From ca3d99a94265dbef7f29fd2794ae7d4741fe1752 Mon Sep 17 00:00:00 2001
From: SaladDay <1203511142@qq.com>
Date: Wed, 30 Sep 2026 07:15:29 +0000
Subject: [PATCH 1/3] Remove the landing page and the docs site

Documentation is the repository Markdown, read on GitHub. Delete site/ and
apps/docs with everything that existed only for them: the root docs scripts,
the workspace entry and lockfile importer, the check-docs gate step, the
name-allowlist rules for generated guide copies, the build-output ignores and
the distribution bundle copy of site/. Links to the deleted docs app README
become plain text so the bundled-docs link check keeps passing.
---
 .gitignore                                    |    5 -
 CONTRIBUTING.md                               |    2 +-
 Makefile                                      |    6 +-
 apps/docs/README.md                           |   45 -
 apps/docs/app/[[...slug]]/page.tsx            |   63 -
 apps/docs/app/docs-providers.tsx              |   17 -
 apps/docs/app/global.css                      |  103 -
 apps/docs/app/icon.svg                        |    4 -
 apps/docs/app/layout.config.tsx               |   10 -
 apps/docs/app/layout.tsx                      |   24 -
 apps/docs/app/not-found.tsx                   |   11 -
 apps/docs/app/sitemap.ts                      |    7 -
 apps/docs/components/api-page.tsx             |   13 -
 apps/docs/content/docs/admin-api.mdx          |  200 -
 apps/docs/content/docs/agents-and-tools.mdx   |  125 -
 .../content/docs/api-reference/agents.mdx     |   75 -
 .../content/docs/api-reference/artifacts.mdx  |   33 -
 .../core/administrator-projects.mdx           |   17 -
 .../docs/api-reference/core/agents.mdx        |   29 -
 .../docs/api-reference/core/artifacts.mdx     |   33 -
 .../core/core-administration.mdx              |   56 -
 .../docs/api-reference/core/credentials.mdx   |   29 -
 .../core/deployment-model-providers.mdx       |   43 -
 .../core/environment-templates.mdx            |   29 -
 .../core/execution-configuration.mdx          |   27 -
 .../core/executor-credentials.mdx             |   42 -
 .../content/docs/api-reference/core/files.mdx |   29 -
 .../content/docs/api-reference/core/index.mdx |   33 -
 .../content/docs/api-reference/core/items.mdx |   23 -
 .../content/docs/api-reference/core/meta.json |   26 -
 .../core/native-installation.mdx              |   23 -
 .../api-reference/core/runtime-history.mdx    |   26 -
 .../core/runtime-observations.mdx             |   23 -
 .../api-reference/core/sandbox-manager.mdx    |   79 -
 .../docs/api-reference/core/sessions.mdx      |   32 -
 .../docs/api-reference/core/skills.mdx        |   49 -
 .../content/docs/api-reference/core/turns.mdx |   28 -
 .../docs/api-reference/core/vaults.mdx        |   29 -
 .../docs/api-reference/core/write-audit.mdx   |   26 -
 .../docs/api-reference/credentials.mdx        |   74 -
 .../api-reference/environment-templates.mdx   |   58 -
 .../docs/api-reference/environments.mdx       |   63 -
 .../content/docs/api-reference/events.mdx     |   37 -
 .../docs/content/docs/api-reference/files.mdx |   48 -
 .../docs/content/docs/api-reference/index.mdx |   24 -
 .../docs/content/docs/api-reference/items.mdx |   26 -
 .../docs/api-reference/machine/index.mdx      |   15 -
 .../docs/api-reference/machine/meta.json      |    8 -
 .../machine/native-installation.mdx           |   26 -
 .../api-reference/machine/sandbox-node.mdx    |   31 -
 .../docs/content/docs/api-reference/meta.json |   21 -
 .../content/docs/api-reference/sessions.mdx   |  252 -
 .../content/docs/api-reference/skills.mdx     |   51 -
 .../content/docs/api-reference/subagents.mdx  |   49 -
 .../docs/content/docs/api-reference/turns.mdx |   28 -
 .../content/docs/api-reference/vaults.mdx     |   50 -
 .../content/docs/bootstrap-projects-keys.mdx  |  145 -
 apps/docs/content/docs/concepts.mdx           |   95 -
 apps/docs/content/docs/configure.mdx          |  163 -
 apps/docs/content/docs/console.mdx            |   59 -
 apps/docs/content/docs/development.mdx        |  191 -
 .../content/docs/environments-and-files.mdx   |  854 --
 apps/docs/content/docs/examples.mdx           |   66 -
 apps/docs/content/docs/execution-model.mdx    |  147 -
 apps/docs/content/docs/harness-onboarding.mdx |  466 -
 apps/docs/content/docs/hosted-providers.mdx   |  204 -
 apps/docs/content/docs/index.mdx              |   36 -
 apps/docs/content/docs/install-options.mdx    |  309 -
 apps/docs/content/docs/install.mdx            |   95 -
 apps/docs/content/docs/meta.json              |   36 -
 apps/docs/content/docs/observability.mdx      |  282 -
 apps/docs/content/docs/public-api.mdx         |  141 -
 apps/docs/content/docs/quickstart.mdx         |  117 -
 apps/docs/content/docs/runtime-bootstrap.mdx  |   61 -
 apps/docs/content/docs/runtime-protocol.mdx   |  571 --
 apps/docs/content/docs/sandbox-provider.mdx   |  326 -
 .../content/docs/self-hosted-execution.mdx    |  166 -
 apps/docs/content/docs/sessions.mdx           |  589 --
 apps/docs/content/docs/troubleshooting.mdx    |  187 -
 apps/docs/content/docs/user-guide.mdx         |  161 -
 apps/docs/content/guide-sources.json          |   61 -
 apps/docs/lib/openapi.ts                      |   45 -
 apps/docs/lib/site.ts                         |    6 -
 apps/docs/lib/source.ts                       |    7 -
 apps/docs/next-env.d.ts                       |    6 -
 apps/docs/next.config.mjs                     |   14 -
 apps/docs/openapi/core-api.yaml               | 7884 -----------------
 apps/docs/openapi/public-api.yaml             | 5739 ------------
 apps/docs/openapi/runtime-api.yaml            |  460 -
 apps/docs/openapi/sources.json                |   53 -
 apps/docs/package.json                        |   46 -
 apps/docs/postcss.config.mjs                  |    7 -
 apps/docs/public/images/architecture.svg      |   10 -
 .../docs/assets/console-overview-en.webp      |  Bin 171520 -> 0 bytes
 .../docs/assets/development-architecture.png  |  Bin 262477 -> 0 bytes
 apps/docs/public/openagentcore.svg            |    3 -
 apps/docs/scripts/check-browser.mjs           |   44 -
