+    "accept-unsafe-violations-in-http-request": "dfl",
+    "accept-unsafe-violations-in-http-response": "dlb",
+    "allbackups": "dlb",
+    "assume-rfc6587-ntf": "dfl",
+    "checkcache": "dlb",
+    "clitcpka": "dfl",
+    "contstats": "dfl",
+    "disable-h2-upgrade": "dfl",
+    "dont-parse-log": "dfl",
+    "dontlog-normal": "dfl",
+    "dontlognull": "dfl",
+    "external-check": "dlb",
+    "forwarded": "dlb",
+    "forwardfor": "dflb",
+    "h1-case-adjust-bogus-client": "dfl",
+    "h1-case-adjust-bogus-server": "dlb",
+    "http-buffer-request": "dflb",
+    "http-drop-request-trailers": "dlb",
+    "http-drop-response-trailers": "dfl",
+    "http-ignore-probes": "dfl",
+    "http-keep-alive": "dflb",
+    "http-no-delay": "dflb",
+    "http-pretend-keepalive": "dlb",
+    "http-restrict-req-hdr-names": "dflb",
+    "http-server-close": "dflb",
+    "http-use-proxy-header": "dfl",
+    "httpchk": "dlb",
+    "httpclose": "dflb",
+    "httplog": "dfl",
+    "httpslog": "dfl",
+    "idle-close-on-response": "dfl",
+    "independent-streams": "dflb",
+    "ldap-check": "dlb",
+    "log-health-checks": "dlb",
+    "log-separate-errors": "dfl",
+    "logasap": "dfl",
+    "mysql-check": "dlb",
+    "nolinger": "dflb",
+    "originalto": "dflb",
+    "persist": "dlb",
+    "pgsql-check": "dlb",
+    "prefer-last-server": "dlb",
+    "redis-check": "dlb",
+    "redispatch": "dlb",
+    "smtpchk": "dlb",
+    "socket-stats": "dfl",
+    "splice-auto": "dflb",
+    "splice-request": "dflb",
+    "splice-response": "dflb",
+    "spop-check": "dlb",
+    "srvtcpka": "dlb",
+    "ssl-hello-chk": "dlb",
+    "tcp-check": "dlb",
+    "tcp-smart-accept": "dfl",
+    "tcp-smart-connect": "dlb",
+    "tcpka": "dflb",
+    "tcplog": "dfl",
+    "transparent": "dlb",
+    "use-small-buffers": "dlb"
+  },
+  "options_no_negation": ["external-check", "forwardfor", "http-restrict-req-hdr-names", "httpchk", "httplog", "httpslog", "ldap-check", "mysql-check", "originalto", "pgsql-check", "redis-check", "smtpchk", "spop-check", "ssl-hello-chk", "tcp-check", "tcpka", "tcplog"],
+  "option_args": {
+    "abortonclose": "none",
+    "accept-invalid-http-request": "none",
+    "accept-invalid-http-response": "none",
+    "accept-unsafe-violations-in-http-request": "none",
+    "accept-unsafe-violations-in-http-response": "none",
+    "allbackups": "none",
+    "assume-rfc6587-ntf": "none",
+    "checkcache": "none",
+    "clitcpka": "none",
+    "contstats": "none",
+    "disable-h2-upgrade": "none",
+    "dont-parse-log": "none",
+    "dontlog-normal": "none",
+    "dontlognull": "none",
+    "h1-case-adjust-bogus-client": "none",
+    "h1-case-adjust-bogus-server": "none",
+    "http-buffer-request": "none",
+    "http-drop-request-trailers": "none",
+    "http-drop-response-trailers": "none",
+    "http-ignore-probes": "none",
+    "http-keep-alive": "none",
+    "http-no-delay": "none",
+    "http-pretend-keepalive": "none",
+    "http-server-close": "none",
+    "http-use-proxy-header": "none",
+    "httpclose": "none",
+    "httplog": "clf",
+    "idle-close-on-response": "none",
+    "independent-streams": "none",
+    "log-health-checks": "none",
+    "log-separate-errors": "none",
+    "logasap": "none",
+    "nolinger": "none",
+    "persist": "none",
+    "prefer-last-server": "none",
+    "socket-stats": "none",
+    "splice-auto": "none",
+    "splice-request": "none",
+    "splice-response": "none",
+    "srvtcpka": "none",
+    "tcp-smart-accept": "none",
+    "tcp-smart-connect": "none",
+    "tcpka": "none",
+    "tcplog": "clf",
+    "transparent": "none"
+  },
+  "server": {
+    "addr": 1,
+    "agent-addr": 1,
+    "agent-check": 0,
+    "agent-inter": 1,
+    "agent-port": 1,
+    "agent-send": 1,
+    "allow-0rtt": 0,
+    "alpn": 1,
+    "backup": 0,
+    "ca-file": 1,
+    "cc": 1,
+    "check": 0,
+    "check-alpn": 1,
+    "check-pool-conn-name": 1,
+    "check-proto": 1,
+    "check-reuse-pool": 0,
+    "check-send-proxy": 0,
+    "check-sni": 1,
+    "check-sni-auto": 0,
+    "check-ssl": 0,
+    "check-via-socks4": 0,
+    "ciphers": 1,
+    "ciphersuites": 1,
+    "client-sigalgs": 1,
+    "cookie": 1,
+    "crl-file": 1,
+    "crt": 1,
+    "curves": 1,
+    "disabled": 0,
+    "downinter": 1,
+    "enabled": 0,
+    "error-limit": 1,
+    "fall": 1,
+    "fastinter": 1,
+    "force-sslv3": 0,
+    "force-tlsv10": 0,
+    "force-tlsv11": 0,
+    "force-tlsv12": 0,
+    "force-tlsv13": 0,
+    "guid": 1,
+    "hash-key": 1,
+    "healthcheck": 1,
+    "id": 1,
+    "idle-ping": 1,
+    "init-addr": 1,
+    "init-state": 1,
+    "inter": 1,
+    "ktls": 1,
+    "log-bufsize": 1,
+    "log-proto": 1,
+    "max-reuse": 1,
+    "maxconn": 1,
+    "maxqueue": 1,
+    "minconn": 1,
+    "namespace": 1,
+    "no-agent-check": 0,
+    "no-backup": 0,
+    "no-check": 0,
+    "no-check-reuse-pool": 0,
+    "no-check-send-proxy": 0,
+    "no-check-sni-auto": 0,
+    "no-check-ssl": 0,
+    "no-renegotiate": 0,
+    "no-send-proxy": 0,
+    "no-send-proxy-v2": 0,
+    "no-send-proxy-v2-ssl": 0,
+    "no-send-proxy-v2-ssl-cn": 0,
+    "no-sni-auto": 0,
+    "no-ssl": 0,
+    "no-ssl-reuse": 0,
+    "no-sslv3": 0,
+    "no-tfo": 0,
+    "no-tls-tickets": 0,
+    "no-tlsv10": 0,
+    "no-tlsv11": 0,
+    "no-tlsv12": 0,
+    "no-tlsv13": 0,
+    "no-verifyhost": 0,
+    "non-stick": 0,
+    "npn": 1,
+    "observe": 1,
+    "on-error": 1,
+    "on-marked-down": 1,
+    "on-marked-up": 1,
+    "pool-conn-name": 1,
+    "pool-low-conn": 1,
+    "pool-max-conn": 1,
+    "pool-purge-delay": 1,
+    "port": 1,
+    "proto": 1,
+    "proxy-v2-options": 1,
+    "quic-cc-algo": 1,
+    "redir": 1,
+    "renegotiate": 0,
+    "resolve-net": 1,
+    "resolve-opts": 1,
+    "resolve-prefer": 1,
+    "resolvers": 1,
+    "rise": 1,
+    "send-proxy": 0,
+    "send-proxy-v2": 0,
+    "send-proxy-v2-ssl": 0,
+    "send-proxy-v2-ssl-cn": 0,
+    "set-proxy-v2-tlv-fmt": 1,
+    "shard": 1,
+    "sigalgs": 1,
+    "slowstart": 1,
+    "sni": 1,
+    "sni-auto": 0,
+    "socks4": 1,
+    "source": -1,
+    "ssl": 0,
+    "ssl-max-ver": 1,
+    "ssl-min-ver": 1,
+    "ssl-reuse": 0,
+    "stick": 0,
+    "strict-maxconn": 0,
+    "tcp-md5sig": 1,
+    "tcp-ut": 1,
+    "tfo": 0,
+    "tls-tickets": 0,
+    "track": 1,
+    "usesrc": 1,
+    "verify": 1,
+    "verifyhost": 1,
+    "weight": 1,
+    "ws": 1
+  },
+  "bind": {
+    "accept-netscaler-cip": 1,
+    "accept-proxy": 0,
+    "allow-0rtt": 0,
+    "alpn": 1,
+    "backlog": 1,
+    "ca-file": 1,
+    "ca-ignore-err": 1,
+    "ca-sign-file": 1,
+    "ca-sign-pass": 1,
+    "ca-verify-file": 1,
+    "cc": 1,
+    "ciphers": 1,
+    "ciphersuites": 1,
+    "client-sigalgs": 1,
+    "crl-file": 1,
+    "crt": 1,
+    "crt-ignore-err": 1,
+    "crt-list": 1,
+    "curves": 1,
+    "default-crt": 1,
+    "defer-accept": 0,
+    "ecdhe": 1,
+    "ech": 1,
+    "expose-fd": 1,
+    "force-sslv3": 0,
+    "force-tlsv10": 0,
+    "force-tlsv11": 0,
+    "force-tlsv12": 0,
+    "force-tlsv13": 0,
+    "generate-certificates": 0,
+    "gid": 1,
+    "group": 1,
+    "guid-prefix": 1,
+    "id": 1,
+    "idle-ping": 1,
+    "interface": 1,
+    "ktls": 1,
+    "label": 1,
+    "level": 1,
+    "maxconn": 1,
+    "mode": 1,
+    "mss": 1,
+    "name": 1,
+    "namespace": 1,
+    "nbconn": 1,
+    "nice": 1,
+    "no-alpn": 0,
+    "no-ca-names": 0,
+    "no-sslv3": 0,
+    "no-strict-sni": 0,
+    "no-tls-tickets": 0,
+    "no-tlsv10": 0,
+    "no-tlsv11": 0,
+    "no-tlsv12": 0,
+    "no-tlsv13": 0,
+    "npn": 1,
+    "ocsp-update": 1,
+    "prefer-client-ciphers": 0,
+    "process": 1,
+    "proto": 1,
+    "quic-cc-algo": 1,
+    "quic-force-retry": 0,
+    "quic-socket": 1,
+    "severity-output": 1,
+    "shards": 1,
+    "sigalgs": 1,
+    "ssl": 0,
+    "ssl-max-ver": 1,
+    "ssl-min-ver": 1,
+    "strict-sni": 0,
+    "tcp-md5sig": 1,
+    "tcp-ss": 1,
+    "tcp-ut": 1,
+    "tfo": 0,
+    "thread": 1,
+    "tls-ticket-keys": 1,
+    "tls-tickets": 0,
+    "transparent": 0,
+    "uid": 1,
+    "user": 1,
+    "v4v6": 0,
+    "v6only": 0,
+    "verify": 1
+  },
+  "timeouts": {
+    "proxy": ["check", "client", "client-fin", "client-hs", "connect", "http-keep-alive", "http-request", "queue", "server", "server-fin", "tarpit", "tunnel"],
+    "resolvers": ["resolve", "retry"],
+    "ring": ["connect", "server"],
+    "log-forward": ["client"],
+    "mailers": ["mail"]
+  },
+  "modes": {
+    "tcp": "dflb",
+    "http": "dflb",
+    "log": "dlb",
+    "spop": "dlb"
+  },
+  "balance": ["first", "hash", "hdr", "leastconn", "log-hash", "random", "rdp-cookie", "roundrobin", "source", "static-rr", "sticky", "uri", "url_param"],
+  "hash_type": {
+    "methods": ["consistent", "map-based"],
+    "functions": ["crc32", "djb2", "none", "sdbm", "wt6"],
+    "modifiers": ["avalanche"]
+  },
+  "log": {
+    "facilities": ["kern", "user", "mail", "daemon", "auth", "syslog", "lpr", "news", "uucp", "cron", "auth2", "ftp", "ntp", "audit", "alert", "cron2", "local0", "local1", "local2", "local3", "local4", "local5", "local6", "local7"],
+    "levels": ["emerg", "alert", "crit", "err", "warning", "notice", "info", "debug"],
+    "options": ["format", "len", "profile", "sample"]
+  },
+  "other_sections": {
+    "resolvers": ["accepted_payload_size", "hold", "nameserver", "parse-resolv-conf", "resolution_pool_size", "resolve_retries", "timeout"],
+    "peers": ["bind", "default-bind", "default-server", "disabled", "enable", "enabled", "log", "peer", "server", "shards", "table"],
+    "userlist": ["group", "user"],
+    "cache": ["max-age", "max-object-size", "max-secondary-entries", "process-vary", "total-max-size"],
+    "program": ["command", "group", "no", "option", "user"],
+    "http-errors": ["errorfile"],
+    "ring": ["backing-file", "description", "format", "maxlen", "server", "size", "timeout"],
+    "log-forward": ["backlog", "bind", "dgram-bind", "log", "maxconn", "no", "option", "timeout"],
+    "mailers": ["mailer", "timeout"],
+    "crt-store": ["crt-base", "key-base", "load"],
+    "traces": ["trace"],
+    "acme": ["account-key", "bits", "challenge", "contact", "curves", "directory", "keytype", "map"]
+  }
+}
diff --git a/internal/panel/haproxy_lint.go b/internal/panel/haproxy_lint.go
new file mode 100644
index 0000000..05984d0
--- /dev/null
+++ b/internal/panel/haproxy_lint.go
@@ -0,0 +1,852 @@
+package panel
+
+import (
+	"fmt"
+	"net"
+	"regexp"
+	"sort"
+	"strconv"
+	"strings"
+	"unicode/utf8"
+)
+
+// Static HAProxy configuration linter for the advanced editor. The Panel
+// image has no haproxy binary, so this is a best-effort structural check;
+// the Agent still runs `haproxy -c` before every apply and stays the final
+// gate. Errors are things HAProxy is known to reject; warnings are things it
+// may accept but that are probably mistakes (or keywords this allowlist does
+// not know yet).
+
+const (
+	LintSeverityError   = "error"
+	LintSeverityWarning = "warning"
+
+	maxLintIssues              = 500
+	maxLintLineWords           = 64 // HAProxy MAX_LINE_ARGS
+	maxServerTemplateExpansion = 4096
+)
+
+type LintIssue struct {
+	Line      int    `json:"line"`
+	Column    int    `json:"column"`
+	EndColumn int    `json:"end_column"`
+	Severity  string `json:"severity"`
+	Code      string `json:"code"`
+	Message   string `json:"message"`
+}
+
+type LintSection struct {
+	Type string `json:"type"`
+	Name string `json:"name"`
+	Line int    `json:"line"`
+}
+
+type LintResult struct {
+	Valid            bool          `json:"valid"`
+	Issues           []LintIssue   `json:"issues"`
+	ListenerTCPPorts []int         `json:"listener_tcp_ports"`
+	Sections         []LintSection `json:"sections"`
+	// listenerPortsOverflow is set when bind lines expand to more ports than
+	// the firewall plan accepts; such a list must not be stored.
+	listenerPortsOverflow bool
+}
+
+// Counts returns the number of error and warning issues.
+func (r LintResult) Counts() (errs, warnings int) {
+	for _, issue := range r.Issues {
+		if issue.Severity == LintSeverityError {
+			errs++
+		} else {
+			warnings++
+		}
+	}
+	return errs, warnings
+}
+
+// FirewallPortsUsable reports whether ListenerTCPPorts may be stored as a
+// complete firewall listener plan.
+func (r LintResult) FirewallPortsUsable() bool {
+	return !r.listenerPortsOverflow && len(r.ListenerTCPPorts) <= maxFirewallPorts
+}
+
+var lintTimeoutValue = regexp.MustCompile(`^[0-9]+(us|ms|s|m|h|d)?$`)
+var lintProxyName = regexp.MustCompile(`^[A-Za-z0-9_.:-]+$`)
+
+var lintSectionKeywords = map[string]bool{
+	"global": true, "defaults": true, "frontend": true, "backend": true, "listen": true,
+	"resolvers": true, "peers": true, "userlist": true, "cache": true, "program": true,
+	"http-errors": true, "ring": true, "log-forward": true, "mailers": true,
+	"crt-store": true, "traces": true, "acme": true,
+}
+
+// Address prefixes accepted by HAProxy's str2sa_range. Non-network families
+// carry no port.
+var lintAddrFamilies = map[string]string{
+	"ipv4": "tcp", "ipv6": "tcp", "tcp": "tcp", "tcp4": "tcp", "tcp6": "tcp",
+	"mptcp": "tcp", "mptcp4": "tcp", "mptcp6": "tcp",
+	"udp": "udp", "udp4": "udp", "udp6": "udp", "quic": "udp", "quic4": "udp", "quic6": "udp",
+	"unix": "local", "abns": "local", "abnsz": "local", "fd": "local", "sockpair": "local",
+	"rhttp": "local", "uxst": "local", "uxdg": "local",
+}
+
+type lintWord struct {
+	text   string
+	col    int  // 1-based rune column
+	end    int  // exclusive
+	quoted bool // contained quotes or backslash escapes
+}
+
+type lintProxy struct {
+	typ     string
+	name    string
+	line    int
+	servers map[string]bool
+}
+
+type lintBackendRef struct {
+	name string
+	line int
+	word lintWord
+}
+
+type lintCond struct {
+	line    int
+	sawElse bool
+}
+
+type linter struct {
+	issues        []LintIssue
+	truncated     bool
+	sections      []LintSection
+	frontends     map[string]int
+	backends      map[string]*lintProxy
+	namedSections map[string]map[string]int
+	refs          []lintBackendRef
+	ports         map[int]struct{}
+	portOverflow  bool
+	namedDefaults bool
+}
+
+func (l *linter) add(line int, w lintWord, severity, code, message string) {
+	if len(l.issues) >= maxLintIssues {
+		l.truncated = true
+		return
+	}
+	col, end := w.col, w.end
+	if col < 1 {
+		col = 1
+	}
+	if end < col {
+		end = col
+	}
+	l.issues = append(l.issues, LintIssue{Line: line, Column: col, EndColumn: end, Severity: severity, Code: code, Message: message})
+}
+
+func (l *linter) errorf(line int, w lintWord, code, format string, args ...any) {
+	l.add(line, w, LintSeverityError, code, fmt.Sprintf(format, args...))
+}
+
+func (l *linter) warnf(line int, w lintWord, code, format string, args ...any) {
+	l.add(line, w, LintSeverityWarning, code, fmt.Sprintf(format, args...))
+}
+
+// LintHAProxyConfig statically checks a complete HAProxy configuration.
+func LintHAProxyConfig(cfg string) LintResult {
+	result, _ := lintHAProxy(cfg)
+	return result
+}
+
+// LintHAProxyConfigForNode additionally warns when runtime names that the
+// last generated revision exposed (nf_be_*/nf_srv_*) are missing: traffic
+// statistics, quotas and Agent weight control are keyed by them.
+func LintHAProxyConfigForNode(cfg string, expected []RouteRuntimeNames) LintResult {
+	result, l := lintHAProxy(cfg)
+	if l == nil {
+		return result
+	}
+	seen := make(map[string]bool)
+	for _, runtime := range expected {
+		backend := runtime.Backend
+		if !strings.HasPrefix(backend, "nf_be_") || seen[backend] {
+			continue
+		}
+		seen[backend] = true
+		proxy := l.backends[backend]
+		if proxy == nil {
+			l.warnf(1, lintWord{col: 1, end: 2}, "runtime_name_missing",
+				"Нет backend «%s» (маршрут %s): трафик и квоты этого маршрута не будут учитываться", backend, runtime.RouteID)
+			continue
+		}
+		if runtime.MultiServer || !strings.HasPrefix(runtime.Server, "nf_srv_") {
+			continue
+		}
+		if !proxy.servers[runtime.Server] {
+			l.warnf(proxy.line, lintWord{col: 1, end: 1 + utf8.RuneCountInString(proxy.typ+" "+proxy.name)}, "runtime_name_missing",
+				"В backend «%s» нет server «%s»: квоты маршрута не будут применяться", backend, runtime.Server)
+		}
+	}
+	return l.finish()
+}
+
+func lintHAProxy(cfg string) (LintResult, *linter) {
+	l := &linter{
+		frontends:     map[string]int{},
+		backends:      map[string]*lintProxy{},
+		namedSections: map[string]map[string]int{},
+		ports:         map[int]struct{}{},
+	}
+	if len(cfg) > MaxManagedConfigBytes {
+		l.errorf(1, lintWord{col: 1, end: 1}, "config_too_large", "Конфигурация больше %d КиБ", MaxManagedConfigBytes/1024)
+		return l.finish(), nil
+	}
+	if strings.TrimSpace(cfg) == "" {
+		l.errorf(1, lintWord{col: 1, end: 1}, "config_empty", "Конфигурация пуста")
+		return l.finish(), nil
+	}
+	var (
+		sectionType string
+		proxy       *lintProxy
+		conds       []lintCond
+	)
+	lines := strings.Split(cfg, "\n")
+	for index, raw := range lines {
+		lineNo := index + 1
+		if i := strings.IndexByte(raw, 0); i >= 0 {
+			col := utf8.RuneCountInString(raw[:i]) + 1
+			l.errorf(lineNo, lintWord{col: col, end: col + 1}, "nul_byte", "Недопустимый NUL-байт")
+			continue
+		}
+		if !utf8.ValidString(raw) {
+			l.errorf(lineNo, lintWord{col: 1, end: 1 + utf8.RuneCountInString(raw)}, "invalid_utf8", "Строка не в кодировке UTF-8")
+			continue
+		}
+		words, unterminated := lintTokenize(raw)
+		if unterminated > 0 {
+			l.errorf(lineNo, lintWord{col: unterminated, end: unterminated + 1}, "unterminated_quote", "Незакрытая кавычка")
+		}
+		if len(words) == 0 {
+			continue
+		}
+		if len(words) > maxLintLineWords {
+			l.errorf(lineNo, words[maxLintLineWords], "too_many_words", "Больше %d слов в строке: HAProxy отбросит остаток", maxLintLineWords)
+		}
+		kw := words[0]
+		// Conditional blocks.
+		if strings.HasPrefix(kw.text, ".") {
+			switch kw.text {
+			case ".if":
+				if len(words) < 2 {
+					l.errorf(lineNo, kw, "cond_missing_expression", "У .if нет условия")
+				}
+				conds = append(conds, lintCond{line: lineNo})
+			case ".elif":
+				if len(conds) == 0 {
+					l.errorf(lineNo, kw, "cond_unbalanced", ".elif без .if")
+				} else if conds[len(conds)-1].sawElse {
+					l.errorf(lineNo, kw, "cond_unbalanced", ".elif после .else")
+				}
+			case ".else":
+				if len(conds) == 0 {
+					l.errorf(lineNo, kw, "cond_unbalanced", ".else без .if")
+				} else if conds[len(conds)-1].sawElse {
+					l.errorf(lineNo, kw, "cond_unbalanced", "Повторный .else")
+				} else {
+					conds[len(conds)-1].sawElse = true
+				}
+			case ".endif":
+				if len(conds) == 0 {
+					l.errorf(lineNo, kw, "cond_unbalanced", ".endif без .if")
+				} else {
+					conds = conds[:len(conds)-1]
+				}
+			case ".diag", ".notice", ".warning", ".alert", ".line":
+			default:
+				l.warnf(lineNo, kw, "unknown_directive", "Неизвестная директива «%s»", kw.text)
+			}
+			continue
+		}
+		if lintSectionKeywords[kw.text] {
+			sectionType = kw.text
+			proxy = l.openSection(lineNo, words)
+			continue
+		}
+		if sectionType == "" {
+			if kw.col == 1 && !lintKnownKeyword("global", kw.text) && !lintKnownKeyword("defaults", kw.text) {
+				l.errorf(lineNo, kw, "unknown_section", "Неизвестная секция «%s»", kw.text)
+			} else {
+				l.errorf(lineNo, kw, "outside_section", "Директива «%s» вне секции", kw.text)
+			}
+			continue
+		}
+		// "no"/"default" modifiers shift the arguments (cfgparse.c).
+		modifier := ""
+		if (kw.text == "no" || kw.text == "default") && len(words) > 1 {
+			modifier = kw.text
+			words = words[1:]
+			kw = words[0]
+		}
+		// HAProxy ignores indentation; an unknown keyword at column 1 most
+		// likely is a misspelled section header.
+		known := lintKnownKeyword(sectionType, kw.text)
+		if kw.col == 1 && !known && modifier == "" {
+			if base, n := lintTrailingPunct(kw.text); n > 0 && lintKnownKeyword(sectionType, base) {
+				l.errorf(lineNo, lintPunctWord(kw, n), "stray_punctuation", "Лишний символ «%s» после «%s»", kw.text[len(base):], base)
+			} else {
+				l.errorf(lineNo, kw, "unknown_section", "Неизвестная секция «%s»", kw.text)
+			}
+			continue
+		}
+		if !known {
+			l.unknownDirective(lineNo, sectionType, kw)
+			continue
+		}
+		if modifier != "" && !lintNegatable(sectionType, kw.text) {
+			l.errorf(lineNo, kw, "negation_not_supported", "Префикс «%s» не поддерживается для «%s»", modifier, kw.text)
+			continue
+		}
+		if lintIsProxySection(sectionType) && !l.proxyKeywordAllowed(lineNo, sectionType, words) {
+			continue
+		}
+		before := len(l.issues)
+		l.directive(lineNo, sectionType, proxy, words, modifier)
+		l.strayTail(lineNo, words, before)
+	}
+	for _, cond := range conds {
+		l.errorf(cond.line, lintWord{col: 1, end: 4}, "cond_unbalanced", ".if без .endif")
+	}
+	for _, ref := range l.refs {
+		if l.backends[ref.name] == nil {
+			l.errorf(ref.line, ref.word, "undefined_backend", "Backend «%s» не определён", ref.name)
+		}
+	}
+	return l.finish(), l
+}
+
+func (l *linter) finish() LintResult {
+	issues := append([]LintIssue(nil), l.issues...)
+	sort.SliceStable(issues, func(i, j int) bool {
+		if issues[i].Line != issues[j].Line {
+			return issues[i].Line < issues[j].Line
+		}
+		return issues[i].Column < issues[j].Column
+	})
+	if l.truncated {
+		issues = append(issues, LintIssue{Line: 1, Column: 1, EndColumn: 1, Severity: LintSeverityWarning, Code: "too_many_issues", Message: fmt.Sprintf("Показаны первые %d замечаний", maxLintIssues)})
+	}
+	ports := make([]int, 0, len(l.ports))
+	for port := range l.ports {
+		ports = append(ports, port)
+	}
+	sort.Ints(ports)
+	sections := append([]LintSection{}, l.sections...)
+	result := LintResult{Issues: issues, ListenerTCPPorts: ports, Sections: sections, listenerPortsOverflow: l.portOverflow}
+	errs, _ := result.Counts()
+	result.Valid = errs == 0
+	if result.Issues == nil {
+		result.Issues = []LintIssue{}
+	}
+	return result
+}
+
+func (l *linter) openSection(lineNo int, words []lintWord) *lintProxy {
+	kw := words[0]
+	name := ""
+	if len(words) > 1 {
+		name = words[1].text
+	}
+	l.sections = append(l.sections, LintSection{Type: kw.text, Name: name, Line: lineNo})
+	switch kw.text {
+	case "global":
+		return nil
+	case "defaults":
+		// "defaults from <name>" is anonymous; "defaults <name> [from <x>]" is named.
+		l.namedDefaults = name != "" && !(name == "from" && len(words) == 3)
+		return nil
+	case "frontend", "backend", "listen":
+		if name == "" {
+			l.errorf(lineNo, kw, "missing_name", "У секции %s нет имени", kw.text)
+			return &lintProxy{typ: kw.text, line: lineNo, servers: map[string]bool{}}
+		}
+		nameWord := words[1]
+		if !lintProxyName.MatchString(name) {
+			l.errorf(lineNo, nameWord, "invalid_name", "Недопустимые символы в имени «%s»", name)
+		}
+		proxy := &lintProxy{typ: kw.text, name: name, line: lineNo, servers: map[string]bool{}}
+		if kw.text != "backend" {
+			if prev, dup := l.frontends[name]; dup {
+				l.errorf(lineNo, nameWord, "duplicate_proxy", "Прокси «%s» уже объявлен в строке %d", name, prev)
+			} else {
+				l.frontends[name] = lineNo
+			}
+		}
+		if kw.text != "frontend" {
+			if prev, dup := l.backends[name]; dup {
+				if kw.text == "backend" || l.frontends[name] == lineNo {
+					l.errorf(lineNo, nameWord, "duplicate_proxy", "Прокси «%s» уже объявлен в строке %d", name, prev.line)
+				}
+			} else {
+				l.backends[name] = proxy
+			}
+		}
+		if kw.text == "listen" && len(words) > 2 {
+			// Legacy "listen <name> <addr>" syntax.
+			l.bindAddresses(lineNo, words[2], true)
+		}
+		return proxy
+	default:
+		if name != "" {
+			seen := l.namedSections[kw.text]
+			if seen == nil {
+				seen = map[string]int{}
+				l.namedSections[kw.text] = seen
+			}
+			if prev, dup := seen[name]; dup {
+				l.errorf(lineNo, words[1], "duplicate_section", "Секция %s «%s» уже объявлена в строке %d", kw.text, name, prev)
+			} else {
+				seen[name] = lineNo
+			}
+		} else if kw.text != "traces" && kw.text != "crt-store" && kw.text != "program" {
+			l.errorf(lineNo, kw, "missing_name", "У секции %s нет имени", kw.text)
+		}
+		if kw.text == "peers" {
+			return &lintProxy{typ: kw.text, name: name, line: lineNo, servers: map[string]bool{}}
+		}
+		return nil
+	}
+}
+
+func (l *linter) directive(lineNo int, section string, proxy *lintProxy, words []lintWord, modifier string) {
+	kw := words[0]
+	proxySection := lintIsProxySection(section)
+	switch kw.text {
+	case "timeout":
+		l.timeout(lineNo, section, words)
+	case "option":
+		if proxySection {
+			l.option(lineNo, section, words, modifier)
+		}
+	case "mode":
+		if proxySection {
+			l.mode(lineNo, section, words)
+		}
+	case "balance":
+		if proxySection {
+			l.balance(lineNo, words)
+		}
+	case "hash-type":
+		if proxySection {
+			l.hashType(lineNo, words)
+		}
+	case "log":
+		if (proxySection || section == "global") && modifier == "" {
+			l.logTarget(lineNo, section, words)
+		}
+	case "stats":
+		if section == "global" && len(words) > 2 && words[1].text == "socket" {
+			l.bindKeywords(lineNo, words, 3)
+		}
+	case "default-server":
+		l.serverKeywords(lineNo, words, 1)
+	case "bind":
+		if len(words) < 2 {
+			l.errorf(lineNo, kw, "bind_missing_address", "У bind нет адреса")
+			return
+		}
+		l.bindAddresses(lineNo, words[1], section == "frontend" || section == "listen")
+		l.bindKeywords(lineNo, words, 2)
+	case "server", "server-template":
+		switch section {
+		case "backend", "listen", "peers", "ring":
+		default:
+			return
+		}
+		if kw.text == "server" {
+			l.server(lineNo, section, proxy, words)
+		} else {
+			l.serverTemplate(lineNo, proxy, words)
+		}
+	case "nameserver", "peer", "mailer":
+		if len(words) < 3 {
+			l.errorf(lineNo, kw, "missing_address", "У %s нет имени или адреса", kw.text)
+			return
+		}
+		l.checkServerAddress(lineNo, words[2], false)
+	case "use_backend", "default_backend":
+		if len(words) < 2 {
+			l.errorf(lineNo, kw, "missing_backend", "У %s не указан backend", kw.text)
+			return
+		}
+		target := words[1]
+		if strings.Contains(target.text, "%[") || strings.ContainsAny(target.text, "{$") {
+			return
+		}
+		l.refs = append(l.refs, lintBackendRef{name: target.text, line: lineNo, word: target})
+	}
+}
+
+func (l *linter) timeout(lineNo int, section string, words []lintWord) {
+	kw := words[0]
+	if len(words) < 2 {
+		l.errorf(lineNo, kw, "timeout_missing_kind", "У timeout не указан тип")
+		return
+	}
+	class := section
+	switch section {
+	case "defaults", "frontend", "backend", "listen":
+		class = "proxy"
+	}
+	if kinds := lintKW.timeouts[class]; kinds != nil && !kinds[words[1].text] {
+		kind := words[1]
+		if base, n := lintTrailingPunct(kind.text); n > 0 && kinds[base] {
+			l.errorf(lineNo, lintPunctWord(kind, n), "stray_punctuation", "Лишний символ «%s» после «%s»", kind.text[len(base):], base)
+		} else {
+			l.errorf(lineNo, kind, "unknown_timeout", "Неизвестный тип timeout «%s»", kind.text)
+		}
+		return
+	}
+	if class == "proxy" {
+		if flags, ok := lintKW.proxySub["timeout "+words[1].text]; ok {
+			if allowed, _ := lintSectionAllowed(flags, section, true); !allowed {
+				l.warnf(lineNo, words[1], "timeout_ignored", "timeout %s игнорируется в секции %s", words[1].text, section)
+			}
+		}
+	}
+	if len(words) < 3 {
+		l.errorf(lineNo, words[1], "timeout_missing_value", "У timeout %s нет значения", words[1].text)
+		return
+	}
+	value := words[2]
+	if strings.Contains(value.text, "$") {
+		return
+	}
+	if !lintTimeoutValue.MatchString(value.text) {
+		l.errorf(lineNo, value, "invalid_timeout", "Неверное значение timeout «%s» (пример: 5s, 500ms, 15m)", value.text)
+	}
+}
+
+func (l *linter) server(lineNo int, section string, proxy *lintProxy, words []lintWord) {
+	kw := words[0]
+	if len(words) < 2 {
+		l.errorf(lineNo, kw, "server_missing_name", "У server нет имени")
+		return
+	}
+	name := words[1]
+	l.addServerName(lineNo, proxy, name, name.text)
+	if len(words) < 3 {
+		// A peers section names the local peer without an address.
+		if section != "peers" {
+			l.errorf(lineNo, name, "server_missing_address", "У server «%s» нет адреса", name.text)
+		}
+		return
+	}
+	l.checkServerAddress(lineNo, words[2], true)
+	l.serverKeywords(lineNo, words, 3)
+}
+
+func (l *linter) serverTemplate(lineNo int, proxy *lintProxy, words []lintWord) {
+	kw := words[0]
+	if len(words) < 4 {
+		l.errorf(lineNo, kw, "server_template_incomplete", "server-template: нужны префикс, количество и адрес")
+		return
+	}
+	prefix, count := words[1], words[2]
+	low, high := 1, 0
+	if a, b, ok := strings.Cut(count.text, "-"); ok {
+		x, errA := strconv.Atoi(a)
+		y, errB := strconv.Atoi(b)
+		if errA != nil || errB != nil || x < 1 || y < x {
+			l.errorf(lineNo, count, "invalid_server_template_count", "Неверный диапазон «%s»", count.text)
+			return
+		}
+		low, high = x, y
+	} else {
+		n, err := strconv.Atoi(count.text)
+		if err != nil || n < 1 {
+			l.errorf(lineNo, count, "invalid_server_template_count", "Неверное количество «%s»", count.text)
+			return
+		}
+		high = n
+	}
+	if high-low < maxServerTemplateExpansion {
+		for i := low; i <= high; i++ {
+			l.addServerName(lineNo, proxy, prefix, prefix.text+strconv.Itoa(i))
+		}
+	}
+	l.checkServerAddress(lineNo, words[3], true)
+	l.serverKeywords(lineNo, words, 4)
+}
+
+func (l *linter) addServerName(lineNo int, proxy *lintProxy, w lintWord, name string) {
+	if proxy == nil {
+		return
+	}
+	if proxy.servers[name] {
+		l.errorf(lineNo, w, "duplicate_server", "Server «%s» уже объявлен в %s «%s»", name, proxy.typ, proxy.name)
+		return
+	}
+	proxy.servers[name] = true
+}
+
+// checkServerAddress validates a server/nameserver address: host:port,
+// [ipv6]:port, a Unix path or a non-network family prefix.
+func (l *linter) checkServerAddress(lineNo int, w lintWord, portOptional bool) {
+	addr := w.text
+	if strings.Contains(addr, "$") {
+		return
+	}
+	family, rest := lintSplitFamily(addr)
+	if family == "local" || strings.HasPrefix(rest, "/") {
+		if rest == "" {
+			l.errorf(lineNo, w, "invalid_address", "Пустой адрес «%s»", addr)
+		}
+		return
+	}
+	host, port, hasPort, msg := lintSplitHostPort(rest)
+	if msg != "" {
+		l.errorf(lineNo, w, "invalid_address", "%s: «%s»", msg, addr)
+		return
+	}
+	if host == "" {
+		l.errorf(lineNo, w, "invalid_address", "Нет хоста в адресе «%s»", addr)
+		return
+	}
+	if msg := lintCheckHost(host, false); msg != "" {
+		l.errorf(lineNo, w, "invalid_address", "%s: «%s»", msg, addr)
+		return
+	}
+	if !hasPort {
+		if !portOptional {
+			l.errorf(lineNo, w, "invalid_port", "Нет порта в адресе «%s»", addr)
+		} else {
+			l.warnf(lineNo, w, "server_port_missing", "Нет порта в адресе «%s»: будет использован порт клиента", addr)
+		}
+		return
+	}
+	value := port
+	if strings.HasPrefix(value, "+") || strings.HasPrefix(value, "-") {
+		value = value[1:] // relative port mapping
+		if n, err := strconv.Atoi(value); err != nil || n < 0 || n > 65535 {
+			l.errorf(lineNo, w, "invalid_port", "Неверный порт «%s»", port)
+		}
+		return
+	}
+	if _, ok := lintParsePort(value); !ok {
+		l.errorf(lineNo, w, "invalid_port", "Неверный порт «%s» (1–65535)", port)
+	}
+}
+
+// bindAddresses validates a comma-separated bind address list and records
+// TCP listener ports of frontend/listen sections.
+func (l *linter) bindAddresses(lineNo int, w lintWord, record bool) {
+	for _, addr := range strings.Split(w.text, ",") {
+		if addr == "" {
+			l.errorf(lineNo, w, "invalid_address", "Пустой адрес в bind")
+			continue
+		}
+		if strings.Contains(addr, "$") {
+			continue
+		}
+		family, rest := lintSplitFamily(addr)
+		if family == "local" || strings.HasPrefix(rest, "/") {
+			continue
+		}
+		host, port, hasPort, msg := lintSplitHostPort(rest)
+		if msg != "" {
+			l.errorf(lineNo, w, "invalid_address", "%s: «%s»", msg, addr)
+			continue
+		}
+		if msg := lintCheckHost(host, true); msg != "" {
+			l.errorf(lineNo, w, "invalid_address", "%s: «%s»", msg, addr)
+			continue
+		}
+		if !hasPort || port == "" {
+			l.errorf(lineNo, w, "invalid_port", "Нет порта в bind «%s»", addr)
+			continue
+		}
+		low, high, ok := lintParsePortRange(port)
+		if !ok {
+			l.errorf(lineNo, w, "invalid_port", "Неверный порт «%s» (1–65535)", port)
+			continue
+		}
+		if !record || family == "udp" {
+			continue
+		}
+		for p := low; p <= high; p++ {
+			if _, exists := l.ports[p]; exists {
+				continue
+			}
+			if len(l.ports) >= maxFirewallPorts {
+				if !l.portOverflow {
+					l.errorf(lineNo, w, "too_many_ports", "Больше %d портов в bind: firewall не сможет их открыть", maxFirewallPorts)
+				}
+				l.portOverflow = true
+				break
+			}
+			l.ports[p] = struct{}{}
+		}
+	}
+}
+
+func lintSplitFamily(addr string) (family, rest string) {
+	if i := strings.Index(addr, "@"); i > 0 {
+		if f, ok := lintAddrFamilies[strings.ToLower(addr[:i])]; ok {
+			return f, addr[i+1:]
+		}
+	}
+	return "", addr
+}
+
+func lintSplitHostPort(s string) (host, port string, hasPort bool, msg string) {
+	if strings.HasPrefix(s, "[") {
+		end := strings.Index(s, "]")
+		if end < 0 {
+			return "", "", false, "Незакрытая «[»"
+		}
+		host, rest := s[1:end], s[end+1:]
+		if net.ParseIP(host) == nil || !strings.Contains(host, ":") {
+			return "", "", false, "Неверный IPv6-адрес"
+		}
+		if rest == "" {
+			return host, "", false, ""
+		}
+		if rest[0] != ':' {
+			return "", "", false, "Ожидалось «:порт» после «]»"
+		}
+		return host, rest[1:], true, ""
+	}
+	i := strings.LastIndex(s, ":")
+	if i < 0 {
+		return s, "", false, ""
+	}
+	return s[:i], s[i+1:], true, ""
+}
+
+func lintCheckHost(host string, bind bool) string {
+	if host == "" || host == "*" {
+		if bind {
+			return ""
+		}
+		return "Нет хоста"
+	}
+	if strings.Contains(host, ":") {
+		if net.ParseIP(host) == nil {
+			return "Неверный IPv6-адрес (используйте [адрес]:порт)"
+		}
+		return ""
+	}
+	numeric := true
+	for _, r := range host {
+		if !(r >= '0' && r <= '9') && r != '.' {
+			numeric = false
+		}
+		if !(r >= 'a' && r <= 'z') && !(r >= 'A' && r <= 'Z') && !(r >= '0' && r <= '9') && r != '.' && r != '-' && r != '_' {
+			return "Недопустимые символы в хосте"
+		}
+	}
+	if numeric && net.ParseIP(host) == nil {
+		return "Неверный IPv4-адрес"
+	}
+	return ""
+}
+
+func lintParsePort(s string) (int, bool) {
+	if s == "" || len(s) > 5 {
+		return 0, false
+	}
+	for _, r := range s {
+		if r < '0' || r > '9' {
+			return 0, false
+		}
+	}
+	n, err := strconv.Atoi(s)
+	if err != nil || n < 1 || n > 65535 {
+		return 0, false
+	}
+	return n, true
+}
+
+func lintParsePortRange(s string) (int, int, bool) {
+	if a, b, ok := strings.Cut(s, "-"); ok {
+		low, okA := lintParsePort(a)
+		high, okB := lintParsePort(b)
+		if !okA || !okB || high < low {
+			return 0, 0, false
+		}
+		return low, high, true
+	}
+	p, ok := lintParsePort(s)
+	return p, p, ok
+}
+
+// lintTokenize splits a line the way HAProxy does: whitespace-separated
+// words, single/double quotes, backslash escapes and '#' comments. It returns
+// the column of an unterminated quote, or 0.
+func lintTokenize(line string) ([]lintWord, int) {
+	runes := []rune(line)
+	var words []lintWord
+	space := func(r rune) bool { return r == ' ' || r == '\t' || r == '\r' }
+	i := 0
+	for i < len(runes) {
+		for i < len(runes) && space(runes[i]) {
+			i++
+		}
+		if i >= len(runes) || runes[i] == '#' {
+			break
+		}
+		start := i
+		var b strings.Builder
+		comment := false
+		quoted := false
+		for i < len(runes) && !space(runes[i]) {
+			c := runes[i]
+			if c == '#' {
+				comment = true
+				break
+			}
+			if c == '\\' {
+				quoted = true
+				if i+1 < len(runes) {
+					b.WriteRune(runes[i+1])
+					i += 2
+				} else {
+					i++
+				}
+				continue
+			}
+			if c == '"' || c == '\'' {
+				quoted = true
+				quoteAt := i
+				i++
+				closed := false
+				for i < len(runes) {
+					if c == '"' && runes[i] == '\\' && i+1 < len(runes) {
+						b.WriteRune(runes[i+1])
+						i += 2
+						continue
+					}
+					if runes[i] == c {
+						closed = true
+						i++
+						break
+					}
+					b.WriteRune(runes[i])
+					i++
+				}
+				if !closed {
+					words = append(words, lintWord{text: b.String(), col: start + 1, end: i + 1})
+					return words, quoteAt + 1
+				}
+				continue
+			}
+			b.WriteRune(c)
+			i++
+		}
+		if i > start {
+			words = append(words, lintWord{text: b.String(), col: start + 1, end: i + 1, quoted: quoted})
+		}
+		if comment {
+			break
+		}
+	}
+	return words, 0
+}
diff --git a/internal/panel/haproxy_lint_checks.go b/internal/panel/haproxy_lint_checks.go
new file mode 100644
index 0000000..696a56d
--- /dev/null
+++ b/internal/panel/haproxy_lint_checks.go
@@ -0,0 +1,316 @@
+package panel
+
+import (
+	"regexp"
+	"strconv"
+	"strings"
+)
+
+// Keyword-level checks shared in spirit with the browser linter
+// (frontend/src/features/haproxy-editor/haproxyModel.ts). Both read the same
+// haproxyKeywords.json and must report the same codes.
+
+var lintDurationValue = regexp.MustCompile(`^[0-9]+(us|ms|s|m|h|d)?$`)
+
+// Server options whose value is a delay / a positive count.
+var lintServerDurationKeywords = lintSet("inter", "fastinter", "downinter", "slowstart", "agent-inter", "pool-purge-delay")
+
+// Directives whose trailing words are free text, expressions or lists where a
+// final ',' or ';' may be legitimate.
+var lintFreeTextKeywords = lintSet(
+	"acl", "bind", "capture", "description", "email-alert", "error-log-format", "errorfile", "errorfiles",
+	"errorloc", "errorloc302", "errorloc303", "filter", "http-after-response", "http-check", "http-error",
+	"http-request", "http-response", "log-format", "log-format-sd", "log-tag", "monitor-uri", "node",
+	"presetenv", "redirect", "set-var", "set-var-fmt", "setenv", "stats", "tcp-check", "tcp-request",
+	"tcp-response", "unique-id-format", "unique-id-header", "use_backend", "default_backend", "use-server",
+	"stick", "balance", "command", "user", "group", "lua-load", "lua-load-per-thread", "lua-prepend-path",
+	"hash-type", "server", "server-template", "default-server", "option", "timeout", "mode", "log",
+)
+
+func lintNegatable(section, kw string) bool {
+	if section == "global" {
+		return lintKW.globalNegatable[kw]
+	}
+	return kw == "option" || kw == "log"
+}
+
+func (l *linter) unknownDirective(lineNo int, section string, kw lintWord) {
+	if base, n := lintTrailingPunct(kw.text); n > 0 && lintKnownKeyword(section, base) {
+		l.errorf(lineNo, lintPunctWord(kw, n), "stray_punctuation", "Лишний символ «%s» после «%s»", kw.text[len(base):], base)
+		return
+	}
+	if section == "global" || lintIsProxySection(section) {
+		l.errorf(lineNo, kw, "unknown_directive", "Неизвестная директива «%s» в секции %s", kw.text, section)
+		return
+	}
+	l.warnf(lineNo, kw, "unknown_directive", "Неизвестная директива «%s» в секции %s", kw.text, section)
+}
+
+// proxyKeywordAllowed applies the HAProxy 4.1 keyword matrix. It reports an
+// error and returns false when the keyword (or its sub-keyword) is not
+// accepted in this section type.
+func (l *linter) proxyKeywordAllowed(lineNo int, section string, words []lintWord) bool {
+	kw := words[0]
+	if !l.sectionAllows(lineNo, section, kw, kw.text, lintKW.proxy[kw.text]) {
+		return false
+	}
+	if kw.text == "timeout" || kw.text == "option" || len(words) < 2 {
+		return true
+	}
+	sub := words[1]
+	if flags, ok := lintKW.proxySub[kw.text+" "+sub.text]; ok {
+		return l.sectionAllows(lineNo, section, sub, kw.text+" "+sub.text, flags)
+	}
+	if !lintKW.proxyStrictSub[kw.text] {
+		return true
+	}
+	if base, n := lintTrailingPunct(sub.text); n > 0 {
+		if _, ok := lintKW.proxySub[kw.text+" "+base]; ok {
+			l.errorf(lineNo, lintPunctWord(sub, n), "stray_punctuation", "Лишний символ «%s» после «%s»", sub.text[len(base):], base)
+			return false
+		}
+	}
+	l.errorf(lineNo, sub, "unknown_keyword", "Неизвестный параметр «%s» у %s", sub.text, kw.text)
+	return false
+}
+
+func (l *linter) sectionAllows(lineNo int, section string, w lintWord, name, flags string) bool {
+	allowed, anonymous := lintSectionAllowed(flags, section, l.namedDefaults)
+	if allowed {
+		return true
+	}
+	if anonymous {
+		l.errorf(lineNo, w, "keyword_not_allowed", "«%s» недопустим в безымянной секции defaults (задайте ей имя)", name)
+	} else {
+		l.errorf(lineNo, w, "keyword_not_allowed", "«%s» недопустим в секции %s", name, section)
+	}
+	return false
+}
+
+func (l *linter) option(lineNo int, section string, words []lintWord, modifier string) {
+	if len(words) < 2 {
+		l.errorf(lineNo, words[0], "option_missing_name", "У option не указано имя")
+		return
+	}
+	name := words[1]
+	flags, ok := lintKW.options[name.text]
+	if !ok {
+		if base, n := lintTrailingPunct(name.text); n > 0 && lintKW.options[base] != "" {
+			l.errorf(lineNo, lintPunctWord(name, n), "unknown_option", "Неизвестная опция «%s» — лишний символ «%s»", name.text, name.text[len(base):])
+		} else {
+			l.errorf(lineNo, name, "unknown_option", "Неизвестная опция «%s»", name.text)
+		}
+		return
+	}
+	if modifier != "" && lintKW.optionsNoNeg[name.text] {
+		l.errorf(lineNo, name, "negation_not_supported", "Префикс «%s» не поддерживается для option %s", modifier, name.text)
+		return
+	}
+	if allowed, _ := lintSectionAllowed(flags, section, true); !allowed {
+		l.warnf(lineNo, name, "option_ignored", "option %s игнорируется в секции %s", name.text, section)
+	}
+	switch lintKW.optionArgs[name.text] {
+	case "none":
+		if len(words) > 2 {
+			l.errorf(lineNo, words[2], "too_many_args", "option %s не принимает аргументов", name.text)
+		}
+	case "clf":
+		if len(words) > 2 && words[2].text != "clf" {
+			l.errorf(lineNo, words[2], "invalid_option_arg", "option %s принимает только «clf»", name.text)
+		} else if len(words) > 3 {
+			l.errorf(lineNo, words[3], "too_many_args", "Лишний аргумент option %s", name.text)
+		}
+	}
+}
+
+func (l *linter) mode(lineNo int, section string, words []lintWord) {
+	if len(words) < 2 {
+		l.errorf(lineNo, words[0], "invalid_mode", "У mode не указан режим (tcp или http)")
+		return
+	}
+	value := words[1]
+	flags, ok := lintKW.modes[value.text]
+	switch {
+	case value.text == "health":
+		l.errorf(lineNo, value, "invalid_mode", "mode health больше не поддерживается")
+	case !ok:
+		if base, n := lintTrailingPunct(value.text); n > 0 && lintKW.modes[base] != "" {
+			l.errorf(lineNo, lintPunctWord(value, n), "stray_punctuation", "Лишний символ «%s» после «%s»", value.text[len(base):], base)
+		} else {
+			l.errorf(lineNo, value, "invalid_mode", "Неизвестный режим «%s» (tcp, http, log, spop)", value.text)
+		}
+	default:
+		if allowed, _ := lintSectionAllowed(flags, section, true); !allowed {
+			l.errorf(lineNo, value, "invalid_mode", "mode %s недопустим в секции %s", value.text, section)
+		} else if len(words) > 2 {
+			l.errorf(lineNo, words[2], "too_many_args", "Лишний аргумент mode")
+		}
+	}
+}
+
+func (l *linter) balance(lineNo int, words []lintWord) {
+	if len(words) < 2 {
+		l.errorf(lineNo, words[0], "invalid_balance", "У balance не указан алгоритм")
+		return
+	}
+	algo := words[1]
+	name, _, _ := strings.Cut(algo.text, "(")
+	if lintKW.balance[name] {
+		return
+	}
+	if base, n := lintTrailingPunct(algo.text); n > 0 && lintKW.balance[base] {
+		l.errorf(lineNo, lintPunctWord(algo, n), "stray_punctuation", "Лишний символ «%s» после «%s»", algo.text[len(base):], base)
+		return
+	}
+	l.errorf(lineNo, algo, "invalid_balance", "Неизвестный алгоритм balance «%s»", algo.text)
+}
+
+func (l *linter) hashType(lineNo int, words []lintWord) {
+	sets := []map[string]bool{lintKW.hashMethods, lintKW.hashFunctions, lintKW.hashModifiers}
+	if len(words) < 2 {
+		l.errorf(lineNo, words[0], "invalid_hash_type", "hash-type: укажите consistent или map-based")
+		return
+	}
+	for i, w := range words[1:] {
+		if i >= len(sets) {
+			l.errorf(lineNo, w, "too_many_args", "Лишний аргумент hash-type")
+			return
+		}
+		if sets[i][w.text] {
+			continue
+		}
+		if base, n := lintTrailingPunct(w.text); n > 0 && sets[i][base] {
+			l.errorf(lineNo, lintPunctWord(w, n), "stray_punctuation", "Лишний символ «%s» после «%s»", w.text[len(base):], base)
+		} else {
+			l.errorf(lineNo, w, "invalid_hash_type", "Неверный аргумент hash-type «%s»", w.text)
+		}
+		return
+	}
+}
+
+// logTarget validates "log <target> [len n] [format f] [sample r:s]
+// [profile p] <facility> [<level> [<minlevel>]]".
+func (l *linter) logTarget(lineNo int, section string, words []lintWord) {
+	if len(words) < 2 {
+		l.errorf(lineNo, words[0], "log_missing_target", "У log не указан адрес")
+		return
+	}
+	if words[1].text == "global" && section != "global" {
+		if len(words) > 2 {
+			l.errorf(lineNo, words[2], "too_many_args", "Лишний аргумент log global")
+		}
+		return
+	}
+	i := 2
+	for i < len(words) && lintKW.logOptions[words[i].text] {
+		i += 2
+	}
+	if i >= len(words) {
+		l.errorf(lineNo, words[len(words)-1], "log_missing_facility", "У log не указан facility (например local0)")
+		return
+	}
+	for n, w := range words[i:] {
+		set, what := lintKW.logLevels, "уровень"
+		if n == 0 {
+			set, what = lintKW.logFacilities, "facility"
+		}
+		if n > 2 {
+			l.errorf(lineNo, w, "too_many_args", "Лишний аргумент log «%s»", w.text)
+			return
+		}
+		if strings.Contains(w.text, "$") || set[w.text] {
+			continue
+		}
+		if base, cut := lintTrailingPunct(w.text); cut > 0 && set[base] {
+			l.errorf(lineNo, lintPunctWord(w, cut), "stray_punctuation", "Лишний символ «%s» после «%s»", w.text[len(base):], base)
+		} else {
+			l.errorf(lineNo, w, "invalid_log", "Неизвестный %s log «%s»", what, w.text)
+		}
+		return
+	}
+}
+
+// lintKeywordArgs walks "<kw> [value…]" option lists of server/bind lines.
+func (l *linter) keywordArgs(lineNo int, words []lintWord, start int, table map[string]int, code, what string, check func(kw string, value lintWord)) {
+	for i := start; i < len(words); {
+		w := words[i]
+		name, _, _ := strings.Cut(w.text, "(")
+		n, ok := table[name]
+		if !ok {
+			if base, cut := lintTrailingPunct(w.text); cut > 0 {
+				if _, known := table[base]; known {
+					l.errorf(lineNo, lintPunctWord(w, cut), "stray_punctuation", "Лишний символ «%s» после «%s»", w.text[len(base):], base)
+					i++
+					continue
+				}
+			}
+			l.errorf(lineNo, w, code, "Неизвестный параметр %s «%s»", what, w.text)
+			i++
+			continue
+		}
+		if n < 0 { // server "source <addr> [usesrc <addr>] [interface <name>]"
+			i += 2
+			for i+1 < len(words) && (words[i].text == "usesrc" || words[i].text == "interface") {
+				i += 2
+			}
+			continue
+		}
+		if i+n >= len(words) && n > 0 {
+			l.errorf(lineNo, w, "missing_value", "У параметра «%s» нет значения", w.text)
+			return
+		}
+		if n > 0 && check != nil {
+			check(name, words[i+1])
+		}
+		i += 1 + n
+	}
+}
+
+func (l *linter) serverKeywords(lineNo int, words []lintWord, start int) {
+	l.keywordArgs(lineNo, words, start, lintKW.server, "unknown_server_keyword", "server", func(kw string, value lintWord) {
+		if strings.Contains(value.text, "$") {
+			return
+		}
+		switch {
+		case lintServerDurationKeywords[kw]:
+			if !lintDurationValue.MatchString(value.text) {
+				l.errorf(lineNo, value, "invalid_duration", "«%s» — неверное время для %s (пример: 5s, 500ms)", value.text, kw)
+			}
+		case kw == "fall" || kw == "rise":
+			if n, err := strconv.Atoi(value.text); err != nil || n < 1 {
+				l.errorf(lineNo, value, "invalid_number", "%s ожидает целое число ≥ 1", kw)
+			}
+		case kw == "weight":
+			if n, err := strconv.Atoi(value.text); err != nil || n < 0 || n > 256 {
+				l.errorf(lineNo, value, "invalid_weight", "weight — целое число 0–256")
+			}
+		}
+	})
+}
+
+func (l *linter) bindKeywords(lineNo int, words []lintWord, start int) {
+	l.keywordArgs(lineNo, words, start, lintKW.bind, "unknown_bind_keyword", "bind", nil)
+}
+
+// strayTail reports a bare trailing ',' or ';' on the last word of a
+// directive whose arguments are plain values (maxconn 100; retries 3,).
+func (l *linter) strayTail(lineNo int, words []lintWord, before int) {
+	if lintFreeTextKeywords[words[0].text] || len(words) < 2 {
+		return
+	}
+	last := words[len(words)-1]
+	if last.quoted || strings.Contains(last.text, "%[") || strings.ContainsAny(last.text, "{}") {
+		return
+	}
+	base := strings.TrimRight(last.text, ",;")
+	if base == last.text {
+		return
+	}
+	punct := lintPunctWord(last, len(last.text)-len(base))
+	for _, issue := range l.issues[before:] {
+		if issue.Line == lineNo && issue.Column <= punct.col && punct.col < issue.EndColumn {
+			return
+		}
+	}
+	l.errorf(lineNo, punct, "stray_punctuation", "Лишний символ «%s» в конце строки", last.text[len(base):])
+}
diff --git a/internal/panel/haproxy_lint_http_test.go b/internal/panel/haproxy_lint_http_test.go
new file mode 100644
index 0000000..b316dff
--- /dev/null
+++ b/internal/panel/haproxy_lint_http_test.go
@@ -0,0 +1,151 @@
+package panel
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"os"
+	"strings"
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+const lintCleanConfig = "global\n    daemon\ndefaults\n    mode tcp\n    timeout connect 5s\nfrontend fe\n    bind :443\n    bind [::]:8443\n    default_backend be\nbackend be\n    server s1 192.0.2.1:443\n"
+
+func TestConfigLintEndpoint(t *testing.T) {
+	f := &fakeStore{}
+	h := handler(f)
+	body, err := json.Marshal(map[string]string{"config": lintCleanConfig})
+	require.NoError(t, err)
+	w := request(t, h, http.MethodPost, "/api/v1/nodes/"+testNodeID+"/config-lint", string(body), testAdminToken)
+	require.Equal(t, http.StatusOK, w.Code, w.Body.String())
+	var got struct {
+		Valid            bool          `json:"valid"`
+		Issues           []LintIssue   `json:"issues"`
+		ListenerTCPPorts []int         `json:"listener_tcp_ports"`
+		Sections         []LintSection `json:"sections"`
+	}
+	require.NoError(t, json.Unmarshal(w.Body.Bytes(), &got))
+	assert.True(t, got.Valid)
+	assert.NotNil(t, got.Issues)
+	assert.Empty(t, got.Issues)
+	assert.Equal(t, []int{443, 8443}, got.ListenerTCPPorts)
+	assert.Equal(t, LintSection{Type: "frontend", Name: "fe", Line: 6}, got.Sections[2])
+	assert.Empty(t, f.auditEvents, "lint is read-only and not audited")
+
+	w = request(t, h, http.MethodPost, "/api/v1/nodes/"+testNodeID+"/config-lint", `{"config":"global\n    timeout x\nfrontend\n"}`, testAdminToken)
+	require.Equal(t, http.StatusOK, w.Code)
+	assert.Contains(t, w.Body.String(), `"valid":false`)
+	assert.Contains(t, w.Body.String(), `"end_column"`)
+
+	w = request(t, h, http.MethodGet, "/api/v1/nodes/"+testNodeID+"/config-lint", "", testAdminToken)
+	assert.Equal(t, http.StatusMethodNotAllowed, w.Code)
+	w = request(t, h, http.MethodPost, "/api/v1/nodes/"+testNodeID+"/config-lint", string(body), "")
+	assert.Equal(t, http.StatusUnauthorized, w.Code)
+	big, _ := json.Marshal(map[string]string{"config": strings.Repeat("#", MaxManagedConfigBytes+1)})
+	w = request(t, h, http.MethodPost, "/api/v1/nodes/"+testNodeID+"/config-lint", string(big), testAdminToken)
+	assert.Equal(t, http.StatusBadRequest, w.Code)
+
+	f.getNodeHook = func(context.Context, string) (Node, error) { return Node{}, ErrNotFound }
+	w = request(t, h, http.MethodPost, "/api/v1/nodes/"+testNodeID+"/config-lint", string(body), testAdminToken)
+	assert.Equal(t, http.StatusNotFound, w.Code)
+}
+
+func TestAdvancedEditorRevisionIsLintedAndCarriesFirewallPlan(t *testing.T) {
+	f := &fakeStore{}
+	h := handler(f)
+	path := "/api/v1/nodes/" + testNodeID + "/config-revisions"
+	broken := "global\n    daemon\nfrontend fe\n    bind :70000\n    default_backend missing\n"
+	payload := func(cfg string, force bool) string {
+		raw, err := json.Marshal(map[string]any{"config": cfg, "note": "manual", "metadata": map[string]any{"source": "advanced_editor"}, "force": force})
+		require.NoError(t, err)
+		return string(raw)
+	}
+	w := request(t, h, http.MethodPost, path, payload(broken, false), testAdminToken)
+	require.Equal(t, http.StatusUnprocessableEntity, w.Code, w.Body.String())
+	var rejected struct {
+		Error  map[string]string `json:"error"`
+		Issues []LintIssue       `json:"issues"`
+	}
+	require.NoError(t, json.Unmarshal(w.Body.Bytes(), &rejected))
+	assert.Equal(t, "config_lint_failed", rejected.Error["code"])
+	assert.NotEmpty(t, rejected.Error["message"])
+	require.Len(t, rejected.Issues, 2)
+	assert.Empty(t, f.createdConfig.Config, "rejected revision must not be stored")
+
+	w = request(t, h, http.MethodPost, path, payload(broken, true), testAdminToken)
+	require.Equal(t, http.StatusCreated, w.Code, w.Body.String())
+	assert.Equal(t, "manual", f.createdConfig.Metadata["renderer"])
+	assert.Equal(t, map[string]any{"errors": 2, "warnings": 0}, f.createdConfig.Metadata["lint"])
+	assert.Equal(t, []int{}, f.createdConfig.Metadata["listener_tcp_ports"])
+
+	generated, err := os.ReadFile("testdata/haproxy_render.golden.cfg")
+	require.NoError(t, err)
+	w = request(t, h, http.MethodPost, path, payload(string(generated), false), testAdminToken)
+	require.Equal(t, http.StatusCreated, w.Code, w.Body.String())
+	assert.True(t, strings.HasPrefix(f.createdConfig.Config, "# Edited manually in NodeFlow advanced editor.\n# renderer:"))
+	assert.NotContains(t, f.createdConfig.Config, "Do not edit")
+	assert.Equal(t, []int{443, 8443}, f.createdConfig.Metadata["listener_tcp_ports"])
+	assert.Equal(t, "advanced_editor", f.createdConfig.Metadata["source"])
+
+	noLF := strings.TrimRight(string(generated), "\n")
+	w = request(t, h, http.MethodPost, path, payload(noLF, false), testAdminToken)
+	require.Equal(t, http.StatusCreated, w.Code, w.Body.String())
+	assert.True(t, strings.HasSuffix(f.createdConfig.Config, "\n"), "manual revision must end with LF")
+	assert.Equal(t, map[string]any{"errors": 0, "warnings": 0}, f.createdConfig.Metadata["lint"])
+
+	// Non-editor revisions keep the legacy contract (no lint, no force).
+	w = request(t, h, http.MethodPost, path, `{"config":"not haproxy","metadata":{"source":"routes"}}`, testAdminToken)
+	require.Equal(t, http.StatusCreated, w.Code, w.Body.String())
+	assert.Nil(t, f.createdConfig.Metadata["lint"])
+	w = request(t, h, http.MethodPost, path, `{"config":"x","force":true}`, testAdminToken)
+	assert.Equal(t, http.StatusBadRequest, w.Code)
+}
+
+func int64p(v int64) *int64 { return &v }
+
+// Lab regression: firewall mode apply + a manual desired revision used to
+// fail every heartbeat with "desired firewall listener plan is incomplete".
+func TestFirewallAssignmentAcceptsManualRevisionPlan(t *testing.T) {
+	lint := LintHAProxyConfig(lintCleanConfig)
+	ports, err := json.Marshal(lint.ListenerTCPPorts)
+	require.NoError(t, err)
+	row := firewallPlanRow{
+		ActualRevision: int64p(4), ActualPorts: []byte(`[443]`), ActualComplete: true,
+		DesiredRevision: int64p(5), DesiredPorts: ports, DesiredComplete: true,
+	}
+	assignment, err := resolveFirewallAssignment(testNodeID, "apply", true, row)
+	require.NoError(t, err)
+	assert.Equal(t, "apply", assignment.Mode)
+	assert.True(t, assignment.Transition)
+	assert.Equal(t, []int{443}, assignment.TCPPorts)
+	assert.Equal(t, []int{443, 8443}, assignment.DesiredTCPPorts)
+}
+
+func TestFirewallAssignmentDegradesForLegacyManualRevision(t *testing.T) {
+	row := firewallPlanRow{
+		ActualRevision: int64p(4), ActualPorts: []byte(`[443]`), ActualComplete: true,
+		DesiredRevision: int64p(5), DesiredComplete: false,
+	}
+	assignment, err := resolveFirewallAssignment(testNodeID, "apply", true, row)
+	require.NoError(t, err, "heartbeat must not fail")
+	assert.Equal(t, "observe", assignment.Mode, "no prune while the plan is unknown")
+	assert.False(t, assignment.Transition)
+	assert.Empty(t, assignment.DesiredTCPPorts)
+	assert.Equal(t, []int{443}, assignment.TCPPorts)
+
+	// Without a pending config the active plan still governs in apply mode.
+	assignment, err = resolveFirewallAssignment(testNodeID, "apply", false, row)
+	require.NoError(t, err)
+	assert.Equal(t, "apply", assignment.Mode)
+	assert.Equal(t, []int{443}, assignment.TCPPorts)
+
+	// A legacy manual revision that is already active keeps observe.
+	row = firewallPlanRow{ActualRevision: int64p(5), ActualComplete: false}
+	assignment, err = resolveFirewallAssignment(testNodeID, "apply", false, row)
+	require.NoError(t, err)
+	assert.Equal(t, "observe", assignment.Mode)
+	assert.False(t, assignment.ActivePlanComplete)
+}
diff --git a/internal/panel/haproxy_lint_keywords.go b/internal/panel/haproxy_lint_keywords.go
new file mode 100644
index 0000000..dfb2c14
--- /dev/null
+++ b/internal/panel/haproxy_lint_keywords.go
@@ -0,0 +1,186 @@
+package panel
+
+import (
+	_ "embed"
+	"encoding/json"
+	"strings"
+	"unicode/utf8"
+)
+
+// haproxy_keywords.json is a byte-for-byte copy of
+// frontend/src/features/haproxy-editor/haproxyKeywords.json, which the
+// browser linter imports; TestLintKeywordsJSONInSync keeps them identical.
+//
+//go:embed haproxy_keywords.json
+var haproxyKeywordsJSON []byte
+
+type lintKeywordData struct {
+	Global struct {
+		Keywords  []string `json:"keywords"`
+		Prefixes  []string `json:"prefixes"`
+		Negatable []string `json:"negatable"`
+	} `json:"global"`
+	// Section letters: d=defaults, n=named defaults only, f=frontend,
+	// l=listen, b=backend.
+	Proxy             map[string]string   `json:"proxy"`
+	ProxySub          map[string]string   `json:"proxy_sub"`
+	ProxyStrictSub    []string            `json:"proxy_strict_sub"`
+	ProxyNegatable    []string            `json:"proxy_negatable"`
+	Options           map[string]string   `json:"options"`
+	OptionsNoNegation []string            `json:"options_no_negation"`
+	OptionArgs        map[string]string   `json:"option_args"`
+	Server            map[string]int      `json:"server"`
+	Bind              map[string]int      `json:"bind"`
+	Timeouts          map[string][]string `json:"timeouts"`
+	Modes             map[string]string   `json:"modes"`
+	Balance           []string            `json:"balance"`
+	HashType          struct {
+		Methods   []string `json:"methods"`
+		Functions []string `json:"functions"`
+		Modifiers []string `json:"modifiers"`
+	} `json:"hash_type"`
+	Log struct {
+		Facilities []string `json:"facilities"`
+		Levels     []string `json:"levels"`
+		Options    []string `json:"options"`
+	} `json:"log"`
+	OtherSections map[string][]string `json:"other_sections"`
+}
+
+type lintKeywordSets struct {
+	global          map[string]bool
+	globalPrefixes  []string
+	globalNegatable map[string]bool
+	proxy           map[string]string
+	proxySub        map[string]string
+	proxyStrictSub  map[string]bool
+	proxyNegatable  map[string]bool
+	options         map[string]string
+	optionsNoNeg    map[string]bool
+	optionArgs      map[string]string
+	server          map[string]int
+	bind            map[string]int
+	timeouts        map[string]map[string]bool
+	modes           map[string]string
+	balance         map[string]bool
+	hashMethods     map[string]bool
+	hashFunctions   map[string]bool
+	hashModifiers   map[string]bool
+	logFacilities   map[string]bool
+	logLevels       map[string]bool
+	logOptions      map[string]bool
+	other           map[string]map[string]bool
+}
+
+var lintKW = mustLoadLintKeywords(haproxyKeywordsJSON)
+
+func mustLoadLintKeywords(raw []byte) *lintKeywordSets {
+	var d lintKeywordData
+	if err := json.Unmarshal(raw, &d); err != nil {
+		panic("haproxy_keywords.json: " + err.Error())
+	}
+	k := &lintKeywordSets{
+		global:          lintSet(d.Global.Keywords...),
+		globalPrefixes:  d.Global.Prefixes,
+		globalNegatable: lintSet(d.Global.Negatable...),
+		proxy:           d.Proxy,
+		proxySub:        d.ProxySub,
+		proxyStrictSub:  lintSet(d.ProxyStrictSub...),
+		proxyNegatable:  lintSet(d.ProxyNegatable...),
+		options:         d.Options,
+		optionsNoNeg:    lintSet(d.OptionsNoNegation...),
+		optionArgs:      d.OptionArgs,
+		server:          d.Server,
+		bind:            d.Bind,
+		timeouts:        map[string]map[string]bool{},
+		modes:           d.Modes,
+		balance:         lintSet(d.Balance...),
+		hashMethods:     lintSet(d.HashType.Methods...),
+		hashFunctions:   lintSet(d.HashType.Functions...),
+		hashModifiers:   lintSet(d.HashType.Modifiers...),
+		logFacilities:   lintSet(d.Log.Facilities...),
+		logLevels:       lintSet(d.Log.Levels...),
+		logOptions:      lintSet(d.Log.Options...),
+		other:           map[string]map[string]bool{},
+	}
+	for class, kinds := range d.Timeouts {
+		k.timeouts[class] = lintSet(kinds...)
+	}
+	for section, words := range d.OtherSections {
+		k.other[section] = lintSet(words...)
+	}
+	return k
+}
+
+func lintSet(words ...string) map[string]bool {
+	m := make(map[string]bool, len(words))
+	for _, w := range words {
+		m[w] = true
+	}
+	return m
+}
+
+func lintIsProxySection(section string) bool {
+	switch section {
+	case "defaults", "frontend", "backend", "listen":
+		return true
+	}
+	return false
+}
+
+// lintSectionAllowed reports whether a section letter set ("dflb", "nfl"…)
+// admits the section. namedDefaults tells whether the current defaults
+// section has a name (some rules are refused in anonymous defaults).
+func lintSectionAllowed(flags, section string, namedDefaults bool) (allowed, anonymousDefaults bool) {
+	switch section {
+	case "defaults":
+		if strings.Contains(flags, "d") {
+			return true, false
+		}
+		if strings.Contains(flags, "n") {
+			return namedDefaults, !namedDefaults
+		}
+		return false, false
+	case "frontend":
+		return strings.Contains(flags, "f"), false
+	case "listen":
+		return strings.Contains(flags, "l"), false
+	case "backend":
+		return strings.Contains(flags, "b"), false
+	}
+	return true, false
+}
+
+func lintKnownKeyword(section, kw string) bool {
+	switch section {
+	case "global":
+		if lintKW.global[kw] {
+			return true
+		}
+		for _, prefix := range lintKW.globalPrefixes {
+			if strings.HasPrefix(kw, prefix) {
+				return true
+			}
+		}
+		return false
+	case "defaults", "frontend", "backend", "listen":
+		_, ok := lintKW.proxy[kw]
+		return ok
+	}
+	return lintKW.other[section][kw]
+}
+
+// lintTrailingPunct returns the name without trailing ",;:." and the number
+// of stripped runes.
+func lintTrailingPunct(s string) (string, int) {
+	trimmed := strings.TrimRight(s, ",;:.")
+	return trimmed, utf8.RuneCountInString(s) - utf8.RuneCountInString(trimmed)
+}
+
+// lintPunctWord narrows w to its trailing punctuation (for markers).
+func lintPunctWord(w lintWord, n int) lintWord {
+	if w.quoted || n == 0 {
+		return w
+	}
+	return lintWord{text: w.text, col: w.end - n, end: w.end}
+}
diff --git a/internal/panel/haproxy_lint_test.go b/internal/panel/haproxy_lint_test.go
new file mode 100644
index 0000000..c590858
--- /dev/null
+++ b/internal/panel/haproxy_lint_test.go
@@ -0,0 +1,357 @@
+package panel
+
+import (
+	"bytes"
+	"compress/gzip"
+	"encoding/json"
+	"os"
+	"path/filepath"
+	"strings"
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func lintCodes(result LintResult) []string {
+	codes := make([]string, 0, len(result.Issues))
+	for _, issue := range result.Issues {
+		codes = append(codes, issue.Severity+":"+issue.Code)
+	}
+	return codes
+}
+
+func requireCleanLint(t *testing.T, name, cfg string) LintResult {
+	t.Helper()
+	result := LintHAProxyConfig(cfg)
+	if len(result.Issues) > 0 {
+		lines := strings.Split(cfg, "\n")
+		for _, issue := range result.Issues {
+			t.Errorf("%s: line %d col %d %s %s: %s | %q", name, issue.Line, issue.Column, issue.Severity, issue.Code, issue.Message, lines[issue.Line-1])
+		}
+	}
+	require.True(t, result.Valid, name)
+	return result
+}
+
+func TestLintGoldenRenderedConfigsAreClean(t *testing.T) {
+	files, err := filepath.Glob("testdata/*.golden.cfg")
+	require.NoError(t, err)
+	require.NotEmpty(t, files)
+	for _, file := range files {
+		raw, err := os.ReadFile(file)
+		require.NoError(t, err)
+		requireCleanLint(t, file, string(raw))
+	}
+	raw, err := os.ReadFile("testdata/haproxy_render.golden.cfg")
+	require.NoError(t, err)
+	result := LintHAProxyConfig(string(raw))
+	assert.Equal(t, []int{443, 8443}, result.ListenerTCPPorts)
+	require.NotEmpty(t, result.Sections)
+	assert.Equal(t, LintSection{Type: "global", Name: "", Line: 4}, result.Sections[0])
+	assert.Contains(t, result.Sections, LintSection{Type: "frontend", Name: "nf_fe_any_443_99ed27c0", Line: 49})
+}
+
+// Every route shape the editor can produce (the UI contract fixture) must
+// render into a configuration with zero lint errors and zero warnings, and the
+// linter's listener ports must equal the renderer's.
+func TestLintRenderedUIRouteMatrixIsClean(t *testing.T) {
+	file, err := os.Open("testdata/ui_route_payloads.json.gz")
+	require.NoError(t, err)
+	defer file.Close()
+	reader, err := gzip.NewReader(file)
+	require.NoError(t, err)
+	var cases []uiRoutePayloadCase
+	require.NoError(t, json.NewDecoder(reader).Decode(&cases))
+	facts := NodeRenderFacts{}
+	checked := 0
+	for _, c := range cases {
+		in := decodeRouteInput(t, string(c.Payload))
+		spec, err := validateRoute(in, c.Method == "PUT")
+		if err != nil {
+			continue
+		}
+		route := specToRoute(spec)
+		if strings.TrimSpace(route.CustomFragment) != "" {
+			// Operator-written backend directives are linted as written.
+			continue
+		}
+		for _, variant := range []NodeRenderFacts{facts, {HAProxyLogsDisabled: true}} {
+			got, err := RenderHAProxyConfigForNode([]Route{route}, variant)
+			if err != nil {
+				continue
+			}
+			result := LintHAProxyConfigForNode(got.Config, got.RuntimeNames)
+			if len(result.Issues) > 0 {
+				requireCleanLint(t, c.Name, got.Config)
+				t.Fatalf("%s: runtime-name issues %v", c.Name, lintCodes(result))
+			}
+			require.ElementsMatch(t, got.ListenerPorts, result.ListenerTCPPorts, c.Name)
+			checked++
+		}
+	}
+	require.Greater(t, checked, 4000)
+}
+
+func TestLintRenderedMultiRouteConfigIsClean(t *testing.T) {
+	quota := int64(1 << 30)
+	down, up := int64(50), int64(20)
+	routes := []Route{
+		{ID: "11111111-1111-4111-8111-111111111111", ListenerIP: "*", ListenerPort: 443, MatchMode: "sni",
+			SNIs: []string{"a.example.com"}, Hostname: "a.example.com", TargetType: "tcp", TargetHost: "origin.example.com",
+			TargetPort: 8443, ProxyProtocol: "v2", HealthCheck: true, Enabled: true, QuotaBytes: &quota, QuotaAction: "block_new",
+			QuotaPeriod: "calendar_month", ClientDownloadMbps: &down, ClientUploadMbps: &up, AcceptProxyFrom: []string{"10.0.0.0/8", "edge.example.net"},
+			CustomFragment: "  timeout server 1h\n"},
+		{ID: "22222222-2222-4222-8222-222222222222", ListenerIP: "*", ListenerPort: 443, MatchMode: "any_tcp", Fallback: true,
+			TargetType: "unix", UnixSocketPath: "/dev/shm/x.sock", ProxyProtocol: "v1", HealthCheck: true, Enabled: true},
+		{ID: "33333333-3333-4333-8333-333333333333", ListenerIP: "2001:db8::1", ListenerPort: 8443, MatchMode: "sni",
+			SNIs: []string{"b.example.com"}, Hostname: "b.example.com", TargetType: "tcp", TargetHost: "pool.example.com",
+			TargetPort: 443, DNSPool: true, ProxyProtocol: "none", HealthCheck: true, Enabled: true,
+			StickyMode: StickyModeSourceTable, BalanceAlgorithm: BalanceAlgorithmLeastConn},
+		{ID: "44444444-4444-4444-8444-444444444444", ListenerIP: "192.0.2.5", ListenerPort: 10000, MatchMode: "any_tcp", Fallback: true,
+			TargetType: "tcp", TargetHost: "192.0.2.9", TargetPort: 443, ProxyProtocol: "none", Enabled: true,
+			Servers: []RouteServer{
+				{Name: "a", TargetType: "tcp", Host: "192.0.2.10", Port: 443, Position: 0, Weight: 10},
+				{Name: "b", TargetType: "tcp", Host: "pool.example.com", Port: 443, Position: 1, DNSPool: true, Backup: true},
+			}, BalanceMode: "failover", StickyMode: StickyModeNone},
+	}
+	got, err := RenderHAProxyConfigForNode(routes, NodeRenderFacts{})
+	require.NoError(t, err)
+	result := requireCleanLint(t, "multi", got.Config)
+	assert.ElementsMatch(t, got.ListenerPorts, result.ListenerTCPPorts)
+	full := LintHAProxyConfigForNode(got.Config, got.RuntimeNames)
+	assert.Empty(t, full.Issues)
+
+	// Dropping a generated backend reports the missing runtime names.
+	edited := strings.Replace(got.Config, "\nbackend nf_be_222222222222", "\nbackend renamed_be", 1)
+	edited = strings.Replace(edited, "default_backend nf_be_222222222222", "default_backend renamed_be", 1)
+	missing := LintHAProxyConfigForNode(edited, got.RuntimeNames)
+	assert.True(t, missing.Valid)
+	assert.Contains(t, lintCodes(missing), "warning:runtime_name_missing")
+}
+
+func TestLintDetectsErrors(t *testing.T) {
+	cfg := strings.Join([]string{
+		"maxconn 10",                   // 1 outside section
+		"global",                       // 2
+		"    daemon",                   // 3
+		"defaults",                     // 4
+		"    timeout client 10x",       // 5 invalid timeout
+		"    timeout bogus 10s",        // 6 unknown kind
+		"frontend",                     // 7 missing name
+		"frontend fe",                  // 8
+		"    bind :70000",              // 9 invalid port
+		"    bind [::1]:443,:80-90",    // 10 ok
+		"    bind unix@/run/x.sock",    // 11 ignored
+		"    use_backend nope if TRUE", // 12 undefined
+		"    use_backend %[var(txn.be)]",
+		"    frobnicate on", // 14 unknown directive
+		"backend be",        // 15
+		"    server s1 10.0.0.1:0",
+		"    server s1 10.0.0.2:80",
+		"    server s2",
+		"    server s3 /run/sock",
+		"    server s4 [2001:db8::1]:443",
+		"backend be", // 21 duplicate
+		"bogus section",
+		"    .if defined(X)",
+		"    .else",
+		"    .else",
+		"",
+	}, "\n")
+	result := LintHAProxyConfig(cfg)
+	assert.False(t, result.Valid)
+	byLine := map[int][]string{}
+	for _, issue := range result.Issues {
+		byLine[issue.Line] = append(byLine[issue.Line], issue.Severity+":"+issue.Code)
+	}
+	assert.Equal(t, []string{"error:outside_section"}, byLine[1])
+	assert.Equal(t, []string{"error:invalid_timeout"}, byLine[5])
+	assert.Equal(t, []string{"error:unknown_timeout"}, byLine[6])
+	assert.Equal(t, []string{"error:missing_name"}, byLine[7])
+	assert.Equal(t, []string{"error:invalid_port"}, byLine[9])
+	assert.Empty(t, byLine[10])
+	assert.Empty(t, byLine[11])
+	assert.Equal(t, []string{"error:undefined_backend"}, byLine[12])
+	assert.Empty(t, byLine[13])
+	assert.Equal(t, []string{"error:unknown_directive"}, byLine[14])
+	assert.Equal(t, []string{"error:invalid_port"}, byLine[16])
+	assert.Equal(t, []string{"error:duplicate_server"}, byLine[17])
+	assert.Equal(t, []string{"error:server_missing_address"}, byLine[18])
+	assert.Empty(t, byLine[19])
+	assert.Empty(t, byLine[20])
+	assert.Equal(t, []string{"error:duplicate_proxy"}, byLine[21])
+	assert.Equal(t, []string{"error:unknown_section"}, byLine[22])
+	assert.Equal(t, []string{"error:cond_unbalanced"}, byLine[23])
+	assert.Equal(t, []string{"error:cond_unbalanced"}, byLine[25])
+	ports := make([]int, 0)
+	ports = append(ports, 443)
+	for p := 80; p <= 90; p++ {
+		ports = append(ports, p)
+	}
+	assert.ElementsMatch(t, ports, result.ListenerTCPPorts)
+	issue := result.Issues[0]
+	assert.Equal(t, LintIssue{Line: 1, Column: 1, EndColumn: 8, Severity: "error", Code: "outside_section", Message: issue.Message}, issue)
+}
+
+func TestLintRejectsBinaryAndOversized(t *testing.T) {
+	result := LintHAProxyConfig("global\n    daemon\x00\n")
+	assert.Contains(t, lintCodes(result), "error:nul_byte")
+	result = LintHAProxyConfig("global\n    daemon \xff\n")
+	assert.Contains(t, lintCodes(result), "error:invalid_utf8")
+	result = LintHAProxyConfig(strings.Repeat("#", MaxManagedConfigBytes+1))
+	assert.Equal(t, []string{"error:config_too_large"}, lintCodes(result))
+	result = LintHAProxyConfig("global\n    .if defined(A)\n")
+	assert.Contains(t, lintCodes(result), "error:cond_unbalanced")
+	result = LintHAProxyConfig("global\n    log \"unterminated\n")
+	assert.Contains(t, lintCodes(result), "error:unterminated_quote")
+}
+
+func TestLintDoesNotCountBackendOrUDPBindsAsListenerPorts(t *testing.T) {
+	cfg := "global\n    daemon\npeers p\n    bind 127.0.0.1:10000\n    server local\nlog-forward lf\n    dgram-bind 127.0.0.1:514\n    bind 127.0.0.1:1514\n    log global\nlisten stats\n    bind 127.0.0.1:8404,quic4@:443\n    mode http\n"
+	result := requireCleanLint(t, "misc", cfg)
+	assert.Equal(t, []int{8404}, result.ListenerTCPPorts)
+}
+
+func TestLintKeywordsJSONInSync(t *testing.T) {
+	frontend, err := os.ReadFile("../../frontend/src/features/haproxy-editor/haproxyKeywords.json")
+	require.NoError(t, err)
+	require.True(t, bytes.Equal(frontend, haproxyKeywordsJSON),
+		"internal/panel/haproxy_keywords.json must be a byte-for-byte copy of frontend/src/features/haproxy-editor/haproxyKeywords.json")
+}
+
+type lintCase struct {
+	name   string
+	cfg    string
+	line   int
+	code   string
+	column int // 0 = do not check
+	end    int
+}
+
+// Mistakes HAProxy 3.x rejects with a fatal "parsing" alert. The same table
+// is mirrored in frontend/tests/haproxyEditor.test.ts.
+func TestLintStrictKeywordErrors(t *testing.T) {
+	cases := []lintCase{
+		{"option trailing comma", "defaults\n    option tcplog,\n", 2, "unknown_option", 18, 19},
+		{"option typo", "defaults\n    option tcplogg\n", 2, "unknown_option", 12, 19},
+		{"no option typo", "defaults\n    no option tcplogg\n", 2, "unknown_option", 15, 22},
+		{"option args", "defaults\n    option dontlognull 1\n", 2, "too_many_args", 0, 0},
+		{"option in global", "global\n    option tcplog\n", 2, "unknown_directive", 0, 0},
+		{"server keyword typo", "backend b\n    server s1 1.2.3.4:443 chek\n", 2, "unknown_server_keyword", 27, 31},
+		{"server keyword comma", "backend b\n    server s1 1.2.3.4:443 check,\n", 2, "stray_punctuation", 32, 33},
+		{"server-template keyword", "backend b\n    server-template s 3 x.example.com:443 check resolverz dns\n", 2, "unknown_server_keyword", 0, 0},
+		{"default-server keyword", "backend b\n    default-server inetr 3s\n", 2, "unknown_server_keyword", 0, 0},
+		{"server bad inter", "backend b\n    server s1 1.2.3.4:443 check inter 5x\n", 2, "invalid_duration", 0, 0},
+		{"server missing value", "backend b\n    server s1 1.2.3.4:443 check inter\n", 2, "missing_value", 0, 0},
+		{"bind keyword typo", "frontend f\n    bind :443 acept-proxy\n", 2, "unknown_bind_keyword", 15, 26},
+		{"bind in backend", "backend b\n    bind :443\n", 2, "keyword_not_allowed", 5, 9},
+		{"bind in defaults", "defaults\n    bind :443\n", 2, "keyword_not_allowed", 0, 0},
+		{"server in frontend", "frontend f\n    server s 1.2.3.4:80\n", 2, "keyword_not_allowed", 0, 0},
+		{"use_backend in backend", "backend b\n    use_backend b\n", 2, "keyword_not_allowed", 0, 0},
+		{"tcp-request connection in backend", "backend b\n    tcp-request connection accept\n", 2, "keyword_not_allowed", 0, 0},
+		{"tcp-request in anonymous defaults", "defaults\n    tcp-request inspect-delay 5s\n", 2, "keyword_not_allowed", 0, 0},
+		{"tcp-request sub typo", "frontend f\n    tcp-request contnet accept\n", 2, "unknown_keyword", 0, 0},
+		{"timeout typo", "defaults\n    timeout clinet 5s\n", 2, "unknown_timeout", 13, 19},
+		{"timeout comma", "defaults\n    timeout client, 5s\n", 2, "stray_punctuation", 19, 20},
+		{"mode typo", "defaults\n    mode tpc\n", 2, "invalid_mode", 0, 0},
+		{"mode comma", "defaults\n    mode tcp,\n", 2, "stray_punctuation", 13, 14},
+		{"mode health", "defaults\n    mode health\n", 2, "invalid_mode", 0, 0},
+		{"mode log in frontend", "frontend f\n    mode log\n", 2, "invalid_mode", 0, 0},
+		{"balance typo", "backend b\n    balance roundrobbin\n", 2, "invalid_balance", 0, 0},
+		{"hash-type typo", "backend b\n    hash-type consistant\n", 2, "invalid_hash_type", 0, 0},
+		{"log facility typo", "global\n    log /dev/log locl0\n", 2, "invalid_log", 0, 0},
+		{"log level typo", "global\n    log /dev/log local0 notise\n", 2, "invalid_log", 0, 0},
+		{"directive typo in defaults", "defaults\n    maxconnn 10\n", 2, "unknown_directive", 0, 0},
+		{"directive comma", "defaults\n    maxconn, 10\n", 2, "stray_punctuation", 12, 13},
+		{"trailing semicolon", "defaults\n    retries 3;\n", 2, "stray_punctuation", 14, 15},
+		{"global typo", "global\n    nbthreads 2\n", 2, "unknown_directive", 0, 0},
+		{"negation unsupported", "defaults\n    no retries 3\n", 2, "negation_not_supported", 0, 0},
+		{"no on tcplog", "defaults\n    no option tcplog\n", 2, "negation_not_supported", 0, 0},
+		{"stats socket keyword", "global\n    stats socket /run/h.sock mode 660 levle admin\n", 2, "unknown_bind_keyword", 0, 0},
+	}
+	for _, c := range cases {
+		t.Run(c.name, func(t *testing.T) {
+			result := LintHAProxyConfig(c.cfg)
+			assert.False(t, result.Valid, lintCodes(result))
+			var found *LintIssue
+			for i := range result.Issues {
+				issue := result.Issues[i]
+				if issue.Line == c.line && issue.Code == c.code {
+					found = &issue
+					break
+				}
+			}
+			require.NotNil(t, found, "want %d:%s, got %v", c.line, c.code, result.Issues)
+			assert.Equal(t, LintSeverityError, found.Severity)
+			if c.column > 0 {
+				assert.Equal(t, []int{c.column, c.end}, []int{found.Column, found.EndColumn}, found.Message)
+			}
+		})
+	}
+	issue := LintHAProxyConfig("defaults\n    option tcplog,\n").Issues[0]
+	assert.Equal(t, "Неизвестная опция «tcplog,» — лишний символ «,»", issue.Message)
+}
+
+func TestLintAcceptsValidHAProxy3Syntax(t *testing.T) {
+	cfg := strings.Join([]string{
+		"global",
+		"    log stdout format raw local0 info",
+		"    log 127.0.0.1:514 len 2048 local1 notice err",
+		"    no busy-polling",
+		"    stats socket ipv4@127.0.0.1:9999 level admin expose-fd listeners",
+		"    tune.ssl.default-dh-param 2048",
+		"    ssl-default-bind-options ssl-min-ver TLSv1.2 no-tls-tickets",
+		"    set-var proc.x str(a,b)",
+		"    cpu-map auto:1/1-4 0-3",
+		"defaults named",
+		"    mode http",
+		"    option httplog clf",
+		"    no option http-server-close",
+		"    default option redispatch",
+		"    option forwardfor except 127.0.0.0/8 header X-Real-IP",
+		"    option httpchk GET /health",
+		"    option redispatch 1",
+		"    tcp-request inspect-delay 5s",
+		`    http-request set-header X-A "a, b;" if { path_beg /a, }`,
+		`    log-format "%ci:%cp [%tr] %ft %b/%s %TR/%Tw/%Tc/%Tr/%Ta %ST %B %CC %CS %tsc %ac/%fc/%bc/%sc/%rc %sq/%bq %hr %hs %{+Q}r"`,
+		"    timeout http-request 10s",
+		"    timeout http-keep-alive 2s",
+		"    balance random(2)",
+		"    hash-type map-based crc32",
+		"    no log",
+		"frontend web from named",
+		"    bind :443 ssl crt /etc/ssl/a.pem alpn h2,http/1.1 ssl-min-ver TLSv1.2 accept-proxy",
+		"    bind quic4@:443 ssl crt /etc/ssl/a.pem alpn h3 thread 1-2 shards by-thread",
+		"    bind unix@/run/x.sock mode 600 user haproxy group haproxy",
+		"    capture request header Host len 64",
+		"    rate-limit sessions 100",
+		"    stats uri /stats",
+		"    stick-table type ip size 1m expire 10m store http_req_rate(10s)",
+		"    tcp-request connection track-sc0 src",
+		"    use_backend app if { hdr(host) -i a.example.com }",
+		"    default_backend app",
+		"backend app",
+		"    balance hdr(host)",
+		"    hash-type consistent sdbm avalanche",
+		"    http-check send meth GET uri /health ver HTTP/1.1 hdr Host a",
+		"    http-check expect status 200",
+		"    stick on src",
+		"    default-server inter 3s fall 3 rise 2 check-sni a.example.com",
+		"    server s1 10.0.0.1:443 ssl verify none sni str(a) check weight 100 maxconn 50 source 10.0.0.9 usesrc clientip",
+		"    server s2 10.0.0.2:443 check agent-check agent-port 8080 agent-inter 5s on-marked-down shutdown-sessions",
+		"    server s3 10.0.0.3:443 set-proxy-v2-tlv-fmt(0x20) %[fc_pp_tlv(0x20)] send-proxy-v2 proxy-v2-options ssl,cert-cn",
+		"    server s4 10.0.0.4:80 track app/s1 cookie s4 observe layer4 error-limit 10 on-error mark-down",
+		"    server-template srv 1-3 pool.example.com:443 resolvers dns resolve-prefer ipv4 init-addr none",
+		"listen stats",
+		"    bind 127.0.0.1:8404",
+		"    mode http",
+		"    stats enable",
+		"    stats refresh 10s",
+		"resolvers dns",
+		"    nameserver ns1 1.1.1.1:53",
+		"    accepted_payload_size 8192",
+		"",
+	}, "\n")
+	requireCleanLint(t, "haproxy3", cfg)
+}
diff --git a/internal/panel/http.go b/internal/panel/http.go
index f4d99fa..011d442 100644
--- a/internal/panel/http.go
+++ b/internal/panel/http.go
@@ -13,6 +13,7 @@ import (
 	"encoding/json"
 	"encoding/pem"
 	"errors"
+	"fmt"
 	"io"
 	"log/slog"
 	"net"
@@ -393,7 +394,8 @@ func (a *API) auditMutations(next http.Handler) http.Handler {
 	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		trimmedPath := strings.TrimRight(r.URL.Path, "/")
 		if !mutatingMethod(r.Method) || trimmedPath == "/api/v1/bootstrap" ||
-			(r.Method == http.MethodPost && strings.HasSuffix(trimmedPath, "/reinstall")) {
+			(r.Method == http.MethodPost && strings.HasSuffix(trimmedPath, "/reinstall")) ||
+			(r.Method == http.MethodPost && strings.HasPrefix(trimmedPath, "/api/v1/nodes/") && strings.HasSuffix(trimmedPath, "/config-lint")) {
 			next.ServeHTTP(w, r)
 			return
 		}
@@ -647,6 +649,10 @@ func (a *API) api(w http.ResponseWriter, r *http.Request) {
 			a.reinstallNode(w, r, nodeID)
 			return
 		}
+		if len(parts) == 3 && parts[2] == "config-lint" {
+			a.configLint(w, r, nodeID)
+			return
+		}
 		if len(parts) == 3 && parts[2] == "config-revisions" {
 			a.configRevisions(w, r, nodeID)
 			return
@@ -1111,6 +1117,107 @@ type configRevisionInput struct {
 	Config   string         `json:"config"`
 	Note     string         `json:"note"`
 	Metadata map[string]any `json:"metadata"`
+	// Force stores an advanced-editor revision despite static lint errors;
+	// the Agent's `haproxy -c` remains the final gate before apply.
+	Force bool `json:"force,omitempty"`
+}
+
+const (
+	advancedEditorSource       = "advanced_editor"
+	manualRevisionRenderer     = "manual"
+	generatedConfigHeader      = "# Generated by NodeFlow. Do not edit."
+	manualConfigHeader         = "# Edited manually in NodeFlow advanced editor."
+	configLintFailedCode       = "config_lint_failed"
+	configLintFailedMessageFmt = "configuration has %d static lint error(s); fix them or resend with \"force\":true"
+)
+
+type configLintInput struct {
+	Config string `json:"config"`
+}
+
+// configLint statically checks an advanced-editor draft. Read-only: nothing
+// is stored and the request is not audited.
+func (a *API) configLint(w http.ResponseWriter, r *http.Request, nodeID string) {
+	if r.Method != http.MethodPost {
+		methodNotAllowed(w, "POST")
+		return
+	}
+	var in configLintInput
+	if !decode(w, r, &in) {
+		return
+	}
+	if len(in.Config) > MaxManagedConfigBytes {
+		writeError(w, http.StatusBadRequest, "validation_error", "config must not exceed 524288 bytes")
+		return
+	}
+	if _, err := a.store.GetNode(r.Context(), nodeID); err != nil {
+		respondStore(w, nil, err, http.StatusOK)
+		return
+	}
+	writeJSON(w, http.StatusOK, LintHAProxyConfigForNode(in.Config, a.expectedRuntimeNames(r.Context(), nodeID)))
+}
+
+// expectedRuntimeNames returns the runtime names the generated configuration
+// of the current routes exposes. While advanced mode is active routes cannot
+// change, so this equals the last generated revision. Failures only disable
+// the runtime-name warnings.
+func (a *API) expectedRuntimeNames(ctx context.Context, nodeID string) []RouteRuntimeNames {
+	routes, err := a.store.ListRoutes(ctx, nodeID)
+	if err != nil || len(routes) == 0 {
+		return nil
+	}
+	facts, err := a.store.GetNodeRenderFacts(ctx, nodeID)
+	if err != nil {
+		return nil
+	}
+	result, err := renderHAProxyConfigForLifecycle(routes, facts)
+	if err != nil {
+		return nil
+	}
+	return result.RuntimeNames
+}
+
+// prepareAdvancedEditorRevision lints a manual revision and records the
+// firewall listener plan. It returns false after writing a response.
+func (a *API) prepareAdvancedEditorRevision(w http.ResponseWriter, r *http.Request, nodeID string, in *configRevisionInput) bool {
+	if strings.HasPrefix(in.Config, generatedConfigHeader) {
+		rest := strings.TrimPrefix(in.Config, generatedConfigHeader)
+		if rest == "" || rest[0] == '\n' || rest[0] == '\r' {
+			in.Config = manualConfigHeader + rest
+		}
+	}
+	// HAProxy rejects a config whose last line lacks LF ("Missing LF on last
+	// line"); editors commonly drop the trailing newline.
+	if in.Config != "" && !strings.HasSuffix(in.Config, "\n") {
+		in.Config += "\n"
+	}
+	if len(in.Config) > MaxManagedConfigBytes {
+		writeError(w, 400, "validation_error", "config must be between 1 and 524288 bytes; note must not exceed 500 characters")
+		return false
+	}
+	if _, err := a.store.GetNode(r.Context(), nodeID); err != nil {
+		respondStore(w, nil, err, http.StatusCreated)
+		return false
+	}
+	lint := LintHAProxyConfigForNode(in.Config, a.expectedRuntimeNames(r.Context(), nodeID))
+	errs, warnings := lint.Counts()
+	if errs > 0 && !in.Force {
+		writeJSON(w, http.StatusUnprocessableEntity, map[string]any{
+			"error":  map[string]string{"code": configLintFailedCode, "message": fmt.Sprintf(configLintFailedMessageFmt, errs)},
+			"issues": lint.Issues,
+		})
+		return false
+	}
+	in.Metadata["renderer"] = manualRevisionRenderer
+	in.Metadata["lint"] = map[string]any{"errors": errs, "warnings": warnings}
+	if lint.FirewallPortsUsable() {
+		in.Metadata["listener_tcp_ports"] = lint.ListenerTCPPorts
+	} else {
+		// Without a trustworthy plan the firewall degrades to observe for
+		// this revision instead of pruning or failing heartbeats.
+		delete(in.Metadata, "listener_tcp_ports")
+	}
+	return true
 }
 