 apps/docs/scripts/check-python.mjs            |   20 -
 apps/docs/scripts/check-python.test.mjs       |   30 -
 apps/docs/scripts/check-site.mjs              |   64 -
 apps/docs/scripts/contracts.mjs               |   91 -
 apps/docs/scripts/contracts.test.mjs          |   85 -
 apps/docs/scripts/generate-api-reference.mjs  |   38 -
 apps/docs/scripts/generate-guides.mjs         |   54 -
 apps/docs/scripts/guides.json                 |  152 -
 apps/docs/scripts/test_contract_routes.py     |   28 -
 apps/docs/scripts/verify-api-copy.mjs         |   25 -
 .../scripts/verify-contract-freshness.mjs     |   24 -
 apps/docs/scripts/verify-contract-routes.py   |  227 -
 apps/docs/scripts/verify-docs-facts.mjs       |   47 -
 apps/docs/scripts/verify-links.mjs            |  107 -
 apps/docs/scripts/verify-prerender.mjs        |   63 -
 apps/docs/source.config.ts                    |    9 -
 apps/docs/tsconfig.json                       |   25 -
 docs/development.md                           |    6 +-
 package.json                                  |    5 +-
 pnpm-lock.yaml                                | 2447 +----
 pnpm-workspace.yaml                           |    1 -
 scripts/build-core-distribution.sh            |    1 -
 scripts/name-allowlist.json                   |   20 -
 site/favicon.svg                              |    4 -
 site/index.html                               |  102 -
 site/openagentcore.svg                        |    3 -
 site/styles.css                               |  169 -
 124 files changed, 62 insertions(+), 25972 deletions(-)
 delete mode 100644 apps/docs/README.md
 delete mode 100644 apps/docs/app/[[...slug]]/page.tsx
 delete mode 100644 apps/docs/app/docs-providers.tsx
 delete mode 100644 apps/docs/app/global.css
 delete mode 100644 apps/docs/app/icon.svg
 delete mode 100644 apps/docs/app/layout.config.tsx
 delete mode 100644 apps/docs/app/layout.tsx
 delete mode 100644 apps/docs/app/not-found.tsx
 delete mode 100644 apps/docs/app/sitemap.ts
 delete mode 100644 apps/docs/components/api-page.tsx
 delete mode 100644 apps/docs/content/docs/admin-api.mdx
 delete mode 100644 apps/docs/content/docs/agents-and-tools.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/agents.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/artifacts.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/administrator-projects.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/agents.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/artifacts.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/core-administration.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/credentials.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/deployment-model-providers.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/environment-templates.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/execution-configuration.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/executor-credentials.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/files.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/index.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/items.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/meta.json
 delete mode 100644 apps/docs/content/docs/api-reference/core/native-installation.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/runtime-history.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/runtime-observations.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/sandbox-manager.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/sessions.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/skills.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/turns.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/vaults.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/core/write-audit.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/credentials.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/environment-templates.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/environments.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/events.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/files.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/index.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/items.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/machine/index.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/machine/meta.json
 delete mode 100644 apps/docs/content/docs/api-reference/machine/native-installation.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/machine/sandbox-node.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/meta.json
 delete mode 100644 apps/docs/content/docs/api-reference/sessions.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/skills.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/subagents.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/turns.mdx
 delete mode 100644 apps/docs/content/docs/api-reference/vaults.mdx
 delete mode 100644 apps/docs/content/docs/bootstrap-projects-keys.mdx
 delete mode 100644 apps/docs/content/docs/concepts.mdx
 delete mode 100644 apps/docs/content/docs/configure.mdx
 delete mode 100644 apps/docs/content/docs/console.mdx
 delete mode 100644 apps/docs/content/docs/development.mdx
 delete mode 100644 apps/docs/content/docs/environments-and-files.mdx
 delete mode 100644 apps/docs/content/docs/examples.mdx
 delete mode 100644 apps/docs/content/docs/execution-model.mdx
 delete mode 100644 apps/docs/content/docs/harness-onboarding.mdx
 delete mode 100644 apps/docs/content/docs/hosted-providers.mdx
 delete mode 100644 apps/docs/content/docs/index.mdx
 delete mode 100644 apps/docs/content/docs/install-options.mdx
 delete mode 100644 apps/docs/content/docs/install.mdx
 delete mode 100644 apps/docs/content/docs/meta.json
 delete mode 100644 apps/docs/content/docs/observability.mdx
 delete mode 100644 apps/docs/content/docs/public-api.mdx
 delete mode 100644 apps/docs/content/docs/quickstart.mdx
 delete mode 100644 apps/docs/content/docs/runtime-bootstrap.mdx
 delete mode 100644 apps/docs/content/docs/runtime-protocol.mdx
 delete mode 100644 apps/docs/content/docs/sandbox-provider.mdx
 delete mode 100644 apps/docs/content/docs/self-hosted-execution.mdx
 delete mode 100644 apps/docs/content/docs/sessions.mdx
 delete mode 100644 apps/docs/content/docs/troubleshooting.mdx
 delete mode 100644 apps/docs/content/docs/user-guide.mdx
 delete mode 100644 apps/docs/content/guide-sources.json
 delete mode 100644 apps/docs/lib/openapi.ts
 delete mode 100644 apps/docs/lib/site.ts
 delete mode 100644 apps/docs/lib/source.ts
 delete mode 100644 apps/docs/next-env.d.ts
 delete mode 100644 apps/docs/next.config.mjs
 delete mode 100644 apps/docs/openapi/core-api.yaml
 delete mode 100644 apps/docs/openapi/public-api.yaml
 delete mode 100644 apps/docs/openapi/runtime-api.yaml
 delete mode 100644 apps/docs/openapi/sources.json
 delete mode 100644 apps/docs/package.json
 delete mode 100644 apps/docs/postcss.config.mjs
 delete mode 100644 apps/docs/public/images/architecture.svg
 delete mode 100644 apps/docs/public/images/source/docs/assets/console-overview-en.webp
 delete mode 100644 apps/docs/public/images/source/docs/assets/development-architecture.png
 delete mode 100644 apps/docs/public/openagentcore.svg
 delete mode 100644 apps/docs/scripts/check-browser.mjs
 delete mode 100644 apps/docs/scripts/check-python.mjs
 delete mode 100644 apps/docs/scripts/check-python.test.mjs
 delete mode 100644 apps/docs/scripts/check-site.mjs
 delete mode 100644 apps/docs/scripts/contracts.mjs
 delete mode 100644 apps/docs/scripts/contracts.test.mjs
 delete mode 100644 apps/docs/scripts/generate-api-reference.mjs
 delete mode 100644 apps/docs/scripts/generate-guides.mjs
 delete mode 100644 apps/docs/scripts/guides.json
 delete mode 100644 apps/docs/scripts/test_contract_routes.py
 delete mode 100644 apps/docs/scripts/verify-api-copy.mjs
 delete mode 100644 apps/docs/scripts/verify-contract-freshness.mjs
 delete mode 100644 apps/docs/scripts/verify-contract-routes.py
 delete mode 100644 apps/docs/scripts/verify-docs-facts.mjs
 delete mode 100644 apps/docs/scripts/verify-links.mjs
 delete mode 100644 apps/docs/scripts/verify-prerender.mjs
 delete mode 100644 apps/docs/source.config.ts
 delete mode 100644 apps/docs/tsconfig.json
 delete mode 100644 site/favicon.svg
 delete mode 100644 site/index.html
 delete mode 100644 site/openagentcore.svg
 delete mode 100644 site/styles.css

diff --git a/.gitignore b/.gitignore
index 2b3279650..3e8ddbf81 100644
--- a/.gitignore
+++ b/.gitignore
@@ -24,8 +24,3 @@ __pycache__/
 /.agents/
 /.issue-agent/
 /ISSUE_AGENT.md
-
-# Documentation site build output.
-/apps/docs/.next/
-/apps/docs/.source/
-/apps/docs/tsconfig.tsbuildinfo
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 2cd9664df..5b9300ef5 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -27,7 +27,7 @@ This guide owns how to work in the repository: documentation ownership, the repo
 | Operator installation, installation layout and configuration | [Installation](docs/getting-started/install.md), [installation options](docs/getting-started/install-options.md), [configuration](docs/configuration.md), [operations](docs/getting-started/operations.md) |
 | Core Web console server and sign-in | [Console server](docs/web/console-server.md) |
 | Web components, interaction and visual rules | [Web design](apps/web/DESIGN.md) and [Web product](apps/web/PRODUCT.md) |
-| Documentation website generation | [Docs app](apps/docs/README.md) |
+| Documentation website generation | Docs app |
 
 ## Repository boundary
 
diff --git a/Makefile b/Makefile
index 0fd6cef42..d36c81471 100644
--- a/Makefile
+++ b/Makefile
@@ -8,7 +8,7 @@ SWAG_VERSION ?= v1.16.4
 help:
 	@printf '%s\n' 'make build-core        Build standalone Core commands' 'make build-daemon      Build the execution daemon' 'make check             Run Core, persistence and runtime checks' 'See README.md for runtime prerequisites and deployment.'
 
-check: check-harness-catalog check-docs check-names check-distribution check-database check-sqlc check-go check-microsandbox-provider check-core check-claude-sdk check-web check-example check-mcode-harness
+check: check-harness-catalog check-names check-distribution check-database check-sqlc check-go check-microsandbox-provider check-core check-claude-sdk check-web check-example check-mcode-harness
 	@printf 'OpenAgentCore checks passed.\n'
 
 .PHONY: generate-harness-catalog check-harness-catalog
@@ -166,10 +166,6 @@ check-e2b-provider:
 	PYTHONDONTWRITEBYTECODE=1 $${OAC_TEST_E2B_SDK_PYTHON:-python3} -m unittest discover -s services/core/deploy/e2b -p '*_test.py'
 	PYTHONDONTWRITEBYTECODE=1 $${OAC_TEST_E2B_SDK_PYTHON:-python3} -m unittest discover -s services/core/tools/e2b-provider -p '*_test.py'
 
-.PHONY: check-docs
-check-docs: node-deps
-	pnpm check:docs
-
 # These packages are also exercised by check-core in the full gate.
 .PHONY: check-sandbox-provider-contract
 check-sandbox-provider-contract:
diff --git a/apps/docs/README.md b/apps/docs/README.md
deleted file mode 100644
index ab465bf51..000000000
--- a/apps/docs/README.md
+++ /dev/null
@@ -1,45 +0,0 @@
-# OpenAgentCore documentation site
-
-A separate Next.js/Fumadocs documentation app. It starts no Core, database or Runtime.
-
-The application reference reads the upstream-constrained public schema. Administration
-and machine references read their own local generated contracts. All three repository
-files currently declare Swagger 2.0; rendering supports Swagger 2 and OpenAPI 3.
-The documentation projection uses OpenAPI 3.1 null unions (including nullable references
-and compositions). Normalization changes documentation servers and bearer presentation, preserving operation
-prose, parameters, response schemas and credential boundaries. Examples use a reserved
-domain. The reference is read-only and must not collect keys or send execution requests.
-
-Guides are generated from the canonical repository docs, not maintained as a
-second manual. Edit those sources first, register pages in
-[guides.json](scripts/guides.json), then regenerate. Source/output hashes fail when
-copies drift; operation and route checks detect missing or mixed API surfaces.