 func (a *API) configRevisions(w http.ResponseWriter, r *http.Request, nodeID string) {
@@ -1130,6 +1237,14 @@ func (a *API) configRevisions(w http.ResponseWriter, r *http.Request, nodeID str
 		if in.Metadata == nil {
 			in.Metadata = map[string]any{}
 		}
+		if source, _ := in.Metadata["source"].(string); source == advancedEditorSource {
+			if !a.prepareAdvancedEditorRevision(w, r, nodeID, &in) {
+				return
+			}
+		} else if in.Force {
+			writeError(w, 400, "validation_error", "force is only accepted for advanced_editor revisions")
+			return
+		}
 		v, err := a.store.CreateConfigRevision(r.Context(), nodeID, in.Config, strings.TrimSpace(in.Note), in.Metadata)
 		respondStore(w, v, err, http.StatusCreated)
 	default:
diff --git a/internal/panel/http_test.go b/internal/panel/http_test.go
index e972d75..bf9b61f 100644
--- a/internal/panel/http_test.go
+++ b/internal/panel/http_test.go
@@ -19,6 +19,7 @@ import (
 	"sync/atomic"
 	"testing"
 	"time"
+	"unicode/utf8"
 
 	"github.com/jackc/pgx/v5/pgconn"
 	"github.com/nodeflow/nodeflow/internal/bootstrap"
@@ -66,6 +67,7 @@ type fakeStore struct {
 	applyToken            string
 	applyReport           ApplyReport
 	applyErr              error
+	configState           *NodeConfigState
 	operational           NodeOperationalDetail
 	traffic               NodeTrafficReport
 	trafficMonth          time.Time
@@ -452,6 +454,9 @@ func (f *fakeStore) AssignDesiredRevision(_ context.Context, nodeID string, revi
 	return NodeConfigState{NodeID: nodeID, DesiredRevision: &revision, State: "pending"}, nil
 }
 func (f *fakeStore) GetConfigState(context.Context, string) (NodeConfigState, error) {
+	if f.configState != nil {
+		return *f.configState, nil
+	}
 	return NodeConfigState{NodeID: testNodeID, State: "unassigned"}, nil
 }
 func (f *fakeStore) IngestApplyReport(_ context.Context, token string, report ApplyReport) (NodeConfigState, error) {
@@ -460,6 +465,29 @@ func (f *fakeStore) IngestApplyReport(_ context.Context, token string, report Ap
 }
 
 func handler(f *fakeStore) http.Handler { return NewHandler(f, Config{AdminToken: testAdminToken}) }
+
+func TestConfigStateExposesLastErrorDetail(t *testing.T) {
+	f := &fakeStore{configState: &NodeConfigState{NodeID: testNodeID, State: "failed", LastError: "validation_failed", LastErrorDetail: "[ALERT] parsing [haproxy.cfg:12] : unknown keyword"}}
+	w := request(t, handler(f), http.MethodGet, "/api/v1/nodes/"+testNodeID+"/config-state", "", testAdminToken)
+	require.Equal(t, http.StatusOK, w.Code, w.Body.String())
+	var got map[string]any
+	require.NoError(t, json.Unmarshal(w.Body.Bytes(), &got))
+	assert.Equal(t, "validation_failed", got["last_error"])
+	assert.Equal(t, "[ALERT] parsing [haproxy.cfg:12] : unknown keyword", got["last_error_detail"])
+
+	f.configState = &NodeConfigState{NodeID: testNodeID, State: "in_sync"}
+	w = request(t, handler(f), http.MethodGet, "/api/v1/nodes/"+testNodeID+"/config-state", "", testAdminToken)
+	require.Equal(t, http.StatusOK, w.Code)
+	assert.NotContains(t, w.Body.String(), "last_error_detail")
+}
+
+func TestApplyReportErrorDetailBounds(t *testing.T) {
+	assert.Empty(t, applyReportErrorDetail(nil))
+	assert.Empty(t, applyReportErrorDetail(map[string]any{"error_detail": 12}))
+	long := applyReportErrorDetail(map[string]any{"error_detail": strings.Repeat("я", maxConfigErrorDetailBytes)})
+	assert.LessOrEqual(t, len(long), maxConfigErrorDetailBytes)
+	assert.True(t, utf8.ValidString(long))
+}
 func request(t *testing.T, h http.Handler, method, path, body, token string) *httptest.ResponseRecorder {
 	t.Helper()
 	r := httptest.NewRequest(method, path, strings.NewReader(body))
@@ -1373,6 +1401,13 @@ func TestConfigReportAuthValidationAndIngest(t *testing.T) {
 	assert.Equal(t, "enrollment-secret", f.applyToken)
 	assert.Equal(t, int64(1), f.applyReport.Revision)
 	assert.Equal(t, "ok", f.applyReport.Details["haproxy"])
+	// Old Agents send no error_detail; newer ones carry it inside details.
+	w = request(t, h, "POST", "/agent/v1/config-report", `{"revision":1,"state":"failed","error":"validation_failed","rollback_attempted":false,"details":{"reason":"validation_failed"}}`, "enrollment-secret")
+	require.Equal(t, http.StatusAccepted, w.Code, w.Body.String())
+	assert.Empty(t, applyReportErrorDetail(f.applyReport.Details))
+	w = request(t, h, "POST", "/agent/v1/config-report", `{"revision":1,"state":"failed","error":"validation_failed","rollback_attempted":false,"details":{"reason":"validation_failed","error_detail":"[ALERT] parsing [haproxy.cfg:12] : unknown keyword"}}`, "enrollment-secret")
+	require.Equal(t, http.StatusAccepted, w.Code, w.Body.String())
+	assert.Equal(t, "[ALERT] parsing [haproxy.cfg:12] : unknown keyword", applyReportErrorDetail(f.applyReport.Details))
 	w = request(t, h, "POST", "/agent/v1/config-report", `{"revision":1,"state":"unknown"}`, "enrollment-secret")
 	assert.Equal(t, http.StatusBadRequest, w.Code)
 	w = request(t, h, "POST", "/agent/v1/config-report", `{"revision":1,"state":"failed","error":"raw private diagnostic"}`, "enrollment-secret")
diff --git a/internal/panel/models.go b/internal/panel/models.go
index 4bb3be3..3e3b542 100644
--- a/internal/panel/models.go
+++ b/internal/panel/models.go
@@ -596,6 +596,7 @@ type NodeConfigState struct {
 	ActualRevision  *int64     `json:"actual_revision"`
 	State           string     `json:"state"`
 	LastError       string     `json:"last_error,omitempty"`
+	LastErrorDetail string     `json:"last_error_detail,omitempty"`
 	LastReportAt    *time.Time `json:"last_report_at,omitempty"`
 	UpdatedAt       time.Time  `json:"updated_at"`
 }
diff --git a/internal/panel/store.go b/internal/panel/store.go
index 2a9b072..eadcd3c 100644
--- a/internal/panel/store.go
+++ b/internal/panel/store.go
@@ -240,12 +240,11 @@ func (s *PGStore) GetFirewallPolicy(ctx context.Context, nodeID string) (NodeFir
 	var raw []byte
 	var complete bool
 	err = s.pool.QueryRow(ctx, `
-		SELECT revision.metadata->'listener_tcp_ports',revision.metadata ? 'listener_tcp_ports'
+		SELECT revision.metadata->'listener_tcp_ports',`+firewallPlanCompleteSQL("revision")+`
 		FROM node_config_state AS state
 		JOIN config_revisions AS revision
 		  ON revision.node_id=state.node_id AND revision.revision=state.actual_revision
-		WHERE state.node_id=$1 AND state.actual_revision IS NOT NULL
-		  AND revision.metadata->>'renderer' = ANY($2::text[])`, nodeID, supportedHAProxyRenderers()).Scan(&raw, &complete)
+		WHERE state.node_id=$1 AND state.actual_revision IS NOT NULL`, nodeID, supportedHAProxyRenderers()).Scan(&raw, &complete)
 	if errors.Is(err, pgx.ErrNoRows) {
 		return policy, nil
 	}
@@ -1296,7 +1295,7 @@ func createAndAssignGeneratedRevisionTx(ctx context.Context, tx pgx.Tx, nodeID,
 		INSERT INTO node_config_state(node_id,desired_revision,state,last_error,updated_at)
 		VALUES($1,$2,'pending','',clock_timestamp())
 		ON CONFLICT(node_id) DO UPDATE SET desired_revision=EXCLUDED.desired_revision,
-			state='pending',last_error='',updated_at=EXCLUDED.updated_at`, nodeID, revision); err != nil {
+			state='pending',last_error='',last_error_detail=NULL,updated_at=EXCLUDED.updated_at`, nodeID, revision); err != nil {
 		return ConfigRevision{}, err
 	}
 	// A node revision republishes every enabled route, not only the route that
@@ -1817,6 +1816,7 @@ func reconcileObservedConfig(ctx context.Context, tx pgx.Tx, nodeID string, obse
 			UPDATE node_config_state SET actual_revision=$2,
 				state=CASE WHEN `+kernelShaperFailureHold+` THEN state ELSE 'in_sync' END,
 				last_error=CASE WHEN `+kernelShaperFailureHold+` THEN last_error ELSE '' END,
+				last_error_detail=CASE WHEN `+kernelShaperFailureHold+` THEN last_error_detail ELSE NULL END,
 				updated_at=$3
 			WHERE node_id=$1`, nodeID, *h.ActualRevision, observedAt)
 		if err != nil {
@@ -1836,14 +1836,14 @@ func reconcileObservedConfig(ctx context.Context, tx pgx.Tx, nodeID string, obse
 
 	if verified {
 		_, err = tx.Exec(ctx, `
-			UPDATE node_config_state SET actual_revision=$2,state='drifted',last_error='observed_config_drift',updated_at=$3
+			UPDATE node_config_state SET actual_revision=$2,state='drifted',last_error='observed_config_drift',last_error_detail=NULL,updated_at=$3
 			WHERE node_id=$1`, nodeID, *h.ActualRevision, observedAt)
 		if err == nil {
 			err = reconcileRoutesToActualRevision(ctx, tx, nodeID, *h.ActualRevision)
 		}
 	} else {
 		_, err = tx.Exec(ctx, `
-			UPDATE node_config_state SET state='drifted',last_error='observed_config_drift',updated_at=$2
+			UPDATE node_config_state SET state='drifted',last_error='observed_config_drift',last_error_detail=NULL,updated_at=$2
 			WHERE node_id=$1`, nodeID, observedAt)
 	}
 	return verified, err
@@ -2039,7 +2039,7 @@ func (s *PGStore) GetConfigRevision(ctx context.Context, nodeID string, revision
 
 func scanConfigState(row pgx.Row) (NodeConfigState, error) {
 	var v NodeConfigState
-	err := row.Scan(&v.NodeID, &v.DesiredRevision, &v.ActualRevision, &v.State, &v.LastError, &v.LastReportAt, &v.UpdatedAt)
+	err := row.Scan(&v.NodeID, &v.DesiredRevision, &v.ActualRevision, &v.State, &v.LastError, &v.LastErrorDetail, &v.LastReportAt, &v.UpdatedAt)
 	if errors.Is(err, pgx.ErrNoRows) {
 		return v, ErrNotFound
 	}
@@ -2066,8 +2066,8 @@ func (s *PGStore) AssignDesiredRevision(ctx context.Context, nodeID string, revi
 		WHERE r.node_id=$1 AND r.revision=$2
 		ON CONFLICT (node_id) DO UPDATE SET desired_revision=EXCLUDED.desired_revision,
 		state=CASE WHEN node_config_state.actual_revision=EXCLUDED.desired_revision THEN 'in_sync' ELSE 'pending' END,
-		last_error='',updated_at=now()
-		RETURNING node_id::text,desired_revision,actual_revision,state,last_error,last_report_at,updated_at`, nodeID, revision))
+		last_error='',last_error_detail=NULL,updated_at=now()
+		RETURNING node_id::text,desired_revision,actual_revision,state,last_error,COALESCE(last_error_detail,''),last_report_at,updated_at`, nodeID, revision))
 	if err != nil {
 		return NodeConfigState{}, err
 	}
@@ -2075,7 +2075,7 @@ func (s *PGStore) AssignDesiredRevision(ctx context.Context, nodeID string, revi
 }
 
 func (s *PGStore) GetConfigState(ctx context.Context, nodeID string) (NodeConfigState, error) {
-	return scanConfigState(s.pool.QueryRow(ctx, `SELECT node_id::text,desired_revision,actual_revision,state,last_error,last_report_at,updated_at FROM node_config_state WHERE node_id=$1`, nodeID))
+	return scanConfigState(s.pool.QueryRow(ctx, `SELECT node_id::text,desired_revision,actual_revision,state,last_error,COALESCE(last_error_detail,''),last_report_at,updated_at FROM node_config_state WHERE node_id=$1`, nodeID))
 }
 
 // ListConfigStates returns config state rows for many nodes in one query,
@@ -2086,7 +2086,7 @@ func (s *PGStore) ListConfigStates(ctx context.Context, nodeIDs []string) (map[s
 		return out, nil
 	}
 	rows, err := s.pool.Query(ctx, `
-		SELECT node_id::text,desired_revision,actual_revision,state,last_error,last_report_at,updated_at
+		SELECT node_id::text,desired_revision,actual_revision,state,last_error,COALESCE(last_error_detail,''),last_report_at,updated_at
 		FROM node_config_state WHERE node_id = ANY($1::uuid[])`, nodeIDs)
 	if err != nil {
 		return nil, err
@@ -2124,11 +2124,11 @@ func (s *PGStore) IngestApplyReport(ctx context.Context, token string, report Ap
 		return NodeConfigState{}, err
 	}
 	var currentDesired, currentActual *int64
-	var currentState, currentError string
+	var currentState, currentError, currentDetail string
 	err = tx.QueryRow(ctx, `
-		SELECT desired_revision,actual_revision,state,last_error
+		SELECT desired_revision,actual_revision,state,last_error,COALESCE(last_error_detail,'')
 		FROM node_config_state WHERE node_id=$1 FOR UPDATE`, nodeID).
-		Scan(&currentDesired, &currentActual, &currentState, &currentError)
+		Scan(&currentDesired, &currentActual, &currentState, &currentError, &currentDetail)
 	if errors.Is(err, pgx.ErrNoRows) {
 		return NodeConfigState{}, ErrNotFound
 	}
@@ -2178,7 +2178,7 @@ func (s *PGStore) IngestApplyReport(ctx context.Context, token string, report Ap
 		effectiveActual = &actual
 		acceptedObservedActual = currentActual == nil || actual != *currentActual
 	}
-	state, stateError := currentState, currentError
+	state, stateError, stateDetail := currentState, currentError, currentDetail
 	if reportIsCurrent {
 		switch report.State {
 		case "applied":
@@ -2187,20 +2187,21 @@ func (s *PGStore) IngestApplyReport(ctx context.Context, token string, report Ap
 			} else {
 				state, stateError = "drifted", "observed_config_drift"
 			}
+			stateDetail = ""
 		case "applying":
-			state, stateError = "applying", ""
+			state, stateError, stateDetail = "applying", "", ""
 		case "failed", "rolled_back":
-			state, stateError = report.State, report.Error
+			state, stateError, stateDetail = report.State, report.Error, applyReportErrorDetail(report.Details)
 		}
 	}
 	v, err := scanConfigState(tx.QueryRow(ctx, `
 		UPDATE node_config_state SET
-			actual_revision=$2,state=$3,last_error=$4,
+			actual_revision=$2,state=$3,last_error=$4,last_error_detail=NULLIF($6,''),
 			last_report_at=CASE WHEN $5 THEN now() ELSE last_report_at END,
 			updated_at=CASE WHEN $5 OR actual_revision IS DISTINCT FROM $2 THEN now() ELSE updated_at END
 		WHERE node_id=$1
-		RETURNING node_id::text,desired_revision,actual_revision,state,last_error,last_report_at,updated_at`,
-		nodeID, effectiveActual, state, stateError, reportIsCurrent))
+		RETURNING node_id::text,desired_revision,actual_revision,state,last_error,COALESCE(last_error_detail,''),last_report_at,updated_at`,
+		nodeID, effectiveActual, state, stateError, reportIsCurrent, stateDetail))
 	if err != nil {
 		return NodeConfigState{}, err
 	}
diff --git a/migrations/000055_config_state_error_detail.down.sql b/migrations/000055_config_state_error_detail.down.sql
new file mode 100644
index 0000000..93cfb65
--- /dev/null
+++ b/migrations/000055_config_state_error_detail.down.sql
@@ -0,0 +1,2 @@
+ALTER TABLE node_config_state
+    DROP COLUMN IF EXISTS last_error_detail;
diff --git a/migrations/000055_config_state_error_detail.up.sql b/migrations/000055_config_state_error_detail.up.sql
new file mode 100644
index 0000000..d1c8951
--- /dev/null
+++ b/migrations/000055_config_state_error_detail.up.sql
@@ -0,0 +1,5 @@
+-- Operator-facing excerpt of the last failed apply (for example the
+-- [ALERT] lines of haproxy -c) reported by newer Agents. NULL/empty for
+-- older Agents and cleared whenever last_error is cleared.
+ALTER TABLE node_config_state
+    ADD COLUMN IF NOT EXISTS last_error_detail text NULL;

From 820bbfbaf88a68a426f7f5ac1beac0d6fdf91116 Mon Sep 17 00:00:00 2001
From: SHOKOV <74192268+SHOKOVprod@users.noreply.github.com>
Date: Fri, 25 Sep 2026 05:25:21 +0300
Subject: [PATCH 3/4] Add HAProxy connection-log toggle to the Add node dialog

---
 frontend/src/features/nodes/AddNodeDialog.tsx |  8 +++-
 frontend/src/lib/contracts.ts                 |  1 +
 internal/bootstrap/bootstrap.go               |  1 +
 internal/panel/bootstrap_haproxy_logs_test.go | 40 +++++++++++++++++++
 internal/panel/http.go                        |  6 ++-
 5 files changed, 54 insertions(+), 2 deletions(-)
 create mode 100644 internal/panel/bootstrap_haproxy_logs_test.go

diff --git a/frontend/src/features/nodes/AddNodeDialog.tsx b/frontend/src/features/nodes/AddNodeDialog.tsx
index 0d7a7a9..c43000e 100644
--- a/frontend/src/features/nodes/AddNodeDialog.tsx
+++ b/frontend/src/features/nodes/AddNodeDialog.tsx
@@ -75,6 +75,7 @@ export function AddNodeDialog({ opened, onClose, onInstalled, reinstallTarget, d
   const [hostKey, setHostKey] = useState<HostKeyResult | null>(null);
   const [hostKeyAccepted, setHostKeyAccepted] = useState(false);
   const [allowFirewallApply, setAllowFirewallApply] = useState(true);
+  const [haproxyLogs, setHAProxyLogs] = useState(true);
   const [detectedOS, setDetectedOS] = useState('');
   const [detectedArch, setDetectedArch] = useState('');
   const [releases, setReleases] = useState<AgentRelease[]>([]);
@@ -100,6 +101,7 @@ export function AddNodeDialog({ opened, onClose, onInstalled, reinstallTarget, d
     setPort(reinstallTarget?.sshPort ?? 22);
     setAgentPort(reinstallTarget?.agentPort ?? 4200);
     setAllowFirewallApply(reinstallTarget?.allowFirewallApply ?? true);
+    setHAProxyLogs(true);
     setDetectedOS(reinstallTarget?.os?.trim().toLowerCase() || '');
     setDetectedArch(reinstallTarget?.arch?.trim().toLowerCase() || '');
   }, [opened, reinstallTarget?.id, reinstallTarget?.allowFirewallApply, reinstallTarget?.agentPort, reinstallTarget?.sshPort, reinstallTarget?.os, reinstallTarget?.arch]);
@@ -149,7 +151,7 @@ export function AddNodeDialog({ opened, onClose, onInstalled, reinstallTarget, d
   const dirty = Boolean(name.trim() !== (reinstallTarget?.name ?? '') || address.trim() !== (reinstallTarget?.address ?? '')
     || password || privateKey || privateKeyPassphrase || sudoPassword
     || username !== 'root' || Number(port) !== (reinstallTarget?.sshPort ?? 22) || Number(agentPort) !== (reinstallTarget?.agentPort ?? 4200) || authMode !== 'password'
-    || sudoMode !== 'auto' || allowFirewallApply !== (reinstallTarget?.allowFirewallApply ?? true)
+    || sudoMode !== 'auto' || allowFirewallApply !== (reinstallTarget?.allowFirewallApply ?? true) || !haproxyLogs
     || selectedReleaseID !== automaticReleaseValue || hostKey);
   const jobActive = job?.status === 'queued' || job?.status === 'running';
   const requestClose = () => {
@@ -220,6 +222,7 @@ export function AddNodeDialog({ opened, onClose, onInstalled, reinstallTarget, d
       name: name.trim(), address: address.trim(), ssh_port: Number(port), username: username.trim(), auth_mode: authMode,
       sudo_mode: sudoMode, agent_port: Number(agentPort), host_key_sha256: hostKey.fingerprint,
       host_key_algorithm: hostKey.algorithm, allow_firewall_apply: allowFirewallApply,
+      ...(!reinstall && !haproxyLogs ? { haproxy_logs: false } : {}),
       ...(!automaticRelease ? { release_id: selectedReleaseID } : {}),
       ...(authMode === 'password' ? { password } : { private_key: privateKey, private_key_passphrase: privateKeyPassphrase }),
       ...(sudoPassword ? { sudo_password: sudoPassword } : {}),
@@ -306,7 +309,10 @@ export function AddNodeDialog({ opened, onClose, onInstalled, reinstallTarget, d
             </div>
             {sudoMode === 'password' && <PasswordInput label="Пароль sudo" description={authMode === 'password' ? 'Необязательно: если пусто, используется пароль SSH.' : 'Нужен для повышения прав после входа по ключу.'} value={sudoPassword} onChange={(event) => setSudoPassword(event.currentTarget.value)} required={authMode === 'private_key'} autoComplete="new-password" />}
             <div className="nf-dialog__firewall">
+              <Stack gap="sm">
               <Switch checked={allowFirewallApply} onChange={(event) => setAllowFirewallApply(event.currentTarget.checked)} label="Разрешить Agent автоматически открывать listener-порты в UFW" description={reinstall ? `Выбранная политика применится после успешной переустановки; служебный порт ${selectedAgentPort} наружу не открывается.` : `Это только разрешение для правил с меткой NodeFlow; служебный порт ${selectedAgentPort} наружу не открывается.`} />
+              {!reinstall && <Switch checked={haproxyLogs} onChange={(event) => setHAProxyLogs(event.currentTarget.checked)} label="Логи соединений HAProxy" description="Каждое соединение пишется в syslog. На маленьких дисках выключите. Можно изменить позже в настройках ноды." />}
+              </Stack>
             </div>
             <Group justify="space-between" mt="sm"><Button variant="default" onClick={requestClose}>Отмена</Button><Button type="submit" loading={pending} disabled={!connectionValid}>Получить ключ хоста</Button></Group>
           </>}
diff --git a/frontend/src/lib/contracts.ts b/frontend/src/lib/contracts.ts
index da9a038..1ffd8dd 100644
--- a/frontend/src/lib/contracts.ts
+++ b/frontend/src/lib/contracts.ts
@@ -461,6 +461,7 @@ export interface BootstrapNodeRequest {
   host_key_sha256: string;
   host_key_algorithm: HostKeyResult['algorithm'];
   allow_firewall_apply: boolean;
+  haproxy_logs?: boolean;
   release_id?: string;
 }
 
diff --git a/internal/bootstrap/bootstrap.go b/internal/bootstrap/bootstrap.go
index ef26718..ba7da8f 100644
--- a/internal/bootstrap/bootstrap.go
+++ b/internal/bootstrap/bootstrap.go
@@ -35,6 +35,7 @@ type Request struct {
 	HostKeySHA256        string                              `json:"host_key_sha256"`
 	HostKeyAlgorithm     string                              `json:"host_key_algorithm"`
 	AllowFirewallApply   bool                                `json:"allow_firewall_apply"`
+	HAProxyLogs          *bool                               `json:"haproxy_logs,omitempty"` // initial node setting; nil/true = logging on, ignored on reinstall
 	ReleaseID            string                              `json:"release_id,omitempty"`
 	NodeID               string                              `json:"-"`
 	EnrollmentToken      string                              `json:"-"`
diff --git a/internal/panel/bootstrap_haproxy_logs_test.go b/internal/panel/bootstrap_haproxy_logs_test.go
new file mode 100644
index 0000000..3497d77
--- /dev/null
+++ b/internal/panel/bootstrap_haproxy_logs_test.go
@@ -0,0 +1,40 @@
+package panel
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func TestBootstrapHAProxyLogsInitialSetting(t *testing.T) {
+	const base = `"name":"edge-1","address":"192.0.2.10","username":"root","password":"ssh-secret","host_key_sha256":"SHA256:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"`
+	cases := []struct {
+		name    string
+		extra   string
+		present bool
+	}{
+		{name: "omitted keeps default", extra: ""},
+		{name: "true keeps default", extra: `,"haproxy_logs":true`},
+		{name: "false stored on node", extra: `,"haproxy_logs":false`, present: true},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			store := &fakeStore{}
+			installer := &fakeInstaller{}
+			h := NewHandlerWithBootstrap(store, Config{AdminToken: testAdminToken}, installer)
+			created, _ := startBootstrapJob(t, h, `{`+base+tc.extra+`}`)
+			installed, pollBody := waitBootstrapJob(t, h, created.JobID)
+			require.Equal(t, bootstrapJobInstalled, installed.Status, pollBody)
+			value, ok := store.createdNode.Metadata[nodeMetadataHAProxyLogsKey]
+			if tc.present {
+				require.True(t, ok)
+				assert.Equal(t, false, value)
+				assert.False(t, nodeMetadataHAProxyLogs(store.createdNode.Metadata))
+			} else {
+				assert.False(t, ok, "metadata must stay byte-identical to pre-toggle nodes")
+				assert.True(t, nodeMetadataHAProxyLogs(store.createdNode.Metadata))
+			}
+		})
+	}
+}
diff --git a/internal/panel/http.go b/internal/panel/http.go
index 011d442..dd9c67d 100644
--- a/internal/panel/http.go
+++ b/internal/panel/http.go
@@ -1464,7 +1464,11 @@ func (a *API) bootstrapJob(w http.ResponseWriter, r *http.Request, jobID string)
 
 func (a *API) runBootstrapJob(ctx context.Context, in *bootstrap.Request, actor auditActor) bootstrapJobOutcome {
 	bootstrap.ReportProgress(ctx, "create_node")
-	n, err := a.store.CreateNode(ctx, in.Name, in.Address, map[string]any{"agent_port": in.AgentPort, "ssh_port": in.SSHPort, "firewall_apply_allowed": in.AllowFirewallApply})
+	nodeMetadata := map[string]any{"agent_port": in.AgentPort, "ssh_port": in.SSHPort, "firewall_apply_allowed": in.AllowFirewallApply}
+	if in.HAProxyLogs != nil && !*in.HAProxyLogs {
+		nodeMetadata[nodeMetadataHAProxyLogsKey] = false
+	}
+	n, err := a.store.CreateNode(ctx, in.Name, in.Address, nodeMetadata)
 	if err != nil {
 		slog.Error("bootstrap failed", "stage", "create_node", "error", err)
 		return bootstrapJobOutcome{Stage: "create_node"}

From 333fb123ae6890a3e0868c7af3af26d0e91c73d1 Mon Sep 17 00:00:00 2001
From: SHOKOV <74192268+SHOKOVprod@users.noreply.github.com>
Date: Tue, 29 Sep 2026 17:18:10 +0300
Subject: [PATCH 4/4] NodeFlow 2.1.0: HAProxy settings and config editor

---
 .github/ISSUE_TEMPLATE/bug_report.yml  |   2 +-
 CHANGELOG.md                           |  11 +++
 README.md                              |  14 +--
 cmd/node-agent/main.go                 |   2 +-
 cmd/panel-api/main.go                  |   2 +-
 compose.release.yaml                   |   4 +-
 docs/api-contract.md                   |  27 +++++-
 docs/features/haproxy-configuration.md | 122 ++++++++++---------------
 docs/images/haproxy-advanced.png       | Bin 130384 -> 0 bytes
 docs/images/haproxy-settings.png       | Bin 52820 -> 0 bytes
 docs/install/README-NODE-AGENT.txt     |   8 +-
 docs/install/index.html                |   6 +-
 docs/releases/2.1.0.md                 |  45 +++++++++
 frontend/package-lock.json             |   4 +-
 frontend/package.json                  |   2 +-
 nodeflow.env.example                   |   2 +-
 16 files changed, 154 insertions(+), 97 deletions(-)
 delete mode 100644 docs/images/haproxy-advanced.png
 delete mode 100644 docs/images/haproxy-settings.png
 create mode 100644 docs/releases/2.1.0.md

diff --git a/.github/ISSUE_TEMPLATE/bug_report.yml b/.github/ISSUE_TEMPLATE/bug_report.yml
index 707b032..7c4724c 100644
--- a/.github/ISSUE_TEMPLATE/bug_report.yml
+++ b/.github/ISSUE_TEMPLATE/bug_report.yml
@@ -11,7 +11,7 @@ body:
     attributes:
       label: Версии
       description: Panel, Node Agent, HAProxy и ОС ноды.
-      placeholder: "Panel 2.0.1, Agent 2.0.1, HAProxy 3.4, Ubuntu 24.04"
+      placeholder: "Panel 2.1.0, Agent 2.1.0, HAProxy 3.4, Ubuntu 24.04"
     validations:
       required: true
   - type: textarea
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 545f19c..de38902 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,16 @@
 # Changelog
 
+## 2.1.0 — Настройки HAProxy ноды и редактор конфига
+
+Panel и Node Agent — 2.1.0, HAProxy renderer v21, миграция 000055 (`node_config_state.last_error_detail`). Заметки к релизу: [docs/releases/2.1.0.md](docs/releases/2.1.0.md). Идея и первая версия — @fesevu (#15).
+
+- **Настройки HAProxy ноды** — `maxconn`, `nbthread`, `timeout connect/client/server` в диалоге настроек ноды под «Логи соединений HAProxy» (`nodes.metadata.haproxy_settings`, пусто = по умолчанию). Применяются ко всем маршрутам ноды через reload без разрыва соединений.
+- **Редактор конфигурации** `/nodes/:id/haproxy` («Конфигурация HAProxy» на странице ноды): Monaco (локально, отдельный chunk), подсветка HAProxy, автодополнение, подсказки на русском, предупреждения об опасных местах, пометка имён `nf_be_*`/`nf_srv_*`. «Применить на ноду» сохраняет и применяет с diff против применённого конфига; история, загрузка из маршрутов, возврат к сборке из UI. Пока активен ручной конфиг, изменения маршрутов возвращают 409 `advanced_config_active`.
+- **Проверка конфига** — линтер в браузере и `POST /api/v1/nodes/{id}/config-lint` (статический, ключевые слова сверены с HAProxy 2.8/3.0/3.2). Сохранение с ошибками — 422 `config_lint_failed`, `"force": true` сохраняет всё равно. Ручная ревизия хранит `renderer=manual`, `listener_tcp_ports`, `lint`; в конце добавляется перевод строки.
+- **Agent:** при неудачном `haproxy -c` отправляет строки `[ALERT]`/`[WARNING]` (≤1500 байт, без строк с паролями); Panel отдаёт их в `config-state.last_error_detail`, редактор показывает со ссылками на строки.
+- **Исправлено:** ручная ревизия при политике файрвола `apply` ломала каждый heartbeat Agent (500 `desired firewall listener plan is incomplete`) — план берёт порты из `listener_tcp_ports`, старые ручные ревизии без них сохраняют текущие порты.
+- Переключатель логов соединений HAProxy в диалоге «Добавить ноду».
+
 ## 2.0.1 — Логи HAProxy на ноде и исправления редактора
 
 Panel и Node Agent — 2.0.1, HAProxy renderer v21, миграций нет. Заметки к релизу: [docs/releases/2.0.1.md](docs/releases/2.0.1.md).
diff --git a/README.md b/README.md
index 2c870b1..acbe420 100644
--- a/README.md
+++ b/README.md
@@ -6,7 +6,7 @@
   <a href="#быстрая-установка">Установка</a> ·
   <a href="#обновление-с-10x">Обновление</a> ·
   <a href="#скриншоты">Скриншоты</a> ·
-  <a href="docs/releases/2.0.1.md">Что нового в 2.0.1</a> ·
+  <a href="docs/releases/2.1.0.md">Что нового в 2.1.0</a> ·
   <a href="../../issues">Issues</a> ·
   <a href="#поддержать-проект">Поддержка</a>
 </p>
@@ -58,10 +58,10 @@ curl -fsSL https://raw.githubusercontent.com/NodeFlow-dev/nodeflow/main/install.
 2. предложит режим доступа: Caddy cookie-gate (ссылка активации ставит защищённую cookie) или без него — токен администратора Panel нужен в любом случае;
 3. установит Docker и **Caddy** — Caddy сам получит сертификат Let's Encrypt и будет проксировать HTTPS на Panel, которая слушает только `127.0.0.1:8080`;
 4. скачает install kit последнего релиза, проверит его по SHA-256, который GitHub публикует для каждого asset релиза, возьмёт из него `compose.release.yaml`, сгенерирует `.env`, CA, сертификат mTLS и ключ подписи обновлений в `/opt/nodeflow`;
-5. выполнит `docker compose pull && docker compose up -d` с образом `ghcr.io/nodeflow-dev/nodeflow-panel:2.0.1` — на сервере ничего не собирается, миграции БД применяет сам образ;
+5. выполнит `docker compose pull && docker compose up -d` с образом `ghcr.io/nodeflow-dev/nodeflow-panel:2.1.0` — на сервере ничего не собирается, миграции БД применяет сам образ;
 6. опубликует подписанные релизы Node Agent (amd64 и arm64) и сохранит реквизиты входа в `~/nodeflow-credentials.txt` (права `0600`).
 
-Файрвол установщик не меняет. Для автоматизации без вопросов передайте переменные `NODEFLOW_DOMAIN`, `NODEFLOW_AUTH_MODE=cookie|none` и при необходимости `NODEFLOW_VERSION=2.0.1` (по умолчанию — последний релиз):
+Файрвол установщик не меняет. Для автоматизации без вопросов передайте переменные `NODEFLOW_DOMAIN`, `NODEFLOW_AUTH_MODE=cookie|none` и при необходимости `NODEFLOW_VERSION=2.1.0` (по умолчанию — последний релиз):
 
 ```bash
 curl -fsSL https://raw.githubusercontent.com/NodeFlow-dev/nodeflow/main/install.sh \
@@ -90,7 +90,7 @@ sudo NODE_AGENT_TOKEN=<токен> bash install-node.sh
 Команды выполняются от root (`sudo -i`): каталог `/opt/nodeflow` закрыт для остальных пользователей.
 
 ```bash
-v=2.0.1
+v=2.1.0
 kit=NodeFlow-Panel-$v-Agent-$v-install-kit
 curl -fsSLO "https://github.com/NodeFlow-dev/nodeflow/releases/download/v$v/$kit.tar.gz"
 # сверьте с digest asset'а на странице релиза или в API:
@@ -119,7 +119,7 @@ curl -fsSL https://raw.githubusercontent.com/NodeFlow-dev/nodeflow/main/install.
 
 Найдя `/opt/nodeflow/.env`, он работает как апгрейдер: делает `pg_dump` и архив конфигурации в `/var/backups/nodeflow/`, сохраняет `.env`, `tls/`, `pki/` и Caddy-сниппет `/etc/caddy/conf.d/nodeflow-panel.caddy`, переводит установку со сборки из исходников на образ ghcr.io, запускает миграции и проверяет, что Panel отвечает новой версией. При ошибке возвращаются прежние `compose.yaml` и `.env`; дамп БД остаётся (миграции автоматически не откатываются).
 