-
-From the repository root:
-
-```sh
-pnpm install --frozen-lockfile
-pnpm --dir apps/docs generate
-pnpm --dir apps/docs verify
-pnpm --dir apps/docs test
-pnpm --dir apps/docs typecheck
-pnpm --dir apps/docs build
-pnpm --dir apps/docs start --port 4275
-```
-
-The route verifier uses the declared `js-yaml` dependency and Python standard library
-only; no ambient PyYAML installation is required. Python checks honor
-`OAC_TEST_OFFICIAL_SDK_PYTHON` when set, otherwise `python3`, and run with `-S`
-to keep site packages out of the gate.
-
-`make check-docs` runs the focused gate and is included in `make check`. After starting
-the built site, run `pnpm --dir apps/docs check:site http://127.0.0.1:4275` and inspect
-the guides in a browser with `pnpm --dir apps/docs check:browser http://127.0.0.1:4275`.
-The check uses installed Playwright Chromium (or `DOCS_BROWSER_EXECUTABLE`), checks
-for credential/request controls and external traffic, and accepts only a local origin.
-Set `DOCS_SITE_ORIGIN` only when preparing actual publication.
-Generation links to the recorded source revision; update that revision after rebasing
-onto later canonical guide changes. Never point samples at an actual deployment by default.
-
-Current supported behavior and acceptance evidence live in the
-[contract index](../../contracts/agents-api/README.md).
diff --git a/apps/docs/app/[[...slug]]/page.tsx b/apps/docs/app/[[...slug]]/page.tsx
deleted file mode 100644
index ce9b7c35f..000000000
--- a/apps/docs/app/[[...slug]]/page.tsx
+++ /dev/null
@@ -1,63 +0,0 @@
-import type { Metadata } from "next"
-import { notFound } from "next/navigation"
-import { ImageZoom } from "fumadocs-ui/components/image-zoom"
-import defaultMdxComponents from "fumadocs-ui/mdx"
-import { DocsBody, DocsDescription, DocsPage, DocsTitle } from "fumadocs-ui/page"
-import { APIPage } from "@/components/api-page"
-import { absoluteDocsUrl } from "@/lib/site"
-import { source } from "@/lib/source"
-
-function pageSlug(slug?: string[]) {
-  return slug ?? []
-}
-
-export default async function DocsPageRoute({
-  params,
-}: {
-  params: Promise<{ slug?: string[] }>
-}) {
-  const { slug } = await params
-  const page = source.getPage(pageSlug(slug))
-  if (!page) notFound()
-
-  const MDX = page.data.body
-  return (
-    <DocsPage toc={page.data.toc}>
-      <DocsTitle>{page.data.title}</DocsTitle>
-      <DocsDescription>{page.data.description}</DocsDescription>
-      <DocsBody>
-        <MDX
-          components={{
-            ...defaultMdxComponents,
-            // Generated API reference pages. Read-only: they render the contract.
-            APIPage,
-            // Screenshots open at full size; the prose column is too narrow to
-            // read a console capture at 1:1.
-            img: ImageZoom,
-
-          }}
-        />
-      </DocsBody>
-    </DocsPage>
-  )
-}
-
-export function generateStaticParams() {
-  return source.generateParams()
-}
-
-export async function generateMetadata({
-  params,
-}: {
-  params: Promise<{ slug?: string[] }>
-}): Promise<Metadata> {
-  const { slug } = await params
-  const slugs = pageSlug(slug)
-  const page = source.getPage(slugs)
-  if (!page) return {}
-  return {
-    title: page.data.title,
-    description: page.data.description,
-    alternates: { canonical: absoluteDocsUrl(page.url) },
-  }
-}
diff --git a/apps/docs/app/docs-providers.tsx b/apps/docs/app/docs-providers.tsx
deleted file mode 100644
index e70421d8b..000000000
--- a/apps/docs/app/docs-providers.tsx
+++ /dev/null
@@ -1,17 +0,0 @@
-"use client"
-
-import Image from "next/image"
-import Link from "next/link"
-import { useParams, usePathname, useRouter } from "next/navigation"
-import { FrameworkProvider, type Framework } from "fumadocs-core/framework"
-import { RootProvider } from "fumadocs-ui/provider/base"
-import type { ReactNode } from "react"
-
-export function DocsProviders({ children }: { children: ReactNode }) {
-  return (
-    <FrameworkProvider usePathname={usePathname} useParams={useParams} useRouter={useRouter}
-      Link={Link as Framework["Link"]} Image={Image as Framework["Image"]}>
-      <RootProvider search={{ enabled: false }}>{children}</RootProvider>
-    </FrameworkProvider>
-  )
-}
diff --git a/apps/docs/app/global.css b/apps/docs/app/global.css
deleted file mode 100644
index cc12ffffa..000000000
--- a/apps/docs/app/global.css
+++ /dev/null
@@ -1,103 +0,0 @@
-@import "tailwindcss";
-@import "fumadocs-ui/css/neutral.css";
-@import "fumadocs-ui/css/preset.css";
-@import "fumadocs-openapi/css/preset.css";
-
-:root {
-  --color-fd-primary: hsl(240 5.9% 10%);
-}
-
-/* Keep the active navigation item readable in dark mode. The neutral theme
-   defines a light primary color for dark surfaces; this override must be more
-   specific than the root token declared above. */
-.dark {
-  --color-fd-primary: hsl(0 0% 98%);
-  --color-fd-primary-foreground: hsl(240 5.9% 10%);
-}
-
-body {
-  font-family: ui-sans-serif, -apple-system, BlinkMacSystemFont, "Segoe UI",
-    "PingFang SC", "Hiragino Sans GB", "Microsoft YaHei", sans-serif;
-}
-
-/* Medium weight maps to regular in common CJK fonts. */
-.prose :where(strong):not(:where(.not-prose, .not-prose *)) {
-  font-weight: 700;
-}
-
-.prose pre {
-  min-width: 0;
-  width: 100%;
-}
-
-/* Code blocks wrap instead of scrolling sideways. */
-.prose pre,
-.prose pre code {
-  white-space: pre-wrap;
-  overflow-wrap: anywhere;
-}
-
-/* Inline code wraps only when a token cannot fit on a line of its own.
-   `overflow-wrap: anywhere` also reduces the element's min-content width to
-   roughly one character, and the automatic table layout then treats a column
-   as shrinkable to that width: a five-column table collapsed the first column
-   to 49px and split `environment.type` across five lines. `break-word` breaks
-   a long token as a last resort without affecting intrinsic sizing, so a
-   column keeps at least its longest parameter. */
-.prose :not(pre) > code {
-  white-space: pre-wrap;
-  overflow-wrap: break-word;
-}
-
-/* Give every table column a readable floor. The minimum content width of a
-   column with short words is about one character, while a column
-   holding a parameter such as `OAC_DATABASE_URL` cannot shrink below
-   that parameter. The automatic layout satisfies the wider columns first and
-   can crush a short-label column to a few characters per line. Five columns of
-   7rem still fit the narrowest content area the layout produces. */
-.prose table :is(th, td) {
-  min-width: 7rem;
-}
-
-/* Make the page-tree separators read as navigation groups, not page links. */
-#nd-sidebar [data-radix-scroll-area-viewport] p {
-  width: 100%;
-  margin-top: 1.25rem;
-  margin-bottom: 0.5rem;
-  padding: 0.35rem 0.5rem;
-  border-bottom: 1px solid var(--color-fd-border);
-  color: var(--color-fd-muted-foreground);
-  font-size: 0.7rem;
-  font-weight: 700;
-  letter-spacing: 0;
-  line-height: 1.25rem;
-}
-
-#nd-sidebar [data-radix-scroll-area-viewport] p:first-of-type {
-  margin-top: 0;
-}
-
-#nd-sidebar [data-radix-scroll-area-viewport] a[href^="/"] {
-  min-height: 2.25rem;
-  font-size: 0.875rem;
-}
-
-/* Keep the language menu compact inside the sidebar and on narrow screens. */
-[role="dialog"][data-side] {
-  width: min(11rem, calc(100vw - 2rem));
-  min-width: 0 !important;
-  /* Radix anchors this bottom-left menu at x=0; keep it off the viewport edge. */
-  margin-left: 0.75rem;
-}
-
-[role="dialog"][data-side] button {
-  width: 100%;
-}
-
-/* Text selection: tint the background with the theme's primary color and keep
-   the original text color, so contrast is inherited from body text in both
-   themes. Forcing --color-fd-primary-foreground here previously produced white
-   text on a mid-gray highlight in light mode. */
-::selection {
-  background: color-mix(in srgb, var(--color-fd-primary) 22%, transparent);
-}
diff --git a/apps/docs/app/icon.svg b/apps/docs/app/icon.svg
deleted file mode 100644
index dba271faf..000000000
--- a/apps/docs/app/icon.svg
+++ /dev/null
@@ -1,4 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="232 244 756 780" width="100" height="100">
-  <style>:root { color: #111; } @media (prefers-color-scheme: dark) { :root { color: #fff; } }</style>
-  <path d="M 588.500 247.500 C 482.038 258.932, 384.992 313.332, 317.342 399.500 C 241.675 495.881, 215.170 625.903, 247.575 741.747 C 285.409 876.998, 396.299 984.807, 527.500 1013.894 C 573.849 1024.169, 627.260 1025.623, 677 1017.964 C 780.514 1002.024, 876.331 944.643, 948.289 855.500 C 967.400 831.824, 987.086 801.273, 985.647 797.522 C 984.937 795.673, 904.376 744.245, 903.572 745.128 C 903.385 745.332, 901.319 749.325, 898.980 754 C 892.404 767.143, 880.011 786.376, 870.305 798.499 C 861.349 809.685, 841.417 831, 839.911 831 C 839.456 831, 838.926 782.513, 838.732 723.250 C 838.422 628.124, 838.183 614.283, 836.696 605.117 C 816.784 482.366, 703.587 402.140, 584.478 426.362 C 501.463 443.243, 431.784 511.254, 414 592.759 C 391.575 695.536, 444.831 796.779, 540 832.292 C 593.282 852.175, 661.017 845.557, 715.796 815.117 C 727.188 808.787, 741.006 799.755, 743.477 797.025 C 744.485 795.911, 745.690 795, 746.155 795 C 746.620 795, 747 817.488, 747 844.974 L 747 894.949 744.056 896.471 C 738.990 899.091, 717.003 907.070, 705.123 910.599 C 657.494 924.751, 607.787 926.746, 561.151 916.378 C 448.026 891.230, 357.961 799.046, 338.509 688.500 C 308.967 520.602, 428.454 363.695, 600.492 344.473 C 714.005 331.789, 825.907 394.237, 886.008 503.808 C 892.987 516.532, 893.355 516.997, 895.386 515.673 C 898.015 513.958, 931.494 493.905, 955.500 479.665 C 965.400 473.792, 974.115 468.594, 974.867 468.113 C 977.865 466.193, 950.810 421.104, 933.996 400 C 864.951 313.340, 778.345 263.056, 673 248.466 C 656.745 246.215, 605.885 245.634, 588.500 247.500 M 607.585 516.107 C 555.949 523.638, 513.408 564.461, 504.530 615 C 493.290 678.986, 530.313 736.554, 592.500 751.785 C 605.725 755.025, 637.608 754.155, 652.500 750.149 C 733.815 728.273, 770.193 636.477, 724.629 568.135 C 699.042 529.755, 653.329 509.435, 607.585 516.107" fill="currentColor" fill-rule="evenodd"/>
-</svg>
diff --git a/apps/docs/app/layout.config.tsx b/apps/docs/app/layout.config.tsx
deleted file mode 100644
index 9ba8db958..000000000
--- a/apps/docs/app/layout.config.tsx
+++ /dev/null
@@ -1,10 +0,0 @@
-import type { BaseLayoutProps } from "fumadocs-ui/layouts/shared"
-
-export const baseOptions: BaseLayoutProps = {
-  nav: {
-    title: <><img src="/openagentcore.svg" alt="" width={24} height={24} className="dark:invert" /><span>OpenAgentCore Docs</span></>,
-  },
-  searchToggle: {
-    enabled: false,
-  },
-}
diff --git a/apps/docs/app/layout.tsx b/apps/docs/app/layout.tsx
deleted file mode 100644
index a14a4972e..000000000
--- a/apps/docs/app/layout.tsx
+++ /dev/null
@@ -1,24 +0,0 @@
-import "./global.css"
-import type { Metadata } from "next"
-import type { ReactNode } from "react"
-import { DocsLayout } from "fumadocs-ui/layouts/docs"
-import { baseOptions } from "./layout.config"
-import { source } from "@/lib/source"
-import { DocsProviders } from "./docs-providers"
-
-export const metadata: Metadata = {
-  title: { template: "%s | OpenAgentCore Docs", default: "OpenAgentCore Docs" },
-  description: "Documentation for OpenAgentCore.",
-}
-
-export default function RootLayout({ children }: { children: ReactNode }) {