-Затем в **Настройки → Node Agent** обновите ноды до 2.0.1 — updater заменит Agent атомарно и откатит его при неудачном запуске. Самообновление не меняет systemd-юнит, поэтому на нодах, установленных версиями 1.0.x, один раз добавьте права на настройку pipe-буферов ядра (без этого splice остаётся на 256 КиБ) — или переустановите Agent из меню ноды:
+Затем в **Настройки → Node Agent** обновите ноды до 2.1.0 — updater заменит Agent атомарно и откатит его при неудачном запуске. Самообновление не меняет systemd-юнит, поэтому на нодах, установленных версиями 1.0.x, один раз добавьте права на настройку pipe-буферов ядра (без этого splice остаётся на 256 КиБ) — или переустановите Agent из меню ноды:
 
 ```bash
 sudo install -d /etc/systemd/system/nodeflow-node-agent.service.d
@@ -165,9 +165,9 @@ go test ./...
 
 ## Документация
 
-- Заметки к релизам [2.0.1](docs/releases/2.0.1.md) и [2.0.0](docs/releases/2.0.0.md), [CHANGELOG](CHANGELOG.md)
+- Заметки к релизам [2.1.0](docs/releases/2.1.0.md), [2.0.1](docs/releases/2.0.1.md) и [2.0.0](docs/releases/2.0.0.md), [CHANGELOG](CHANGELOG.md)
 - [API Panel](docs/api-contract.md)
-- [Настройки HAProxy и Advanced-редактор](docs/features/haproxy-configuration.md)
+- [Настройки HAProxy ноды и редактор конфига](docs/features/haproxy-configuration.md)
 - [Архитектура](docs/architecture.md)
 - [Первичная установка ноды](docs/bootstrap-flow.md)
 - [Самообновление Agent](docs/node-self-update.md)
diff --git a/cmd/node-agent/main.go b/cmd/node-agent/main.go
index 74cbbf8..7e757fc 100644
--- a/cmd/node-agent/main.go
+++ b/cmd/node-agent/main.go
@@ -14,7 +14,7 @@ import (
 	"github.com/nodeflow/nodeflow/internal/agent"
 )
 
-var version = "2.0.1"
+var version = "2.1.0"
 
 func main() {
 	showVersion := flag.Bool("version", false, "print Node Agent version and exit")
diff --git a/cmd/panel-api/main.go b/cmd/panel-api/main.go
index b11e762..f56cb8e 100644
--- a/cmd/panel-api/main.go
+++ b/cmd/panel-api/main.go
@@ -18,7 +18,7 @@ import (
 
 // panelVersion is the published Panel release version. Release builds may
 // replace it with -ldflags "-X main.panelVersion=...".
-var panelVersion = "2.0.1"
+var panelVersion = "2.1.0"
 
 func main() {
 	if len(os.Args) > 1 {
diff --git a/compose.release.yaml b/compose.release.yaml
index cbe4d38..e98bd19 100644
--- a/compose.release.yaml
+++ b/compose.release.yaml
@@ -30,7 +30,7 @@ services:
     <<: *hardening
 
   migrate:
-    image: ghcr.io/nodeflow-dev/nodeflow-panel:${NODEFLOW_VERSION:-2.0.1}
+    image: ghcr.io/nodeflow-dev/nodeflow-panel:${NODEFLOW_VERSION:-2.1.0}
     restart: "no"
     command: ["migrate"]
     depends_on:
@@ -79,7 +79,7 @@ services:
     <<: *hardening
 
   panel-api:
-    image: ghcr.io/nodeflow-dev/nodeflow-panel:${NODEFLOW_VERSION:-2.0.1}
+    image: ghcr.io/nodeflow-dev/nodeflow-panel:${NODEFLOW_VERSION:-2.1.0}
     restart: unless-stopped
     depends_on:
       migrate:
diff --git a/docs/api-contract.md b/docs/api-contract.md
index 8c010e2..3c10392 100644
--- a/docs/api-contract.md
+++ b/docs/api-contract.md
@@ -43,7 +43,7 @@ once and atomically bound to the verified leaf before subsequent use.
 | `POST` | `/api/v1/nodes/{node_id}/config-lint` | Static, read-only lint of an advanced-editor draft. |
 | `POST` | `/api/v1/nodes/{node_id}/config-revisions/from-routes` | Render enabled routes and create an immutable revision without assigning it. |
 | `GET` | `/api/v1/nodes/{node_id}/config-revisions/{revision}` | Read one immutable configuration revision. |
-| `GET` | `/api/v1/nodes/{node_id}/config-state` | Read desired/actual revision and convergence state. |
+| `GET` | `/api/v1/nodes/{node_id}/config-state` | Read desired/actual revision and convergence state (`last_error_detail`: HAProxy output of the last failed `haproxy -c`, Agent ≥ 2.1.0). |
 | `POST` | `/api/v1/nodes/{node_id}/generated-config` | Atomically resume generated configuration from current routes and node settings. |
 | `PUT` | `/api/v1/nodes/{node_id}/desired-revision` | Assign any existing revision as desired state. |
 | `GET, POST` | `/api/v1/agent-releases` | List or stream/upload and sign an immutable Agent release. |
@@ -822,6 +822,31 @@ lints with zero issues.
 A forced revision with lint errors may still be assigned via
 `PUT .../desired-revision`.
 
+While a manual (`advanced_editor`) revision is assigned, route mutations that
+would publish a configuration return `409 advanced_config_active`;
+`POST /api/v1/nodes/{node_id}/generated-config` resumes generated
+configuration. The firewall listener plan of a manual revision uses its
+`metadata.listener_tcp_ports`; legacy manual revisions without it keep the
+currently open ports (nothing is pruned).
+
+When the Agent's `haproxy -c` fails, its config report carries
+`details.error_detail` — the `[ALERT]`/`[WARNING]` lines (temp path replaced by
+`haproxy.cfg`, ANSI stripped, lines with `password`/`secret` dropped, at most
+1500 bytes). Panel stores it in `node_config_state.last_error_detail`
+(migration 000055) and returns it as `last_error_detail` in
+`GET .../config-state`; `null` for older Agents, which report only
+`validation_failed`.
+
+### Node HAProxy settings
+
+`POST`/`PUT /api/v1/nodes` accept `metadata.haproxy_settings`:
+`{"maxconn":int,"nbthread":int,"timeout_connect":"5s","timeout_client":"15m","timeout_server":"15m"}`,
+every field optional (absent = default). Omitting the key keeps the stored
+value, `{}` resets. Unknown fields, non-integral or out-of-range numbers and
+malformed durations → `400`. A change republishes the node's generated
+configuration in the same transaction (soft reload); an assigned manual
+revision is not changed.
+
 ## Current MVP: Agent API (default `127.0.0.1:4200`)
 
 All endpoints except health require `Authorization: Bearer $NODE_AGENT_TOKEN`.
diff --git a/docs/features/haproxy-configuration.md b/docs/features/haproxy-configuration.md
index 71a886f..74e84e2 100644
--- a/docs/features/haproxy-configuration.md
+++ b/docs/features/haproxy-configuration.md
@@ -1,77 +1,53 @@
-# Per-node HAProxy configuration
+# Настройки HAProxy ноды и редактор конфига
 
-Open a node and select **Конфигурация HAProxy**.
+## Настройки ноды
 
-## Global / defaults
+Диалог настроек ноды (шестерёнка), строка под переключателем «Логи соединений HAProxy»:
 
-The form configures HAProxy for every generated route on that node:
-
-| Setting | HAProxy directive | Default |
+| Поле | Директива HAProxy | По умолчанию |
 | --- | --- | --- |
-| Maximum connections | `global maxconn` | HAProxy automatic default |
-| Threads | `global nbthread` | HAProxy automatic default |
-| Connect timeout | `defaults timeout connect` | `5s` |
-| Client timeout | `defaults timeout client` | `15m` |
-| Server timeout | `defaults timeout server` | `15m` |
-
-Empty fields preserve existing defaults. Settings are stored in
-`nodes.metadata.haproxy_settings`; clients omitting this key preserve it.
-An empty object resets tuning. API validation rejects unknown fields,
-non-integral limits, out-of-range values and malformed durations.
-
-Changing these settings republishes an active route-lifecycle configuration
-in the same database transaction. Nodes without such a configuration retain
-the settings for their next generated revision. While an advanced revision
-is assigned, changing settings does not alter its text.
-
-## Advanced
-
-1. Configure routes and save global/defaults settings.
-2. Choose **Загрузить из UI** to populate the editor, or load an existing revision.
-   A node with no enabled routes can generate a base configuration.
-3. Edit `haproxy.cfg` and choose **Сохранить версию**. Saving creates an immutable
-   draft and does not deploy it.
-4. Choose **Применить версию** to assign the saved revision to the node.
-5. Watch desired/applied revision numbers, status and the last application error.
-   The agent validates with HAProxy before applying. Saving or assigning a
-   revision is not confirmation of successful application.
-
-Advanced revisions use `metadata.source=advanced_editor`. While one is assigned,
-route operations requiring publication fail with HTTP 409
-`advanced_config_active`; the route mutation and revision publication roll back
-together. Draft-only changes can still be saved. Node fact changes do not
-replace advanced revisions. Assignment and route publication serialize on the
-same node lock.
-
-**Вернуться к сборке из UI** calls `POST /api/v1/nodes/{id}/generated-config`.
-It renders current saved routes and settings, creates a revision, updates route
-deployment tracking and assigns it in one transaction. It does not reuse a
-potentially stale preview. Previous manual revisions remain in history.
-
-The editor deliberately does not parse arbitrary HAProxy text back into route
-forms. Preserve the agent's admin socket and generated runtime names when using
-NodeFlow runtime metrics. Quotas, routing statistics and firewall planning are
-based on managed route intent; arbitrary manual listeners/backends do not
-acquire those features automatically. Certificates and referenced files must
-already exist on the node. Configurations are limited to 512 KiB. Avoid storing
-private keys directly in configuration text.
-
-## Verification
-
-- Frontend: `cd frontend && npm ci && npm run build && npm test`.
-- Linux: `go test ./internal/panel ./internal/agent`.
-- PostgreSQL integration: apply migrations to an isolated database, set
-  `NODEFLOW_TEST_DATABASE_URL`, then run
-  `go test ./internal/panel -run 'TestPGStoreHAProxySettingsAndAdvancedMode'`.
-
-The integration test covers republishing tuned settings, old-client omission,
-manual-mode publication rejection and rollback, preservation of manual text,
-and explicit resumption of generated configuration.
-
-## Screenshots
-
-The screenshots use a local test panel and synthetic configuration values.
-
-![Per-node global and defaults settings](../images/haproxy-settings.png)
-
-![Advanced configuration editor](../images/haproxy-advanced.png)
+| maxconn | `global maxconn` | автоматически (HAProxy) |
+| nbthread | `global nbthread` | автоматически (HAProxy) |
+| timeout connect | `defaults timeout connect` | `5s` |
+| timeout client | `defaults timeout client` | `15m` |
+| timeout server | `defaults timeout server` | `15m` |
+
+Пустое поле — значение по умолчанию. Настройки действуют на все маршруты ноды: изменение публикует новую ревизию в той же транзакции, Agent применяет её reload без разрыва соединений. Обновлять Agent не нужно.
+
+API: `metadata.haproxy_settings` в `POST`/`PUT /api/v1/nodes` (`maxconn`, `nbthread`, `timeout_connect`, `timeout_client`, `timeout_server`). Если ключ не передан — сохранённое значение не меняется, `{}` сбрасывает. Неизвестные поля, дробные и вне диапазона числа, неверные длительности → 400. Назначенный ручной конфиг настройки не меняют.
+
+## Редактор конфигурации
+
+Кнопка «Конфигурация HAProxy» на странице ноды открывает `/nodes/:id/haproxy` — `haproxy.cfg` ноды целиком.
+
+- Monaco (поставляется с Panel, грузится только на этой странице): подсветка HAProxy, миникарта, автодополнение.
+- Подсказки на русском при наведении: секции, ~120 директив, параметры `server`/`bind`, `balance`, fetch-функции. Опасные места подсвечиваются предупреждением.
+- Имена `nf_be_*`/`nf_srv_*` помечены «не переименовывать»: по ним Panel считает статистику и применяет квоты.
+- Строка состояния: время последней проверки и «Конфиг валиден» или «N ошибок, M предупреждений» (клик — к первой проблеме), порты прослушивания из строк `bind`.
+
+Кнопки:
+
+| Кнопка | Действие |
+| --- | --- |
+| Сохранить (Ctrl+S) | Новая ревизия без применения. |
+| Всё равно сохранить | Только при ошибках линтера: сохранение с `force`. |
+| Форматировать | Выравнивает отступы. |
+| Применить на ноду | Сохраняет и назначает ревизию. Перед применением — diff с применённым конфигом; при ошибках линтера — дополнительное подтверждение. |
+| История | Прежние ревизии ноды. |
+| Загрузить из маршрутов | Подставляет конфиг, собранный из текущих маршрутов и настроек. |
+| Вернуться к сборке из UI | `POST /api/v1/nodes/{id}/generated-config`: собирает конфиг из маршрутов и назначает его в одной транзакции. |
+
+Пока назначен ручной конфиг, изменения маршрутов, требующие публикации, возвращают 409 `advanced_config_active` и откатываются. Ручные ревизии остаются в истории.
+
+Разбор ручного текста обратно в формы маршрутов не выполняется. Квоты, статистика и план файрвола строятся по маршрутам; добавленные вручную listeners/backends этих функций не получают. Сертификаты и файлы, на которые ссылается конфиг, должны уже быть на ноде. Лимит — 512 КиБ. Не храните закрытые ключи в тексте конфига.
+
+## Проверка
+
+1. Линтер в браузере — на каждое изменение.
+2. `POST /api/v1/nodes/{id}/config-lint` — через 250 мс после изменения. Статическая проверка (в образе Panel нет `haproxy`), ключевые слова сверены с исходниками HAProxy 2.8, 3.0 и 3.2: неизвестные секции, директивы, `option`, параметры `server`/`bind`, виды `timeout`; директива не в той секции; лишние `,`/`;` (`option tcplog,` — ошибка на запятой); повторяющиеся имена proxy и серверов; `use_backend`/`default_backend` на несуществующий backend; неверные порты, адреса, длительности, значения `mode`/`balance`/`hash-type`/`log`; несбалансированные `.if`/`.endif`; размер больше 512 КиБ.
+3. Сохранение (`POST /api/v1/nodes/{id}/config-revisions`, `metadata.source=advanced_editor`) повторяет проверку: с ошибками — 422 `config_lint_failed` со списком `issues`, `"force": true` сохраняет всё равно. В ревизии хранятся `renderer=manual`, `listener_tcp_ports`, `lint: {errors, warnings}`. Заголовок `# Generated by NodeFlow. Do not edit.` заменяется на `# Edited manually in NodeFlow advanced editor.`, в конец добавляется перевод строки.
+4. `haproxy -c` на ноде перед применением — окончательная проверка. При ошибке Agent 2.1.0 передаёт строки `[ALERT]`/`[WARNING]` (без строк с `password`/`secret`, до 1500 байт); они доступны в `GET /api/v1/nodes/{id}/config-state` → `last_error_detail` и показываются в редакторе со ссылками на строки. Старые Agent сообщают только `validation_failed`.
+
+План файрвола ручной ревизии берёт порты из `listener_tcp_ports`. Для ручных ревизий, сохранённых до 2.1.0 без этого поля, текущие открытые порты сохраняются.
+
+Формат ответов — [docs/api-contract.md](../api-contract.md), раздел «Advanced editor: lint and manual revisions».
diff --git a/docs/images/haproxy-advanced.png b/docs/images/haproxy-advanced.png
deleted file mode 100644
index 619320f03ac0f8b0f5c5c771f30468bcfe35b09e..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 130384
zcmd42Wl&vVvn~k1-Q7L7y9Ku(!7aEuA-Dy1clY298+W$=!QI^*g58yT=S<DdsdMMn
z%)ec$_UdKt+ue_Jn394N5<EUU7#J9mjI_8i7#IX17#QRz><8e86T)`{Ffddw8F3L+
zx6IQlC{4_-1i>Nasx=5b=XSMiZEasfMA4KW(Xa@xpxXFZP?frYqqPW_g*(13F&kbd
z=cjcMS7Gm-Z7B=mX=&`mlTPaor}?GT#gpDKrKP3ORnfu0&{C+7BB+p8O$l*vaq*ex
zI5;#|Rn)Zcq%pThx4izOu>Pc>@51Ql=$&3~y*XAEmX@^?V_wNDq>g`26G44Xv9Pul
zL!hFjuA8wZhl7_<QAwZxPJ;D+6qXbd3s{gLkL%|m`|p20e4;5WEiWo8EZGUXCqw%e
z;}RDif7=%c0Re&0mNEM86@ims785u|rX~N~92pd3JoPIv`o9YXVxmeP6aM=NNd^%{
z`R^8C!KEqx6AbnfdDy=YqG0GU|GC8vvC`!Kf};Kq|F0Nel=1(LkV2BiiT~#sVE@xl
zyl653A;`#Z!sK|rn|wEB4kkH3je9=Op}seuiPd+!;NW0$=4|Wr{1(;6A0iOF6um_s
zV36=4GpuJT$Os_bMTjQuGi*&w2mU@lzy4@{7{&_7wtTZJDheq@g`<UJ5EORSeC2}h
zvQH8dz8$(DI;PHe=^K&E$o#dP(iyJNf#b9!Jzcx;crLxkrgo}p^|GgLy~}s<Kk<eF
zU{F$}`Me%$W{XHvrB`FxR_IhKHjf02XM*M1T+jAHH$Fs)sZ+_>E!RwgN-KZ<Y#0v`
z<-_;k5Mc0%zR1jj2+`Em2H9>z|NX3?U2%Oz%i(c|=J1wR+XG5pbQPY+;#5nN$hw|x
z$fG4HG>J*^*7McIg5<D+h!FHaM($1LYmW}kGWWj{zCNmqZ>+f3HPNaa>nP98Io_;3
z`Mg5kGVA4wPo?L6F_t`N93I;sY33`*>i60x)+Z6Lv$7gB8f1M>I~G!t)3NT`M~Z(S
zARw?`tF2U6<KxjoYpC-MxnJ}AzJbyH@M*Y*)~?F^W<P0sA=BLnB_x=T$7^b6VQ6+-
zmF1PHQf~Vz6g=iImwT@K3RfrwoB=I^YBOqzic)(FiST-jPe5m<kFBH2E*b`g)4{K-
z@FcqJX1S)Sx3Smqg_2H}zSaOK<XQqg=kwhzFIp?BtKU?%%ih*{7(~=e`gplTMFR?L
zE*Gt4ulQmV6wM+j3^yr}zW%TMM|#=+*6WMw@Nr>Ierz*|W0QyzgJ%2Y+v{_EyLVk(
z-Qy*-e1@BcJM_hh?_qZj+ukT2kG%4N(ngCn4bxs@&D8w-+rwIV`an3&%=ENj@h=tK
z^d<}9c4i(<&PLIo>o0LbWDMzC)@)|Gsfsy5Tfx0S2n2Wp^%)2_v;t<UnxA*^@$nh<
z3kwS;2)Jv@NrZhq%gIN$6VJ5To`}J8!TJ9|BEbBpxw+hEeR_2+=xJhRR-scrKQ&cj
zUY$J<j#W><&O|{0acs4B+^xZ^|HOPHMNC$>&#cR0bE&j+Yi)f(`r6JYC31~A(l2ul
zgF-0aa;y3F^5h_+BbPBo%cu>4<t0Rary}kIB{S+|3c1VnOt^i~*2YKv{5f(gk&%DI
zQd!kxHUfv4w^sC<V^+J<bM&j{gIbmLfN?8K9f=F&_mllf9T%Ikm9C9HjVIT;Bkc2b
ztJg(i=-WHhlKKHQ63ID&-oZn0oUjvfBIP{)a)_c~Cl__RP5(=?==L{;c*I*I1FGLs
zQ{SD_;<K}v+~ID{I|ZL#_QwZUUxZS}&S-cE5rtsU3P^j+CNg>u*$r0%%crMnG!s95
zAq<B};Jytnh)7sTELDC`bjiw0OQXfRetY$7S74*$;INrL)k5Xd@AT>^t+d@yp;4rw
z@{tR6C%$>>c&?SxVA9v>u#=xLliw<0<6_gRW!QYY+L7jE^8WKUJvKxzSlGPCqhMJW
zztC!%fia{wp2kTqR3w|?FFm?l2T4N6<3?&fZHW1{zOM?><<-n1k0$P8rCgvKl4)&i
z9T^$%uk8tjbXv#@fLWs5B@Nu{XnSx#1V1=DZLphY%}w&lZ2tLs=C|(8=D?8P4$lX>
zBO~9E)+q|9-0<^_wl3EPy;Y~P<GCjL4K7gQT8*8cLb-amnSlkV+Wy}RdX+<3n&1--
zyu(wwKEn6A6AkGQa)}7(;DfOo66BwkH7r7q2}~~*^IY?%v)$d@$0XsH^rIW<McQ*K
zO?F~rGK0ynv0z!MjaF)<O?|zpB@SDbcEtIKCUE6Q4)^0}h5h2Vu?~n-U&<A1Q)M2@
z%@uMC;o(+0oF10y&10D}7vZ52P%zPF)u!_$oWDDxS;Q^)tKcu~_8fk=NoAX)ru2$>
z&F=5N=r;utV|HlIRanW+GT-tY!E8#qVdUB(>(1b(ke;IEZ)%&s>VG&}8)E7q9l}Jf
zp|ga_NHdWS3JNZ83CBcJ`$*gqa9Om>Rhz|mlTn2FPJ)EcWcxdHZDSEMy(gFQMfX43
z82oaj!PlXSOA(n-CM+xr<BXa?uhnF0TcRL1CNeC{aBDygbLgE}uYL2v>t-LxhHgME
zvDxtzTA^I68sz?ry#y<l!t|;neJkkkI6S^O-rMW{?vorAHUb$ErZ;0=SXAT$?>EHA
zMve|$7%LW%7wh10Kd$w59Fd9>&)wy9RcBFabc(y5`Ri*N=0_#4x=-@*@|gW^8XtOg
ziC~dIt`0vc+C8ZF-i19=A(!f{n-Xo!x^uxHV316PVlz6P?|Z;?jTs=X%f*VLhx&u5
zBzyd!tmn%{!YIF-{-%2Cc}BS$tWQkDd;@I{L_~ahy{3AwhYN*=<a~U2aw2?W)~oZG
z2?kb}G`8wt982>S10&-Xq9_{zm`d2)zeRN$<;O-y;QOBUhP>LhP8vA&su{}SA4%YH
z$xktaT>fFH3)Ol%z6c0oC>O#tE8`Ortc~>!4u5uOaf<Cda}coT8jL3uTq46-49NUC
z#$f|V6F4*?n{phkdL@Rl@Hwr&EumrKbJ=fsrN)sak)|%56GEGLjPU36Rq40=3OoD6
z(l?&Nf8jRk*p7pp5~aiCczvd(3`=c4StZCK-($P52y&E^gchCUF;z>UOe$9$e82Q9
zl?eqcJ6rX|K$jEn-=!W`MIxNuSv$(_HM-p$V<FVmU}}v$rXNq&4~3wRXoKvaQV0nh
z7%qEWpC_}00t8x}Z<5nWwNy<o|8-OEobmjPX$5D+hlM16Ty#Xe+Fu{T@Y3)il9{-$
zFSLBnFd*6_&iEQ1Jq>!d#Bcs^Gb@^@tM3c5v~)N7oM{ipVik4XKsiHQpzj;|_$scr
z*y3~BHCVifD)3h6c7AYHt`_m;S?d)QqheO8*2>y&Lh4cNE$i<K$v2W<%Y|?`TZLK*
zc}Ql|Q1~A5EtwK(#Cox0D`Ual!}Vfs`*1w$H7WDB!DbHKl3><1H>DWoxxsQ8e*pGu
zpcHl)_1lnD$QK<O8{_D9?MCZHt2K|+Lq`-6f$xr43{RxtXw?DLXSYW)?QH+rfp_?&
zi@K5LuV89V(;G7Wm8RRxaF?tT`VF5H6;W=^TN|xIkV)o?bTr(mwVN!@HV?sidM@7L
zhT{69>^52%|B!pEaQ!qhi)FsVdm7JHYyFP*KJe~yw)#_*_MPhObj)t_$1Nce%EQ&2
zjJ!-#=k;1JO`&`GK?9rVSobcwb@auv>jg!$1o_L`D-2K^tv71LI$xeLnk<Ce4h=?%
zW2JT@yu-sDRIwQK5WmnW5N}(q*A0ATws%`?&ipW`onR&poGlGKI4~dr3$j@9S3$E_
zvef~}r}E_4KD$UnV4p3v?3Az;a98N(WM@|uS05a6Igjm6Oy&q?a4%Hbb+p#dT%iOL
z!IgihAIv2SpyGD>*LL~(x7$D8@Er-i4V<Mg>-T0uc4b@;>ho-JRjlNemvdWOeoCQb
zid9Ng!TF^VYfA~V<1Dp{^0>k#k4hld#Ua=ExpEDfW%(ZwAzf!y-*5e1VR+PF1<{w=
z>~k(_97^r`Y&Tjfm9~1z7b<&LBh{*yR19$YuJRyY=v6CNmYmrF@nyZP{3V?BC-&BC
zr(jlGZBru6*Zti^=phy=v?-X~-5Ia>6djjZybplX)<Oa{PgGJHYCKffOA$@%lzwVs
zWtN`3M$Jf@{KPClJQPV3fZ3Y|GG4h?^UJ@uiD@JVdEYYad#|B9Tdl>Aedv9<Ieqpn
zIp=S(*U?$Y6mm}g&+@<=pG6h(-!Of?5|pu;pPyf?7MZJ_xQWE&%-6cv_x8B|H98um
zC=35MHeaF7UULC9f-c~;JC!V-(PXonUr<m`R5`I5N2$H6Eg391np!b$tLwY{=tv#^
zjkataGm)x4p?Z?xA7*&d^YN#WA?8()CS_z~q@Z{m!ix9v18=w78I0j~`V-l{At#MS
z5gR<qv6to1LbPW+IyzdW6|w(OO)=)^KZ$+rMKmtaI9DNC(DT<T%id^8#@3nh&S2D1
zy;l*Fp!*9CS24aqc$(h2zL4+MoABlBy{g87Lk3&Y`!vkIhC}Bm=$z{xAPHR^i}7iT
z`iDfes{{W};Ew+nA<X|Y)XN_E$n1E-C%+H=Dc_x)fksZHNpG$5_4ym*RdIe%rCPo?
z98jF19~Eg;OJc*q;2z%n0HgvSg2<>SN8L7sv%mQq^2%36L2{jH>;))8X>oCW(YITD
zAqWS|kIdTFdt*4~iuukN^Gd={@YtVaWWH#q=r_5X{W{~Xud8zynVp@rP4}F$Qq%A9
zczwD#XmdSx=qFKp$QI=Le#%nv{%NE;m$RIlf*fSC-1{0;QeGaD!_(=!!c|*ai;aza
zqF%k$Zdo5cncqy9MWhvQAQF;wD)1ye>lm$sKidoJd>xQgX=MSDQ2RT}hW%Sn1WrpA
zJ_lCu$gk;X4b~cpi&9HVU+-i%(b&w;!oa{lAbBw9HRBSEEDxIP9>%?mrN~a`y)%Ao
zbtV!vY(D|29JB8D_;>@THk)&3p}X7Q?6|S{SkQXE6oZC_zhx6$3e}g6h~KqLufU^8
z;VT9PMg$f!$kHdCaP7ajfRlaeg{rl7N0pJGi;XtsIeM|)Xoo;LgU}2iW4_P7fPO^4
z_l=MYD9O)^mrkjh4xD`H&+pxy!Q4`)@6|7{ZAd4xFb@~i$l7XU-%GuouF1p|6(`;6
z#@@tw2tYQcYfUI^NMz?Tf{Rz7Unl^mIvyrPQk|v;Y^1)c%ecOwNP<4Qso%fhVG(h8
z+)$%WW-IHhFYLxK;+eCy_ggs(@c2P=TIkSZOMys4T;E6X2M#8)%-IgN0z#b3CVnMw
zGe<{YGg_rhUaxm}vU_{)k7ukjdTLZ)KEc2s;@2471dHW`#Bn84e6i^ZiNfQ?cA*Wl
z-{=S^BEiKYAamc}-{<+2Kr@++WSzlb>u(%LdL4U7@r-<0@A^G9GRMzLME$zB8HUzy
zNFp5bO8=b1QQ+G__E+f)n|W*|Esi1kXcJg?@R9DtC}SSe*jd3IPqCPwiL474dx|#m
zw|po7tX!s^qY=AvI5?xWY0*)E<ZTWZQ-`8;8twLWP68mrD83NWt5r4F415!a;Hj*r
zK-DXEsca;eztW=DuE3QYoSH(#;5|=y$<5!xVmQuPt9M^9qs&;kcS1C)!xEv7A&OaS
z_m&G$AkrdTkJh+Y?>exUt%Zuf*>6N`1Rn{9Fda)0b21(BcV1|*#_0riBEL~X-8jzu
z>SZ>`_l*P77Cneorz~@^gx&oZ(*+TNCO$-*JpS9>Sna1&t_)6l>Wl*JYJKL+E>w89
zA)r6;eBQUcLZ@oZ5jkshjx|u-24$@P*!Z(^PFZpF5Yt{WJN&&jlmybByNf2rv7g>B
z4}BKk6i5i-2=<F5WWJNpg8W(u2@9Y-qz}SD0I+PbSsQhaXIGI1b7?k}OV-v&F?m(E
z-r1u-$MBbjg`#qH3JS;CXUyEF^5%d0`VrE{=7>A@{f|7sR22(bjpSHZd9Koys4}hi
zSkI5C#d&N;VgRL255T=?xxhvFE{1ODxZ12V+CM-(hXJS+c3huS_`E{7aWwtT+8>4F
z)7OIN#n-3n1F32he(X+<we;VnqnFj6YK;+hH|9Xz{E-TWM;41Of);WXaEGS#uVxGO
zi(mm{z`lYKHdI94=PD`cr<_(g7n<k@R0}&gpILycB<3(tdPY7&!>thjtGCJV$#<L?
zM`ZUOu8t`msFbbHYJ?u5hGpk8uDv_ksFs~8;~A>$>=c3y()0GXx#)d?&q4UZ%iow`
zK*Q_FddU!+RIX7i3$54r-F=-<m=Kdzor96nwk%|2jo;ONqc!S_rGKBe3yP$R*L?L?
z;Q{x$pUK$s5df59=mniECs!*O*3FnS3qT_iFSf{;2U?d{le*)2IAm<}x@%PHMn#5-
z^LV+}X!9z5)8_I00-#FIyCbS3(Or7qH+!uT-J);R>m6=uVDuW}H>o}y&sCblKWL>~
zJ_q&&^!w56iFw?ghpiyq-Z@6r`P&kPqiX#yalCOj7(*)9Jz1!xi6rvfdU3ZWvDaKE
zRL-|IFi3mXVY_6|3xsgy<P;a0TRStj1h2@R`Tg7L)y!D5!{?0eR^$nOZ|OD4mcS4`
zB+PM;W3p657kJXU-4P7J%>WQtwZWH*7-FG*!H*?Cn~e}IN;N$_-Lva)GZ<A{FnGGu
zvNAV;l@7NBV73ckhwgE_buk!Z5&0+rdm1grcY*S+B~wk`uq*f}DEivnuP-k~^>e}G
zgk?wUd)g-*9TTYefQ|#+3J#-Kwe(v)vQeT2!xS0X)FsGf)rQ++HQ*Tqn^9}rZ0eqf
z-#~kU<_dOab;)U3qce@3^!#RT(sk#L^SOC$ak&miS8F^s0-NFXI`d1Fm-|9#)v0nc
ze}Tb<hSKa>tE*T!EIi_Mx=_LQqu(lT({UDVf3^q5yI*bQQx-r_Fn&2f^0XO?inZ;c
zMyJay2sr>%Qiq+LmgN38Wk?7K;G<oRyr>hd&0xVc*MhvdVq!s$z$+N|$N@M(cyJ=`
zz3`949iDe2i@rO5kcMg1^W{>Q16D;;{CK@Cr^u9PIaoMKbQ|H<**xb@c{}S*W=jLI
ze=#8u^ECr})>}kM?i8ufX6s(RHU{U1>H6;@zXuSo8!hJQzCPbG5W<fPFD?#@nBEM^
zCw!&3sb=BkHns)3C{r)+h{B&M_WaC`>Sf^n3dx0<=lJJWmiNQ?+LiGs)7N%HVS4}}
z^7=p0KTfaZa&d8KTC4-K)SH~ZpKRM1YM|gfy*#ngaEaa?&fRSK1;AZh;j*b$!S~yq
zmZmpa8DX(`4c8PFQjRRLklvrKJkL+)cuDKp5JF<Nt^)hSVYyQ30f$-d()fHkC?Ybl
zZ~{f0s?y+-2ilD&OV3YgYJj)9KUurDDv;t4^xQ{Ox5?nP@pyj|w2_F|X9jpCT$*oc
zZbnaP1!hqI@3MutL;CZ5c2@OspQhX0;hNLNx;KNUGg1^Dd&eaoq9g;Pn6iy7Lm_T7
zy($9=UW4<EdQZQB!MC*SZ%5ly6b1GXEhE1Ygxh^{;^MBZc7_W3DI-C3iiX4IOKl6E
zYmo@y8^07tk_dSjq#zRsH2Yo%g<=sJ$7XGv4G25G{<%~0D|c`>_(k-wP~j`zWDb9f
zO7vHLmtaEVo}Ng{2bYT#l_tBjP-8R)EiS9o!@)ZOSo_&#$ICYZLIJl+u=k<C!J?l<
zJ!^f$8cH>ejyX%VK)*0N|Jfgp{&?2)*^;GETvB`!j8mxjJs03>wjbBmJT*`Amp;Mh
zM|CdOTcgaAvO<U;ee?-3Sfir!8n`9(bOJz5LPGq@{-X%2QExr1TAA3;y@S|T#LLo5
zan`bHe<3}e&po2r4-h=N`DN#8$xM^|`miVJ86@B4RF7B<&4`|alo-yADx@f6n)k~i
zYxJ~_!L$~Oy@;+Zp>Kd}))&1Ejo2T4V$e?$cg6&T0)jsa)JVZAj^N3wZ4r<^@Pc_G
z^~EJ35Mu?Vqqht5@}_aFCGIA2+pk|%eyxG)@OnZo258yOa_>$0gh&V^Y&NivBy3Pu
zezGPVr5oLEhs;uaG26IY7h4pP-F!jdJp<EtP)r%<k;EUnT`$(R9)YA)W7Hd+ot-RX
zu-PqhpOC8K@H54AvyAk8;O#W78_N%O)B)@(LfaaMQO9thzk9Lts}!gWa}R8d;+aYH
zp(3sR_sq=nCcz4q-C_w^-AtLhb>x}cK%B8#ZB5PLY!Sxa+5yn~xbiiS{rIpE1QjeS
z4t<6(m&!%5WG2Ixd8b^~*47p5ES&{XTg0J=sWL{w-m;U!7IUqf^UC&ma+B~ZJk^Mr
zVTM5)4&hrn0QaY)dU&rH*l4@qvX<_Q+qR_E!wYf46z`WO^{xM4dVadcrXLfXX1&R8
zy7+tAZ`}5&CPPxgEm~UI=D^$fmX}{=D@xL*=;uA!NHgsGS^K<5Lpzc&dowRbGc?WY
zqsfc`67CPgYiV|<kn@dFF~s`q4z<=z_L7)|NW@XlNCXDXp}fH)id23@kV0`qW<OIK
z_*~AvpB_$^&6RnNdD`d#72HrRgb~SFc0CrkN+xwa7D^^Y5_D<Ci`m=J=E|BXN(s<r
zQB65D<Gy&hQ6Ec6hNXMVx3Iq`)d1ZK9;ey&Y=Qlny6*g39z0f7*7fWS+ZYGuceD2&
zVF(G>?SVCW-QNPx-kaU-O`Yhx;IWgFEplqoFDIjG2{IVw564l)P%HR{dt?+647dV}
zKI-K+`@M1Z1O~$!ayZ5d@&}1w)I}0yq-BV_)fq1~2>HAOLh$?o%3U9gPKlBsC3>Z*
zhQ{u0Z$qIQJEzx2a+RfasJav-90D%;+tlM|{4G`Ra{QmMJhj63mSU<b&DY!|vv_-V
z-Y#@Hv$)&<qXjSsdX*lWZ&CAHTsD#+mPi+-e(iD^dMnt3kedf(Kc`@t9Q%G=PO-dU
z+WR3KE!G+<)59QA4^o%Wvh1}9CtekV#2n98ha?)5LZ}7iOOA>7ws_p(x53a;`P>D~
zB^n6Spt1)++O4<4)vH`>Qz>oMJc6udMnR>FH1kU=!&vls0-T&s#fmush7ZEc@3BiS
zvf4Vr-q(rmZ&8U<*#{Dz5eJ=Iyx!klMT5k#DJt|*+l>uM$l}CbICsS<4Y@=&^coD%
zqBq*zCsu5}--%PaJvVK%(yyWdy?EbffHU1V(}>JSSeOjYz-KrJe)XsLX)fFK@u?}W
z2nioAlhgHD>$5>;fGyBzuyTCbroz?6q(M1x{+z}l2YX)8PtHS2`_y(yNp*5`bYyX|
z$-~K*grX=XxA!1Z7`_nn!WyjV^C2`Us#2-;0|OtbPNo}4H~IU3174<p&-GqJ3a)E>
zmoE{@3#Opw9ln5pQU~-MRiB}xKek^-o=cXtW-bMKDGb?LK6wEkw?y7?=&IhkV7SLY
z!pO$x2}Vm14?RX0A``QYn8*=ZN8FTCZU|;14~Fl(wA{>mo=~bxqSqK?rT*Guj)lXp
z3Y(seKg<?LZH55F4o_1>3wqg;c}X8eX4!$Rg7ZJ^^g2TSUd&_0IdW_KtGj)DaXxt=
z>telE_)(3G%iS4<o?^DU9qNX4!o<wP%F4UkBN?HyXD1tIvFnXFt~IJViEv(qdIDQ8
zh@<3in1RxWLk%ts9>y^Wb*>t^4}hM$g<-v*6pT*d&l;KG((|x1>S<m@4rQ*A?%p|B
zqu7nni~3=r`?dxwPCn=lqzbFWkH2@Q()~e<2;VC=KLi}~JWxUR!M#W=m?VPl8pn}K
z#G-M0QGiRlctaefSTr_Jwpwh?O9-G4<=_;rq!(n2Qc33sJ5TfDw2*{eP0wsz)$8&I
zLUn<oLgY_KZoa!-8X5g##w&JKEYq&arXcg1YD`2_kU%z78!0N1$Ny1hI80g;CcsJj
zo*)m`m8I=su{Pks0GDkMHzd!cza-9BGWvYB1!M3J)|kd4^Fx>O377CePZq1;wp+1`
zg0jB$e*a0K^|XdglkH5UXOkAYHw%$jMmx*{$@i0Kd1XqG&kc4nX1g_L%-KVjOv<=r
zq3(YS9O#s4!1i(7tZKsP)LL(!>JKzWD=Te#Mf;X^isVwZZ<NatC(2WlwDV<fisi7G
zKp8wfzuH@jrJ_Xc<q|*o4LA<D5DB&8v~+J~eAKQeG2qL}%$l##y1B{;^MhHA8<9$#
z05Anfvr*A$JwNCywaMab42PKoUd}G{aJ`;Cxp&Jj-vnR<Y*(rnec|TW-f*?tZZFA-
zIo$4B7LR_2{s>4)6J#lrloapXQE!n=q9FU$#Z}a7VAv4C2oK}XZRoPp>MoZ~Hv@qZ
z59sIu9{nF(mVxelB)EZ3de=M<&1fln?_}O<MY+}U;QV2mmw4+EXY-TD8d>n2^@5?%
z;CPeM1rv7YJc4lO?!vXZDfCFQWnUA~=<>35O~O{LadC7i=D}n5{aPQdYyQXo<^mG8
z1(vja*2+PA<uuw2bu=DiRm^8d&GBkC`&I_=tiRswo>qYEJ=)(7Nl)TJ3-h;DFJMH_
zEae9eU`jyRPPi&}`ufe#C<YP3nGU@$eS@;q!FHF#fr4bvVIp`$U89t{<?I8<{!71^
z4uNUgl((JMc=4z6$sczXmo;Qq^lJTXy{bg;@a4IHW|@thp<PQHaD+B!2Gv#T503Op
z1=K_GCQ`8hG`f(k1U%ly9Qu_NfsXYCl+Ct}p@y2}HOL=%bxp<qV6>_8V-2km4bE-_
zgap)E1mT+@${Yb7|Cke14b8{_e)_c!8WApR;hpEKW99?bKRjJ8YWZ2)0Bp8w4nldy
zN&-YX!@+@8d6xaN6;MpjfDkX9Q<(|Re($ug)Y!W4$`DS(MO=ZDA?gr3+}Jj&@laq`
z$Qr=S8udFm=Y*>oW~Ux+LBD?)zrodo=Or|{FhH4sMHlus#kD0mqknfJx!#+MS==-a
z6#sGYBWe~gk{^(6S(-`d6m0f;3{*QjoDs1(t>yy}B;|*7f8>=}Tp2yzpC%xRTZ(6f
z+R(k_W2|ceB>haWA}^VNV~>rX`*9-C3P>(E!X-+zG?JkYlG9??U_^t0Dpi~G^wKxO
z#dZmqOhMqgRj7#nT(kX<)rKzxN&yX9^l1z}JG>n-CMkjx?=1;SuGL(bX0y{ZP<q{H
z^g_sp$>Dt95vNisy$^md<!vuCi+53)ScYkIFG9>9m{BJ`Tw%~u=wgK?8t-@0D?P)D
zr*60QB?g2+M#ZA=dS7$Qvg;L>mq#2qO#I>Wue{oLG~U_F4iFH<TMl!bt~=b4@DGyt
z9ozTGWuGy%$?z5WQ8zqPWOCaFU5Q=gr$Q}iz&V)jM?e%1F;850zydQoJ3Q5F&}6+O
z`o3%Y1ueX5{bRN57y+aYJj?fqo12V77PM^L2IWQRU}O?#W<v|<lFe6H7hhrveU7r0
zn^#J2-w<SCQQz9SI`oI;X=H_jR4{*trqZb<(pm-+2yMR)P?<DsnY_;UNYH15@Z+YV
zCZL;+jUR6zeWHu43b8s(c0OS-A;vh3N(~m%fE4&mHoy@PPrt(li4Guml%QW5;IDA5
z*d@^altmP<BeFlEK!!*J;?Qb;Pha6c#MTp9cRgSAyAr$JmnYydRJ}_-nz$$I{^B1L
z+MZgi+v#tKRUf4479@)W<qMCE-#gP+FVgqN6Xi7EH1$}>c`v;CD}NUrSi8BKVg52k
zI}S-C?5~8(B|G_d2|2s9R;&iIxwwM7MyrKy*}MH0R=o}h3*^jfP&vrx^>i%K*UqUd
zx|zCG3sq6I1nh#JDRAo*GI@E8W<xh$d$dINKO`ot?3OCGiL)Y&XLGJB4e$zFAKrgm
zVf{jcVZV+E860k{QEkY`gvYaC?^AC!5xZv!K86fU66<xhtY-ZOh46<QF1H2)!X`<7
zqSNuJr58)B){17mF``TSbQQcdQXf`bj6~&-s_Xh6=e=vw&=_{}U(&YSDWW1hy?cQR
zWM+?q)7m^&cEpJ$J)&ja{QH1;MU%sR9R%fMTWd7Htlv6*-Ral|&CmmIlz~JD_Diiv
z#Y5kr;y!A*3NTA-*r&tq9M<lj@!y|%y*!T4)sDy#TXdsBhKQnE@YlQ_Ct0NGY2FS*
z;FPNsgHG2SKHGd;uXWi$<$X37-St5Ss55@g{nPt3{(GX;n32V`xu~whfL|XMA9#Zp
z^qQq_A;?eErLy>h3@*EAnG&$xNh{kyjP|IHT96kA>os-|h}y#%ZsKmw(Pu+3MDL%X
zeO2bD`@;n7G;yV?+LE7{BRapC?v*9E71*liU@}1R4a#uDv!QQ{AGiZJ=yyOZGM54e
z-J5w-jk<}>b%6r$#Z)cCHrnkXTW<MJ1s6uZ4<P**msAeHJ&Fi|@0J4uoy8g#!QE*9
z_Zgz>!*1JyccNIIn+F7OwsPpazF1w7Lv_K0;o)F_MKaZiVd<!jMB{ItHMGWu<?Qa3
z6c?ZDoD~#T!@vl41?Yg+L>mZBbRH!@#GXz%<~Y6Rq|``nIgT*cFSoh_D8J_L6XxL1
zkU77@&F0&bv0>JVtAAS0@UXNMeqWu>!y8b|3|l9-=$8D|9L#@RGkrTR2@CctbtqJk
z(vVuOqNV+&<jTU*y;NLSfGQC#y6M`*_APTS6Wp5ovlfuA17O9Z9{=3YKO`tMUhJ4P
z(C^9VfNY(*%5M!`C1&F9V#e~7F^=cjaCV<-dc=x)<7mAhAVw}2;mzue52CZ$T=4iD
zLX&Zq;-!pOpy}Rm&<yrp(l6DDt^@Z<WgF>W0#NFTry536n7Pe%aidAU33u(Hh|085
z`f!HxJDnD5-bYz$?J}03=CzaQx!fngV9)caOK0*dt)hTMB(}@(zMZh9CKqM{NTJ|n
zh1)*qi*#nMe^N)n7}_<WcBv81-mu78=`E6158Y$6&x_z!#D^Q;K`3_Ul0XJ4Z-PZM
z7a9^KU+Um`MCME7iUFd})6)Y$!aoa_leTSshHV9+7bsV2d}AboW8?SQ4V|}L?grVa
zjQ;$VG@3ml@Ru%`+Vn+CiIvjU{!?G92<4kc*#s8m@bGJGQ8TF#rvYso5%<|-XycgE
z+Uw7w<+Oj$=n2X;3i!-fThqm(pnt!we^{wZ5}g{C?c#TZm#pASa3siwl6EAME*J(L
zlvCl{pH;z2yKfzyV=0U&FA`w>!*eg_t_1&_apHCd=60*p|2%Gw*8lq+xBsa?^nccQ
z_y6dwE_Ed0K_HhfbgG7i21*EejZ)nXNoOcUOG|6#lXZDT{TLPGfd|*a*=fKf*0U33
zYg;Lsyo>3NyX<;8Rpv~uAOVj>ml#m|<^)JhN`-@igR3Mzii%7Dy7-?x@^RpWI!+Z3
zQU>Hw0s~33+HFRFga+uYjWsm}De0W{>#g$EP?N_;$Gq|`TwKa7!RijedVHqGiL;5S
zP%#fj3&q-ZR+*y7)rg<c0ecG%RxPb5yV0$*i;b=ET7^6NIZF5H>dWbX(|y9}-Wph3
zAo;|zV$y39CZqbe-L~65@zaO3ON>&jLe&vyGR-G50d4r}5QvDc@#2w_jLhPU4mY`Z
zLoTUI?R>2*B{g;U6$~I;eh7}Q%`v*^vphhkR;oL9=lZRZe2P$K-01LJDAZC3CHs#R
z^KWDkctRxMR@<?8fX2%l^a;Pq+Vdno7MHQMF6G~va?CkL^Lp$~Ceo3LA*!r;v%iMN
zp+zjhB6gp(?-8J<r^hZSDA?KLv3$?ljIE&n6dyz+B&^~>fJX=D>?C;Ly^2%19i6{=
zYB$)Bxx*!A10o4p%fe@7vp;pVMg*w1KLXTF)Z5&fw@87E>U8i7I17h%3I-$1_zF}G
z6o_X8AKgx=7XczvlWiZZKoXHi2oZ0o(Use&d#>!O^;xhp+7N|CwGM>V$gAXXgDv~Y
z5H}T7k@B9bmjU1w@b>bKWiAAG7PgHKH+y3KhVDkiAKxqaK|P;CcdFLf>{eP{0fFX6
zH&%Psx4p7Y&CCaknJ5(GRv@>qZ3e<34x9eVi4`sqWTdNX&YAxHz@P%~Tve1nLfv{p
z#?e?sM8Y~bh-9+sC7*iv&u_5RB!4|s3pf1Y=+x8nDb>=!g+)IZQ@P&(QYYRIP(14Q
zAGNi$6`V3aMp~b4uo)#|i2C%M0fLg{@kbwI2=Ka=ZuSpPPAD7>FY`F97jExwuN`ha
zYL?^%6a;K1s+OwnS$%I%-PCMzjKb$m=XPCZu+IV5NE~{-$e_NX{rxSU!%Z@CDVjoC
z&;}tOmYbOLyaY8LA8obRo$(Ql-)5yHCz}Zy8g>8PLxs0pX_Uy#i;F9C8U=LA+1s`#
zr5aH({%XCBbiRQ*0B|e8-QX}THX54)OshhcK#RfjheMR}Ca`i%KYu7d3w2|7(L4d!
zYLW(0V8+MQ)<z_Z?MG!$w<(xy*>7~pf0nhGDgoyYs$pm0aC_V|1bi`P)RFo`4OYF)
zSN7}eX<ZINZQ!hcYAdumWr(|eeJ~l5Z?@GZiFh(qDmFDrio)#*Tj0L^oEO&N)jn~v
z>zKjj444IX&S*I5Y$GpUpst^PrM*5*?_3!VN$I!ned*MR{j1CSkf*OQ4-PNF?uQh|
z<kYB0qXNcKmzUckmGSDAtfH|*CjC4w099^x_3zvQ93uiYvo2nZ|JSt^Z}Z_TRKoF8
z7yE}!LFeQ7Fdpn$?~{7~$FV;wff!dLqwz~gsZhy*zNO3MF5QHbdf!g4Ro>+ruj@Ub
z0sv}0v|+Z*Hu-kR6L1qPGV|SKp1W^e_5cdrmSb`XAkFsO`a?XF5|apfNh>OLd7rpM
zX>$UJ3-RlKDa<UifG%M9d$?FT==bTa7_TT9{<!M_sK_BG#J`4zH+>LLC28`b0sliZ
z@z+jrux%`KY+gpouXQSI(SQAkf@x`KolfTU&wXNj_?&j*x>2YpQhm|e$CVjPtuCj4
z0X(GJ^iA%II%?Z6sY1X53<<vnB8--n*3G~+N;<kJ!qWHsTf9JFk4KBCSdp3!*tE)!
z)D8Ex%T!d<jtf;fn!9Jy_58o*Tjfv8C$kwdyTDjKY2whSmYAL-|Ho!w<kKSUkKDcb
zv!HxTfnK#_s?DB6!Nz#8%`>J@nog~37Qmxvq93^JR|5qLG_STv*1Lv|=E^r#O=>9D
z+B|Voc*K7L#8{bnxpu8`k%0R(;AK+2T9~KPsJy-%NtnzLmV?Ho)fU&$c?PVar<iDi
z{rxq7qH=63#Pv4R0ug1ZQkIxF_`$KZ_6~oR`D<%KSSg%<c(G#kw(7xoRvQo?Bmr$d
zlf76`zw<j@(BP}b=Dq)&^;PeH1GP`|bL0p6saz2gaY})_5(I!m4C{s2GTgdM1eh=p
z3NDL9hu`9HcT8kt;Mk?umD+$skHvmn0CubEYbcvJ@NtEw=H?{iEv+oKuF9u3wgVeP
zKk(EJph1f^GidQJxPMlpU@al-{1l7(&%fSpznKz2nM!5w1t38m0so={JUs$?L&Z|f
z{mzhL{1Ukb%YSnLu2v@&eS_UOy&y7Wjdz=K1^L$pWh-s`mD{sTo>Hv{GZwCPudD0P
zy)k(#AFT?jIlAfT-vsdujm`$JJ#Ca2<0M^fSKF^EuBUEln`O@r=Q4uGFuI=%z$iD<
zREmwWhrAvy$>hoDvTeA<#bl9*IQl`B3D8K#eGibHBjRmgu>q^h(4vskgrJsi@EBZi
z^l*(jCd#qhi4*P`pPnvk0s;iv?|?J{nZH}yst9N~r+_fG-swJ*Ki5URub;3eOeZBL
zhhfTOO*ex@Z`s)$BSnmY1Sc^ahLJ!Qm#VMF@Yjvn^9mgYsUV(pxL)uK*qz*s!N%cg
z2pAvqsohszJy9eh3Bi|oewu@x9;OSVY|aDO&!6heGc_H$yTJ@0>!l8=vc6{O{)!MZ
z1xywd%9UmQCaR^{&OpDc><2ifMan8{E4CPR`foV8XlVb)-Ui(qZ0#EtyH!^>!@P-D
zTW4@F>h#G6&(!UWT3J|ZlG4)F0%G=ytve%wTX`hqG5-5GTmU6JKYBO{p<3Jhd6jC*
z^<UG7KBAW`(9=Htd90g>r;@8$Yewc`Z|)9`!5v(Hg4e$;WpP`zA?Q1XE=NZ=`rSAN
ztV4)o#)E#H(=#kP<bWtT3PA`*Hi+zGP;zDES*c1fv49&Y4ndRin7Z^w7aDpe%AcQ?
z*j{#&!^nW#7OLNWvDo}qn*E#!AXq>x*U->l*63V~H<e=%(Q9>+xds7FnQjor$P!ut
z$BXW-gsd&4ol4riV3YtZHWn6KPP4?kxUB&M9K*M;n3xc6Sf`exB&?h55eOebHz&$9
zNyJ6zXemkF79NqAZXIsGiJ%7;M2L*XXQK)D7xO%==Bk`e-Ncu^?G+M-a6&nG0o{j#
zVn8s`W}fjDO9?5$L^`+FaxM*>Mkzx^Ax%sUHnSd~HtHncKt_V&@BN+^R1_5ab1(vj
zb(L9CN~+kh{-=^a+B;a<hid&B><Rm|)+Z{V_343;#l>ce>3rkCs3b3z?Zetu=acOv
zfS1Sqkb(!9pBINV8oQCjh_V<P9T=E99)U^g|475P7=tUw#!HLGcPICP15+$RZRF+U
z{enH-_xdF+j?-%PaJ7gXT^A4(tJYc_|5>0<o`}egc7|faV2~Jfn=d;do}+VwYOT(!
z7SUIAi)GiKQxXdLD6LQ8VMLMbR$Ji|C$8_es;l4;0h_*$rnp<ePx+rM?wfQU4t`}v
z(6V2f%mM=nKn|}aMM|R6@VL943wa<hVeW~(-jjO){22i##6N0}*VpWY8X=woTrZaQ
z_+9VA*lF@Ev6(d~@0<lLPmkE8KW*^V$5jJ<{Xjx^!!7Qrjm1ve=Ucq&FU8TWr;B8C
z<jVIQ(;8K}JidkinUngam?Z#LTj$cZd^ud;&_pJ4Y310JDj7vk^s^8!D`>IBdJi$u
zvRWRSEC9Z%5TKcD;d1~IXZ%BVFeL9C=hjJr?>zxjC89q#!>z^PuQh%$zIyM*4PD^|
zKfs|y@dhOC&yLuZDjZ-mo<nS=vIXFztHX<_oM3Jb`;Whf*}N?J!=$B4y0Pg0(>mXk
zXpOySPFMF0FMjmxd;u)e2EwV7D1w55ZtlNLxgNToKJ*35{<4NlPfhoVey(sUzDad7
z1}wwgl&UGWa(8!|5a_GWkSC$rkA_UY=VtbrGT#ZRDvJsVGEhk-M_|k-QynySS?b9G
zPWg>|VN2LT$=2VCa8rGOd8Wj7J>qNRcj_BeS@PxEtbq|O^nPZw=l^`|$4c@eVUxYG
z?oIFKq^EB}|3DQa0O$mtE(Sm8zXR^#0c?hUPCwY}cO1F@8Y_~0iH=(N8$krM1^It_
z{3v&%R2s0n^KQqOXvUQhlI6^?PXDc-SH9yn2a{^8ISl_j;53y(^>^39`lJ5%zmEO?
z0D9$)yn^v9TLu5I^56sN(7)=B+D{^?4V{u0kM+(;&&e1uM$3yM<NkRr>Td4e&<1I!
zFk-5G!|fcY>UO8ufX}bpZ{o;nwof;)qW^}twiSnFKTZ4=2(hA}i2<e_a0vcufNjV)
zx7^Gu9;2t=njN^PiP*otljDGU#)Fbak0ngwOr+uejfRD;2FLl0evsUYTG_SuYg2_K
zUx<SMFQ}8ww|~a?`}yKdhW&ozkt9(5*Gv8X(!Tllg@cpR`=FAGgKf|;W?d|!@pKq1
z@HjO!HHlH9MWg^5u*x2Ut_DO`RmmS+b6RsBuUo?c1UgRos(nwNwM^e2BVd%IgqWM1
zZ3UGl#a;$cd}9Y%m1;df*No1~`^rP=iDktczGMnmwHgrZ!R~R!0{KQ8clGwRkOZ;d
zFj@=vq4p4MJ)K(B)BeQRBeUbf#riJn_J!yKAWam($YRcJs=|;Ty{>4`Cr|8)g<~}#
zYx~BE|JE1l5tU#y5_0zfH2*LP*rMr~85C{b;Yrug#={%JxboCChqa{{wC4w#U*qGO
zu;kpAyGd5IcidX>m@~dpJhntx%sIxMw|H-yWI`{)>y;Vm<b=eTMSg9BgZE)kuc0%*
zjU(X;Io`%9D9_Zy=qu&*4p53^QX{@xzD<nt(#HftEmX|a==GURW(%y=+TNulNI7DW
z3I0KJa>O0CBWCxp>U;?jSR1S@`K_!huy*!X5}s0XmD$MP@T7ZhbLIhB^F*e#Q#<y!
z4Vv@2(eLnz?gke-ZQy8JfMhg?`RtP6$@$0YaBGc+NqN@lvL-C4e9q_ka6Ou_oJo&|
zHsgoF*XN`fx(<tV4yY%IUgYzY@T*XavA8s+4=D_n?H+rXCRI>35j-i7r=QNVg+2Sj
zDqY{`U90qX-){~UOK0{`NEQL_-SV%ynV|=MP*r>i7vahAF@WicB+r76EG-Wv#jCV=
zQMf48Ef{P+BDq_Np|Nu7TFH*Ku*dN?RYt#Grw#BLRmiP*$ai{0BOt6bnGf+n&X>&P
zYHXlcK<rSr65yq6zJa}K$;gB;(5Z?noCnAzm0sRn1<d&&*y(jqra_lp$5r6VGgk86
zEabw2Y~go1VJuJ9TnkM*KPYAkbhn+awJ<GJZ5s(^g(5E1I{{c_&GUhT_G$BNE#v-t
zIXBk?lY^$276v)%hxYsecf0$}wSUWb&W_NCXHYw$5s~l1eWO^<3R-s8r>!M~`AEW9
zGEUB*=lwsYCMG74A9P!6kP$G09`J%wwD;-VZvL3Q2eAwJxY20+I6lU&n%VEk$7twP
zWC_Z23!1Ut#HBxB`>33We6m4JvD4-#RU?PZXvS$%Sg>|Ttd*7qORL)uxKQ!qs=$N8
z?)U!hfds%)e6-~1b~=OtU?yE2*GxgRX6dUmr}xSVxdTO}ue+7G8Pe*mlR|yvs^#o`
zeN0rmT6(Y75@p5qs5KtU1l*XBD1V@X#iV!=%ayQTc<wSd_vWMMmGLwLe!%_|Uzesz
zn`w8ynYh{DadBJduZFV#tKYB07s_Q!Pm}E+UL&kx9f3qST7idtYrV^GITAv>Z|8Td
zI$I?Ces&C{An-ZL>9Siy-3;4f>73{!TgaXCiNT7dTH+1n!M@F%X?AL=*=uVy4}#yV
zF))!GM?gCC-H5x6pI>qTWII1E5JRPXQHFK1-sL&rEgX1_rBSLZ?~awHTvfoFlSCA<
z=gje@a2o;f3?f|ZijtV?cu-1=cPB>3BwlQDeu!>deaJ=KblO!sm~?4#JR_&^UEDQn
z9FI26781g3KYLmF=t8H-ER7gm@^wgWaPVi7ot{XwxbmI^xxF2fG-G&!$q3uUdgpqF
z(^{NZ{*Xo$QnD>siEfYMCpv_Ry!4ENyYvpD=l$-4p}yuWe_<oV_*wv_sAr8Om$UWR
zt|lXacRWYgtmM)3a?WzXV>6WHktu&GfgT4&AyiTn>Wd`&YWh6Q6zYdy<S`x$9Hg3q
zO#QwX({#Dt7}fQ~j-@DwVQ3~XL^*u*_8vz)U4q9dFTm2)#@;L_Td3j1ry_AbIEO&Z
z>&ynHu~SniX5?`uANRg4=`XBiH)E87+3e>s$53H^ixY5XL_(4%2=McZOR)#r4b2!E
zb~4XjHD~AzrA-2Jod2x3p%SZ4iMYelw$Wos9ZYj?B?EaAv30Z)(sW0_W&V)Jq*E##
zhYt8}fI&$E?d=>+_DO3SqcT$4!!#9veIQ3P8bq&LQwhyk%{Muv4&rEofUPX({hb6W
zFf31U0-A{L&Tz}24wK&O?BuN7^0iLrRjScyCJ6(DzDQOBmu1l|sEc`@tZ-?4DPv9l
zr>?2%q(lmHb~c;kVU%^sK7(d}qlySVW%*C3>O3s^1@TbTW!aR{!^7=*r)MkkXOS3^
z^}9PAsJw2OhVr$Q1w=x&POkwgB?2A^xLmzt=KG$jt6|gus)Afz=Ofk<nVWmm+*Fh)
zRYIC)Ql(2Qc(%}Gzi5*!i~D@&f}g=V$XU-WXRL00+V3qw36*k5IfonpYXS4oXfDsm
zYT0%!y6V^r;HN%9Z;topsWA)HTI9?@7Q8pF+#+!dw>O&g-@w<0M@Sc`SaWe`&D21;
zrY?%F&=UYHd3R?mFdH8w|1@vg_LYa=ZclEN<AMqaztP|!HGN-1tJbaRE3ds-wmkP%
z`3gv@&8{Pu;p-t(P+_jm6S<m(%E1s4)J{P8kbrbwqaQ*X@#imm%dK^I8cI9Y%H;Ni
z@#D1Abc7UHJoCSQV`H^7Z>t{PIeF>EUVFOQ3HbgAO`^k8Zn;+bsi5!hc6v1uEk?S`
zQh~*&9-kDD{1f{;?PLcSd0_WwFIP1~z@p7gP7YVU+I*82STyf0`LaWOqamlAf~3m@
z6LYZ)g1*jzayjG0C8<z0YhJOmvT}c7GFPcH7@#eIP5Q>jgN)$9L1Bz>!Al>n63^0m
zvC`q#kBd_X^Tqjsvrw)H9QAYa+1W`-b5uf}n`1@?|3ba;0NCAY>VI<qkJaTAqbdG9
zej#($bwTUw#Vca|pRX>BP06eEtQHz2aI(2q=Im5m8=|%fGBL%04LdhIowe6={A;2-
z8UqIMVr6^tbOJNm00E5<#-#p7|7MYrv{Hy~l<4*wsvP?8=&1OeL9OTWyc(j{*H$C}
zFN2U>Bnx<pb4^27A>^3HKA0xnTBbO}Aqs*8rh%SUPwwf6DWMwly=tS+nVTQAquJ&A
z+|X_soSMKb{COnJOEkLhJ~N!6BjU!c)G+Qm_H^i+fCAMk^-?Oup)4&{=y-Y2BAgr8
z8?NKIOj$6b{}5u4GIzz^{G{G@+~#ax@PCRDa4C^*JGTM<QY})?UL0LiNNKF*XNY5q
zAAnX2sia!-aC>GrhKNEU+=-ysh;w3GVV(4u0Gd`^N`ooKu!HCoe#UT8;f|Gad$xP3
zS*7VMkIa+jYSd@?#Zr@^&b3mr-uG!cEi}(*;SFsI#^6fyv7?Q98$$>nynLVcO+l8Q
z{;=}(9g=6%988i>=%2==rqbB*-+t8V{c}~|xhi}HPZB9B%{~s@990>UBj|p4e@3rh
zv+zZU4L)5(b9lY4hd&qH0hkLwr8ZD7Y5eo?8D6H4Ej1N&vI1ZE_DJ}*ZyXN0^!UAt
zb{8ihJNSA~5%2fotI$4J-`mamA7ncd<JVq)Zv6y<Msj86mhX4|u+%3Qz~||+?lJ2K
zU{sc9!nOSJSYirG4*unj9jYF#5(*GD{Jd9?aDGBYN}gt9Z<kwVm(#zB6#|`%kT7u`
z!Uiy&j{@@IZg(jc<w?!YP6byprP@92bRA#mB(1!D<d&)z5dT!vq;{Y)71;Trv;(i4
z?^dWBdEG%gidf770kGP2%1}gYxBU36IcbtC6<S(Jb~By)pJRCB<>ZW;@^*=I3ugkt
z`)-B5Il!11wz|FTUaNV!*nN${7k?kP{GdYB3Mwr81cAXRTzd{YC33pyoRxE)#-dtj
zc!CC6**-o-`z8;=%Jg!>MO<7qvPi(_fF{~IRkU*zej|Q9v%&6GzdCD=HVX?|tM3Cf
zJ=3~+;dsr6+x4T+=$YyG3>n4g&2DX=nx0;Vfg?|$K0TKi;FJQ_RuZAi%xvMLV24nb
zF&p%Bdv_U|&l=Mx32uS~p#sGV+ZoAOBj%}EPe2U1r7Kieg3_>eXANA_u~%q>;R&%q
zs9d$0y>9|}@YDJ8+D3Q_+5Lc5#Qh+aCNovF%L(u9(atll<o1vVz^K(1edN_s3-TH)
z7k1os<7CyW>f~6GZf4+U?(Ga3`^A-mWanr;Uz==c;)%UEZO@_D{RqnlTH&&N*nDGj
zv9YrHwSfXhLXTGI|6<gMC$tQAlBeY(qNST0|0L)xFl(0&bE<P#g3F_c5bgf<I5(E+
zLgaC_(lOFKRb$XYUePx!M}R$)datPgQ=@HsTT7?4zb|Y*&SmQmi$rXPVr)~&hIQ}@
zy^@Dj+i?4c`*20lKJvR8g3g37r4c-w0k(|n3p~yN(9O>mjoNMy_78=jX<cK%|Na5B
z+Nu_zL{T>Z6DRhO!)CVbQ(nG<0+~!Z6=F7NbFzV7Nd1M0>PMQu?f5TKnW+8)MnSTi
zN}QK0*PU=s!)B;6VDOjSos}g*m<(-5^*Ar2Ao*q0D&+`YY-&_hz6x=#Br+Ahv4czQ
zhLfp!3rFiVw6#<kRXuq9cDL}SYULztoXMO`Rm$tbo;YKgz7c;jrQfZHk#(8F97W!*
z%M$A$$od44kg1t0aoy6;!WHd{kZm$c*J}7&cATC+*@F}9mlE~6!sGBsHl;o8wt1=V
ztfz4>ZF>Iii(D@j$V61nvz0p24#u^{nqyPucel5|h&K);282!c<?N*p&v+>=@w6DL
zB896G<<-UoHzzBn)Xff2;vuygq`f)03~1X862@xJsnUQj`9oMp{N^6B%5kP!LtqS6
zQjtMlQCyx(`}o_kO^AGU_N!zeB~6}=;U}|gNxcr1TDI@~h3&~tvCNChSmM1SX*yfa
zeOdB4-+%ls=H4l~((c>#u2jXY*s0hRTNSfnR&3i=#kOtRwrxA9*w%UKegAu(?`!R}
zbFr_^byik;)@pOjImYPy*QYF8JFNK0ZE@~(O~Ib%K9>W$WTe#nms*A7+z<EnxXe%9
zmhoIl%F2s#kEC04gwpoczZ#4SVpt+Ca(+t0a|u@-NZ;&J1%Yjb<afwLcB$Ju3p%gf
zbJP8H__Jp8kr5uFtkvoMzWs)M-^~GT5#dip>gjRw4EAzKgOtnret5CjV$+|!WpOI!
zD$L>4IX5H7=NTAbAH?P=V`}uH;i*3jB9uv~&L0|`k$Kc^f5ybIH>K;z+Wdms-DWi-
z77XUC)lZPlB1oLU*8Yn<V*($^Y(YT*JjiblQ3;7srF7x6q4EM+Ri0_(iE>T$Om=iR
zk`0m(30JI97|C0<ga>FB6Jz~VtZV)emSI23PA+5V`jopW>sOW^p}3f7OE7-NKm2>z
zfFg;cdk{4-%=ZA)i%@d52t|^TRUiB(31bk{!E|qHDJvd4eE7iS;OFH0xA{_x;RdXi
zBkmJ<(G2Z9W3m<w*ES<TP3Y=(O(ri6ceGST!HKl?7<qpQbZI`{UQ*>kP5DPj)f3mZ
zXaBvm*t9rMGO!yZZMKL=bTqN+7N|IUj@<g6syu>xZ<If*-Bs8ob8Ti>Rv*%T)zbHg
zPAFt&4WQ-;c8kW-P~N$!=3&tVY<g{0kk;&Ei52FNvKr6D&}chv1W|sMWdJQ~am|r}
z8$~vsH@`{V3uSv^k1uBnX!H5?q)vqqnEwOf>nZLfLJp$iId7<|2+7FCrwde$^~5HX
z;!9v%;nf+1u^3~}?E~Fa7exiSO~SPNrRGLEIR+G&k!3$2rS{#%eY$I5VIjANZ6>l}
z{hCzvo~VCxcMn5nbu`q2(^a8LOjZ*;0|OW|*xR!M?7&als~=E-<iEKR%6(h$QS{`G
zH`DDA*Q<oD3mxxgw{qWZ+o1xhogM~~Yn8QuUFq~|*rEI5QS5dk-r9Pz1svx-GOTvK
zKF>EPE|i)t)Z$}fH`fofB1<3z5bvHe7H2abOP^5o8YP#-=gpWgnDg}DuVJX{ZxYhC
zc6lAR!dSud(tjfuQZt>~+~d9a`I@-hUc&!IS%@?L!tDBuv`R#GwJgTOFB_W_6sL=Q
zhtuk=;>_$T*)0Sb_p3@5It4Y{feT=u{QQPV^(z5A>Cg6gFo$E%dSsC`!fGJ}EnJmY
zmn;3aLtWb)T*3=^X8%p0oi6s6bKp^%Dj~xTVr?}77Du-9hiu~av=|R{n_=tgRQbV*
zx2<p5E<UT(2BqKA_(2(i5}#e!cft>L-Z)BGf^>VI@!}y-dm19d(Wnamo)~o^GZ+c1
zq?FZk4SGY`kb}d93x#l?*KPQ>EO&CJfF`sKH!epH$n3|<gH@qa>Ldl6A!ONIbzk8A
zor($_jQi6L<{Hi`cNOixfTun#vj5ZbJWO}do&$0c&MW$uN|pUhZDHh;4!i$d>8I|i
z?TPZzi;eb(w@1&12!~qqvgn7hHZ0{RBrqbyhN8I>13tC>s8Mz8H0MX5Si?cO-D(~f
zqLGQM+I=de#8+@aN_d*g#!78mxo=)Nw=y_tzjAhT^E5&A$bMnzBc6yD$C8LAL~uQq
z(~c_P2yFZ)cdtMV>#Y&$ZV+P7Ht->Oe4Y<QgkZH&4>0noxIn3MUxo-psrB^<Z0_oa
zq)YAgF**rAb%udQd$clLuXqVyeuq8=Ggl|GW$tNVw7Pm8$NsV>^mqSLYd8v-?<a2c
zJne44b%jd#z!Z;Aum+33**!g~9W&Yau_1SfehDmB>T6UCCUe3AMmDg3@H7;MQ#!9=
zvq(N`Jv;WE1`{;}%09GrtBn%I%`Ip&O6bC+?k}rgnZ7$dR3jTE105Qh$<cIWy@i_f
zt{Q;PxM$sC%l$6p4z=wK=!coasr{;kx<0Ra?N1Q&;x?T|C2IB6x>rZ)+NHF;W^g;e
z&dOza=IVR-fbTY$Zzg~>b}OB3ox*v6j8Vc*Fw#TZY}&|>TBvkuXXh4Ld4CQIfAfC2
zUY-q{%;c$Yy6;JeJcCegGN)?AtQqbe#vX8S$5C(7ks3ro+}6o<<8(YyYptL`Q-s5A
zOyl-q?re!q1aBIX!bMQ5f*?7+A#3uaGtqg)q8|`Kxt+u)ArP+t4;!Ns5kRyqNrWZq
zWZ%vJdSn8kq=T1R{Pc1c0X_l&Bm&GBo~+#MZeUuJ8{J#C(I7DCL6Eq-5LFe`u6J61
zMx_(p!J^;vmIP&a334TkyVeP(DO9-(Vonv%h9YHu`<no?b|Q9g`QkL1kaEWwn50lC
zRSa7laM~S{lOo(wOEy|tM&KQe+{y#PxMLRMdzlC$!S1S0WD`Bj=dtUDy61awMOxrw
znnATk@*9s+#b#b*g^AQjKBrVsxYwrYeByg|>IszeDX-Pf4_cbTe3gly`QZir*|4Z^
zsb;Z;XM|7N%0F*~nFwxG`zD{iA?VB8?lZ=!8|LimDKeVWOuoG|ZiO>5F<DNxjQT-*
zMs;E`=UvlONy_d-z})s`6)*W-9I}f7KR0st>&fPEEjh>?4Ehe24yy*-r0dtjh<Kgf
zMuGj)#+&f-lhju$g=gwJ6f|sriR5tNh_R9|7CPSfsKv!`Uh?~sgs6zW(XJ>%t8z`F
z-U7yrBA_*Y>`)c5RjySNZEbs?lt)l$;HmICA%SH>E>9E+EP>cSq@=9u$!>k>*A#IR
zP;2(b*mDtr%1>wb9nQ+lN~J@tHZ5d!g2IhnxGThuV<+ed-X~RK!2GG_gPHoF%9h5n
zF-s<{>PO;30ajp3T}JXn$B7T$&hc(Mb`XimFZ?9o>MOJ_pZ)>U%k-{>$m&m@2$5W)
zYc2Zg>(J%U57RoXy?ylJ{#t7jE#SB%f)O`gnWG0r78Yw?eT1L_8kRREC;`lW)$;LM
zhLJShqbvIx@}Y_{LgzRq(YA=+1(NVr$D6<hE7~;PYQvkaNd>?-h{vvl8zvA+U(p*s
zVG9lIX$QH3`Zjf-6yL?f`Q?6oWj+*z*!<<-N15lAfX};1M<2vHil@f~mjerrit~C0
zX840Guv!JG*lE<bX6N-ZTO-<eJ)IjpB&IMpm8A$qP#7jh@;j31UX@R$78!p)jafJ9
z`ElZ;Tq5g4F;B4qy!+E_v0gsui$Q4n;rCw`2hCG@*T&r_EN08qw(%=O;D?tY)s@1T
zi&Jxg!p`W}NGxUnyGvK{f#J5|;?K}psI{8Z@JkT|gcRt+vRu?%Y2Gf=qfX8103o<Q
z`!TmNo_$&<12!1gBNT#wee{Rf!k2;fj8p|^j|eLdKi5&cV;tZtJH2UF1}+<}mk1>-
zReb{@%Sd1~UL!CiLkPYSmiuL!1Fa?<t{C^p;R#27uT}589wI1R?N29MKYqV}?}{y4
zV^B30(CR!8{5m#WEKMr}B!$fpd?_SWQDtmW+rS=sW8CuaU$cOUc>F*e-@9uJUdOi8
zuIycUWdDFuo+>XY{okW=>~2mLO+>f#2vX*TmW$QsWan7!Sr4ax1M3y&#L~~Uy0q(I
zbKjHY2dhx__7-7W2^V5HA2RtSh0v3@XI1}cl~7rk*pM-szOykBG45Sf{P|-CO)WMO
zsbIX6VY!<Cb{?>v{!#9;HevNlFV-KH{->g_l+`N&`<BzSf3jw-Tpc@%C8Qo^VM@jH
zqi<cGwBVqsgM3OwPTM3tEr!^Nc4(5{#*^FVdp}|1PhQ^736_9^#bomW^Ld)h!9mAx
z=O>m5mTo$Cku(f-e4T^6K_^sCa3?EqYu?LOL;|F&F0LpVb}CF+wP&1{&<2hi1vt2H
zeHwqr#YI+`YbSLtOXzC6^{O*+j@Hu-D;0F4SRiEvI(Amt+;C*hYO2N0%omOPvE!Il
zd^j>pfwy{5FKJ|1`lZI>D+R@-dD^lPP6~cYTOO3WqHTiN{-DlUa?+#Xu+|U`*Baii
zcclyiVh`j7{d+12FM~Ps0?c!CLqtSd<;oR#hMG>Rf6Km?uM~Z!ecp5W-Uxo|o@`Bn
z!v5hzLE6%5(ac-tlX8FlHB6>`=t4S`a%sE157|TSrNFkdU`FP54ME?n{7lV4UOb%%
zapC!fJS2>LFppwL<&K~4eJBgXi=bxbPF7k_o{SM57J-L{&^89gtnBQv8|W`y(&C<Z
zU*DZ8C$H#8=C5nZ*_b-<Wkq9(;>`9Li{xa#b;hLTc7hcYh?Z32W3qrDe`(H*Vdk^8
zR6MFAdYy?rmKN?^TT{=67z^`!XDPV7txGZj8e-~q>M6;K&CaI}`TFZ?wYJ~k$u1e*
zB(=m|(to7ECBC!G?R)%89BKy~YGn7bfuFoKGpW2i(Fh=%MqJ}Ozwk21y)n0IlDrqG
zZ#Fr~-c#XLiEPC0X1t`o<}@=aBcoTQ(4R(HH~tOS0p)u&Rd8s0qu8|kN5S)b%>AFb
zT(=?-#W-48Sn@{~%hrqBDhY6|KE{)-<N?E#zn|&+iN_037U-4H4<gj7KzTqMSU793
z>zmx=eXk`ZB{htYH&iT9zZp+Wywch^-)tY=#{-AQ)oM^jRW8(t@mal3Q*T&$*}DSL
z1qTSVV#z45B%N^CjP&&hF>?wE?jN_;r+Yc<J}TE*-FhcHSE?_!3~4wme>H}^+|`+E
z=DLhVL?DA(gAxR)bIV;x+B~@39X|mz5YAPmT((>|*n8^IX4mkL=wOl;owJ(Ckmh$0
zZO~TRBiNVdtB`mzKv1B&y*%&SiY$90cpW4h9=F>DBsX9PEB;Q=-H9OGXcOZlQ!8-T
z0UTI+?~%cfyx#CyP1aXY0<G^>AHNW<3i*J~ZO12II$Os@_D)r+Sh|>gaF&@CXHR$x
zS;)~V!v5ru(jzE0)Sdol4SX#R&8x1rm<{gpcuP`T9tr!yX2Zd7en8j|Z<81H7sSt;