-  return (
-    <html lang="en" suppressHydrationWarning>
-      <body suppressHydrationWarning>
-        <DocsProviders>
-          <DocsLayout tree={source.pageTree} {...baseOptions}>{children}</DocsLayout>
-        </DocsProviders>
-      </body>
-    </html>
-  )
-}
diff --git a/apps/docs/app/not-found.tsx b/apps/docs/app/not-found.tsx
deleted file mode 100644
index 50fb7d8d0..000000000
--- a/apps/docs/app/not-found.tsx
+++ /dev/null
@@ -1,11 +0,0 @@
-import Link from "next/link"
-
-export default function NotFound() {
-  return (
-    <main className="flex min-h-screen flex-col items-center justify-center gap-4 px-4 py-24 text-center">
-      <h1 className="text-3xl font-semibold">Page not found</h1>
-      <p className="text-fd-muted-foreground">The requested documentation page does not exist.</p>
-      <Link href="/">Back to the manual</Link>
-    </main>
-  )
-}
diff --git a/apps/docs/app/sitemap.ts b/apps/docs/app/sitemap.ts
deleted file mode 100644
index bb002fb83..000000000
--- a/apps/docs/app/sitemap.ts
+++ /dev/null
@@ -1,7 +0,0 @@
-import type { MetadataRoute } from "next"
-import { absoluteDocsUrl } from "@/lib/site"
-import { source } from "@/lib/source"
-
-export default function sitemap(): MetadataRoute.Sitemap {
-  return source.getPages().map(page => ({ url: absoluteDocsUrl(page.url) }))
-}
diff --git a/apps/docs/components/api-page.tsx b/apps/docs/components/api-page.tsx
deleted file mode 100644
index 3976f2a65..000000000
--- a/apps/docs/components/api-page.tsx
+++ /dev/null
@@ -1,13 +0,0 @@
-import { APIPage as OpenAPIPage, type ApiPageProps } from "fumadocs-openapi/ui"
-import { loadSurface } from "@/lib/openapi"
-
-// Registered as `APIPage` for the MDX components map. The generated pages name
-// their API surface by id; the contract itself is loaded through the server
-// instance so the rendered schema and the generated prose stay in step.
-export async function APIPage({
-  document,
-  ...props
-}: Omit<ApiPageProps, "document"> & { document: string }) {
-  // References never collect credentials or dispatch requests from the browser.
-  return <OpenAPIPage {...props} document={await loadSurface(document)} disablePlayground={true} />
-}
diff --git a/apps/docs/content/docs/admin-api.mdx b/apps/docs/content/docs/admin-api.mdx
deleted file mode 100644
index 5d33fa897..000000000
--- a/apps/docs/content/docs/admin-api.mdx
+++ /dev/null
@@ -1,200 +0,0 @@
----
-title: "Core administration API"
-description: "Management operations and their server-side credential boundary."
----
-
-Core Web is an administrator console over `/core/v1`, authorized by the Core key:
-resource inspection, Project and key management, credential issuance, audit, usage
-and sandbox operations. It never calls `/v1` or `/api/v1`, and has no Agent
-execution, copy or arbitrary asset editing operation.
-
-Core request failures use the [Core administration error envelope](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/core-errors.md),
-including optional typed safe details. Console sign-in endpoints retain their
-separate error shape described below.
-
-## Browser to console
-
-The browser uses the console's own origin and signs in with the
-[Core key](/troubleshooting#core-key):
-
-| Method and route | Request | Result |
-| --- | --- | --- |
-| `GET /console/auth` | No body | `200 {"mode":"login"}` or `200 {"mode":"authenticated"}` |
-| `POST /console/auth/login` | `Content-Type: application/json`, body `{"core_key":"…"}`; other members are rejected | `200 {"mode":"authenticated"}` and an HttpOnly, SameSite=Strict session cookie (Secure over HTTPS) |
-| `POST /console/auth/logout` | No credential payload | `200 {"mode":"login"}`; clears the cookie and the server-side session |
-| `GET /console/config` | Signed-in session | `node_installer`, `node_installer_sha256`, `node_artifacts`: the providers (`docker`, `microsandbox`) whose node assets this console holds |
-
-Sign-in errors use the console's `{"error": "…"}` envelope: 400 for a malformed
-body, 401 for a wrong key, 415 for a non-JSON body, 429 with `Retry-After` when
-failed attempts are limited or sign-in is busy, and 503 when the console cannot
-start a session. The console compares the submitted key with its configured Core
-key in constant time and never logs or returns it. Only failed attempts count
-toward the limit; the correct key signs in even while failures are limited. The
-console refuses to start with a Core key shorter than 32 characters. Sessions live only in the console's memory; a console restart
-or Core key rotation requires signing in again. There are no console accounts,
-usernames, passwords, account setup or Basic authentication.
-
-Use same-origin browser requests and cookies. Mutations require the same-origin
-request checks; never put the Core key in JavaScript or browser storage.
-
-### Managed domain setup
-
-This console-local surface uses the signed-in session and the same-origin checks
-above. It forwards to the installation controller, not Core.
-
-| Method and route | Request | Result |
-| --- | --- | --- |
-| `GET /console/installation/domain` | No body | Domain setup status |
-| `POST /console/installation/domain` | `{"hostname":"core.example.com"}`; optional `confirm_public_url_change` equal to `https://core.example.com` | `202` and the current status; one asynchronous installer operation |
-
-Status contains `supported`, `state` (`unconfigured`, `checking`, `applying`,
-`ready`, `failed`), nullable `public_url`, `target_url` and `message`. External
-proxy installations report `supported: false`. A POST with existing address
-bindings requires explicit confirmation and otherwise returns `409` with code
-`public_url_confirmation_required`. Other rejections include invalid hostnames,
-pending configuration edits and another installation operation holding the lock.
-Action errors use `{"error":{"code":"…","message":"…"}}`; console authentication
-failures retain the sign-in error shape above.
-
-Poll the same-origin GET while preparing. Applying the change restarts Web and
-ends its sign-in sessions; provide a link to the submitted HTTPS origin for a
-fresh login. A dropped request or cross-origin browser probe does not prove
-success. The [installer contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/deploy/install/README.md#managed-https) owns
-certificate verification, locking, retry and rollback.
-
-## Console to Core
-
-After sign-in and the same-origin checks, the console server forwards every
-`/core/v1/*` request with its private Core key as the Bearer credential; Core
-alone decides whether the route exists. It removes browser Authorization and
-forwarding-sensitive headers, and sets `X-Core-Console-Actor: console`. Core
-records the header as the audit `actor_label`. The label is caller-asserted and
-display-only: direct Core key scripts normally send none, which records an empty
-label, but could set any value. Never use it for authorization or as proof of
-origin.
-
-Web calls Core only through the typed Core clients in `packages/agents-client`:
-[AdminClient](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/packages/agents-client/src/admin-client.ts) (`/core/v1`),
-`SandboxAdminClient` (`/core/v1/sandbox`) and `CoreMetricsClient`
-(`/core/v1/metrics`). See [the complete administrator reference](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/admin-api.md)
-for methods, fields, filters, pagination and response shapes.
-Routes below are relative to `/core/v1`:
-
-| Workflow | Routes |
-| --- | --- |
-| Projects | `GET/POST /projects`, `POST /projects/{id}`, `POST /projects/{id}/archive` |
-| Project keys | `GET/POST /projects/{id}/keys`, `DELETE /projects/{id}/keys/{key_id}` |
-| Resource lists/details/deletion | `/projects/{id}/agents`, `/sessions`, `/environment-templates`, `/skills`, `/files`, `/vaults`, including the documented nested reads |
-| Asset ownership | `GET /projects/{id}/resource-owners` with batched resource IDs |
-| Key operation history | `GET /projects/{id}/write-operations` with key/resource/time filters |
-| Executor credentials | `GET/POST /projects/{id}/environments/{environment_id}/executor-credentials`, `DELETE …/executor-credentials/{key_id}` ([contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-executor-credentials.md)) |
-| Deployment model configuration | `GET /harnesses`, `GET/PUT/DELETE /harnesses/{harness}/model-configuration`; the key is write-only ([contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/model-execution.md#deployment-defaults)) |
-| Usage and health | `GET /summary`, `/sandbox/runtime-observations`, `/metrics` |
-| Administrator audit | `GET /audit-log`; deployment-wide entries have `project_id: null` |
-
-A Project UUID in a management path selects the target; it is not a credential.
-API-key plaintext is returned only by successful issuance, so display it once and
-never cache it. Reconcile uncertain issuance before explicitly issuing another key.
-Deleted/revoked resources retain their audit records. Historical unknown ownership
-stays null. Session usage grouped by key belongs to the Session's creation key;
-it is operational attribution, not per-key billing.
-
-## Sandbox administration
-
-The [deployment configuration contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/sandbox-deployment.md),
-[nodes guide](/hosted-providers)
-and [generated OpenAPI](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/core.openapi.yaml)
-define deployment and node operations:
-
-- `GET/POST/PUT /core/v1/sandbox/deployment` and
-  `POST/DELETE /core/v1/sandbox/deployment/reset`.
-- `GET /core/v1/sandbox/nodes`, `PATCH/DELETE /core/v1/sandbox/nodes/{node_id}`,
-  and `GET /core/v1/sandbox/nodes/{node_id}/allocations`.
-- `POST /core/v1/sandbox/enrollment-tokens` for a one-time node installation command.
-  Its non-secret `enrollment_id` reappears on the node that command registers.
-
-PostgreSQL owns one provider, per-sandbox resource specification and immutable
-Runtime selection. POST initializes it and PUT updates the same provider; both
-require the observed `expected_generation`, including zero at first setup. Requests carry `resources` and, for Docker/microsandbox,
-`runtime`; safe responses return `specification` and `specification_digest`.
-Response `resources.allocations` and `resources.pending` are cleanup counts, not
-CPU, memory or disk settings. E2B accepts a write-only key and exact template build
-instead of a node Runtime release, and provisions without a node installation. E2B
-may omit `resources` to adopt the validated build's CPU and memory. An E2B-compatible
-service may also supply paired `e2b.api_url` and `e2b.domain`; omitted selectors
-use official E2B. Responses expose these addresses but never the key, and changing
-them requires the same drained maintenance transition as changing the template.
-Responses show
-the build as read at selection time in `e2b.template_build`. Microsandbox responses
-return its idle `suspension` policy; other providers return null.
-
-Same-team E2B updates apply online after verification. Existing sandboxes retain
-their generation and use the committed credential for management; omitting the key
-preserves it, while explicitly submitting even the same key verifies a replacement.
-Node-provider updates still require zero retained/pending resources and no reset.
-Changing backend or E2B team requires explicit durable reset before a new POST.
-Auto archives idle/queued/suspended hosted Sessions, waits for started work and
-file writes, and escalates at its persisted deadline; force requests cancellation
-and verified cleanup. The deployment response supplies the authoritative
-`reset.remaining` partition and offline-node subset; Web must not derive either
-from independently loaded lists. The separate `rollout.state` describes target
-preparation; old-generation resource counts alone do not imply active preparation.
-Poll rapidly while reset is active or rollout is preparing. Node `ready_generation`
-is a durable serving pin, not proof of current connectivity. Target unknown, failed
-or update-required state does not by itself invalidate confirmed old-generation
-service; consume Core's connection/provider facts separately.
-
-Administrators may [archive an individual hosted Session](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/admin-api.md#administrative-session-archive)
-at the current generation without reset. History and persisted Files/Artifacts
-survive; unpersisted workspace is lost and the original Session cannot resume.