z_Q$yu?-!d~#cG{LYyKzqIBi?I=zXuWS;FPuo}mlMrLtCc1HGL0=^1+r^3u|o8a)=y
zzmY$JO$6C=>uwq!?(tf5$KQeTWsp;Hc3~k}JU%=6s-;}V(9mVc1UT-kLzF`GxIMm<
z;X0l3)>>RpaFrJ4_rGZxPN<r!mZjI8oVEwje*e`_ui1O>nxE4z?&?gljOp$u)^!gw
zI(EzZ`7+zOc4%emUV9@gG&<x)j=kOlj!ht$T@DZd5o!ARuj2*&BBUG>OHD+&X9rW$
zy9LIk@1=Q(;ODxLTYh@WiPx9&-9Hri#Z_tnM4Vpi*l;gGk-ilR{pIQ)d{nD*U{b55
z+UX-&j#Xk{s&?{H)w6U9RJKMEn8-Kj-tq91q|{@%j;U~&$LTdg&sSCTwmzbfKcOjb
zXCiU+B!1!vH&>G=fK#3}ewqaY#$`^It9%a6nOmCHoG9-KZU{Sm6be)S+pNekb?h-C
zK1!)3qG?qWeYkbg@d6@}^3fV=H={}dA{^@}Kx3U_cohWN&H*@&=g6JiIOW|Dg&h6u
zF8Gzwiy*kwh;vT&VI#|LCkN0e`EA55lbX{tKhfXY|9G6nm}8>R>JX{oK1!yuWOgF6
z_ZXdmvUc1Ma{f{J1J;C```a89vVjncDBf2JdT`A*KlLF{9sZY7l*^C3e5De3Ks;S7
zv0w!|ivDdCRfIb@%;OA32AZ;S3TB4IWVu{ExP@7pz-l=od`)ReqkX42=X+B3gq8rN
zlGV1NgSyhX>4b}nDVPOlRo`2AzC&Rp9ggM45R?Ty>i%ZO%nxKxuX9&Bs)>&i!!R=e
zPS@V*4j+OD7&OWdy@e966Bq<SJQU_oh;a-*?B6gg*$N)pNI<(QS3{^TCMD(j-eG&h
zv=KDhaOOtn@~SAQ?*S1u08#>LFrVXKRHsP{iyHDnPfxyWdTMHDV|mr9AO80@ks%`Z
zYhY|5p;$7{XVe|#ODT+<!R-YHjXWMxX#o2oN`v!lh(UAwD+6E`2mSKxp!Q5nNrz&<
zz#!W{yB?KNj*Er{mHBq-eca8d;sKM+bgpUm^xby9R5HC|>vefI7B_GU$(7lx8{<Vh
zzJgA>Y8~23t5a2e%3_Lbi6{XL?3<Z2-NXhixBgoSN!k+KZ2jOCoY~vqvt+|}MbDgB
z*y7(NMP?|}DhdJub6!)5Ss~UX1>Y$Xd<0JEOxTwZfB+5ib@1_&#?!tx&8Y~H@buS%
z@z7y-f$v%z;a77d`X*9q^iyz1odd1Xcn;c|O1C)$<EvB?p{uw4v|3!)>`lEZS^h~}
zh!erwkka_;ne5{{U0zDzDR4>7{OyugNy<GXbH41Bqlu3SrK+0~I#`*+lI=dD2V2n^
zs|$OyGAhUUF~ARpT%{@qsDIsxgNu{r#-FayXHY{mhD*6!;rx#<2;^9A9<-}Y7R-ib
z{52_thezU|re+o>WU3%JD>Nn-fEIbZbrAvL!n@h+V}oWq#Yxaie>bZw?$7awnTcsO
z=+fbFyj_e*ui~gX*ps{f5i*O#Co<(t-TpF<_H@>AtpJ^N#ncM9ryk>dZX+REaip3m
ztA~NFdg@Vp#cV*bT116D1>V-4!I{w5EX-lV>ayE6B8+ZqCevo4Ls!{adS<if5=NXp
z#<c;9WkheWit;7H;;e!AV!`2_VvR+#b@vT(<yP7CXgX?ZcK>lX%@{yFpRRL(K;ymr
zS&N2SsntrZ5>Tl%SQRofGREPm&kL_In0d<6s8D=8B-@3QSu%edk-8Pp#jsB)V4XGM
zZpfAv2Hj6ipa^#TE7~_&T$2otas1so?QTkT`#`#18ray}1Q>@U$`uN|o0yoGl%nv8
zNe8j^)bY{le1M9d9rGK7>n)xqH4}zQWC$BDIWWl!T-1q5eKcQ1Ve4I&l9wMHbz)a@
z7%Ih8%3gPcHw^b-&dz8Lys9s2ij?pL4-i{lDZs&>X@2?Cms?3@>M->d@tudWvC^>t
z|2N+8Nn?nKd_R<)2@r{dTUr{Nf;mHhb=CLwtEvNOr_=rQvf-U~1a?+DnvleDGc03w
z*Vk9b%>Dg#x-n#QB!-ifLiX$R4-kF@Znx`CgW$r#<__I-%%ghL=jw>=fZHPA&()oy
zFRR7e5(PPH8S&LXUS1!rnlIWIDzhyLF7gkol$0UnfKU<`F2B#O;BcvIcK0DffljTG
zSUJVn!Szvp+K-O`;g^na@`T%C=lsk}B*GzD;R$q?wRu%rxJS~RYlkiZpSy`$d&v2Z
z$1Mr$cv5p_2=-wA4VjMVO0&aVAc7UpbUQKGf1Kl*eSP2BprI<Au~>1^0&ELpESJ<N
zyl2a?fo$)OSGZ+@qv(^buj~o!kfWiLie{^kC$T9hzO#Uo`%HVyVRua)VdTbHzKPZ0
z4$P1ev<c}8a`m!MYi4oPl(Mh*4t5`(YDLUtuT%M4St?M=>wx6e;EAwm?IXgA=kQ-Y
zfXtdya6cMX3et@8_5fiV?xEqy(88A{K-%pF!+SaU!q9&Rwts)wZGofS>>l9YAX(>d
z!hE#ai}ql*g9NWq&uaa&2KW=mU0}HZwEg{>B!ZQb-gMpsNLEZeQKkjR52I9yqSAnH
zH6FKT$b8BRJmN238hv?lH9B;e|9oOS{936Q{N7d1U_b~~kTy?sc(z%KiTAd*C&)CR
zwn(do+T^qdu0(n*7n6`c>f*<sU1vH~Bm^jKvi5AubWG=S<zB`^c*Aa4h72>a^p&|O
zmo0$TNbV=R#5Pn!M$+LDY>Br+DH>Qg?^2BedY=3K%yQcz0~HnWE>FwAnVPb!;D2;T
zU#!C#ff8#=^;RZ8(@79v0{1+cB$}t*C!wI+k=gXogM|&7Qk+glM%uZGYh%!N@CkUh
zKa+5T9p!5W9|zn>&+qGIX&o+azL>AtJ{@j{D-~xsvS9LM=8k*yz=?)RRv2rjZy1KV
z5l^zU{kBS@<^+%eSOE;nbCf@ZmBv{`gKQztt%^%AObCcnc1jn^BA?+lS}`5Y*!sz+
z^$`p`!jf~k*%^K#!%aBRiSjFDa3WJwI;zxNU1^!8*2D1<GHB`s_Y*@#GI*qc{M>9_
z{RC+y)g}c<q|1eo7t8s8zL=}pQxUfN|5F%4kP~Qp?@(P%Wl|m28!eHRwU3#N9S`Q{
z=f1{aN=<vr$jLvA$kDM<R6tV9vDH7rsRdcGFqzKP!L{MUynF}sc~@gw1e}++;UF|P
z;52RU_+c28nmk_Dj~%B(Lll-jC<s!WDUX*3K!KHqxxj<7v=rxeaI#)cK<cli>#$KQ
z!ONn7#PydJg3+6Hym=;Z40(oB|86R0j0SZ5hP&`TG(4YgyIU04VYx{xMlAp8Mb;-u
zOkv5V7$un$#NP0+agX&)ip6Hrhc+t}0+TuY<!8e7p@54CnbufayUt=pcxKGZK;t05
zS&>p`*%rud{YPg@kd$iMr(wCz1w2VrzxcSdg=}w!c+MN`b~E|EG+L_b0E}g74aUh+
z``14=y&{}q9R2z?zP1(W^(+TH(D7!MH_+sY1wC8a_Xh_q67j`sP7C@rd;0)8KYSo@
zxi`%Xi>5>}n)MtO7Dk^pK;|C()96MC7x2?*a35G~BK<~yF<)=Mrp7-_QiaD53Q?^;
zS!y+=FKt?qo-K%YyL=Bf|4nD8T`;)o+lnxnP&rd&Q@YHUezD%(&5x2eJS7{ubukEH
zwb<PS&A8n>8yz#9vz@I!qF6-9?nWUMOkGfLfK2LAqlbZzC2k`#QvizwSm47AwlPv<
zCq(fEIN$l|+`|maX~_WpiaI4gngnurxPOf7*S7U4(3zzzdB5GU*8SHkpmS<cFF^~K
zfZ1(le>A9}psR6ttFcyw`5FP5EMK_YHI;0Y_0sj1iUdGg(zgFyu6%8{Y)C;Xmc$l4
z`^y1K=h*iv`ZFq=bTY%M(rNxkr^ihU6p9p=cvUj<!IK_aDjgcV4N+*DQl56+&Yu0u
zZCzd5US0tWM;E`gzW(QS=jXVb=0g7bWA|FXiv<b`h=oM)1{i5mq5l!j>f9?7#tf(w
zgiJ1jjnuik_@yVajIUz;_>m(Lr~2m}M{~k<N)kgYz;pVGdo$?}LLFpktS(+=7)Ukq
zOt4j1!H}BAq8>~UTCCi$;ko3=#iyJi4LFjw1%&@XBUeE2Lom&BF+nAxRs%gb*}IZy
z4aSp!`U8n5=EKlGl&ftir~Xwgi#40Y=2I!QEr+2By32UX;eKeL`#i6!GnrR+kGkX5
zS4VH=$-sxrok5%t$BZlpoug2uT5HL;Bz*QO70^}+{Na>%7{CEI{MLERxn_}~`$8rR
zS8QE&S>>Au+fBhZoCB@1dC*I+_jD#$jI^C2ab)sJVoaog%Y6X8)3>?U|52&gpA}kz
zpzm;6_)tUf+ebeqcCki?vDz{gc2G1zpP1A`h}Qpz|CmBjDrN#w%A8pUK}>35BPEA;
z6P16Zk-zJscr(x}Xi6aseXIkBmQ_iZFOtn{UhRWY8cYh60O+!$ShnPt!M)!hvkPd;
z^VM9>DTtZz$rPy*s*E_er_U`MaDFdo_(PZ973g0?J?D3Jnvvyk0`E_jQT+Hz8#D~`
zdRy?7K*1yg{+#ypRVML2BK8|xzprB_z<Nf9yvV9je1z3<Q4|kzaBz$i3MSl!+4C%7
zgsEgzR1_)RoY6gxGy^Au#1r}SPyH82=?-_W>MhOcIb}+97Bko&Mih2vaR$UU(Q6eA
z4P079nccKk@x48CcwK=-@6O_m-$$C7wJ4HE5k!%=zxVMSezQ}{wY@49z+xuRf=M7z
z-RW(2o1Xx&nZ(hHAt+%AX=zd+`>I{X?Pr{KQqt0H&w_P;R^lCtu)?S{@p@a?r1%k<
zGBgsj!gu1&Eoa*fYG3D|f7Xgg_p6`~2)C)3gEsVu)#BXhX-2NH*A<d&61AcJspA?Q
z#=FWh@kQ_c2zlFL^}!qbc&d5wog4c}g4vW=1+T8~*SKp{iKiO;n_i_{RF(PHG3o<&
z=S}TFN`)p2r90*C=?M=_zRhAbLZTpNFtt=XjBA6bht+fQv&bFNIrEoP<Wg(W>?AVo
z*r|k1JPyx$(^;sVf9&x$JN+XwKDxpN-|%lZsm1<~{efaJpiJXM?hi(_&mAb=+H`r^
zQSIjMrz>PgL<3*@`~=gxF&eCYtpVw12y)Q3gWHpg+k5IG#F&aihs4)*V>p03C_t;h
zwZGl2-&2%v*`s|Gs0t15ykY<Q7~Pyn!xgrN61kL0lbfyzL!;4^9-c0*M~~b9-v7>a
zYwF7VnJ+jdpCI-8LvQ2Jri%0+vYN?=UFa*b$uu7W*TEBVn4e_&&?pS-moXMPr|p&m
zi<T;P0+>>zv0k5{d2TCauCL@q3eb6YsaiS`e$)HWOQ+^0s#|xZ7+}R7)*mb(7y;Y|
zUhGaRl!ULJTA9rAZiS_SXsCB772|<V745XQG(4*=LiJ~Zj`5K;2`GpRmu{ppVJ90T
z;ZN6lluS@5=Z#4_;LZ-uR+Zx^7vo+zpjNLMOwJhg<q2U@)*{MFm#PyQ9FG`K*{^C4
z7&klCQy;e#8z^$3NLVSmKkJz5y1pGZ7ML0FT8svGOY64A5!a~h_Gy^Mj7ly!Phn`!
z7zy<Sqer~DO&4l*M)1x4yIvJ!*svFA433f;o!<_^L8xW^U9!1^{987?II!*gux=x9
z1YaJ|snt=WhC!?6k?l15N0_CA{rTB-z6Uy?Zjex?d~Kfd`=_!GiJcYG3HQcH(_f7A
zZ#<i#3YDJ=*;?LCh3oU#xfSJp*|)<v=@;GpSC%tMZ~z~R6$**#s-jqSP9nR#%59wz
zpMp@aQg5*iL8Sn%9?A_|vhc0{@-!O!a`Dcc+G3B5h>jjA3^`AdO5x(69s-z~07?6E
zsp{i_w%}f`j*2gjCYKinnIlY?Q_=+XH&o)kTWBcq(Y3(1n&Zs;A|Sp>E^rP1yN6zP
zaRZ7T9+SQAB&_U*xRm7H!%tgXbPT&Na$yYtKY83b4vb63GnGMF57pwHP^5P)XQ_8d
z&)I>q|E(%jI}BOB&?B#DYxjj=dpyAk+bt<f2a^4~Z}$3FfT?!51hmeD@yjfMJiYFf
zJk{1Ay+Bn33_{$rHXXtN2v040elfN4?zdGsEZ1>(?HBfl0Eo!cKkzrqXo=P%=P=FG
z^~nL#^@HESQssOkzBpA|J!?z;-c?#?_I#Ldz@X#yNYJ72H$aq(vz$fOF56}mz1o^T
z#TG8nU9Ge56Q-GZy7IbFN>`oiYg5cK4#sN_%%Re)!eE#IIne`ip{Hj?fDboZWuODo
zT^>9HqoOO5BseWms>H^A0jY)j-n|X@>%zsWtEjiOxR5E4aiQd;LKigfxSB|kqy&9G
zUo0CfB~Df&YNqioNzijKn=M}n3I@&15Byw7<G>qvC4%k}gnW3_e`r26Qx6#xjM7+D
zlD1Eit#u@7_)xfICcGet(sH`cRHh&q0Z^gdLuveFPB)z%VLM+6x9ys8xra1P<mk#D
z1W7wt%25=?N<iOoDhC+$rvni1mMZp6TI}&5-FhP|N|nJLmzUkP!l~B?wS4$`NplLc
z6#{pHksc^qm@6Jpef_^I*I6H-^+jsR*Sn?z+5VSkxZU4LX~oi<J$#qV2Fmv7C~U+N
z35X7sV_%%CIHaz+O`%VUhAr(<nUK$%2Gnp0$5yHqK6;vWqlRh_M$Ckug(;<^$b>)+
z>c=95{TBcwk3p!KL=4eDtv;pbi*AqrtuRBLyV_-aI){sWfYm2(a%S1Z+25WH=`3EG
z=i!n7tiH;-GJz^4RIHoS6E!M*c5NC6GU!o{b!P$8*X+b^>301d>d=z&m6`)foa0N4
zX1V&#YlqUnbnFKnU%l6h#<CZ+7&KDB72MBv6~Mb#t?l7cTNu%Ov|PAZB<k;mi8}Vv
z7ZrrIWX?(3K(*7<CYRJ=N#_2~v_=r|Ep6WyJ<5wyrLI~d1hYkxF(<qIZWVO=4}&#O
z)+MY<o6PE=QC4rFjzd<9wE!I)DFfIn@aF(pEuKss2kMhd&yEUtu2&XwUT_e%!-e^y
z3caMf{uT5S?J#i}et?JW)Aik)0oAbGehp?$jqD<_ez?C&o;}Oos5h^ESQ9!~=R$Xt
z#A~-LrWI!TK;^u>gQcUMux><F*q1<ek#M2v%5j-Z(=fU?a{lT8D+ha~atuy=1V9tk
z55L+>d$Y$R|6E97BzqWf3=e2kxGOdtF4|Joy7XRWcm%kOslaa6vlxRI(n_5c++HWq
z8NSZx<l;>CRZnd;P{{CU(rMCO-(XzO!KKK_%TwK6T6(G*&o^N6RPFG%U3V=?#M$CV
zr*asE401V>M3KNI*0u}r7SK&k*D4%cOCdu*7a+6h#UsGHa%nA^pM5{gr_JCE4&e%m
zoKsYo1%yF1lCBYiQ8wDmeMh2Js_)2r_ZQ1yA2wdWNGwTQQ-(RT=~t?IU6Usxg~V!o
z`5X)Ly;e69q6*#Rsmku{IQi#3+q0v3uS-{!bkYU+1^-dOKAIkGgMA~URJSY#N`Om=
z$j=AURx0!=w{z2%Y+s!PA<+ul;4?&C0b`_v`pM*QrA<F1+QdB#-_-ZNLfC~cQ5yHn
zrZZ@3QX4V7_T-P;{X<@Zkth(6fWlR_J>%Yn+@#tH4em}ryy>YvczWE%U2UQX@>L?X
z`dcB(C6!^N1;eVNrzJ;Y+Bz%S-?H~75G&3SL50~7e9f7M>07(*XViI!Y3W{E{p#|N
z)(mS#tYFhCOw-GMUo}4Z&H4$4e77HDb!+OkX7T|?fYt#;5w29*xWQz_-LI5i7z+7l
znISJt)Kxj%i{QN8`djzoJ}SPJn@-Ry&HEDWSgaPkYB4Cpz-WUvfL-KX!}qQ~IQ>y(
zlG%*8?R&L}7#f&ethtc3wolsgGqdIu!nf`i6pyFVsIT|uu_AyR+YYq#=#A{w-*g4z
z*Hg)1&ha^PXIf~oxjE){6+pmF=ndj-=GXxpWNvCMti#qZ0?Fg!1CAL8%#6n)m!%^!
z<OWwle|`oBVpP16lNByQW!uKnK+Ymb`m=aw1Y0Q_?Bkz4!@E^xXMcT>3oH2sVscbW
z0o{nHlMZo)Fj(%(P4b6ET*{V<Y7zWmtp)3Z3-*Wg&QJ&fH7*h|a-0*m4ivm!RZM3<
zp!o3E*q#Qq3Syy0C-&*2;5-8eP!9$quY0QFpD*U-mWD1sGM4zdP3<8ecfQ}^)8KGU
zYe*|wz2mT|l=NZG<vr+$%{xbQL#wHY1a3yg?-F<8E!4TZT;=9_wF)IO>|Ok3kUhXo
zlp8V=sv(NskqU_h$q_d-Qh^`hD@6k>uyn3p0Ec@0ff9n!Poi3~%#yVE1sbh5=GN;?
zv<GD|5tv}pAu=SYHi(Y@ydLTvnhYLPV`4GbIgD;ZmBy5bA&2(d9NHX@RW5-m@4Q2A
zq(6sQXz`Vm)T9za&yM5Qy%<mCmy7x&Hq`*y=}935{|pt$m08!e$q)tc!cZO~swiF|
zBbs(>&=dR<#g~)P6O2OK{8-sUe+=aM;1nkaijU5um?K-91WL1<1=qDlfb8y#O*mvm
zD@=6wNSXZa=tGEjNz7}ZEY?p6Sic1kd~zA*uQt&SMC41+H$+geA!r+8Xyu&B6-ud?
zxbb|$o+-7__`BsL0+tb|NDo@dSNIVD&CSi?2uYZ4iC)O)RO<*A8$3;3p)b7OXqfkb
zIn!++yC-upCMGa1h<T2<-4t<k{WVrQ2#g^P-!b+`hWq-;bn~&SyVaj}JDt;7IZS^2
zTB$8Wc)}Nv8N*-F#^8;ibGcLeZ{2YT|KZ!a?#_;4?a;f@f0A+fy!=bf8$M>J|GoC@
zYLNebeqY?qMR(s^8{mHU+3&^H?mGSqh-3Sn^Z-+&QwhXlpHDScW@PaE<r80N037oj
z?|^1ws?9*;9-<+I<zlKy4Er2iex_wCD;wE5tF(}HLnkFW8cGE5I(g@u)%p(*?GmKk
zWA(Ob0eW>Zl-Ma#y|W;N3|`f#bAHI_|Ihsz_*<;O#Q2?Ab#W-tPMkb>&QREss-vG1
zC%J)nqEskKJr<X_?!IY#CRa<N-e^fEdhhk-e`g0ut#G<27AuJ`#ISEn&`)Mk!>#PI
znvDQ+kOdZlO0D)LQseGgG6WlkE<{e6pB8DhJDq`CM(<dHH5T&P<G<hlH1A-C4r4pM
zbPkJidL7tVfeB|+p5IGD1~;zHrLTX;L>h9FzRw}h>g^fuF}wpu2$2ON*C~JrvrlyU
zA-|#amZdJzo^4b|d?0JLKSxyk%Pj4v*XwS)I92-Fq1@=3Y<&-`_RuAHe>UGOu&_vN
zNZx*550Pge(jI#(jsgQ52E-Rftj6XUTnVq6#^%!{c76jih0?g8eXM57vey&yR0ru?
zcuKiSU-Ilu3gZ8T-hko<bBj0hty+MwmW!N<n2m(}>2~-se)Isi`3wUKlc=6LAgM4C
z0o;nyizOs|W!Y`6Xgw-&bKPJsG^vp7&$OFyZ9+OQ5c<kasN?mlP;=Q0_&zeucV!~4
zDP^ntMGXr9GBfwAU`Km61Q#fZl6VI#{tSr~Q&6NX(E4!~i`6;;2G;vyR@;jTIL^ij
zK%}Yo$g)ADRP?gGSV#z`0>+m?5O2!o>J82Z0Fq<P)vvb!d{+zQzkcg+sa5hZW@5%t
zQ^S0VM5US+6@5gqx!nScbn#E6r+~9Im2S9JvU#LBljn4!<G$;?Jg3aW6ds2Ig#P3N
zd!x<9rCZ(UelSmlx+xR+jbcZdj8NeIRK2ok!@=QBILx6~v5-DuGJ^vRgD&wcdK3WD
z8cvo<t)r3BumZWBojD*I+BtW|u7Lm|+bMv0ESYnEyLMTMZU>k&y>x}^j29=%v1{A7
z5u%vDHkJP`wby8CQ3Y_Sd)xxg4acn3WepJ%K#>aonI9>L_@4T-Sa{z7k<sSb*%(l=
z9m!yAf#{EZl4ZO`%e$Q7S#;5Sqv0M*iO-H%KLA|vHzG4Lv%>yy{7tlt!2ooI&}c&i
z+%IPUn;ZVotr>~ugLFRQkyZb*`Cp!{FC(U;_<s|b?{$`bhNzTElcLhJCK@b+uU!D*
z<S4eGLOgGgP6ltfTo9@aA>xKct)?yC!nGnf9AmK2?$Pdc*g_QOI80i9;XMrwE)2M2
zP{@QeH;IEflQ#D(YwO5mDs}9_DBMK>wCpdjR%zs|cPmZ1`3d9Gnz}GB>D}ki`zm~R
zmg)y^Ya&kb(+m9|JX83l$EMDvF{5Ks0<G(5BHH3f=k0M8pg?dkBR#WT^ur(KI^F#g
z$nNTj4xRujDX!5LHyX`OLnss^iI|KIkiXcO;WlAE{XY57XZ%i!TE}%)IMtRZ7(Eig
z#hE$&m4oLdW0R9Gyo(Xb^A$Tf9t^(!hK>f)2$G249N_ju1$H^>O|z_mC{!sy+=V{{
z{0f^+V0h3b?J6qC&mWhvNNsF&I^>XeofUalmbe<0ob0+C3pQGo%cp|HFmLSHM4uG{
z6xY-A_T^f@6mf)&A(hI2Ra2a8LDdHDLtQ_L<~o^X8M*8c5{S=>p5si^i$Hj-nh|S_
zU>n}`e?rEr5Zt%@e8EDim_|zlyU_@fZN}tA-#o18j0$cR!gG#52q#r=P;Gsh%T4QB
zU=Ew`BiX{N1@9ORC{_?^w%F}V-aq@>tO6}ZRyO<9Ibl%_AYIfXmCl!a$h{Ua0cCPd
zdou@u7H(6PKp_v!FQ<dJE{kXWy2fZfPVLWlye1st;6A|U!*r&NyFhxZX((k^AHPGT
z2mXQ&^BkCGZ$(`J23UFZ3&5k8K&j~2jnn8&!ZWnh1a%JFS$1>z%U5;WD4=(^XbRvz
z31q6y#0qAYmh2DG;)Atz*U2I|s;o|erY8V;+v|-ZU_FevYntfA#`~Noo-YsLSm(b`
zxdp%@@lF2Vv1#kzUkvS!8my{n5xnHF!Kh;LHj5=NlK{Mj4QErx^jj>C!m8#;9;x+z
zoHeM`4BXa$!_i<i7V%^MKPV!7792W-+|K>DG07k_o~X1&GL3<6dx!cH<&^2+Bwpqz
z8|d5LmTf9gju~vrjd@b9JAz=@?O%oP4hhxf@w$H&eqy71#c}sU!<stgxS_flf6u|%
z#Q<jUhPqSH$x_oHjqRKBCR!UxiWp1r0I6ZYflJNLFzvs;k<`sYOFxZl0Q$Ny4AuV~
zT`kuBJkI0cKKWe-UP?-;4-18e;@Mp+m7#pqQLWmXg$%D5NM^_5X&OIgnn5~yTIw{q
znXY<cbN;hi<7vhQi;)ETh>l9G0{VIX{Gn7IS>A381Y3z#CxA+<3X+AHJ~EbWkNndO
z+87juomTtvJ!{eIOa}>qUXI@=tN(QSBBC)&gPc1+79j<*!xo?{<CvJ8Y<XdP0d7zI
zf-EX7ZrfnujjQXMYiwa;Y)tI{wNO^6wVMs~J%iULx&olA5SdPqP{2QC;^w?IeOJ-O
zGY6EG0KQDE+VBG?+HG!tR!e6Cz!rp@m#^cg6iOQ027lcT#ST93x;w+9)9e4{UZ@AM
z8+#G&9;Y?h_%+@(d41LjKSV!-G|R>SH82|ofG_!=n@^)k1i@&2fBo3Mxhc${=5lpb
zu7YhZlpY&GeA5t6X^66IFz#@A5Kd-@Pigq$?LzW=y_}*eq0$VkSSgel2<g}MgJm?a
zvPGrMI+M8<goXu>d7z4ZwZq>+TfNGBqSmh}+nTQ;?iPgT5BS05%;pS16?mrRtImCJ
z^#IVcNCrU&aS#O?YOEEPiFwDkrLV4VDGwLRac{CtNgY_r4Fh~YZ+*Ve++fyPR6}Q0
zV+6o6+xjaR#CO>BUALW6R#>P0L*FC=*4^OzyTjJQ2t8iz^SAuyM1xXX`*dWtdH+#Z
zho%M*E_M{=Jmus`GJ)H<etY^dU)`6NItwLQegRncuc$Uf7hUv-p*aO=^^W}fT*UAn
zK?;$`lG1zC0v0O{Mh(c2YXJGT4X&cZ_M`_EM{j=#7~PZJ#OUQr{w(EhPEWm+adv4M
z7$~;<d^xX*8F9k_`#k?S8&>C6yP?Nz%~pHrG$l^q<8S}d=sJ;+2%(tu1o@?Iuu&Ew
zM!nO^iZXw$Hm_ELlZkyQ1%VWHk|<U>X!t7N?&Rwi!5JS9HSH>9Rh@|J+Mlg>gG7;C
zRlu_D@Og8oTW4hqvzT>6IHx)uz@S(H5eB_|MN-Nq7K%ylWnvRYB;$R=NKKl^=zP8%
z&K+AOfC@MOnosS_q<!?beuG_Z3bhXL-hpz%N&A7l5eQu<csCxUqWO|Vm|r}J$S@2*
zT-j~F6;`jhSZWO*jm)$uiZC-fNG2pPTy3MwlpjU`s-af1JK8;Lu>^)Sy@rlrIDMVc
znQ$cj`fh(35JYbT4Yl>2*H;N#b;C!}*Y8=RSqgG0sY0u(q&<t5Yt;FbVpt3~<yRWr
zkmW_wM2WDxo^Z%88S%!<qBk4Funn_yR8$jn&S{Ep=Dxxx$R{=!i!0`o&<H{=*(UMt
z2yVKX$uyf<uzg!H0WuYmRg>Agc_Yq>%73+=$4eN|#a0(Xl5(>cc}0YlD=sb!6yT)D
z1H92>X0Y7B{H4v71E5nE%QOoE>M+Z8HcS_mEMR;CnC$H<!Rf1qUUrqTCgw3)8HJeg
zl-OdYRJr}l4nVl$l~Q+l-1>I#v}?%?&gef#0f!?Or374>fTAkg=}qlNu5cMwtcuqb
zbP*|Pw{^`9eJ(Pn^R8rlau6@OThL|ydms5)u~dr47?&+?%G+iA+tRMSPvZnY)IlSU
zd?BQeS%bs89ta`qFI#aq)u>BC<x2gJ+SfK@Fzej`JBs7g3$S6AnjTb$@^;S3%k<_f
zG6OjnlnO#W#gfkjDMkJfw%jk|4XNd(fJKIO&uFhm{pH(pb(l}`8NhF)A(4xQoqm!)
z^rG*)ShY|=O6U2y(cpogg2iEfUh6d}{0;<L4!MTegm^Sqs@sq|r}`Gj^&h~!Ct>Pg
zs7U6z=|PdW@REwEV1>k2B{1321w`0)*{Yhp#y}i+|5a_II$#u$X|Cv<ySZkwWF>HF
zZ}Y^68O~k=M;Ocka{V;401G2veNsBT12&Iuu(nhQ&m*k_*MG7(?oxa9eV)K;;S+IV
z{3*muU9n<927!<gJnjk9-N#a8dKC*YGP0`&V`Jl@(&9m{;9mX(hE3K*1jFaY$H^F3
zdTAWILo>(SmHg_=j%0*te*Y^!k35!#A*FxT&9E$<=MPA}Vd82z*Q-~tU#8;QIV4%(
z-(o7%xxUncmd=!`Da&{ySsl<Uv*{<bCp54Sqf3gDlap*l93-ZsguE{NBX@0W-lnwY
z0Cv79de-;keoS%|6k0>hpjyB^bG2P_H&O6oc`=<E*M^$Qc{d`cK2_ia4r`PGf|C30
z1+A2TFjXk7;1RrAAM$f=%wBa%3r8ry^%7sxu26V`r~I%m)!MH9j|<@T0H&~6a=AYZ
zREbhIiF@Iw=#%M5J8X4YlLbY-N*1k@LFz1UL3^zm>CaYmN0>+Mr32S~V8_NML%&!V
z8M1h1x8C*y;&4KNL$tf5pOWNX;A&SxI&<w%us0s75cC>}h^-5$PixHT&2e>O9ouL^
zvzt_-p)?WXr7GEFBYkz@k^ti~N}u06R{@iwn%D`0(Yq>kcOt#*>7GeNZa(RHCDaw5
zExlAO(VMR6H-SH1G8j;Gt1y^~ib%0nZQN<m>2=SHSIuPdU`~A2;Zd#U-}~;<1ehWl
z-20E|dbQ^Uid>I+C=!N{NF?-(M_K-cPwZM^*rKfI8S%n(WJ~X$mV5)ktR$tx1sSSZ
zG*Gt&4Fa28G;g@j#_oa%Py^_lXREsWvx@*Pl}d`8?xrB%_jwd)uvF<TLxFi^t+!nC
z=*99<d8fDU@O<NEFvO6hlUDC=PDzenvyr`2v^zIf5PSr2<TBqQ25hV13ibZvTPyQ7
zS{;32!u`k|PdG}4bfR2t&zG}>4@3hkeFL6NuBvs3os!EVz{Tbde-vo1%sxx$X#4qY
z#eEroHJk*ZXEa7xG#1J=*Q(7r^F!Nm`xw=Mq5iLi<DN|%Oq(FoQJ^V*zQylPK_pYS
zpc6+0RGNy$-=Nd_ur@N)ws1*e-&D7(OlLbFQaH?=r(8yek)*asX*ezmt5*BDykg34
z(8oW8;sY#Kk_H@Fw{W<cMzcHknbxJJS*oo&wm0{|-3bP1$3JS2fE;i=4{^JMFSiup
zkpBS<=h5*=CI=p=$y*Go5?u`gqs~>iLVbd7lELh!#P3LxR;>fT^&(D7^jNQd#Vh(-
z`@h<i&56(hpGa&O4~7F<^xH+MkJ3}Ms3rtD^(r8^^@MT^SKzl6S_En?uZ*G+3vU41
zif;m;$bb0)fGy_EDQ2t2<&I(CAIb@vq<1nioWF8_AF}~sY!Jw$fyX@0`i4i{w_VQ{
z>7NM$9`;AVNQF%uwJ;)(q0kS-dQaL8JCp)C0*MFFO1)zV!Y^nqosJC%7QC3p=tiG#
z0DNrdwL^{Hn4=BAMqM%R?CtH7*WZnoJRbu>(5Rq}==6VoK}(U5N^?j2QZrjSSp}s3
zEK5o9{e`gP2LT9+-Cz6u?pAfg5#DCmhq>A>mNkv^k*&#DZ{i19M_<2gmwzT?1M6O?
z*la^gj-a{T)DJ#XYK7C@*2W=+mx%T)CqI8-%IkkoCZcijOn?#tWFT|>v~gM}sDCyd
zkR(CCuCrP4Q&|BT39as38^~K)&i^xN<aUqgc@|PsKsVld@8|Lm(&W(1SCF5tQ7s3j
z-zL>gYCS`7^PNr8Pat<$i6Ch$1g+7KQyWpuKV&}Y6Gj5Cj>g3j%7>!zK(YhGZr@(4
z=E+np=qEGQI^AY%LJ*j~&z<QvHvdeiKkQ>n-i=emUU=4Gb9w~?%QV{`wLq5TXCaXC
z$Ro!gQHZ46I2Sr<{R@oNVq;k6i>U2;J<_IOmM?gr?qGn!Er@g4D?2PV0@rZc8Y`!H
zBB>sSl%!Y$)HMy!NE)|Prq~t0&j=$u(f!)0KL?=2G47Zz)a(WaAxaU*nXsXug%t!T
z{l*g9XE9m$ew`Tx`B`hVI99~y5nLsavXIoZl9a0)2;BkVD54kbeD$KaKslSVmvi#>
z0jb6ZvK+nATj^ynChxwSh%uIcr!8AUQ+E%p>XNQTSPIb#zw^Z@rfST$@@%GGKE|g~
zE4V`th|4%JZlzGk(S}`VvMlx$wMIoN=5nFleoWeD57x@m5m#w-jczNf%1S#s;~IAx
z4n>!)&_Z2isX84HBy_-5Hw5Y+z+I)P$)!@O+jD=dVF|?FkUbkJO-BW(QKJJBDSfSU
z7<Hb(ZkK}{Z;O_e=cs^L^}#Cqi|Eu`+^?5aK<JNdMrEn5A{GuS088mUjZ%P8^tEtN
z61uITl3nYxw_CsWrHqSg&9u0^JdYjSLjq79<V})aZ6n|%Z*8pf$5{aaMcedE*{eHY
z(L$@H+JWxngi-spZCT!cNUM3yX+|G^=@JlPWH=eu&i0luoI$B%=h1RLNz&MPkoE$@
z8Uxaio6Bz8R;Mzf#GJ}B|E;Zb<|q*$^~L2Ii+LZHSDVAEI1`>Ev2tY^48ppVp=rih
zE1eL{zf#LFvSr6qZ)@_C&hk!j1>Ox%kH8761NwyC`?48WTH(Y11dI17Ypx5Yk9NC}
zp`mk2c<K(l)n8p=Tbn>{6BeJ_5<15KyD=W(oPahGN^d|Kmt};W=N+a@Rot`H?QY~r
zSa<*?(UShZ;VD#eJr2CDpWhk}x1Q?e>g36KSSs!gX}jk_d_$1ruw%HtD@~wNZvlK;
zfX)8%!?}cuo=|DS`ek<#BB~1p{&!B|*-vgWKt#ZlXH|vs&B6Z8)2x-}hn%W=JFYBk
z24f;0Rjwba`5Xgams4+lg#%WaZ{Lt3a6k$nSXh%XSZi1t3L6e>YfMicI!hq&T3?|6
zF;9-p%3#4?PgA2jrb1QxGlDpJzV>MarqtKhizCF57nLOvKy*1prN!iFhkiLlY(+@B
zSj>eg!_E0gw>;j&t{u{fpYWo_QnBTUAz4)APOhTzL0A>1-sY~>dERhIMbUxWkpVb?
z!S756R>bpjN8QD^RJ41L5-f;^NF@ngCycwXVc}{cMKEhD2uA!GewWC$(W^o)^=cb$
zKctW&xa(9&UajU}Rxx&4KkjD0Om9?DOC?_jQGPMyqNnGZSI7>zyMs&GmB!N}YdJYO
z9?#q@C@iGiD2yj`sh4>00R{#5ye(vj@?1vWJ+5{rZanNd4a&AW(noe#Ji39B%ghhW
zme<=HLRr1RxULGcc9S<&L||3P`hp=kk8(<Exnd1+2Vr}-6gK|+qt??#?ddCo-(w}l
z-H&X-{)h98p*L7Mig!<cP<eJ7HNXWaCl;3%DjEgdXIv^tEN9ob1;;ByU{g{TWj@UJ
z;=?8}6wQPD>H~HEC5AU5h6js8_5cD)pAVHvi&?I=K3O#b&=7zWpdl+IcrRky_wN4)
z10V51VxH?N(S8d_1pHtc-$QrczZd-`?sOnv)j2vE0V3-uh<9iKx`@lI(udek_~R(k
zZFHxDlyt4l=BaQA36!3Wj>~~CZM2>f8Joq@;aqa>dv^G64KTL#bbe6Eubf2|oB%?T
zLtXBZKE@&OkdbRc;!V50dL6xJ$tq{;keCBJIVg4V-TnBemw?xsO7xeRnVAf3kD(81
z0eHmIt?Lmb7u^hADDJjEqM*+7Cg*w52j0<j;lG)VpjV+X^XvDSDgOWD0)Bf}5GDQ>
zMuPnDKUWd{O_2oozr9rvb<B*y%c}K1;1l8pH#;I7WoTYr+`l(pLlP?g8(%0cN*w)<
ztReWF2;#G_L3CV9%ALRczu}b4flZaFh;(Tod-}WggH4jQE&n`vG}U8D8tMystb96-
zXY1Mcpkxi%KYzFi{DM8xD$On{`XhFfqKb@!xCHaK^ysL_#N<EE;RR`enUlV9rBy38
zYil_>+$_4&_Y!Nnwf!F=>*oKF1jWB$-;n&Dex5^2&CJcrE&!>=Gct=?LA(KBV_|W1
zb$N4fb+=6CMn6!0z6z?mNJ@%HO^P0Rf~R1mJae?n@dRrPN?X+lS`r)*4y$Y;evy|G
zzg|VakBNx|qB;4bm6fGMSR;d>T5c2jK+gxWLP$Nomw6m8)4!#pp=931ztD%>!ou3$
z6?q_a#$~P=2dn=E_9W&)4#R)}fMl%B<ee?LCDXIiEvc+TPrdXXrBImetNd~Xz)!5_
zW?YH#l5k-)H8p?#Jscl+j&pv1y-Sn-nuHb;8?)*0nv@|GFvyEVT?q#VYhPC<KO@IJ
zpA9?&g>j}ZIQUA+uVVIVnBIW6m^A*g*vIr&?OYODTuQ68g_$|uoBi2Cwum7(?db4l
z{&E{ie&8zrpW@l3o}H6fzK9gL{8lf$^ANi$EU_o7fF|a;!eLB^6D{G5{aFHk4y%w5
zcv36xdg&n>DWOY9;HA6-gW(B7;lO$Yo@9!Ljqt&{8MJ<&7*dhx$}Q_&Y>&fs!8mv=
zXarmUm^rTyCAa?Y*xxFh2HxkwXN3&N-Bbmhj_6h|=HI3M`Tv$;`iS6p#3!OW$dI`|
z_<)a$jLg1sAtWF`q~-G(tcAR*s|SS4+F}oo4hV&y&a+NUn(5eZKd+1?q2utqW?li;
zLR1G2Z$%4?C{kAz6a>sdI9*g~G#~5+BCLIIudJ-RmnLqudN}!9aPe5T&GtdZQ*lJp
zO9x5+St(U3y|*}+yl(Y6#CsUbEiPWpS7u#3_-XAu8;Q?Tf$%GI%?9*JOTJAXN?Drq
z9R>QmdmUnx)gt_Z-^+MMD=aKLAQD@#;D7P<R$+1U-<EI)7ThH`!9BRUdvJFNA-Fri
zU4y&3ySqCCcXxMb;H$jv|D5N$m^shP&Gbz-RCQNX_pi3Bz4l((pYgt%8Ur&LT0D0!
z6H5>0Tir*U$`78#`bBz$LbWiQ)3*p5S?o@p$M<Mdk~S^8ZLBYSc)RfghYlJ;^L%=t
z<EfR*Z<Zq%Cyjsrdfr_>6Ra1CKBe{-$s2u2gT;KCV^~#h_B0lQ@aG4dsqba49EG;O
zXJ!tAKq36TKuyYeqe%rAsbUx}6_LU=KRu_@pbsMs>b<Nci3o>37*9jHp(RiDGWU7p
z-+u@pRgcO#1f~!;U#&u>@p<0nnY609(q7k;Rvq3Su9V6=)l?PpxL-Srw#X8$htbN&
zS<wd$h<T8{d4*Nu98T5myy?7@%onLP2sL9(8VMocH@lxi7AGga8V3y`5n8I(XRMuW
zGm^2gVtj#5d`3L~Zlc6Q!+f)z?!Lli;bTcIzuvZ!PLaWDixai8&vkdwaK3nN+;?S^
zEzbMh-PTYG3u!<J9Nh0-hkJW-VtmE-vobQV93ygXP3*$V_G{~dxGz$z(4$t!D|)N@
zO2uVwwuXiV2ar}Nz77EW!0;&al{u|<M?OcPQCnT-ukwWaK6Gb2OE<y5V3vWatE<AO
z%pPiFwX;GQA;(9zXZ?t<KN+uX-8><on8~Yd&XwBbuoXE5T|B>tb>~989`^CiJ8kw?
zw_byGO_0Y?C${(C6739WHkGZB>R@@o{!q`AHXJR|d;54~^7Uu%x{}L)6u;HPIX15I
z!eUTCg!T8=Vgc;MsJ>e5$@HyJ?MafsC^lyHOlBiYibC<j!^0-GW+T~7qd#n`O1Vz5
z!)zgTRx>#o)u{czh)AbXiO2F2c9V<l<rdxCXE3<L4$m9a^%d@iQ_XzM_&Kmr!wg<=
zm+_W*K#RH4`e3~@F_(;4x7_s3v^*7yTKn<o&v%M1QF>g?F{8X$Eb2b1O>XU~Ynnw2
zZ?XD}s+B6jHj7(tKU!+~gA=Bj#S??8j3~ZDlB@#vp*l2o9C09tdMzoMp8_N4W3=&-
zlwy?)AnCYb<eD58=W#YN*Us%!YZ_(DVm`y+o&9m_D`A`aMm$_18DU&_)k9auS2#=U
z+O6r=pe3=4PJJ(ywkJL>HWMlKD$B>mtsUtD22WWD{iv?CwLH;3sAT23?H&PEJ$8u{
z)&#EY@s0xX*;Bs;<#3QJTRgJ)-AeTpq<co@otMYr;?R@wDde2KGO^vKaN&ob<IMpY
zJxidDh?OJ;#xeoCEa{VzliXAdb<H$h*AyLmHdB$aXU8dNhV)ML5{n<$LK;mbZyo~!
zVo4Z_6s%;Bzr}roAg2%Lt~L1D9=Zx-il@;AzECHPGcz&&oG&jYdn29|5`{I=>~TXG
zG{PT<r&0sfD-3)v>&dLp;Eo7Aal}VRxUQo}qr5`*&I}G#RJa=M#&i7-qCB5`et#Og
z%IrKmI@wZ|mzURt!Vn4eTDKnh_4w#d0*z=ify-w_3Wa!n0a-uR2R2ZD4Ja{|E4)sW
z1ER2LpinkuW?@@FvD(mqaTiRCwI+?<P!YI5s!50@pDFkXD7;3d0u!8c>RhU0=gBy$
zA1ib^=?^qC|C<+3!bi_mp%g_wuF2Zz{32)U0%3)1#2=~Dp7Y+kAtDGhO*_52Se?>>
zbI#7pzSCEM*M=_1h3Q61$BF^vUB~W^i;W{^=h!pDbE`j8h(x&JWUkh#i_f=Ue!S6Q
zpbHn~@zgm!?+Y1_^yF-7NF1P~qcfc;UPW)hY~G{33s=je%VN5%&W0vkuVrLplx80K
z65Q6v?+!vIi-HLc5GLHEiO!U*@EFJz$%cYQh>#OaXJKR&HGg`sN1?<k({;GJoyg!C
z723tfZ8He^trt$o7^ii&%&Ot?G=hQBTT3xX<T^c*#d$fqvS4i!{@#3ni-DBaC4%(=
z8&9p>?6S9(+DNz3aLimq*i&9sPR_BUwWOXsN`$A7Z7Iz=D!y1HNfO>Tome43Md}(O
z{8&I*sGruS)L&i(Sgoi#idzJF;vKWCCpb(F_v7%23dBHGk%<uZmbP{3CE$e7IMFtD
zeY0ZJW@9~Qw5nnIa$1y=XL6L}9H==;(E8*L_!paa?K`Y>tHEGO6G)(i)QJ-A)bkA_
zM?%EuWr)cO$TN3Dyi;M`YaMGzD|Oqnw;Mn8z`@}=v~eLE<1f~}&n&^ILue&7bT@$~
zGF!EJyu}6vLKTbw!t(~dzNx7VCYgL;emAgVWqMxF?U(t8eHuNHp4wR3$*9}24EwHD
ztbnmI;phHP-J%#RUi@jN(?bKRX@8`D6x(g)5A#=N!-=;Ob|VBlK5Q{KJng8C4#O)Z
z%%ZFuurUmfZ~QpR@v(Vr!6cyMh2fVwNIO|TmtxQiFAdM*R<sTMK%oB_78iqg!Jx<G
z`jT<v^Pp%LmZ-GAnKZd%a;WKrXk9sXoexg$vFZ~)Q&hJ1@M-`c8ZRd&#pQe){?Mk8
zKN|02JUc(VPO96Ni!b!CWx_^{wr3XueFW^M8K5q<^rBU7ot}`=(B-VVy&y8iRg3jx
z5UBNH1_WE|m1_deqiQ8CW*dTz2zNDmqwAgaNDW}a?kRN^um?wgt<RE;B7hN=(`vAc
z2;H}XG2^c~EeYYYzh<$%RMHOj?Tu_x%j(lN_wAaSo)a7l!t8#h)Y^Bjnr<Ld?zu8j
zh;{dbj|iVS?(lf~=!b^-D|-3PTzI4m@l%V<J`crub#$kISGZApiK^IKnI?fh8&Y>@
zRGTq6jRM{>A}p0lqXRHF7jf&0oc;AKj2sXcPTi)rIQw98xsl@4msJ#WnB9A*_t{1*
ztR`2bW`y%}e?dPj2b}<C4^>JEWuIUYuUY0wV4vs1uVSi95uDlMO%(g3H!?XXIe}ga
zCxYN)89%j=1UdI>3-5f{VWve)#NE|*xpTs*@DB8GZBC9ZGe`!g$m;z-i5~qv5mXE5
zC<2~7%S*SUl;nGYsX~dX92=)Ddb-alF@~c0_3JHO%n5wjPQWM!3{?l(lB&lWrw8A9
zfqR0bPnmpPp-9?t^ZDg8YUS{~OdgV}8;E5@NrGDhbZXUUJIV(EwFgFS-|BNNHkzXt
z6Va@{2qyOm1n*Ep5qLj8!l=M2+(qGFKDkwh>-E0txI6aZERVG8&O4?uGci3DDVLaG
z=Uj)W9k{$~H^WswC$@k!2)qpc=7=FX(z8Dea=tJ~EZHdHL;U~^F^c~d_4)`CfqbGb
z6QTZ=<C(!}8|rO->(5A={&cNn8q7<T)<%Hx@N_?}WfP!(1bW^poiQ1`jM+2=MaA=S
z_d}?*^>v=uH7V;eZS~DV7KaaY;LkbSjm&8}{_OQoEV3cS)}&AGq)fI|?<abj%2Vh}
zGrO=~Eyb$*)`pB%ruOzE&~33%g~0{>*<!v0(!&7G^FSDZhF+}OAc$B!gp!@ZS3$PO
zwkZE+VkPx@0(A36i4LxrA*ue$fF;G3oGC;UuajqX;{FRVeJ735SXIRVVyY~<0a=`=
z)P)LlIxW`gFAJEs5&AT~LOo!3-?2-H8#u1E!Db*}VFsr>kS_TB`LO~O@3Zu+O@i;e
zl2f}WM(3Heo#<3U30~c@;kO)mFT<43>$ersiM%l1eI$D9{PCMyWV)BPhq|Nv{UIov
z6TkF_0>vJJA{o-7_i)yuqa5&kpbw|tI8cMxWzy?Jao#53X6K_Su6jN&#x^-6rK>RV
z>Qzg`+`Q^50Ajvn_f!W$LlKt^Yu5dMIkCD+nVU@Kqwx#^eY(4KK<H!pRf92N0A=EC
zi+y-gg?#9BG5TkEPW0LS!t{Gt;8i!6m^!T(qm*ttYPq?nv?<|Wie`!h`M|B8<}X3S
z`lm1Z{eZaN(~7>CkF%t-bglWg`TN8<wJHnd;NQ4$#x9vH-<Ej=p>$qyEjm7an60iv
zIykR{wIren7g7=;3LFhNmPk?p_nbkyPQtbn)dsEVa(6c_96qL+`nPoj&ha%YES#B)
z+U25M&H#huwy%>hbdnIC*W-{RI=-}J;224bHFVP0@oc45g9qoBKoV7@ZfL@oONonR
zR|^67pv_kIO;UUep!F3V^L`E#M}N*$u;NLAoP=HbDLGERLWH3hL5h43Bb`MDohCA9
zZ=+xD&z*d(_+!A-xA=+Ilj)iRhlhfI(D;vDv)f!nd#m%|vVx$$1bjw+R^q~p&^;XJ
z`inP%l^r1F{cbGl@BxKnq^1G$bQ_dj25J7&n+CdjeMC-FSlg6blTS5iiVI|U9jb}?
zNj7Putw8Q#rZ&~MX;nc-#=L}*5!>+zxxr8}-i2Gxc=Q5I@-W{i60K_cpwsT@ZLKvn
zzij+w-={WLM6xt`Q}`=95guX;j-xqsWVu80%=f;RWDBXp9-wut!*C0Gm00hXwG4@n
zGZj#29aSTG2NE<@I;6g%-6N$H$8%&<kEFGYHb*#6r=jGBmD(Kmq-^Vrwup&P#L3}c
z((X^dq=sNBh-2hTAheOUu`ODu>d4C`AQ=LL6d9>{p2xjZKHY<JgzK*l+C_|7ax}{a
zmaluS8#;xC4!qkaVKOLa&xMM?391;<4va&>V)#G#!{{kHj5d_(fAd+^CkxqXN>aJ%
z^RKkA*h1f-;=!64u^3PH3*8qX@1h6+$P3h(Q1It8m<$JfzXxNptS9;cWpPPdb*(ar
z>Oqh<wP!e8v{9U<9WM_At1Y&0BzK@+qDk?tF%Wy>Y2ixkJV_Lqf`Z+8J51fx9{sRM
zcHi>aRN(DO1hPMZDs)*$hi3!vVNG<0&OO}>@8jD@Uz|P!eM%!ra?vMjaXzTXt3>#$
z$K?(4tN;k8E%^t%+lF&;+z`S^o%hISt7;ndXEkB(A#kUq8H#+)A*BfxMZKw~iou(P
z0zZ6{QlU0F4RyW8YxoTm>%M|PvlFg%yEk0O$;iO-qlb3y0tuBmUXKD9w#sVZA}fum
z{8bv)jMZ(~k9Dez6L8m<P893Cx|#;xAvD5Zws%IO<D0@sX-%!}zTh&!+^&1S1|Rx?
zwApJn8VV}~jx+8ie&wAMjM5r9b4f8-Y;f<xR5j~IWY^r5yiIq|CCXdSLej%W=F-~j
zbW{kyilIqfiWJ$J+vuMh9uDw$N6y&*F*f5SpF1dylU)CY%k?1)?c&!D#<*H@DRTgY
zmfsT;JT2HZ)85lV9A4Gpi$tKfa|NzIAt>);XWzZTxPgt0L*%87Px>+gBz?eG(z4xE
zm{iVr`n!HD%ZW@*3YRDge@EQ;pGy_2`#edEi+xX;hAt*)+>V$xIXlXQN(vN=HM2ig
zKiE$;|2b&V9y&>6z-6uPpK>}IVGZ`1KU>kq^M?*fW(1rL52B^#$$+ejx5&?{n~nKx
z>>5V)+tZCyv<se{zHN+#FYv7^>{k7sbc;1j{M+1~QuL%sl&7OPqL;B%wxqsYva(Zc
z^Lr1Ff}t&h9WZFtTlWU_7Ba8@_;PAqWwjjF(9K(EjPr|Bk1q`K1h6^*!w{G^S&S2D
zJj}+kQz%B_2ADxLM^p7^;RagsmfLm^ToSkWqc+GpNg;An^l6+yx@>l!L%8n~3ngl}
zyeD1jtGDjVvRZ6@?GP9SCQ3DSbJRAd-70-1YT?&`_>f(?tPZy}W)6#9HTAG3N5DAj
zUv0m5+HKFcQm*2|)V?~vW3wSgAg_~2fGP9huqpRsq4;f?YPQ-rO5*->{StykldYrW
z+(Xx2ibepe8rN4SH$>f`zCO~$2z{tP#*j05-}XY8W+o%@NNz`vasNpCl<eb~b{c4X
zgu{y#R_u29?nGcQozF}02@@{&wA&M!RJaCzuDkaINx!_&avg%oN53Z=9ODx&^z<Z(
z{|rdgc_oMQW{ccxy#VqiNuW<3{}(um2{!oG_(;d9R`(OcXJXCT?V|gORk#SqZl5>s
z#vzhwg6+OhZCZ4x<+wJFEheo#{YR~O+N#N{4x`h-5YurihU&WQoo;Om6t8e49C)!{
z2u<<ZpYq!b64J!j217o*Rb+MM3k9;`j<ov#WMMGsCYci{W;it90ueJ98}Y`#`C;!%
zgY{}bcD6#HV7oc1sGhYC2Cx1V(>(@(3e7X<sJ5lWZO!dLpxFQ(fg5i`uf^f~Bg;eB
z0b^UGrRQdfAW0xR9$ymLN%-8TUsh<6gkpWp){h?OAAC*hkF!@wQhbj37d|=tVFpd|
zQZmc6o{8};wfq#z_qJ%C2mSp6xJf7O4u8HlQ!NX{_z~Ei&wf7SAA6lMR~ZCFP`NH7
z;IAUtT&;=*lZs%_kwR|X`FV&qcR57n@U^|`8z;f`zfes56d;tl%@2J9-00b2TRLYv
zIu?*PiGx`XqT<=dzO?Kbm|C&9?0&m{eKOj%gu$*<rH473Zv6h94PMJsJB6KefRzI+
zJR<e}!KC9MvIO8N(N@Ym+PKCT1^cD>HuT!~#~Fz>+Rj1U%Ni&=VdG|d*kB|uhig{x
zT%k}OmWLw<o=gco!vmwZr;YZsPAkf}^Wcv|#T}stu5L2G@%0J?*W4nGcN)ISXFxtz
z>T_?y2uaSCm6xly5p`;;i%(|S@_(2Yz)VO0ng*ohq+;RK7QQXaO^@GO$LsqGB@P_^
zibtq@meLIXr5x`ecE&F#%irP+OWWuhU{K!8Y`{2xLqWn<hO#&IFceo56znG8lTm5Z
zEvBl^b;vyIU?7YqcItzbi99h>GRBpeVPCd`JQgQ+dh+8l66os{PnRmOFk72Oydndj
z*}+Z2pX3E<`@(5X+=X_4tW-8QO6~f@P6{&)eSn<Y28H?^ATB9as6wIwGnzdklpeV#
z70w4A<(CT$^FkG_s&YSIt9k6dc)dQ)S;n43DZ`$U6;l;=ng!*w4NV73r!MMRP<>4k
z%DfWRXlPdf<DW5%|2)TtqrN}+aDKLu+3H9P{TF@(LE|=751Hy&Bz*iGT5{tv`wg<z
zdqwUH4xRRwV^W;ZcAvD^IX`4B)Cys464JJHBnVP})-PF{jRzWoj<p3M&Byz{cmcp*
zqNevLuuD0^2)K*9)A9E+F?v^KN>lXsw{RUq*if|ODKF)k4?$FsWM$=FA1EI~U*tX3
z2!nk+s4AoNF)CKFDhd+j*YVxGzcs*8$7cq#4aMx=LTnk+V9TkTdGgQr$9<kNm`AO9
zM)PL^0Ww0+uFsE0Z#wQKtjHASX;s*SFnqMujmR-!5)u*uqWmv!xHRFnb#;l13|k7k
z7_QrcvgH1>m(hGp51T#7_WTPu$?ghYPboia@0=Fb0!iNxhPU07__rx7m@jHKgiR~K
z8<T{G6GWc~%riwQ{8laBDL@_k(n9}~cVfc+dxqSvkuOvv%);_&i6nMNMGXJJy8r(e
zHBf+wt7Bn)R`P9z<;7n^pX=n50nl>-0H<$`Ok>sj!k$wDP)KD3U$R)W=|9@Tm`5m~
zl$dQl{JKw0iY+@<a`9iLxYCQM{fn)$0GejNf@Wq0zz}>RCD4N2V=I2&WY20Ji*$sv
zVmrT*C|W02-J}dXjfNviW^#NnFcVuIfb-9Go2F5lQQ}2WDVQ7zk53NG&CSST;@<px
zI;zKhivtpvHw$=gq2vJmexiS-BrSa+ZFujkE*w33%ff4kPiLOlcd<Q)O9vqDArc>v
zr=i@QpRRXRc0}F}p<mx9)#V55DCkId2Vp}5fs1o^yoZUu@%t^y<j__@0O0*<H)z0n
zTfaRGl9El&%=Sph0Sb=7I({T?*i1~!iZe5@ib^vx-V^gez?D<<EPpqYvU3}loM!pz
z)UzuIoWCRJ7Px*)ufxe$eZ)77KVPpXgn<JM>#yhZ^9mw&egsBF{vQ;`{--j*fB&W*
zLP-B#f7CPa?A%;^U47H)nDRq0ulqxv;8}~~$B%0Nme7KSLnKnTH>}qN?qZ28R~ot9
zue2XBc$?mt0o`b)?ORC_BNF-rJJ4fDw{T!ni>%{~4Y%ty#6OB>{@AkTLBoj*8|VvE
zcro0Zp4ZBgR=lB!lmtzNdxKGg|0wJc^?{07Wo2c@EmK-&cSAor7gSDeO-0jjHy{#l
zVLvR!QP+DeI1S5h9uqm)cfP&Om+ASXdYVqwG*p}VAmFeqcDRcNgkmH@(Za#-`$~(3
zq8lV8(B2Soc~ElGYt|jk<F7p5UyRC~%$ITxS|bWA(&WMO0Q1&Ffo`5Vn{a6wHOLkj
zTZ6=7c8jVZZ`;G_ukU+rvMFpa?S#r@$|!~Xp;$(R^(V9U*H;bB4qdjJB}C#_g+c*v
zl6;>oFt{z3S}^2FmCJp1rj5j<F+VbK7|wo5+S_a}VsEti<F+z!2HXa)QUb!lMvp^V
zO*jN7k)>o(ahuXmTc?YCeGpgdHI`|XZu@j;nbFZUHv{7gdL6WSpMQn!{8PYvw2hgq
z*IHmQ8R1x#-xeMl8^@&ARc>>+>WcR{m`KBAG~fLt2+rr>(rMdE?jbWiw%+a@<fp^!
zytVHI{v4I6?+nQ9#)HuS0^xOlAP5{B9Dsdd3w&^Ob6xLnbO(r6Nz>n7#({!kcfM}`
zY)W!!t+QZ?Kr{gEY&CfVTqj+y*4H&yF5%#N)|*uu;vD0|N(M9tWOa1#p%0H~@I|A5
zje;ZVHcOdoEOq?&@#8Hlp>L4FWimyhR#kTRWogIF&5dJj9y32%VF#F0J7a&{Cz%$A
zhghsxe_Vqx3WrYF#cxLB1x%?M>YfHGbipfhz20T~%3>_)GnvX>S*h2l&?57L^6P!V
zK3&Qnz|ss0Q~LI?{pJ2Mi}7VPcn~P@F*P}vUb7{MH!PO%z0i1;byoDp*RMltye^@<
zGk}0G04DEGW@i3V@ZE-9v#d%N*nS+pdb!*JCtS=ifrFC{W7HA*8yyyYWir^0d_{Nv
z`uIW4;203$pyGy_l83%0RB!vnG7j`UyFI+|majCdH+hk?wzw};l&3asZ?3Pk!X?s{
zDAYooZ|TjJxz=jd|1>c%sa8tzAaYnOkdX!224rQ=W}APv8Oz%wsh21hZwUwXdxs4E
zsN`!0^p1~?naFr~UoW$Jf3lbPX*aoSeWAz<`F%Q>#>LxjBK5~q_9}<B_2G1*)%wr;
z_$xHxWh%4U^#r5QU>7av=UC*-uJ43d#zY~<>}DVGKOrdRs*eB4AAKtICA0Z*{5ZTr
zk-_gBd07dgXYe8@3drlmDt%nK{YrG9uOb9y_fHWsc(|Di=0531#-B<tJp@h%b*47u
zqZtOhHhowai}j{q?<>@9?CZTrB>RcI(ZnUHxOpJUz2fi&hgSgT2>GMHY9T9^zE0HN
z^ilMw2?>iZA_kVR@6a#a5T#ERYVB?hc1{j~Uk!=B?rOI>AppRSi}Y<gAPkkbeQ_~Y
zh-D%D2v5M}9}rx|00}3C7q)r#`4RMVlP{eJNcxdJRn(Y_3f(NpSE)s301a(JMksf<
z^Mi~m(FqCj)kcHpi2^b*;jRQXK7P>M(fgY$lG->>f0@aXq~8a1xSa^1xF-JL3lNhZ
zd?}Xi>`1CT7)znU08}{pA;cTL9w=y<QxnFfqzruQOfT?kg&+f@TC&T_$Mtad?D~44
zk#fJ}J|as*RFPx@BI)>u2(~t9q!;-iAt8^Q9#3|$!_iWHyJ7kzKGo2fkB=^xIi-bR
z?@Ee_d4^)a6&3W}uqa2T$2CrO%Z=9SHn1>AaE&!JzI27Uug?pWIxm-Re%q+n%vNKu
z`ET*mDl$?sLc}&B*+jg6ZKKqxI34*F|F0_Ld$e#2FwSBPqBUPSp~Le<^?0V;{Q;1R
zH8;Dp{Nn(KlCL<MF<=jeC1K0ln2aQt6n?|*mqzdOz98@x?hoB?I_|2=%`d+@+#&%4
zdIUYOUG`tbe}~giQ5^|ff~h;-pD(!sLT+-1?#>rJwm;im{i#(-y`(SK+<_0<vhKP9
zq>vw#MC$d|Jv^Mk*cHGy8nTkj=S#>wmlqTO95)p!?aqmyO^l)G20E?g(_gs=Jw;x<
zP<Obqe)_R(q*@=%&CS=`9D;Bse#HI(7LAZ_q|FF11Fxy6DIh2R%%B+?9o_XWuLFs5
z<2MBK)LZ+Daj(1xJ|UAu@PbSwYpLqNWTtmXQ0k^-+G3+4DQTYb#`<Iiulw_^<hu_z
zFg)-J$(JWwv2X$ya99g|KyddJkV?OeH^W5Cl?G(ki*-1lprFqGtTLo^BG)lh$*!=a
zc_c9C=vH{RW-jpo*XQ>B#=9DDS+IqHG8oBfwpe9ap2D}j<k9={&p^Zug<No0m^7M}
z8?{>TYPAtGob>2gYulqcEgjupBu;L)0>Yln>7j!7cX2!kQ@tvPtdCdgBPykfi;LK)
z*ho(YVP5cPN=k=na<rZt)d}q`TfW=3NhvA1%^qa85|sbCObAYN$*(Jq6KQ14R6!Kv
z<O6dip|7MbU2}p-u~FjqNZKfr3>i;eITyj499-BqIDDShvz{f~*7P4oUlV21jI9j}
zu6BpfoYmNa!7<+e>~R1AH!sJ|CI#XKLlMwsulr=E)#>VYvASd=7RiU>HQO_j<GjHK
z4vhr5-0B_qg%OKe3b|DC1FmL1+ejRMb2-vk-RA*Ahj&J?<^7fs-Amk7GKz^E?RIyB
zum*!0Z``C01K87>w5?`?(Se0Zy^GZjBi~n%x3_}vl<nTk`{OklR<ih|uHAg-&oRpu
za{t7!-)b8g_Pr3q2E;B4sEni()YO6`p0D@d2xm$hY2+_HpJ_GvJ@riuMSCKgsez}$
zR`$l_0s6gv+IdzQ%t^?sl=IE&OGee8WFC?T?xRF0R!{}Z`Muw0i<Dd&P8Z#d`>0&@
z{uOIg-lYI-H}J%%v3)(0peB_h`sfuU^s$7RRIV*E1r67ziLeWhXr7<H@AiWh@7##)
zi&pzMlE=nLMMXy!|Bu%Ya%6eTBn0IG^Df;U&e!To)x5uXgUpF8)=AQ*7m_qbKHnYB
z@w(rif|_rX$U2N4l%(|EJ6_f3^|t=;;os8r4*xR(dZ-<A_+LV}k2Fu&ypk<kTw>2q
zZY?dEDV;XfXn)5>Bl}C`<rh+rQFy<l5H-h(s@Tz6(T<HpARz2?dU;-hTzOs*iT~Nr
z8(u6h5Ma=VUhhQ#L+BLl7)%-Mnkb5Y1(*PQ$dg8ENrHcGs6oZAdVC}#xd1<JcXKK2
zRMHpW2oUIfAmsfL@DClUFLSK4(Hc-;y-rH8D*<$7XXd7T63^ntGA;i34tyWMeRf7?
zht#ht7idC8z6?ujY_d}Q8?4&F*m(4NznUBB4;2TGe36t_!?ND~mwsjkQ*|NGWka2F
z-MCW6!uo^eKSZxj5{Y;qZIss}(tj`b18MBPZ-Dr}3WaycX=&-2HhR3tW3RC&^?&>r
zM)5`k%#7#r9iU^h<@LGVd;y2aLZVv;5&<3_3JE`_uyF8|-tGQeqfT8R5@1~ojSCPj
zEid06F72>O<i87$0*bZgHtIvqvM0_L8@2Wq6+om%^?q9Z0vPYsem-bnBw4$Zy!`xr
z6rnhJr53=1Q1j+gRPb32)ag;^uGIZ(Wzqlf26_S-f8nsGc+7^nd?DfNI^mU+{&c*)
z{0Q~tl>tJ*spxK%QkB0UUa&Ttl0+jAUPD87YEryf#XxBFkEqb7(dtc?XpD;8;qZCg
z4*hWtlwyQGX0H-Dx{e=Ju}kHt7cEVwIIqAX76D4&K~Xr}uaYe0tA~Ig*CX6Gn9SH{
zb+44{C66ND-S+yN@I=eY!wZnvZPH?5rYlqc5&8#PV4aCn1W@H^879eXdy#cYk=C29
znV$vLgMQQ>&)pL&2C?#{(f(Ac<n*{i{s^oLxlA5QOPyFH{4v*s3f+}@d$sfyM-7SQ
z>%D{ub*KB8W|b4wg(8jLkjKZzZci@hJnq!Tx3+2z#itA(9uDXJIG<baQ5OzR<PJs-
zfSuA;*>9Tf4i8-x<pLf;oToboNxR9;U;@<KHY{~1s(4Gd=)KYX+B7)5gd#^KGY6Yt
za&fj=Z+}=_^%~^+f^axENaFIo3oyU4+Lp-v3k!(&%=%~HV0%s)P%Iac$n^3=3?LXd
zDkx92kXj-#1_5N8!Km7XYQ%_7CsW1XLYpGJBoq^A{&$G3yLt*)`aS_~VH0{CRh|!s
zZE|0^qZ@X}7qcnl()ru<uRf}qsdH?nu?}LHxL*zlx{E_&=OBMl!_fsA^CIxwowj5B
z{*W4>8Tnf;)>NCEB;a#7b<HuEj0(K%bPcIHz?g)63FX0XWI4tzlXVdtoJg-Jr$R^H
zCS)^A(uZNGv4rQ0^z#h5Z<Vzl>~4`g!DX@N%AwZF2GzumPU>)Vy1pbtrgNEU{k@<2
zG6j^C(RWd}2f*Z-^@b}^C9x*-iZohPtGD|XsZ0mOkqGk(3n@rR%XHc?p=sN^a-kCG
zb@%P0j%M-+`CNkifc%FR3Et&-_h=}agkG;Dytu+<tLIarb6sOY_2)(FF8^vY95!<f
zvqOCd99&#Ux47%wVIx!1KyYy3ULd>$ZW7bgLtB)s!F>kJ&CT6S*0s^;brf=Ba@yT?
ziC8E6Wdp8_Is>$GAd<)Cv9MWh!-UPiXm6A|<8nOVkhfcI|M{?6th5=UY~!85;~E5y
zi-U#5ZZ*3|5tS)0#wl;BvEOO2n3c_-*RF{|stCpHe7am~{}7ghb?<avD3|8zA?QR)
zd%YZ$*<>}YiKUikN|&<3HZ(8#7A6xO5wpiCSh}ZiHxNO%&@RsY-Y<<uA;-kXs6&iN
zXroW3+d}I7<{@`42X{bc@uwofFBd$l)@(Xw=X78qb%%ZMyHo4^S&PG2s7>V&b99)I
zI7xI~p?s#fS+JFonp!Vea1s;(uA6Ksqhrm_MuN3(IAUUfp+8HU)_`l9yR&iR_c*N5
zhY`^W$vEN0f>uf+uhgrJL@Q<I^_<2m0;D~*G7=edBeA*g8uCB$=|-e3QWyQTeE{(p
z;DEu(d2>;}SF@9aL`3k~Kg-nakI$EB`u!;wPknNmjBP2D{6h}303FU`*PiYqnHlH+
z_)ToPa;_-?v%Ni??D#VRF3Zp9v88SppL8x~-=wax@EzO*YvmGUnEl_sOu+I-<C-0|
zzQjTFxI3N2oIw?o(OT_?1Mz!u6d~_9zuAY|)%-9l6fatkS@X3CMw<jvET88KM8&7o
zdLxR~piDCio-j~LYl|?qZl_bbYuLVQDto*AOM~xArB3TW4;aCZ`64P<yg}>zF>bGY
z5x@{`w0XVmkEibL8u$5K!eY=U7i;D#tOWwm^QsBrNbdVDuOW1Jg?y>_2Ft}q`_=EO
z3CZ!z#>t(^$pZQa_>5y-ZLc9kI~?ua7jH$?xj^_Yr5<0T-E6l56#>u~d~Jp{;!DA?
z=+yf%G;7R;=MGCbD1YdnE@^Z+;qTI(gC4iQrBNToar(R4pbc1zyO339ozGW!ZTBGx
zA<)jqd$K6q96fvmVA@=JJzSkHR$rg*N_YLvxE+H-LX!8+dSNkBeoSrp43gyTs{Dg$
zfb_0QMNl~$Horyb@)E^L#nYP@TG$=$QVo}?l9g}v_W0kP9x*R{KcGv|t1%u%v|Jw5
zJzlGnm$HME`G|>$>GzD#<|4>aJ8wOe<&?f`Q&jD4k-BWyG1$Gn=Kg&=S*1nhXh(qp
zh>kr#k1<N0_T?x^@dR}BKYBgf)4{!ip5Sx~H$`Is!Cup)nLQBI7zF@%D1c6ZjLh|9
zIeo=B6rHN<(JN{1@o{Ho2dInndZ+*#064gqHPH<LJ!(m0a~lV_G~-D*gRg$QaL`3K
zlrRO+B9a(2$K7~Eg@w*f+hk6#bWAJayB~$&T@t8BKU`3-P?oTgk%=+|IA5%vEVtuQ
z5Rwvboj%w9+^D(P8wCRArc;4h16avn)aX2mr5c$o#tQ9@nFqqj6n)XZ5smjJ%mmEX
zd6MEknG+1FO>_+%am?)OLA+EvfCHzC=rlGoM@6pth)C7IDVdOKu=VnAhSj!fe6iT#
zN^?k&ME_{*@bkydZq3X4aol^27Go+>oF2c2vy0h=owF5Zz@LA1r4D^c%KN7D^1uOC
zKpHUQ9zzOqbv35d_iK`J<@=vM%%o^BXRonG7Hb7}4LU0&DwUWoR0)YViibx>+unR7
zxm)4}!N5c?fO{<|E4yd?o9B&vR8tc<vhB;(^wXQhEQ4adlVq6vt*p7RiK!i|psgV3
z(aAf_&+vXA298lv8j0(Apjt>6VJ*`z-(G~I`HSN{3Rl(F)9H2aa1V4>t~b5H(McjR
z0yfTKrVPfz^5%8_{Y6Sv_R*m#?m@3kWW5&J56KSJ2h8Yo`EF-m1%J`|!|&Aq`-2_B
zour@gu<G2H4C?+-FAh<}y@3KP-FwP;>L_nej~OmXQVo<YD3jy3?A%Vr*iNMIgHyqP
zVbN{3QyKoQ;)!)Q*Z43mtA#nH^~<P8Z2h_~gxBQs13h5X_{z0v>2C;!Kgxbc2ir(q
zd$f%fl<9%BS~X1_wt>OKk~_u!xn3ixEV2u%tU-CaN&cToCFpNKD3p3{9%<BFZb8=<
zi_JTMj<`0O?P89)FVq@Juu>n)%*-X$kfL-=t^%FKmag}{@oA8T09NkJB_}7x#lSy=
zsu4Iu*SA>!paD#x4v)7F((Pp$l-hDhykOGg=18|Vz><cJ0Zb<%eV(qT+ZG2cOPN>i
zvremX09mfTN{F90A|gH?`j)%zgUp?cFwy?C#}jSxPbB6qAU(_F20<bV={a*{wYU6h
zUDA*ZJpRX8Hp{i$t)ptdk&17Z?@95M9=8gd7RmzyRsh0fAd$U;({?W*pNH~HOP(wh
zF8amY$pSIWT0wJisK#L@CDFIK#-r!CpP8K=f?NhGG`cyDq~FDt9u0)Ks`#-VvI=Zg
z&>N}HPAN#q$kqS}`PUbu=!{_GJx<F377mu=N?DbHR(boB(>9l*SPgp*l&#JRu03-p
zU6{6DSD)KDv!z(i(ijRJmNL^bO<uP<0Fy0OtRGplHS*g_qJshAM1EL~1)^}Gs3f81
zIow9?a*5E;@SZU@(%nxNWq`WC2Od4w>wOqLkIkX!Z}-E$DUb@es+7w$>fL4+rvVVI
zDp<xTg~y`rl7>C!fe@C@`<&-grfKj`Z>_GM+d-vvm$<y1_m)RYHSx0)OE_lj!FaRV
ziRJ^rTCZ?#ymxUMmgF^P>BcI(1)tlEmW*s}+6z^;5L8>z0r$voKbgq?z7+O73Xj*0
z1+>v7kd(pc=r)*<4xq_Wa#94mhRQ&cC=ZZU_qR3BjEvaT*ySurk~yq|@<-w)wK-Z%
z2IsRde0-^{QqBQ*VrT8;A&t+wz%2r2XK=au+?Qi899yTvfvT_h-R3grflxh-ljv6B
z@E6}JA-@;sIR6m$yRB_Ct@dzAtlGz+wdJ{=6rA!Y%-$8duV0<Je{h=}W{oaX(jurg
znA{`)nWg>T*w^YqkJ&+FdZ!>U*ncLyY2+R5oh&r-V<d5PkbCU0_k9Jt&1URxCcCbd
ztlU!EcYq;H0-@Jeq*K_C(V?p>g3i6x?7RSYr=+2HSJgS^tFAOOLPCaC`%k8%O^Ysi
zu>eXMY0}ANW?`6yoEcqg^NyV3OAx>o4=YZ@V>R+!9MgpYSaB{d35V`LcaUjJVU8FA
zE{wuZ1#lN#OMQqGZNfL{1q+wwwEFP(l+SbA@};5-GfHoV7*>DZW)d}hhqN!W&@aJ0
zFYE{gE3US=`l24I+u;Gz4M8~7!TS>D@%OCy`ukx5r9;4{<v)Dt_Lh_d3zkwP2J6-{
z{{}M(dfLQ5;KcLAskStS1E1NGe)pP``{#Q^4)BEyLG%6{`A`1G39?Mc<A>n*oXTpQ
zu+XzT-5Z1=PO>Qfhzwh#QEEEATo0rd=c_IF1eo;l^M6gg$i$EjS%}EL37<DVC$ePc
z3(_houmwVJ7xsVAN)#`usOi=clTG{&5CQ?Ta5zXRy%w4SO&yZM!;sg-_s$gmCW&vt
z;qdT8`WzSv8l?RcUj3;<N&of~S%KZBPwJs5drAR~MQO3uWW+w<lK(j(?EWYg);k$=
zCsF$Eh?NT?{vT#$=%nfYX1|2+czXF#2`o%Z&y)w1Oq74MqtcYp{rf5l2FS?({|XRV
z@lM3wI-vi_SNkR*uZvt_zI;6-%_r?`>fQSk?`^Avs)LVD;t9^HqeC~|d1n1DmKEbJ
zDJ?HACHDqm-4Z|L;3u_;RZ_hC7Z@OV<2oE91#WKOvi|Q9U*!L>>*Rl*LtpXVpMz(V
zyuX7#R_k!5<_JmWXH(_o%m^uHintd8RvRf_Ck6FvM(z`tWWJ>53XYg+@A}UBzDMW7
z!6X^=hV}8Chl@+vOY?!(MAJ^&`HTH|dl$G6>IdL~^hxsX6Auw781QuYD;ffL`ky!Y
z{VFS?Rg(4_gOZk(_6~m^n$^O=!6^Wj0Vdb4w|Vvc{XFGs-gr`O_ty1+_GGtGgWNy@
zUFetF6B;tI{=b_qzYKv~xf~9OsHwTWH~d*((EI%N-?|;&n=BtcokU$-Etl6PR%!wi
zfsFL@*ZsSn=2)nhDQrg1pnwSg(L0=NR#G-r788T2cgN$RBqm<hk+<$Yj`w`IqoJY#
zrc{&Fr{1&c)Ow8rhG*W|;cPm0aPC)WtYWPF{)A)70n6-&qK?k%mS2#lsA#V^yxw-r
z?Rh%)(a{ke;{;#StDW676&2MB()s)K(`c*ng%lPY>8@j+mWasi(eJ|5yFA8j&YOLX
z@pL2J8BJN8R{-;z#Vy~WOr6F<9PApZvNgI}*=qbTHSU^y!*lS&d+Xlj{q9xxG7+~c
z4~!oB4qWRd(tSFG74AJtj)m>)%cuTGGJ0v8V%D4i7&HoXO^poBvs(9s^FRb#tJSuc
z^yCVBPIG0gbT-|LAjM8EN8P%tARoSZB~nG}RhNmjW`Ko#^>BlQj_$D5Bq*<UF&m=P
zkx2hQs4qnv9u;*l17uT?MZGf6EyL=q)g>h*-#sV#`Ue<2Jb*5y(=W@;W|ea?G}pGI
z&InX&3irqB!WX+Czk!VBc%_k{oT5Hxqs8%ILMMg85wsf-{Y^?5m(6na$Hw{MbS^-o
z&SMcP6^V%i7SJ#L6=%f8eA2=uTHEXp0QbG%t*Uf9nUB+~c+_onc{B9z;Hg(?O77I}
z0Qx54y$=nY<Qo2{Uca&Y7ZzYq=nL|-|32Z0e@DRPu~?pJV4;@E*0L7XG#Ce&j)>1a
zMXCN+ZqxF(H@eU-jm2(0OUcIOv;)Q7IBw+!g@nWD7I(t6FgvT9LVRdWG*?HdiGhi!
zc$~Ax=Y1dE8VCd#*@(^U?cVR%Y8Sd6KYj!fD65j}X>Wmd8nudD<AW)LR2Iwauj5;9
z?K6%5H6Sm5>F;_Se3_7%IZ>-zgn^a3)hiGLf0hUTPF+HMzjJoLHEEx6B0^`lZFp+I
zVj~6<LQXj~RacNe-dIYZAio%bNvAm_fv5BGAbZYFX=$<K`=*rBg6UydJ&KCc(`vVr
zm`;3Yo&|7X$%s?t7Z#8Z;psaA$F=Gx>FK?`&BHWfqPICrqn5a<EJmA-*A-n|<%*y7
zyE~I$11I+D0#P!~aWN!z8`X*=K616eBF7;%KKbc*uk`w+7A7P<Gm+s7ZBM(pGRWBm
z1qCBJy6=p$lc=*!VfTU)jW5A#M?h7T{2}mSquu-FSr+M)fJI=wN<o;KHeN5MstWl|
zj5DMd6XW;e(^IqbR<P|q$IN^*iH&21N=<boyw>FK?mpLP1qZ#3>a7%5p4k1d%*oBA
zdAPjpmmZ-RPhtPg&;aBXbyp@wRO{m@tU&FP)X{3TwlF(}_<>wmCg+OD(~p3WkgtuN
z+chmr5eK1y)%wcWnuXEsR>Hiv>RXBb^w1_zZTG2YShn!LhsTb+zPSOgEeCGLnW@>+
z`Sz6}#$4d=%ECqyZJaDDZ1(rG=}uhTg5B}%S+<Q$i%kJxScgtC`2?nuwjNiY{?^6|
zN=`cMn#=R_*0^>`jPYcCHJQ^3g|^KuA^-vm(qQ)c=(mWe#jPcOA>7l`qoANrU0n@_
z#gMb!;&jpA^vcyvz)OwPIQ^*e%e!lAiTQzG@c=LnN=klzt>|M2amYY}_Cf_PRe5O|
zO&tG#Bjb)!>uvew`y>@5_33)!;8@S;?eHJILOHc_Vs7r09|=afy6X+;E9^~{GBOfr
zCmcbB<5gR|MQwGKH>xS$7w*#)6%~IM${ARr5)!_jR?hsc_p5lrk5vX9xFw1bIkt72
zwP|*CHN}nNTI_{+d1cxSz6U9lKqR?@ny6N(tJC4|Lv)FU3?4W?(9vUEU0qUUP+$ds
zi7v@!+CoC;@p|8b&UMbW0Y!%9=J-)g3>yx-lprafNfguhuu9FqV9TY|c2$g+INR6v
zJ^f=p%1#`5;*_21y}(atBTE!#l0~Iy*_Tv$t!9r?>=oDpW#F6W%G{^$-eH^jO--72
zZN?K>?30$3mNI5)X3R0>mZZu|H<(;I+L$OWA+uDxH0KbTkx^ltW&NH1ej>dU6%`fV
zkvmWu$@TS^6&yHg?}m$~fwSeDS=6UTMubd8{`kNGF-e%64*P}Npr|CmP49jNMn(k@
z5&!wi+hL^)0%)pZM&Nyy-(QA%ErAywI)gHuw%LFeT^A6<Fu?OKXn)eb8wk88NdagB
zXvbrGhjevyB_<{Y0|SGEgxoJQpDV$5p&_$eX($IFtO5I820czxelXkUXirE`6%+*9
z3jwlgUYE<w)Xvy@`+AF|>;5pTx{sF2b<JL{TsJr97#Me_OUxuB!r#7Krs^I2^{<_!
z7f%kjbDElUW?L5*nW?GLdw2lOKbgtT?{+Jk+54UkeEG{2x3>;Zz}|1l8#la?&(F_|
z)*Eut(z!pViSqOEfaz}(WMtE#WMpLE;NUtsIyjKhGBUKZw0R<PWg4|jO&l%rQ&qQ(
zKaK*0gAm8Z#!mkfBI!u;0;8gwN>&|C=4IvOD*;A@a?cY`!EyhcmWFq)Mad2LWP19y
zyA!pP0#`HEy88O3r>7r~Ni~OJ(%%aK2Y>k2ging$l$^}ukG?!yG;7VaIQ}#T-5#NF
zzXR-$o9pYMnCEw(PVdatG6LA)7s3b}R=1aXIx_0z-3pynY8o0~f>W)Y3BWs$44^M4
z+ZC%-2x6g^ggaYr=XO4EyE_);4qd@DVWQUi=jZ!bbZ3Jr`dLy^l5M`~aEbr}qdzV^
zM?{5eL_Q9~3_bjMe6CbYuieeW)U=?eNTU98C<id#l7&L{8|3KZWE5&(b+xUzIkidI
zKm@K*EQj|S&)o*VP*_|9YWg9ep?31{IoZ6LTuS%gmT}a;392e8&a^sPhhm}k_y+_~
zeYI7KwUR*N!7Ucnw0erjSz6o@ItKx(Gfv-3cw|xxi$S|d;HlDRFcMfYr_ORS<Vu$<
zjwhIwC=q|2o}X)QC025>vjt0~xP7RkUFvkyDzvlPMNVXhsaROz_Op)wCkbG_`esN#
zNRX&_g4TG1E#HqyjiS;KDn+Htn`0wvk`#nQI5Iq}u%Bi0p3d!D6fD&3OWvesivRg@
za(cR~K^Qf?@=kWb;h|Y5j)RtY-X<9d$;|^bU?gAtEPu@84eNQo_9y59CD(!VG^!V>
zMp%2*IZ6N-`dk65>o`*vEAsNo-xTuH9(Qayc?gAc+j3LuSsbGF`v(VqQoh~iU^<yn
zb1Nw3kq#CRhW<h#;K`CLaKp$KrjAnJb`;W4;4`B5YndNSW?N!KdX1H1vu~B2pv|aU
zZJ@&sqvh>qzTzP`DkS@x7StefD-LXDTnVGern2S3P}hB9`7xCRww6%dSH(P~kEykv
zt%=SJwNNJ0>U5S=GbJ`0o?dG*ns7>`s!WrEQelqs!$h~!OIA4I_2q%zeqSa4AsdWI
zimq;1`GZl3XsQg2zKKb{t}!zj;7kjq>wp!iv~M)xi&Jm!j2JivoTQg$J>W9cDCfT=
z`%{Zqzy;tsIyzFHeWT8CI!}wkE(##0e3;@$H2!SGm-TZgO$5!NB+Fk!CE;YD^3NA2
zc<ipT17IP=shQ<yHCkDWt~6Rxolm{Po`~(Jo<8lwwV1`1{K%V1_$H>J5--*_;w+>Q
z8aUwV>r1)CxDgv4FRBG3T+JhDkWf%Fhq#a&%QB&!brE&>r~9=eZtvFzV1U`oQtdc!
zj|DK77N;{QQS^dSQi2isQ!F?#3JP|M#c0dIZCSa`)Hx0p>#qQDh^1pdmeW5l=a9Mu
zxShwB6p=APDU}r*q7xG<-yG~<+37Uv^e5%b*IHO*nKuG*aLKZ-@91*M%K?BFSMw(2
zwkwc;&AplecUrYdZ90oMf>V(<#4=l1JlDN$*unO4vwQE)Un>dn{d-ox1WS3zq1oBE
zfjr9ZZSD_|ACZ;VY{bB2JfCl~rC=hy2l)GcBO$|v#Y6u|NjOyp^ayH!0dQG8Fb*LL
z4Ih8p%Qw6xF*}<WA!j;C^9ik&CO7q4C@^@AQpL<HTiM*uJj6;)y0E$mfVotMgzFsc
z{eG~Dq)LMODnsR#dx0JqUyj($-4r)-e-`tIF-{K+1w-u@DT)$@mq+~dI1DH59TXv9
zfs<zF#n*#1l+TwuwW*^61N(>5xu+W9d)5<}n$($ReQ4t{aMXlSZ^CuUtej6NsHpKH
zHj#jD=&HQn?zBx+nS&XcqadvqISQQ-MnFU5zF~-smOxm5$h?96@S%vot0?w%t%>62
zU&jPW`RA|bXyElG)&p;*)!+X<o)P~qQ!0Lk?S`V@;JhRbab;zR%T7)(JYesv8sDCt
zwAIzRvauBJ`fny1gjVP{L!q#6gB0Wi`QOnoc1{55?1xP?;w}aO(X@hN^Cj2jOeLk{
zi|h1_-+4J%j{pd=E1!9}Hx2A|IT{-itEi|f^9%|p=Jh%DmP()~Atw7<n||+vgZsNj
z>G1d{8ai@Tkw~t!4BgywpQQo{3XX}ito+~P<b#(h%O#mAj;?>QW{IOjEIOJu7TW0F
z4YSaI!?_9xnb}4K-o{00D<ayNs}Bimxzv-Cp3M5tJF8gEzeY|<89Z47{2&6nLeqQP
z9TlJS$p3oW|4nB3?SNQPQ_KyBh*K7umLi_kirJJ|*%;?%XUj}82%dQzmXE%^<7@ip
zw!6c8`t-HFu&hi5SHfFLN(z2fY;R2t34E|w4hU^PCC8wkA3zu~Fxb!jb6rM6B=4DX
zZ+Fk)Y+xphYM2V(ZE-qo8}|%C?DNk6G%^GPgiac-`WBTPa@m3K`jChaTaD8mdnhk2
zFJ`z}Ao+^?%o+FuR;Q*_Ki`3gj`ze-W1lzy6$nKJZ@*tBKNgg9Y%M{PWnE;=>ap0>
z0UrDNx9bE6IXRobwMe&Jko_@e_X>@0hrgt_^fUJ7hMybfWs}Lhx<Sb;3r&(c*{TU1
zCMU>*SXelyDM?8~Aew@Sr2XoPt|$=G7p%#(in5&59MPK=Eue!Ml*Ls^ih##+IAWs5
zY+oCOMX$=7nv$|CnW>b?@44JzvJ&)gK_Q>MTIOoM-zlsiyD{~vIDe(Fhl*GE#@?yF
zzh5^)cMM5dLgLVJ)qV879564L{N4pdHjU>x0N=jDRag^jp}s<o&zs7iM0*slSPvKL
zN^;Ma#DT9rR~jNB<$m0q==QbmNhhwgp^SjEn3$Qk9ZshN8oCD`U8E`sC!ZWn)+3(O
zlC+YPY`%LzWwgGQyw6dg70#{+fqmG7o>L(U2}CvJoG1usuw1DCI<Ly*Qh}nQ()D8d
zpY#I|Fip1;!)f#-nq9Wj<t?YGh;nO3{JuoNNNgpdaVOYrW=65G$r1(;wtx{X^M=p1
z+Lk3XBV)b1s!C;4&6DnhjuTc3E|ESbV8&r_yvp(Cd_iG;DZA=Mt+%zLWJr6&TC9n5
z>ycwvlfCo6>}Qs!UfLkReZPJV!<Z;SYxPE;1G)~CdCaXTJ4TR%m9-^-9w6!5KG&bf
zXoLg|h(D*??;Y$!MMmnj8_uOJSSQs8QVzPxm21|!J>0K_VKH<x+do1=P(t3bF-}ZO
z0QG-td|FPtiQ?MA08xMNibrdwl{T{@!(3gl$xPl%UL(v&f}&q>z#}Gx(QC$EXT>>C
zyHk+FGcMr}$ScPk((-dk0DrM(KXS0?6_t}Sb5UP|XUaNjUX+!!xfhm*-SO_I;`#uD
z{;u<u>f-rSz}yK*s$ntnh>}W6WnHru#IuE#irmr!T5Xx>l2dwa5^{Q{q28Ov=^dGf
zX)y&E_uI>9jm%mHM#`@)d&?>X1Fw`$%Jum?<+_c5u=;{Ng7YNhxf^ZSLqg6p_0m#O
zGoH(%O^I2*Hb)Z~bQUVSUythp3j&XRy)iK{IqjS>Gcz3;IQ6|qh}HA=3r|}DoB)6x
zMN7@&dfErn$d)#|D$E-RIlV*#C1VJJq_OBsv^tEkKYaLBcw7>Tj`5k*aVE|k1!XYE
z+3dftfRlv^?y7fz&ABWXr=5qEi(+#xSb7JSecjvp+Z-bdS@>!^Caa#Nkb5-vmJ<f8
zmQ~A>0yfK)scM^mQP|%do|KB%xOW9(g5p>y$zr$nZl~_3pG{`|xCm^#eaZQ9YMTO;
zJq87z5dVAaykjSPGP%3J@9?sho|1{lyzY)NmjDpV?flF)lVX|I-7z~m3*;_Qgj6MD
z9<K+59*OkM*}^sb0yi1YV(b+`rw=>=)sk@}$DSaY<Aqty+H}f_rKnn?jsPi=;|N>^
zt!=yWv1S0`iFiqxs@dlpw<IE|^}g^*F*vx#SN@_|?cjR%I@Kie?(-V2qTECmC);?o
z++jVbOTsH$m>dZXb)U&oUZ=`vI2#=Do5IbNK(p4)ap8Oos5mS=xt{C(f6TpiI2HW=
zKi+mnNJtTGNmf?&E_?4onMua6Wn~>wBAe{J$C14W6(M`?kv$LDo8QxYzu))wGk@Rf
z`u+9ukL&834$gUv=ku|iy9`1?wI5X<^0Mf@=xKV@G=LfO%tyeK29m>Hr|$sBu^cb)
zx}_pH9>@_J-~Q|(>MdcD0;{lxsXa7&fCnKgkO=MDEa`<J&hNJ|{R_^&?Xe@xt5-5`
zv9UL~s2ihVwyVieqg%hJTD<HWAJ9Bh9!pMUbH4E4;R7NfwMYW!njJCrlVwgh$q5$)
z<J!ER4Gj%HMy&4^)##U-7s{qe1XM7U>cBzPS6YRBpzIkEe3QGFRoLeEef$YX?RZ+)
zG%jCyZTsdp?PG8-7=#-li$tUtEiel4_Q?B!f-~PMxB4#kn;%9R{wX3El2GHUg6n~O
zeS31UGm-Sf?Zm`JEfksB8zFLod;-%n8o3)BVaYk>JJCQAk?gpOGtb-mL<K1<Ep6^y
zRD?UvVr@B~ofAA!d8X?92i}coYq6_Wu4IRO*O5kh-MA;vwa|xLDS9OSQ%*r4@V*zg
zF^H)K@}Ends1~Fuix7lZ9lxi@9m0;BQ;SWGiT3q<Y%e97wp37{mD=c^a{oQ%nHEEw
zb^UY1Yg=1K%W<|&r?rh#ciNzD^G1X3@~>XI(zC6nc(ysT&en=7I||gHmIz4O7pGw~
z&9s&{3eNxhS-F4Bkfql7z?YgqQ#&K3Kg%@vsm5jcyJI(MmZt2jr@mZOOG;S^HN8e{
z_7K*Gh)NOKOWmGv<bCLLX#A*y(#{%?K5Du8EkcN{97mRxUK<-5x#x=|q(+7>UP<8#
zRISiY?jPtL+&SBb%{eFY8s3XJvlbAr3kfBJ(p)`3JMbrCz0%dyJy5tM^svwLe3uR`
zGdutX7feo{?afqt9v$7T#j#g2E8CQXR(O|OZ)|S<=qfp%0Lks!UEd6Xhkw;22-R2z
zN>uRJ6s8aHF0~)dGzASKNnh#HnxIf`dqSh`cz;TaR7_<z=O6bC?6u>VW~LKju04JY
zM|AmJv+6hB?qhS0?^N{;wVw^trM*wlI*9gq??q?j_J(q6Nfmo^nxplj`jDLmJ??dz
zppzve65AJBuC%DQxWX(vB0}P=fBZzLMdl#eI?e*~jnbl$JLVmI7k)H^7)UHREH~>C
z-M-z?+&rr*+k5|e`a-L$v~;)IH?H|t3)W2?=;4|YaW$rDmj%3l21Femf@%A3CwQsY
zXpwBO_x8@?CHbH$4t=3HPv2deyx~dQwHTEWI(_80j@C5Up`&7(qhRg3?v=Uv*?jE=
zNHoU$wGP;nh@F2aFNIW-8N7Un{1u+<T&|HC<ArKkyL7>WQdy(kg2O=~`ukDv9zfyw
z`-eJTtT#4)v{oX{9>b(L3Zr==G%kWZKaS64*<xFZ^mFoVK^Ln$Q*KwVlJE1U8t)ca
zQ&lYOvOTl1=!Aqa3X+12GU@<(j4|a%*H1;yulJ;Ho%pz@eNPt6-w`&jc*M6@W-{!V
zn20TLi9=KD@+-B=F4kwYXta!n-UWNq$~+UFNjL7g<X9#zRy1x3Z>g3Ueko~-D-Le3
za<1RCK02X5Qg*(@<;fX;wLXwW@9{0Wt+hQzbFpz2TkdGC{USi5WsUWJc4E&ck$Pyx
z-N8)9>XT7#<<(n28a`~|YCYnQyw@>Vxe!|&S#}tUHIKd>6OuqdNycqCz5fnN0C17+
zY}*BZ>8!29sgtMnEJyuI^-cX9_LuF=OuhzENFkU?)Kx-N>E;z;_&%=TIL9f;4fgb;
zRD0BL0n(zS75gyjl@ty4H?;dU?W)lo!D}fLlHHcuTRVP1eyLa#symkX5(u31x7}I<
zQ=^WU7f@PHs%TJUud;VuQ}a#Qw$2{uEG?wFLoWDwdz&|rx+!QsPPlipf;*r~nLj|V
z`@(QLzy1Pqe5%26mwv={MErE~VL%>{_To)O8m76T?_SsB;S5Ym&uEWhGdmSo_(e9D
z2b!9$R@G->?<Zok@QS|>P%tntk=s#6fm-eMwCzZy3%;Of<*h|YQ7(ug$cyEIZfq*9
zMS)76+j6o_l)R^ljFUO4Jjs5PYl>hh@|YRxie9>un3s1{R1^(P<mYEKn``wx<ZJxv
z6P2=ttTRFn5ts<vSni%*ftCvj<?G|gm>S~S4nwW6{PhIu^|++X_YMbWe;sbG^j69)
zh)RB;8&z(ucHOuY@KD)hF`z3qw(K4_Y>Uq3%((MuX&zQpTBbQ1D$;yP3hrqqi40C6
zF9ik|?ZAR7a)5=^h3;vKEw^B<({7>b;~8=AuV0PkC^XA=;l!c2czUr<3u<LhxVgPK
zt3AFzC{Bm|vj^`pN|ru(my+j2-j+a>sA3%N-IIA-rkq2sO))d(`wT_Mm4`7IXJO^q
z>W@;902Rs_Ok-j-^0AmfGc*9xox8|XosEVRBEwrRiFz_0=nWt<RY4g#zBF2HDZK9T
zmg0`%+T`;RJ2qmRoM8-J@x7s%!NO0>^4d5xc@xiS4!u;Ud>u5Lok^izJG(99yrP{$
zW`fQZ_VGQOH{Zq^%E~0@|8y9=n@UZi${vOScBZAZT~<MX*`31Q$Hyn`%e|WQ%o#EH
z!{m$kp2wH?CI(*_Emv+A55ruN?SZ=Y^x4)F;b~z+xcO<2si-IVwn#M$eK=2*kX7|0
zIr%$Q(R@c@Y<Rp*zww0}5!uX;)N>5({v4S&O?tjwts2jY7X$M!?{K&xP7Y>m?&E?8
z@&^$S5lkPWdGKJ7N_mPxUy&q7dcoC@A(0f(A2Dz{mqOBC)Fo;2HN94Eu!+1vdP+cg
z@)H@6)g%fHM0E`V?3(#%X#W^``@25|24wfk!>Rt%;%@AnR*vB0`wc}j%p4p)&)c-l
zEpn>tjyfAM)2!@_4<%uJh4qr*IYLX=@Zc%uAJTQcmklTX;tK10_|Bf6Q;8mjfBa`q
z^=2si>xDN@q%Og?Ul;%LgUbRBq+6v}9G;61l5tnFo!#&MfCerqCMKqhMItj^0hovz
z#}5E<H=h7^wn12UczRkoLpiW}8|GNRGd+#>e$acGv0<|T90MT%f&Qs@KrF{y_5q{S
zio!OQ4AG{*)%EWKs;b6vgtu=Sq3-fwMmbHoJPvfBx^7ZT9I7;iwa}!Vucdm*5J}8T
zF@eRRUHgL5^$sis_XIwCX%N>}y&fKH8(W?B@@uPG+|B)6EM#o@yEyHPi=|VP=11Lx
zX@69uS0${2t=2od<_+Wgj?wGq;A_&?KN)dki!T~s_)Av$D%nRTk`27`#;cy+;GpEP
z8yY*XrAb#(ymVoIrVk;N@{}e>6l*CTptu#T&*c<I3o~O`aUb+NC9BDcucbLawWX0!
z2s*8zX5VcPHWh0Gkg^{x?|h9duV+5e%OK#$SX~$Zv1xg|TT=wN*1C|-&=(8#@`xuh
z58)8e{_+|LcD8`NzKRpal?lu?FXi&A^RwnKr0V|uzG<~mhWRV+c}fF*qpbceSyZIe
zWL<A%>tvG}Lta}ncaza)TvbBX8|`x3aK?|zXvL1MvbMfG%=B6ts{u=CyryQE=@KOo
zYrFno3nwGXzHZtrqS69()suHdYgwZ<aPpB&C13oeG5nV5vgqZJo`UM~#Sy4eyK7S<
zs(5u?NeT$!Q>Gv_FXDNNYCY{$u#L}h>+bo%QDeVQh91xqRed)g2BLV&IKf<o@z}A&
zt{U$N(5z6N5liPh-NVsxeqQPjZuOOzfrdf|6{Y^sp*rb>z3@9|!OM^<8Ry6L)x%!j
z;h^$Ni4oxvtcXWi&YNx71^neErIlNI>=;Q#Ia%}WqN}P*3?w?0%aZJ>iFSj%EnOVr
zGj@o@0Hq)|ERz(#(rM;YsY^es%KINh2~@b(6%_ndZOH`Nkeh$-r3=SSu#LpUCFJ8d
z=5)mxpl8He6~6g~)5LRpzh=z^9g~QbFE(yl)9*4U>s{q!)X>t>oW!mc$A~`i_K#(?
zOgXvoZtbu&g4uDjDjT%vz)3S|t4D2P2(5oi4rOuId3ZpZ#ZgQr*>|)*)t8@bYs5c}
zjZ;i%+~km#oh`lba&$iTgEQb`k}&e1ps+X>Ba-bl9%J8xN15u=RV#W#Pe|JtH~)JV
zqvb$gF}frdC1CSy+6zkm$uZurEMHj}Ie-89ddos(58}Ib#dD1N>VNO7aMw#}s<uL;
z1Zc=P$Mv1RH@z3{z|j+MLGAAo?2=d`JD^y}wbzM^3VwkUvTH|kK97DLwp;e!8W#)f
zcDd>mXadE>y~3h}8r=neMm8#M=jG+yiks&O4jI<lEw<q=U%yFAtOK18B1e7;E*#?9
z#1Cm{-H)T5v@+2(XF9adt+|XV#`B1q3AuL&kSeMnm~=!Ve=xT&wCobD?g7>8lIa5K
z@de(_9Ha6Zl=||qyhgKkiZ8xfS|cR7mC^_bdu8$9&;dB+N}}E5kC3Lw!Y!<QtSEer
zqdSx=R8-&8{HpA2$E7wFyS|A6&ei)+F`X&>sQg$!r`kUK>C{(`C%gC4G2B)u!%N)x
zdc7Z50rv9F&Y`SGzd}t#Woe|3n%=+8e*|QqO_)L6wJWppv+DMQeA6Hkf}vHp#{zw#
zptw0Jx*@js=XkM3XQpC8&k^cyeSJYO;ItN1QZXYL1Ou-A!2Tl-<i~jLVOXB!z?VuN
zsik3dx1&8-IjOXydLwd%8&TVA8@t<Rj7aM|%bVjxHu6*1qmO<I6SEujl0?Z+89}gX
zlvVQK6|WCtV`ESP7wp`K_-y{}04FY%bCBUt+P!BDT(^mdy~l5i)|he2pY3e3jCaIe
z!=sS;fj@GYWANK$iZF#mbXPFhwtGS4@Xjx@)sO_E-G7>vzR@0WSy-{jp4b5{D*TY4
zU+{MWGy)z5%(GEAD(g@uEn)NFQ*bU%<vo+Ofss3-^rmsV7<QXYG2uzZu#$>FJW>I=
zWA*)y2DB!8n>Mpoj;@P{qzC1MJ~mU&OCHvJV*YO|ph1oV<e<CcV+&OsrDl7Uhu040
z9DO>odm)_xkPIpsfxtW74sWbqu-fnJQP45hTAyCZWsp~W(}U?_I|ThHL)D<~+1ZdG
zbfOZ0cM-K-*Jex>wCfz)p!kpxakQLF=5Uw~Q*?0Pa!iQG)vUA_=CJ7Dm~hm4K2894
z9)~?~=wgA4B(SAIhK5F5R^4NJp;k81Y+JdiHXvzMp%VZ2(PsLkY#~WD>GuAHfkTXo
zKx=F33<(|6N8qkdr^l7EiG(3Ny*)%k#4`L-)*xH0jBjXY=%G3|y4@0H_$cF+43)8B
zVlt<`X;MX2)UBRLvyQX9ixsiDj<JPhek6}l-VEyGAIUX6A3Nyn?WycVW+UhP5OeQH
zRn=2l&YPJuBq$U+BQwWEuCqWHTvN!`|EYq?e6TEDx9JOg9`4_55ElbIJ*VYoUCR~U
zgVXESeL+gk12T_A0Klmr(GzgjJskmd*!`gjQi0UwQ$#4kBrgH+9IIh=hh^I{(kFdg
zUDmoK9^cy=cgTkBwoDGLUU-QR6BB2&I|a($p%kBdJMC}`7}-a;kGydUr#qg67mOb{
zs-`nAJPsX&S~V+uXHSwE_y7^leD=ThPcYFvqOoKHtaZ_eAL8N~t|zrepD_hp1#5!a
zT%SjuNIDV_5TKuAWo0QzzguYAqh4dtD}5O}{HL&<FyAI_DXBC2wh@w+yFRPx<_?eV
zYkXm0cdhs`dCr&~o({$5bbfpS?gy8|3u|i*`&bzeUFot5M+AFWy7#H64Rp8$8v8T#
z5&>COE^P$qj`4Z|P{%pT4|rHjddu3OW=&3`VPyPQ6H{Y4;dxMkQNJD0;TOkkX%oA^
z6WK1U#*Xt(6J$v`T4*7O@Jn(#r&y*=uy}bZDXtxIypr}CS}9x~3NcVSnzH60d?^10
zY-s@G4IdbH+Suu=F#P#dk&|iU{qeCY`mB)VD>htKGWC(>UY$b?Lj$KSLeWy<8Fy8U
ze}D1y{MC22*Cg@%_!nvY7z>zxI|NgEiheLBbBh2)tEPsyza~-O@_MI=lW6G`X)_0q
zMie6F@VGu)RNWiTCc9pMhdj?R?`U`RX#O~7AaB`lOiM;)S>g>H?gQR-yEMn+K85-x
z3}`g>`uiG}BlQ{^15(D}l5YW~*H^f!xXk;ypfbR1sQ7Fhg6#V0>hl8x&ykO`i(c-?
z_{yl+B&#%lWP@8oWXVG^ReZsXrR&d-(9mg6QaP@_&c}!#{W^5`6tR>wt9~f?#jV~$
zS6j;}T|KzkCvwqKD>>U2a3?_Mpz?_mHm1Pcprd181_49=CPFCFZFhB2)=b2n6dT+5
zP|!qSfp=@^p~gvmU}0&pAJO*+W=)wHH>e3mA-4E)+@k<W<<+GA1i{pjO)<&Czk3=1
zdbYxln3ywSVeY|zzBRX1Yv|;VXI*yhuHl+IQ1;M!ao$}pkZ%Z$6-Ra_7ujvf!{wBA
z)Q3F1$6x~UR(|aD%()Qk4diK7Pi|c>d^B==w72Hs;$*wve(SFN{=U8p%JI7u_*Ii)
z60(Qb-5R&22I@`vROGZ>XAXNft%lJw>C7mh)87SJ0K==-dw1_jjMYRQ?yT4(5)$cW
zFTlhGl@R}HcQx{#A>_}9bQLN1+1%!DY`rxaYwYGq1&EMtwvYtia3fLB{qdJufxuZ;
zPR=!TrP2R&Iw+R*MSmktY)Q>=k^l5Fx5xhKXJmvuXDPoP-{HI6^0T$O@Kd1IWL&h!
z4Psv4E*Q%h8R%8sFt|T%>C~hf6{g7zr92wAsCggvEPTBIiZEPimF65L+OP$p@UU9c
zfl7VM02H&uMa7QmpO?zHySrjbN;m>i!}Sz3vphX7VRknI_NXcCmb#)HWaX>U8Hld_
zDI=0{uN(57+3h_jA^>>=uAVbaPg$9bmYbVeF#h5N4`&4pNm{<LjQq1l7fHji`*B~T
zrxS*T*7A~(lMHX6QqB&1x`L7puhfL+PZdVs^#~}|rSG=+w~;<f7-0^>Bp&Fi1v0oR
ztH`vxj!HKbMGz27ontWvf|J^x+S=Nz21=relyd{C$TNB6GVk~1MCM148gyo(3%anY
zb;>`j-E5_T0~;o1ays1sn5c+W0Wox4m|#4XbIkkENXqd#sle3>9(n-`;rKmfHh;WW
zwyeNKVPC(#k@mjfm5>mmK9_e}ndx52PR@uS?NL#ID$KA>{nvu&SlY&v=mZeox%x|Z
z&=N(e0Pu6(Bh>}2-?7ZuN~8h8>_S%1|7+v)|MLf*1|JNTn)jpiMf*cTL$&nFH#axY
ziIv`{AdqEeHPdAnK`W<Kj+BSYU;%j<nV08(e{HL~l61;VgT7W1U?L#KBO9ggHwAZq
zGtbVMk&$Qg;uViUgs5I`?YV&I>)s*0NKbUH5VN1o^vjuA-g6~+WG0C!+1~v%CcUcF
z`2eMJ<;*XvzA5Y2u#&LeF<x-?y*XQRGdKS%O-Y#fJh1cBxzW~0NJvPlx{z8jC@eTk
zN<n6%)J?-$iPeR;&f_b%6kTHP7#kZ?3Olc&&k&}w);tjPU^bXXPDyFYzCGV!$Oy?C
z=fYKw#56oc>Ed`JKVM&-PJ6sclv~A40jRwY;la(%T&kz2Kk#?PTcsISxUKB&Smx<e
zIq2u7M5RwuY(Omvi6C0jMST@P*Eu7?!n6e(^@Eqbp1K|7WM?le?Y)54zko^r&>X}n
zDj4G@iKl9(P8-Kgj20H8{5eLaR1u<I@SVhk0@Id)&8Sed8UQ?rjRhq6Eg_c}wIdc5
z7JyC@5f>kJPP4au5uB9t;!}paiKeo2NIk(ypENhe?6q^g`uC?k1Wk5UmXAc2iIRT}
z9X<W?lVi}nfyQLakAvy{{qG9!Uf6i|z!%Rw<(NC%Heb|>jdC<TmlYLY|He<E;{EF_
zU&zi0R#Q^?<?_?9H82;N=s0$(K%{%`@<QfxaQibdUMJp|fv&!SJEl*WRuL@>=Mu_n
zj{Yy=Tfp>T=`aauWXnc&40?LbOi%aq^&jG|cAmcj$7-&cnwq6mZ!=;J-(``ynT2?G
zcqE5R{aO4JFn~**p4r*iM|-QOjlj>!wn}lEbp0tP7>}(W`6Wn+zdztMla9Gig8<h<
z_0nYYk%A-ibs%YEIn+tX(XDeHuW@liT|70A41_d<5Q#OgCRM^srYWOtG*J4>3;_C}
z68+wd)N{DN;Ki#ysi>X`F3ipfxNX`U&LYoO<ngeby<LidfvNo`z8lhW7{LPW*+X1x
zw*F3uca}x3U(^5mNo2#IP4n<!L}a8!ZTx+;%fr`zxHUTe+t51zwpiBLjJAz^2B~yz
zNhvbTd~P#*GENx2*r?tvAclvBi8ZqlKqLy!w@<UIlY7id;}w)BJbP#_Yb#4?XK?;P
z%O9(9AB<nGlXpM=ou0UDQ64|~i*?V(|Ig^l|K$)lB|ARL>SCs&8>)~t0AdLn19~U;
zsKSqwRa8PlBhX`jpXoe%76s>($2y`MxP1YOk*aJx_ukOZTQR$v+plfMo6F2Ndq-Se
z=*h_V1_yUl6z)R3YJLPCm~H$*dS<#Xyn7p-;;XnHTd^aV$E$q(K4M0u)@+wKMnU<y
zHf0~I5|NTJ?Vrtl>U>CYzC=sCWqRBpHN>@KC##HUw2P9PDg>0B7NcM6--qu2z&-QO
z-<S-#=g5jj<eaW)KmOc;{F#-VE`!l?rn*#%+wbjs{Rg~Qe)qhzzDZDVml=Ry-NFJ{
z<NRZprZwU(sjtqmp;Sy=*Dy=h+2T(FxW0JW?Xl||M_01AV{gT9ScqV#$}P1kmyOMY
zBjP7b_X|9J<v{(gV9gU~8-FQJC;ebJ#~fpRS=5u_jM!<jjlQ$q8&a1f0ysuE2PQg%
z>Hb_@%Pl79B#phJn(E>46~I@AiuIu)gOzbC0)S90K@U}0-ZPNFOCP9&ukUEt9?hNk
zF!oP+`s`i>@59-$t}6TW?voA-KZpETz|oyzj2a^dY)<Z+6;@R2>x#X%p(HGee@HP_
zr}ymHKK-1ktLv9q6uu?@=uZHs&eKL{S(?t52d2L@xWwk<nzC|8yJf5flOCr-T>MVg
z6vyL!<#K8r#4{x+Oyh?d3&~Nr7=e%S3LHeGR-Lt>p)UytLO>f(gE}w;<ihkEvEuGP
zoh;is$5+Ey`5AWL>(}Wap0|2_6V%5qba3~ukJZ{AIdcy(>r{grGS~XKeowjLS7LXA
z)QRIumohFN_O<~j&c9;YSW>qHCt}3B=uymWZ(k1@b>ioXt)tEyD`b03y!_kzyI~0$
z!}K<Pe{iP8ptcSJT7-@Nq-SKTaoYM2e|m;#v6>J&>pj(cE`H#S$(J2vXJ?1`9ZUEB
zT0R;qoze{Sh?pBikBfC{-`pi5lVwXm_GSQo`^O*H+g<BZiyT@~&wPRs^L6;+3u5){
zKCx%Ifs9UJKkhtd!=Jtv2OAqgmHU-g6!U*2y@&x(xvPY8BM8Hh&OUQD*F|+hf~b*v
zvzk7M>%?1Bw?P)06|n_sRCi%_)4jc&)URUQz8QYLeo!0!o<6{dsU^OhF`8|#EnN5^
z6F__=8z1@{5zIv0QOg`-*w>a$rGo~GHBJPF2B$E5WUiUc?g}a>l#r@sEdBHX3of?V
zKz{lZtv3>{EY&=F?Yo|(K+d0a9=?ol>vHt{DEk8k2L^Ll8z+@)A8Z+y2~tyk8dd03
z^L&{J^68<EU%m*S-kxD<HZgNp-EUqJ-cnWfy7i011OPF40AQr0WEdD2dO*r<BqDN&
zU-9M3&;j9e`dp*AQNq#^jx)=_9vL~QV?CGRp4}e&26{%@Q8*Bi)KNKv<-GS4K#X?j
z_?X_SYv?(M5h^wA?y=o9;BPdVjjE~Md-KMrnXy@Qrr+Z$6trYqrp;jiDi%W}g<zHD
zAisC#75l&k!B|OA)%urNS4&xiZ)q2Y{2L1hf<uO1|Aom{f|-WKh8{Zwg%0qCRokyi
z^ll6DutvqxPIu_sy?YlR<>TYy_-ebUyzBCd4$BYd=%hw_3iL(GUNn{!$J=2BcHm4m
zUxmftF@lb)w}69*o`HVNdb0A>x9Ndgt=Q;Tx06kK7|vE3>5A{<tb_ME-KG#=Bt4v3
zP=SwRf6CbAVoTt0dZ}%$t*@W_`Sa%w8S_iFLLjEtT_2`pVOgLgdcx*qs;uFf-{9(#
zeClXET4=H~4Rlaee9uR?h(La%MyXlX9e#^=j+Rv0_W9KP-lU7T^);>=FTbZ<KXyHy
z(k~Yi7tj5GpE|AHFz$i~sOT0Lb+E|1B4OY~<R53mXY}e=r(Lt$2$OK)B021zvB+-u
zS#UHeHn!UIM@uSgP@&$%n<&OO3wIEF#E+JD>Itztd|2CUPhI|rdO{NK-X@RJe43{x
zoV2~?#mqjltL7wMYsDpb&K)de<u(?%FlvSebPc$;lVb18z(NDpR^AvhBW+}8oc7fF
z<U|oo2~BP7V}s)+Yz$ElU4$~v4C?MJ*_0c&>4>Pr4-2nf+p_ocGM41z<n(^M=dw%;
zKV)%vQLL%4Z~0-J{$KP!)-QgMTeWh3@d*DGW&d9;DR`Ctja)$G1gDKCm6qFp^5-XM
zM}DtDrZ);dV+~n8z{SND@##~}&o<D<amEqCYb<wI5r>j;Ba4O%rB}Fe8TDxH-+yd4
z5{4ZBCF5A>V0^X<W~4lp-Q5y=m1d8NN9O~Y6e$0)@Cff{d8L8I3S?zJw-`Xs+&ZOB
zOj;v=A5Ij>YQGLr8~n9N7W#wTBEXGZkE6bJ2I(uoVmpiaQxzYCZ2NJ05WB_rhyjL?
zR}<eZGd)0q<fLej%WT5D?OE&xTm&_xBwTOdBReqVFW^RcdfGiB-mV*cuN#h<C*3yK
zZ0Fkxizs%%?XhDvAPf$dk!v?dd0LU`v#HJ06W;M8Ot6=Kti`WU90>x{bZ>!ghZED<
z*+fZB4p$zUJAbn47|QME#VCt<3Ebl1BE@^cQ<$Y6yW`5`Ghs`r#KgqZYZBHxFDJ*C
z864%~1iFzCskO;M=f~+;w)68sItB*KsiN;`R*4>rr;QRd2UoAiVQnwy@&l23LHNvT
ziv+6Hb8*Z^26k#jdbaGWiYQ->?Z~jOhWO{to>f$&H8eEy2&_h&ym2YpXn{OBcB4Jk
zMYd7oZcKPiE>o_R*LccqdaDkA8jr5U?DcV1*$BSp%N!EJcwP019p@q=+btuvU`K8~
zkfx_MO*1JqKBI`S$eRJNP8=kQp=_&7+B@TUA#Uz3UdugKS3Ok9#%80JR`KNI7&$UI
z7<B2pvKz|DlCfL*P80L2*3M}W6Pr6)^3m5Hycl;Z*yr1jiP$I53aW(DadYo|uf&m5
zq?joqA(~Zv7R_a-X{o?GDx&Y_83=GBh^ChA)35{R14<;NaH%IsNwD-JGlxaKi?|-U
zVn&wUkKZW1XJmik+}vF+iJWJ$jCI*v{@K)|(S92|XFFVLg5O&-wMF8XeSLj<H2;#o
zQ)cH=eS8J!bcA3|IKFho_z~)-VnUGSt9_rc78~{pd%@tSqOI0u6w;%xf2QYiuz7&P
zO;yMZhOpz`Li4?uL}fpa5rkJcW0DGCo^U>ooNaSQ$AqJ`@EomaSZL^R*yfVES$IOD
znqT9*NfPVo8k5imMHR3-Wsx8X{?c{_9e<$xBdCyE6e$`;Z7QsPPsjDv&ihl<=TaaP
zQK;Qc-2uE!W$t4(4YnMtdJP2P`fr@yHM1@&^SRe>NzaGg^Ta`<ME3<f$oheT2`Z7!
z4ocKY*}+X)22SPc=zOH!xI#R7eRADbuUtXL<?c2IrAb6oFpudz-CsTk{!4&rLksY^
z#7?Br*7=l>h#$|{37}X380Z9gaF^Y6Wcs+Tr<cQuI+uZk<z$th@x<6qRoWahny>ve
z7~za%ygRY?5B9aWEelG?%tj`+`&%Q`uDl*Ed0JiS03y&!`PbG)W+uKE;>ai`QzZj3
z_Bw7QEhB^L<#u!7u0bkAuZhlmdl720RC9?=J=V##@2)K+^kKdtdEQDpQc}-``rE@F
zKc_C0fEd0Kax)i}Y29aw@`i?U;b!W?0p%LX2zjY}o}o5>Y=!=~*J1|l%K`oPl)@=l
zX;L9;jXO8b|4!631Q5WJr2W|*iZDh?ox4j-)%_;%kK++w>>fOL0D3!ylHNDbQ5AO_
z1=fzFWTZdZ@W9dmjpvvIgZB07*a+SG{n27#Vsr|BEuYEmf9T!~Ug>^l?Xu%EqKZ`7
z@gF`24M|XNCniO*GDl9?B-kt5J^u}s$y||C@csXbJM^+hPx*E1fhi5k0ptR_#P9KC
zGpSp1K9DHZI@C~Mm=htV6B-s;HS1U@k{T6the@a0mUiBooM*Nh^db&bfOe1EKkV##
z3n0AmLQQ~+pN|i#u+~mIXgNV$blxy6haYM-28Tp+bN5-LWke)KF0i)0&1O%P2)a>4
z`Yc&lUA-(HSqEN0P^}rDF6?}r@~K7b#METvPl{$deFxDfcKw*|$L6rdEeCZo%Rg@H
z7tTOI`14o|VbA<`?-3NFtfm&nX5R=>t#gcG`QxFcw2YjbcByMWfH-nGDOEl@%>=sM
zUl>Z7e*CZ)F9A=^`vW$@hl*o$dl&XnMz58Jx2m(+&$J;afusVtsvLP1dh35`Id+=X
z9Yo|*12Q^r;!Cy4nVISFaB7z3mm^|gWH2$Bnt`_D0P6y#3l$SLvgg&%%^YaVmtDwS
z@;+FdZ&##G9P$GkvDZj06<b|X^YF(ONky@8If!9RN6VPxf#cCCH?nZntQu6dG9;ce
zb{Dj@i^3FrPxpR{Qr7PdyZ*`G<>~45mk{R)13>g}u=7yl5Qsnyx5eW%8oEFCH|Jyr
zOIL<lKK%`)sQEenM<k_$CxZ)CCTOe!?+L1isNCnJM-J}ld^21TB~IeqTG(Bg40?GV
z!v;u#a=oOA3&0N$2RmAzT)+Bxm9R<ijf*p4vJSeI^&%gqy^isC7l)reTis5#qoJD2
z!auJj=@sv7@49ZzE`3E^mUtF$lX%X2yfUE1v~`yWrpbU^j#iMV9eM}!9AjN{Fm(1!
zBctR3*1@Ai1NIg<10!nRQmkJHqwbALvAxW1s-+E4ekd4#wT)o`mC1lTc`1Lpotm1G
z9Z-M0c7!s-I14Pl9zJ+%IsK;dasq6t{`?RBC?UJLCNRH86TI=eUr?5II>azBFiZ;!
z^3ERa0LI&qD5x>|Ud-gOchH?R0ms^qgef4s2CFL_mNfZ#%3rt3_{R1=l*br$`7MhQ
z{V=goa?yV}1ytxieU`L}4EpdiJUo2zOJK&wwl+D2({6FtlSv8txeU_d+g06Xg4GTr
z#KeZLUUe-Zeh0iDMiBFHWu~V)ukIz8W#15;3$T(P>?zlq)L_w5j{i_26&`zf8Ecz;
zjchBKWAP8{>mAYDkq<`}OVY)a<Qq|61a;C#L;I~6VXy=k(Dc4oclWe}ewWOItgFZD
zP=CDU*HBSe9?4yS^hdNF7V_@WIajiqa#5&iv2fj^pOx`4bv@km6Av3NA8vPcbfEqM
zr!X<*%7$tTsWSN0FR2Daj$QMk@C$uFEJ@xq+46n)ptz^66trR^_~vJqJTHMmnuo9b
z_O08~GYe*e3f>IHfM9%GUo1yIxQ>IP`t8H5TP|$0w6QJXYD+)c+dl;dzam3=NNbCH
zc~}#W$nnkK>`dWKXlNJ%9o-A8^{67&1_d7*o&%=?aF#YiRFV)pH83@gUhaC@Nu@3d
zV$apa(a3zMkiwbOKuSRg^2d`S_ho2Hl*eu}{PgkpqnE4a132)?LS#(Z9FtFBI#4AE
zGR6TkPdDuoqC>uM0Zz9c$JegV`-}`%h)>S8fZXtCeuoTo@$K?a=5mNSyL=3&Sd+41
zqJo>@@aQ9~Lr7J*EaZ8nct%&=C7)UPEo`&-0Dag+i4dbhbX`oiHZoRLk&Q;9igPTT
z$Duh(xu06W1ct=xl!O`lZ7+iM2s7ngjzWvqq``+b=khc1G(k)-`7MLy#j54;QAcQ>
zGvD`trvNn5w$&-h=+nzbi2|t2*qo5ixJ|H{N~_YI<A;e4-HuF<NH1?M)v6Rji{V21
zU%%c$6`72ASqsti{}rH9d!H)EYv0Jh<x*-kX?c`K&ha$*v(uK5T0=_O5C9ju<RgP=
zXO`o#tuAU@F2F-02BBE+aP|zstNJ%qM>k(*#OWGUZ;mA+VmAv0#@6=sQVud1#BIJi
z`P$XKrc|Iq=<e?Jiz6wTF|@M*UJu;0Ymi6D_tkEzQGO1qj)C90xqjtWa%?hpE4OL+
zz(kd8EYJ&vVbGqNH;y<{@KhjY9?Gb}d^~*_MT2QZ1_mM2Do=o4A$K<>ZN+W1p!Fq5
zOyX!~8vQ3a_b%L4$B7g}Kf$9tC5sP-iqg`_hwZMJPSC7_mp0E{N765&o#+=y5<yiL
zSu%$(aTb)`$kgeX>8n?+(pRib7U!eelcPa$qxjAdmy`ph0%tbAX*l|$UC};OT$Usj
zpDifhWBS#~bvxrhZDnPflg1rrCFG=}lG?<GOLI;&vfX0p?XVGQV=2ESG2rM+;6t_)
z*ClMM#*Jf2Xp!Y~baWk2d?)-JF(94Vr~e09JR}W8OQwe$AA9<5Z?|YDYgcUjTKgl1
zpxbIf&E6J0+@{6qUeBkIFbE7U__03nXElk7fA%~+3uv<8M2^hXAK}l{v3Q`Bj1>+b
zz{e|_jX}?*fk*Axv=e6HvWsZmWYPxze6`X*SokMdX@$H3Wpf((nM51z2s+8I$0lBl
z%h@?OszZnKL-zqc8h<K<zBQKs^_A+6bSQGGc#Ikr*ZF%7B1JCy;gWHhr{|8VXSPR$
z7-Xe2z%IDJGD#468a8Q}Dx&cE_2aA5R*Ed6%3O6%MehHkr*}O*rW(xGiqX1H1;_re
zwz~|?IdpmYD(f#B)$zUm6I4OJ@B|vSn-`?To~pr9{@2h7x7ehlKUIyFOKjm;`<6SL
z4?eyYbJ<xlG=Di(gpkc(mX?v$*{s%1R)!?vh`iBC!mWB}hfM~)+~psa&*!%wI5A#+
z(yE@DwFNmA;$mV^iMfXzphH`JncS~c@kW2^b~|*;fPm_WhWeNI*CwC-4jJer&tSJl
z_AQ2hW}A_trKM$;6Vr5>g$Y{hD!lAXeF$+xyD7D(Al=5Aa?DU;-`fETO|qTGnw1U+
zxEbL`pgXD^R?cNgpzylke<M0Ez;h7fTIeeEOt)$%r9pIZVKS%o1GG*JV0|GMnr-i+
z;k%&~bZ^SOIY-1rTYC&*qgu|4FniIgPSd9~SQRAWTot+C2+t-nRyeA7<ZvGLy!-?a
z58<n>jeSepd6T~u77S2af48s*9sbutKGlwE=XmJkiX%T&Mz)0Nf>*~#t`<ook+;``
zovppBynMQYJY?ur20}d#duNt-HkJbkp}z=yef^yp+`@ae9Jb~&!xUG=m6f}Z>>0{e
z8JU<)0QDLh&KmWSB`LKSjmW6C`~YEAT!KvFD_P}5zMHTOc=_5Ko=^4EKdH+qFll-J
zla0;Yowf?nif0}M<X^q2QHKZ25@4;)clT})-Gp_VzB007KKHS)Aa1@RS+ft6*f8Hw
z{xFKC{dL+8w$g7+O~z*24zr6Pw?c3Il$Ne8TgPVBqJ$>!zZWO`#J>N%HW9{PWf)z#
za>cddNU4qC-`%<d)joJa<%svP6KWHZLy}9v!s;Jk#dyyPOuN0upc9e8nFqE}w~XfP
zyup9*nnd5s*v!B<Cn@Pk0HFD18o7`oOPyKb0!Zh7au%H*pp&Z&7A=HWHG+u(PJ9KE
z9t7&tV&c47j;DflrG^lNg-_98ANMIC!f0d?Sn=>lK;e#$4KNry3Z7<*=POlZ2r~=5
zH>x}Zl)`})X?F?-4JJP|(|t;S8+w<7fEb<;I1+Ef$G|{$uIfcrT~GIgR^6KL)?HwA
z7A|&Lo%ZGZQ}O&C?+58>>h7>YF(B-53w++%bwXp#LkGnRrm?|)Sp51Qz+R;z5Czi5
z$i;G$Mm}Z1X8zwQ9^V6LXm-^rKC>>3(*E+TD^#{ZUA)+P@gy3(-rMH?IjtcrWqLY@
zl5mlQp8n$~!o%I;;7Kv0!~iWZCb1GS0RAJGJDfRKc?7LIpX1UaT3ShrY-Dv-7W&x@
zj`eISyBX(ZROe-)*uUQ0&!K(t`D7=P#b(^(HgLO}Y%}aju##Vbva7d8MR3=pt5i*Z
zb<JS2-9+SYcjah#juG8kK$88s*Zr3Vs?p6rDC`>fQ>ya}m>w~*__C5e&_9QQ%8gr0
zY1Qj<uUx%)zOOdEi_0>~VpBq*V@pe$zw5o97;S0kY_syb)=1_Y6nUCq8k|Mq!+zKH
z7gL&QFRRyohTVSo_!wA6{KeixhWjiD!dB_II-i)({xXIW-d~1@aVl?5FSz`0^$~|C
z(W^v^I5`WQGOB}B{boqvf)kwo24a(=<Jg3+GfhKi%_-`X1GBy&`SxRv9AXct_UhG3
zk?$t4Y#corl{sT^W7E@T+;{lEUIsj>7A^l@!1gu4TUoB0*1w-5s%FxQDD%^>%P5>D
zs7&7l0LcBzBs%oLqepUA$@pT5NNgc{LR&06VQfs``gQ5DkZVy5G!14wqx;f?0=sAH
z@2Tjev*FHm_#H^k9sHniYIb3+$#wsx*1WFRm4NI*L$oNCp!YM}bn3$KH%FVq^p73l
z$Z0Mt2OkXFR<=tDm@b2?E#Lo8nzb<fuceui|BFoI=YVUJ<Qcp}fko;1^fJV4ityq7
zP?(*Y+ratFj+o3`6>l-+T#Y{b+1B<;H?2gBKEhJLX1D(6&TcKFyVvwSqQy2nuR*PD
zhptUj<|JjkFtU_rdc#Mj5GU{vEwn93Ou*OD^It2sB@c4qyFV;G1_deZN3o9UU&EbN
zLYhv8Nt^Tc>+J8#G$p&T9P~_n%A(~^5@&p(0os~1*g;{z06@B)jM!UhaLDw#zc~BU
zq=>TR1RdXElpu2X0R)gNfAVDn26Re)DlE_Bxt4=@x=3@JldVa0)cUQz;BpCtTDxD;
z{{qaFzJ1u81(DFuYJZ+vHKy93>xy9!pfAb<exdhqHA>gJ60%(o<C${Lb;BYfjWrT>
zc`<ROhn1u^c}9%v01HIMtkvSia&aL?-eW8LgXbijIQ<RhxH?W>fn(|hCApoM{pEil
z#qRB<`>fu>cy@hh)Q<4GT3Y6%4=eGR_S_k0Db2~ceV>_`0)WS6Cn|nj2@-IY^sIEx
z0FMRHQQTHzYN+2iMVGw=zTi<*-E}T@O?5EC<nou()6pqOBr8*Z1TFy!&vK;V<1OMN
z`wO6w5*Po`6hxkB!?yddD&DRph}_}%stQWYq$f<;?m-4w#QGQU*4uyyC6C<LNem4Y
z*@-<+*fJTDEKOe49JDVn8Iik)x=5OgQ$x@a7QbX}@=A(~n39C$Pdce@hGz+G2n)P+
z*R>ue(l4nugA)=ILN<K%2x1at9{WWwb5XveAS0B;c|Ez*kyi;U<zc`IP>fN*!B3(;
zGMIuKN#%&cdx;30RUtkVG{Wz=CII$EXuM~JdE14-#P_o|Ly7+ffu?AzvH{&LqVxm!
zIaGaYY{%bB9ed$KvNUs;6u2&J;w*G%*e8bGWjFROEdANp+4=M5#x~EJ>7nbSEc|P>
zo@KHSWBZbMT=nh6x4^`w_;!D%!SN0%$Y4t6{4(ugn14hua#J%UXY?AjJ3!$j{e23I
zUztoU!m<`U7uj%SsB;6hnC+~l)7;6@EVZ!F&A@kO(#hKKeZS8lHv;7YbI8G%J6X^X
zzEBEw>qH^9X}k+I%HLA|JaeD1(N-(m|9vWYu#S_&&=;*L1VA|0bXqj-u_+*~8?3*r
zp&GR6+9%)Ap)+e~`I-KJR%3{+EF&}|M7dTuj9SJiU1X*%34IjS6BJeP3|Ck}Qj39}
z=HQ@r0UM(>nyRnbk}>IMN&@BJ;muIASf%l1-%mB0rR2$X%z<~=4!L>m_54XhETV}t
zEAL0LgVvXU{v7c7+Uoc|O?a++G%FZlP2|2ckM_1Ygtf0Lvq~vQPt7dgSE9yy#%^7Q
z`tsMpp(=wk{GZ>nqJPz!zZU*yzruedBbF3_O=|9o=EHo+>t6{6OF|+J)sjYchD9vY
zihvnJS2_L)mMorckE;5H(UzAFDD$bGV%-q~<a4~t5<S%h31<QF{&TalwY-_&cbvC~
zh3JH+v#{E?wQrLzs_r>2?k)CLM|yZ%*t!h06*w%-dK4<lY(6!vD#~amK7Ss)_V^G6
zR=h-UDF@P7aN18mO*?O#b#PfOGd^%en|8jlOD#1!IYfUh{_}`ZxC2RNlbjQiR%y!c
zqP;XY<G&;7nzx8hoIt_E@EODu6j<XLTXq+TpTWJW_XOgUBl4_~aQ|$@_L<67^4YEa
z3rEYoJjXxS)uUZz>I4OFwDZfBl5A)w`mBwr>gL-LM{6YatU9DwYC&l3+9bF`sQe0m
zI>*WK*lYu+Qc9A*lQb~9*g+_Gl^JV)ZKT*N_~6&3w4ZUcI(sf~>3No9t{sUX5g~cC
z#+>$?0504uz6bVeLloCt<lT|qQ`EVc{Bp*q4>7`D!w_LweTl}yL3f0a-%sCReZVVD
z6I7kL-d`d8iOs;GF_28l4If}Wu4TiL*BJCe`B=3Iw0dXnx(mkZaFP3l^!)Al*PEPf
zpepe`t=rr^j18m^k{M0`>&}6^X=%Flzu-Jo?iNQBln|qf<#K{gn_fKU9fn@ijOPr>
z4N4%|PaXYoLZhOFGBc&s)o*W2(gQ70XXK{;luEV9*UwL9unKi>oUR`9iutOz*JW?K
z)#1|7ksfD|?T_hc=b_!Erp4`S{?Rbx*KUEj5Jp@$Y)R0mVlC?G{tY^|DXMH?4I$2Q
zR39qnqa4*9-Q#rbGg(mvZ$XTSFqN=y-EnETl~>{p?^b(_{d`GK>&r+8ziQFwUv@fl
z%db(Q>>p%jg|0z8S4Z5?me=Xv`*#s%=Qqx8OifIq@D@QcY{1<i#7>=BkhKVh-LB&d
z*p=H}$ASKpjF51q)<9#Zoz?W7k>FTYa}p>hq28_92XFyEhvJjY*D><q1kT)YEQbKP
z0K<@FWSI5-Jljg{-8B#m0m@@*-1*V>(aGFx(($Mz9$9gOSHc^iOjo?My%&08)q7pB
z3j!LVs_gV^O90D*deluJettJ2J6+r=a_NT+kUDh<r{Y>NrFPEi|B1v>D^BlEea#U7
z&Ms^t7Q8zg))Bp*n<Yaezu@z;Xg;wo9p@iM(yoropq3k?N774-7Xyx<B*I@ES7dt$
z7-GrF$a0CrP{C9syD_)Ln40{;n7H{!RkUumgZb#xf{T~Mt7_sIA8{en7ya>TRjOI2
zTKgtYWHUpU5db4X%*>YHxMoSHONtIk6neU02o_xcTEI%o%1!Gyq?EH=VwX@o2wD*^
zZyOmK2f>J%mhEh~_Xr7ZWy(dlF0Uf>38sKT14fGl#v)C~gR&q_*P?QT*Jkrd(8*bA
z;I@Qq`(Y`x)omRuLSUON&m<Y00G)<?PFB_(8*a~f0)rL_;yve8FmsrXm*I}D16Kt8
zqscEez0tkKiz7}r^Re5U$@W~7CXKsK5H}%1Vf(TCUd&$^3aoq;FdVQn#wB1kxt~=Q
zdH1gK7Ko2e{Ev$8)6f(z${fnL9Llh<v4Ph}(<yZ5kJ<DR^-I3JEyM#^Q7&XIRb`vg
z=*blHZByPhQxHgy9#?^taI15Oq*Kz0Q;W}OnaCN;SDU%g{1|M8l1FiM9vLumguTgW
z?RI&)9Hx7hS-UC=JWw3+vd_znm;|f71UjpF%@6B!-Xk}v{%pOZpQNYuObq{l^Jg%h
zj#z#nmkj$95#ire=J{_dpz4Q(?C&%8uY*eMlrJ()<jEI!-TcpnVCoJmJo}}Q=TDw=
zIjy<wiqAK1P-DyZ5;(3g>y(6HreZsLTR>DJQF@m&@X<e!1xq`|b1~tNUF_$4kFyh*
zw=gBjkzn7?@^!Ds3el-b`iHIV;^*-ydmCvR;CQ$-%0YUau^cIxfRk&AyHqLM=6q+I
zx>X}L$&bKsy(foImFv9>e<mVF{oJy!F@1HbhCx^{dW6#OjZpB1pgTgS=_?~vkg7>c
zLcBgwxYgq&Yknp`DFq(5Rpgjo50@Y}rYR_OV=lV)9^IryDOqw}|DX(LYz6=$Z1lfp
z!1aQa+~`W{wNTsFujw4RRGE2s4`!O)H@tuE=~*{v;VL6-6StH#nTtj9!1<#w8ALdX
zC>m4|x68SYT@H6Jv#6mM$29trkGTgoq40%Htya^c1KESfc_pljmvj_dwFTUVkNGfm
z|J~n{yFE^Em0+)i=&8cp9afNR>v{*0BM^uRo$J51!0HM_VS_^nF3khe=T&1~cv817
zx4SHpDO(uTEnIY7R)@_?_E+1fxVC<zTe-^b(zr@-P0)zHUAOo(XN^3hg7~!vd)MIQ
zWTAU*tnnia_p)+wy0<}JxoGIATNKG;Q^-L%GFXy0e|9!ihaF$M$Z6QXx{~e}*`dc8
z<T5Sw>J<@&apW>^>&XPzrpbfD!2WhCT^-K_%(3>(?(y#p>K2A{mk;x<C!77}wPAG0
z7-!A^M1~_uUFa>>MvKA0`3%B8PpTd5M4fx3tNnBr$(oyCxL4x*aHX4fR@S0#dTS-4
zbiO6gAIGjI6-;V&$vlSUL$PZ<(w}GnXDZwq2YJS#Zql)go65`7Mu;DC4(>8DWI0LL
zzMl{mCV*PqCrFhjIx!#lCBaf1MqVkXn)Ym}$WwQlzVI&D&OFIY)?A0LkuSZs?k^0p
z8~2uVCbB0UU8_P1z7Xt*(XIVY{jWA^R#rySH267kxs=SHiJb~jCyrpUYsex9lLvW1
zcdAd|=jG*Pa}5E?ntt;~0c_nP6TW|BrarEb&92pve*Q5~Wt%7o*`f>jAK05S?{7{0
zNBkgJlC-pUfc{_TflMKhAzgs72<c1SS7YyOwv!$&=GB=my)Ms<9VxM>@6(0d2;C<n
zZDzEIu}Io2tWA_24TYqh9L5%%3=I!4X|48TDN|c^PP!(jKUueMz}RPc#+~O#41$zZ
z>3fEQbJzs9in6kTUkZwss5U9~U~B9MgolL*EMg93fA+pTx#nL$O2yDJTxCl(D%=^_
zgubmwEF%s;Ps#$G;A13yfg(aVFl%q4K3h+9q0J#B)#HSRf8GUwN_bo<(4w~UBqh?>
zS)}`&ga3|+Z`oGdLa|E{8mp&@b0v^mNJ3HH+4!;H^eY)DtI672Q||9|Nww;s6oRf&
zECcu0@C0?=U492di3+t~Qg)0C%Ya&8lCk~4!4iSM(3roj=@OMfeUDwp1SJ;MH5;Ck
z?J|E$1Zo}>bRf1r4_isNrkI-0W%hK3aqIUtQMAC)(u%T^M<c1OfV)CKNyW;y!AqAf
zA!DZT1j~^Wz9x`zid{#Hf*!y$vp?a5@KdQp_q|IsiievA?1D_ge%qU3EMa!P%9&+v
z**!@Yy($>FNL-9&%Dq-Y11t_>08bbQk>3~@&6m*kF6t1KhlpI`f0{2d*E%Bp;|Gi+
zc`?b;lk>qcGw>W$?&alu^XnIYc-xVBN>8jLmX_oL{zHNW-jA~z@gV8z9c6L8`f4u<
zjOHa6iX%Lw<&;W1ir-0*WK|3tvl5)uk@PuPphS-U&3iCa?|oM_1C$A@hE$IptqwqT
z=OS*--<Gjf6023(p<XSgwV1Fqr>Acr`srT05zcj-jg75RvrN$yi65aWgQ6xc!i<tq
z#5;8bhleDq{V3Sgo+qEFdApn}6W8Pz9VLfnl50&dJ?2yy4#h+L8}+!Mdes?6_G<DD
znGXFINY^m+JbB|Fm@{%&tz%<z`{iVKg0PDawcw1q;RB)hzUW?%Y~7>7@q_dYKeQ&D
zI30Ep$C@a{&YXFi{e~WA&;&X{Ht4={mXci(MMSQ)C0p~CLx;SWxQcdFK!k{97I#6|
zymY^2r<~MM{M$CnZBm1w&_$qxborZF8z#BSj$_O4(MIuA+90JSO%*p}ZH-_4T(RH2
zGN@LT?DBqXc$b_{i8BV{O+m4(qMp2Envfa3gP9CM=i1d3U@d|F^pnuT)n5Ij6dEGi
zeC?f7ou_*{lkr>52`ZKG%sp@D#u=!o>n+}C0ZlkkxE<5BHCKrC>Ty^iTa45bbUs!J
z_gRa~YL;@Q5d7#nZJA&D_ATW59CEH?#Z%0JhlYgUpkwR(8zDtA`>^cgw`$LJNhPiL
zKeeW1W@dA%XJ#Te;X3}A@=UJYGu<U)_3EeWX}Zg2o`*3KOFyN<DGpg6V{k@ndvQuv
z9Df@-Q7Or>lZ?v>NO}`?Q~&ysyTH$Fqt*J`9&mFHIxqh2BI8~x{n_Fi)s*~Bt~Brs
zx$aa^TmmcP=d4fEjb>>mnx=(>`1{MP34k8`(f6|6Q9Vn3!GUbch8ihej|3Iad<^+*
zUy@NQ#$Pvh+3Nb{Yyw0td&JQTEgA-^Jp6ojij$MSuq4)nDN31ldV0Dil4(sHi>*Zo
z)~JOG=a->7iqE1G9ryz(yTrI_*5Kvnx1T+K)~)q()9T}5xEFtXM2z}rF=~tiXH9cs
ztOl5sOEM^sT5ey99IY@LRd6ns**SnzuLO#-YDMJDGKd&9cI^mTPy8UVm?c;L`COza
z^G&ZT9aPkP`*o%AiUthHa?<%9Ck2cmCj&s)vyOx?Yvn1+^r}lW%@APKt<-uTyMXkH
zUZ#8zedglP%@!WGH|7TgHyNw-g&Ju?)6d7Z5v5Abq^QH~y@a1XJM`b#?*!>4EIwIu
z{1G(qQ^_+8o3Z@K_u}|K##^DG9FKp5;i;HCeDHv^l(uoIi~3XG#;VMOpHC7SCtpD~
z!W+*SuaHy*|8@1oZrILQf}a1UxG*9Zv3Eh^&1_$nqwv?oLLIed&3ds|&vp_y(gdGe
zwO_m4edKMQGgzq6y>dY?m43U+rpA>vJTY_oYtl=yJqrm11ul%}F5xQyJ&GL7tdcOb
zna1V0vn)D9e@yRMN)s3Na2MhGgKSe+Wb<#uvi950VLF`Ok!wGfDW$?l89(3X9RCBB
z6=^6~;!KBneG)XcBMkQx_BM&FoMp@+-6Z@c%2YHnBau~6p>ZPhRWv_n2B<%0OKDlo
z%Q4vW+QjHy;#+oj#dyGRT=?SWcd$wDmtmf9xKjx#=bYU;DpYM+oCkb$Fi%soes{G+
zDcX19MIq&f%+#21o@y}jLka~9CrgjHt?Hm6zBJ5h^sYij&}s7(i2qAQjONotXTo$q
zZ>=clb)oLUq-<@u<%B7yxc9#5ImzZcmqst_Q4XEWZhVr%6>#7ElA6a{^Sk?(&yOyu
z$+$Z8c*mul15|^cbF3`c_klYV5Xd3w<fW^XUC~qQs90vwpo)OwlmE=zA9E)*#9()A
zVrFXY>AOR7{u--)Y=^^}`I`ofBXL4=szMKYPI|sL6<-i`cP7uAVz5m6qt1TR)rWVy
z&dza<6O%KVO}JI8{O!ZFa8JuCw!$fLEAGdA*BKsku}+72$u9PPy7ZLO<(KJ`Una5L
z&~LnI=@=R+K+c>AHLHH_N{yMI?Q;3BeuU?PzAf`ZnUp`tv1i*On#+Ln$Tj=4yHypU
zL)M(r6Bi(wIjvq`Pw886{Nvug^|_5<@xMgYccMqYCzJB!={voW58IOK&lZ_q5K<Ad
zF8)8fy>(dD>DK<O<ER6O7?dDj&?#L4(%sx3Eg;=3Z2{8V-5ny0fYRNaD$=EN^IJEL
z?!9NvexGOm-uHO_n`34Ky!n2wb*;6|^K*JVLh%yPD%Yp-aQEn4Kp2RSciy&Pe)Hv%
z{gusQPmIF0OlpCG7qS5<20jM3RNS=ws+Z%+5^YRc+UkPa#_`L_Ev@Bd=NCccj)jS}
zfbg*+s5X;`eMm9Kf904S@&2J=i45vT#`G@oQ{fa(MBe`Ko5KN=YFD{a7{z3Hv>hpw
zaI`6GKKhbXia{J-b^YX`v&!IAC8hMN^piVFwLF@>VryF-Z0<$UR^E~2d*FXvpRQ_#
zqs>@}RS7=6!x&K3<*HVPi)B^qu9}TYc@~|fq2W~7tcr!DCcX0PnF)@cSG6}uInO30
z#T5H_Zb|5P3+N}?m4i$J$7_?Ec(}=At=HG@59ay;(!lVRp<{eRO)C{`Jka7eL;0Jt
zN3Cy%+_;IKm9?+=UA4l5#0mS&;5V&JoUV)+rt0sN5Vqv8oxf$~dueQ8+wyB+kb-Km
zeH4@AHUieHHpSMq<B#aFU<|mG9@Qi^p~hNdev``FaQ}P?Dyd|YKywCah6Okpvm-3c
z9TNnoB%E3e(`S%q<)V*1NJFAg>dXZA)4?1A-4LN^BJ@KF=+O_gf`K~J`G_-c>asjZ
zg8n?1sZ<J|@d8B`fQY10@P(x)y)bT>@V+vGVQd<gko{$>kwr?59**uP>H2S5V#0JB
zrsE}PubR6|IiZJs)I3vtd8f6lweNZmws1}}*Ld{&TAIC+0!oJW7QoD?J(X$IiWY!E
z2P*548`V;raTnq*`#MEiNLyvp4~FF^d0Zi^i+|e2+^NMexM`5kqZO=i?Z*ffGyA2C
zXR(?}6pUh1a6Y6<GN((%&(#da8EpVlVVjZJG^bxLaPbZ*2Mn}iXf;dBm{%n(UUUao
zz2mOvE&;&}+I{u(s<3oJiLZ6DXbk9h)S8t?z$PnJ%MJoU(B|SM8F)-q#%0(YDgq1f
zi?O!$QaL#eB$=GDtq@MnH41QOmD!wM+nPvFa}h3_e>d!c(dj%_cMCD-p>A8%bMU)b
zRrZ|%i;;FG#sbDTise}D<$7x$1J`)8u%MvPA|2z1e075ZKtnOTc@$&=J{Tjy>W8vp
zQ}b^Nwgwc=zla;Rw~)5X%T~{c!sZIkd?TpJWtQu*zoL2zJrN)GmQ0er9opn88}mN=
z8|k^l6?&6+>05_rdj`~tAc13QX`d1(3(4PoThH|EBSBEc?~kMh&%e6#-sv!Ws(-q|
zMZf<NYo+mm=<0*<7hLbSAp<JAH(ZZ@u|j#UZQ$s9scAb)CBI?37PcY~R?4qi%?x;j
zfK(P~lGZ5C9FXk3@A#zWLV0FkOP3z?>_B#W1|rWl?|4Mn|6Qh7Qflhn+T`J6)dYn^
zzlZ$u6wle04roK>YUbPxFFoY-J0n{+9mL{#3=UzL@cMUgC6BdZ;87ULcx4^T2F>&3
zsDxUTqW_!)@H^6Sc3CC^Ge^1j^`-AzBV&XYLv^VldKrB*__Ch$4;K?v%UwL(bj|wB
z@mp+_O}wH<9R%(yw$oJ?LWE@Zhn~cZ%}~N7I1*&cp$p&o@VLkX1-&?Go5;jifBAtE
zDVNHEZXn^?Fd~uSW&`v^6p<XUIC<G2?Lzj$lf3N7KT48wQf?C9%jd)l3<nAn2yAs^
zM4UrqMXKj5Xt*X8w?j3u+XCqO@B5<Gg*Cq#nG%b<VMg<UFmX#;7{k%AK%#li+!ZxK
z!*21sB;&iZ#SNw2!v{anK<3ZK7EwgIW22oLpf-reut&syz>@Nrt4Mn&i=Fi9Hi2;z
zUdlXA^^nrd_pYhdj@4AhiO(tq({VJj6U?V8tLNerN}O^S>`x|gS4<q`TTGKIU&Cb^
z#84UzdX5IYRIcuvp%hNVGNt*~vR&^v?)6ryxpwzl@U6S-euaZi;n_K*lFJL{sYPF1
z4~xg+5d@Z2#v?l^JNG2j^d(_)1UW_Di1O@Z!frc`5t)^Afyeb3a)``pe4Yty_EdwP
zx!<44Bw0J2>$wo=ANNpG+GwHH@%eXw01iPCL2o=nTvs>Zcr(;a+|`wLUwTY&bK~)*
zyJGEJ=*Y<Cu3P>(TiXK!PvEoc{R>&qlYcPpUUnzm>+G=%oigu5<Lw#zaCw)op<!Un
z@<<YpLJa6n!TtB%#0#xj`02UCouvZ@RGEyL`^2AhUVjr047?^SCgOZZs>08o^1|f8
zoW5~(R&T0kh>m9frQ7i3#`Dj!4(BO86kG~JLXh{4lY)^Jyl>Y3MPSMWKDoF*<swm<
zk%fg14xKWwAY0;74i11(1Ge!!QnMJ-du3}q7|RSslTV+YbYSG@C7ltAzOB13=e>D@
z<n<VFpAIa_UwC<;bZx|Lu1?wEqJtUIP8V^(dDme@b-6M>db$Xtf_v)69(P+O>eQq(
z@;w-l7+he%?rRNF+k7pANz{by2@Q;6!|U^mxZPl$8xl`i@9`M$HGa35gH55CQ~y$A
zGw>}4`&CEQmGoi$0FdMC)&Ie;9RdUH?2;TnmVW&@3(nW>gV^s|-+(^wfS^b74ASGG
zCnTgL+Y2QO!W8g#>7!=Z#1$1;NJ*PqnrX!@4FL83PrRz9@>QGfFoK0FZT-W9S*9xf
z=Brj#R<Jkub9QVbnXPQV)9)&^Isbs9qhs+Za`1@F%v@4Uco=-+rfQife-berT>*q|
z#;}@kSRY(b=QQdtsQPYqTUJU%WeK~C2J#;UK<m87Hk=h<NymHsV+5UMWxo0;2ylR)
z3phXO=-O`|k1ro`VPvu@YF1i^HcbA(<-)~(pWl#z!p^70^;nEb{x}|~bB_Z_7Wu)v
z@K}}2GBBzR=uhrTPQ$Ia+Ma3!Te8e#(5SSZI_eTSxi`ums2y=!o~1959~;46Cv@NP
z3Lo&^y=&Cb+6ro7(2@XR@??+xF8$r4#5)Obr}ARnGZMnbW?bZV0Rh{{;tDFQ<a3kW
zdg(mgm?l;KKBZgQkz+<f|Az5^$Y6(_TZ519r746^rd_2F+3s7<%1w^_bF`$p9Ro(;
zCP`e@Ue}kr_Q$%Qjxe1ZNH@hdvIq4$FYlCI1Fn3CYgxUy6Ct;N>^eZNKvZachf17L
zB93j=wZR46&FHR<mgKOc+<G%Gg5Hq7z|>}UwB-d#ZO0YP52fUP`tbhr<&nbQz+t83
z?RCW=AQLq<H*Rju!~$Y_&lLHoq<CTg;<W4fj0`CtIQ^Y(i~3>4bj9vOu{k7zd9D<-
z4(Y=gnaEW?v<o#<0mnE_miNuuxDB7*p#JekUtU}H(FqWRNYVzEhh)|q@V1`@ZPpnL
zrAE64pQ#ywH)tSiXuu8jF~=EogJ97^(h%(!(KdmTzlI`Ltj^`Mohmb!V_$II<q#y?
zviIF_bF>sM33=dj#nGK)Eb+S+CnxjSaR9eOZVZ$XSf!bc33A+~kLNk`r(!K{Hm^@D
zYAha{#szL6=QeL;t0`$&x@_~7edfE7vao3dm%QJP0IZX})#C>G{CPpNg_h3h?9^0&
z%-q5T5)zsct<9#yoEI!9O>7b|K?xDv&D~1>+zpF)`{d<%I^5=HaYpNQt)YMo4;Zw$
zXjCMAv}FONF=g@J+3$l0LyMe~D#i);1`@zRvkQ9p+ixa1?$%B2uZ^oAPndgbrF3+n
zF18x@E65mRDX`{(9`Q*=z>g-oDA94IscLtfWoa-3`P@nl4hI%L9hIw(7lNdqN>huJ
zFPAwP8UZrXGc=Tr0^laf?mtjb`x-;P0<?Em%v(HH__2?bKznEGC}6emSZ-Xqwvajg
z7T)Rs1CGSgmn3NX`R*$tr8>Pw?tb_=)@-p$!x<ZVQ7Wit=-~52MMv4L{)!Km{f(RG
zR=q|@Z*bp$D2Uoa(<Badl2&dIVoPm;swNri0Y(anvWun@G2<9%<gnw|p|;AF?S<ol
zJkNC4Ox<uZi-=NY5{9y-0p-?8LPA0%NtEh?72-IQ6>nFYr3g|8W?fpGR<oIvj(=-g
zw?qD-BwPs0QrbGVZuNVrVx-{SC8e#gJQi9*0QJMh*4j3jM;QEV;K;0rpq;L^-rdZQ
zPAW5(dpqCf?qjY|`<>lQZ{gEjOo6qjnwvy8L^teS1^2_I&@A7~WL}61+WO<^Y9}(P
z@h68vt4tzF#|H`;<g)=Y+++r70ewyWlbqlxg%Kau4v|GPr>78#xx2e=sy?-)^1~LJ
zYgqZQa~!f5zfdgUOH83kET-h@w}6O<Bs_<KN#y1yoJeLJQqHY8`~5b6!133cBTtUs
zLN@Cz0vHQSKPxLHVtzFzN(RdYC0tzDRIh-p#nBnlUv8=6tq5l>++$-+GY~2z+OxeO
z%|I!lNOPY?)gK4dqoFEDUr{&2yEl-H2q=HP#eA9Z&mIUov*MqgT#!^4OS<-G8|&xg
zW>65GF$#pt#Ag<<c9H&aEO)H<>aYhS73>u&f|TJs=djUVx3;yBl8}V0r{X=tQBeh<
z#2*5!1$B;MA|f)y$vdc<;xIB#NX>aJrVP1Cn3j=viMYZsNBh=|ljO3b^z?6?(Hben
zXo?*b9_m0jUP4hPh+7zmRGCbz@j%w;=h27$fv*EBkVduts1JoF{eS$A3Sggh_7L)b
z7V*p+d0}9fsQh>r1r=50@ztQv&{zYW7w~nSPZLmzG9zSUEVjPMA}us0SGF054GoNd
zKQ|8aIYTIT=ZEv9A|D1-XY1xDLMO!j**aLS+>uKrBkt<>RGw2=|Gcx=)YU3NY;Yf9
z;&G-l!PUFZl+|QR<Q>5;{GU>-0r)6@^0~(S#$vokR7}O&)TFN%W%A+IAwMdmW0Te9
zB0sP#ZJ?KHgT3k7_xfT374pI4Om(0^bqXoLX4-7J<o=i5>bNR<2HkoGPz@fv`mJtl
zio@x9?prT<W;k7AD=fkl`}A`CioDxq&uK=pERK85rJ^hez{WOQir~`knuDtoUdX?8
zLaN5qvT8q9r;+6c?iZr%rWXl`h^A}!op!Q+ERV1q?<*)O+5t)F=qQasMqb`}SYubY
zUw;btcUg5aJs($MZ<|XOP(`>*SG(AM>N)S=PyvLzc^CkpxafEmoAo;e9L5WF`3#w=
zO_yo%fD$e1ZDFDX*f5(hh?oOSEl&E}AumifHKU5!E@?oQ=cDWJReRp^FBTc~nGAZK
z00xhqNE<lcH4bDZRfqnQRd)SWF;EJm$ak;2Bb<9^e*)Vebl)p1W_B^$4k`_kZ;-Tc
zf(eM_i2%)5e0YuN<`9Ts`;H)w2z*48pLKqdJUra*zehMxg=ABFke1U#8p|p4$Uwyi
zcJYc;45EjzvrMYensmP^Le^XJQ&%q(FQk5sr&1)TEj0keojBd*8VwI4qxD#*A-o;T
z%4^VXzr66u;H44kq|?INyP|*VAEcsqr#Bl7G?i#FE-szvk1qMkYCb+ba3@>LzPK4X
zUF#&R1o*n%)4yYb$cP*OXoyYKsZCU;*-yR9h$bem#ou%s1XMd)-@f8p!(|w#(=NP-
ze06xFkI_X*K(@D14A<7O<2S>f-*DPz6{Z5Y1cZGcQ2<rM8$dZnM?>Oxdlz`^#V-=C
zNg{!0^{)kh#yomvGI!;+bA;`+60N3X<lLiSx#*;Ux;P#hn$-j^1r=#L%Ne1{z4E;c
zuKtoAxRJcn)CQ?{yoGmaA4#hFan=KHzplOx%+1)>vAOMcoK=jF%vSjET(~R`K|e=e
zYfJGMvY(Z&5Y(CS*eyjqfBt;;?s`eikjz_88Uk7M43L7s;0VNb2m1$b6?uDKjpw3g
zz2Ve*<>v`JvxR`8vc7!s_}x4kWlkoO$w1(e>gTe$cARR;#NWbxP)pKRQmJ6$ZPF?R
z$|W85=78Jyrd&oJ5??T3?2=a5t=tBU@tfHmkTISe6j@8gBp^u!Zv&s%Wa7OZn4DaS
zLa(`gLoAC=K)|MXEe`Wl=9-*>+C!%%>gXts%u@47*QwpQ=Dh#_W&mDcy1G4%g0rj=
z#xY>n1B@mU>Ks#lkWhcNN;2>?REA4HTMoqW^tXkAv_5IXX=WZ%@14JI+?6h9KVLI&
zL9opD<M2?vCWNGg0t<RUQTkrWRU#hh`}eKMj&|zy(J~vYB4>dn2h9L4>&wOD`Sa2&
zU(RZDU*kvC{Klq+Y!(IE>BTksMrm2u?^_N;5HX;l4VhQ!YUNL_BYORx5hcaQaIF;7
zo+PUW#fNvDy$p@uMMC@p>1w;8!zTcVVoZ3Ara^&$Egc=H3cNu;UQ0RZP|%W7kW1B~
zSPLAL7T6}d%bSEM{+?(*QQWf&Gu~(lW3cJz>{q$qkalwggaIQ&&g!sy$gQ)2b0_h)
zU+2B6ThvoUMMZaPF_EoP7z%~yr;mJe#rBe#`}lJfkV`AWOBJ#2M#i#e*GF@F(wc-_
zECw3Ap+X|O0C9=E9Wl8qq%Iejf(jBhA_C78V0(+-{Kjq5KyKxU;lK)UUbLu6VD{+g
z=}GM6KL`m4$rH^7cgAxSa6wSPC5gdyt{}s$mk9Y>+Fs%jhyV7U(oX(U$mTIQ4Cg>S
zhEPD9S#JIA5Fe8}T-*n-;1ve^4&)a!|9!grIAyBZ1;>i(^;z8!cgZ6LD>)!NzjwI5
z(-5wPyl0|o&V!Dr%q2uTF84l-4Fc+Fp3bJ`I-%IAT%X*4*%JecgIMX2NmZNG28xh{
zIjC@e2OTTYp;9-7>H3&``T7$lZl~`nO`T@)>5@q&a5SvxkFCcn_h%!-mrmza3zenb
zRroczNYH9jVA{<O!32F9eQUG{VXU-&NsWHh+z}vXl_)fVGKEappvMUu(yCAQ1Mz@=
z{6jmQjq|2B@+`6QMcSj=h1ZsjKHLq^>x>Dbl~O%yL-3p?J_lP7ehhBEUY{V|#yG%i
zZLJpG;B+#!m|T<8+^C|arA0nzk7(eMI*?&b1UoSNp$fv0Dgad~JF88!&X8rfz-Vmv
z-|3{7F!%r0ScQ!9Mc^iAM8jq_9Sb$X!n4vzo_q~IO}`D87K%vP$+Zj&jPlh=>vsEe
z0W?j%rcldGV8bbA4jdUqMpk+A+%6W^pUMhPp!qWr=)d&?E)_`AR>?-zr=6a_qJsPQ
zpvyX5cvXq^uq&Rv%9A$$Wc0(iYJi?`fd;aq%4`g*D&~yZzFDHRkQ@q7T*&@#IawJ!
zV&B}`+ebx1gIM_f{{H6CF*0X~$6w!zK+YYuFe|+9R$^A(V1R&k6AAqpkb}D{z8;se
z&-fg&XcfN!DVOa1ksWvq>yncJt}YeF))<;bbRbQ!<oK-wkf!M?8Csxum#Ov)77(>W
zDT5SUwKb;M)UD#JG@o!-#Q<9>G$ewETO072GR(`?CoB6(beg>ltKTdpr7EGiiYZCJ
zPcsQhV{qMrouyxJsW7!8I?NbcYzFaLTfQ!rcPsL()0pYVTe>?sVv(Ntu4$_KH1{We
zwO_r0z+}qxP==fw4L17|m<=#yu$zom#4+>$m;wsRXx_+j4Jbe<z-v-zv&uJE1ca8e
zzp@6r0<&|oVj^NiNd6F3zF&Y3oty0A$85kmaSBQod@X1IlD_Mhn4h}jPe?~cl_A=1
z#YV+wiB&ikS))+AdEs{A6y~wdVlstm!`!1cfa__<xUspB^{xI_onqqrA_Rr4PEuq=
zMfO=+SKC~vjQ5S}`%VZ$^u>Fg^|CTDU%Nh8w`BmrB(y`X!)oNM>1E_`Fr5Zw9k^t$
z(^(NhJ}C@5Z!r>NCq#Ka0zB5!?zyD5lvS2?yt=wcBax52ao|{oVA2T{OmSsF-7jCg
zLj7#UK*eFaNsysuY;4?bFkB5R|AHbyEt<CLG;XUa?Eb}XJpAzFB&m)Rp8*}FTPpK%
zHm+nehp2)=XdB-z%U?eNP^?qMwv6bNvbPK;J#67ZQ^cC|wHShCLF>KoogS!#jPL`0
zQ(s!PP;Du>hI)-@f%MLY^&0C4AP^6T&>O73a4E7XLgH{ozAt=E8D$jf{vEaYdZlfD
zxK4&YKx0_s<Tq=-%+FN@QMBKLbz*$AjX$Z`)E@}bOk~?EiO<@L0QQ;?3hA9a$}l$r
z^3Kf<AG3#2fqQJXW5;B9s8|m8QP_<YGhnRoBqn_TR-pS-4FxeV;29c$SOH^pMw@Tf
zSTMM}d^wzt3VnUA%tnHH<$*4l%`U?lbp5vXABJWNOED4{9%oHj&aIT>FJ}@_as!W`
zBbq+MV+uAHq9|FAl2CWE^FAG&+owR!N!%*fgI7L-6a%q9aco+o&HR(ocUj%!f7tKE
znxt<}3uWY`)UPb*r^x;}i|u*yc;61MFZrJ2zR>E>m`^x09;4Nj&3dqR7#8|+S~XYx
zsA!?Djiv&C-vxyBib7IGe7sv@(zyEOI%g=RTffQ~p_{ZEsHe8JoB*w{!?IRw;?>SN
zpCJ<*87Naxy&<Diwl)dlH_yjc_rIOg*I&knA_|19bdn&<?GqCd0jCLwL$DY|MYmFK
zc8(fY$jFP=4|RnvJyv*1>Bho=JR-!nu8IOK4N$8E8a0rm<L&RS=XwL;3!$%qaRh`p
zE1W<07^t8OhARxB4YRRgie0t!1Q7(nU6GTTDL1nm7l{-5Bz$!B2fuLe(El^bksUsK
z@&8L?fV2+C2EmFdG1+67F~c_Om4y$0mNrVthXpq<F$av&1sN?=!Pkw?YDi5?tl*$W
zVMqZOs<u^lQ$Wb{Fakm)k)PyI@RFqn9)Q!4!fQ<rMaE7cKRkL{er3T5L7%yfZlPNS
zlOEgpbn%m=);VB@XWu^+#1>-#@XzEQ7;zjfM*ZoMqfLNn*QmxW*WPXeBD%2Ot<Jcp
zG3j`A+fBR37a*rj^G#qo5lc)cDzb97E9=A$h~q{UB>3Ln&C6_;r^1$Q0k~Pu6+Pcr
zJ&MD6@YJZ&4ZUm*EcN>r_bzYaM@B@Hnao-(2i>2rU(qgzUVf+~FW#;l=pbf=YJURU
z0&4a5TRV9c;InEI1=^5~+l#gR&3VRjDb30b_k@Ikx_dB$t+ZLjJ0^`@Kh@NoX#P6W
z{5v|0By^siA{6MTM76cGL((OTCetMWhz-n`j!5<t2j#HFjtS~dV+c64nW}+YDrvts
z=AI5-b;4`Tw&^puIl~u@U;TC|24l`naQ2!}>WvoN({>o44^kHcx4~xI@M^zOzOuu|
z-7opoYXfx}gOC(l`^Zft7PgQR`$~E0v-lQ`V8j1B<0+l68O30V8fH3@gH%@16!$D^
z-5uy^-nDm(oMk%fxlV^lG;n$q`mB8a+dO=6@}9H9`e4y3<{pr8E8gPOdzHN&n*oYF
z<dzV{D;+Le6=4r93SJyz1f#=2=tdS8r6zV|_>#Tg01#6`e~MqY3dF<NcM1*){*Z^}
z1Psr8A-u2{Hlzje5b68UL{wi9g%1^GaqOd`AO*|9gDYtygfgx|il_6*io*qE<>+`0
z%Qn~ydy9E9xhyqgA#*}s`o1Mxg+>vgyrE9ub2nJEl%vd$j!8fGXQi9`ARpk9Ef2nC
zEne-v$xTXarLp&AbhExWpfF>jp}A4MarVo;59BFL?5kr}_25Pw|9*Jvgt0QUIF+F}
z?a;NEsV*-c^4m~prz-mP6(Q9C1|n@O9ewdtm_2Me+LYll+F6|P0?B7@@6>+yhj30#
zi#osqkG0YaP${KP^4~?4k3ecl_To_tSO$cB@hm~`ypwFVJOsIJcH>1}!PtVVX76W`
zuNMQ@xYt8z+7!e{S*4J_rJUq4(eNEuln@pB6rN^R#I{wrA0-j|o0J|9rqzSoGNLxS
zygV|F98zW}DZiG==X0#svQ<bpIz~I{Y=fXJMmbVgSa_GHCn1guSU>s&@c{YEGpYcm
zjuvaZ-TIhhzZ=)Fc$swupm~rZ<9s<S-t%r1PvzzGI@_3KgJf;!e>Jp+JL^D}7culj
ze+oW$QWuH$T-63H0G<U1Bfs$;(-O+;12d&!8k4sf@72fc(=sxQnT>^Hn+((M=V34_
z4zkPBh*D%-0GRX6nj2Wt$CDv6ci;RZcArkOW}@1>n{h@1Y%>%4G%%aF{m=lGBOPVn
zpdL0Hnx2mVg~CaHg`D}!)cxGtMv{in9k>-CUoRZ_fNs&`^SAHb{oIxZW7d__!f&Tl
zEL4m>aV_obIG^a^ge81$;;4F?X8hJM(;Uz~oeDWYOm~1d-V|1jWOl<%Orivuu9GN{
zwC$u|-?R3)P2B*}dsTl=PJF^;^X$-nRkheaOP9-J$=49JGl+iBk0q!Y8k^fsuQ9dL
zLsI*;gmQLvR}L?V;pxZYq`R!-0#^7GBeG;bK<%}8?sg7cz>5C{x}sDJ{p3`WKemEP
zx7CIf6Y-Mu$rX9Kjs7S!ebC_cUR}u?4{Cd&WpDnS-Z@w<82X1?nmpw6T2q4S#6}gy
zr&OzoOn2L^Gq33+C#!I5Y#;6W0HR=jZx7aav))TifBfqNmz;-3Gi`$GGmIwDfSRb6
zE4d%DwK$vsTBv*X?!jGTYh^N|NO0RHlB+prC>3~@Oa@qhC&T6~$;75n72xtucK^|%
zGY^s<uSCMV11+5TN(FY2&bYteCJu{PZr5jv?8OQ=kyP!?((rDO5W~_Y!@*jtEYrIy
zhtG%YQw0z8)*MhZFyCbsH<k8}K)-zLu;Linis{<j=cXCi<G#vQnMiSO-t4dTB&_Pr
z+1T&bSC8|rzT((74U=1@d#yqeKxUiduuT)fqe`tD&itHmc7jNA<rBxTIXVMGBr)(w
z)FlSEF`Xh<B>raZYV&-UwPzg^myH+SoxCz#HHj%RsBt(9zx#>?G(0)U*^Zl1@UohN
z__@aVuqz$iY~lnsX)p_>jAezQv4pFNKP-u#>0e~iD`)52Hq*nKH>UyzJ7$-VFJV-0
zthTOJYu70;!x9Yn7#Pxw%K>?BRN*wg2FQ`_LybM$(;%UescNTMrwC4YmWTQS{Vl+>
zoUF130jEJcWX%}aN6tQSC-J6MD5<<osG{)rsXimi9DfHWG9hQiZjIvj0p4IHz-5*C
z9S{ayrnWY45k-<1)!$>;ErXGJ1)(}o8e8#<1y0l*eiN9ajI)90f+Qnn_%xr=509Gx
zIV<zUW!By(rcijc+*jfQBwko|6wX_|OL+}es9|82f369!y5V%m9xz%Z&z=#aO2Vdn
z5z^I=?n^q4e?=fMq^717y(=<I&2qkvepj|3OAA8*JNd<3j!b#tYzr(-kH%^P)-DY(
zv0yn7bf=mhSFaZj&>#Jr1x)m(w%xpTO$G)J=Q(%oZ<(O!#w91;gYL<j6pQ<+B2^gY
zDYt@tvQ`lgCgFWgjQ^FD^ZV0wZZt*fqP{*9QPB>%S4LQ2@*=Kj{joW`6|aTXo(V;5
z_+h>Wc?yh8u&!TEf84}1nn?-PM7XRam8YcVV;_@N)|G_5faJ{fW(Fe)&e8V^%{-fk
zip_QY<$70>Yw+!A<PmZQ(ea9)8kqT9>K66-^)op>Z3dzQ5055zGU@53MN;4v&+Xh&
z1>{Pe$6d%Fz^Onr(T~vCbO1@$V@x225C5;m-pC#If5>Y6PtyzdLH<Ado-ZXP<xMlk
zvJp8@SD>i4S?j?h1aPkN^H>iZ_X=STmPG<wEo8UZ0KHX6a4>Ra@_c>6Tmeb*W6;a(
z9I@1?WzR4pn?$R@5%wcwwmle_qfvqM*nj3p&mvbG=@Kz@@TboWbkxd<R=QBBX=voj
z&v#A7TJOF2ysTING)9Ka>NUZM6rPL<DXg)yv@{w|)m6*s`m;avh`@swZ{I3*Uf_c1
zpXQFTYSmpc>$&bUV>BOBz_-7(-<^U%131t+G#4haLd@<nm%Mm&DJ?yn7OXIF(^}#6
zcQ!w2-+tTD9Kf18e(mPXl%%Y;#sP;}H(|#6aMTzosmqh~lk6b@Y0d7Q78w;WSPJ`S
z*1B>5ZlKyIynh8QjxDXNSU5P~tNsK;EaWdFv+6Ur1OK6Xuf)RE<LUA@9Ud3}w4uvi
za%0kVz%B+}sp%RQoKHlB&=y`eylPS9?dzM&?&pYG<9e*OCt_^mfPcJGIIM+*Kp+SH
zHN!3em6a;YR3TA8VWE)<3Tj8+b$&ax>_+sN<>d{hR82;{eRYTdd50gH1Nukcr}|`W
zixBN&eQ*u)np&+M0m2K3V20dU*jyT|kJoBy^J&MFnl1#;HZ?cLoCTdwQd7egp7{R#
z8TGC4%$Al7_0~3)$l4DT%GP;xb@$e?CScdQ@_WhG`FW*Uh5@Y~)^=cBgqpjZu2m-o
z_d#$R0PYinxRk%X4@7=4<nl^)Ma9H6ps<Dpj`%E|1qd?T1x>7s3WOPs6T&F_mF3`8
zzhpsG=i_mh5Xtr}<qx~0&rp}fIbvgCKFM%*caOrmb^|-RCpad?_;1QK(u{h}mUY68
z=ZmXPI1S8yVK15}o0p`>Ke_|civhxIwzl2if`kH1XEikdfWf!>5l#Wx|GN|vhRAdZ
zN4S>?tE+np!_kk;@A+UlI4X*Qjt(fk!u`bp5OZo!XY=UvqBypP8rtYv)8^!TG<;S?
zz!4*7BabE#!SLrG1Qwzh+GcYUA(C#g+S(ox8u9NYeSE?DBP#8)&XF*Dg7)iE>r=B*
zo3I_`uxR0jv8u3eMq=WYc<_jIri;|!%4qGb(6daarhaXJCbyU@{^-zkl-ZJ5US1xk
z%4%h81^nNJ)!3#kAQ=Fu&H&e}?yDC(xpCaEpbv?Qt9Ht$DmcZ$i)lYIGPi_=rT9AH
z?O!~og(UGy+XjsblyK&rd#<$yGXSHX#&YJ^s5TK$hqSh~hK*x|VNyJlwaXIafhH9&
zhxXt6#nseeJvxj|;zA&`7}kZ*222bls$fpW)+x)$$<3Z1pSj({UvjL~U1Hgj%-Fz@
zo!0><5`IY1n7$L}1myAIH#+gUA^(yphnR!}@)mrq?W5-u@^SeOF=l_Y1tXC)&;J52
z%^WwM$mfLAgSE-3&CSi`=4Jr0zuZ@XU`@E$&(6;Bo4;mY9)jnrJo2%k-A>%MapbS=
zC}YW3B>0~wcg-i5YXzk}cB|uH5zLG$m9n&?muEaU;ChP3w9sEBtu#sd=bwY&jkfle
z?Ae^FL>qc1f+Z>o;8O*idgPeJ_@`2<QB>rI?0SB?Bv>IV9Zxb2hr_tcOkGXxHnwAb
z=O7I;bJ!SjNionuv$L`UC;S4H0?qqUTMO?h!smn7h8V=M<KLaG3a@|;5hARR7<2%6
zL%M5HQBMnf3fpZdAW1bNLyPYjF|Fw^v|EPf=9&Ow2gak&2b|5e8;=yp%pg^m@PEs7
z%MlfUgimp$@>n)I?fpJoASxwZDYoeiUVlvf_U*gLcgDLzovOgj=+<25_{T{0GD&Kb
z|GTqqxqYM<mI_zb1s?Yslp|07iJt~_q_|jt@@r2C^zG?<Qrq(==q0xuceZYUn43v*
zM)Q);rNIu(K|bi}WDY%S^Py8=3W^D_?rHD0U3FX%6A*X`vuChO!&7=DRWas#a2Y;h
z+tnWcGktyCcl;{EX8<!yUMuTOcsWLeAbh|Q<@?ehMV#iw`hH_W0}ME7b&^&ZAw*;C
zbzos2Y_UR%2Ru6QU*%sK^TnHaU@GLQ!A-<-wq&S{oTem(cR50+t)rup97Wa+q%(3I
zp1222Co8wyBbk?n`yR!NW3wU<gG+}M&ra%|Y<^_a?@rAp?~yT|ek-%1vLv9v8-JqL
z5o>w>s}L{mi_%g%F{?J1F8&bE3$iDlJy4GDAQs_quLwO`XreI#feh1ii`8uKtb;G;
zDg^8$FyG&6Dgjy%i0o74&^hH;?21hRFmn3h!rC+hi%uOw<ul?qg|(y1yCj?X_-d!h
z^^wNB8-qqkREh<Vt6*rjs8n!K1FafKUo0}9kjKvEc00gyJe-4=O|dqyA1VuvJ_MYi
zkfTY6dxMyQL^RHGqOv!Qs^$;)q(AZ0|Lfk#6xyBr{foC27sCpY&lhlFtoaw>T|b_a
zl&mz$>9^~CQO#Ak;9}jCjZF!^407_wkP!JASrwt^ON*I>4e%8oP5!$1xt0~2djiKq
z1s|H9yJS3v@*|l-NVEXUU9Hn$=>eg^@1|cfgA_h3>WuBKEHZZ3(}W^q()o1$TvOH-
zPBRiCgl3H4026C#n~K+fbnWRQY!k{&fSPQ4-|WY|g&uf@>h#=~=exnaY+X9XsIRMw
zL>R*1^PFeUe0vd;Q?PHp_+NnhPs#&RCsoEr8XiNAG4c@093#RB9xE|t)jye7<Emtw
z)`j&Y_<VGbAE5p2WtSP2Wq=kdNWd~%t417>;Q>hi#kmvy`v>zp4Ug1)v^ap)Y|pkw
zK(BV2(|MrH5jQOyQi-0XX0Q$#EWPhhuCiVJ68xpGCkFH{FlDp}K_;z8BxL`zDbLt3
z|GQ8RL8Blc0S<@AA=9yzwpPH5$#zuYS!@rsE7^oqRvvuO6}RDBoSU12)fX8jr_*9`
z8ZxygGp9;td8fBDMNp6(irM8I0+>x8&+SC+OyGIr51T`z+~`WF14IYuG><A{5X6T^
z3(<?n$!#Q-&4-XlU*5rgP-pbJU<i;#dXGZWAY8~AeEw?9AaP<xPUjDA{cttjTqVP`
z8P+VdsTd!UgdKjCQPMw8l6YJ}P9@UO)|PB1>%VZqfBB2Hj^~vkT$TngQRND_sSm6b
zjR-0Wj=H`)1|XN+y3Klj!TQ5_2jmMjaC5sTSV7L)Ve`Ni5+~Ym=zw1}{oaAUSK#sE
zH~Db1v0jXZDOVY~*+<rwupNXRL%o*J3Zy2LcChDxH0+J<-+POr+#QhVa_5gn%|dR3
zEM!Bv+=iNghQ?F{<2>LSzWo^DSdW7io*Kp%l|#%tJPEW?2@HAS!?dTlPg{R%Y!<W~
z9h+)i9jXmiVB_GN?E~6#cIS!T_P&<84u1kb5q63!lJAsezdr5%77j_Mpa_MdU?K*5
zVQ+70Yv0a3cYWszjIoG#T-A=hkjJ8+phTD_xzEjgg?kfll+v+queDUO{Mi3T%ge|F
zs%ydLu-AC3m|zC6%YSkbvAoHHe)>1urz=gl8)7~BfWrkah{4qXuQ(oRCJA|QDkkCq
zh+^v*yyHy=cGW?;m#7MP#j5nWDJHO>%#^S_J#q2J)o;iQ8epf1$d(7%;pZ+MC;yZp
zZ!rMf=(BfTt;O<x4IPh+=0JNO)38H4#5rHxjT==~&QmQ*SJ>KaAO0Rf`o}jkHi<ZT
zmmy!Ew}Vh;Idi;MYwQZ%RHe=5FJbLUQZOLi)oQ?1jk&zLPWQN2Mp@ZmeXV+Zy1LeZ
zY-J+N8e)tw2=rRxXVv{~3J2J)4l$Dxv#oUH-Q}kN0bQmIlgmaiFow-vdmdcA3=3bI
z#V;glM?bdq&L<o0!C$^0*BtOc$w+@QG&CGsx)g1+gpr&asTmXdUJbO;LXM96LXf1%
zZyu&|jk)iLqLpIe?mKfx>`1n(MkPXoC<SJGP^bwx48o|iS?~=Bgs*jCUCF`G`<A|>
zvUPo*OB5+jpNN!Cw{n8#2DAtgrl}ceN@mn<V>bb%NJUO=KtFJgk#RHo6oI@%EQRr`
zwG*E*|Dz=Zw%OS;&H9I^?QCwh^4b5D$Fo*84*&Z(qu>6E^XpnLE((fQ=Qs-*3JQHK
zv8=yA!Bn-cq_1kJQ7e3{54E$>D55Y_f*ti|2Q2s0(p8(+a3y!MOkyUxPm^Mv$>W^5
zZR5FkR>V|KLIa6uXiWWldw$LWOxY*A=Mi3BUM`N&K-Z=}{laJLuV@Zu1+4tfo_o6N
z0v_>uf3G3V`CJd~mU8HRM5npY@mYMGkDmFAhr`HvX>s`$-Yqe4QT7h2#BsTH&_kQ>
z07Zv&(Kt9J#F)FscbuJwC?RhWOwhuxwIn7Zfvq$Z8~Ni$k3P)5mqvyO$Oir3GPKbS
zAP~lnJNf<wj{#hBr-O;b1y=Kv>GzBM1#~2(DO19~9bL#C1te262c6B3*<@vTDjW4y
zdQ6V0kr8Eyv5_Hrm#u=lyiYm)-GV#QAavK_&xQ3eQnQlj2aIDR3;Qo>U}7q&W$UG_
z!?JZfPWDTeFM*6&LQc#G-214kQMZ&ag}uFf-~ddlO-&^><B4G@mwgCXSC;!-K;cCv
zqMrcf!hNoKuz(fVTd($&h{I+bH3AE>_P6{!{2$JCf}YxF=3JvB8kJIu>1CjFP^1ug
zY|eKq_q<KX&PKJZF=;J=l>j+AKn(xf!~;=ZVUS(7;nh^Ubo@ht5%UiK!c0z%g@gR9
zlIdv8Z0{>iYl3-rdZTt&)k~a7Za}!e2m8#3FybEwTl9r-9$H#|T9`vWVeV-A(DDs@
zJeXqduR6rBukx>g-uz0n%RAecA=#iHFBFs%)271JS?I3iZ)HK8v-1qZgn?)99+7aL
z4Qxsw&vK5RI`aWPBWPC#rn?iyj$Mw)9}qwuN_H6h&Hmxqj!qYpC``CRtl&r|BPAv+
zu32dys-Zzx(%#xGFN1dV%9l|G)@rjYx9<E&o1A|>^&vRx7oAQeB~oy?1Ab>`DK1C~
zTk{EooSBL1>7~DEnby~kA9zAWZYp!`#!Vc3I#iV5txe+rHz6U?-FuRdq5QUgLOvqX
z+VzF`@MlW8P>$}7mQNba-;dbsIXF21QTRMgN?a1_RKL?9|E?)F3Gt3LcsRp+04e_S
z?uy5R8If6pyyIqSRNpoOT4<7YS87%WL{(6r$_NUJi&H(Mj;$Vo)nm3W(;a5hCMJ&n
zXaZkTh|5AJ0+%z1(b0!CAw~xo2Yw*1veQGCL<e~l0%4QgY@GxbBye1s4%ZM!TC?4T
z0X<V&Q&&N5G6O`1wh3{pj`_VUL8%~=Lv(|o0U@LCfRQz&Gvfo3<wj~G2L0CV5iF*q
zkl`pVSjuS3AZ8AE1~^9?IDRRe=@>OuAMP~(Kw0#;+7G$67)O&>t!Vb}(q0Q0`6W*a
zK*X$jFsi&tYU@;W|K#wg7(|i51uCPN*NEu>(_`?2&0fj=IPnKY8ZY>k{Q&Mbg>1Xi
zd|sKW`S^LkqI;>Pe{$VB0m6MC6do*;sYf=Sk1j&WG#JKu9^Cf(jwlI!h~r52Woisz
zyz4}m=#6tR`Yb~5__(zM=}kMi@Uj3dhH*SjQ=5+#k02tDy~8e%Sis9$kpaGGpUJ|H
zyLYZymC?>^VN?VFbg%a772Y@25gwOYTH>+z09LTCSeTT)#4rqeg#KL?9avvKN%DAb
z<z>^pO-XI3I<dRDv$K`#{K484-g|mW`n6|j+vE{&2?Jc0wQxxdMz=d?8sX%J_Qjgt
z7pQE4;@Ez-*gdk)DdlJ9ah|4bj@%QowI`e)&|<y^QLAv`f9g*E)ol-p-Jp7RWmg-P
z$q0o|kO_r_hCx50c(RlN6mvXMV!qjghS$H(d45+TN4T`PwfNgCPf1E?xW1VU#8~Hf
z==?1(D+)vaN(M=FBM{045MHN+-Dk&3+b}#oJGQE)m)eOTs-m8+K9dE;X1rLW=_iTV
z0YI0($cc`Qj`s;D@TS~YndGl!1v~9R(YYt#XZ+@}v}=J}SwE6=ZnnU8{e%tw{MX+7
z{}Be3ISpbgdARrGs=e!T$hQV%oIGo>sxc6G9=dMr!DOjJIypCYqEga0`WbkI-Raiz
zIU$1`^uOr%*}#yVK&=Xkh(PYG2i$;n3sA17kS6f3AUSZLG|nFsm-705b6d~p$^7R5
zW=CyWw!54a!!N`Y@`h0B&O<^hDlV>iwd{)n0wzES@uXpH3#()t@PoZN+^wk9RaKp=
zv>${5!8ZdPA22Da9PWqi;~+|UfU2y9UDeRogltJ_eGWJ#NdJE>ff%#T>yqzraaF5o
zY2}0$B<E)<xBj(_D8<Lc>#&JUOU~wN?U)bk{&-9XH}ag}yrh@%GEV}xMV6s3sts56
z1%`uh33r?xIAB3xA@WK}DUr6!pOzr^5j+FkU0Ld|e7DR`0SRlK@B5d|A*7NX=x<eO
zj09)hfs6GgHA)&odQ9h4$K?cWhl3AO$8el{NJs?=h#IRYTwlv>(KijGPX7SIgS7o1
zmgD$jwQ5w#|Kp2~3f}@lgU8k#p4Un02`S2H%gI`PZw^4&QaX7WEr~xtPRMN5SMEFy
zLTsP_{e>Do=APX2ceN5S%Nv0wW2S}?1@L<^GJViam{frk))b&8<L@Fk?4uXio;*2i
z)tz}x>l4xU1REV~XLWGi@!K|BWo7QuFo8Z88mVn#$~*@?KJ9I+f@}^l)lzeZtxtFJ
zBpg+uA+itP!r0i@8)^%%csRrFgr9WfLuL_bTxd6P8^$96`}97BzG}x^@RzVdG39#&
zAk$lmw_rwKgGF+;fM0{@U=w6Qja@#FoYq$<xeO{Bn5jTeIIQ`R+t+-+qh<LjXx%aS
zm7hhC@>&h;`)0K^_&(#JP-%c26BQK&@z}6R0XKcSmf~=M=WQ<Mt<Ggu)d?2)eNR+{
z0q&8B6~}MPDwmgzK!)i6Ed0i|aS@miD-)%!I3OA4eZHCDJh(+*o$YkEvwG~bI}#QU
z;8UQNgs`1T0-<@aLZ!%dDZ#iMNa}*Il?M4hKS0mPdkiCG<W<lu-tks2+%6Xv;^V?P
zO_OxqpOx7RWDZN{1M+iTUOw+|++VvJP5oJA<@4O*=CG}hMRsW?{?87{XK~RGVMj|{
zR~;D_r(R+0ZNbOK%u(<@yUY5|nNXY2mm6PZ%@Gbsp?IKDD|bOMn9sgBz(6yT8Gpb)
zIllH^iwqA}eD;{lDK9UM1`z<_5<qP?eWM4K%mZBtF=Qx<hJQLz=pLic@Ad=j{<Fvq
z)D6h(<&DFtZ@k!)f5ru}(3k9%U~ua(H6oqUdo2lxJutV84+`oPtHP3eV<i9_xXjG#
z2Z#dp?ydwLCn4sfU*o00qNHM@Ke+~t_aV;JCyD>;=>TyyS*zuoi6l*4&p2y=28LSk
z(_SdIh6{exODf-(#V!oj^KGG{r%T21eSbqi6%I;>wPiOFrlUD{v}fCY3w)8p+meUR
zTF0LyBXDZy2xNGpjPn$D1ZXvutHIN=V3+{lF_Lpp)CGl>$xLt`{19!r?r7-yZ|f}{
zs#jWk2iFd0TPqJAX#3`M!oi0_t&*9Wd)x88&2l;oxPfX{-1f&hmqoq2%<}OKPryv}
z=8ZS7-@MWn-5?HFO_5rsio<g2890kx@x82Ho4{ijczLO1WZy7Oc--GIk}HH1$t!At
zw+AY3U!l&gq1QA~NsdtxObUy63_aC$c8^1Y8CpypxW5B#g45iWFmW5%s*+OAVczIS
zHr*Sb6O`%xABuFP_2Jd-eRwJw8yd@JEC*9KymMpK#H<(&7Yo<xKU<K$fOV3h0dRJd
z6yy#LX2m;e9fN{z`8|NQ*wwmgi8DjOdj8`iz@(F>-)Gez3D^)0Pc-Tb@3Q9We19n$
z6Nx-Cx!PJw&c7|#cW_C3p<V|kBqT%zemIJZWe6Jw+kx@8L+5a;{yY;cyTj7c^SmFy
zNDM=x<F(as^Bwt&X@ZMTY<&*%Y9!<!=9iku_fjwu6LV%=!z1=$RanYU@W`eitMcL5
zh%2+re0$s!sbV0yfM8p;4o42aqW9%p!=XcmaJm1@#Qj&*&e|%IWHBEH$ymdYs!FL5
zlKc+SYlwK*EXb8WVs5>*68`)Kd^Z|{DEiYOUfW7^+>Qh8CQw=7`Y%-NtC+7om}+=4
z{Sp=9lb#Qt4yNZxgqcoAx>WYu{4@CTi7)@X+@8*@he9VYQ#3+C%i^Ck+6LDeM3t@a
z++|3BLVJ&=ASZ|1IX>zf7)~GoCy`C;@<4le1ORwI#jZY_?{>UY0=g>5eVACTX@-O?
z4|IGXAP_d1whtF*{!1X3Y1S;@8cP#?ApTlATbY6Jw;CG|&^=_f($agMgqS2aB-qY$
z8tXPD^_@GPtfxGKC4aV<g>cNvDh=j7-6eDc@)eXkQWDZ?$Ndc<kxU4*g1NVYE-)jT
zM*IyY)BSQ|V=F81(qePYD`{3c3o5~+j!vT#r~zhXW^0q<_8_N?pjD|fTFv&atmG^;
zBQoVwQ3wU!rp=S-7l4~wyJtY<AICx4|7h-$YXD%5<<M3`c;{X<vS}ArLD>7XoAOnf
zB5*z1QwNu5@ZUhlk*oSU>(ezct6y<%<Gy!ZWB{4Zar|X+?5BE9WhE#mX~9tY;si#{
z<!3N8uT;?R&vFtOo3lDMSj<;!`fXh)GoP%P>TLHL+5R~TD1i|eTpy^^6lIQ3%fFbL
z48&+Y`T&bHqoG3Zj;uLNLR+9aP;YS(>j0|<1q33?HHEU^%3liUJ=Ld>b+pD~bBC72
zuH}voG}ob_VTO<V#<Cuz<tCeeJLz=lLX~~x?&7e0{O0=&p9SNw0EYhD#djmG1@7HX
z0ohk_nDg;LCnO0VdzR3we{ERvZ5rBirqBN}s%8*>wQccfdY5?&QS#tQEH&!~!zu&)
zU9I9y+|ugzU%qH(PblDe0-UYkFi`31j7ap=Ul4KdJ4f$>(i$r4z#5VbzPQ(`gUI`u
z`0-U8a75YcUZ!W|pzPdy{krCD8C8MA|6-Krr+r&8G*tPWm88N`OmzwA?h$*7gk=t;
zr6}6ys2CW4?<`J|(J=dshvk~Q+DD6xVIHPTy`e079VwL7UD72Hg;-htgHh$tiSQ0E
zvj){l+et}_>ywdd$;@5*+05S8`Ps}`^LR9IslMTu$N5xH6Vl;(WvvkhVr;w|>zr}K
zB>DL2usAX#p?P^iC%1rd<&Uo#G2!7m-2#-I6y$sMY)A~Fdns0q(#Ga#^&F(@jQf^w
zJ^N7KR%e7{vw}JFTxP^&aJgb;FG&2*QwIbDP;&eLaj%pB7E^&M7+ipWzo~D2NaI5q
znhb*Z*{`z(l@OUwDaw2d(6>?F5-t6ona2_|7cXAwHBf?OkwJ9*=g{~A9hNuyv=CSM
zkD(=m-K|a6c3+<X=}hpYn}!&X%8}hste%{wp!Eh(EVPthFN?`mHYxFX4<s`%!)+B8
z1Kr{sje4aG9PI0jn>fW)x%5NuBFRX(<lScLip>L#YKoy!!DU*NA_HW=eGh&GwzDbN
zvi`XY<Gp(aVeU4&+qF0FT&=rLsyB4cw|wZi1MWhwASsY1pE7mMMZz^nCjO7VR^cx#
z$SS<?PgNMPnREdD;32@uOm9At5&5>?jzeBDaizL76vVdQ+elPm!P1UV@QR7vvMtp}
z(Ib}4@jW<k2Bb&gRQWwrLNOy`77d_v(phcpi#_>xo@pMaj^#eCH*VR2!$ieE)bcwx
znIenMH;BrU>V~a)U*09UN<@F8vS14r+=PB^aM8(<DgAZ~8Nw0i;puRmAm6G7SBM6m
z{Ms*f6!3y?9+eVuP)f_!$5&SuZ6VnvezX5W$XUi(z9W+i$ywgz(S7};o^#<ZU-DU5
zZ3MU-#Urb0_-Q6y5OT8GKwy9W&$xRolq`=-y`9-j9A{qmen(Ab87{`VC}!uCl}A-3
zA1SJEBu!-0pQthgDx7qrLhcp@zFA}QHwtpfrpBi5fUDHrSK+!U(J8}{OgVrdbh&cB
z``{9(%4S=yC*{*wd|S>%xn7_fh)Sx{0A5C(k$sdM*_4<|B19LB9aW%?Yu1u^k%9EG
zu;)Sgiom_>2gfnf82dhnk<a!5?Lp^E@$hWrbOF*bZRoxb9@D!OzT?(EGq2tH7Gw@T
z_Bq1;s@nd!{7&s7dJe9gcOVnkJTw}~OafQwu|9mYL_OpT_AFf!GhRtn#AsYf7~b}M
z1UfELq4K6)2Zq5|@gfY70Q-10=4Nyg6A2CvFTHKnxS0(#h?`5&b(Y9+d8j%EB&{77
ze^lMVe#X3T*)10s;hzHJG~KEsfjeZGFHbk4@$$EqAoR3RuR7Vz8HNFhWGsUv@X$dp
zfyZKkyTA7x5D_4s8SEcsWMT*n4+b;bqq4Mch(sN6oui2~?;9p&B^!25yj5oXw<+<3
zu$}F8NC3smUt3kt>~qTK??S_ak{GZ&>lgJW$}%%Ws^1>Kt(Kx-WPF51xwJS&qYRvs
z!?`LmmJ5l`6F+#RG-D7vv;hz>g<%#Xx`DVDSBEp*Hio6h%4%uJ$R_8{iW>(ps{dWZ
zrR-I_&1tKa{-Og~WU_#SRO~S_=wy8?8w~7CAD7)FCG|jFfeuvvyV<YzMVS4HdWi})
zHWKlW_GkhSqAcNm?q@eT|E`|}y`hc9*N0AXCgPh(F!%-3z5cikcS9sPE;SWd)uc=F
ztpvtbl9y$*#rGmVfw`pa774K!Uq7id%ze^c3!q7Yb*{Bb>Nr}=I38?<ith#3lMgWn
z-uU<tFtlioT%!W97@kau9Ypc9QMT>eTmf5rp;Lwv$m8ePyQyjwp$C%Hi)MDgjtK-_
zEE20N#B~Lp4@T!y=3li*MW_;VtPr9S;Nz3x1E9;t=<gUFFub=|dwACEg5pT#5cYTc
z=F=vV>9)T@HcXrx0Bxcml>Oi;bA#2J-Ma-X%|T2ARx}OWyWacPeBM-DXW9f68$^<3
zP5z7|%~la@yI1_%GHYdxpR0ID0?N(|#dnK>WD?rQc_jOyvc;nmK!Dx0@xvvm!@w%I
zLZsy~7m9)9nRz@BWevBKXM3MMgFCh&&VFq|8ET<z9#u?rx^$Efy+5f~Tdr~iDJ6q9
zZF+|O3TJt@Z5&k|yE+piD@g5E`>Uj3d0j@OJbGyphmF-ZA0a|g<Ti8--eRcHUP1*6
znF+`~7}7H^ukRmrECb=%?j9Xoz;A((<!nx}BIW4`nkj!Kr>THfEp9HpQXp;<%~@x?
z(>B(6WZA+|MI|CXu3M8sx+H&NxT(1@qE_VdTo12w_H0iPbsjZPD^%7fg+xTk>+t&0
zv5<>Himl%-{ccqtDK37fe=lq<H5%LLd!r8ynSb2lw~iz{r_;t$Kh#=abIYa9Ej68L
zGldcLb4LdmiJt>%0|{@B%*^DJv@|S2>@E#sV}0?#`|$8UKoPxjM}H=ngtB*VL_|bL
zM9Ly)V-`sVw}^hkQO7C&OrtI#F1Q2CJTKM)O&GSAx7Lw>LOog~dT{zHgu^N@72)gS
zK=u(xwkuZuFA6*7ks_OYY5=MV(7@#lR7<Vc$NPTC!g#CN@pMe#_b@v!-1Y*7+0iO0
zOwo4Rj-QfAeDna4b+tMOY5dLAbmF2GnC^K3%M{Fj%pi|^SUUfwvi?5ll!*)Ml_l#V
zrLQ&wzWEtL9z_E8y!E#ayr6@|6gF7#<-0OV2Cf^JVl#bJ>hxU7Vo05OJUM@KtGhmp
zOdBLk8yXE<MrF74MBCxazFK)*;wHrMRIny34YcZzrFX}EUi_?FlLM>I{s(F@A{PH%
z;pH%(!WWN4&}w}7scW96(<G;$)nIcwFVFIv&9E&sw@Cf_r<3~6_dPVxs`FD*zgmxF
zIAL%teHBZbhN#YD-1$nw3&{8NO1&^M@E{(^OCIwoU~U>C^Y~t(VuhE}tR31pIXNN;
zA@fH}--t<Rn+O7O2+<V)IR_(ex7{d?Vn@s_03l^jHxS_E5auOiXH#|uM9MOxTyNSS
zLg=(DAuuB$5P)ZcH{xpCXh@*Z8zVh1SbW5R7WIR<1TtBp)Gpx@cBVyg2WzXCI9ceS
z&4`=NrQo)NC}c>VR(;+cF84*j#`2Mowu;xu7ZApg(Mcu(h)g1{tHq8s)=Q~#LGE*3
z<7E}j=Q+%}lD`f!A6QKl7fgW-8?$Z60&A~C=hvt6XOmuLWLoT^VM(Q^%W*t$e5T$_
zY&-xhiU?q(YwjQ3UH+r7q2BX-42x--E5lXzU~0x8?;516I^Bo+I&s_V?eOnDbUzPp
zMt*Alm1wwDRYVT(PAv54JR~G(ZNs!`?+YEkWhG5QOFK1QZVw{P$OO1rX>XQx^6~M7
z72LRaa~UEnfD*jYxKviG2=g>#^1HQeC_;g<tp7$@Y8rBKG(EPC9Xv2F2qHrL4l8Jo
z$~H>QU|2ng&f=f|I>1=yK03$l!2a&;95}b=c`nQb!|s>7M4?9PNA@f8@=zg8&U9aN
z3|P7zS$r5G81GVJqbj)5ZA$c%Wx?wCI(L8zY=PjlwH#MhEPwWl=)J}MOK7)|cc}Gc
zdo)p)K+tGbuFUz##1H%5X8E!fS2e2|&1{}-Zt&sgIV_prrg@}Xdo|`P_5r1vNWsg;
zXS~u7&7ODA+_2Mq@(SbPSsI$c(}5P*`=dgz^(3Jc7e*&Cq;H8eGI!+K8rcEKE~L<R
zYA5a&Ce_b%B~VegJHndssB~$$JGkf0aO}SI;r2S&y?Zw-S^0#7Jp301JEpsf6Z((X
zB~TcxE9;@wj5cWv)ua1e!OO}*?wfr;ZdvWR%Hb527nkQ3mk02M&R9@h+704?!;i8|
z?Y)JpvT~OC;SQ#<oyp`0SduoxEtTKqf+_j%`YsOLV*#8WsSko!iLgQ0C8#3zSE!Qg
zcz<zI@*w)_+}CIfrWqDF4M2WI*Ce_A$eWEcUmU8&U%iFr3u)#L9ab8qCY^FHETog;
z3va@}O7QeZ(JaCY{7v#aO>R%c`XB#p+LBkOx`NGB?p9k^_)Weo18BxB$Aqp*N0~05
zN>Z$+PSbswd8z5M#lfvz2wByJr*r8YET~l~^mIWg`y)n`3PvlGw~vknO~t|ULJ|O(
zU`+9irbipIXo4@mjEu|-TZfo7ld5eI<0{J?z(DmcPaH#=8&_omLGURLZGQN*_zD)_
z(fg4p_%GhAP##@RN?KFfF|)^IA9cUWmCpW!(dFC@){Wv|P(aX5m;Z>Hg_Xs|&Q=i-
zPyPWR6Em~@s_k^CLrzlsN4QnMmY95rewr`E1Q>}1quFUNF*iZG_>t9os<0n)ZnFFO
zj1*4Q4mXdb4~=!Pbfd5R&D99`S=2fzi^8lS`s#wYuGTgzJS)r1w#UGjjdd!2F$)!8
z;O%p&DM`Zi;7$E?tZUaE!a?bLD3g<<5w8JcG$t^Y@B41~f`$!gb*D$X`iniQ=p!G$
z{41-bEsFm2*VA)5{D}OIb9$>|Whu9ZV4+nBCdT1R*_0q1p)k$ce&;+qCK6G`ephMT
za3_KrEF{j#Xn9=PUPw+1`~)#oIipQA$A=`O#HEJg9$Z1O-dtelB3Gv$OfKpHJtb&z
zAbIWxg6hNa=Vx5rxk)J`*WDN#A2PRb!9NaPdjoeLS)t$HXn0heOAHCu@Z##~J%t+q
z0-3|=j8kbk8xY(ZDXXV<Y4=`Q8cYD*^&@4#JH-P`c-uM|6cf~{d?cxjOyy0bGBu-x
z4mv%9k05*Lc6w(^cl-Pdog~)1<YXXIMVzL*t;<%F7L)T9`j|O^a9Df@>Do-zD?D8X
zvFc@x1o9XDBTj2CgG*Lid~@B7h6eTN$`**oU~2*!0*Ib~^q0+vIQX^6xDB=kh6V-k
z4n_d;4+Q9af|P?M(<QHvBY-H-KO`n`oIn2pmR*J;{&)qKe)liE)#*wZe<_m1WNZY6
zkai~k6WCgs^!Y!$ePvjcYq#!F3{W}@5D-B^Lb^jhN?J-lK<VyIQCdmq2I)ph8tIbm
znu17|baTdZeZBX$zw7MlTxb1SKNMl|zRxqpoyJIGH_}X%|3_#rsQ~m>J3(ue3*UZm
zhlIL1&qJ=Cn$5LgbGWNGBZ_C*iyz!~^jnAS{=CTH8uWW6$XdlQ{aSQ6^H)R!l}wD{
z`bc=9w{#rdKj_i#VLVf25x^j~UmuBJPZG-X44nl^d2Aon7MiMTcE$8uDB2Tx$Wfj^
zY0G1m`iqS)#bm6A%q3E3*>E}=kM+3RqPOnh&8R+ZlXJW@<P%$nq~CYqk5)MfurTT+
zL@+z0NKP*JWAyi`*g#>6Ph;3@@OQnqh$kduQIGd|dO%i+VjO@sFKe|4zIhz%CqPyV
zgsb9f8<w_z8xAC-Sq10a(e<m%t<BE`Ahx~elg50`#V}JjdqEt#+*f@N3qtw8h;c@l
z&Os1#KiirqDk_3OxWHRei__!lp2?`dZ?P$*QVxU0mqRG>P1-T=!6bP;Ov7`{=UVPa
zenyedsuQ@%pS=W@fX0!lC%)Ehu^fhwLF2)qSIbW0I}4`JOtu*L+#UknPn-}pNq-1{
zh_cS*!2N*Xz}Q~rwS3B84Obu$M^AV6hoi06M*}}iT>vu8A)pOT<P|NWUEzYMZ&K!J
zCQpS$QoXCDl$7hI)z%N6wMp`GoOSFbxF<aEvB6&|(T|jbW-T6m`Sge_4H-@RDBy^#
zC?XA{A`5Mnobk9BUOwHO90SR5Y2ovWvPqTnFovb4QP6lZvQg5LCnQ8jANd?H{aNOf
zGh4~8NT2|2sQ!kvwYAu8+3`^GM&jr5VbsFHrUVnPUD;UMfGw@7SE4J`er3Lm18DN^
znSYbUUNLq#_RA}^6?%@lW77V(>9nYknShWc6s8l)$In3g2#riQ)Zpys<O9hX+fsB#
z*SC{}yFb}NBO;V`3bj+YSXh`%NR+e8!$E*snXpf<6n#gN_G40%%Ils1Z+(Ca0)am`
zTvm(-uge%+8vEvrFwdnyL;IEH)m&kb%Ern{*v|e69<T2e$`HeJeDKg!YHY0>*&Y5y
z0OfbL*B`w97h#=EFnfT~2CBK1p&2-PyX@xe$EGu>TssPIzaOw~OhaVif&omEV}F4-
zO3F-!1MF|+=lJ=FV^}<RNdJ(EN(K3YXtcn0bvoi+5t8<ge0@aWuo0p_@ZH6M-Z;GP
zO9IIPQ1CVXv)d;cR=KuQbo{W1@<E(iw+cGCL0p|X8=v-%EW}5P9y)63FD8Y^*m4MF
znW=G;Jj#9fzn)?8j<9l-9)t5=R`z3FUS4dssrhReoWSgu-ztC$QWt|uDkA$8zf!8z
z1@W<~d5WqTi*)*jHPmsc)r*yjUDnHri-@Y382^Y6#a<3N@KoKrsIwG&GOe+D#6Wt`
z4PQooBYu&;zVe_4eG9AI;Ha#?guB!nks|G)J~?2wGJ?aBt5m3*X+GVvzFzIH4mCKA
z^k&BrUf4qJF9KG2!|u2L<h62LEzif{MOJ7R6qqNG)b3CtfK0Z+OYla2z3V3rIR>~a
z)dy?+S;YyJ-YsBYEIL|SE&)-)`|4|)m`j_S4ejly-jJbkyGI>j5{j(%a(=W0#l^-d
zW~;H?zyE6Q*=UsJ<8<{HE(2wh>TBRROJa9=#2!~+%G7G~p{}kjDG32Bn|uW>^IVj#
z;gF(ND-)LzFSS5ObPIm+ox&6xPs>OjF4Vg4@olRa-{E&V*3~l`&d^Z*Fk#i#Fcy7h
z4QacPvfT~h<B|R*1uya}t1%s2(lvXG!RLcMnCHaA*f)egqW4HpNK=y^9P0Gzn@RaC
zevm64Tnnv_o}Qi{GUQx$Cp=o`E_GO%krq?A-4hubs|JmX;3mEzgi4l1t)Q5YR(W$F
z^7A9M(~8&9>#;(@4YLi_iDE}320cPfSFT=rkod6U188=kM?qX1G8|h;n|-4ZkTmZX
z450CFp^^n6v9`>3l$nw74GH&`iv~!KdHe2drcCViw)ZGRyhwlRrYIYaEY4S~90(JU
z)R&1PTk!Jr<_feoeo=7=f50%4sWIwBo$g(3Bh`WDVJO*51`F}G^3@XU1O{uYSe&kU
zv#Wj;+~s1WU}dA<Yx2cfauT<+eD;iayDiY3nVng4;WNHbdp4Z$G<a0E70D#tc+R_@
z?@9*~9c)hH*+@xC*Vei<mmb7%VCxDgo0>yTq>fndx<0}#b*C9jo1WN0s5Hm;5>ygO
z(gbQ>Q%c^AzL%;%22X;yLq=A%_k^00b$R*XF}3}#)2nQ3N-&;!rKasvbK6cAyS264
zyd7%KGj|J*cn2;5GKJ4+O&DtR_Iv}7hFT~O?IJ<z73LFfrC;!zV4kySFZoS!SV*jR
zb`AH}DMaKbB^y0b%zN_<_B3GhXU>krIebySm(i+(HemO4n1=G`HqIf#Y6lEt5`130
zHGd~3oaB4TKfg<J06hZ|vv83&uC6TfeX~n9`KHG9Lt7__*Zl!LH2#tbR&dGQ@z`0&
zSLZO-N6=GIos+iWo|d;rYPh<&T0OXibsE8rOXd|q`sTqh1r5z3;9AJKDa?hG?r~en
zQR8#6FN$?wvjhYNhMEe|3%dF(FJ&1@xC2X*>aI;Vr$1u*LVOVWC7w;GU1?O_3+LIX
zqjR@oq=%P_MpcGiK?(SOHMPi)bKxPWcDxSqXMHcWZ)`g`ocEedR&&~l#P|Ff^_(m>
z#jCsQC<H1C9_K^xNqe*Acz}V4h)kHwbae1=?>)$9<KcpKD_ZVHIra%^=2TM@AD^I-
zdEsjWq=^Uk`+J@+o6cL()6<(a=2&S|t5M^_$)wjADVT+slj<C}f;vgIGc~^Bc5*;(
zuKBY41|z*{o#M8CQDnY4yV(eSBKExm%5SlLnAq@Sb32{RFF>x1`836&%<Z3DzHX@1
z4hNc|&Z1BpGwbgE(5<Fc43miF%wcLhT8^3#%kV1NQxqP%a<Q?S%N2DNwVI9))oV)S
z)SQzXPOmaD(JI<L@ZN59wAyWTGjn>jb~sBF4+E6Gw;pT0bnU#c>~{TJXxD7eM|v<*
z3JV>*^qejYezcHONqIL*m$04Y7RlRM)lPhzoOje-uP)GQpP!1{TqB$`GB$oN$8vZ;
zhN>8N=*G#~Tqo=yINngATI(+T>{%xOc#FL;zS|Dw)0pU}HFH)353cp6>M?YMpylfr
z8d^dUw1<Gl&=2>{>CH1l@Lq%JGDmWK*Y?BE&`>Bla6DZqmNtrm09*mLIse+k#Kd$n
z(45*kbvAckQ<F9|6;4-SmMk_G|Cq6;!Kx(Qm?)Ms4_+H%`wV_{{(H>3J1gHzEd3)Z
z>G<4MSQ}r2n4Ebmdvvdlb#t-U?d`5r+w$8FVff}*Y5e%ytvB`5pq=^P<3^@TJbtdw
z70bmL4VKJr;ZHa2UkXmN9PA(N9~_*l(ot6%c{g)M-+b`q-BP1feW~!bsh4+`pnb2!
z^~!g1MAc9G0ci~lo$RiGXgU_G{O}?=&;Hk!`#(l$7T(9WiahE3$PGT~-I*sfd5??5
z%jbP@E%hTl9v-<XF_e+t6}l#*KM=zxUs_tm@8c0Z&xuKxm7o8!YCx%-qwnD_t6y?N
zjR%)fpNWZ4fn#9uqf}AdOufrRgqD<Co?|f_j;4c`KLiHi;o|9}Ufg!_dK4HOEXF?<
zhOj7tYe_sMTfXvhu*X;ajx@QxHnCkh+qc5P@GW$xqH0MS-x_CrT|v=ICC*+}T2^hh
zd2Kp5H5GjtMI$UYz&ouu?J>Xnc?1O|<wCbt|3g<cxg@Skk#=X%M_e=#+}8~*y`^Jk
z-*>@^M4n>zTBM}-MHWrgBO4IrU5`PbmhzRXZiXL>na;<~m&uTKq+!4ci^K&ltaP-I
z`PlHhVQ<?!q4I~nPWJQ~KJpqxC1Xw&e}Md-&`Tn4LSPH|p;Lz;|D=%alhCKg|9OBC
zKmmWw3;XV=;e(E$p;CZx4q2F(Iw~DNkXWu~>TMC=<0A?)^CRUP>eI#0sHn%URWD!M
zKz`LDT!9H^Bl*V00xRS?SY|x<XmO@fDR*i4tp0HqgF?9!oCDs44G^iXaQg)5q`2U0
z62(+eR_-yFy@o;bvdZ15KddG5aeTIVeIoKS2;n{Ie>zZGeW2ePZFjc97USaLu!-d4
zmg5J?(}~zW!y!|D;6BN2anhL-Mt^TVVV$ghTa}Z7qSP(d-pyrSwbJ#cpL`SYN%5MO
zkUvw!y;2!Z6=X48UKSA02?Zf`c6KMbO9^5};2#f;TcXoN{Ur9md2c%+dc4*kiTZNp
zU$KB-(ZKa?dOFd-yWZanWRo=NY*nY&8myjpv|WO14C;HNr1h3Fm!Tp8dMAhl?5Bo?
z(w+_H0Me4HQdPI>Of%it%~e7;#`eYI;Jma$p?JJT?>&=@&hFmc+3D#>zUHdcG<h#m
zhvCp@+d;@=${!bRhDuApD2LeEiso>c$&^jX%gdiAHF+=3gGqRY2=84jq`C$92lafi
zCbh6&3I&-%WNT8&L-<A1J(0HyTVRM*@5~w6Lin(incTpT&v!1XAuZ!_S;%uckrDLt
zgz)mPZg|4m+uOaoypoe&ox)Xc#OHG0b@+nUL;g%{Z-0GUJ=dNd1qEd(1$^5;K|kQ6
zc3erLd939K>;L3Xx771Ev%8beB53JVOLZ4Y?`q39zK9+)%=ED%dO{XxPe?xR-z_>g
zFtE@aKbWf2RkC3a%VADgnA}H6%jw7O>*JM?k?wxDb%_rP4O2!!;#QqkJoJyJzt8NA
z4LZMxe55))!X1{KlPyHcX=}gb{OfYu`-R7@XDfEj$G4|Ko4uNMcQ0<^SA&f<Ha6$&
z+qv0yzW?R|PkY_a@c-iewlTr~@wUZoVfSuYZ#*}~*DGjOQ+)Wbj@;Up6*fSvE_D7x
z%5r+e4w!_Sw;tacL&)EUA4GfuIfqEdqh+8rO3hJ@fH4g7hWF(*SPk{MAQw02_ig;e
z_4H6)N=)qRaT)=^UGJ=<XrIe*Y{a()Sg(vW-!mg#e@Gh%nRs;`N$#I~f~91hMShGD
zt_#S?N!LSL7I^w?+nkkwK}PC{P6uuK;`C9C;CG9SJT9eNB{p{UTgbOMj7Q`-1^7!F
z-0rele~FB|#r}HuOMwPGegJ@%%z9n-6~W~#S1W4gwI1TMv33Md%`J|{47zTa4Piee
zB_kivL|Tkj=?&^j&!T<pHyX%8yLX>SfSP&<I*sBWp!kd3$E^6ysK=!HWNQHYfdCY;
z)xAz0M(+OFC*d+p+eKJa=s0o2w(%wtP+&)|4vlNdGpT4{qnM7=#N-(3ldcTqqU_Ls
zi{URH+VJ%XDlXZVHMYOX;zr-SdzV5`Za(v1p;xQ4p`bV+BST+JZQ?t^_r4t4+`()g
z_6g?MRXvnm{k>y0WX^hTVv>LXNhhMxj)(F7RzRDQ-yJPd#D9Nd)+W8U0DIgq#?t0z
zR|#F+`48DFBm&N+3KQ_vhGml+wF@&d4U8rSpm-$_+y_4;qXc|>wW{ri^?Utw+G-Jw
zq}DuBWjaywy5m?_9j5pLX1|`_rp`RC-xXM}H(iL2sd9GS*Wf1QS@97b`BGq|y1;Cn
z%Ay-{B5|NVC9}Y;u@xU%W>~iytVb#&&=6#;I=@}$dM_AW0ve(A@v$-dr9b|MJI>F;
z$jHPE{err~>K?0{x_XygdTxk?t*zbMk2$igZB>4QPfqWOJ_QBI0OaBR6f2$rMHt0T
z2stAkbz~v0v3e~}O!*LA;g7Qa%{{jG5BHdIo+A?hf!-3yQkbhE9mPXRw_pC-yoBGd
zz(93G=g-vo)FVHc0v`H+2Y<h|w6fa&zg$~#6mIm8TL)g&+!xuYTl9THLobVsy~Dzu
z_h>*qoOB#pzI<-R7Z|lBYD8>KW1^!`wR}H+{(RU}#l@pztRKljN^iVsh&+7SvA*>(
zgms3~50-1F&(bn7vMvp^xSyt>HCFslmG(TMQ;wd?VR?16!g$d6YwFdx3=y=O)vbY|
zL3f99q-keq@33o+jlVZgDbTb#9K(S!2?=*!8Dg14zA~fL3~z?_^Yil*M=XooQ&l#T
z#UI=5IosYwUU{TZNg5Op<@D1<p$S_AhqVWj<xcAE?po{ua88$+4m<#B^kM;M4kEfP
zLRf9VSvbz3uTk$TeaOvQ;8JQhkm_>#dM{OC?aA&f7ARlM?2Yfw6x-|}UNh?&8?lhn
z>Mm5SRZFO{<Eg0FgaXb({~u+g%Tze<AiSo@5s-X4Hdy1mgMGln$O<bKpY_rf#0Z7f
zZ+_Q;SX>24Df9juJ=lGqu(;a6?nSLRAOy?r7azxq272QRG!(p6GoI-CT0fetQX#Ly
zV{`MpypHJX*k5kUJdZa&-kb-aeE9G|v(}a1uXpCvG5WS(Vh%R8?B`{VD7sc63Le*L
zK07d8h*!l}Bb=&t@tBy;9y6W!+;S(A$?^@9hr@+=lPl~XnNlioELG{|?s%OWl?3H(
z=T>MF5J`6k2;5+l-+H(*lDo=l#rxJO+bH|w;JnQ0thMIqltOQ&_5)A_t?yX;8Yxhx
zVrFKhW)yE%)Nx=6AtK>u#sMyZ6pw`D7RjAEV@0pu4Q^zHA_|0Ed^e`yg_`vQGjo~w
z%p-bwY2+ytz$`K>vC^MwU@2!=KXb-iw(8i_B>Zbfm>1>`r=1nH2T#eqew|*cW{9o;
zF`)UBA(amK4?PA+`ByV*PB4Q)iMNlXzn|Y5d~lE;7jXn!_RY^AoN}4d@H@~lE2B9T
z7QHiSWhQs;+<Afp#k{Yez}3*<Z&$JUaVRk-L&PH$5Oj5P8?iLUZxu0S_RC<bvcC}`
zTxVT)|4t3|@cB?Z3CZPdZ-$#)O4PyT(7LSiz3|<3!Pkii=k->*T;)7dMFgh8YeYIr
zTH@A2Y`u41=+q0=Mx@o7@1Y7>z?89m);hVi!<bTAQ|rdRSns*}R7hUl>d(cy#Y@&U
zF*-h;4vrKuk)+fW3O?sU%V9MY;3@k;`rr}acRGFAEeroiOHP*St$NmDzS^0H$UQuO
zbTrF1Ra~|<8p~=W%HO_>y(m5f3<7GDf$fI~bqWn972g7$^35-fvkwN$#iq1Vb!KYZ
z-`T3EaZe=!Y)gK2I=(|#X55&E>+Ky;Mqu0OmqKoisCk$zCL)sl$u0AdQtlI9rK}g1
z;y}$0?(y1_y-@Rwo^>8=fqthk@qyOh@*w-k{q<Mf_p^MZq2Oc@?Z-}Zq_Ua1?-gIg
zJVklekbC;FKshECc=3ADm+FST-?_3VDD19LudfkwX8jrK<TM%g!^1<f_fb`c$A=IP
z@4VHZWkimAtu9gL$l$UD=+tX%6_%IpgRZIV0}*X42jhK4^&^1_v(33a0y361t?TBK
zpQXdFM8bAH>H6JmX>Ao}Pl>!=(rjz1SV|%Ai20eYu&|WyRCg@qO(Vj$Cfb<0-@*ta
zAII|`>SgQYo5U!o9(HvY<lKNf9?34;0gtMxDj^0#6C?5)*Q#j^R+;5h6og-2^xosL
z)$KnO5#o2;-Rcj}qg~^fd>=<fmcq`?u04@aYG-M=wRj4v`fB}-nd$xZ=3PgsMGYQ%
z5iybB0)?)1uQ**?<T(Y~tX)_}Z|v;qDy=icH+5E0#;vHDuKGQ<)xE}>H_*P)b-WY1
zPf1xWHO`DQ`dM2SxhBWlhfWnfM1=<e@@9lh$r@PA-|kegnLy^h?>4=9h3Q1z@;4%m
zbwUo~fxM3We2>+9K<Pjo+}YJ(F;#`OLeIcZ;Ci(EnzV6ay4KfF5jJ?GVa1j({+Sta
z-$4BB>v{K|9*BM*taMJ#&B#~?NvZ#-K_YtF^igkHqMZ00{6>%Tyk}0ej-l#KUN~mY
zCX+wj;S}{Edw=9$f$+4YRj#?CE0;e}cJZQIsN45|-J}2V2XPhI3ddh_a|+6SBkN<e
zgT)t*E6k^wDS25;h*m+cgIvF!htuRdKzo1e7fSBDyM{@YT98s~YqhW=3OlyN)Mp9A
zlX{tHZa`u}cyz?hHzn>jx7cq?v)N2YEjx}R&^@$m`SIu}da6j*%SbYt9Uo~QpKAsT
z@p}h5V)N~1;njE6F9VXY`sX^&XsR!j@C%qrzYqVg%r7;in?z+w#iP^gGx45I<gZ%h
z$lT-EIBPu#nVc;kuAbj-57Hp7hJ8*rm+X<l-U6GgbxhZD)W@0qI*{c#{7D7t#WU2K
z`utIRU!8!Iz^1hiTu+YgYx-J`<+Q&$?uYOtxAqN5oy^vODHocYpaNOF-d=-bFgiB!
z2AZLf(Or0C4$jZk?v}Kif=18DW?^Hz{`L%kaa~NhyBA&4@_xQLWN-})vqe_X1^WBr
z^opQ$;oc#p#2%TDEL4%x`29gPhkksjwC!Ie;(t9cv9Uf7cHJSLM{){hcg~rT#3JaF
zw$G{$xCGX{Cz!p^y}Hv_aBK$$M#2iFtoojqnbBuqlOdLtRv=|l7y&oCzrTc|qa%OP
zo}gm?So59!hQq_d({NuSFJTHY5wuv<`^}N`h_NwFGA1TUZnY|k2_gPRN5@}r;Rr*-
z6GqUU9G(y?VSB&j=T9yCgm;hd(dlGbMuyPpD?S-N+4c+hFkctzk!zpzghItt3exkZ
z^IbTeCPUbAiVIZMc)5mzM~9yu+3abd%sCugJfaN$5a|D{{)MMSc*uPnLNei5Mzqh|
zP^=oBudDy5xEP^}gcaI3GNb)FGM8NQr*RKUD2_xF6v$aQn@1<xIy;}qYRMumopvl~
zc{j@CBr4d*S{4_h(BK)|ZW8|AulxUYZVKDVr%^9>xpV7VzY+mKgeysE{wK3nuR>T5
z&COS;kzn(@?}EW?3BcxzCJXYn2=3e=v|Z5_a38obtNur*V)ipVNYy#TCt<gC<d+2D
z4K1trgyTk|(?iLKQ|;FvOD!WBUFR#Z0ECG4<weL0n@vwQc(;jpoVruQ9DWa|R!8F^
z&tde&AR0&0@<h1QL*3EO3*X^wsIN`a`*_RB%Ib*56fsVME8R}&i$xO4Wv2he;|YIP
zp`FHHiropO*~H{TWPw6OP_!!S!Q6JM_U0CdT9boccx@&|gR+2$Y&Shu^oV?_q2V^u
z=;U_-KSV}G1_>7=aE`3EBOJCKlaVVQ{uK*wLph_tqpUC-{_NJa?~mp`UCo`RS<yPw
zy$iRN%%|2yRHIj;jPz_~OWzTzL%EZGBO@%=N-}#Hw5sSv1pWpc0A&#n9IVA@;raG$
zW9M*g5GjwjvGMbC<6)TbhG{jloNL23hW|5ouqh}V&08#zduyo#HhgVNLcV!>)J{q^
z`h54ZV-8;4g>Q)m%Y#(3Cb{hE6EF&M{}YTbQ*4mg9h!<FB-jw1ic107bqLZM95_E8
zSNpK^_3UJf=--V)rvGUiLS0TiJR(c1<2$Kw+H+3nN)7q`-F#o;cDFkAZ6Xfy(vQWV
zznG)ass9MYA-yf2H>bPg^RKu>1kl@fb2`6HMfOaFCo2pr;D|;?M^E;}+z?>Y9zrce
zc3VU}u7OA_Gh=<q<*@$|me^?#q}Te4zTN&gEuG@}bDf@UE^JqW>0VZgDJf0C6lrBk
zY&T2{G-+wcv#nVa=b*0{X%yrF6``=OUkii27Y;u2sd@+5ZYDOiz5RWh!5NF0Cn0F6
z#g!5YRDr~NxA6G;owTj3KmW$F-2!qxLh*Hzl8MIf&~P#VLt_2m{4YEv0X{zB^3HO4
zb*xjnKjKCUUbfUjN{ScC(6^Mh)n}uzWyT=?4)_T@sL2@_ImyX>a^bc=HHfP=#_E1R
zC7XCPvDJJ3AV`V{453jSn7x*-RZX%C8}DeA5}y7r%xpzyCf6xP{+l^yQ1Rc+LE{e`
z+P(e}+?c-hPvAyaV`X4z(Z^HNs&7t>hjAPh(^Xb1C+1vSzb+UfzgN&}uFS3eI5{3(
z{fgp|9teoy{PpB4ZiznXpfmTc^%D~l;FKa^G0)qbX?W9M`txF{y!O4Y%G1Jo9>iau
zGgN{fU!o^Cj7%S&h=_dLOYQ9;_F%t!e;6doQG<P(3B!uTgqtqS2(`eU3wUrzWx86+
z4c80)Gf@oEnD}rys-)~kV40w&mlVGsGp3yPpT~J<NC$C|H9Sd^;x{kxra(auF`sLi
zSv9-1jJUX8U|?Bvd2uls8Ya%*kA!%K^)Uis0;Osh`U*VrFp1yOJp)YlvHT`Jg@v0i
zE{2%Tq#nKTte@97&)-xpysg=XfvPV-!h88ob^_qgsE;4t{X`kRbTa=ZJyGkn%HDkI
zveXYs&O-H)eQ-umBR<=8WqgaBsj(Uaq!efhQ^aw_4QP@Aq9Uy({<JkeE_vp@$=`7l
zKheFlVFe{=CA#Gw>wMN@;<M_I3;9kNu<BsLS18p!8&tAihdRvCuBMt+euk2mrANEk
z)5m*H)n(eZXBHl-y}?;tS^krq=<I8^1RX`tnFr1^rKA1``v}x1{FO5l!5!-Umk~yR
z^Pff-OTqgNtwE=Vk5ByGuTNE*ER@C!{L14|eYW%)UU~W+_yOSsU|Y~JFhFUyy15wK
z9(qFKP=DYdFoI%`j(Bs<&=vJmRJ13W`v-*4v8S6U7iyjD`cv&g>uM_2pXdtnmCm-U
zE%1Ldt#MhceK{c76gKyTYMro2avuA@HAw%&%J<2d8jc(7>wry4Hi<isQQ2x|?msXR
zchokhkoK*ZN%7Zo#C)?EpK?ECW>(m>m6zsSuVw0<%DByJI5_eRup@|=^ShSFW24;N
z7CuvF*R`G&S5?*eJSttzXs(hPAn#92S5m29O%)_WV&CF8Vwi#-FB88qlb`d<%-pj0
zl#y|*Eak?KqJWP__o6&pc3zudJ3o%I=!M&#v`ca0Q3gboN80`jdUws(#H6yomS7vh
zR>Jiq?~u=y+ncO`{(gS|sM)ioMAhyG5InvG8TV#tZ;FepgtWD#b}t?T1AYtIr*^TI
z+b0;mIRaL;M=JZj9*<GQ;NLht^s5V!u{6xuvUv9e7ypluA6|!Er=(X;s46C&luM1#
z4@8(4nK-P@U{nc;h}^BZUiGy7I!O4JmzNt4D8RaFpl?o2kIfihE%QEP?}MWC^DtY?
zE3`6VrlxBLBy`Aumop$H+BKkObb{VfKr&1V)NMlVgk5XhKsvCyyN7(ByiWV@hYiBc
zoq#n~p;ISA?uGM<Z)E-x^B_k7OB0z_`<n;<g}gXcV`XIp?WJ<@bCFqr;F=m&m>>^T
zeosVEhvTDNfMJ%JjVd4BKu5>mwkswTFnYTc%mPdz%pk6}%=?PIrmsfbrdM@6Zj7ng
zTSbFk9bnA=6>ynUIS)6TE!s52@{jCogym>my=--|q!(Po5T?$6{81=mk)njG+}vJu
z&R&>z8~PaGK4?#Ag3U(kyzZUHGSQN33}dB8Zsa;oxvZ4<+RX545IAM%XTYIuNyugo
zm>|F#8R;1q#HTI^&UQp><t!CNci8mtgWO=^286NY`1)T(3roXYD)0-xxkxW3C-<V#
zdH9!3o3ylaj$%F`Hg=J7`l@7M)Ie?Qf0ixqWyJ>`A0Luf^Wc9c4T+6Zu6I8pA|ct)
z?>*UF{uoiF6lZS+tO)US3>a3w&HzW!_Ec<9zB0I?B3c}_XUQMEeaQJ(3wg5hIq#uk
z-q;we*2=UeCL@MW_GVYkhZdT(noFM{)apx|+vwGuTaX|TNVKkNs$0{oM|0zeE==dL
zF`Rdi#hwoUd?6zvqo%&&flaFY@PFnXF0acZutFhRAyk3J#l}cf>8iJuKmYkm@)msz
zmzhsA9?7i*)`{%b)7Rw0KP9xz^F4?O%t%lF7Q=P@?PlId%tByX2Q77J#|_NX-W0MF
z0EI~TU7z$ajfIEn&PqaNF1==z<8j{dQvILg6HSf`vYu2W-%d$E<sB$%&gWniZ9d)I
zwH<o|6gS`2=p|FlYHNZE_tQfhOgRo;^8%<&8p*kPn}{|N8SeRaR)ThOrO&QypBM@T
zo=&X$sY}^*Lz!8K&m|NN!?TG!abz@sXnrhXZuy_00>)xdbYiQM1$qfSpeBjed6cr%
zuEu5vwcHq!0*wR*$L4flu&s@QIYLkXI0^Fq6(^xYg+|y?jCg#gqOR^T0P_6Sz=#>5
zJJ`|rr%99L4pvJ6Au&G+Q7X*FDLZ`4<&M{cB;@`^Ry@)72kF2Cl%qcQ1g~W?>zs2*
zMw3vi&-d8qPx+r}bz25*F7_O34q8BoaEC+(ME$g@$SakV(vh9{W~t5uwzjnRqy6=M
z=Gf|8=!sP*Q&WP>JLJ?)R*BTGKs)c@@$tq~9m+ED)W35mIr9^7T({>ud(~SPWF_0*
zaiH#vUZMO$O%1P*e39#Y9uhuR+dsJrIJk+lyM~5rr>-p8nT*uAoM8S`FE<}ARUL$`
z;0ZSKp)}Qx>*^OH>X3K?hN$qUkBBdJctb?G(ns4roA|w^t6iY+tQh(Wa*T7dB}gqc
zLz_ew)?SkYE{IA=p{qGvZ17#SftR={i8mrP_E8DNHKa7tmIuZGnObhfBruQvJ__e$
z<Ow9?Sja_#mikM0y!@(sS_fKUdWit%t+nc+goOf@63EpN-uOU#R8QrJeS5OfVHBXe
zbOC>RD#`GdzrNhS`LX(=x?ArqGl#{P?qB)-3y26kP}p$aJZs+mJ4EpB82|qQ5-_^_
z6G)J(!z@NoBL6}QP%M0o$1@jE=WSC#-{M&mRAhVWBo}qWrY+kEN7)#<Ubafx`lS4H
zA2@?*cPA;8l3U-R&WqQCm#&Y=GrWI!9ufQld5VjmauE^5{il0Tfi$@soeYJHWm&4Z
z9=Q56T8IBaVkkgV<8KxN1qB!~Bwa6%dc8#Nm0<|WEeYghvo)0Ua=Z;u_{5i5JTaw%
z>X@7RYf4IEJ;vO#kgM3FXur^o1a9ohnwR}VSNz%&TJTa*y&9sqTLNw?$jkd|crxH@
z3qmG~v-2f>i=_Pi(>JJU{F2%qnEIKJxWx93e0TG_f^FT1Iohdrz-elBHV)yvxz%+Y
zJ-zhILaN`Fn{P%I|Hs{4ynFaH+T%BVKg0spZT}s^{y*Gv|3cEccR&8PHZlz$#q5y3
z!ua;^&=An?5MQx&)XYM;aB}`c?C8c%n2-xKY9nn_#;tz_+<qJx8fw+_L-hIcun>Wv
z;o;Sxd^}>jo$oVlzrQa;45<ReczAixY51AJ#C_(e-lTn}AF%Veo=+V?o6t?fN5D*F
z5}3-K9d&YfROiFNqm-j;K9YJ=SdR__xe`C^(CDbeaE4vk%J4*~A$<Y@o|cezI5;?S
z86XjOuS_4uZb67goDd#f^LqMtt7r>eU==vTTm}aQLH6dp*;Cuz4qZaS2%qzetY{~U
zGy~nWsXF235_^Qhaja$!jONZ<>fw9wUj}hNG7-#&vLphnebA2xEvX!ml9I~|(^YmS
zBY|<+gf5%YwTlOJuj*;Ukq^V_Y4j|6ls5wee|ATXm%B}xs1%&9a2hU!q#)GEJOP<s
zSilvuga$H}27xEksKC?HMqOOGkl@Cfd7jy`k86cezCNW{;5v?BGAfK_XS1Z7qe!EB
z?fP}Nca+?VcGUlh1r(?~q-M-gUY~$;k+);dBqW?p_RS)Um5RGY+f<Hyt(%&f5cM8~
z`JWW3&55bg{_yZ%^4QuGj&BX-aargtAm)KjX`$~E4>MT)R@t(G8>#&T0B3=U3W=N>
zAa$-868XJ{5DLV8RGg|gj9gd$NiYvbfa_9&Ad`ZOjQLRx!Is5yh3BId6Csg_>~N2O
zD3x~wasUf|6b2dR7|Y9tdeEI9x5gVcZv3|rMXyE}P+t}~lEnrEzrQd+Xcg&F?3J1h
ze|D(nN8Qoj^#GYtKFD^j8so=ox%dR%n<<iS%F0^$Vczzcczd!BF&%U-!gOV6C7eb*
z!(-DOfKC{VGtx4yUB60x0iXy-<==jV)|yMEb$f0nUH99H$=e{mIaO_M1*{G|$}As9
zPg~lk8r(lRibF_=PJFBFM&EebBvIVQR@s+z%sXvs8#9%wo0}esBkRD&ycVp5z}<v!
z@hZ2~eK5z&3XqjkBi}(0Us7p`uN6yEUrBs?Lqk(2@HTG7M`*e^li`;cjLz)tLVsxy
z@1x~`{4NML_|8@9aZm@>E(9KVt~tWc6(3`>Pkh>CG&FWsA){BTCRw_=yy(3g$%IME
zXM$i-{(-?!8y>4Qh%!R8^H<t)xL2e<Y|Q24)P561xJhK^_N~%>;8#HKL)LC<XE!@1
zPO5EetXBW}Ec;`IxHa6A_kEPVoLlYh#@z1JjOYK!P?E3R(tSEpd;5lXK6lxxr~Wr2
z+GAG$ED_&lw-|4%@e%>qd6k3J6Vf!S8tY~2#R84rnjL(4_XdM7?D=QX5}{ES9-+-(
z;JAL>7vO#;ey8mgLhJ^Jf<+>7U+xm(PQazK6aiz)sS5}fbRnR$3dYh@@#k`iZxrTO
z&GW)Ohe2{^#G?ohw)(X(sLszFHRJg=dwH4hlvmTejNidY=Ox_R*)f@{(||{z*}xe;
z0zZN3L)5+J138M&8);~mWy{y(PK0Dtcg@x~sn!U&=MR>$>Iu}FMD24&zBK+4ax@1T
zkLx5kElpRx@p1}B44>DtE=q><z~b-8_ob{sRS??4E^1+sq*-QyoXo{TQw`r!cr^^M
zu~L+Os}R!Apl=Ysv$7cuhyZ!ytwDhOv@btL7vy6Kd=UpUI#3{jpG_yqRW$_#pDO_h
zOK}O!8*`B|OqV?;KRp2&0q-6i2ruDQlBX6HlAcw%<0!DO=;-_a`h6CQ87J~N!~h+v
zO^|Q6EgadduasHlSie6W4`<+WUNdZ`i*a#tb#0Tj92p$Md-q}d$<xi1pR}MPg;A_f
z`4iz~r!WmpL68FdMzPbV8?nrVEx$mD>dwYD06kF=_`xP5Bkb&e^t>DTVz~jq0iR=H
zRL#BNFgG=mB(J$jqmXN#pEI2EY}0#zk(Id_0f8-rnw2+N6p}?jg!As*TUb2+Z1ev<
z0knn$DefKY<lIcE1chvCkx{z>FenH`CcN94bIC3ubViM$4qi+J@8bNt*OZIn^hw}B
zA5PQLsDe_nWiTn|(!QGkZLm_NIq|a8E)^%I`0qmoUt~<;EvjFjzqGh`$T{}-h(N{o
z*aYl25YxZ6GRd<h94)+P{$eONfm;()0J`?eBW(O+bv7<8U-&DBYoIH=M7yN`vG2IL
zs@^!T4a9L*6x};Y^_rop#W{ahLSR$>DTLSuB^On1qL4?8rlUrcqtWb~H=_>l;J)tA
zpUm&DT$7qQ2eD6?GMyhRQxZQ>O#%J-s>5`;7$Z#Ypl2EsCt>4;;D#GqDyALH0}l53
zl@U+?{bqfClNec@qX+btb(Key!~Rg6&lIPp&leWMs@-+gGuGdptBksHNW@}pia2-c
z4_u&Er;D%n4t{B&k*KTpta(hejl*JNZ!DAR22ixbk;ITrw|$9k<;l*@p~<Dz%6C`?
zm<#ls!YaNO{M~vnT~OSeQo$HP(8WwTrCF-WlxhksvC+JIJImC7fOq@vx<=A!k(}Yc
z^%U~JJ3cT_+7q*=ocdS8pu%DA8#`i?nk`~Ed3n#Pmt!J)&&UM<?vap}Sh%ey)Rz1a
z+eV1LJzpLV@8j0iRy-y412-rJe%Ff2LH6?5i%3)qG`0#xU+ZHT78txS3}`7hDJuF>
zSeL@u5{OVvc#!%t<l%UM`xlHLYM<a}Q{q^L`$@a=3N<w&wE&ztt_(a(6@^=(7)OfY
zPOKoJc*G)A{(AiwDv>1<pNqwS683dit^3~b$u}umMON+@QtvBjW#(5^KHPvsT|87+
zP)n=+$@Qhxr7IT~!3v=sp-W4KTBJ!!(MxH~r{^^t0_eO&aPxvK;<vn_UW^IvqinzY
zRqpw=Q`NAf8;7io9(UaNklN)3oxw*XNDT?>nP~q}tN7ncQiueIa2ks&CO9|ijHDf{
z5!r#XrtGXN-O2Rq>`Lw78^Hhn9)yxo#E;q0iMU=uoX|qSZ?)nw+66noBW1&>(qB{F
zJI^8?#hBfG`aJzngw5&&mT=5xy@_%YTI9EO^zOm(<SWGZOhez3g#r*fftOh9u!75V
zs}DwZlv5PzjT>laM&oHBP)xBUtT0h-3x^@{fCv)+W`{ZC<42<JhmxChwQOaq0$x4^
zb{a0f8e2a9>@0X$yK-3kBO?Q>NXi(fs4r><_R>cs{{_7N7#mp*HBZq?hC_q@;(`bp
zvKVbQFCDy7qOITe&=>RGM7fg*h^0Vj43L5K?5Q_|?;kt5RMXi4yQfN$@bu7h?F$oV
zl(@OM0sQ*W#_huYE55=~bB~a%uec877_w85gFsgXz0<|Ox>pCDdZ}?}bci9M?jwbQ
zuyB*p+~J6sIyt+;L663V0@>i1_KKpSXl5Pb^k)$v`(HMS4Zk)nWi3q^GrU&SZdwQg
zKRi5|GD&Qo%+IQTeZ9+NN@2gZJUaSIMT||UEGw&BAo9#}ncy>ezPyguXn_I`FYoD?
zJg7=UHxUOajxP@Vn8-n1y#4+B-M7h#<Q}-NKS@$+RcLD14h#)}r@-!Frk=f^*YxH;
z7$s(+|1?T4)=s<Z8xD>2Of_l`MaxsatE_ch{*BnrV<u4CJ!S4I7Aquy;luQ0eJJ4Z
zEnP2*tcCxoy#SG|0+qDWQKQLd-E@Y&KIEDMp70`5!1WMZn)h(;#fNPl1Xm{V+1%<R
zr)I?Ns!!YQRC-jXwpwM>B&x`7UaC;NZ{|VDkADQJ=pyRZm*fX>jG#5{@x}4v_Zl9q
z38P(joLsne*CtD3Up+|%q)YiB3;0E@W0HJv`VqNjGE!zbZQPiK<}_O3+QDo)09=Oc
z!qin8N!19#^U0zNd+FEwO1YXCd!H<bD$Jdan@dDKF08ASDak9T0yYyIdp2`oXFMv8
zc!IE-UTN~hbTA#fw2gD5QDt|R)v+(c^WFLiTRfZ2{^y7;TIC!+*U_>9)T<0|M1GlM
z%1U2aS~62F7mRSO-5TgRzPs>R*ay&P1aPcICMK&u>E){xf0lRS>3-uD)pJIC{l3=U
zgd%@BG@f=~t%^d9u&C&q?(DtU&B09B-!BH0ZJ6#GCD+9yo<v^vx4RLNDl$pdZG`9t
z59sNM_dAZuRzolT6nm6!j=4j2pPw$qksE3NgemFe-oTW0cJ{HA5j&BAG+u5Pg<o_)
z83@QNs=*R#8!p-VqQuzF)wO04hvV?MlfyRL7Mw-yO~=?wMG2bDPGl_P@2}e2Zcu8}
zx3%rgFpGP6t1@|eYUL|~?epDNPZft1X9KzZNr=i8pp^F#ZR56Uxo5rpJ_bpcFxGWH
zTt_aXz@z|gwgvW%2bb_}vdJbgE(7*I2C#TbeFFF7$>E_m3D(<Y(}7Yn<6Mmj8HH*}
z5H)zw<qzh{T1a5ETrq}li%9~L;c`21OVptV>Y~diDC(uA#gP3M?rBuvnEk#m_;D4V
z<M+a%P`N)c01pNM>;sudBy=?oGVZ(grJyXCcKqo?bMsRvNwFvxKCvTl2SY9&o!Y+W
z=~N28IIv=&rZ|lY52q;Hy86-LAV|YcQz>7$%q#t&X(p)3AlU8aW{`-8o6OTxE>uka
zlrYk8{0MBzr%Q5E&3%}}oPJ(av1-=OKO;^KwCn2YFT8CQ$)5d%ff>C|tbT>DDve`!
zc=+-u3l7KZH9q&#7h+<!6F$5@JE_dNxZTp#E~hAm{V^=FtN$*iaM&|Yb^*9UfaGFm
zpYSN<yr`DRUuMZHGwQ#_9wrxJgVd;_qE~cWDG<KUI)0C(t*)wWw=r>-Yp&og#t+X-
za2T;0jXd3z^peWQQ>b%wq5!7wd-#*6d3mnWOpuL-j*N~v+?#itwfT8fd(*QPmLi^u
zDgVQv%0UAWVG-TD61=%LE#KZZ8CN;|(D%d-<Gl4k5OnIJ0|Slv;Ou!hS|HjuI0&nk
zxU>YH-5maTqBFmUIHq-H+oa2UQRsk&U(`?e`ZhK!6QVfy{ilT8Tx3Xg(bw0{qTuDd
zM+^gG(>(g!<G8e%sL?J!p;O4vb0GD|L&bXf6NqIJgZbn;mK8ElP%ih~oriwl4W6wi
za5=@Xo5u3%ao?i^*-7t@fEF@8BJG)+(X605slR{cLH|5cq<CJ7<<^OHyY1p3aG~Au
zK3}~AlZkDf{EBj&kW+i|Go?pgTj6a8e2T$pJTRsgBMD_!H4nkEfhxbeva-Rmdpk!6
zsWp7~@G4pPk<CJiCCo`FIzqxiAcODul9b3}!hoK3^!}Eu-BLhw!p@6Dj5v-lHuF*s
z#Cc`O!u&{wg2A+%t=)Z02rL~K7;Fo=N6v3xbJ2lvWfS{C2r`>zV)<<L+qQy3u8PTi
zN#UgshtdkQk-?uZ*L^n8<*?{?UBV(K{{->Jj`Sdmf%9NsY|Qc3K+ABB3Kk}&kN!lJ
zQx|A<<+z$V--_G}35kjl-m*f>xXpF9rvbDB5bzyBLZP!)HYbtm9_Et_x|M<@i{Fe!
zQ>N9mw8maR_@5@o;!<^hgwp?(pj6=MbmhBD0`D*+b0khXC)ZR~9+Bp%JjkNrSAkl9
zVGs-eb$toN<L(dEYh*Hbct0vE5X}wC1%Jf?fP=*>mKUF-B~g*bC7648=y)O(!>MYm
z1{zSM6z!|cc*PDeU7sP~8@b-NV;U<Kto_(jNfxFKv%YFlS?4J@=8H8aOfM8EJ}@$3
zt+D*5gg4D6C<s$XW1#n7{@N+J4oplqIDUC(-a-lrc(Lf3`12~=i+#}{55tUAawFP=
z#gD{n!_sJPGcmKjWqzlLQ+HYX7HVt}*6SsYo?2`vkfh^_3?LHvM{WtQP-8SFK_u5)
zqIUH2D-f!*R0C_(Lf%VhX&|Y<)QAsn+o=@35CzSWftxw?1#+@8;B!A|LNU8S@IapT
zMcV7Yh8K|K37|m~?*X~AwzhkersDg~hugW>euAY?a=mP*78uJ04aK;GgvPM+Q3h<;
zQ5b}>kT&&Rh})p(_?~vsEF?=$Iv57u(b|h0e$6c6`r)ve<@1p40&8otzJkzF31=;H
zgtqZ5xE(^0K4@=Irhd9%i<%_S`FA}r>cP_T#R(#r9uE>{s?VoX0jq(6^c2I(zS-er
z1P}Cp+>a)prTlXSMz263lk;tv*t6{1|JS~lzt5V>)hv1w_>;`#jrGz1xy4o(&g40<
z0Cr<q4Q!Z7o>~f+|B(OWJPW=A!sj))FD)%?*OXGFF#%t##|2Rptzur^7o#7QHy1(H
z#5~F1mj*B8;)n<GuPi>5zmK?l(z9<a76c&5;?!`p%i~#r2Dq@c4Ae8EdNhDFp^q#5
zZS;9?RU`}@<iyuF&j+e4ETrkbVWp%%s)=TeWib%Kv?_(%?rUGNvnAm4Lb-fdxzN^a
zd2gU|A_u??5D5YY+1lC+w$=5SO7+v)<A1fnq`6m%+QZ8fO~3*vuRONj`=HVVY3q2b
zCYNp;adYu8$TJ4pCMWe$x<KEuy+qMypwkxEKRh_t-!Ctxct>Dle8+zgRK;*wc?Rtf
z_o*l;twU`nSoJzi4qj6I7V*As_Ii4<pFj}<n@0~`TZQ=~VR0pRT(oW7oOea*yuDk(
z?<&wL<#?60*#(Q-yd^3ovZ!nW{2vj!MR$AqoiT*fao$~U<pDC()Bc*gI9Im5E~p-=
z%W@#k6R>G4smIK47xjC<wTL1tynFN~SLd+Q@7CT&Ml@<>2+HPPb1h)B{IH$G@78HX
z=(4-=Yc=F+rcB~WU$(Hb+VRA&2>|9~`v%=#is2MuVPq7Sl|68|a39)|*Zw5)qYX??
z&opIb+S&{t9~6vqznw?3>@hG<;+U+b{lWu8a=vQ74iqmFcE*1jD2v`_{G+cH7Z(@K
zS%typ|1eO7(T&*bcdJqdCpSE4E}@7}DR}NQtOmuf?5W#UpAsM+{^VpUr9BCVFc6~q
zg(*v`Llnf(DB{}UbVt9;r-O}|$*vRwM55bel*<rJS@I~x$XK7-a;xDRQAM6sNrB#~
zG9IOLdv)SZ$;gzCkq_z9Sr-4%L`3+V^ba%7<Nk_3bq+qax$#tq9sB%=oU9x=Th(x}
zZ$LqS_BqQUd9%uVZ&uisr+oR3BfnFCXweCI4ci;O+V2te#4@>zcm5=xReI_ktjWhz
zapru`BoE>w{F1~_ZrktQc@PykZCtQtSnYpMRhyWItFVxllWR941eHt!0zpc=F<SDt
z=ew5#UP}y(R*LJ{wY_^MX9LA%zWH$#ogEi$KYOG3@R)OLTuvx4h+uxX8X?U7o8^TE
z>lFdwXfX(Qp8IY;2O<VDr`D^1!$4+Ko#+Au*X{uYi-BrvlMbf!c7wOPihWM`ue7|q
z{O+^TRbNUzK4I=mP!hw84rL6Qc~@?--wU$K9c`Rx7ysW+mAGOO*8g^@biT|#*`UR8
zat*5^#rGWu3bV6~Hr?IQR%@Up7-=PbL*^ArB^$lFvCd=a<Kr`jkV#md9Y+%2bm;!$
zfccH-1Mup#A+Mk!j7bs7d2yef&#f(qhp|JvDWuwd)!93Mz&ftAd)vqe#1+ROBDS{p
z==7yQ0y=njV|MMX3rG0Ow;z&~TV6|P`abhoK~wM&KOR0&PZ`V`^O?R6B(8OKb^_HE
zCY^?Zf;%|SpAJGDuk>ctv?u%m#E~V|1V1m_rqFMoT~I!J*g@<1b$+r|=XR<JIFjgJ
z8=*}a?SB|&6guB{p*Xbolp^+Bkc5oPt?j_DRNTu!sKfzrcL;T_;I0@O19^z5=zqj$
z$`H?kbvG?F$Jj_!sOsAC*n>Cy4{Ngv3T}N*^8Zq4+|t<=OnOsQ?YfLCPzd>Xd6d!#
z=;>v)zi^8`=uR-PgxIbS5<1E1yfmF!-0rxseM21Vm-}lIpN#i%^g6?>md4%2+GnS$
zIjL!AUt7=A@7%<~!s`kqVqw^%rb1pn*L@~+Eq|SQ1C+(V$ogagj!>J?o^~7uSjIjZ
zm1LmumVqcxqJ%P4>wzxA029=siCtE{5|2w)>!gTzkXmYHl(x6GM|_=2^YEpU=a|c@
z#~(rxJT_i(T6~4+v&Ao>{e=Nl^QHH3w|y(EcUr$)rlGK+!=?_wQBzYJ%X?lHusSg;
z?&$2?*@2c#lMUN%BLdtEs2zebM~*JR_t>8wZ+@99=3P1XvhdnW$7a2gP0@OG>Z)yT
zcQ-mzTYobgO8XTmEEY+x>hmIH*AF5Q-ne+3qmy#I48ePKmB5y8Hc&c||7zX$6{TGG
z>X(%=LB~?N_x=0~Q0ksU{`WmoU)+U3!heqqPz)g|iEA;dOCOAG7iw-F>^xSk8LMJj
zm8nj;<&eN*Q}C}^AMNwMQ->Ave^Q5Xl1R@MS9)%4wewkQcsPEu&q8mE1E8;9Z-LK8
z%TU}8f*kH148jDMdhO|3*e)UqUvBV@+`Z5)OXM;bnNqc}UQG)Kc$9;Ijw&u8BlyI4
zt(_@M11wt`6BRetXX>0xz~U^V{Bn5-je}T&Sh4!I;3u;S$)f^D0*Wqd?xjT#6TKo#
zVS(czexBC~rp!@u&A(2W??ZmZ2a<5<gUttGxFHqr&pC6zs>&3?yv+b+Atp|^slt-f
zHB+Z|0@OKq@jqgrH;LB%ghKH?)8*oji|sCr^Q{Trse!7PsAoA<w!a46w%q(i-|bf8
z<^w)*U`!`jxp$W|0iDgNkTK&CQiGTUjoD+dsGtOSC+JU+O%mAIUsrc?;~R}A0PulY
zz^PF;N>9>!ruHu3@z=4jF%XTPbSNM<>IbOSpzOcO-7t~bj3O&LOZCSkVmFj`MOdWw
zX`1h~38Ivhl@-->(qUy^5_}`4LQ*C8wx*`07!=5UsLjD%LMhqVX!(EOUEQW#urWlR
z^4LzcFH>{k^$PcRDl1ZDjYF<OPR-K(be8rF-8+@*d|v18xr*$+Kgzz$HXJ-l`taeX
znOZ&UtcKa~5%V5|WO!CWR*#r;Qc_aJdqN}2+28uVe*GGuJA<4xumAQ_|2CpE#L6e5
zl(Mom3W&~&UB|a8N*3}K7Y(q(A3^=_kbvOl;TOja8-W3Me{US245wQApFX;xjg4XN
zXUm!|`i&4!3{O-ft}-Zc$Q@SF9uqvf=#f_GSuE@>@gDaVjfG)`*Wne33_Xdi4ZeHx
zSGdS^egHM+pNiXY!J103a=X{4r?x{v0w@N7CM9W9G65<$F0LIP%NH|U<;h8YAfYOO
zc2m7kr7%<k69wh$dHORE_hT<Vg12%21T}gDJMXO?)gIuH=2d!Z*2(P_mz8;o_<9v2
z&b+_<xcT}d=(R&Gr=(;AJrQx$7V->wWcfu}Nu)(wWpg}N#dQ+?LBK!-(?9DqJrH<!
zYYQjpvPTsL1_dP*5z%kG8DP0iwq<2x8n`#lu`OTMUB17j;8mAM5{sPKv4zfaLCg|!
z=Wa|)tWXu|)y#%o3jgNTw!3%l;Bzqf2g`~}N*XK${vL;k@#hJ4ZEa1TMJmcEqMzMi
zzz?`A@R1@gCm<lQ$|p7_C+tDJ#cv_j1;O*@3P>yb+z;HFCrUhxD(*453p)~8{p`qp
zv)$v?IUQ1m{y(|O|2{qc{*wP2WBUJ-FF}x)J(#(_G>qcUy|+?;C>8uIA;Wt5`sn}|
zT^%;2AC9k0R~!WLaHy9V(VyzRtabio^}PWwWtljp_2V)V<eMerejnev@RM+6(5Kc9
znk%1or(#MPWm^MRN%*Sl9;@ceXJ8NsxS#&!CFift<u;muEisPStP?=2AQJuu3t8FO
zfk~{h4WaLRgNb8U?LLF%JX*l^u<y)wpTlV4sdXMSUKZ3=b3k)}c~ybN+343ZN=nMG
z%K!?0CDTbrXqJYBXXjRrgMf=OK&try)ygmjP%G36x>=QgFly{+2cY-lWM>@qQ!nuQ
zhKCc_9QM%;K2pgf#j{uh!Jl>fp2Jok>`ppR;Zgr%gUWt$5{W-C)yw}7<y4kbmxLUL
zqU^LhiXg*r(k@WuB=Nc3A||di|8WePziu39xN7kV7Sr@_$|{5!OGYu!Ydl%2Kdi8C
z;`ZIZ4AWq4o9ru?J#V@WdWBN`vx&jQUb+`GeUSfejk>RWe~}>(QDb(~nPIu<GeK8#
zDVW&PlC%d=@dK(~UC}NvF3b7-Ie(_E5pO)^cA1F>HQM^bFNY;*O-=WWw@&oxWxN~q
zr(0izAy5k>XX4PjR1I*?vlnXn8<S$zju1EiCZFiIi`v%Pw3>7ZQ?~05X!<@GVBOQ!
zHS{Y5H`ca*GC;xwnm><Me&)v5==(RKMtnlwjdVn%AY_MVszg4Qa+Adk_{g+(W@=Bw
zwd(DOuj+RvB8>zvbDowNkQzrbI?W;SZ_~0O+?@W31&lxp44l*;DZYCLo3Yghy~@`$
zi+U*eeiGLezjA2m)K-9EmU}qIbR;vGT3U+lH}v9CyO~><yN2?VY^EF+!69Djv?E&e
zX6zzYr63<-HTIzPvH2GaPhC1SF=sUL+WS-EASFCB+0^P|eILc3EHD3+A&qGg*!P0m
zmjdqST0lcld>Xr6a)FR#VPTONBve(%%ufF~zvd+^mHb=dMt9?`IV@E}13x8U@2PQL
zcb3rac%J?WenO^IQ{^Rk#`~y}j^oyPQ1%k^tz9-0h><sp+wMOCznSyhYiw#HAh-Y#
zoc+p_(PU&k2xomnee45?B(z`Tt5q;FvlH%iJ#l2uoR+=)SQ8z01r&Idc39Hi3&Bv;
zBo+i=2s05~D$S?eUtS!7;@6T)A(FrXlEUY)xdhGEvY0^e7{VM^ZoV>;dz~<B%{vV$
zQo_2+lexZ+B==U@Wqfh6dcl8kupV`2Htx9m^C||Cec*hdJdzIH?eGIfEK=@Li(Y;T
zaGM_au0EqK0)MCT-ZIpVa_Y^^gTe6NW9IiQRW&vKJ=fSIcT6IFbdosa2ZK#>gC^|0
z*35BTzI@5GbCM~K`}&bI>env#9k&h^pg-nUp;-)bs`w2I47bDYf)yK>3^#B8pys?s
z6+~=-NO_mm1DR7CW+SB%B^jW~UmYmBnM1&bTdWU4R4984hy&5sv&Z|OcQlPBXcta!
za+n-#tI#}i*6WHG92|_W&wm58v~uDQL9IJg?NaZ6m|<+CaDjz1G&Zct6?6b-J>x6)
zI4<4l7u4Y6>rd(M@l5&pY*b0JS1V7Wma;;#%xLr$PAP;l@H-zuqv1`hdz<TV6)jgX
zsQLJ&Ct3*~pzXLWj+jwX%#+)Et+~o|;$(Rt2tqW|Gdh)mmmmUd4I-%?uuK2_nDpW^
zPhImx$?ygo60~72R8{{^XKx*qb@+DqB1%iAbT`r|UDDl1r-XEON!J6?-AGGGgS3Ez
zbazW54d=$+JMWrx*37Iq=RX$l08f3ddtZBhc6e%Dk+k%q7jJ(vN*5VA-|ASG7%0}7
zo}3I;<8!zdH#W|5&eU36ifIPs8Cb7URSPd#)WNq?<t$3G7APR|;J`Y#{C)PjB6{`-
zF4$|n&nENKsM2M3=>rV=--_Afwe?wyg`%JqW(+P|3b;gXT?SSQ-^xz>{{3wVVW<4V
zjpMVqr$Tubo5NK92VhiEG_s9}r4;t`P-;1V6XyN8dx9#YR~%nTzI#n{`dl(k6cRqG
zi1%^sjI|Fzl^W1x1UM+gpWpbyutJ`k38sB5Xm&;x8p^fmjZbpA;FCc23F3{}P;yWq
znduxE2rz<eKZNiMct3z&0mL<pM~=3}YV|^0=l1zsCr2FOHsV(NK$Us3%eltN<3o?P
znhID(m2c&t_!lVsRDmU@QOszy7yRvCs#n~w8L*X+*ubO*1eEY!m_0iQ0Nb~wBmFn2
zN{Kk)1t_16z-G8@^J5+-9MY^1ei+RXtYtD`(8~pFprXkVNZY?+qoYSEl%*O^H~Nle
z+f0t`J${+=hhJK3fCGRmE;Ct;@9)nbVk@e}bbR{5MbuP&z<JLGRPK4V`g|+eb!j@=
zqB7%~cMCicfk*x5Bj9u4)L!lzga3{XG;de6-3>Dh|I;p{PSvwN1wjM9vWA4ZOYcu?
zt9>h$Bq(SVm;I><?Xu|tx`bzB4p4LU#6SttWTU}KOXKk?7?`bc7NB;EG`@&=8AHg&
zSV2>%-;M~wZZaJO7}gYOjb1BR0JV((LwTl3`Di;?;1G^MHSc1%(kg+p*Vfn9$CCP0
zql{}4(2(r(0IK#I@OxP=?bq`%05hA<{>{Z<a{C>WvDx%RDw;i-9~%-#{iUU(s8uO1
zO-!7L0qc9=DaxB$-60Jo0uCD%pKZW8gO^e?%@W+w2U4u~ZjL-0GBJnCty*|!aar-f
zO^@of8;9W}xa$VH1D_3ezB=uHy&(4w4>VB(9pKs(5{Vn_=I9FYE5GiWWRsagLN_me
zSOcA6E>8#K+XLomy=Jl&>4VF1D+)slGn|V6DsEC*Rq|c*Tn!ET{;Mjp(?AK)7YNA6
zOVubEBb|WxE3B1+@R8vFm=0uQA`ZAJW#y!TIWKn_gs57QnDt^#jDI2KGNA=wo^@p|
zxB>D7+jS!uDD(mzl92{C<LS`D^^J{e!P5^-##^}kNWEO<i(0Q<thD>Q^Z8jfFd%md
zS2Z--^IbE0xq8JA#r8vo2*+@6`FD#?5Bz_8btbjIKM6nh8LSPWPbvaJUr<nzk%?SS
zTUuMwn2}-O09>yN@@2~I)78a97e(mNO3Ti-0SS3|<O!PC*sl-WrUZ5eToo3h>AwNO
z4^IkU&*vn`@`|hAMj0t6#QqIbnkV%N5V>~Ap3P{v_r<~mg@uEYIOHp0vp&d8(YW}u
zjmo63^#3H%GUc(E8C+k_Rbm0JTTo3Td~KHypLM#{9ZC~Ra!yD7tciM^>;15O{+r1p
zGOKQ#3I0u;v55b}9?-tuWeXyTOfJZr>grUz$7fJH&)*?MCM7K|FC`Zh9xHnvftrA=
zzlgWDXKiiO*VEf}c^*0Vz)<{eY<)DU;{bbjj)?RW@&3NgJ`re$5@aNcT<mNLva(1h
z$c6mR&x!%RBx7o7uq5v?A_)#uO|gKik^z0O?eA%>=zqSRnlq*}%NO@nw2Q7<N=02+
zB$0{sfTr(1gZT#O3Cv#J?G26mxnh6>B&k`F1^ZthA_5-X8`OD;bi%_FbdpQUt79|$
z)2+xPUR}RKV-bBpcT&8Nh=qMa`=4(|i+dY#-AwMAO8NXx{vSY2|A%>*{zn~<D}X4m
z)?#F9yJRQafzN48x|FXOi;+YX>=ywklyN;cBK>zxAYM_Xv|YK}IiFz$!%Iv@8Fv+v
zUd`~>fD-99Fj)QpZbRc29XmfA;!OVV)rTAh0l_vP9}Z~TB?aZ>IXNdo!u?iLWk@TS
zp~Oo--@yINX+3pow#p3NSD%NxGv-sD%mU6b4NXSX7k(fwrmU`h<1~{E9UoE?ei}8$
zu7>!y;I$H)R&Nap11q1(bMtpZ7g!QOoA5i=N%`xnsBE6)>1ho)5<dHC)s`4wFZi#U
zMGaX1m+_@mhuZq+XiMt7-Th&Mx>eBi1{X`bzg!zyp!M+i5&+M9S8wc})?NZxS4;tz
zJQOlrlCdnOil%_GBAymV8*{Qdz**#V5xh`w*9i9{*aM8^2iXfpLLSw3RRX{TV0^QP
z4}pz-Z1U=F>%Y>h(p@Uh#!SRIH!_LB6FA$PQ{8!+oz3Bbv4|zz!f7?dZ@;<vg+Md2
zFZTEJ_^<qmhClO_+8sr9Pwlk#2XO}RK_*uu%dxC^JGKjrVhZ`x(cGWr!h%8m`nS14
zGGSQ2;&(46FqF&7$@R!-$pb>DnEFoD2g{k<wm75`*O_)bH<IP08Vd_x4W{aT!)ZS0
zaD{1qiNmZ{URA}seGIbMMlE1vx7g}tojXJxJR8i|#s*TmJu@s?ujb=|=&USfl=xq<
z@-!y&v;6smnE?_Z!L4`esbDu3S~QO6Xzx1x>4V!&mtK@HP{VieqBs)AC#KU{42cy4
zesb8&iDqCr7>~0?-EO8PfU^pSl%5NsKfi*w*Rs8+2OH#46|)7wx~G%8(R&M#f}*=7
zzwf@u_O6ExvxXc|o2)omm+Q}5eT&HgisoCrKKxSPKq)V0e4vd2=a$se(l{zynMB(0
z6^G7@)Y{}GMxqT4^M`HZP*fsf4#OM>WPS5v0(*awtk^^%qxyu)pM5Zgp&lMTCwlkT
zEmCw-B3nMAkj$4l6;nkf4W|i~`3Ava(kLd@y))jl=h**d=x~Pu6yiT=?{)Fh(w;AO
znjOngbibDrn@q^SvE_V<VdnO7-|eht(9Dlf%oa$kq71bBAj3zr@F)%~Qg;)H3)(52
zukE_Au&_VORA{KEh_;`L?*Je4Xu5zMXfqmn3#@6pJ5BmQw~<MVd>g*zC!Jkj%2=+q
z<EF;B$?uD4IG*sBA}Q;Oep75`=+D=?OHBR&lUk9-^&;hWNsSWm1~ngr({WZC+#}!W
z)w12;Kn)0(V0{x0Piw}<0J)=3-}yGDE4!f2mX=mLkNcLEmcjR}qm$L~-7^*XEntq^
zya&1xpbN%{1ZgtrjkhQs|I&Nc-_w(m3!?HP>0F~Je0uyJ)SAbNfQb{B45CQhJ;s{(
z)!D9056;oWVv2zGHE#yQdlNet=xOv1h?Ml|l_0~q0M4{vjs?yUt$Lj)kYB8(MMQlC
z%$B|ncl!K(UCnjKf3t+V1i83ef%N`9_B&`S+}3+aQ@3u_Zw07A)(ir`umQP7GN;jB
z0u+5w;$U|;{JFq-*K}oX?ze?3u7wpA<?5XCD4T+zU1#R)!_3O@N=xVn@Yx=MG`X|}
z>uU1^cC<P2ShIGd`MZXvR5x7{$rzCyM1)t9^Yu0a7#M*Zp380T-3VRoXB|jLNH$w9
zJm28rhV}qsFu2xwUK<t_a}Iitw`K$DPJZvQ&s`Kg*BLmw4_y8I+rI9=xs$<z;ust_
zS8I(rk%9@Yx|<FRZ<`w+D$N~te1A3tqGrlFz`tJOaow5w43QCbN8-bt#|mfw^J5fD
z=CFp4=|~ZBIvR@DZRyT$$E_ix8$&Q7>_(*!bNA5!g;3$G<Nj2YZoWD4fCxuoQrh;@
zGU^Y7+fHC8RV!5~bm*1@@z~j(`WlCWqAv^@+pgsQ0{H}|J`yT`UK=M4GB@tOV=rwU
z(p(05z9D8qIpEa1{*VA1X5^>$bG5*BmC56D7In7=N^qB(e0CyZ3tIiI6yyy50HX@_
zZ{_jv^=^SCPD=SyM>C^MDX!xcKhg-w6mpOs2a%)(n@qa1RfR6P0H=h+#9(<6JCd6F
zq2#J&KIfs93c${dL_}CUNu0!TrvVbA{TD`Aov+p<JA|4WMe@V4TEIgTmR=pGM6ij{
zNA(l`g!Mk(^m-zZ*}xZ&XCd;}+@eWFKoOzdM}XStyNh-MBWuq*W%ucsXX)1>D@#i}
zG&IspXmcCeX%8%LcnJsz2|1w}%b<LqTgQae$`$p{6VNMJU`VdqbRdOAfuW<PJORn;
z6f2Jm_~&s#7u-t|Ak({wKvrYDQVF4A>Xic&*n5Jsts;N0)Xd=bh5jXPENUEExkM%d
zYHK5A=W2@;;ohPA(lBa>eYaJS=V&c;TLPHAOiWCJMGXzpJ0|R6vSWxJvzN+k{U0>`
zhZewDX-(SOQ=Qzi{!>bEw57r(lhI5a@wAG&N?$A*j9ExcK}yL5TpWKcf5>WU!ziTJ
zwIqSgf^*>u7EY>`mvAm$&b0=e)=RTFGvZ?53Tw^fRKL-s*4S*i7LB!Kdbt^S0*Jub
z(UKP+c(frj1u4j&VumPVvq{7!o{K+Uy;mZR86cG3AJ=Yoj)*|?>2tn+j*7T=Pxiv2
z+*50{bTE=eJ4m*zk4{cr92PoFS*f8SJ>-;>SX!CmU}VtIq4oXr%lF`*d_mS=0LxdY
zQ-iS`0YqY8?J^c*L}cvL8lV~{Ih|c>XP_0b4FG%r*lW1gge*#nglx`X7y2*~Fsu#$
zRFzK5jmDW!iKv0|_?+0nYYf~{{VCJOE*+-Z)pq{<i0l)W)#5G)R=<Y(lw|ux_tijf
zIh?1=Leg?I0OZ=Un1m^VNG{4pA0Hog(O435d^Lbiy5Uv*Ql`;`hCf+}+8aIsj!pEw
z#GG-ON&~DJ$v~J3tiz~R+bfUlX!CgJ>zVv_;A^LO8Vg#`x;$QPX9v>E1c0H2Wyz)U
z%5z5wX;gj4zGN){HlpS4UaI%5;$RsD9;1#cc-l5uIl03pSwE1wJlvmegChF^F8JG>
z25@M7eBfe!q0Ro6XfgS5PPGei==;-WdT}m{N+k21Z&UL^US0jtdLDy~LLME5ig9>k
zgv{Y{G~VaVq!iSxR{^u%)EVkRMgYDTnSi%d=h7-A_!jv<=)_yA)R790erGiEy%2g!
zFkdRWUnS|#6|d(tAWMW!mg>T_{Q*e^FroaOFbXXMDKskLvive|h@MQ@O`*xow}UY*
z9a4FP>2|yzVDdLg;O^?yJ0^eYT+RrVr4Im;j4c5X&32+Z+%&nd(Ji4Ux-eSc<Z$kH
zb+!EkVQqvHD}Zr;m44VWP#En@?`B7EX&bz)vcX3R{IC)Wz1MFS4FNIjl~y;|_qty5
zi63e0Z`KP{X%vX~J$H}ty$Bj?QaF9gl?>7DWA{{xT#nc5ch;8Ftv>(`f6^0<leH8+
zV`B#&%6y#>1^#@i!w}e$P_>xLr@z6$*>>HZ&9{gJIA(&=JNq#Is*gy7ZtosJR9x=c
zJJcic&5QLLCsrXrL1OvXbe3Oc9^18R0RA!G=v4)_WLf%($yFa}EFa0oU!?K6NIE-T
zlsX+H3sklOXz=~{+EW#v_JIvhopUdn6a&CL^~VC~!5qcnw!E{mGoNOua^*}|XnbMV
zVi*Z!-5>C~z$uiKj&9E5kY^B6?}lHsU9cS}5YBoBx0@jrD=!{mq_Gz+cYf*ATW2@9
zYg|8JzOxxnayLwwH96|<?*3t>@SK}I8;P&2si7NtF^xk-?Cy!U0u8dZJ+WZn4@frW
zAod;5LXjEno{*JAysj;p8#fmxHK;-bBBd@DC+Meh`v?g%8kH)ge#egxXcm5sdX9YZ
z{NVfe_qrG$g1LHRcr%(5Yh-*4DQ*oZcgHCr*PTU?&l$#D!s3zSZHZnhDJj8HAP(=$
zS5ehW;I~Cq_WJX4YN|{FDLXVSn?2;@4ShU+Or~w}aB*S|UHnroD*toTm+imzGB=@F
z(va}sLOuZjfpk%fZ^U;@b)r8j$l`%ANYNj42t0HE75eiFgKnF7G|)8)kc4A44al~Z
zl3txUJ@R(36k=n<@$P%e5T-6kJ{aW31(#!9^nd+g4_TEJVG-$TBDz`OcGx+W6FDjn
zFWhX9HTPX^P5^IVH{18=3KM>>fP)_;lMir!(Fw5*9hP36k_K#sgDno2sen@sEI|#L
z?dgh3o-wG8)>uEJ^Q8VA%3>AC#3zKVR{w1(q|gKZ-_df~YAG3M`KgJ?|Ljj9;N#xX
z!8~E4LPvsj0daQBNAg$C$E=9gI{5eqO@0*4pRlw5NV7keD(#<xh>pH<CBPpYQ7S+J
zWC&H9Z5T%=!5tTjg#cpm!p)R8_ijQ+=c}%>#qcmNA;y#ce&_}@s57~uz8)C73L=&4
zu>cD;BoLE;q`0g?_2&;!g@OCF%Kze+lWlgq*i@EALc-&d9vsXi=?)Q9UbS0Hl2n(F
zkku0d?=I4(EBDAe&%YDx<A3jI5Yf#NPSn?7k^STsz@HDcM%veAkbfWje?S5MA5M_Z
zckcfUP56I%6W2}R5HQyRbHhK?^^6L!6wmYTAssVwc6@vQSO`qiThA<a_%Ywts+DWi
z$b6v(XTJ6ALfK?N?`zVck&%&usWMP>?Y8rai1odmUYmBUIiMIwwR&A0JwDvcSshFi
z4o#J5QjnAPq=C!yXy&_Q2!y=$BbJ7$s+jHi_IUn#ka{#t5_dvDK>^A+gb+MHK&<BX
zypXy^RV|Wx1HA13QzPZ5Q)hX)Jwh<3Jv}{rwAgf>%5FjF6eG4jSsLWg31wnzoF(WJ
z;qlB_jU$&OlfVcbZ}+(q4*=J=Yi@rg=kx6mU>7tWs!}gY0vrcJ!yISxXnanPodQ?V
zF%Y5gGB7YuMg=3z{Cr;@?2z9lMCn&Bj%8#7N>Y9gm&vBJo|pTg<Hca`16#>!O>zj7
zIbO4jg2J!KNi4_(@J}l%D?cB3RXFIPqyp9b{itwaf*rShcIkUQ-t$gi)2sPozp#US
z0tmwE`<wIe@p0oCtEsPhySpEn9AR2k=STy9V>sb6G6AumHy-Z^C8dk;lF$9M!ytqT
zq!_{Sr!YN8N=8m@cn$<N2jEbN!KkJWm~;>XO*%@-R|rxh7viAUsi-Fa2F7jwaIV&P
zgw2cAn}S78$p+ZWdLyurkdRtj4m7~O9A_rj1qt}oEew8FnBIWRWC_SDqhkOBPEW95
z@+_4cwH%S3pP#$AeM1jQ{_Aa$?w+;v5{GM0iA`q7B3$Qnb7p2bU8%S5;|DbU(Oj*C
zeRy!7KRfh6rN{ZU+wn3svIN5HYZMg8mR(|Tj7batuYe2QOQ2C4s{!)k246rk_8$(c
zPVLX{3-j_OzL^an;l34qzm7IuFB-bGFYTqXD`X`GO^=LA(DznAxaM`R&P=6VZ^9IS
z?(ZEnwY1PsQVwL8k_}Oauk>(u20m__P`r-`GqIWaI`wCvk+tRoJ+~M6^=l=(2dwBp
zo8p%{NVri2dW0dGFHp*L8{f+Ou<4!*{{tRs(PR_c2>^V=VSb4&9_o}uJ=hDy!k%I^
zN!os^-{uLEt#bXuEJ+w+{aVjzzOEEBP!u>u!JJ1W>&|^M8%Ki;#6^)z>$leMq%LfE
zakSJDs`<v8m_11Kb8Qe3CoL^}3utq(m(EE51`<mc0rVaA9hfM&4{GkpVJ_<#5n=-^
z<BR$-5T{VtGM9ttfqwl-|G}QwUVM9kk294-MXVegYUVqI%uE+JPJu(5PgG{h*dZVE
zTW?ZbMF)hWjk2VFJV+G{<z>KN#F5&6>PZ*G!tRL>zgpFgsxwVa=_G<{RK^m6ZoD?>
zj|nfM#sGts==2D5q*=qZy<2xQY!~AqVz0XDE2MBrH0l@i;pnX8F(BtV@fiB*nna6-
zS-&-mAUlPkHgx@MIfK^F_}e36(cDgs^`h_?GM&(cJW~<di2?+EJX7N?G5jkxhiWZV
z;9*61q1NPRwwYtHi;<@@Ag-Q5Zo2Lo<pQ0~LwIGqSWgvd!idMC@c~#KN=v_Ym@tCM
z@|h}w_tc2+yhSrgh^NC5hPe{R+22^$*%NsA7(>U%0VWa$3ws(tilO910s7A#8<Pj&
z7a8kmoYw0<I?-4N;);3R@rakhA%q8_izuQEbk_&;BJ9ZWQ>;T3MoLq%VbCaK@Fc<f
z4BIkOVEao>med0!QBUbJ;cyz3dU-I@&-S`4L?pa_o1X{|W<Ovq9GxscIr5KaQm)>I
z9i>o9bSEUe7&8nrrKSR=!4vQ#IW<PR3oj%phMFM@W>zD5RdOv8--;Jfj+^OD`eU6(
ze9}V7@FTeQc;1RKE}&U_=ciZyO1XKHHsTs0)f{levi{o_56K(>6J>8MN91Ke@1V%Y
z_Y;LIegry-2J&-goNwe!-}!se{dpP<Y&aT|A)AY9&|)p?*n#-==rV8JrMMTXdi2=d
zG5dVX74mqkYA&7XCXs3~x>JWK`X~)HX9XnR1`&?7-5+FM!<I{acZh6!4a~2M=W{<z
zYI=~B2iVAR?5YI|Ey$?jV$;!+?rq+OD;jO+hi|>$T>bOygv!1@_>=I8sgBZ#VYUBY
z6q@vv(lB}p;+M~jxnoqKx&CmZU%9o=-Tk7%dzWyyRT-aBjHF%+V=toAu$WU&Avq|J
zvVjI9s3@4EDAQ~E>*{d6wMD~iD!Uek#@;)%@_H?bkkMRLEHTW1_*S=M|Ca}{WO`7_
zT&+I1-wJ3ZAl~KETF$w_V`xSA2aPGHQ~}!9U*1rnC$Xjk;+cRwMK!K0(XyOLp-AL9
z!6&sC!0LJ7vhBSn-^#@z@kTo=Rm*c+(U~;;7h17`_~NiFq$b5kv_Ljuz(*4D(kyCE
z!YDjD?c6!Xqy!Fz5}^+14{a6^-p4VH5=?a?*fF@o!R^5<hcrrxA7m-^!vyBoFgb0M
znt>Tu5Nk1h@eE-~dqjK2w_cWl<yRQCx4knqzdnWW?!G>xm4h~ad4#S{YAmSVaq{W(
z@5_oXf#E;UecHknlvNM+9P|U8bkeROpVysbJD7ibL9nG%K<8t8qxUHjmsw&jb=XfD
zVZyC<u`g@%BTewV2^RI@=N2tuas+0_#SZ(8IQ=Ducb(Rc;Q9KUdrg7N_TF%-x}l+u
zK>PHeQ0^O(4!M?zy<(3%9JfI^vKCSAfGqK<V8~q+UhDwEvSPPre~ZB4W5K!EUo@0p
zyy~*JkljXHtnjKBWy6O~#0c)3yfAbT{KyiXw<&0%)3!vP!8KyXP{yGVn>{z6=Z@_n
z)bzA-&E4Q_5&D*h0EQ;4tr3?YaZYueHu;N?T7mCO(k89ndpBq=aE9m!p_Lg7^Lp4L
zQ@eDinxrTd>+{(m<KbeMzu~(tcgMliOzZ=$1F7>%9O4YO@)cf^i1!TN<Hq>pV5F%P
zUKHT{Lf09jD=idhVWZ(~MAF5mPQWA3ie>duV!=SBKX*386quXGP8M!eF{D(h(80zP
z`xUG2d&&_oq20NF_DvxG&k+0Du!0t~Xp%(y!ezMGg8Z-lp#{8^<|w(Cf?Qd1agPa1
zjupuhIIQlz*6@+un$sDy?aN_z{Cw6S^(z^2eTKDR3}3f)n~e2&E()PPCkLJNDP_6!
z9qP>cR<_(WCEG_?8J%HQ&EY@2y5GSA<}HLs0kKz&YoCz~T3|i8j$@t+REoorPv`25
zer=tF7ZMLeLwH<>=%Cx<19!aLdx!Pu?OYxcZ<naCp`rcX!?{Jo&H|D03fqMSG!?LA
zx;Z2}iY?Km#mbXq4kV!ZbhI1fOg(|2?X>k1`&5A82M3q{dQ8{#V_W=)UC5)wdN{C9
z6_A%-M3V4zPau&&W1?I+gXeuax>>-chesGC-p9NsOxsxgm|iHVrEYgB)KnvZP6D4<
zm)&%C(fH1r-i)F9u#D?dVYQGf6JPQA06$hOTKa*-Rtb#xFT8`hDh-jUn`60R>py3j
zoGe)3*qYVLG*aXWdixC=-x1BtfALj7(PaGEyH<Ub#%&kVO%*F9Juv$5M;R18{FC`m
zKPRK$B}}6t#~)KyX^gQhekte?(X6Vu#m*+o{J4o&b!mEB%ypNyn`|buNuv#pWd_X%
zWC!Z8va;Tv6`|i^nEvPx;YY$Sm{jy|CbrA&nNb#zjo55u*mkJLGM+~uTZx4ZU9cw^
z?S|{SBet_U&ZzqHozZ?{pusb|&s|v9KaR!{-440dY<-&9bNf5o8c{9fcM8nbfU*xw
zXJDK?(=gfPJu<VWpmYdr^$NSn$*UkY9eMrPAm`ZVhpo=*oK^Gao31v3eaxX;yl&Ag
z_o~!C;e;1T-qo-hAs*BUNX9Cc`%{=mh9UmPRHkjZy(Ltk-4p@CKk^s^n<GVx0<cJM
zzxbwHMdsMC_%3^I|H^zff!^5Kb^C%U_|c@2#ctg(kj#*(yHsRX<V+Y=4VM~Dwgqn{
zAsi2Xh-)pShS_(YrBPave8DP>AjM;V$PzdF^Uxn>Q)^rzoKci{Kn?EH?kp|WZ{t$~
z4*V;}Tdf;j`4q|FbRN_c^}SI6Z}iisRV`;RM@ex<uMyuG(N;tyf?sUZBI|Xzn(KyC
zRk*3_ux5<s9$n0k^Fqq)Zo}@av|4`HkdOUK!p0(7<2U!Hs?@y45gs3y*oxcGu5iF2
zA-A)NFIcY!b$nnk@{+DmmwtKX$5a1;u{55-fTKSp3Hx9W(1X@bZ2n>=S-8`Gry++A
zEW~Qe<+t+Ricv>qC2{~7_4(;WKbtHVDSA<l4|~&fJ_#I-<p#yoD{RQOUawJ?U@pej
zq>hGY44j$Zb6EPv7`b2xokNd#=1WE!hOQzrq$Rb|d`@7d=jWhVUIaiXcp))R;{sPh
zUxR0k7b$=Pwb+Fo4e_mwj0q=k;B(o>GKZ?j>E<!J@w*W5{=Bi+<OCrc=5J0LUEo$A
zUzUp;XDClx-w(Nj$_xmB{Q_0{3OjFfR{ZcaL)`E+?pw-Tb7$Cf^>0NH=P#QQvX66q
z@(zw6#?8Zj^*z-R-x{-UH=j^mT~r7ic6D$)A^*|Txm$gmyU^5@bLNz0xGEy#@@F2~
zM1-3XSH-upCeC`jrbK9=@a;KgI`{WYG~CaRm_k>fCcWMz%P~anL}|J_u!#~g*kPOe
zXXwn;TSdi{Ll|Bt7c)07fCtIcCs5J6T97=_hGc)Z;{1lBNX~H?`@CJpQNfGsh$%SE
zE->SIQuMJ)o~#j$zJr99<T%cMA#ax!{^`Zpu7$#?jmRrQiR7D)A_FnrC^EOw_>1Z_
zCnklXqief=aI?Ffh;x?i`Q0FY4j4M%CTi7koRZ-@glcFY3p-+FkkQ}4#&`;kWh1UO
zYgw;;B43E#ABKEK-~{>=`*-H=t4{h!kT*fmue?yZ-VeTQg#n@9;lELa3TM7_K4v=|
z(u0cwqf_K(6_tvjQUSEp0NlesDYDOQ#vAV&v2IXo@5Y+iczHi0n94nOPZ+cOc#bG-
z!+m^-X9Tassnu{ER_}vZV6mrLA$*fM0nM~|!!J*(Vd-<y%dVnis_(mAeDAm|D+zbZ
zl}`2Y{JU__t!D@&)@I?=<?+bb6Lf(n`KCc`rvk=}Mp(AWBXy$-0ve9H9sM~HN(7pF
z5K0gl8N%DwLa^{*kp_XJ-X!h)vcNI<>c84~Qn9v&DE}?3eck`jK>k+^KL6V@_y2tf
z(Et5S03)O@z!k`AOGrpdi|C7x3K4$X`zTFEhcGBjS4#Jzu~SsG<7-XGm&*9|ub+i|
zoyjpayeYbg{Z6i8!$F9t0G`~!#DoG1(bh%Y1$!#Epa&dh5yHcvZ`PDl)zwv%r+$xz
zE6PO0#A3I{#7wJOr6pkvjP^goxzTuM!GlBZq|&p205K-3s39&M9p@Askq(IYq(bC8
zwR!Lw8fp{MV{&o|7>Ke@h?n&EIJg6f(ya1&NVYzs)ldKg5P=nfE`1V*fr%mHeJ|y4
zkpNX%P@0>YSCEkiVZ<VImr|1w;)SoaqAP2E!~&KDsqx%S)K3g_^khGA(6Q;_vJtMO
zd5(GRL|@d5O;{vGLw$h#jt7=8bbLT4Dy1tkY{ME*loT~4zo*Rb$@N#`Y(Rq_48(m&
zR$!@Y7+;WA5ZtRmDnx?T|L-OyI5GbFtE*K|N^zR27IVG|_RC18dZ_nxLh+rE0ca|9
ztI5*O^4$LtmG~cJrmKSjl9-qnp_>9!@hRs1e`G~(p~sJ@#@at8a@|nNCZ?67z%fXF
zRR3`C8%3HytGJ_~rOBMtEp2McVli{<YxsYP#_^yKJtQZtPr+3|R{mY<v7x_#uyh#&
z>_;;M{kENV=mrNvZrYH}x-p6FyJj}pO@9|j6UkG&d}b`%Jl^M%m-_6)fUS`qqyFPr
z6E2rQhxeDn#L4~|gOTR?Px>tZ84>FAoVIi2iS_DAhGR?Vja7Qh5yN05J3BjXvrs*C
zyyQh;lE1bg+4k47-mX9EQyU?@dPS?#P_~|@Gdq*{?S3yqW6*oxNOTATY5DXRTkDys
zvf^R_EIjYCftnq~Y>E!u<0Br^!3+uDDxAHyom3L=@k!=IiYFGbH3m4ozNv$FNn5}N
zx$-)0w0%gLi`+qUbezba?XX@6jYG|+juJs#ip~6KTV0~0s*4m}S69caUsb8!j8BM1
zd1N(J=@QLXe}R0V@6pERJMc$rH*~mtOOViiO|49MX?C*bsg2~!r_G0|Tbsj4un7Iv
zVv4i^h&VYF{{o)2WM@SMh008yJN$ZUz)@=VxWwm8k<8si!^D4FpQIWr(w5K-m-@O~
zmao0_4b`>f%SST{Lo@WFhsV8fr|f%nnkG+@J7a9ys`5pgyS4n*JmcE%jxwvS209JA
zg5)ZTU(m3f#?6AXVn65l{&wgfKfTWJ>dYTLC~%)TYXFTYiQld_aj$RJ<)7}d2I|Un
zD^!YcMiupZy(m=czSyk{e-(-LdKVkqelb|Vd%lltn?995tYGYX7}9&tdp0wD7=;3P
z&^0&KHRdDZ<Jt|MDLW_L(-!(tQu0-$!po~x#tamj24;77T+D<g1`i)IS@XICw?fu~
z1p2N19+ZErcyoU-mH$AKuz}elL+@;3q~8|UP&!W2kyHF>N3^Y#9W|9pWnh4(!=7nk
zzE|#05=H8spJ|q=iqy}wl3}6<+lIl}vdCb9pKrJOt|itWs||!b2S&SuZsi~z2$7)S
zP?;?JLx=Z>$Mr0n8=Ge4gqdw<G?9_c@L^IvP*1<Kzr0)Ev<<!=+F?#j0cDw_wkvIs
zz<5&Vgd6|4os~h~W?&!}BrUoEy6X3*fM1Q}l(#s^R(I~5GXgS7ljB-MR{OHl4yz|@
zst|r5XbRF8mQ#2<RtBOpxV^BCyQpF&VysKn!X%SXZBkwWSE6!C($WZU?VhI?dnqNB
z5)v>rRtLMAtXgU%U-KOI4tx8rNT%%;tE)_eSUc43xX`$j<Ku}nE0gIo%_oCv@YC=;
zP>W4w6qFRubQ|p!*;v_$xXoH~YsQ~GCls#f)Y}0(gWPrzDa}&br?zId{b^nhbvmke
zN6TV$j|bw9YoWq=2Aahw(rqiAWe0me%od5~z~3k-uS{x^RfH>R_ntodVmH$>+n_dG
z6lj_(%}cQHZQ59XE83a@&QHeb>#TVD(ttso+-o1ZMa`*kE1q%^EQB+4j!9)n2~|CQ
z#FlD=LCAZjF~aQopbd(AcJ42UaWROGq;yp|i3hq^H5DbREZ;595D}+5U1`-j_|6>m
zxCoc4oX>AbR&K>Iw7I`7S=Qxeh;Cn&n^_fT=HUe^SQ%qPXmeMpy4fq%G|(^2YwS(K
z<|BEp7g~Rsp7aRIl3?8wV_&1KksE2xWKGqf_OmliZb+@+A&}4TonlZXJX4mC&G$T3
z*qY}87@p0Y)odr=-g<+F-zfn3C8wwu8y$}Q8=%GGlM@V@+&yMPS+Lc=G|6r^{+T4E
zrymnq{V{iLZ!kaSR-#>u(~4F?B8_aHu0S$c=L8Gd>xzB#taS;bQUQ5F=Kd?l*W5nc
zBDI!yH6CpjXHQwr&}!zknqs!c$59o(j(&}LG?$%r`AI)fBaHaRYCw+1(T&{jD4<FX
z*UM_g(W+M3u$~*|rG2zpAx^0F-I@oLIWziI{R+gI^^)}jngWglC^of8e{{M-blUCd
zoF_8V8}IHXMw{zgu0vU*#XwgNS_tnusA$klxp8H;Qst-}P}&##+6`a3LpccZeGGyS
zVzt~SyQNt1eAbsEW$OM27k{^34(h{~{?uF8<VTeGQRI+`%IuRvQ+{Y=qMG<FNA#|U
zMcJ^VC**yJ<wsY2!3vu)NlS?VxVg0RmaA8Ok`0A&L&=XPKd=5Kbrc{af6@?oG%-Cn
z*Cg?|H=V{gyT44A<?i-*(2*mCbqFGSP}%OKPd;z+RU~99Aft>Fk&d*_mUBaML^Q{X
zdb^wZ7pYH-GfxOXdE9J)<8zP;Age}ET@*|+FUip-;xKWeN2Yy|XGlz%gIh4a%>DbR
zd=dNpkn{D|n70XQ^d6b*<lyzM*eOH<0S@AtzOs^%Z4IcjmjT7q<@G{ztb=#;+?4U3
zi_AaR91c?STThjm9gp3JNtKk4QSvuGT}519KT?!LtZ(;{L6$pwEOaa7?tT#&j!xE=
z#kPI@`eg04yKA%?9#`rT1%l9p)~XsBN8`oC3tjmv=E2O$c?DG7%wZkC-mEVBD4ais
z*x9~6)xrJ9r2iu)k;@7S3MpP%Ttv<LIJ+e`g6$6#CnpbI(EIzOsf-A%SaHfNLKJ=)
zY;5cS!J5%y@8!1{yv({{OLu>RdqZ*vE|Mr~L0++XJtslG?IciC6h$24)_*&gB+RXm
zBpjjRT`U>Id04*iO5=Emb-hA}QnZGCtKht?YKdv7F6-<lzpp{Vs(HTZm)`qfg~gCv
z4Cr#s+u6u;#Gf*-8dQ{U<gYE1^D!{e`q+r0e^&6OYH^oS4GgIt&GW7MtftN}px^w|
z==`RjE-<uSv}K!<r=QsoL)g=LQuRfT$t+q<Y^YVIC@s_xLjpsga%HJsiWCa>;sRSO
zr?QEzoKs7qOK~MKw=oXaPC-tGaS0JN>{AE7(^Rvx-k!Gvw%MztD4FD8DMeI|_%~VI
z-^rI@I)i_6OvEBbf*Eo1{Z2MgW0y4o3L+PiIX%r~m|~GJt!5uBgL^?id16``xt{(&
zB6?~^31R^Dn>XR&Dk|Sfuqg{DpKR9vbB?$y@e-*VrOk^+F;l73%8Ze~NF^px%Gg-N
z7-x?+snGTBA5|6A(UxrNvlk!U7O%W-8P+bS%w7KOk&ppn7*$$YCQ?K@z%cn$m%s-g
zLvh@my=w+i_9qnw+$*=OBPKi%5vde130rF6iB)R3GM8Wd{>-N{2{8!>aF&57tRuE}
z(nz$2?!idviJ$$WcDGvGErR}UM=mNWjrNXyCW`*>ziqyn3i_3%ZTRrAKJE`(^e464
z;brU$_yi=U()Z^rcbiKUaF9r@mkBA5z>bS2=Bo2g3e*<cm3$oDu;tVba#WPv0|9c%
z8mc2wqhoCBY-K5L&Q#TYwfbV@oAk7|b=+-U_7Y&UK>}2>9^I-YY83=F<MAeC6^AZw
zOUK&Z{NxvK72J92@QDmUNrB;nmG}jCz;6()-;*qUMl$|n6w^63r)tqd7+f~*YSU;m
z#V7Tq!_9Y^O9PD%I59xW55P!@e&1K^p}`8GQ29BJc=`>P8Mtky?$=YFmd1t>nVrsc
zwttT_nAx7%0aHMX?PP1sC_y%r6E0b?axJwF+~0(wzU=gdu1rzm{lz!%dD3S_HLG@)
z-_%Q+7%<)ho%s-u;9BVaAm6EsU0Yk={v?*C+W4!w{--)4Gwe1$i6C$5aZX%4ImN5g
zxVV&ldo;^#vO=3jUw_zkwMZ_eYyl6%1F7K~pNncRb_Kr*F|~f!Ga1c?LwTy{s!w#G
z8-!xz1wr;;68PGPhA>kyBOO+!zDF9jSGnd-Z{gcQyoTJBh>D~-gDk)`L}TW6Q~eFI
zM7aI%fWJ9g9sTL%*j{1}rKu(U8`4{9WdysoD;U`yDwq4)4=v93B1g7h8MCWr>|`gu
z=2;tkUe#%66P!6BU;Nz8Tb{02|K5uOnd1F`n)?-+h8VOFC#OJWPYGTP|GF`?S%p|u
zN4#nrZua+x*RP|Wt`XLyI|^U|9riwcoG+5xn&(FL_<Q@1DL0CMUKjC~3B6TTdf>5a
zs#JO~jF;=p6$7-leF6DHP;Q|!Q$!(kvABhRwgd<@@;{YG{YcYm5aqo)(i@JzJ@?qK
z)tiT{sXjq9()v|{n<X=MW)>R#X3gQ!6Y$U0cr%A4ROb2S^*mk0N-Pg<NBWBTGMndw
zTD=Ug6rosoz+9ouIb~jv_TD!_yxyHX`dZT=a@_@gG9=`8jdlP1)yZIY{}{;)V-)dp
zqqS15qeRauGv8rkBR0!-Dbm>V>S*5<DQ3~!?3PPcN?tT0ztL>bCvtW?Pm8`fUL3OJ
z;d!->hB;+726e1yhu>&vY-ZxKu#r@NjrDHNRn#06y}l>x>&(~je7jMo4*zMQc~Luo
z>&59<k-cqXQjl}RmYpt*_#${c_f!C@_6v-gA>}-3zh36@%1l;5un3ObMt^@5L6#Pj
zqc&MkiO%%BZ1RNbYB{q_&++eX)-yPiULM)%`6@C}H?IyZief#jPlOzak_*GLb)p}|
z4j_1X&h|xQx8plL&PtYZ)6uFJ2^$pTL-n?KCg$Fr(<FlqsoB%PTdG$xS&yh$WKzY}
zpZ@Oo7}{9!@SQ&{CqP`vIPw4Bt#8>*Ra3jRwcIF8{CscF(a~WlqS3gr><u43Y47fL
z%+R=IPR6n4bEzQd*$kHELNCCB7!e(=SG!mrYhr*Ws&$E8?f!Ui^Y>C0cugDn<v}e{
zSdfSqT=yQBQ_tcbLgQER?U*?^>w~;dS6%(=M;}jr(_9{|5Ns!C?F1~{)s*I!VPc_u
z_qwaRE}t?U{j2xV?+N>|GpE`65i%T_<`f7&6CiLG;;mXK>Tw?e8=ArIxwvsICNYtc
zk_!3_v6mjvZjDxA1YY<)4lK6W(qx1eF{L-w9{b0U^tl_z)DIBGxJy+u*RPgz=>@&p
zV%~x!ns+0m8#<30Y(Ulxc|H3v8U$59-{B|imc7j5cWZF#Ys)6s@9HNxxWW*S{py~?
zKU_a$eerNTZ0#`{l-`vk>G>*n15^0qw}B=Y{WYn`HuCeO??JTF&eQ7Nk`OAw4e9Z=
zqe{^iqD|$2$QkgeqY{@Kq8<B2_PDy+x!BxDab6FFyK{Cna_M`lJJ?R;O+n~l(oH;g
zWo68)repgaPC^}9isTSuYyJ<@-I_K|*@p(LFOG4lSFS|p9nhp8ymQyG6uhWTG?^Yz
zB-tA?Qg(Ip3K@~t#cu~49D#jNHf?Nd5S{%?vvOlsW_-s{aBNiB6XI6Ku(VgmN((Ds
zcrSY!H-bW+U~9Jcy&1hJN@!2ZVhhG6ClUe7yaN`8i8dFo6$V*4cnAptQ^R8-a1dhx
z1EF76RAnO{U?h=c|3Gpc$bkI|>a735mglh7K8CrIl$7Tt5hjy*tFERAs}vMsk^a4n
z&CMwf)=ICVKG^3YNQDbkNJvQ5R8#)-Mo>&J(3)*Z%eT`er^!3b)Pv=qFZO&;22@Rr
zcAOu49Fu%JesEeKz|`|^+z{1prYJ5z`xeEp)`55%#iISG#S{hZCPY<Abedw}X>0D<
zv%N_aI%FF23F_k@-E~3}QcZORqV(`n8u~-BMG)vH#+10GF+W~v2j}yY#EYQ&tU*++
z3_t%XH)4tjtkK?gk+?_6TU$?=D`nK66Z4B7&7x!k?Ng~e0bK;kq9o`<J*falhW|PF
zpkx@In3M&|a_Hl-Q8V10WfpPDK7?S?u76_5v&Bb7dVJ`7=6EnRA}zv7MMg#>_AL4}
z=6_2q;0EF{f_ow66N>OXtiRfogn>SV`#*mfl7^9;D8;^KA!hI%cSnG#zEc6>C)WdH
zDCnELE;Ii~5G0Pv3kn2ldL?0q3S>%M4I3K^6M_MAmj7~QY_?NaTbq}@($L_HZtb#I
z3CK@A>c|22<?io&d9L@{!OK}9;zt-|TuMekZqX-WLs}Zs$K<qIgZn+$voB$1@Wd)I
zI##*ZkT44^|D<nLK*0*Q_wE$S1JM&K3B-Fd$OJ7NJ&>D9XzAz%7~nTUDVPM9=%}d3
zcuUcgxl*+(_cS>hswX(}$}ZT^;_-F}-u%4|63VxECT?nm|FbN`kzoJ-2$cYY2+X6N
z+p`)KM?wHkc~ejT{bWk_{0I%iBEN!o8<YF_{Y#v0KD`K_Bq1Oe3i}t}340|)0bei-
z*O;G|2lO)V1CS8fXe?oX#|6F^z=8dbFUSc%doYQJn8L`V(O%m9mw&1$K=c-LR-`=Y
zQX**cA)xaB&}zwlu%4S1(DbxyY$_LV;+r`U->@gf#*|c5gUTq!75~|vgeb=(L74?O
x(E~Hhoa+M#6cp6cle`hsIrsqfc{qOwg+CCUoe|m43_b%TEukP@DQXz_{{SDbgKPi*

diff --git a/docs/images/haproxy-settings.png b/docs/images/haproxy-settings.png
deleted file mode 100644
index ab0e3dd44fc58cbdea180fc734db0c490b590088..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 52820
zcmd43RZtvV+b$eJ2o^lJ1rP3S!QI{6J;>lBxD(tVxa+{+Oz;E^?ry=|ZFipMeXIVX
z|KO{=cWsJ;p_!guJ-zx~*L_JxC@V^#AQ2$Fdi4rLMp|6;)hpO{uU@@=i|`uQ;&GPy
z{OT3@D;aSSb<eEBY&hTdQiNgLpF{)O+S=?~!qybe$cvhR*KKY5T?Ub2E})Oc-_UP!
zmVWpzwslbOzJ|LOf<FIQIXpi6$$#>=o82K-i%vq;5P->~-@JC*74#OR95L_%Lg0tT
z!`u7&PQQ!mUx_rDdrXq?!2(DaY{AsPzYqdXS2z2jaL00lCWYU+ySr;hspLzNeJT9U
zo-{75u42d?-dD1Ij~^41rMm**Cf|sl1HaEbZ%_!-XJ!1!WjccY`}SQCnwB>%UJus}
z=t4hzr2jcO0$-kJ$j0jTcnT>Gch~8E_YPJ<S3;sDbolojnjgLe{yHK1_n6vWKOyD+
z`x1dGTpIJA9au!f6aJnGLLee}!oMFOj~-9?&lcmraLRv%^ae|u^4}fPK9I}&9psy?
zHyASi9)tRS`cZ4q(&Yvv*Y^s9(X<*BTFb7+PC4yfjX%CT?lPrSJPjaV(@k{-Js{)I
zStlD7XvQe$aqCdc+*fhoS`B9X;(~t?zPJ9d27`!6`TOsP)@h2oE_QNqa!^O96|=Nm
zQ;ZjI6S<96`V}(Y5em2sTpwkeDty#0M1R4d)4%=QC8k;OCuD?>yREs|{AXI8@w#Y_
zR7t5;+ws%G4d>s}zTInfUJt~SIhd&e^Ie4?$vm7NLDb9CuKp~$j#l!@r7}zhJH778
zdxMBIn$F4Z^xWPRs57Mhequ)<liOj5qxR(oA7?-mCRL<W#74$H^Ch|xyk^stR{ehB
zXFP?9N(R_BUOEz=eP=CC4B|M?XR_pJ=AB0#5*9~L=Q31Wht;24qim?;G+r*Tcztvk
zH@u3B!z`ag`D-Bm4Ptj+P$+7(W`TG6?HP?y=F<0d(s**IiJDvv_s=dpzAtu-MlFK+
z&CYaIu~#pA?t5GNJA8J>44YRb-NETlYZ1udJWmdbmuW--6`guzt^M@*^ues#pCwk+
zLg{{Q6e2e3?AiP2gPF^tRc`%T=i+Upw2x$CktBlmR#EVM0#WfaaLQEC`1Hj)3>+uh
zL#b9HS=i*_;gu=-bDRA!gjS<jGTGFe0~SN6go2K4{qp!FV;OapJ-Y59du&BgafD(@
zF+}X;+GlY))9n@)E?5I?t*zy8+jL2pT&}vMzw_qb5_5Vqu)bI_W`Itn#jt>D92|hA
zm;L@Da3vCsxHtxC<9kMPg;#4pt7xP`fA;RqcMrxZ2FkJNXR8ep86?hA9CYCj3Cz#B
z`?4b6^VVl(F23XvGiWb)x&*<aRSQ9mepegk1y*QQo?l-pCev+SJMg39+#zq--TL%M
z#gVv(RBG3Wh9MR(#bWbo_VmZ3{rr3DfA)X6zgn7ioth6rBfa;0SZek!D76}Iv=c%K
zBx?CA8He$7d$zfMjg(B+8F0dHws5JOC#q4dPwTkUtU$nZeRU;appeD4cU`quAQe*_
zi%^!=6E<CCFaUXUbnK#qk_@>h3$WR&l=o#!+d=GCFd22#6<b<bZAMi~o%5~^W`qN-
zvpOK%A;?Gbjf-7<0zU@^!h&i|dMM>`+BGsY7n>ZQUKc5rD$+-M5TkbI@xg8SiDISM
zMjx$ms7ui7W6Q-ZV}?<qcVqgbm3TB>ol0W=W`DHb+2dVZ!9aYK`rX2`-IC%odWIT}
z()d4jmXX9!BW--rTz4ux<%muEdp2?Dd~uPWw+D08J#C<q=#n&$7K0wE=h}zZ`5O}^
zV7_i=XxO2%qOvh4*S<1Ivy90k=J!qtmw3EAQx=e4`I9_zwBUC9``7;cHSr=e;AJK4
z^UJdziIx1>`NEvjC*j~xu+`XY8n;u<a+?R#|EdlTgIu!IuqcDied{#7jJ<f9`CG0*
zIZIxTJRZOQKrC@mmRcN%(BX6wcUK`zT(0$Vf4QfGVARo4ovSevhKNQc<4ydf$b+%B
z*~kLtRd_7<jIf#FFSWuCNR93nII;2iRk}@|L7;$(ofsR(-fsw?Dg&^jpExS{o3U)c
z0oK>m?u%UP#Up6~E(w-<WgsD;Bff^kt;Vwx=nDz^XO8kwyPmh|<9DvRsmunWoC9&h
zz}I33R5PoQv|j_4_-w)NuqVn#;Qp2=qps4#*AiqlicU?e15n>P%sq5|MSC;vDeLh$
z<Any7f}HNcAtBxT-iWDzZ)9TBx8jG*E|)_S7SaLtQ#S7tSetN}4ZkN&lqfk}xsl7W
zn)U6^v{V?$2&Gk^%r${d4zy|zKDb0D{7hh^H^F>5ToLq177YYjjT*Ljpxou_<SPgJ
zDodAE@VIQe0fA^(KNtSYfYvdRh~RdcJ-6KSMWx2Q{HoA;K~D{ddf#gLbu)Vr)C>n2
zif0cy3k+2t;Iv;tC+<(#=%r13=DVAX+@_zRef?RMOe8QEF+3gL$F^XW+MCA19*Vk+
z<7m#z>D1Z&bnhGe{`_PoCi8q}sGxc*k^5#{EX;;U;qOw?341x)06q0{Af};^sWI%Z
zT`8RZ$yyK^M>PI@<%HXDNqO&VV_<VNliO)uYo)^{HBA<%cuF}uzXsmnvkx2ajB)i8
z$|M?cVELso86uIA`ELD;zdErBK_P_b4DEEZ-dvt}mGA}=H#z7vVSLhsdJrQ;#64Ue
zPmZm$yG(kXRb@79^u|=gBJL*9YH@jA{`vVD7Z(>wc~v9K!nm@pQK8#lA5kgbv1Q$$
zbi$HeZ~sfRVop9rm(zBpyeu|8Q=|NO5Ju084(?8)-mQ!=<wpX!WHeqn*nH-Za(t7u
zK(a=+MHeln!|y>8%3#>;>EGDtF82_Ce9MU-==pT-jw%^P#0jh@+j6P+goAcHl92U$
z@d#1S)@Y{Hd9chsD~B)qpA)jPnvRn;xc9rOGN%0wljS3~5t~vm#7{oU_p-f9Eq-AE
z6jHJ0YtOLmI>87SX$u;Bhx3hX2AOduLIctGuH*H6`)LuplJbe5bQ$q)_&wMPdK~<>
zyCPeP#lz{1V|C+po8Q*O5Glx#(dGA#h~U^e&Sc%@A~tC_<cPvqhJTBQdDyRZxkfY(
z=Wt7bNo(r68$5?n7$`XUAO^rx_x1CWaT$NCXpJsZNKFZtfBDQB4yl~4uaA?QQt&%m
zD2ob!{5W2!yHqdy+2pjUNgH2qD=~DLQ?6aM0n}q8T*mGcB0^`nv+lbKpn!{!WZxgC
z-#V{1IW1QI1s~nem@@^3#&MjFe0x!y%hwxs7dQ%;51lu}td{0@L;OSBPD>vg<2m(k
zo(M#FGFIE4T~c?S!q85H^R@yvde1h?CJQ0=qqzH#%TzmNPfsLc8-3?nzXVPHIFAGn
z@%p}TKbIRNvTt>`JZH-pOyezh9_0+A^$)zoWxnU6@B0MLpws?le!w-cM0y<*@<J|y
z8ktHDs%`@vYnCau7#u({ETF2$Jitv;Y~NTudpKQ?dS9cRm(M}5Acy>64!u#Wqu{44
zBBU&)ok0iuo>sTvj5LPXuz9Z9%x5!(gCfqX#$hZ+u$ArKl@59Fq<;Rv;LDfuB50y`
zWs%pW<smByG3#(oPmmX=|8mcLf0|LRlc-HgA`07KzLhFaEZ|{)gmA`z$8W!36?a@P
zDg>F7<gPnMWfkTrfm(sfd+P=2k;5aCFkT>8!Q6HSKM3}kEbe@I@P=Lqd2f+23#jZk
z3bs<o<wSo|f_{BEdGQN4NO3646%HVCY;UHLO^zmD)a??5vzsk*XpiDkWxg`fAL7?=
z+32I9ALygV4GclP+MCWK<{r_R(;3qG@G`@w7ZahBBOrnRKrU(I57zT=7dRYtE5l&%
zGobt=(W#Y-^axvyWZfMv^T(l+5c7jFxIxEPcC(@H2(q414|@|Y3Ar8T(r8_ab)nN-
zooiHof$0m<b>~sdL1DlhZj;k;tAs#=U(++}0~m(euAcz}iqmbhgB<)uMeNJs^Zi*n
zX1Q^6q!3;t11^S6R}`!eA1^{z>&yl+xNZ7z;{5093Z%4Z^sC_B)Swsww{ok^CUu2V
z4`UYegJq?*nw9)!nz6=!2QfmlOS{Ka27vz>Pv%JSB%|VpxJ=i+iQIb--W#tcg!KD{
zz9VGw+9<S9E1st}Ec_Y2;9=e5xxUd8hH7W@YMgj#4){7MCz>2rCW`$Qo!5Ih9+u>E
zHKU0IL;1Mur@mp<=RvHyx@i+1JI7W_Wz3!}Qey%lC>aeK@QNOGzryZ6__^JrPnKX&
z$+lbFko;3SpEc6TFvN;iEgsH63Hq2+vW0%cukRbZvhPv$aX)IG&dO>C`8r!F4I*6+
z6^~?Tf^AXEkgMlwJyx<>E_Q~INd%fJGBXpTB=wi|#lnz|a=%SS&$EM$=kmlS&}2XP
zAX!9s?yolG{?pM2Gk-;wsSk5SLi7cG{8s&1M3L~>DBEmeGPzdTtZF(|<vi`W3g4{=
zJ+DqZjGqN4QAvOM{wXi8!8WdX`Cmv~b{9$h%SM@Iw%TB}GwnUC+U4Q$!Pc)t*!!y{
zKKJeO?SWBS9{T&s{ink{_9LiB+=^h}8^nbcF`6eS(togs)i%9j)4$EgW3%sG)8gN)
zBIy3I|0i0M|Bc<w|Ma7}m6#H`L(p&qz1=3&j*pLjCD05#%UzdGSJ(!gc5LkL5D5D}
z8g~WSbVFr_(^z{#Q7WFeon2gLjq-fcSWI|EGZ^iF`pzkGtF#fl3qWeO9fov2KR<kF
zG!lW^iyyfKQqkVmhw0aXDh=8yQ%aY3tSg;<guPThqxU9pne`vnd*BsAka4SBo0#_4
z3!$zLqmv~{V>!G9h^vCwbQ%mg<>poUoG}rJB?|Kp_k(uci-z3z4<dma4l50%R&@h$
zq*Ad&Uj0*huDiomyB!=_2au}dt^*e1zd+UX0af9Y`%*M0G~hjx>KtP;p+NJC@t?K4
zFjSH$e_NJhuA@Z~LGO11ipw2-zW(=g$bqz@;e`MKVo2i-0I=Y@Lh%T!m*;_#f`OR2
zjE-l6!4&4%2A#>+BYvXCi#4k6=_LQ<0v>Kou&5NLoQz)pSf!ZDmksWCxSH>9)q3DM
z;weJxzL70sD`K}C)b4a^(W)`*i@^nrKDGeke>vDPdTxILfU{=7=cj&@40Lp7mt`Lh
znysaF8SueuO=1GSQ%+aU+a~*&^SSYYg@7OcblC--8f`~G7PU(Zc>?_Rw`gS&s3QnC
z>1atvNE{ZM^jbWoE4{!K>Q5R5lCr7C2GcH2Z=tjIRS?TFp^p1Y+ocB9fh+%-*;*Gd
z_pcQd2e&etb~Dv|E<oRw!eBHgVB%{XHcC7YO<EC)MJX@+=_kb4eSZd@({$_W6MWLU
zR-p9!@P{RrjO=yE;&I6rkNJGO)FSlsfJ($xsvq*X^8FQ|-BdZN-En23;lanu@^~Z1
zt9>r}rSRtWd&sFws@q||O+?k&5irP|iC9g0ZNSC5L%DHgsy}_7ic#n_Yplmxi&z8T
zu0%EWNn1h_N;l`~%;HG6y$@m?qEZ?2>>(P2Lbkm>x?p2yIbQeu0J#nqzmqV4*tX23
z!~mVEWs`~lyIXIqXb7_V(Te*dWF)azQ4?1$nGyhuVxcH10}_!qdy7zJ_&m{vX;y^=
z4l|nQO~Z5fZy#Xxbm}eBh3rBN8+lwdC)fZQ#FTv3do#eTp(C_tb(+%^cerSd4syaV
zY>q{(v{Y|)uoQA3o5ECt>BSdk*!p>X=SVL!hKPi=J{JX#A2p#w`fE$M*<>fZT6Lx4
zj|`(*+j>WL>(oxzdxyEh5QT{}NL9H`Am0(cyYj#r9$JzR%0!@am5PgI!Xe?*R*f(7
zgF?}WV?{S^f!68fcqIx~xDyA@d?Y94^<)Ilvg_|QcB-W+l8^~Z(U!m$?9G9GPbpV<
zH_l(|RBD40zQc(SB!`FW4ra?iEdiJ|xOF%W5u`!?*c*vm;XF?6px3B@gc#lvL(EC7
zk{@ilg#U6dJ*y<2mVu69;qFpCRTlb=RJUE+<w=Jl@K~>Wx>U$@l;IF*?0d8(*iB?u
zo3%<de0vT3d}~B5r((9sX1N;W0lfdd->AvI<1Pw^L8q=kCu#?1=%`qAFRk^{nfzL9
z*h_$xD5JADZt6;<K*DUwX{p|3KiWnnk!q4u1iT4*W#yIfF&1Q6Xf}7xIft3@<0B!9
z=cibGUYF2}50CHPbo0v$JCqh_)ja8Yr8*jH(1fpc$lcf^mH-TnCcrsJ6A3#CfDdb?
zA0I7mPlplwAMUeaQa?O5&`$E8%IP+r(lr4!u1GF7XN)Ke0poRv^4%=mJvhy1-qj?l
zB2FQLlXcV(>A0_oh~Hy4&GYv6IvFgyD>}a;5vfzIq5*%dpzHNz*`#NYC1YlV-Ra>Y
zx9j~ds>33@tGh+VpX1|dwo8WNbT*ChYlj8!whGu|gw0~;8wrQBa%9-SdVN<<7!m(x
z`^6cDLU5|oRJlV1S5H{%Poob3+eY+y$=|#sqOR+ZY$l7U^o#1N3Bx}x12lkcayeFi
zjMZS>Rm4XDO4M?7r84y*%+!!~7=dOBk#jte-{?N*@PUr<n+OfhN3;1y2socEetcc=
z^T9Fz)5(N?BP$Sp(0+HkEkg9h#f9ub(SWZ;r!iw192ckb(gmBQtVAUIRY*FWuBcT=
zX=O=%Js8i&<6yi@Y+$lP(V*pX2<&qY*C8jvlmFg^M0H+Xz2%TC9nzD`=~`F1{tKU1
zy-HB%5DxRvTnj};#3d20t9p%2fzsHDyX~{25~t%r@0?5Sv3nH$g&BY5wZWg?dE^q&
zrNZ>Omw(D18z$CF#BzkZCd$2r1lvFbDQP@ax*8XRAMz-4-tb|<^kj1TI3@}c81V#{
z^p?ikzGYM?r<}A^?_rF5dblPPJZIJa+8jr~xc>`_rs2nro@GI=$gSb;6rm_5(*;(M
zNwoYP`=yG!f_Mr8ok7J+MtK67tX>mahRZ(G3K<POG{h0>A+>nmz=P>Zr!j~^_9x?b
z9+{1SIFbV-nL6_`%;z@0gOvKy8`6~;y|&n(Us%*O9`e@L(K`CI_Is-DG?v}>Ca50K
zkmR=`NF+Xy3V!abDb}FVs?qVg9@d#kO8%4PViwPzhO~aV;O-BmGx@1ZHd(ARp!W8X
zkfrwJi~W2(>%?@~g1as51p@%3KN6r|^vqOQj%QpV<Xa7wvQmV_d{i%VKEtF^=R=}(
zOJg}&XvpOEQGAF!x{?wPM>m{*H8%K-)~r|_zYTN*@t)oXh%H*FV3%uBj<v&iumT|$
zuiGihLpxAwf4^BTS(96RtB}RRiaf$zG9~~}K6R<w0YYQleK|sYKruqcrq|L1dyhoz
zj=A7tmB??fxoZInyH3c|L)9^`B*nC>qgSX`ecrE8^BznbP(s&!*Rt5;bW!Kqhs5o)
zGUa#tbDcso41y|5DV_G^)dWC<Dj*Xv+0O+>U}{#V9-SA-`7SkqnCT%c;GHFCK(6+9
zcwSGF{Yw6wgT|%tT`~a40dD33L-^<A$<fgW$8dLrX|gPRN{ur9TSS5et6W0?RI5T&
zXPLNM0m(?0EIM~t^WVS{s(>71W;>g=oEH=(8ur|rX15A?3VOH!5DBS}@9q7xU3=A$
zLGz)k2Hj0v?+=yI7S~<>)3vXBjUFQz$v{(~$<zPq`fynede9qzrADo=zBZiB{;_bv
zV(1+)hxi4l91f!))KL&#uq|7!)l}#DaK6cLelW%2SfB;q3}n2I1-vw?^!vI1NOOC0
zwn?)hBxHY6x=74%m`I~EZ2|xCcmX!Sw5&X8dpQ$AQ5%9(>G6Iau+yq>KUoos{mTZK
z;(|rsN%_4iRa+tlKcs(EhK(gPSpYE`wwrs`cJLT|eRMK}k_b4nh<-z4c1fV5l1nxw
zTrk`Lnp#GK{P&5~t7naNZZHtpG}r0K<jcJdU_LB|XMcyCsn(Gb_;t+y8$(tMhaQZO
z+~Ir2HZX^Vk!>OtD(H1C4*l>cXnbW3r2HiVI!z#8UF$7UE;W0s4F{)OY!@lG$mRZ8
z@rQN~v5rI6q{wB`-j&lzyGrrH^~fSXNA1rz+KM(gE^nA!{$cf9c?!_CUuoWJYK4;B
zmcHKzQdBP}(;eB5P8|XGSNY*K!>4=k5@&=X-KL^02f4tT?=UaV4^FX0oxU>f6M63W
zb3p+AVLzRpynu5!S#eWHn<y1WROOh?VS-s54eQ3}(gt_2gEiaBn!;o#+hHKf|J}zv
zR|0f%FnO}v2Ey|N7=zE-qYCbk@986*NX>o`-C**5-kPwG18|cXAPsb9*1j=E>D>s$
zejA&K;xmy*DI+@QbhTeP1hhH5e6TO0;Tr_vZ%q<_63}sR#i-iw(XOlwRA~kGdK7Cw
zskiD6bJm8C$Kl-9eA78F!Ue-Rui3&o-zGjgJ}Z_J)pz=F<C_P~aA>3Uh3^wAy_{fA
z5;=5KvvAEaUq#3UJX|xDe1v8Ujb#bNh^m$}hc*&Sg74?5q_|@VU&f`GFAAjM=0>G+
z1n{HIk+A7ME*m3_H_D|lkv?7+x15s(eN2iWj>&5IT+e47JN{ILK~8lT5sgS1D^sDK
zKB33uq?k+AGtesRpFrnsYr5Avp{=(6)s4pyp-KgAGq&Gqyyr7VcMI6cr8vAW#*i=*
zV$J1osSP2pDLq<*q^}G?!h=E;a>#W6*bFeZUq2#azzy^@yKG9Hki2*b=9{I)ouP^9
z%j+IuVh)jg4jNcBN%x!18q5*h`lwQ?luv!%fs)DLZ8rYLmQ)j%x<9)#9dt3c#8`Wy
zNSV#U;{p-IB=9($rbYeC#jtdWV|%0!;vO{ydK*ZDe0yOCtpGCCSc%JWSo=LDy*ub;
zam!Tq^CKIl&qx2fda@pSrEy&F&gk(%8M0tL+#5|!Su&fHC+k5;%{Tg2$ger@j$-_-
z#vx^Agev*swA!V{q0#u4G}N+L+9Q90XFRKAr<&Z3<{@QR#<}!CJ%Y{i;2rz(h0=g6
zT6;2w`T9QF?Jw+zSX{<P!!JFg7QTBMMTflpd6W$9$`Tx$DLtON9*51Xp~(rI_okc{
z8E6=$Mc>wHpwHxo@0ksK39`bS;!P#acg8Ao+_+#`n$I@8e4yK#)AU+XSGc1_>a0+p
z0vdFD)_8f2(V#Tk-H9Q*b#?cBe!NR#eIl2vG)!t&TeAh4O<|PLa7s&x{_AiP3Z71%
zn^+RC%gyP<?ahfFQMJ7o(Ht~4IgCJkm<gx`URV2^r0KMXwctT+%S@>8S3nY|*PePR
zFx|_inzR}Ncx6>U_dz8U5dYria;9CwZh@J?;s;KUI6atkdREDvbrKK|2yBDfom(8x
zQ@S}jn^{dfg;XM6ndz4c!3g+2@@VX<i@TxgWo!$6!6=Zbx2UxnsMh0lS_iE>Ubyfb
zs;QUjw|K<pLbrxZ<Y}UVamZG_0aO{zA9GW8iVdd+$WhTyl8N95jz$#qh<kkRTiL!r
zY>@rp*O$JLItoh$$l2V8s!_msoR6QcI+$oK;JaS)shizGgAK3c1ZT&rOHX|aI)k=y
zdGv2{h%-xpbxMxvkWsc4vr!qW<&w-KHANd5DPQn$!`7iGgRtw{3vZwRxG&$`2wuY*
z5x9b9LE`u-umJA2$nZLO5K223sMc!yjgn(`ywXw-%X+@pBup}J+tAg!^eeVMF9;sE
zG3BIR(Heg&Fql)6;Fzs2NL4ZONik5o_D-vAcx8HsF_O=Ar8xdt=)cn~Nbj27#$52N
zWZFf%#T%Ox)}p2yrg5S<2;(2!Nx0C_kN^nYSFG!}*u{^qTV{uIb!7<D<#(_zXaR8N
z;hyiviuAocH`>f+BpHi5RUTx=#qBuxzU!Gx<t(jXUd+fST0UOtREXr0K*qBA+^Ah+
zm<@<hlB0k8NPEO$ya>Fk?BRpFQ7sS}Ly?Gev4V5qti&;4qen0noq{(&Y0J2bx`k*g
z`l078%?tM^{!X_Kq`(E~pH;%+Ho0sbFHy{%*%g4WXK*?#6l)MxFf-bvxKErF3`Bb4
z&;y-5RLCzKRambbd6zk<MtkLB0y-8z3qEu>K4s22^+pmSYZQ9iBk)MXVPx}$W)o<t
z0L`ditrL{a3!s|0y&Y7WXcRKUYvd9rBb-)6ZSE9WeTg`I%@cPN;8F3XN=3xVNrnA=
zaR!PaQ+=IRosgqDB7oK_Ed{Kw$TeA_;B#wZ`dfsb?oN8H-7^9+ky^f?12i5eAtw2*
z!~KHVaPGESJVX{-8_8+mkJe%P-MKf;&6E-b<78Y}cTp5BXFyNKEMq1r$7{k$y2Gz>
z%Mf=$en$XYFV?Oc&lVGLGl=+@su0z}3>>lr91G-rkw@cuzj>6&9WdqeT_}ZCuisi)
zjppHq9Wxk@-()G;hSZ4Gpw)BFZ-_{V?*Wd8=MVqqG~TSdX!!qf0e)|>*x6S%w&m2x
zXNH8r&+P76*~HjJ)344@EV#L~Hq42V=nNudT#N&tH^+!Y4Gya_{c}|!TGKBb{+ppO
z(~9|w!%BWWSL3fy&!E!r<Yh6s{pxeICOUVeYKre9eau#S$aCy7Gs0;Vf*~{TWkQ|C
zW7W%sgzZyx&p0ixi;zCU-+eHf1F>L*_Ma?wYd4%d0R6ugvFvkYJQsV{;BL|T(qklY
zS?aO8s#+owBdk&$8)}N31gM&VDa!N*tfFymGKnAikx*ks)UE=BAA%}ZnG9NcJqQoy
zJETrDr@Qs-GZ0g!D~wVbBMH7pg3feCb9j4JUb{$D#=rLQ#+iJxZbiltAb$?1gO9Uy
zYEtC=Dctn@N*Vh%)CH@vg7;V1ERK&Y;N7X@VW!Dq`6K@CHP6_|ui=ncHtQYPN4(Yp
zLt?_`pk6&$w(?d?j|JnTkXf`pi@AL_CjlHkBEX`iI!m=GJux^<J_j?50*V7n*&nel
z#7nBP=Y?AVs-tA4MsGFW0$G&e{d1fo%5q>E@m<3MI;SqjXR}<4h#xCo&!><c6`?DB
zE==Y{I^6<11=0BI8w_j~qr*7SQ98}9w6JLmm#~L4@vv-Ss`#6>n|#M3X!@1VU-qXf
zGVsOq)2bFh`?c0xqGqkDdK7yTsurTkjs6u5z8q90wjy(9PIVhO`zT~18+<{!-+wSI
z449<`_*0;r$n=%@2Zf@{?R<yP;5$<8kc_$9n*=-09&Ua&@uH6F>7z)PEBPV9u6IMq
z@xlKUw14|XPE;lT6d_PB*f1?!eL0iMiOXe>Qg(E>i{g(TJo&K8D(f~&ym7GiV2**0
z@|eKr@^bc`^TM!A@yzYZBdM^752}|qAy-|yL`A(7ZUjOi>$igMd_XZw=XAyKVX9+f
zsc-o7nsYKwE$k-_9_nG(z8=@VvkV5|V8%gjAc8QpuIJNAy<f#<4fg`r!AJ3f@`vA?
z=BH~rjG5rXsANovGPN3}wqV194*8m!-P2i-2UB%`h2c7W0+h~_vxE;KuZO}P3M?`;
zWna~O&0Iay`^JErEEWZjZ-DjS`gkR%%Xs%=tq1W!1@~&jbZMvKrgvjC`}R~BG)FLC
zw4bR1oklS$G=|XT`K_>IU&&~eWSC+G-@KN;uEcEwf_!|hw!>^I<Ja`$3N44FR$7lN
zo@G8zkIv=(;sXHS-v~$Jj-_+L*DO>3vgRlZAr*u8;kNJADMqn|C33~3x{Ye)^Lqw@
ze5qLyUe|5yPH(vS0)SG%qLJ6FzcqXH9W-VruRf&7xGO9mx~S<ey_f;;ntbm2Q(HD_
zT=v(437m4k=F6rGXKuhHk*|8Vr<_KcNKHsO5IkP3&{nAf-e^nTLyTDidmJxoKt-N3
z=(YS<ka2%&0`h0Qw_K8q@h2#Z!(!udgTqBP6>@qhMB8wMBji)xnc09&6d@KsSn7WN
z1XC{H@i@m>p-D(8=r`D~&uQn31m!h3^n8*m&RTxBIVHu?`>X7-j*g}sCH+!E)K~Gt
zX*A$>A1^SHLM4^-JzQ>^-G}p~C*okxQxu5Jns@Eh<rrENXfTgXgL&{623P|fjxht4
zxE3zQCC@N4Vomp4K|36|(<?%5`=$CafG!ej^#FZ~5PneHO<BFk<ij9Z1_-cxizsHJ
zPPRVG`g-`c(I2!A8Xf!glLumns4nyC<8YZBQ|xsdR#B`>3%m$9ZRB_Mg^T4Gzui7O
zuL4S`UbEYHBqx1(ber2@W$tHFmW)`x5i*LfxYGxiczm^{lNFT$j}g?P1^#CdT_1?U
z7~&foz*dpLX@&#CxZh}VP>fk5%i%C}8JPVv@+IS&<-CiTiLpK?hEVYOPdo+CzHUW$
zUF;T_VEnn2iKa|n&%EPHWi~1nxaBj=!b^SzOIBh})88$Ejy~#?Q{JT=&(ZzX$X)=+
zr?YJX_91G;Y>vhLdA=`UTuu}AGneT<3+CCau+V0J8uzs$PF&Zxr#pkJN>kW~kYsC(
zn=IWW{S`v%Tq|8;Y5f&J%B;<DOo-ETabsAR&+3Ywpr~hUR}Hl5=v6*NWyv(RU)C2>
zVZZaKz13Dq^1h>fy0LU&(D5NJfVM)$a)n<iH)qzpYZwWKl0GV=k-7c(tvQJ|bYDcD
ziXm;*`ed&OK{;5H-Q7QKYT4Y_J+7LdwQ{~$yI#qt?~drC`0>LsSC|{gMwLJ$;6Y>E
zEjc^Lnmn%($zqVA8xH}vVpFdpzQp=5^;bWxE<hkveibtm_fa<U$8n38AF#^xi`dRP
z9FO=k_tfdce}3yfVa(73tEa143?^5pU2tn5Ll~7zPQO0CL?Hz88g+W&f4`<YPht{l
z<*b+~ZDXlQqE+K~?8u`=5Ee4pMia$vqU_{~g}>O8iks%HcBpGAB^UEyTJgAUgh#e3
z!A`KGg<Qj-$Jc`f_n;&_4d(95gc+W@KA@93DKZ;W!kKH?5!yqzhIU5l=bng8<lo$<
z3T<nv_h&aCoQ5A1-_3F(;Y%A893B=MaypE#>-uu3d*ABp)fdsf=oW$E3?Wu!Ny!Gh
z)x~jeBb6*L1Xs`ca(H?5010l?pv`K!7?DV+n91Z2=P1Y_a!ZR){(@I+j7FLZ0vc=1
zr;r3vILdC|x|0f{)?SMeVp#sTnZI9+PG=YNzP0YHU4Nb>?FPM`JX*bZo>|3s|BT%o
ziku0onY`eg!zSO7F5cgt?Bf=Ez8)_A2z0#~oMsZyPg5Ap<>z)h<k@6?jnIuYqBZaM
zSDXc`VdIFyxJ`fU9Dwpf@c*Xr6li1gB`UK*E_{ut%b?L%<R1YJJ@_OT)JeK>@9TND
z6Ewy@qLYOyBhnr68FB9)kv;H(uhSdk{q6v=W#M+ur{_Jn5!$RJM`TRe=#P~DoNlM9
zzNpum2y|UnBrEX*qj$8;ng8)SE^lsN2uRO;)BS;1D}C;RCS&@qPw|llUFow6$|=1h
z46Y1WpxwW=LE-m`!Je-x%O5+3{<FW>dhi#-+or{>#pi$C^630V|Hscb8Ki&y`rqk1
z{2yp>!X#v3!QogG#eWCutI!!QO#pzau>O%4TF2^YtELmVbjoz<IWomzZI1Y;s3>ZL
z+>dGOH{C9YAVvdrr{P{=In68U=}|#X=fBGBEs`{)47xwwAT~W~q1+hl#jZJ{2BlRC
zrUt=Z$iI@*MIq|xX$_pYsPRQdc%f=YWOX|0&1owma=)TtqCkjjG$H-<rAa|t<!Y<T
z@rIFHs#=7C?W~;!G|zwY`{?qJPm1$58R&I3eJWi+teHeyoy$tXnxo^sS@z(xreb!7
z!+4}4<HDbaM0k|3T#D2j=xmlm#0J&c2klzpDu1VDi>`XuiuV31;`e0wJQZ}oh{PGg
z6rpiHTnZ5|QsuKWc|bz3f=hzl5L>AG`saG`EJ>kQ(l@|jxHnzgGu1`GW60^CSVGN6
z9*S0@xILKQ&|f=#Z;(Z>2>Sl)_5{5~$xNs>xfZ2Xai_wdjZ6|0D`v?PbrA_wx3P@D
z^Km|+-p?1FH6)IauqX&yERcxZ_|Ae(Xa2K#M2|UBKrK0JK!-DxRms%yJ*Qr%JY7Jm
z{Ym6iTWVFFk-mXJm1FO#nb9m#KJ$-)A*RgP9N7sKaltgZu{mGxjo)EMrm9EqvRh^I
z`VKRv*H>mX8jqd3`z?4(goM;lf~8_N3EbPQAE%<rCO`jf)+A<osro!EI5ev|`gYo`
z44L{Jo+`xJr2{W1Ma?a%j^dWtAyPf7h$6h?Sg*x@{gzfkHd&(y&&NUZh0F`Q{hMf_
z!K0%KYrt`#u?KMK#et5O?dHlDd3S4*T6~5ePyB8wT3i)sM#+i(qzjE&nQvnn17e8@
zJg$G9LA5H%geFA#+0@jNV+GMpR>Dl3^qK>oQ3$pQ27Z)#EnWA~YsqJ8w3%Y7Vh$)7
zYn<gRdzVEWXqJUi9U3*lT!drNCdd|!(4gWC{@#%#G0{+?_t_DaJxFz2^*)+bw7Bw_
z&gg$+eTPXQ^{Acps^#_1OhNb^ad7nEJnlgw;}=V31=P?82lfTi{Ta`cI+uK@2!h|L
z>)MsN+Hh5XTKeRAC0U+JW$@M=S7R-(a*v$=IkfD8M*-d6wi7u%iBIRe^N3HufTc!r
zh}w$TAdSsB_`I*D?W)t`Lh{#YIZ7@Yj8?v3Hv%b_y=Ty;2uxPhH03;E^FY#fgmlrZ
zY4b_)NzA3X#R7&lmzTee9<F55DQ(7Ph^IKm3&c%wW-j80DT*^QR|O0zM7J^FkU)fd
zwKB7)d14{^i`8Ha#=y6TvO8UYZ{0zl+}{DGU7G`3$4mX-P`9IaN|EkS*oSLk!K`2J
zm=AA7KDMOy418wszJLEr%;N~CdtuS$-fLzEap<i1l4?yXA+wdryxv=-_me(xcoX?P
zG|!nG_GjSTu@k{&BNi<Zcb5!v+Kqu&pUWwk)DI%f^-67ua<f%stJOtg{JE?h5A=P;
zHL?BqZ(YvX3}gg-LcWq2_)yCwdERcFy{FbstA*%^_6s~T9N{s05TSuUBO8-gy%Abq
ziA~AuMeLvHZEoxNn%t(Ze!e!q7aMQC!;r-2x%;I?!eMcGYF6@GKAu0`jy>evv{wpo
z6BH0orBYZa^jLm2lXUyD8ucqw4MLU2N5;^nOuX*Mi%QC+pWdCbr&?&gRP=N^&z|N;
zpM06POf#0nq*Ghlnx>Qf>u{~EAaQr3c<@4t$rXfLeZSG2EZ6WVaP2NC6@{-M2Wo1w
zD4da0yL9_vcrbo<`fD?&?b`X}(oL^B6cJ0%b_!N14iC$y-PdcU`)(^D(OKTEfW*Jz
zl70ZAJEUZe=tDAQe-yXJ4#!chS&8CydHQ6r+N^bo$@%q>p2pgh9=B9uxbaAR|EH7Z
z@j3@6YfseHh!Spv+mv>`=h@=*p5mxLAo^?!f7A34=?c_nuQ4`AWs=&Js%h$>@jmGe
zoawfAx*o)3Hi!3CVquF`>gurR<<EMGV4JtYDgo!`@W)B!|8fE56@$9-7wy|}rV>$#
zt*{4;TKvfxN3zgXKg^}~-yM_pZ5wQ1KycbqwT>O!$4iP%oxWE{d7(4ohi%mGJ-rb8
zs)eo`y-l56W+T;@o&YowVI=Fag{z}qF>|Ly6<R_bOJQhxs>S4q#18=UXq}H>FZm^2
zRbTpgMB_m1M2~>R)@v-my8{5LRB6{$r7G3=onIgu=T~-K^vV9Wx2ywNj`|ha`EL2Q
zh@%FrbIo=SP*Q=@t1G|LKkF5<H7+x#=S``<E^wJeL)cp4H7si|g1Apsez{}{3383-
zO@O9qfsxG(1>A);Mrqcl<Fa7XADDRSeETjE>T%?CG&3Ty`7{&DGvhn&s>(vwE%j_5
zWI<h$ws<HQZgDfNM$?Ld|9vLV2leTfe!cUOInkf!KIF@xZ?uBCjf(+W-#&XGJyLf|
zzchOs>>%Y((Tt}5a`~#?(sVd~w{x_(hSR|Yx=TnVoVCL-YOz_F(ATN=Ihxxa<6AJ*
zz<a!9#s_m)uiCE0i}_w&`R%T)Y``I5)T<K1A5x9a)~vSg+)gxB<cX$TE>9EARwP%k
z*zM)toUC5dN#4m8ma280tfp2NJ&dm2@Cf-m>!*|F;H#GKx<6N1MyR+GvYl>B4-vgQ
zox;Qi2^EA2`rnIRz@G@Wm*lN@`%pl`<);{oT*mjYIh=Y3pcs?+ef7mdUyAZX(rucB
zEF1m|ua+=py=V_ShOD&vO*%*iL=G%rQM;w_C6`yvx2t4pbVy?BPCW$i9^O}F7F$ST
z3X?UNEo$!J))>kpe87MoGi?7*%K@zYiB@B!YEbiG{SNyOS(Jma>!~h=c({SFtO>Pm
zYe^#5JXa;oaBif0r{jqOD=9y)$?D#fO)463<lfaQAGh-kdJ1`6t1s(y==WJ1%$6?J
z)#=?F@4FA=JjCGFIUZO-Nm`s^jq%25yWIu+?z_Dx*;ws7ejo9ACk4p&7tb7g_wbLo
zcucqYDoW2)Imuumu^HtL;||wIr)gO4fo-vNJJkX<bj1Z|Xq$r^gN5B%0_y9GanC5h
zrhX}TEhlpt*^n&&VeEPz+^N&6nH0@>x6UyqURVJ%pL(7r?Tk$deJ)FqHt$lqs~-5{
z5Mh(!+s0CPk=uwn4|1EH*eY-;(}ZyATM7~(MPl%Ams34&$gJ_RaioR_oCg-d>COX{
zRWXN+J8q?prr9llJCU%W{)`|hn+QHfxsKIyq=kGI!_brg1M55sT?+I&iBhO}1SZDw
z`gh+tOxs+zK;H$UA5v>0>_svI94YK_T$Zwvwy1}5G3C?t^V$k2w3sw4?l-Zj($2@{
z64XQHh*+e2CO0B`YDHX;WS%$2%hj+CRTGGKS<ufmtLs7cl7)=JL<X6Sra?ik-~Wu)
z+v5tMd&P3b?v8P=VHz+qj#JUil4=BXr|{_?4j|#*up4K+{$x^%b?Nh<*?X-KCFuJY
z?ukf7no=vGudnG@)zopY7Gd@ai)u9SDAmCSgoTB)e*87b4efY#`B1FG|DxDDkNof%
zU1aNUXPJM>Ab2K8^mQ@*yHH(H9&han_@Af*vc#mkUio4Lmcg;#IEOb{z!pYr7FZ%R
zfGNF#Zcemt_jYg6TaD=H;7#KUx8Z?Sl}I|cP)^ut-qZ(4<|6ZbuIcn}jb=Bh*^FA6
z+Biy2+l~L}E$c#qc^COe8>rRqq*_BWm|aRf`;V1RE|R>Fu;26WbzbntZ|~o%BS?Rc
zpB~O&P{EX)DBW?|Cn#1u%-T0D)ocPQ5OJ!SFVB60!ZJ!q^NzD-vDtdRnAvuq+QLub
zj@9T?Ct%8y?%PD|+}JJ~x(;HavzgBq8$~<*AV?-+bywii?CBLAu^y|M-*797HZHA<
zy^O=7BXrom?Hj^<M`izNM7$khucDM+ehoo@TQ6B(bZA-*xc#Ql{JeTL8L(G!+C4-)
zV(fCabq7wgQnE|&Z03`|`?a{38KNFLtaEiDu*su6Qu=aPHe^UWTwuj)sLgHnJdUE5
zzBtu)eC$7-1kBXsjsT-4Zp;3phd7clFj}s_%*AYpVDS;+Q&?{dHeplsgSFmA+lG%S
z-J#FTUARk(&AK7<KSu_3vlmNJN#sd;xljm6HRn6ep7CH*(YLErs#RZDDLBIf{I2cC
z)`jDx-e>M1QRU^HKTkRO4+yR73%&#95Yl9~8!_8=?atS2sWk?|J|<~ORVH#n_W|h2
zEzaBL!m7fz*b#=*Dg7JMm;Li{xLBD}kK{?o=&Rlbtm_yR6qYjl>|{1?^~jaXP{qA3
zo0Np2&J1JInS<c25_y2o2wfUGTHMcEirEE5!lPwJR#-DsA%?CXKiv>l`B0@C!J!Nx
z*w^ER)Ne3rJv^)`C*l#bo1ZaUBDTD*?y*sBXC53PDP^jvtw5L#vOj;Pg=>1AUzSZL
zPucCSVGt8?qwTG`Y+f_I_6fe_fR5loy>v<WAL58e_-yo9z~2LHsqVY!{0>$OD!3e!
znfLeTx?a+BYl0TKMxP!KB)}8KW~p3D=Q4c!>qu+&M*;eAj+%SL)iNgh@{g0zsJ;b^
zib;b=x)X!StOie;OWShel7|~)owSVW+5oWh=ro}G1%oY@WXibWm$o_-&2w<fxVZlu
z4ye~N?4dDCdX=|7%Mv-{zNabRyTd5<x==G10`;<Al=pLRxUW9{By)m%bYydPju`xu
zw+gtK<SB3Q=18aGmmKlIi9mhuKHvynsLJG_mNtZhm)IC+TQ)k(ncJ^^<;>*nCe3c~
z6mlHaCKC|&_|_`@HSMqYs9j<K1h{lwhx@BV2p)JOfvdw%eWYHKMA)a*W!)NWq0nvJ
z^u6(BtV2IGo$D_45DqprO?{)+tm4b;--)1%EDE|I70jx$es0Jskav<#WPm#>S9LGf
zD{?K^w-)_kKa=K&j}EbUklM7zXR9mu?JgZ~Wy*#=ZqinwJ1IOhFi17@XPJOjwD%_l
z#d4FUM}vAZi@%e*^)rRUMqz6RrBc#XfA*p+tlbl21jTMfF_(>#Ke)dGjh+Se>4-`W
zHKIlzD#<&oM}cKIrVNwJThOm{%E0M;Z$2rn%~A`i+NPQuG!VBRA)nhj9Gm;x+$cW$
zT_^i~I)k%PJ)h$aEtk!t|Mxh}XjVS|6r8;g#A)s@PSK$<&``SKDWzjPfV!WiGoi$k
z78{9*2SeC{NY0(fc+oY5aRT>M|GHVQH^#PXG6#NfwN4<b#QD~u&+UhEzo8rhdy+b=
z0gB&Dx}R7Y4dEMMJuG(_i~{BJ1THig{B{p2CbFI3GChur5tQ_JX0N@~W(#YHsh@2m
z;XB8Xc4aN#Y%`4$j(u6C*l}N+rr-3TW%C%eI;&hSw7xqofi?r27wc+Y)Z*berCb&s
z?w2ptv$YYH`0D^XrMT{CRR&ul;{-66!)8SI;|Tve>aQZjsW-@I?B4@Bsg{|i_Z&ci
zQLy@5p2az}Z7_b{7kD%J9PkpU?TS3jxg1PF5-q(dLKz_|4*ZzxaU@i>xm?6IL;{~Q
zQAs!gw(Hp>1m-aitZ0?C!ZGw-R>G~j_D4vwInS^oJDjhOMo8`FJJ`+kIZ(={$#+cT
zomAUMz{qw7IPQeMO^5Yj52Pz8{s5_rQ?cwut+f4ZI?VWeUVC&x4M-ac(*7I(_yC6w
z9v0B07k9!+3w-Gi_Q@WFECg!MOWqtqeS2EDLw_t5(8K{<^>EV3&c5t((g?cD`QCCd
zte(IlVB@$u=v{sY(3@7g$o%<Yq(FRM?UlW1!$eRueS$LUXDfe6Bx|P+7112AgL8Fw
z<T=|{uMVX%l`FD%3Qf!P*A!$@X@B!)&nJc4<QwC`lS!shs>l-nt>)@vkQY)a(d&cw
zZ_-+gkBxR84MkN~0p-K1d+%a*>dLyH4qP1bXI$$gpL|`gCVO#8j*-vJ6!H!qL^O9(
zw<8kRYR&XWDkySLx2^DCKKAVwdjQ#V8i2Q2+^%G6xU}6pTg#l<MlS~B>$PsS31>WP
zCjuAl@bx<0W@kbuYr9+kLL@%O{%P*`tv`<1U!+eAIdnB2+(?J6Z8TOy?*Xt#|3$B;
zoC85Kl1{L8kUmUoJ8vHU@3b0lJVKVU$UubAb?il4^NGU!SZPQ-nciq_a_~0B5bEc;
zF>GVTx9Byfh1{*w55kbi;BcCm6AGHkFzGzx_x7ywg^MTfgooI-Hd+t)hVE#$IyP!J
z_X(%-G<Uwt#d{V>U=@d6B7DtsoM?ot(1V}7!RK|8o;5t&tS!$G2=EvPc;+g`K>FP*
z*H(mO#ZhW#w~>{O!rw?dQAER!oV5F6yvO0eZI<Zs<1nqG34!u>{1q67gx~$VX=Y^V
zAt8e*|9893?hWed)i_yTquEO*fW&niaxr3ZS&XHV!sDx#Tj$HIv>JZ^CRZ5ZHXuYj
z?vz^S%I_0mB30o26gtuh^1j{(399!xnzMcI7H`Ufg?Ibo?K~pci^L}xk|eKFYwML`
z4@Jjjp(aOa+8%7Py<fWN?3A0SS_!zUb$t6LE*t*ZAr1U{gz+|FvIKAy+UxQ^EuKh*
z<4Huk-}|v2Beb$Y2y!45G>i0)3=t9ubk`$}puDfvX^ORmqfWCL%f-k_;{c`j<1GGW
zAZ$E@VZ1r_v7z=GR7c$CpDfnib-lZ9+!5r%q8AOyA7}{)#9*3W;B(S$GAyOq%nZob
zmbkUwW1pzHT7axk6bqT|i*Le(=f$|<y4C_rl-d1yW9B6G2)Fsh+=>I=1V!3*f_sH3
z_4Q(V!Q|dkmw~sVUc&^ZHcM-SaaBhvP)?ZSOIa@Z<=<hG_W})T3&!|To&~?Xe8-2w
zH^nn{y8IN(hMie0=6Mx%ERwA%Z{en}?H5|Izw5rl8qmJlv^yLwtMugvOGCwa;V5`n
z&cG^S`(-{Gi=jq+ZL=63^2UXNTwBwBbIeQ%l}NDOv`5#B97c3%7ijdj>{rVXyT?N0
z0P+5{o7nHP_=Xx-$0(}ey|!GX9HFbLT<Y4?2*EU6(J-W{PJ<0n?Ra7T`>DD|wmyJ=
z)Gs`HDjZArpt$4?#wnyr8+w^$wUE#Ks^z3_1yLilA=ga5qe~`>-MDG39`Rkv<pY?<
z)bNmi&hbqm6VZ@!|C>>|pIZUp^|dRSdRa(;Oh?bws-?DYGxL`rK~A^}6Gb}oY=;7+
z%xx+1_L@%aQw@)fqD7(ZPl?ztLBPFwKj5F{N%Y6~JOW+lu`!dof%$E`o9)msk%izD
zGoEcq?ngad3mkG8gCCpn1K~hOpCTON=C0%oA|{(S!a)AKu<wj_Hud-FPvGbznz5Wa
z*OrYhV_armmUO=-MZ(~HAN_1!9eDb*=0k6MGU10CPZ=T@V0F2yXl07lp!H=be>0m6
zzP-*1_W@iwOYJM%ar6+K^ItANVExVEVXbQ_r(Y;Z&)fMNi*haprkAO+=>u*f)!MQ1
z5OCQv_eu=QWV^Gb8-Yfu<@`#ydcIp#WHSHd!4dQw2fPtOQ}<btn9%dsK9~hYZx4cY
zvI_Nmav3cyIEuk|snCAA0HkOst}AD4Uhg9{FrU8F^o8KVs!x8R)%e6O_dekijL9Jy
zi~!S0CY^>3MAmOlVQQYDKeX>K08zYfJTg=0cuzzY;RRLf=i4op+%Lh6mD=qd8sCFi
zJMnp3Ad8BA-a0g&ek&ik&inHU`_9#-PZXL7+s)=aG?L;>z4ZyGdEr$85Wa85wp4T{
z|LY!aIFZ}2^Yy!3idD(Zf+MbfX#U_DsZRhEkGAxGmwhK&Bj3xe`HvuAhT#l@WgLIG
zUKRKMl?a-py{|O?qr>Dmi~e|{PwDjl=oym#*(P#(y21Hc68Xbud-K!tuP8L9j{j;O
zIcPPjodNeiOi$6j?dU1U3RCHy#~`fphv7{;NR4rpAQbZ=pHZf2IT?t)0U;ij!y*6Y
zSr5K6?H5m{GbeC)XhJ6(RxXB=Hv3PMPIvX0|2#fHnC#pv;a_FrfBZm%|A8#=_lW<8
zAJg#vH>&l_NJ?(*CLr$)g!c)sCX3}VS=A)rK`pH<fDw3wA~<YEn8?Toh{XbVH{NDJ
zrImI>OzJ5jQB)vJ$e`K~j`PX1KYFj%;DwKgiHXAo2rM<6eEF!7pY%~j^q(AL%`i8n
z3}9Bm=e3*yq+ZEb;zo;snXh7RC1Qzmvgwp-jmJ$Th?fr5kH>*j9ZTL5zZidWPMF7^
zsji2rrl7@us%tyIU&s*_oyn8K1`k53hWpklgE{-M33AW+=#mc@TC7)LFv!K{K+XYC
znv91AU!?P8DE#*815yEp6PL}3`hUjJgf0UlNJ#*HQD?`4?0ZJTL9qEAW|3j1C#%=}
z``2;{O;iT=Zo8w|K3Dt6*Kp!-B-x(Ysj=BwRoX><FhF#wMx~<onpnA1dL8=m%n#Uv
z!^!>$@x4J_6{RGD<8oSPH(q(1tueYd1B_iy4_B)#epcP$5tY^EVkL4n)fF>UIZf8j
zq%qG3m|HJ>QP})AvUWgjCMXO==G%v_vhPR)JcnkgG^-670gn=p^a(}69(0kJC{hYI
z{K;C;3xvet5z!1<KkMXmheVfzU&^Nm#1H#i?G=d{d0lK13)=|5t69n)Ej6;ks}x8Q
zbGV)MGiEk-01?fk(T@hjZnMV*SH2k>cB*ZP4rZfQgi|$urvzK4-nVSw%TNO6(4`JL
z<amzDy`RIp=o*D~N5}rt>a){or$QoEOb#BWZUc}tRb?Ioe75y*5h?|$#^g%-6i31V
z<FC7eiBc<+9lJI{GMk+6g>3>mjd%eE4TL%D9jPpOd`=9maE@$A^8QQ>H>hjL-SEKY
z<^YS!UOPD!=65;3fu?iW@i~;@hN8@~ZVn{eed&Vj4t-+scmm|v;M^Q1vV=78I3gia
z`LnZYd@l1pK#DRZ0*JdDan}YUeN<_6Kj!*hw7q3m)!pCiD=3oE-QC^Y-QC^Y9io(U
zgM@T9NQ0z=(%p?9-JNIpf1YQbcjwyIIs3f5Z)GhPzcuGK#uy)yqr0F`xaY~zypK%=
zUp(zJs~i_Ai<+BnKaso@3xN?a&GPkNwHjS%m#V4GY99#4DX=(9jg?CTyL2<DI9&=(
z+bM3Z>=m*1ANJ?lo%X+5Yz;(JOf9+}t~3rWao8<4If^a5M<CogIFOYH`#><ZNNC_U
zk|r1&41P~{cXtiebN)|hE-+BzTiN75A-L4Sg8}65&YLgir06Qt<!+BR$BG2JgbRUh
zQka2jiXsYAtLozL#GpMa20QF!q7zoUKYuX%<Jowy9;XA%fsQ-{DZYwy-p>%5`QlZO
zR<Yz|Uo!=i*S81P72jIj%Hv?#<MTufe>k()HB|yLO%|_@Z2f@3=~@S$`<=1}1P_<P
zn)~yT$Gf$Bi6}|6imSHk!&G_$*NeX227F#3*dOZj<0wyNo4rE9QTV*}*aJ_ViWxF?
z#xlQLSx**R6LD``6b&ojaR~VS(RO=W4*GXcA&0-4?qmh;iSo($`U2w`1vZh}#ni+9
z`aok>>v^c~cVe-8%6Iki#PJ+~zuUuKnZCr}3%WeL^Y8=_9*6T)e{-#x-Q=|Bhf@WX
zftMDjb-CRh<QoH;jMswJ@t#g{$zc+_&$kGKJXg|w_33w--UDyXF|e=3X)zj+Fcv9l
zR2e#q9r09XJp>$0b_^bP*r^uE_Z*iqVvXfcUG<85RWu+H^gcUTZ3liDtD!_5hqi`2
z+GDp|&V^0i%iU3s@4zuExbfwdsL5$rv8qHVtJ86m*T~4|IP(+pQfmP8&iZ$s%NE#e
zlp1Mm+YDxv-l={$0l%AQyS1*s^}vZY9?z7(nQ{3?MK30N7+5acZf1;1hEixB|NKTn
z9gHOu(<AXLBPP<S(r>i5#6$#70P_s#%S3Vm!*`q0?2baCHt(`Ir^ax|fmnh}WZekU
zexokmDgq%C9@oOi6k6q`{QgJ~^WbndVe;owZ7dF(<z{~9e>rc5{5=vv5RDz-f%QqS
zST?0xcGiePF52XN%0e<BnOr8ZLaUlK^j%=qQ<S&liuXC;O4s<H*`T0f5{eA3*A2ZI
zH|hRlffP8$l(Hxl`odA*v1pF&?Cfl&OWJ*RhJYtDCZcY;&(qC~&*drPK|1VTa>F2x
z>#ngN;-!rnbW94j3@Tj=loFxP3x!oINNfoEfR##+FVOC32l4kPy&fEVR!IrYW57Cz
zNW?2&U}Hqo)Div>JOYWMeI-iSQyV;PyDR^cp?O!Ks?r&G=O)tw3P;I4-rl(=Zo5OX
z<*i0nCm?c3ybun923^268t5_;^8?%CIklkwjvG09d6kp|wYIrF))f$4itDPp8AWv=
z7ygx6BukZ8a>X8+7ku?TkNH0-NFh$$T39k66yelB5r0~fM0GEnECHokJeu)xwn?^~
z;@Gnq&ay`o;c!=0p~U3n=lA-W+#DC@yWehcs0js!LA>C6xLZZ`1?jKXokbmx4-yF2
zK8q%1>N!J_@DFPnKi}<+X5OAYSH+gdXSlws@Kh`>e!>F>Fsk$Ei2zsix;L=A#F5Zt
zjdvo)Bv+~(HvhQ4+!;v^?x5PD7|mptLbNr)34tNOzjjRtB480m9kn}xH_Ke<aQnK4
z^=KDIBqWKK#p4zxuKUk-2ozlH&M&>dX9ACL-xYozD1DSP<l^x`GIKd>XoW#m*XfL4
z+0(n~Hh-T!^qdoYw}LC`Ur}SdE==AtcFacy;(<J`aRso2xj(l|woIDEe9aQ_%6mDz
zP9U)L)ns}#Y;%_x&9Wab=<-ykhe3oyfFbK81RA7&XAi`%q7K*;gZPruT<ra+k{mw2
zSdFdO3N304AcR|>pQgWTcu}01B$ImOcmCucc%ATfNz!Y9NIsd`rLI?Ek#gJY0{u4#
z-WlovwkFeo$TA~L8dq}xS~GI#iPtW)F!H6Ao~YM_Qr++VHW>{zNCf<)0Tv5(diAy*
zubt1cgCVeJia7$oX*hbu*9Y^nk3j=mYmEs6%|Cp?+fX!AX)K0Q{%M8p>bBX3>24VC
zJMkr>hi<c&e9GTsS7h3){qXTRT?^Rk4F$O}BRO0|utnAC4vHp;6iUVGjvCnikps#4
zM`1NvDdzO_Emk<4mQLnFfmAAqA@qWQSkoYW_p|u(?;wB$S<iO1i6e>qQ6Kn!EyNV!
zif5{{upH1?&40cBfENNsaIldB4g1O;`10)z+06$S-)9)J1r`QPxCUDs3W+7Zn=RjP
z9xvtEEL7R8mjzdc012&8iR0>wjcS44ck|KjpfdVHqpH2C$R5fg2#OK?BsMKY&pmZs
z2#j*&Tw{o#ux#l}#wv$|YW+@JCPV%P;@jQdnO?xsEQ=)>i^^kNn+qmK6P>I*Kwxh~
zEEM_onJS*<=mCRX{p`Plo@;Fenan1=z<O0;vMo6P2Iy;v0)9X;`KM8(sMaD(7y*Nq
z-J!HA%K^z$8gH(qWYlahR^eq-uc`EP@Dw;9L`nqxUMhji)Pw;9OL?8ulIV8@EH?oq
zUkZ(07$ivcD$~Ee_^-^9fX+~9-@7xDEL{)N{>Vnt>qr7WPsMb>6m8MJv00UjX2WG3
z!<rGO6#5+>N008^S}KfAJ0BK-tP=@`#eI8D;a?)uTq~WG3_iOtvf6Hw!7@;@H@M!*
zLR&~DagHAAH507_8v8|Z4}rKLEPBHh+fmyfjlW|bSJd=6TxX{!<Q|Z4Yu!#6(bs;N
zkX3fZLjMaUfxIE&{^YAss_yc<bWQsVmfP@H^hay;gEy;uvMIE!0f(H+e+dO#|BSy4
zRLtaw*$=#}HV9AIuP=65YDz!mjO?pUy-E3<Mb&((cM8%W@X%(xRt&p*SIYthfgrDX
zy}@K_Mg}}DtcGF;usqin{lj!QYg`%pF02sDHKT@6Ul}FcKi*6RLw^`}Z#j}K^Rhox
zbT~1mlxh0LLAOCMm7eCku<stTNisxjI~VXSt{==Uwz=V<+D?T;{P!oTkGlAzJvmS2
zo;ER=FWK&MS^UsL?&t08T|0a^w!1^fX#~Ts-QlBPy5MY*Bj|H*r|=hOdnLn>^J+vq
zbcEPLp#6l4YambvT)qiyl6oO|J*Qm0mbACNM>=`gx_28D3`v05EFFQZR}r};s5^bv
zhQLyI8psoNHXen=^z_=ne=zn^yi~@%bvtznJvt}-YrXvTKj}z^=L!;2UB5uMkY<(k
zeh$-L`2RFj!phI{Nr8@{VK8-OkBEaP^#5s6-(|hZ0vXjmNgj#tzpvnbEAqJiUn}w+
zk(&MgXBO~3DR`pH44<w>RCLig<%-w1|EnD|{sImo=sn+v|CNgum@59CH`4R&|Nd|P
z=d$wtpPI1$BME*XMA<-wEfs|s6TCNBU^SAa@~`cI3^vy72H}QED=jV#(^&M{8^_00
z&(YxWrnH?Y&E#}orA(z!+Xe2bHt+NN>_iH=RP*17qnTX)Jbu2WqZu6cw?DriJ%Rcr
z3Dk2rydJV>A>G@XKff#x7N>xNWP32qZk^~=q=W>fSLqWQDXe0SV8Gr4$+H<SQvg3*
z)pIjANu_^ypM!Jwr@1rm@Cp$4{Mp&LzFiN5{(#Fan@kPLf<GJJM9Lt3hx)4km|VZW
zqP_ne3uU`bvBeIgcAL(s<UDVx;u#Hi{{&T3&<z={cLogEVNol;*+*ux909onLIDrS
z*dsA`Tr&*+UM_`J<5xThYy&>O_Zc_}$%_>-Q|0GsjB1$Jf46GanR=b90Iy=WrOS8z
zaDy<A5P_E2>T#$Erg5qziVpN6i{Lo<#$$FmSy(8a?h4ZI2J~1hhQvR&f}sSk_ktP~
zDy{%qGNEw$@KA0ueSrEsX~a^098nJX!I*(MiD_SWNF}l=`o+`z<%oZS3CK4{GpIJ~
zkVT|XE!;S|IbM#!WRTsuKAhJWgQ)?r7CC%gV|U!uBMD?*Ud}<0#^-sYJg8G|S=8`Q
z#-P{44=T{Nx?phY?d>e@$lserA|R?%7P<1nCke7E;4w80gio49QE66c<Es^dUl#~u
zGh{m?wgicAm!~VONxjY@z(#9x06dSn0{t#snY!@Dk}SVs)K;V)bNGD{-N6W8t3N6U
zuLR7kR0^dNIPB&?PZNSj&<1)=I<4x$(wmc_QjqyF-JU23+GCAU<-D1J)G<(K+xRar
z_+0z}4fsad5J>mZs>jBLARHx4#({63vY2~;r6BnW>No*#ClU^#g3vpl3m4qxco%8S
zjz~=sBPOA4_rw2QwGmrEoJ|!9v6L)GMx$q;`~Y{=m^u$G=wMYGLb~S+e;KJD!tSaE
zz5!OV&32X+K@6VzDxsw0Z<E6^Gl)m~s={|r`ZXqXkl3d>nB}BJeStIeXFan)LxzS*
zN*1=7H>n+-hyBt~`L~tQ*t&0xcJr>?X`>)U1VoMTY;0!>`0e?cjSb{aJ^BN$bQdf3
z@`G)dONkgxtvsT9m12D~%E?p>RZF-{dK;fcJ1Dl_Arb1g+7UX~-fJfty4u4E{hnsA
zpUsXg0AC^2*k~T0{9d_BcyD5aE!AVd4fmeOOD82#n*T;A*g0D0&%@c~&*_b50*mUd
zrwe#7!^UV0tRyzV#6uhC3>d$;BfU<RthX1FQXe|HbuLJ<;^;Ihl^@?2nbN{}{;Z4f
zIGig(ND=x&HWyTodwxwgLw|yDIiW`>Ecxrg4E&OYMhEJ<D@|%-jy*n4`Xr9ohq{1=
zFCzeTFg5pC|J@6p41%t15@oTLwS~QI(R6zQC2NoZ-3SZ#R=8vA%OmOkgegf%Q%G;q
z*VmW!^70zgK9BGn6Sv+oo8pKnVohL{Ve6UZ`Xkxp`iW@0-HWN|`fpC4Yh^=dhZI|3
zx?R;!oOrj9HN=-JM8Yqt#^?N#YZm5X<W)NQ@7Ll@elBcCI+}DVOWTG>nT0U#wxa6w
zRko(VW4GC2v)P&6(u!pSnQiY)(FL6@n0$VU;jnNv1i=XI#fD3=_mBgy0fXDpCD=_d
z!ozHXZkVTG1HE<S?oWu%qV?0e>QcWUrx8UXNm6E@W&{+!amzb3DY;CXB36b*d``8h
zmiR>5rNnD>4OedFAwYwFsKnlZWmKu8s6T$*;diS%-tYzudsBF}2|d`ajCi)Mdk>dZ
z5raMIvkTcgvzn{Gv$cj!k&U&(H~N(PKp%D@jj=ldN?OEN0={A$a#rOxL%(DAB}QdV
zFxA7{NgsQQ14@hvbR<JuEA=C~eva%>(uOWrobfghA<kSmRfewBDt@xE%ILwKk!r(!
zH1938kA~rAwGe}438{1QGh1;f1DRiu4%5-@?-EJ%n(Q?#l$-Kc)t`soRVpspc@ooE
zLRFWXULCsa42Alc+)!lEPMm6vvtp*0C|YQQ6<^OHY%4ayd9({uOw%8Ht}CuCanmr$
zY~%Zez$sSG+^Wh~>^vH~gD0o>*3|Nm-Z^(EX%;eW+pw?Nw_&!P*-7@-uOf<c%~`Ta
zSqYVt%feOc)o`J(_p3dngRs_^^)nowUC`Z9=Y;(xebv)b8wdz8dM=J*aI=R|lMQoi
ztx*JCnb<L)X7iwGov%?cr7DeI^(C{@N-ddD{d3n?Avi=4-G4sXCoLU97F?>UwF>6q
z>-8#0Zb&6MA7U};E1SIG#rT?+lkYbJkA`6L1asN*`7JcIid-taif+p1EHHMkRHG!k
zMmZheFL&qSEQBP?=>Jh`*0^D;ZAzVn-Xtn$i?E>?O}lnAnb9wp7Hrh@(V=mvK2)Yd
zx6yV0z2I>>uLTcIxNO2?guRK0(8R$Sp3sUvG+DjTESHrpUr0TMS?wSSTKp&p?<Eu+
zH}%2|0`*G~5)SF|@5?f%ia{0fUBbq+i7!QvUc&HhL)>)<NaLb8HmN>xY{9!4IOQ6h
zmO60LSl|ZKs8Ya~si3;y4gX!BUZ#q##y4y9-%q7PeT&Vm$3q6(cfzS)(wCkaLrbt9
zXD6!?IlZiLB)=opHRK4jOb=%9!|+ynFWECQm-rFqo|#Nn0Nv<kjQrY6vaYcTe}Ytn
z9yL-`xeydngq>!_r>RsrtyonP5?{wFsQJ=~3?Y@(kl=zhE7Bx&VwG}k)<SohC;1$Z
zc6M>HCaAU$!U@_o%3hQzx<~?rLtz^OOkH)xyaNQuksD~+22f7cZQm`1StsmczA@$w
zWfU1*iTjNznqUj^#|G_}C!^27>NPuBe6r426K{at&hXJ?V!&vws^Kk)<C|FbayRy9
zKypF%h&q3k*7F*KNI=CvwahExUHZIJA-{(Ui7<pkQVS{o5x;U1X_XkUpD@!seDE0-
z#D}_r=(wMAYYvQD&0uA%lc)|d#^HXvJ3(<N(+y@UCW}sx@Y9aLtqivu)U5@TV@Err
zIqd_~Ocv?n<Q>i^Doo+X0s65dlnZ@}^5|6SRqjd7Tk{ZMI-M#UeD<<kB<1nsMcQ!3
zaa48mjS`YG3Dm4n)Gu>Zs#a?pxD76aF3}OzsV9AE%<e3jjK#wqF(VhDzf+8f=eqYO
z2%huCNOgINm_~J6c~0!7rR*@Bf{gRu;4^E)cXi;`(vHle_4Y~#6+fxt(-qGB84sUL
zLFO>E>D7@PqyL3am}8nTzgilZjtBpnTV)VETA7n)Ls%p7BF`HFk_~}}!@E*hP?0TI
zZHNIkkNFBWl-*Z@?u>YUy2OfQ5W-BOh`Ic_^`H)F^doc`O*+(v`tbeY!rj_+0&RGQ
z{L{P%U;4gT++RXzYjVNNAJh=q5Q148%sX_Vm-YU18ysMdOGK$i^G3x;SKyromr903
zELHYxmisPx;x`U7xWnf)V3SvwyZ40b{fbd!XCU8y;Emf0<t2tbsKz6?-~Nzt=V>f7
z6M7$<LNQ$qw;f1gf1>P7`>Rh(ts>np2ByRQVfVYhQA#8uu@!p6WIq{=x_ciBVupba
zX9Z<`!xaruK0+)8YV-6=hyXS`Ek*9Nhp~sbW8-8&iC!z8#z%Sd<pPDYzwA+TwO04m
zI-n&TCPqxoW^Q9rJ2U2&=ug6KeK;%OZ?l+!k>xP`d<VB{>{{G#2T|mGhXo-;90G^i
z$frg6aurwlp}fG6rO}_DLPczq22UW|ZWb~qP_oogXMM}i8OmE_?4TpsYCCNQXJDND
zb5Nd}hCNNLWT{T{7kp;e5gCU}Zfn(1MXWvMJhm2WHF>eNfR7OrPulM~rSmuUY<OYq
z3X-m1YAyE-p3@N360j}9`F$>!Em$L5qg-;JV5mwz!TGpW-Zr;s+4yv4C%<X_vR|Nq
zc)({zpSx(~LY&AfUeU?5`&*i991eqak0vd{QQ%!&atA4~{cMCGnOPYAVd$Spe}5;D
zF5!EorI`2XOo!Sg`h~hCw29U~@p)X;%he+|P2L>#;E}Z;aRgs5UGmPV5OLHWSbOqH
zrwn~YpFX;6e{08r8N911G5hpozk|G7Qu7s+u-2<xgADrvupBIsTB*Ek8kJBh<y6ti
zz|^y_9v5Ygk}uJV5M4x*@iw_m4PznFtJvOuKr9w`Bq0~>L)jUOOdSmH;fJ*|-=p!{
zZKXvp8*ex=sZp1eRPzd8G~vgkQitZY_M{+nNI~8T{$Skzlj4d@FY?t`Yrty;Qr8Gt
zvqZGNsd>T8%l4r#k6C4>@kpmr7mjo%2BVqPdvM}Y8Yx+ZplT9(^I>Y46E+EaBnDj=
zs;DEbUWDEm|3OM19g!$y+t0ix4=+%7!7ZzZK}7^^o9_t@vd%}2$0|cPRIgEQM6^k3
z<UU1WF)8Zfh$vNEw{e?<h|i=Y(rQ(YXzxPq_#JbUS(d<~|M~QhRM>cS$;c5_2<|ge
zV%luDMtMK97@|N$jwly)oQ4nzsU>xJ0M0<uY%%4%IcTW@y`)}0V84G;y!(1Ol_|Ic
zGc5Zj%k5O7mcN&E!F6ghgC)#Z>*PIN?|z^sUtAQ*(SYayZd3|%K3a2c_2(BTC*5M<
z&yXz$kn_cm2`;6Scyus7SsUz~^3Ko`+mK0BYbX~)XGB89_E2sftpnj~5I#=O^u@<R
zg3ANbaz3I64;SXLwpqVv9+Wiw<sj!N+BPs&d)iNf#oBEJhe*K-8C_m_rHH9zpXS+A
zzsi=ylGq<p2WOp7EILutjpi~}B<+nn2Xu8zrFW!Y-8p(AQ?bqiI++XcwmQl6$%GhU
zvRWXl%q+ov*-D+j<7A#fe0lO~JqyyS@F9!2HHCqcDrW(VWvFaiAm@{r9_{rK^zm-a
zL;?n4Mpi=pIGtpz|4BZAeaOBFDIE+X$t?)sbC5@{4j|CZ>iE9DccM7zJXA4ZEdj#3
zL3Z)6)A)sxZmDV!T!Ep0Xh*hb`EUC?iy3%N@nB?IS@KD~HVal`4SyJyFapPgT9G2Q
zvss9p#YQ_UM5%x-@z)^oRRtaet9NR{^G9*GvY{aoR?52Do;_9-yT&006HVIOGmyz5
z|1%3{{Hav#h39_u`wl`9!ViX9;JIIuDmot45j1zUbn&!w?ce7MGqM<!Yo`a%#q>uH
zt}B@uLWsh<16}a2ly0Xd8nR|@m7NFW-+tRNk{9{lR9*7u0=*zWX_taW89Fka$;DKs
zQ;=Nj*Af+hSrd72eRb7WNsv5rH3`QLwHr=j+zz43yBAL~5JMAq_YQLe?JapL_MZm4
zFgX$xIc^k=5M@|wu5!rz-&;y?BPLPWoOYVi4#c=d643^NdA72<l`iQp4$UzxD}R)J
z7##1UW2##8OXsRr_U{u6AYDTE;os3`BwUor%o{={^unb<M7SGQnK_j?)cm^`#FC|y
zIr(8o$IGLxyA#jv>Tjn?S~C6bFBW<E$ga@s-WCgFd~Kv*F#cgE5R188$yk7)9<xU<
zsz`Tk?MW3Q)Nb*J&e;8CM)5=IzHij3eC0gstvFW#$utI3u8GY%3y+(lL2a^cO!K8R
zI{U_LmB`<;6--~{e|sZzoYUZ?ibc}m1&JY1XKdxFtHYU@RfNLVzLslLJiHF$6pxOv
z3=65PMu%P!yZ>+@n!dqZF7gpRw6pbKha9y=m)F#8<$JF(nJ-c2Z;?OZDVxVz>tDoO
zZ#gO}810Km>)-H~B^sGh1#hu|(9`r0w+MxmJTN0`X;OcH09NC@BNr!A)n^<vsEZP)
zv>!1>8yx*>rFoKf?EcBex=SpGlBFp0-$>$`n*%H&OL@4qFe}&S5lT^L4Rt4kcpX*!
zoQr(b<}jgCyX*E(^Pj`teI$?Q$)VF?<VU%LfN<XC@}1H8qE4QqW3+EtZ9@HhICwah
z?TX1^pIK+?uCjA|%y_NN3_86c9Tm^@X;`c{ZjL@lBnFow&G&p#@pXVK)mDSw603+D
z|7cyO=aYG8-<$3q)P)a_%qNL)=yz36=x<#^iauQ+-Z5En=p}>@(d#u;THd$HnLU7s
z%}^MZAsF!)hnNI+nw<af=Hp3#%C45J(AhFyZgMCXT-@#!U~$(-8*B(pdplJmC)J(P
zF5M$tTGO_MIsMVgn4#hATa3TqQF&amK^iKZ{yxuX&aub!_$zW`+fevF;tO>sy&uA1
zaK?gmh&iU-ei`ak4`ybs<YYN#r8nPKdq7zns>gpqCl44*c{jqsz)!|?z?Rf0j6|L6
z36`DiXapiAd+3~!1PkLod@i|vnSACYT`Bu|E`Y?(WT^!E_QCCqJ9R-=ghE`FGR;s}
zOONHR58KVG@9FT9;nec>l@HLP?d!B(<qzPdEvdS@^LuX&ulSRz`z{DxMJe6tkLj2o
zs%pw+CtpAim}Q#wZ<o-j_H9|)!B3{ru2H^|%A4I6prMt4rzYFXJGiA0gr7v=4Ob~%
z<7j#~MxsMTE*(%Ul2xgN$71A0w6#s0>+XmbdW)lHiXSj{n-Pnv`6K*Dqe9aLVz38>
zBPgj)LzQn?3z0kYdAT|n(mdn_#yW`>TLJN=Sb;$#AmB5JaiiwFh)bO>G<9ulKwci0
zq9MrrV7BAdn^rN3_S&MtRGv=D*v2Cedhq+%17EL+%xopn<a23R;ckzv)nYwKYKFDZ
zDVI#m68PeO>}J&Ff_R0$xTF~KvY-3O)Q&-(0o@qvc5fm#-wfWC=QL<HJ7xubzX)8{
z5s8ssXQ-9vs36>1Ct^um`TR_saJ7iaYi0b)NWAd)@Hjc<;bZHhD)V&n`IApg-D1_+
z4xB!?jp-`f^6f<!w9`+l7}jqLZ~{{`J0N#*qGlh>Uw&x!%%DxoM?iiB*XmLX1qC8i
z?r9iwBnt0jVNU-X>Niiwb&}6SGOFC(U#Dkec&ZE_*{K3vfmy*QW~Rn^qyMNQ%#=@@
zMd$s%Je$5>!HM0|BrNpv9Yyf^f#DB^I!4?@&NEA-61u~{;X>%H0WSM0S;z5@?1390
zF?H?Y+^HX6rfW@&(~+UvmfmV}JkG00>vkX7d32yzTsGzgUX|?d&BH*HXQBPPH+t>&
z86;x|!><Mgk;+fB<P7oA%+5Ory-nmoF``qQhUC973Ht=?guQ$MucQJgV9MFbkolgE
z9yeZ5X4+vC?+Bo8^Tm@W<RmB7a$IbBZ1y10Q6KqY*VRxuKbYPdA)%w{Sw1Mi!mSIf
zEB^Pi_(}NP%l`^4hWy_eR&Pdqq@n@VToSP`_7@sI5fobWQe+a*QXyNi^{H1!7Z(>;
zJkHAYc0a%@sW$3zd?4!wgY(`%OezUgu&f1RPHY-g^6RhFHTtctAlb3zoK8as9}GKl
zEx>O2b*UFjc{w&8-})qjR{+D*uDY|We)z#a?|)P6JEX0VQ}VnRI86FqSAk&o8G-_T
zZuId!v^4ScHGE`TcBWLN-u(A>FazDr!9ed6n<|tMyRrrkT>jC&k-Q%_nv85V|9zES
z^OX?vu;{nn?_F|VI{-{Y73^!{o{RasPC!}ut{<6FKJCATj%v@pw?HbQ+YT6KrdKFy
z;k!ivF-DQx*Q*Kmo^mj%2JnsSWu+X!s+V0OkbA6FEMHbp2fj8evt>dS!h#{rrh~Cn
zFUa)G)~Q`+>R^Bj#-$ZOB&Xh2ARdN?Q8~B!{_^kax{0MxbljhU7i%{F`vByVo`QSn
z`$g7zhj+`owy8#HV0%x09sy`AAZ0ntv{Z=YI2Rk854_sU@cjHO*y5TOy^!mG7%W&>
zn^Yrzs;oK9K$Xwpiu?WCAD>zt>W|gGl~f2F+@EcVU4MD+upF{G1m@s%q!0bPS7aSH
zAl3QZyG-Rim_<bn%^nc#zV>uj(**{=C=9yn+hAjR`tjkatnT~y_Mp;NMuHRyE?k|I
zcr|gyv2Q%vxk_~(GPGX#FksOrqtU3wz%aA)V?43QjM1Qc20KmToZsh9@eWD}JQl`A
z+RyuHjU@vH2dAgy?(`zBcJJA-FbPRSL%{fW`e=x}ltv)dW$NGJuSDvqYpWU$b+QaR
zDJHP`yZiexD%b0A#Uj+%=eJQ+whA%}`8$}S7g|%_Ek`3^Q6dV5?O%szl=`G+`r&4)
zuF(5)U96p>r)OtV%8!?ul{8}7Yaz1bplGmHOQP4cQFYTak{<N9v~jhjWXlh4j~2z6
z*oVOY&H9N-DchJte0#1+uf%hC7W=PR0;$Bz`j;u4PXAU*t6vNCZa~j-3SniqA}OHV
zVHJ#JnXl2w9SWt-tcV{Nb2?xq=y!u)(EsiylzhdVDTfFv(Kcy1Qp+89o?BEbnMN<5
zFJUxU<a~U5SY(jPMA>X|)`F&Tq8<nSmT!aSk6GhrsS$oPp4Y<`gT!o2^o>e%T;m7S
zkTPk4B&7OqUditpTPaq5ML;B_Bt8fP?H?S3?sD2WKb}>oA3;mbp#sv2m>>*B{WP<|
zeq-Gt0hM%UBtmmaOHcLv282swwPabX(R`gX&wLgy?OgAMPnIeMVD@ctl7}@@aNG#X
zD!Mw{H<0}M^YMDmE~9Q(dZN@|3?5d$aU~>2kwO}c4>E%=qC4_)(RT@STspb)JwCz2
z(k1-5VT+OHkroi9=Q2^k54o%y$cvI@M8xl%tNWfk%HA~5Qn#pteK<#|@t6iKPNgh+
z%M5H3X3&182IUQ>r%m?FNDIKI72e9MG}xeBB=G+P5#o+L%xRM-q`#nI>u~7AdVkRH
z9LqFGvqb9~2%j2bYl;nM+bw-|Js_fa)8;>0u3?RGB$6JFQZ3$@s}()_hgAdN+DiuI
zE7-+o9oJOn+5d7u_*A~y8IW0G?5#;b0=->#05h96^R=^}Y|;u)n|2t(sA9y9XRc?k
zR>f9PhTK`QLebSU^A?F%Z;tc<G{uj&8{n`G4>pwOH{o>5(Wtt=Y%xagmKwh$B+41)
zAI(osAGouEX^oDG2xsm=mY$#wBy<AnCvZwoUi9Hd|I|P$7jWLXv$lk?)V%t@Rqp@v
zmMxO-?KHjH2q*wxV9u2_H%GE6)1GytE=*8GlaY0WYnYi>#q1EHMiE94K6i?UyOOC;
z8?>pAmj@08Wt4M7g&DsOFc(>;HTBGEphnvD2q+nEP-u}@9q!Gd;}LcR1AARJERF4I
zumHi<GlY_(ek1TpN&~fgq|Zi!9Evo|Kbqzs4~AY|x+a+hJrhTZgWjR{^Q@hid?{_b
z<SGgyd#8rBTzyDFT0m<;XReQpId2qQ#QVwq2H00p+*<iRxt6dBW$}0n5ge$J`BLhd
z$q+j(!;o3Ai}4XJ#PUHU1#f27eg8!4VS7Xx5?h*`)~MuTgJE3pmIfRv$(BTgE7oz@
zaxjXoLWEW>Hh)xY(u4GU#4<^+wXk?Z-Qym-ZglxMQzJ|~X<nYSt;N|M-j-5w4C;Yy
zJgYGSK5_ECY30|n`0sF|FY%K{3$5U?xfTA@yd2LYZ!oam12c_u86(KV%ChmIees=r
zu!!{$m8chEYw%hxZS(3rI6b<bar%7{<2;%)F>(;SabtPY`x&w{^%)i(I+vdimt1)4
zv{@9aG`@er%5)XhS}ZFdlX$Fjh}4)<dd05qCF{i<e<=jEZS&@rMh8;O+7f<ec<;r6
zbzoF(>bVIipe)rw8t`zXKLT+XX=uERm5q!qpPoE)_e}5Skl%EPFPxO$=1t8Z!Cp!r
z1|>pyAnmPm2`z3h@pZ2XY+w%71I4348if@SWN9ZGlp2*(gDuTvi?JU%snCQdNCMSk
zW%ICFKJiY$`$DKI<zdW7WtTQ&Wkg(OlM+h>U+Rm$Y2@s*Q{s)&98BwY;Y#$u^eX$H
zBS>1vtZv@XsUbeAZX7|F2Y1j~oJ;r%QvpoB&>yfMKKsUkc=#SX3f4;F9bs*`2tQ0h
zc66)?wZaKjb`+%&B8^Iwn%HyguP!elU0OK&9wo7*r0?lFKBY{3Dz%;VBS63zjm-l4
za(^W5OGQ++kPfJvrFv$@44yeJ`I$df81~F#i~1u!#>8W_7&I%f>!Fh31=;rJ50i>I
zZHh#1+r*8lP3Khf_%kf#>TapNo{w?+R!GHnWn<VmR%nL@^STz)dE(=7eX@`0G0;p5
zjq`OYD<%#N1kw#{k!)OzD98_kh1#GIfa@+S4HAo8?t|EqC}yW*b`|@GV^>INJY+nR
zP<%%09`~{p%aV04VagAAESJE}7Xat}0nen*DQzsqg#2Bk@AI!A@2g@p>J)oAxY>?k
z0SgM!m{k)DIM(cZJswK;l0&W8CG<=RhynZ4nz9O^=1$LJU4zK|^h@p{%~>QF?N#X)
zYSccQI?|b0a6tpvn>VS_nCW|JylrK0$!dRmHMTvQNmx3E8HqFVD;TNMV{ZKKi$xrD
z^8x6EzEk8WvC-3|>*&a^$!v7$kd-_1y{Z47S-@|lEL9P2eG{+~U34eg6$v*qa>q5Q
z+R)xdxEPH2&#d84k1)eRbZQ-EaJ*cLbmj$x4^opYJ>y>6ldkF$oz+)yq2Zwv8R-t;
zDzP5$7>6(*9!PKU%$2xRvxGr_kJrB&U7AEgj@5$H<w_<9J2NsFS&JGJd=jRlo4Cs~
zN$&2bDs)Y$E!YIxxeEAV;vx8{^g8*Gk>)Bjx^&^;$UMKkG7<HV4=$n-ix{I+)%g~M
z4X8L}lz@E#h(s&@pzx?(uZ_zf<~FI|J0abOw}nBM-*6y7F**fLYei5ltTZ`HYx)@q
zbx^b>UYbhxn%J+B)@tgSklf%@1PNZ2Apb1dHYE*?V>F3syv^hAYK;UfKhd4h>R93w
z)C95{Lz*rx4xfX;x|R*oejP8E&1wvtT3HxYXFHn)E@G8e11ckY`C3iWY}D3a13N<{
z5bm~of%ZDz(^`Z)Lt`7yh1r~)&+}g*kv}x|<<?CE8r7NUL5vwCVKIB``To%SHXZnp
zBU`G+<}8297+@Pv=p^`w5fidt0<b>m<T%HIHGiv1hb!3R?vk)>dOAKGWx}=i6~l>Q
zRocxCm%qyw)I#baT@2%;4jf9RS)|HukRR75S2qc3YMV49NDz@%IWRPROMiZy-fdWy
zZcW3`Urd0UFhcrZnG^-38-`$`=UGV|=dv`niQANuCYxS<?c~ifPkFE}uf?D7cK~o7
zY3~}mP7Q5Kx|-~fmN5G*GplKfdZl0P&n0n@6(kMpnRd}-quz^zI}4XZJKaz(ROgpW
zsIsG24zQ?Dk6whu9EhAqROCU;p5O_{Ax&*x(L};ARNNBh$LoHn?S^>oL_Y=U*97>!
zjw`Kj<>f1^^yNn=%0Fa~$#^jl?wa6Eo`qLU3kkk`op~X9mNSUnzambQkZAI5J4c@t
z;dF@%L~$MnYW43u(EjoUL!l}I#cj&W%si1+gErfGC9$c0Eq>De2!B234N!B`{Kz2(
z{H0j71oGl^hvlZtETH14Rz3SfZ#c`+^PYof`#Nn5c&Q_|Oi)d6mq8i9CV+)@*{xFU
z<h5<ClUpE>7LukllaKRd_@E0E{rcmm>uZjoh+of%8*ud$?~JZft8aMJ-*nR^uqx}a
zLl=n(q0~)$?cy!=n4xDHAOy}`oaFr&9CV&N@7>&m26IsT(r^-`b4K?ont!&7hbd&s
zL)9|&>(^vtevU8wc)bC?972<7ss^R|>42CudJ}r|JDWuMzAvRQv``8#Mmhf8sTHO)
zcSJy3d>aGyq_}ETGHSV6k?1s{OcUauY-xVJ;a=^D)@!g<sTNUHcEu>lt+G~{O0S>o
zuq}yRqgp8ILv}?&n_chE3$059;*N>5cS18?o1%$Z_H$QS-KLM&1wH=wUZuXMCS&Lq
zbXr==7e3z}FH40)u$~bwt@qUEmv?Z|;T2=M^NK}7x<NGM<)|7FQ*23ysVJ=0Ca7`P
z&P*^($Hm}{BD{mtLV(L~0nP&7zorep)UK!UEQ$QYB<t(kM)T2axDHM>;7LKVxBkZJ
zqrB=Djg|+=HV5x-MI=_U<*N`O$t}?v?_Rek6u5>VuiOGxdJBXe^<O`g48-x>MbRN1
z{OZHc&GD-Xu=%-W0kOoV#yv@?ALn~V_^~c*FSMkDYB}%*t{@2cW-ZLcKL%{Jfwo{m
zZXg;52r*)bbFrQl)B3ux30@|Hn*8UU1pV62;R}_&o6Bsq(5pb&e$zK<b=?7NTRxe?
zX%WXz3f&-blY!I1mQr(Wb+VA>zsG6}>-m`TPgKV|uCp^lMv6j8JX%*6ez;JsJ;&g}
zR&Fdr3f4=qpdvN-Xc=do?Rv1N={TdyR-Zi;4|ViIThX@vk-_$cq2K-~gLO{unO<)Q
z>|)4NAOc%1ct77dpXGe#4%UEZ2j#mc|G%6%2p9PLc+k@l!q_&ZU&NSnnv^*_B+UgO
zb2;i?(~T^3eQ@J!*D78g;GzKZ%p-XMe(#AZsqR+{Y&($X>#pcmW+YRq@db<&&DLY8
z*#G`%2c?hK7?#8TP>CwJFaO6xl|%UdnUebdyYlOwdQRkj8w3071&hnR2Ov>uMT(>6
zP9A}FbNQ{5Ful#aWFb<s2O8UbF^`LM+x>BaDS&gcG~YKm8dCxg1IlRcHqijNhves%
z6TTLqfUqmg{hv}X!~z!O$r)#48;6JOUgK+q0e&7QORb_sk?o!*Gw(L}EGH&<ys?*G
zUH|^Bdj1rGh|y+qX$jP4bpoKxY5|ad{%9Pv0QppU9IY@I6w${F;$ClA0Fz)BK^8=j
zhvx>~yT9uopdDYpRb43>Q$QEcbJ#b(m;xo_@K?qtfTK9e`)SnS`w#y!3b<pu9(#p>
z(Eu-$^AgaQ6ASwOX8Y9xpn(Rb+Z1?cZk<22GX(ZP0*30OP%5p#l6Pv=H{Y)Le+ikz
zRha|PM0g-4IpsyFKnMV4s$+*WsJXm0e}D$mF7=liNKyspo;K6bp|RDrQVuluzEC;L
zFhn$6gY|q5Il;EJ)^dODu}r3#7jegQ0jIG)Hc33y>$!q>G9p3#l?K4+1VpO8w&X1q
z03Xau#pOHsKs3g5Q|zp*dJd=EL)fSxnPd#JWPgQ54X49y1MtZ_BJO>qb|DoIkQ&1$
z8;sWNvUw|KxE)manhU`%`dS0L1R4*ebp?kr6$P=|eGzQ`yf~}A{r_4(MU9t6xc&*Z
z?Tr0;%SzqmHef;8?ENxbpWkym@b|{FUx1)FZ)e{Fe8jKwzq?2!BE`|lN*=#}DEZry
z`4aPe)&In?(ki}l+5M)2*KAKJ095S<-$4}U6pfyzeHO1-#?%DpMDrO(^**jFiP^eA
zDE)0w-V_C(pP$B*^4S3UX6f-cDhfW7{4WPcmpoVo!nOt4EWskuBMhJe#>l*Xj(eXc
z`o%Mz@d^LO^-ZVydE(1DxUgcZwg;l3?yIhK2hVB@N}6Q9wHsHvT<r%7NL7C$lZ?As
z`tAZ!wShiZ4GZs!;RQMkb|Qsr>I6Na)vsET16(bwc>tt+H2TKVB;$pI^qy7m?e;6h
zAX7$v3<5rHcyJTJQcMnek9K>68l{TyO4JZUiO3lG$Ey|=1cBpe?{v1nlgL@RC9i{A
z=p0gs*pT{Oiz@y0$X|7WqBfDh1y#MicY6iwWgy`135`l(3RsG?w@Pgmm_T%xY$|Q5
z^9$s25Uoa_1YD&-hv!x4Bv4G^u~-($#$mIVMq{&Z|4QaTLpx5CkOSX>?&FTf8yfAF
z4S?bVu!W$KJ+54$`49vgR2x))vxx<+JiS&~3&Hm;u=y98ck{NdIWti{m|``3kvm)w
z+1xIyHs1?@wN0}G4wLro>AoI}VM-C`)XTfos}%o(aO;62Z)<JSnXQwo!i~w~6m&Vd
z>pMsL8Hyxib3mT_%~C}%CX<8b<g4IkZ|;mZ3!?qfke9d6{JvM#eG{84lO#XGBx5iY
zEK-26Z}@A?NEX}IS3n9z78LbPAtbYmK0_fb-3CP1fAj(WyR+9C?}^+4^be&`Z*lWn
zrYQj)Bb(hs^<bvV+qBlWM_m&|&?2<pk0*r*K||g;1Ip{GyS_6Rdvd&@@W}oFY{fq#
z>1K1$IyFXJCzBP>gg(a^9Cn&Dd5ypeNH=djnu_5Cf`t<RE~v}*+7&3!!}Guw-d?-8
zQ#EA>SPey*IIXV+#|Zcc`MtaQCJMZibe;Z$tC(~9&p2N@ii2oq;6rN<T<<JPDw*nP
zXe!709v4a6#Odopz<*{{wQlQ!$+SysaJO&L(;X{xSO<VN01Gh=Qr)$N!+hL!N3%Kp
z0);4HWr5}BW><+)4h!Z3(%$LzHk)r>DKM%KSFu{1PwzZT{L}<;^>8oUcFQVD7w$>3
z0cE6e-45LcgngjIJQ)uH52vO(!X}Pd$#ycbA@^tC;MwBgX$&~Lv5-qW(BgDjGzI*k
zOfJVU0E|nm(v9!6{qk+O!O8D&?ijFt<9m%s0&70t6)R-{0VC%ehWFd4N2H_iGaN3@
z6<}O~$Dmm$)Il4)Kt(-l2B=j=0A&JJnD(2!V%VTFrEiOl!NA*Gqgz)lzsM?!&GK_o
zpVQZYd^eAAp*3Kznt%`d0>;jVv6yh4=ye=dpRjpv^g0ptnw?)nZ+!34h)p27c)r_t
z0qmmx5ARJ<61XC1^t(z=f@Qsw&EMNpd#I9v^MF@V1c!7Yq#U_9kprC|4*W#oL$#Je
z$rP7&EZbLjG;vn2;}Y<gF8bA`J}0K>7J7pqbGg#6)wiz}1^;xlzFDFI^KKp3xyZ7m
ziFj6&ZjKi_toDa202~+uqT|i`0I&mK41EMHYojLD(Q;A=_yQ94sIP_64cPziYfg{!
zA-EaAc#Y#K?I%uvnFx$>kwtlo$f~lb{5W~J<7?JSVJ|+sNj+J7Uh+yFCkyvL`V1Ig
z67BT(oT3U;<`N0qfKv#5G)I~x2q}ADPbdcvNr&|&0*jHQHsB%z$Y7tVvrU93x036z
zZ-UcRZd#FbF2PzLDm|THL9a}=Y6)<22I2_DIRXi}YrPjy=SJzYD%GK|*=*SjMnr&(
z#%*V;=wU{r?F>z=RynU!r683FumZE%GjbqdVpS9}SryVPfD4wNU$j!EQP&{4#58@r
z&Hx(0dv(bpnv78pP+&dg7+UmlJ_h_Q0a4nT+d-Sc>aZRby6@qHtu;I1jY9=8`MqxN
ztK))!N*Yy`>W<g)4;a|OA(aifs*jrh^WK5k5qI5mp+ZH;wzhUH;41)Ty8`1+0^qqk
zUKWos8;o$<ez*qMAE5HZ%8~KiB9EB1`qeGccC`=lr`c{*(_&aRG_(RZy&<S1P{Fyk
zdn@$ON@U;{lR?u+aZF}3QzKBJ2crP)pP(orZ88C=xU>hYX<<0H^Z4Bkt`;WE)MXP3
zW$teQ+x=i0m~`*P?<zrw&~fQA$nCUx^J;bnUK*rqGaA+P0yG}0<<Kuxr|Th&e!08;
z0RSLsc38|H(~5O58$kU|T3v53jQKp!AB71R>>q&v5tK6kF3(o1lxP6g`9HG&r-haT
zjpKZYILW@PiJmw`G=fh;JD)a?^X`C-y25>BsIfvz<Ngxs*LW8JpO<=x_B>@{p%~b|
z==`$vBqm?`p#gv4G`~qi8nzJK+{^_Hix%+I3Coza2k)W23?V|FN12^3u9{k@ql5fd
zq&F9<nbwr&>kE9!e2u5Sd}nT|zwZpIR5w*EA-8|$_1J#+K#7eA08v9-pkC432R<-F
z!j-JImQfQXz07zhe9;(usq6Kk4~uWqq+bP}OUAPkI1Sn)Kj7YbKaO(AB$698xwmG-
zmo{c_o^4d70KWOcQutBV=_;9I>DNv06dwFTRfX4&7sCs&V83sZq9Nz@-$Uk%%WeT|
z)ct;GQj2cvKfucsUbANfJMrDQ{M^pN;+v#yqeILg@jE*_8PU0MvsrGZo>CMthaBs1
zN~ELZ8bm@NU;oXgQ1P2C{hL?(v2Orv)0+M9q7T*sSxCe`NbC+8!&~zwgUu8<J!iNg
zN?`t+$<I)-xe9T@*ie)bxu4H|w;)yc3GMH?4DbtWW*f98NR6x@2zd@gTj6m!a@&sV
zvD>Huj<~Lbue-Ahpdv+JP<j4RCbCG%tXQXG9Wq($wbWdFxPFg>fA!K)Gh0Rx^%W3$
zLzp>KZLZ5_&4Hq)p)Mti?2$q$7Hu#Njd4n;&N&*L$8|tHonH>U%lEk423zvDa}iVK
zc;`{OA*y$IS!#V_o_<KUM^;5fpbzsgLcEEc4_Pli0;W#82;_;s>-rt&+p!|>)CbM>
z+4tR4Oo@JnuSQnD<4sIkc3|aq*NL!?N?qOw6JKo>K?=3k)vw9J`Re8DDXj%Y%M1j7
zOJ)V=Mt+~myC0Wz8Kn!F1*(6}9vX9MivxhkvD42=fCS3x)=t|=%&zPDhO_C0Z#|CS
zYVDTD&dYDVR|z5PeEjo%RRC`7OUnYZPhOyT2NtLN0(Q>Lyu0h}Py{akIpy1A14gKL
zdYN+q!;SsLvC#0*!EW)Qh?kUR!NRTD#?b2OxDap=sNF-)IROt8IfDEwrDA#?EwyQ(
zG{CWMWpDxdA6yUTkGkxt=B%?c;-{}Jf{E{7$eJ3A_yb*lZHcW!sXktHe<Y(cwMZ_t
zRG`c>yB|>N%Gdkx*NQbV)7>m@4yM~ZqBNtY+)^=AL1mv@PMl-p`UEK4tRBx32|s~t
zJ~~;(^wL0Q_mr>Mss3%~Ww~k|Yo_%BjXp*%HK_M^Twhr2cImebY79Gdn=Ksx*ydlU
z>o;dVUA}1@?}aW?2Hnd5?20CCF=w#*0I;gH?@b}w9++cPcYC_5WI(C(t<rTP6)7Vp
z+L$dN5L{~}55zY(D(NXhS`7jmCM)myLM(l3)EPcJXTLmfxY~kr_yb(@g+s2IYg!~c
z*5tQ0_`pMHJThd6w+mVd*%|6$C9Q7&Z(Z>I14jw9Rwq8eOhdx@GSX3GIaUff{h-cL
zemt-Hfp#<CEyPs)M5hsY@qTynvjZE0&Qfu5i8igT+5#*+0q;B?Ht55V-p**|*ML{h
zkzXVT7;RAiyK|ja-4eQ{vpl-g>q5OAQqXtq<|Pi>%^G#nkTaBr4@c`IS~;NVN!z^#
z9PQ$m3|k0tj|26PZjNC*(GW#0r=`Li*Tzc1XCym@fnfksRS%0UP|g#}`vSAbdWQG%
zGFVqI$lmov6%ykKRNbU}?hhXWXz#BvMQXvOTK=N@<t;G!N;*{P-^4MaqCi4Y*)ZU(
z*@rye?8EExh6uNL?Msfdehgmc7;fj7XmiM{T&%Yk`qrw{)d{elvp=bhGyoi6&JYKa
zNmmt+GKFr5jNh)M#nvx;_hHkMODGVp`;dejG?Ycf#b*jC9M;j)<$2(SY?V#fqKG6*
z0g%Nfse-U0x`a-X=LcGi3UA%1_UohAuPXOwxup4;0QU&WZ`5_r5Qza8CCt+NOBH8k
z97^vOCC46)G`kQOlnJW?k-oNK#q9E~svYd?lg5ufLAz@Pom7Hcy-jnz)&F`FbF&n0
z&<}vm_m}$+p~Bi=^Z+ivU@XVQwv_DH{GzA5)=jZ6D#gSW(;ZpzYJ+-4y&HRvgV~-;
zF54;T<7bn%dd>Dlod6;#ox+Pzj{CXY@2{f*vOTDuzBI>yeprA7<7UhjP+xny*M`Nw
z_g^lBm*es1NEpR@^cw}+ww92bbCKJiBEl?aD)!fNx(&W@e>5%F>G&;NXq+cHOYanP
zySK_Fzrc+B!&0XZAn51nTdY2PYz#jSVzON*C5aMy606{>n)9iOL#2QtOQ`p`{A*UF
zQ7zhf)b*5KE#wGW=XJ1@eu!h*0#cnr0xu*I$ajxsE9L+>a&>sX1%Z&eMQWU|es`2|
zp&b-)%SLXJ#tK>dp&i*^K)bQJ)L^|@uQU!ifQ`h3`cnXb|F{FLXM!ISV9j(gk}fcR
zgU;ue5?CdQENTRQQ2SVKKDh;~b$HFLmDqyrX#mME%vq(KiQ4YCUYzB7oN$3$;RImk
z%l;u^ZSDuI`&$%UgFX&@M4(w^&7L1zwmQ%6m&0P}f3<A%zh1o~co7YS5B-4G<dbBH
zzy8C;?WR&EqwCzS?cXPDK#g&Iuv#!5dinR+?W+ym1qiUPvNeJxHF^65fpqNkY4H-E
z(ye~&-BwdWaK1xUo7q<@xd+AE_xFM93!NUzkru;b5|P@~qCW0y^J>P82glR(Ud@C6
zY;xSINp`%_>A*+FK@S6$N=g7=;EQejg=I;wEhlS@pnLdu!zd{v5sTUieE2%Ez-VT?
zbqD*vw+c5SHa}({8AGrNYHth_DW^J<Dk#n*N<~`z24}!y0+d8<;L5z-c1sT2y}~IP
zPQ~H&R+bq@eHo8ApK6q9UJLN`3pu-cJnaIsj{J`{He;2G^!Kz{Wj{b+=Wj_ltaXoV
zoyF^ZG|@^H`?Um|PnD<RcLi!eXA~{uvdPkqwjuCXv3pU0oef3Cx3tnATI9MSjDBoD
z0e`*2?v_dCNrkYf!G4{Zlpw*poS#%O`qy=5=f~3z%sYSS;%jV+jAF2mzeb{Rl%vWh
zex(Hso&CUlm%}SVd@#Uea6Na%(NxZ-U~>ey-@u>*9U~|p3qmh{XEOS6Rq}hY0RIQm
z-Dvl3W_kNBY^gQ;GM_dWgH$!6#5hm2jnWZGb&vWlvDUlTP(qx>u_O`&<%B!p&PNZK
z3O(96!5-NHYkVy%L#SsqV=l<u@0?-I{Gl!`?lyD2ri#(~@c22DV`qP$#DBc>wDX=w
zFSJmnvzi)C=8Wo{^i$yZZEk#bHk*qmNm;x7&%c70@-;}xQLw#%ku`WS4_G#<O&ojy
zbYE-Kom~Da6X{)ej^=+0di-IHuKw4|FNMjM>i6g<gZ(dMLJ+pl(|OXa0IHLgyB~hH
z52KkSOh(*ytTvyJ$H`!Ntzgl|w|_)MV1qt>!X&%P-)HCH`mg6l1CR_u;tp(bVqwt)
z97{=m#|b~4M@?<{yc0P?`n=`y&7X?KwosaAEwIJyG@F}71o=rOx>QB%3u3_O=G#%7
zzDp3dq1@Sb`EL_Q*ZOxnJEzNC<|&!@sRTHmV{V{UI=z7R7>OHslm`6S-oT{5$;)@z
z<gKl(D2KZVz$GmDh6E<$txNr@mHshFwiNQa5|^cae<Jh)&Oz)Qc)@Q$#1ofanOw+p
z-=KhhO3*a-u@5ADBLB*2&hR)JT+jx+HNgr9`1$u%&M3J5`anJ%bIu$0{0V&n{_=b1
ztv;>W{{Q)Ze+J3_%eyO&3~aZe#;nF0pKNE#ZT^k5<7@u-{L@GwTW^#oW^<Pzg5h3>
zQ}6sG|G%sT82sd%47<;7CuP90=xt~DUzC48fH?P&=32!)5&ZQ}HOD@G#>L=*kYT9T
z%~KK|%x%GkyIFDGC=eG;4m_?9bV57CD&X_3y<5uuyT0Ohd3F|#%Tc~x2ArY5V>-i`
z)yEA4$Lw7HCZ)(BpDr*YR1et8#`XFA4xVhDyFfNWxtgP+<J&KYOW)lN^LL{DG8x7*
ztB^idulTsuT<da~jg0{7I;Y*@N}5T>`|IZ8B|(QdcL0rvLTAV?;rj)S)>r!L*E<3%
zcH1Ls@b-FWI=4La`lL}noPqZCJZ@7-+w~D4gKh(;!8-yjG56UVr&{1FXaN`&A%M+(
z=1g-`51cn-Ksh9*N&l~%{HEj9QUqX=;JTqPYFhymBUZ~XcAup`V7pNfpV6@bKE;=c
zLWQqQx<J94S_Ol{S_pct4Rj-xM06U}KV7HK4w;1X+O@1ZLkKwBccX_~;OI%?^eG28
z<vDvDo*kVZ3!A}TlmW;Y1l6phodX!Wx|c?!zR5u$4K;aetL1Pp1BKjI*KZ&p>s28L
z8cERmF8*@>^a^l!0&}r*Y7KQFsZ=a@uLWRc$YAt;759~4RjpmSh#=A+-6~xI(nv^1
zhjh1ecP>Cck?!tp>24&XTe^GE-EbcF`_=i*xvuXzzs{fSW-gd>t~sA)#69kDj~370
z$C*H1M0J<Nup0%S%$rj2Q)0Th%K+Et2__3)2Oe9e)l+?B6%41fTkmnQv%7JHjtj^Z
zY7%b%2--UuOy^y0b@F&<yZ{Th6Ym(jr!MhGF!+1-?(w0XWgYYov%1~JeCdmhBn8u|
zK>X9pb}x7YSXSL(B=bi~3o|Z93#>WIPFJ?!*xXToO$XG0>IYq+>x`EU0KgV_N%Y|4
zUB;PV<NbFD4O|BuQIPQ2e*vT2fWXhXYxHzpx&AMu#~R5IYd(OfY^|;eUI!F}Hv)x+
z2y`;um6h45?Ki>?Pw=o8?>o-6N0v31TQ%EHSO+x4(Cq(SK)ecf$c_ti4^M%W)*4cV
zFQL)oUaBA-)Z%fOE1u}<2V#J1Gw{?((t}9JZ$Tp}WB$+XADD{~r0Yj*Pby4AU=H;!
z=;TFs-OSM6RYkbp7GI|JxG-DwEf{yJ4T$K8gyPniR%GP~(7pw)I{~}|9_Pay^(-I&
z9O!V?g9@@SuY1q~PTXK$<ajw2MIi&c?58j$o%$Gdk6OJB{+>E8xYcR5^OKV&h=Pb4
z1eVs;)}qKw(42z(763+GhDjx@hO5-3Qao4bME^LD#ApE^iljR8RVegt_dHw#xTf`T
z>qL=EF&rY6ZOR+N?{rgMi<NH0JnR4h140A#bYOro36IP5S$jH2*xx{aO3nQMEw2X1
zgw-&^NN-L!WqZO2z`zEVC0_9Y@ZQBj@a+y$+`|68rnVj+@Dz+gSM*e8+tJAf<`Nul
z4H5mds6L+EE>T;9NhF*)Dav~)0RKZWVzpcFce40XqzGmwN+-Wt9LMpB+5sgzAf=$P
z%T)=m|BIc)vpRRD=4E#|{11;ik=f8mpac|vLcHMJ+JZIm?^wX+Ck)azkF8HGKt||X
zSEw@nU&?U46ZI5GD@TgdAtc+!fmn}iON+nw0FDh{pFg@Ke-J_IGmt%#_Wn%)I!^0s
zmc6bHQ<dFEGXxF0!<-JF?DPMuZlR0_Dyt-{-sjBs2azl?Nm87!muq?-`NChn6hM8-
z+P;B$HywaI3Ph30mBl~$_od}Ecs(?h3XL-e_<bpgAl?Q$WSYt;Y4TAT8(2+-*4phG
z&ZqX$zkff)z$J?b4r+me|1zJWnGggOn?{>8pKuCuV1#u;ffa3C3!Vp#EWe!v6`w03
zX=}Sw<PAUqt*(pG#NGn)3rE<`7bx@!ZdLR2f;U{`uW^>%8cr=9`e!jy>h_(%aYb#M
z9cu4<&IHy6F2DWjbppg?isi3cyMC2&#`_Fc0%-mRlCl^5V~T+H^CUT5Zo~cSD&tpD
zw!vT__uEr=xhTri*Dr^^{^<xceI~*So`J5fLmGAaTOj^@*LP-8nS%w_foLES8ua`>
zenWP>dK>XLol;&T6npokYP;@eaRThI`)7i$DZ+w-2U-Hq*-ZXAG9jO9p%JXV5{w${
zZZ}ZngwaeeiDSJJ0S}LQG7*?EOk0H$gI;6GtJ{O*yKpivX33TGum8<(C8Z{pKmyJ1
z<!^-D>YJKgM5n(3rkpq(5CPiU&dxW3+sE1d`K}DWg|~|TI~%y<H<R_hWG?<c4><xa
z`u|x?@C}BDLS)vbqUn-M5G#cMO^52E8GhM?`Z<?yFgCbos<<et-v_5P1z6o0v*kZS
zLo#6cDWQpo!WxAHopRv@Fbe#}LvifhUp?pA1QYFzCUWKSA6{<!j;;C}*_m|gXSm->
zBcHuNA0eP~?>fiXYmVX-2kJ&Zpo{?^LUZw`Gd}#P*JdyA-Vtk)u^LNXu$YbKz$0P5
zmcQHj!GzOF3CfNr1mmEPC#frZ4jn6&E#(1MTBiy<-5AP#co{>dT<IPP{nwR(@!sJw
zs(snMB>Cq`FMco)l<S^qtp-rpZ~S(I`1&JG_Quky;L>ZI1AF_Ym3vL<n~lWiOU$=$
zJKt|np{j+q#Q^~b7CWY6Sx;^&AAvm&+_9Xk<_4QPI#0II<w^(W_-WKxr81~j0<eeO
z>Q9MDdRjLCkpOB8ILdt;-QBseEsdq~wT0?U#tYXcVE{>4U(e33Go7kjI=TSDL&GTN
z`?IVdq1}l)h~M{cK2U*A;4)GG(AQ7hCVq$E!5@)t0kOJGr0^B^(CuXHTSdw@B)m0D
zM$MYvk*wQ51`gQYgB8rux#~*>`Gv*BmLs3mT*-Jx#5H@6RE!7X(o6QwvTg&QKsVoO
z5xms24=zjd^O{wbHMXkrXjXhuuHVr}wt#37v_b#Z_uRvjqI-+Y8M`%N9@pQ~(=OKq
zm;~>QL8Zz-ek3cLjIY)HCWz|ZN9|&Lp3^2@I$g+SsR1IE_!&gFKo#%v%`_dS%|e&Z
zcNC(z0=sOAzNo{+76jJO{bU({=*~2oPSnb@-rw*F`Ey-N>(W7hP@qjq%Sif%UORA&
z$#uyX27UGyq2IcGvmD`;YCbMyJhS@~O)bmJ22OcnQKMUDwdf3d2&8?EKAiA3XzZ~1
zlcf&olZde__CVjp{KF;tYMWqK3U}iLl$6JD$B|%sdpOzzm|u8goPB|Ur@1MM<rWW4
zr=IH1nL@bl6zVlc4sVb*dUL_Ad5n$<f)ec2v8@1@5Y(UZu>;m>uEuJv#H?S57VzzF
zuTKp5NOTvQm4kuK5kH{(0$Lh{N`YFY@HW~&JfrF~o6XIbDaoC}cb#qP)F;zxF;J!k
zqvi+TlO6~H3<A(_ibVRNv^^a8oX>$;<pYr9bKW@CkDY4oc+P4(+||6U7sBg#Jo<j1
zI)%@omg+tS7}{#@<ws!zbo+AC$IitjXFCj9`yAlb9af-Qgw)mxK&|iLW;?xD<tOkM
z?dOTCZ$(0wz4l#)FAt~1KJD%SZK=IF4ILs5>2w}Ig12nBz3llRVKZ9(EdTOop3~`c
zQX~)ym57^okAlw}&}6bi#*i`SolAf|TC>-K`(+9DPAq@`Y%{9E(1aVsj?%(O`3SiU
zuvO8>*m(sz{n1GOty=dwuwZf`e`K!KrdNGjH~>*56hED)r5TO%I@-Vkmr3-mE5wu|
zU^PkMaD&FlXeLA#sjF}(*|x8Ioprdc1RfrY+XOxT^-^{3azHiev?r7ZTq~yl9Gmnf
z!z%Vd*@BuJ|9Ei_jR+*v{#FJPw8C}xKy|j<8Bm1dcHzEe&2kbk5G!{5?hPk$ftD#U
zYSifI3iGj8H`n)z)X1#|_s)h1lA{uF-j-UYLOd>IQ+X+kOA@fCWL6q_kk6l4OouR{
z3st0YLy~+1!C-3uIu|5{LRJMj!Cdh%VPebWM#yYbF0nt-!8TFsUJtcusZOX-dx#lp
z`AjBxz#CI8(Y#5UV-KKTR!`*+H&}lQ;yj>y=c{};x+?tZ+tqy0z@wD&IHok1YI+KJ
zB7F+<f6HfCZ_Duh0#+o5Se>Bsxo$tKUqzMuY!E0WgL0PsMuL3*>A?^ec9Z)MA<*+o
zWVN__xI+ihU;F9{ibgp6Lf2rTwc%4b0r|oF5(t~Y#!osvdnJwhnp!SJI`S>NW+xC`
z^u9UGJ%Fc=V@&5XAw?)LAb7FJaCy6Nvi|7zg4qk>k==YM<-OVIexlcSGRz3z5)h!&
z*(?_Qt7sLIWf0j23RWScWL6p>Ah^jAN~$vjJCPEtWca-SB7C8k&BDr5p@m7?)Nzdk
zSQ8-Oa4wyXDvh5O1yWZH_S=ouW^iEy>>8z{uP9}uZ?oWo6>?=`X&tuQ+op^p$x|_~
zt5$%%rFcH*8mOLYGGW>UZKLGg-wEhlvGHkZKjC=2F1a1Mj6DDa-Kugb)1V!7F3YYt
zcCRy}HCpx4FT^vf$!nCnK;v^PPuZg8_*2q!fjSmzl`0B?AqMMDg_<Di4KQZadbHqK
zvCc%Mc^NNszbKYIQHe{>q15uG^8RkNg6Y0wq0uSW%7~(~L*QwlW<rE4oeyICw*)B?
zgpIi=|I=<3w76I<R!&(Ah=x3Y;<<?3Bk%DxfJqy^6aTSPOXk$&r$WvyyPR8Lw^_ZH
zjHP#aDsF0t;yTW?M8ja~P6zSBcWS`)pcnt#M&q*^^2@Qk*JAo-jpb65m_xJM#8y<U
zR7Hxh?9FDp?x-hC=SWB-PBB$jdIq8ZJBX^%zqz*ZxZa-AN|_sZ!^z)p0xHG{R#)#l
zE|dIQ5RB&dza&sN^FUyhu;t{e2I6sx9zehl6n><V7z($r|E)6Q&Nh}us{Qa?YppAg
zgx7b>S7>de`)s?*!_d=R025Rx%Fu?va1sA)RlNaiqk(vO?L0OFFs|2NQxJ|zVmt>>
zMW)FroX&6`C;XpY0GY#&Z_IE9rti06=jl?F?T=RulOR<<H=i~bAva>>cjm8d-rx#!
zSsEqe*C$vMuT$KPSKeHl01_F1(^lH?gQqIM;I%)dm;Pm)Vn2MYC*V3l2GW6OWY@Z@
zyf`t|N-x>kCAX;gu}%KF)JdZP)C+dl5bw<(oPO0R<eo!YP)%UZ|LF0caWVaA0QYFF
z!UA+G!6~}&c);edhP{&TPUS5mMFoR>4N$gz-ypxG1;qq$p8g}(kk1-2*RzP8K$?2u
zE0UQ;$IObZ((i}6s|Wt&wvl0Ma=QAa<&O$wcQjzmRPmS*6TJsWy!;^%E=Qgv<0Jx|
zSE*%bk4slACp|8$M<wIRjOW~jppzJYV0z`5=hyL(g@{jljy4t}S_g@!qB{o<DsB6v
z-6E;1UJRelShrjr8)kIeCVRmoPq8i!U0oRrVgqKc=&I{4k48iHV+R(5)=!gtZQ>@Y
zgf!N=RWxbPHWhlEN>`9Q0YZ|??c^>f`OPKUO)|E=Pz_&RYIL#yu5WuJb;Q7RC*#fB
zcF&Kp`r9X%;b4mG))#}MxV80$cVWPknZ@a2&^Z=xmMxc4f8se&!1=D<`^I=M0U)lc
z*Fe(|v?;09Rb|!Oj+-$j8$^tBBjcTKz6=Kyjs?I01O<1CBg|);DMpchht_t=CmDtR
zBKPkFaEY3yVkCt`bioV*0s*Vhmt~QbYNA2*W6Hwg1G`4DgTx`wb0Zng_{&{&2p4p!
zc|YzqoUY@0r*KtF9gHy?eZj9F@iX_Nl#9HNpiJn}J7HLDuo~ddWz94!<1LA05BMzy
zb8lkz6Ob|5WFNmNB=Xu-N+J@xr{E~`Wan3Jd#_&k1@J4U?irpa%>!Q++`?*Cn~sGL
zB!vm~_gE7W4c%|6XSo9XW5qnlK&AJocG3e4ZtHoKoBdlr@wUYIaHbH_fsg4$m~w;Y
z6O8wu^QTauMzUn4q8g^tnkBg(m57}pjR1IE0Cbd|X^e=!P6Z_x=%We{Wvu-QB$ywd
zo5hPC9$LqoK^-)q!k{uY^{r9RKU@e3Al_5p1v$x7YckdbaRGF)*iYJQGDkl7(rPOE
zfbVTa3a^(h%S5S|%c*{Es?1>_YaYuz2sZ&l5*n8JAv3hnc;t`G$0uF;jn8LTpF;7N
zNW<gCE`-l0A52FqYb}>LeQN->>v#4mN-3oRCH=)lCn#=6`b%#R){mQrKY92qhjxz+
z_Po~Y*|^k9<pB}V1}z9iiWSR#&h1|UDWia?=@gQ?PIS~)2z#dthk;~&V25v=_K@&s
zwK5gD0d`jIv{_?hxa8@^F7QzC7*E_bd0WcS+9+|BXK7Qa+a!2a<tZR#u~2PSG+Agd
zS)}iI(Yb_gIor5-8@fk83&?hXM4V`IJJ8tTOJm{*AyNV7d%%bq(&SjKb18G*8xCZ7
zd;f)tJSvQoJ7|tZw?gP)dC%fmzTC)?SUBmyV*VAF*gdwd&EpJY+TtVy%5A*2e`-_7
zq!I%`wM(n{!lQ$cWY%~t^Ituo;%%;vzGLg)=WrHggY(~jOhHIiVK93N*gi4EpS=K=
zEq5S>fX8(QRKSRN-)5Az+DtW5R;(dT82<SWUI2(a)7gJ5^0@-44SsZ)Zj1F|^AxCS
zhyqt;*~JXo+|qcZR9B)~mxejhq8bk128&Mgf%x-mzN$Acv!zmXKqE{#nY~3lc#G&y
zDH*$GP9yw;QC%H~qaF}Y)!Lj>(_;NtX6jVQv^;@vqn1m4#i_Hv!Khg^gqd+VQ`Qk5
z23hTer%&RBh-Og)BA}7xz^4FK&`<(LwsYzna{N2<rK0Zh!U@ijD=c9^h5V&j#SAoW
z8PxQ^sN@f|Hq-Y@7(Dd`H$nIC$kJ&XiB`|n=hrTKR$?R+!P4S3zE{ImJBgwMb-cVK
zXcg!BOeg=`R%mkM=j3LNLTu`uAIH(FQ8e;zhiE4`fV5U;tx`g{{&~D|=q_kFY<7KI
zpi5n3IjUQNE}GN7{MuS|_DZxKRPK4b)<(p*o@GwIekW+zwkv!Kw3ab!Yr`*NIeEQ2
zTg!ndKoxyF?UtHn!2!*SfIKzFKh}Yt<G*jJ_P{3kalkN~i5RTJAv{8Xo<X7MKdzmC
z%Gi3M=g$aRw_?4|Z}Ir<dvP*-oDK9+#)R1W)hJjwY+OtLtN4rUdKtj3{`<&-d(R)@
zul_mwKapcs5vV{+4|Ney1nPemb%*e))Kr!;<<KJxkq~_O2j%yI*WnmIgAM4|*<k?L
z)#A4H6L#AzbcPs4%|E|>2|r~9zZUfUOP2$@%cR$ynw}5{P@BF3ov=VZ58_9bfdoLJ
zZ%8;H-sVU~&bQ}(`CsO~$Ea=(x9s$A*b3)6V}M(p4}o~yY~p=M<nIT{YhVnn$w*r1
z(;HU7YYx48wRONx0s@6VpW66<etknXQ|Q&McNQ-&-X-hog4bIq0^W}xa^|w|el%Z;
z_Y=}6*Zca&BK#c%+>k^0FOZp5h46!x*6{G~OBpVZ3@5UhOtK94{e#jU54l|*zv&_4
zaWq9aCA!bC`kN4&KJ&*J1PJAMo73OEUa*mh1fX3CA54Z*fHooJ>z?Kd=oJ0XDONGy
z)zC74+S8A~q4R!FAm8qb4oE3<2GlGvfJK62iOp;rL%J1m=X|)(;FfjUq3DaS5GDy4
z>$H%b$G_7y$c(0tcxAsu{^s2S;NUz+Cce*Y3|Uxeg;)%J)|Zw5nvy`zk@k5nU=CCM
z0u2a}Sx+~nMJYguVN1M7?z_rBA@I)|1M%nwKkyVy%-F2uH#0>&o1OM>Pr^Z?=bIo}
zR!Y^zDv;BId4Y<nK|l@x@Y=sA`X9Oy58(h<9w_>2HgunE4y5yWsPI+Tu6BO0R%V*|
z49(0N%E~T^rd6b>=60&Sg?E_9ukvS9$oa8!4IEB(Ql1=V>4%eX00#V}fAFPh&_7v}
zC;?m*kW>nh3^l!COQAAT4fx@g?1G{CDBcej@oBFXPsL1*G#<t43sWP+KNL`P;unN1
z%>lLVuC0c6q|>p*#ncWtWJ3-u(d3C{HQ1VodH<GAb8sIz1V;_r*I9qO(`~h!lc|Mg
zu5Au0WW;2A4Tg1AQA;O8$QSNMi&*!X20BfQjXd29T%>ddfmhwJ&eqn};I*u?rS#P|
z66Yp@mGq<X4e0LC!sYjLecy4-UR7aS0(&5;NK<Ao|M|;aeS1=OwJYw=o*6ryJo41w
zSa#UbQb~hbN5wJ&V$8-}Li$hZD<5r5F9}mjSag09Bu}R2LS*n8xHdq;Y(Y4RFySho
zOc(jrI>WNbZw)3Y)9Z)k%<D*Kj_s=PJ9V6zeR)Noq9vS+L05J03Wdd8gwxAj4<pez
z+Ui*dV_CV0RIQ&<)jFaR4Wc4`1IrK}Xaxj#$mRQRO!5~GQf7St<5Aq`Yp@q$bvqWG
ztx!`BuaW-LB#oHM1~<t>Tp6nrpO6{;RPNwDB^yuc4yuRs!Hcg?v-(0R;<guOdzU@@
zhiDdGYRA(rE?#c9L>;@=`)m%xvl`i#Ea7#Oi-W%D-1vAr{?4V?>es2E5K~-_EY<Ry
zdb@Sf56;rL1@W@S*r0*I&cPvDQB^~aN~g*g72zeaC>~#()jUU*E$DVKJ{@HUCOuWf
zGYo@<)9nyI@fGVyEk+sa-dkGthLMP?64wPK7G~O?Zu9|_iPfBANRMYdW^^vhKpZ17
z5eGxf>#-qUuV*7`K6Cnc!1T-j-5Zj!SAAMf&x70@ST1el*zjaiw#G-Gs^c$JF2;!@
zs|Gh~hq8WQ^`%>ppPGCrddCc2*Wp_B5_}QG-$mNAOcro*Jj(Dqwr6tBpd`l2Qp1aH
z9)KaM21?dXxOvW5{olnh0%xKWaq>$|M}R3DJF2d|y;BT8Bk8=TO36^K57CGo4y6;y
zt9yR?Jo6Vjm+9#Okbg|`^#i&9=FW|MwJ`1jL@YIw?1g1O6>cPr4-kYDy#x8I=Bl;I
z-7n1J>`alvLT^?&%iW4Z%M&$~5E6}L9WrM?@0%~(Te6||N6?1d-aNx0HF*0!0fAP+
zklJ=SjA0lhlKkq_u$D;K;<b2F<=RH2;yI7TLRA)aZNuCU8GQ|}36lrSgt<Utb%DQf
zrz!^S*%#7fU;gCisC~d2rMj1bSLXp-U<`B{DCM!zMxd_<g00Wzs_DNw==SZmLdHZi
zg`r`L3Bj98dt4@+5UWw9%lF$p{JFl;7&Onr*n_PKUYX-2%R8^l9GSgvF*lbF+oqi&
z`EA!|2+RpFxkRXmOu8)hMIs(f0m_KLuol^MIti8g1xYxh*aX4{t4J}1)bH|I1tXRL
zZIVng@62}dh=Hs1l|w!W(4ENpDadKL+`5QAm65B~O2dNYo_71pfi-Su($|PJZjwF}
z+b7eM!3TEx$Ln?}XzAbtPy|v)*zLoZ5IcCE5XnyQzE)lH^=<*4L-<s1G_TRYTusc^
zLkeNOjV*(Zxy-|MxG|x)8SPLKHiqz?3M)0sZ(CUk2|o@$mcFl^{tV39FTK|Wb`Q5s
zlJ)>~Al*pMpD0oqs#Ug1x7KhWfy>ok`QX~nVRuu36?ApfN~CX2os>(fM8C`AK(nqN
z|5*l|i)t!ra3aKQb2mXiO|Q^+OwfB2^Edg>xC))zL%R;=EbhlDY0_)RzHU5TQX-=~
z^8QysdHgtwqS;;KR~4S-9ZLEab-C(LV5q<0a9D?VJI$95c|JWp#6(-DVP_R{eM$?#
z+az-$4q^AeHL@%i!A;<KMfjzor`}LVIkR<yfAQ;yCZ9Iz86D3fi#Eb$9pq1&Z(*uw
zoXXoss_`ok>9QQ1Yor>E>{5LA5ae~T_tTHNl)q&*3(2^4sET1t<1+inUtaEHiBwfk
zP6$HV(dorE3?#*ed)m{Kx3qlT=F|73h!qSG^CsId)9v5zAskMc{#^lvE*bYUQB%5|
zkNaQDE$V8A7t;MEv3obKM!GO*xNc;lXkB>>X_5^Um|>?%9vh+z=X^0zj00oV_(~1d
ze^|$LtK^wcRKVvBHAo-$eTG>dsO4c``mtMxUxqZx;yP*D*{{4G>ARcEh5enLec;7g
zB6IT&k*ngFaAj4@7ZkEm2*rFKKHe9$#RRynjU`bQgvnHSZR%)aW)mV}PCW2x$l&uT
zwY)Dml{ZvI6%vZ4lZQXpXOA(f+KFg;ltrJan+vJBa`Y%IN_2|0TD(|L^J3vAY5TL4
zabIGC{}W2df3W;(QkG4sO|9ltzGHFTa$<7BRVzHzi?=rk&njc5ica3Wsz6%9WvG-v
z)+<Z4M26uaS>sHwt1#$}d#7C_J>4JY`j&g=(<Y1`btHoRJQO!AE4dD>E}mBLySF<0
zZgg~M<}3YNVK@JuOI&)*<)|HPjlygs7D=0$+BozoN`YvE&?@+?lGd~99^aFamPqT7
zYni6LKgBfnhK*?bPwLUv9AMM))Slj>{p`}lP*+Nx-fvJlNcR3C1zzlYTj0+)G8&k<
z^iTE1#!`8H*vm#E=zDr~gIZdB3WB)_gmjpM#7RiWw0HUa=at5hfl4ARtp+1Uvkv(x
zxSOtNl?Q0W-;qYYfMrTGLC~L`XJNB%@tDR1`>h>YLM_TpXL9-b8+T($`2+1hNO_uG
zU?SkCPQL2BX41BNOBIn$qdR4lmr=}2_{dH*UatcG8KX_!KJ7Z^m4sz{LHw)p;p_tU
z<{0}T8AS?shmduq*z(18e7&Z49i<Q7d4(XTbYAz@CB|&QP_a&|k*)xDclRQqzC`^&
z_!tp*ipk)YDph&Di%6T^iE-y5^WWcF;gUcLJm`mBb+Z2qKj2G!W_$-5V4R<9x%cz+
zn&hoXTY_=f{q;+OauGi}{kgUvutA(dmhn+m3>4UcJt$*-$gkp+BZcT*RV8)nvtX3O
zO^fb>h4GASz@p8CAwwx4F($pHk}`#s6WX2a%<C&+48L}Uw&bJ#kx{EYV$be2M*T*m
zc+k#yUyJ#Z{EPik5LiNWV2eeZ?M@gHZGDp-D)Mxel;G)=i(*>7-&%eRZT+FJ>KpRM
z^k|pCOq!MLfJ(D0>t^1O1W3+Nomer~U>ztL67mJMfW?pZnpp^&4o@%Il8<Ql{;njR
z`G9I3md2H5q>}+ektHgbwY6V(#2aSP$o_O#Z;zyhKW6~#)_2x<i4M4tU2uYFx6^3_
zuy^Poko6|P%lov#4>dJ3y=O7+8H@5ZBIl4<zb{CqTaTQwe^~s&BYZOf?qWF|ODqE;
zVcx2meJInb#V;|+4R6;k*T70;NZ*~Z_Xmz_AwJ<xX8<`tzo|Ik9h?FcWS+3n)esD|
z{&V#t+Y<FGXS7?ts#>NJ0#=F=vF}R$D6v(B4oK@%XgTVaMW2OwG|T0KLWe41+sj=(
z>nUNc`{(J+;4f#GXz4#|bfP0y@q3m$oG#GD^4T)jN;r`tIIJjaZvU4jGA@HDuf?t7
z3yMW^LWT=DPTC*Uk+D-R0%$M$!^`yhjEa2PSn`}Zi-J{@ZC*o1O{;5>*ei%Vt)6xF
zq4Yb4pY9G~RF~UD`mgbVguo9r!8zLOnIpdXOpz7MZ#7!zn!!yaXRxX=?PKn&M2^22
zf2wKoH+Y^8rAd@@h93lW;VLqyq@-o#dM(QlE*Z)tV%J<tK&#5<FyukDkG=AO?>;6J
zb?znbr-~|Kg?Oh~qdz78Y&pGqQr9I?{LmpVLzuQ3%Ygp!D>0Yt$141Gpd!wlYk~db
zia25Yp3w(w_U+hyV!`g~hY~W;?1GmxwI?0EW?Kv04pXW~N*~1q-DYSF4W-bhxGv{a
zW;7;EdeM5qqvaRnLDOn+s_8`jgyQWC+nTq@Pq3H{Vg){q+}gvkM!~^-vfmyK{nNq!
z^5xhb;F{&4TMDDqsv3AYwuAnnbBp>t08EN7O+_U|lspea<gWd9UI2UcN4-oA@S#}k
z&gVb2t{+k4&D`iC-iynhC;BZnyb=DA(vNW<B+nk)*&Pmw7HU=EHlj5rxS~|2KQw<6
zM=N7$|IN7t$@N$!g9q8~A`o*aPrD|CwE9oty{w4(Yt=(c2<}}AVBwKy^i7=pobQ%I
zCrm4Qs#P(}snGygBcU^0PTFJaBEC`@AOOdshfA$7;1$twdiMHZ9_#5{p0iML`KwC%
zu9&CMOkuXyp@C5uR^06<$Kg9TI8&b$KY<AwwtxC5BQu{5WtJa+*+F!FU2<22ncAN>
z1uO_>Y$_esM&4f^DamROePLAsdB0&l?8zeG?r<sMcJ&7*-YO1NR*6DR2F%yxs>0VR
zjKON;e#b0@$%7W19p<<IM2AQOQn~&3Br6r}UcSVOq0#i`VjJ>a%wcBNo?@EIx3Oey
z{lPgy-}aP#QBzTaMJI%0*D<0KNTh%I>(`!B2gOTLy*~4I<=d1YGtSX1z$LfP?PKMe
zOiim0XrL;@9?qa+iLNmyAohN8+wbPa#~#Go?|Adw^cli3m)(9{X?ab-NEnHRkI%cs
zuLR`fC3$A^AWPH3@sCqD`m88pY!c@T9r``u9357;TePcIg)bntn$W|-=<Snsv3W1t
z_X4-)fiR@6gNZ=xU>^=Q<m1Is0ng(pUX$heF%kk%wO05h<dRxCCa5kx5XT&G&Cw}j
z$biYa*W@A}aF9HK=6a7VwE@5A5S;rxR%(UW1QnmpQT_cBkBakY8Gc(uGBI9zx?ay0
z10yGFofd8j_u%!ao)j|{Zw_C-iY+o?Jc({I;usNco*Q7{-tOeTWZ3*2=|{rC_*w8B
zc~l&uW*+}-mBiDhlKrl)>+CfJA3IDbzOLQKAQT!3?8^yXw6Q+fw{6#phc*4Wc63IJ
zaOqJ-E&fnF3F7kVkMN6wx1XQ3`tiaZn7R^|C2kpdBKK!rwk{>0pQp&suYJTSu+cYt
zY=7!p8=&9hLU>B2#29k_y~CeC_k$R&aeZB|#O9ppHjNtbTLt_h&id8U&KY%HB3IhR
zJvaQVcZlgT0;*x0K0Aq!Ha402Wqhb=8?(WM(GRBH?$b~^$nA|}(OZlY?~_)YPq2_k
zV{@EGHXLeuw3uKkJFT1%=YU7Y3&O-XN>#lqxintHb3D??WQALLi{-6Fau3f~aX<kC
zw1&>`u=}r?|6n|DSRxdO?YJXtkFoZG*Q!5=xho$b3WC>1?P<GhcbXQRSAjn$u)sV6
z(2EHxgYoE*BbWYY(VS27a+#YU1PG}WAa)A;Wy$=*mJsr3Tf_xLD<B4Vb9)Q^FXG2v
zEh_-T#Dkn#ER^s9fGVKw;o{(+=uOQHpiC&!o8+x^z?ga?{2ho+QOKpGgsTYXtUdMa
zs?OaBcPWidO#D?p6A669eQmMouCgG@2sCL#8D}8%!0cQ-<<hMZVeq-1JMNAH<`+4D
zQ)Z@~W}2{$3;I36*G(#q5D_W-DJ}JNzp(gJ!ganaR-w;QwU~ORVbO8`F+Tvg@MSGz
zE`OxOy=g(E%%G;G<`CK32rGhQ_DjIW*AWr^Ftb<Ead%R(sU}G&U5RhLCJtU1rg1rJ
zF|e+BFP#ZIT@AY7ECGOOVm3ePcXKy@R)j&0&Z^%DcP8aV0<p>g6*vL{f*|iw$v2B*
z@g876hRsqG1tX(Ou>#W!fDLeZf~Gh)#hk#rGn;lh<hx-pK^IcS1;HjOZS6%cEo*4i
ztm$4#^H@Get)?fa8UWd}5tDIr<JiYYdhj8^2Mw#I{Np!UDck!6ENu^$^FuG=@9#Ys
zr^c)ef<i(jAMr^@Qq$6`NiF8k&0qyKBq$|1N-u90U6z%(-sv=Rv9g{W)Ge!cm^;fC
z8mYc+J?SCxxH`0QxYID%a(%gFx{CB5``vKQ(*cbH6|E$Yl9I9*e4{#R?d|MuA0}i$
znzM>7aQ`{^@SZ>am@FtdCI;JRJ4o|eZl~oQ0Ba%VV_-hRg%V3)i93MckDAZI=B^$e
z?p&%#jc&lRnC8#&^XE>fqGZ37R0oJw;po)QoW%`4bpBE6+~)kDlrWZRoI3Y_Fu~3b
z1n`S))yEt!PzkHeCh|aMGySR4p*~D0YN3!js9giJMCnB~mTJwf{>-7V04>WA?PW2Z
z<rLO|o`q&6KW;UMu&^KZmZ(@$px>}(|G>ZnZBS6q+>z0-TpEQ$|ATVQSYY9>;E<gy
zbZ_tM^mK4Ofc_lE(>&4%My<^YB1S)E8KnBD^z?Q(z!&Q2a8N@)tY*_g{H7!Jq>-fB
zD;34eflg+(c^O87c9lacci2W*UOrPrdADgC)1d&BgcREhNQn;g_3fHcZnejm&w{#q
zqxaLJEJuE<Db`$pq!@rGrwU8+Ov_k$kxbh(HWiFZC%<qbH5NvnY}dSC%#F58l}`4X
zf)TaQqk*les>1OK<Cq=WZyHZ)Y7KX6ZMd9c+Zy(ps!ObTuwKikD>V$joh)X%V|I(8
zDC}S-A896NFw9CE2Ee3vQ%9=HQsK{M+xm+0qlcM(U|iO~WHN_A*UNCu>F?ZJ<r?0-
z*aKfPLPrqZav-3XkJz~|kf6;^C$7{Hb9y=X=bqfO3}e$FQ9B`&0iXIQNw(7%Kruys
zO0*gjYG`Wqe_9S>-ls13$WzZkU2I8vTeDYOLU64cNP7vZ@i6XfnX|`G1Xu}4GItC-
z4sZW1;5pOf1Q+}8t;?psvw2oBj2qjXTjV+%6HxJySM@b#279cEcavRX-aS>g?eTUG
z%AWux7f|oUXwIRdS%Sy3%5G?yO+98-aQltZawZ}nfy;WKKFnA#QsLoclA_F02mx!z
z&kQWxROt`l_@iSqJ796AqG-X_4_sU>bVIrr4~QHt{-|@@9k^g+IB2I+$fWVQt+anN
zPja%>r+PFmsToOV=|qFpsSGJL#Wf~Q6&uBUd-dwo&n;5M0|bOW=Fw4646JXC2!x6F
z{M_@D2ozH2mnKz>UU-_CnkEmpvq1o03uPbO^*5LbxxcJxkjh8!xZJlp<li&JcAV}_
zN6^|Z@UU(OH`V=YQ)7oS$GOF`ruJ{QBPgn>*d*YvC7ml-^k#QKXjZ|}avvB~Wlj6E
zA!0^ec6Q~HqRO@#N<!r{Q2aMhf9dq;uH);(#6(S#hBLkE2>#p-K}_UM$w!hQBt0j4
ztHs7C(-sk>zMz|#9JkZ6vv>w|1#Rt8zpmlb4~!-b@$MKw!NDYQe>a`|z1xa;{Y;wX
zA$gGnE-o%lc-+BHj?f!Gpt+D$DzOqUNnV7z7FuL?PIibdN0I{b>E>D?9(S`T0kwbL
zLPwlQb?%@}eKb2hdxKJnBr?t#8cD;Zj01PWcjDAlZY5Hpf(TmM1|CbsWa_n+v%p2u
z(b0vx6WYi|cA6fdNM%Z5Jqpn0PCmP`=1Ckf{32f8lftyap^>fOL_WYhzfVpww8avJ
zRo?@)Jorg6p^;hm{SQya!owm8ZpFIlMQfMVgt@3;q3Sxv^H{icyicN{pc`*5Y8FO!
z)!l;>6LYMOQO{>@PlG}N1_p*dpkf~U!w^C73<gH+wFE2-O!>zsI2ahcuM~(dFzubn
zi*_F<C@47I)A2Gea24zwEucES@emf4v9eNEHd0+Q^j!&%dwsfE*GO^A7k=trUthnI
z5L8sOpOO;PFZuk~U`$?qEHd(W^lh9<44(EyK@XgOCwwG&+Z1KT(JCY=%KggP+WZ|2
z!xw?CHoNgL*d$omuA4!tw7z7mKYj-+Hzuv1hlGc7F62Z97WEf7G&C%b5b=vqcObU7
zfBW|Rk1Jc)`wn!nPaD5%v}KN)Agi@JIm*^UObl!=%Q=er-Q{m*ZLvDg(?!8AxDnr5
zQ%h7t%ERx|9UDOzMgzb7AD^!3>*IuUA(G|e>PA}D2d)H^k%KSCi|kbg+&wXNm$JvP
zQ;<G-YrFLEuW8JiW6d;p0nTXf!2Y+#1}pIj2F3?IiUK@a<bNJCu6UG>g-L&?VxCO8
zF$|37*ZC_HTW$L%FI~uW$JUl{Z%p0OrLoGE+4JM)U%!66TJl~t3>T<1xylcR?6Ekk
zWl;wI`t?g-@uBe9xfUYCok^|I7AP1n@t<|(20zs+bBe)TXIV=}z0H2>FtXWvx~7ZL
zK9YkX>9*Bi@(xF5uEtPR@AZYobtHj<@gf({syJwhq2QL={sE&q*&?A}^zA}MqvmW-
zotd-MMQALSo~&#!BHp0`#ytXbu9vtUew#XKz3M{uj);0+K2#j;eRcBTNJCy-{igG*
zc*$*#<oS-ECC7a5NJ&v?X=)YoFWVv_Cr6PVp}{TNUp=OqpT?R$on;#u@Gn;E&14!%
z+3148w6}8RlJ{QAX{G)1dfCPkV$Sz;MMXuDeWQNiUJrk8bfM|*+fztMF}<cCE=Ny}
z%Vge9_q&4=^oN=R*bAWzgtiA@#;Yzt)TR`{87r)xZ|lSF>|{=>$5|#X{x3Ti;FfA_
zmNevb#=P9c#Qc4HeCn@t==e+T^oF)Bh)hfd)$NwG1JH;)FGkAX;9h)TNV0*MmaC(Z
zhy*$$7Ut$lH+`2cJbv|;Ekw_7N=$fM?Uq{aD)zDtNDeq#&pxh^sj#!N6Zm-lZi=|t
z%YWSdy-F_kG_A-}K`Nl{`|SE_SlG+FgXFr+%`Fms+Z_Wh!QqA!EU_>=t>4oPj>{XZ
zFKizi4H3msO=s0jhW1Y1ho_?;qbJ93sBa_ToiX9!;XocfEc4o(cO@#SZ&!^F482&P
zu9P)NM0d1~NK7OkBeQ|=%E%`7y)l=Nueizh`Sa)LnUIo|jFle714?~bBg<nL8TZ!x
z`9k9U36`d8(t-0`db)>MS3+bVc|cjci;<wt;~rDn+~}wtI8jB#*a?8P?#0B!;1pT6
z`;R3TXBIhZPC!Y#mn*HOt0yilCMi7j6^Vf7{sZT-$6?*bCDEvN`*!LCj1OsHG&$@_
zO(Tm09TR<e)ob!h7hh6()Fd`1P(4p{=LO~T-t>E&^e%pPViGJ842;hTS_UvM?mxjZ
z^5NX;Ijn^=U7ZIVUDWipnw8bjW6d=<^#+pnvTH-ei<-PHA_EAC2$Pct!9u#K9Dn~D
zX4C<!E|}&-Mt1h8Quyzv(zD*z<$Grc2nf9wLG+CZlUt|A$wRofq&kY)Rxs1QVi2*0
zH@50)el&HUyJqeY-H?!A`dGC4tsGr4q0Jmzf<ky*`qILJ^mjNIuiR|#Wm55(fk|xt
zzwYG!w3xOZBq}-CM8rN3_%JD=%rBC?i}+8I5%5yk9|i{1O+rLasV+JvX>M*KhvNCM
z5wM3rUw+8|Lr4M);imd=Qz}KQva-2UigJ5?VYey;k@ef_)x95{*Nh{+0?hpUOQrCH
zL`2VFEm_9KK2e59BBxI>(H2%T6jm1X|2OL<YO%{s_x?Q_SAFNh!L#W|*>4Ew#Q21`
z?hW-b$1gk3bw&PKN~2?sC<+N>r<!59?|C^hA#oMvdwYAR?ZJt6fwENQP;)+h*@Tx~
z*BEcfyo#lKm*bL>%w6gJiyxRr=!gILy(LpHzY`j9SQMA~pI)Gh?yncwDXdQf*6+XD
z!2f)5|EI6{A0G98{ew5Z>yacdSrnrKP(t^x$Z*ZTd0hk6=8CFv<FBy4;HktDrB&wU
z<q?vqbGhz^Jd(achJmp~-TytH;eD8}8rgn*?fMJi5-OP-#r7Ng?XdwZ%Sm7)OYhGO
zqQf%^2?f+Z6yW}@{kwkbM6_qH=EkFPHb7RL6+}>4EWxS>pmCCiHLUMDpfEE(#dr>m
z<hw?+*FPN8X4*kezzNgW1Yy^mqq^!Ip27HxoV@<JY8(X)11|vn``^9ob;xMJj~Oos
zj^rU27{|6^!WG>18WzW`&}?goaH7%a@>xRjy-F7nuH(9?(90KK^;?1S*l;pH=Bg16
zOX%KxIKL!(kZrK*JZ|9Zrl7XIpQ?HRlQ9pR`qGebvgb&tOsI^e_mx854X+GWox@Wz
znHRm;WO@CwzFa&cw%ldZY_Y-QF^`#y)8KgfD^mUn=U^(?r@4NAecFJf`<+gc-mKfM
zeDABw{(){y?>mM5Nur*`+Lett#ukO!{2Un?re=HdU$rSM0Yjyz3B1nxr#JoW=8^*r
zSEM}m!;M>8TY?kRp>0l&6>T=dOBHfwA?isijy*9gOl^v;r-K{b4W-NVnCbUh-ThLZ
zo(T#P2)J@F&>2i97Qc`t<$SwNwLK!QsdIBu1_X4LZ|~v<&X5@etQ{4O&b=Y!LtW8(
zbw-fNd0Y%;<K2Z0PMI+29c3Nc-L53LVQ=@(WoStpV^wmKmiWo(8p_&Q=8vh{d^h5*
z(n^Pq<N-@M#fXCXnb9f?GNc0IxO((l&bL+5{GU;6c9~k2w^~TNTp%Y6$h*rP1;-*P
z60(moMg&F2sml+uV^;#so+-i9m6s2j+S|E#e2%K=lY+@<?yZgWgD@+l^;C$*=3{|~
z9r~G);e#lB)$56EUgzui#Znq!WfIwnCf?g$mwqXnqLZKphb1{)omLENo4IfG&Kurd
zCe|B(kw7Q98u;^VM}?suV#)kPYPDwAR>M9$P=}V%G-nB4452S4GqZgPrYTH%xc1AG
z$J}<_x3M-?ux2@pn@u7mB*2_tl9(7O4d@o#E3|*f7q){_+$$M=?m8I79Z3GYnjf`<
zv6!ZhvEUt}jT<3xNv{!nJn<RA3l~@SJms1aUS4U$0Iz*^C&uKkuyLtuy!_?k&F)Jm
zVQyd~q8%$~1E<$9jLg+FmRX^GResX^!3Qd3w|uJa-8CVHIRbNoVn;;$M_XC@TARK}
zR+sDO_+OvhzP?2aG*@q4Q-~y;R#irTLoib=I+oFBD1k}_+H<ueMk1SV^UI2OY9)sk
zUM-)-BciauxU$em_^9s1j?1+Tq5R6MZ59&PGR&otl&s~uFd-Qb&L)q4g7#HNv4(lq
zOGr%Z%6t$TOfMwAT1n2|*ymHS-N-RSy_jOR@IJMe;uU3-O!vGxootv09^RTMHm`j=
zlylF>3J$xK^1cyS9xJ5Q+*8mMck_AwyjRgmRsbT3virgKI(M+DN!NAAZEKZ)Qxz{3
zmw14IC)%)qW6Ie1ewp5#*-<6w6^X;zrs6DJ{w5jE?BtA^edg-}dKVhO$rMuWx60qY
z4=1@hUcA@@IO4>`<lsGp*KZ#$EYbAET9+#_-RX(OprWzhZ3+~^^7Yv^Xd#j@q*vtV
zZqGwmHRwWVH_Qt`%)jggXhY#K^`aBF4tVqO+jk5OUd#{HbW>5w*01Ak$~D}D?LY`&
zJmDl>txWCLINg$96ONCeocJMdOitk$r?G2<Z>kP&oF_BW@o>vOs6#m<C7Sdn8LMid
zo_l*NyA>keg(poziVekSKWRO+x|cj}K4o<J)J<^_CJ9}vTs&s(ecNC6LYANmK|T=i
zV7X_*BM#4GyGTw3;@yKsz`;87vYgh2hCjXTQo!4gjg#nIz2|L;!n>)yn21E2jFscj
z;u{fl&8rX%E-4aoI=n*f<H@|#Y>fedQtzoa!dL~i*urzY_8b;bi!H~^!JDupoxU67
zxfIf!ql{s(SQwHgbEu;tSuRx6>}t8<>_*k$lK4H$HEiQNOquazW%q@geHuRJYxUXi
zMkkbH8EsV=)X*^A?7~b+`IktDe{3k_*o_$B^Ql1c(z57=8jAXKZJd&*2KS<Fu*~V*
z<8E81I<MF#%uP+JB?$*Z!|cVM>3KbQ98870*~58|vgYZ1jmD}=lQziS7+LWowm?DK
zDd{hE#m7yKSX+g>B@7Jw(MJVRbbk4<#52l<n_uJksHt|@MT*<bB(}}i*yB;l1zM`w
zT3P959%!j^_1UNPcGNZ_Hv`{q>37pbZxV0LJ3H3PAP0S@ZPzV~%%hP3&yKw)z}i=|
z$}1`mA>r|}NwSnhL_thD*@3W<wT$3mWGskxCq(={PS_C1zCgl{{TRcVi04?WD%IlT
zh7ev%WW5$dIb1A5`k~XbWm)009`jZ^&PBdWaa+0${zb{%%~O%$?o0sDd~@_fvWwO2
z(e_1j)022|y!Czm!E6(nRv)yye>|-vPi4`>9fOm3HugsO``EnV)t_bW^U0seWvOaa
z4MQlTo^Si+nwy@wSjh2)6(0HyCozpL*9x0tAm+ETXZdxqRtvK?2$Q-x-X_^K+bnrD
z15Rrf%1@J3d2e+gMouU$jj)~wi&j8F{NlctK#rI9AhYR3wN`?sI*D+_L)1G@=aN(V
zNFBZ=h|SvX%&OM2DOSxZig1#j<kfjJa!BF94XXpel1y3)w@m_!*JE{x6ZxsLwY_$z
z5mEUeN8ZAV!p4V2UU((7Sqg2vi#)o!1HUyFXj}_E992yVOg_h>mnd3blWo!8DJdKZ
zmFbt&QWuF$yM-qG@Yl)4%PrR6c$7k(A6%KGR=6-7?>D;5PJR4RcjkzbIH}7GjdS#{
zf;idj?sPjCL}N|gZ%kh(Pm#0;=klLDJ&gI1C-yfg3EO+N3^O;)#|_F5vn#1j?*19r
zMulnhk$kms@Xjc0u?DJ~D@JRE)$=Z$Y>N7g#o5mTZ`WB*<ta2unht&a=p&t_4^Fn1
z!w()h?ot!^3m%%bt}`8+{Fc_{JjYN3p6_xkPXmnI`6`Tch~=}QgUOj}o4-BwhSo+S
zU8W0RSS>G=7?UqXB!suaelC61R9U^fFIouEVawm}9GIFd0x5e;KX=g(O+EpO_g3FX
zS)lXrK2~9d)A3MvwWXc&&ojphS!*x%sn{y+bsJ6F3C=^b(4bLG_B{s@T3$D*r{lgz
zWMjI`{zaFWK|&cxbLyoUrPLhiKb{8aqacvBEG#UvW;~uCs3U;+88Et2a6Ge9>D#&G
ztO`$1x;$7$Uv}R~_w9CN{IG4k-GVGdtLc-vlCYI_@~25Rld?iZb0b$u9K$&+?a9(~
z@zi7ulWp1z_tChAQ$!~V>zkqAucfMf?2l(SdN9pha?T~r7GA(4q|2+yt545)f9WgL
z2$OJ%xx|{+l32Hz)Ac?m84!pZC#ic+I!>NJjR?R67mKeAwAm;yt;G!ujrB?pVRlNs
zO`Q>)<3OcWI^Ia-I8{>+A*OE_H?j-FQna^Wr#G$CKQkP$T@;86(%gDY0ppJUZsEm$
zU;rHl6ovJ*{eR<1T2cyTfH{~*F%f|u`Mdq#dO*x5Cs+$|ixovQoqi`5OpqFMLQhHD
z)WI2i!aqZ!H0AdX71FfoTOJoG3_socJv^;Ao;BHRn?BDOecyZeb0YxmMQ)dCB?E{&
zYcdJP@6-`c!(9_7`Vz+nsDqF!IW*Ni+q!=K@%JhuK^DbIqi#p%CIL(yURCOK2=(yb
z&JY%)0Y>pZ<u@-)EiKu=ov(->Dtv@MTEGcms3jv{q2_yk!(1+TU+mA?+A`tb+xhq@
zkW-2?;#sT4sN#dqOpWqHzjkzVI5+XVW`0fKFK7-z;kIIs;g=M!4N^!v6_=KxqM%U7
zfo$PXnn1zKtZ=BDAdEsnE{2+&odZ4q4gt>g4CD|ix*+)(80e>`qZ>q#u*6)&42w_J
zd<qT;K|w`UR+gxt1Oa%)wt}^iuCA`CW<H^U)Y#4$io_!s49wG0xcyBvxSJP$ld$J7
Y4%UK~%p}E{;0TPwCs~o7LVCXc3uLGL(f|Me

diff --git a/docs/install/README-NODE-AGENT.txt b/docs/install/README-NODE-AGENT.txt
index 67d8983..0fe8397 100644
--- a/docs/install/README-NODE-AGENT.txt
+++ b/docs/install/README-NODE-AGENT.txt
@@ -2,13 +2,13 @@ NODEFLOW NODE AGENT — SIGNED RELEASE UPLOAD
 ===========================================
 
 Бинарники Agent — отдельные assets GitHub Release:
-  nodeflow-node-agent-2.0.1-linux-amd64
-  nodeflow-node-agent-2.0.1-linux-arm64
+  nodeflow-node-agent-2.1.0-linux-amd64
+  nodeflow-node-agent-2.1.0-linux-arm64
 
 install.sh публикует их в Panel сам. Для ручной загрузки скачайте файл и
 сверьте SHA-256 с digest, который GitHub показывает для asset'а:
 
-  v=2.0.1 f=nodeflow-node-agent-2.0.1-linux-amd64
+  v=2.1.0 f=nodeflow-node-agent-2.1.0-linux-amd64
   curl -fsSLO https://github.com/NodeFlow-dev/nodeflow/releases/download/v$v/$f
   curl -fsSL https://api.github.com/repos/NodeFlow-dev/nodeflow/releases/tags/v$v \
     | jq -r --arg n "$f" '.assets[] | select(.name == $n) | .digest'
@@ -17,7 +17,7 @@ install.sh публикует их в Panel сам. Для ручной загр
 В Panel откройте:
   Настройки → Node Agent (подписанные релизы)
 
-Версия 2.0.1, ОС linux, архитектура amd64 или arm64 — по файлу. Выберите
+Версия 2.1.0, ОС linux, архитектура amd64 или arm64 — по файлу. Выберите
 бинарник и нажмите «Загрузить и подписать». Затем назначьте релиз на
 странице нужной ноды.
 
diff --git a/docs/install/index.html b/docs/install/index.html
index 6cd9550..3caa430 100644
--- a/docs/install/index.html
+++ b/docs/install/index.html
@@ -34,7 +34,7 @@ <h1>Как установить Panel и подключить первую HAPro
         <div class="file"><b>Корень комплекта</b><code>install.sh</code><p>Установщик и апгрейдер Panel, <code>compose.release.yaml</code> для готового образа <code>ghcr.io/nodeflow-dev/nodeflow-panel</code>, шаблон <code>nodeflow.env.example</code>, <code>SHA256SUMS</code> файлов комплекта.</p></div>
         <div class="file"><b>scripts/ · configs/ · docs/</b><code>scripts/install-node.sh</code><p>Скрипты PKI (<code>init-mtls-pki.sh</code>, <code>init-update-signing-key.sh</code>), ручная установка Agent и подготовка UFW ноды, systemd-юнит Agent, эта инструкция и примеры reverse proxy в <code>docs/install/reverse-proxy/</code>.</p></div>
       </div>
-      <div class="important" style="margin-top:12px"><b>Бинарники Agent в комплект не входят.</b> <code>nodeflow-node-agent-2.0.1-linux-amd64</code> и <code>nodeflow-node-agent-2.0.1-linux-arm64</code> лежат отдельными assets GitHub Release. <code>install.sh</code> скачивает оба, сверяет SHA-256 с digest, который GitHub публикует для asset'а, и публикует их в Panel.</div>
+      <div class="important" style="margin-top:12px"><b>Бинарники Agent в комплект не входят.</b> <code>nodeflow-node-agent-2.1.0-linux-amd64</code> и <code>nodeflow-node-agent-2.1.0-linux-arm64</code> лежат отдельными assets GitHub Release. <code>install.sh</code> скачивает оба, сверяет SHA-256 с digest, который GitHub публикует для asset'а, и публикует их в Panel.</div>
     </div></section>
 
     <section id="prepare"><div class="head"><div class="step">1</div><div><h2>Подготовьте сервер Panel</h2><p>Нужен домен, публичный IP и чистый Ubuntu или Debian.</p></div></div><div class="body">
@@ -158,7 +158,7 @@ <h1>Как установить Panel и подключить первую HAPro
 
     <section id="release"><div class="head"><div class="step">5</div><div><h2>Опубликуйте Node Agent</h2><p>Без совместимого подписанного релиза Panel не начнёт установку ноды.</p></div></div><div class="body">
       <p>Автоматический установщик публикует Agent сам. Вручную:</p>
-      <ol><li>Скачайте <code>nodeflow-node-agent-2.0.1-linux-amd64</code> (или <code>-arm64</code>) из assets GitHub Release.</li><li>Сверьте <code>sha256sum</code> файла с digest asset'а на странице релиза (или в <code>https://api.github.com/repos/NodeFlow-dev/nodeflow/releases/tags/v2.0.1</code>, поле <code>digest</code>).</li><li>Откройте <b>Настройки → Node Agent (подписанные релизы)</b>.</li><li>Версия: <code>2.0.1</code>.</li><li>ОС: <code>linux</code>.</li><li>Архитектура: <code>amd64</code> или <code>arm64</code> — по файлу.</li><li>Выберите файл и нажмите «Загрузить и подписать».</li></ol>
+      <ol><li>Скачайте <code>nodeflow-node-agent-2.1.0-linux-amd64</code> (или <code>-arm64</code>) из assets GitHub Release.</li><li>Сверьте <code>sha256sum</code> файла с digest asset'а на странице релиза (или в <code>https://api.github.com/repos/NodeFlow-dev/nodeflow/releases/tags/v2.1.0</code>, поле <code>digest</code>).</li><li>Откройте <b>Настройки → Node Agent (подписанные релизы)</b>.</li><li>Версия: <code>2.1.0</code>.</li><li>ОС: <code>linux</code>.</li><li>Архитектура: <code>amd64</code> или <code>arm64</code> — по файлу.</li><li>Выберите файл и нажмите «Загрузить и подписать».</li></ol>
       <div class="important">Panel подписывает бинарник собственным Ed25519-ключом. Нода проверяет подпись, SHA-256 и порядок релиза; при неудачном запуске updater возвращает прежний Agent.</div>
     </div></section>
 
@@ -177,7 +177,7 @@ <h1>Как установить Panel и подключить первую HAPro
       <div class="code"><div class="code-label">3. Проверить обновление<button class="copy">Копировать</button></div><pre>cd /opt/nodeflow
 sudo docker compose ps
 curl -fsS http://127.0.0.1:8080/healthz</pre></div>
-      <p>После обновления Panel обновите Agent на нодах: «Настройки → Node Agent» → «Обновить до 2.0.1». Для нод, установленных версиями 1.0.x, см. раздел «Обновление с 1.0.x» в заметках к релизу 2.0.0 (однократный systemd drop-in для pipe-буферов ядра).</p>
+      <p>После обновления Panel обновите Agent на нодах: «Настройки → Node Agent» → «Обновить до 2.1.0». Для нод, установленных версиями 1.0.x, см. раздел «Обновление с 1.0.x» в заметках к релизу 2.0.0 (однократный systemd drop-in для pipe-буферов ядра).</p>
     </div></section>
 
     <section id="check"><div class="head"><div class="step">8</div><div><h2>Проверьте результат</h2><p>Четыре короткие проверки после установки или обновления.</p></div></div><div class="body">
diff --git a/docs/releases/2.1.0.md b/docs/releases/2.1.0.md
new file mode 100644
index 0000000..d3a43ae
--- /dev/null
+++ b/docs/releases/2.1.0.md
@@ -0,0 +1,45 @@
+# NodeFlow 2.1.0
+
+Panel **2.1.0** · Node Agent **2.1.0** · HAProxy renderer **v21**
+
+Настройки HAProxy для ноды и полноценный редактор `haproxy.cfg`. Одна аддитивная миграция (000055). Ноды без новых настроек рендерятся байт в байт как в 2.0.1. Идея и первая версия — @fesevu (#15).
+
+## Новое
+
+- **Настройки HAProxy ноды.** В диалоге настроек ноды (шестерёнка), строкой под переключателем «Логи соединений HAProxy»: `maxconn`, `nbthread`, `timeout connect`, `timeout client`, `timeout server`. Пустое поле — значение по умолчанию. Настройки действуют на все маршруты ноды; изменение публикует новую ревизию, Agent применяет её reload без разрыва соединений. Хранятся в `nodes.metadata.haproxy_settings`. Обновлять Agent не нужно.
+- **Редактор конфигурации HAProxy.** Кнопка «Конфигурация HAProxy» на странице ноды открывает `/nodes/:id/haproxy`:
+  - редактор Monaco (поставляется с Panel, грузится отдельно только на этой странице), подсветка синтаксиса HAProxy, миникарта, автодополнение;
+  - подсказки на русском при наведении: секции, ~120 директив, параметры `server`/`bind`, алгоритмы `balance`, fetch-функции;
+  - предупреждения об опасных местах; имена `nf_be_*`/`nf_srv_*` помечены «не переименовывать» — от них зависят статистика и квоты;
+  - строка состояния: время и «Конфиг валиден» или «N ошибок, M предупреждений» (клик — к первой проблеме), список портов прослушивания;
+  - кнопки: «Сохранить» (Ctrl+S), «Всё равно сохранить» (только при ошибках линтера), «Форматировать», «Применить на ноду» (сохраняет и применяет, перед применением — diff с применённым конфигом; при ошибках линтера — дополнительное подтверждение), «История», «Загрузить из маршрутов», «Вернуться к сборке из UI».
+- **Проверка конфига.** Линтер в браузере на каждое изменение и `POST /api/v1/nodes/{id}/config-lint` на Panel (задержка 250 мс). Проверка статическая (в образе Panel нет `haproxy`), списки ключевых слов сверены с исходниками HAProxy 2.8, 3.0 и 3.2. Находит: неизвестные секции, директивы, `option`, параметры `server`/`bind`, виды `timeout`; директиву не в той секции; лишние `,`/`;` (например, `option tcplog,`); повторяющиеся имена proxy и серверов; `use_backend`/`default_backend` на несуществующий backend; неверные порты, адреса, длительности, значения `mode`/`balance`/`hash-type`/`log`; несбалансированные `.if`/`.endif`; конфиг больше 512 КиБ. Окончательная проверка — по-прежнему `haproxy -c` на ноде перед применением.
+- **Ручное сохранение проверяется на Panel.** С ошибками линтера API отвечает 422 `config_lint_failed` со списком проблем; `"force": true` сохраняет всё равно. Первая строка `# Generated by NodeFlow. Do not edit.` заменяется на `# Edited manually in NodeFlow advanced editor.`, в конец добавляется перевод строки (иначе `haproxy -c` падает с `Missing LF on last line`).
+- **Текст ошибки `haproxy -c`.** Agent 2.1.0 при неудачной проверке отправляет строки `[ALERT]`/`[WARNING]` (путь временного файла заменён на `haproxy.cfg`, без цветовых кодов и строк с `password`/`secret`, до 1500 байт). Panel отдаёт их в `config-state.last_error_detail`, редактор показывает под ошибкой со ссылками на строки. Старые Agent сообщают только `validation_failed`.
+- **«Добавить ноду»:** переключатель «Логи соединений HAProxy» сразу в диалоге, значение передаётся в установку ноды.
+
+## Исправления
+
+- **Ручной конфиг при политике файрвола `apply` ломал heartbeat Agent** — каждый запрос завершался 500 `desired firewall listener plan is incomplete`. Теперь план файрвола берёт порты из `listener_tcp_ports` ручной ревизии (вычисляются по строкам `bind`). Для старых ручных ревизий без этого поля текущие порты сохраняются, ничего не закрывается.
+
+## Обновление с 2.0.1
+
+1. **Panel.** Повторно запустите установщик:
+
+   ```bash
+   curl -fsSL https://raw.githubusercontent.com/NodeFlow-dev/nodeflow/main/install.sh | sudo sh
+   ```
+
+   Вручную: в `/opt/nodeflow/.env` укажите `NODEFLOW_VERSION=2.1.0` и выполните `docker compose pull && docker compose up -d`. Миграция 000055 только добавляет столбец (`ADD COLUMN … NULL`); откат — вернуть `NODEFLOW_VERSION=2.0.1`, столбец можно оставить.
+2. **Node Agent.** «Настройки → Node Agent» → «Обновить до 2.1.0». Нужно только для текста ошибки `haproxy -c` в редакторе; настройки HAProxy ноды и всё остальное работают с Agent 2.0.x.
+
+Учтите: пока на ноде назначен ручной конфиг, маршруты этой ноды из UI не публикуются (409 `advanced_config_active`) — до «Вернуться к сборке из UI».
+
+Обновляетесь с 1.0.x — сначала прочитайте [заметки к релизу 2.0.0](2.0.0.md): там однократный drop-in systemd для pipe-буферов ядра.
+
+## Файлы релиза
+
+- `NodeFlow-Panel-2.1.0-Agent-2.1.0-install-kit.tar.gz` — install kit.
+- `nodeflow-node-agent-2.1.0-linux-amd64`, `nodeflow-node-agent-2.1.0-linux-arm64` — бинарники Node Agent.
+
+Panel поставляется образом `ghcr.io/nodeflow-dev/nodeflow-panel:2.1.0` (linux/amd64 и linux/arm64). SHA-256 каждого файла — поле `digest` в API релиза; `install.sh` и `install-node.sh` сверяют его сами.
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 2aa3e03..d67804a 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "nodeflow-frontend",
-  "version": "2.0.1",
+  "version": "2.1.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "nodeflow-frontend",
-      "version": "2.0.1",
+      "version": "2.1.0",
       "dependencies": {
         "@mantine/core": "^8.3.10",
         "@mantine/hooks": "^8.3.10",
diff --git a/frontend/package.json b/frontend/package.json
index a5c77bc..1c13ae6 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,7 +1,7 @@
 {
   "name": "nodeflow-frontend",
   "private": true,
-  "version": "2.0.1",
+  "version": "2.1.0",
   "type": "module",
   "scripts": {
     "dev": "vite",
diff --git a/nodeflow.env.example b/nodeflow.env.example
index 443e690..abf546e 100644
--- a/nodeflow.env.example
+++ b/nodeflow.env.example
@@ -4,7 +4,7 @@
 # placeholders (openssl rand -hex 24 / -hex 32).
 
 # Panel image tag (ghcr.io/nodeflow-dev/nodeflow-panel:<NODEFLOW_VERSION>).
-NODEFLOW_VERSION=2.0.1
+NODEFLOW_VERSION=2.1.0
 
 POSTGRES_DB=nodeflow
 POSTGRES_USER=nodeflow