-Cancel reset stops further archives, not cleanup already requested. After zero
-resources Core clears the selection and advances generation; configure again using
-that new generation. Never automatically replay an uncertain write.
-Public Environment Templates, the `/v1` contract and
-caller-owned `self_hosted` provisioning remain unchanged.
-
-`GET /api/v1/sandbox-node/configuration` uses an enrollment Bearer token, or a
-retained node Bearer credential with `X-OAC-Node-ID`. This read does not consume
-enrollment. Retained matching nodes can read their configuration during reset.
-Installers must verify the returned generation, specification digest and Runtime
-before registration; local files cannot override the saved limits. A mismatch
-returns `sandbox_specification_mismatch` without replacing node state.
-
-Node configuration, enrollment, identity and connection routes live under
-`/api/v1/sandbox-node`, beside the daemon's `/api/v1/agent-daemon`. The reverse
-proxy sends `/api/v1` directly to Core; the console returns 404 for it and never
-forwards machine traffic. These routes use their own credentials, do not inherit a
-browser login and gain no management authority. E2B credentials are absent
-from node configuration and safe deployment views.
-
-## Frontend handoff and errors
-
-Frontend screen implementation is owned by the separate frontend task. The
-backend provides the `/core/v1` contract, the typed Core clients and the console
-proxy; backend tests do not qualify the screens.
-
-The console returns 404 for `/v1`, `/api/v1` and old `/console/api-keys` routes,
-even with an explicit application or machine Bearer credential. Invalid
-Origin/Host requests are rejected; unavailable Core or rejected upstream redirects
-return 502. Console authentication uses its own error envelope. Management resource
-errors and deletion constraints are documented in the administrator reference and
-generated schema; do not interpret every empty or failed read as an absent resource.
-
-## Core metrics
-
-`GET /core/v1/metrics?range=1h|6h|24h|7d` returns Core process, execution
-queue/slots, PostgreSQL and background-job measurements. It requires the Core key,
-rejects arbitrary query filters and never grants
-Agent execution access. See the [exact measurement contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/core-metrics.md)
-for complete buckets, null values, units and process-local retention. Frontend
-implementation is maintained separately; this backend change does not modify
-Agent metrics or the public Agent API.
-
-## Node host history
-
-The Core key reads a node and its host history through
-`GET /core/v1/sandbox/nodes/{node_id}?range=1h|6h|24h`. See the
-[node host history contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/node-host-history.md)
-for nullable observations, freshness and aggregation. The node list is unchanged.
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/api/web-management.md)
diff --git a/apps/docs/content/docs/agents-and-tools.mdx b/apps/docs/content/docs/agents-and-tools.mdx
deleted file mode 100644
index ef385bdac..000000000
--- a/apps/docs/content/docs/agents-and-tools.mdx
+++ /dev/null
@@ -1,125 +0,0 @@
----
-title: "Agents, tools and harnesses"
-description: "Native harness tools, shared declarations and the limits of execution support."
----
-
-Assessed against Core `206474a4c10901442b1faa094281bfb5559082b5` on 2026-09-22.
-The contract remains [OpenAI Python 3.13.0 at `d7c41ef`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/upstream.json), Beta
-`agents=v1`. This matrix records the bounded execution/tools milestone. It does not
-establish complete protocol compatibility; the remaining limits below stay open.
-
-**Implemented** means current source and controlled checks support the operation.
-**Qualified** additionally identifies a real public Core/PostgreSQL/daemon/native
-model workflow in the evidence register below. **Unsupported** describes a current
-admission/native limitation, not a restriction in the official contract.
-**Unverified** means evidence does not establish the stated semantics or profile.
-Qualification never extends automatically to another model, placement or combination.
-
-## Operation matrix
-
-All function rows refer to application-defined functions. Native workspace tools
-and Environment Plugin MCP have separate inventories and qualification.
-
-| Operation | Implemented behavior and real qualification | Unsupported or unverified boundary |
-| --- | --- | --- |
-| Initial message input, `sessions.create` | String input and ordered user-message arrays share atomic admission. Codex/Claude text and inline image execution: M1/M2; ordinary MiniMax text: M1/P1. [Input contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/message-input.md), [initial parser](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/api/session_initial_input.go). | Whitespace-only text is admitted verbatim for Codex and rejected at admission for Claude SDK and MiniMax Code ([text content](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/message-input.md#text-content)). Empty parts beside text (SES-08) and local size-limit parity need upstream evidence. Inline PNG/JPEG is qualified on `none`, Core-managed Docker `openai_hosted` and `self_hosted`; MiniMax images and remote URLs remain gaps. |
-| Prepared and active messages, `sessions.events.create` | Ordered `input_text`/`input_image` arrays retain original content and distinct public user Items. HTTP 202 confirms persistence; native receipts establish application. Initial/prepared/active Docker PNG/JPEG: M2; active PNG on `none`: M1. [Shared admission](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/api/inputs.go). | Codex flattens native messages with blank-line separators. Claude can fold or queue native turns; it does not promise Codex's same-native-turn behavior. Public durability does not prove native consumption. Claude SDK and MiniMax Code reject messages without an image or non-whitespace text at admission (`unsupported_or_invalid_configuration`); Codex delivers them unchanged. |
-| Structured output, `agent.text.format` | Save/inherit/freeze `{type:json_schema,schema:...}`. Claude SDK object-root, single Agent, medium verbosity, ordinary functions returning text: S1 (`none`) and S2 (Docker, including prepared/active input and Files/Artifacts), plus [self-hosted execution and cold continuation](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-capabilities-qualification.md). Native final text is retained unchanged; its stream follows the official message sequence with the whole text in one `output_text.delta` ([item serialization](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/history-events-usage.md#item-serialization-2026-09-23)). [Contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/structured-output.md), [profile](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/engine/claude.go). | An explicit non-object root type is a protocol error for every harness ([validation](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/official-semantics-alignment.md#agent-configuration-validation--september-23)). Codex/MiniMax, schemas without an object root, schema numbers changed by binary64, Skills/Plugins, MCP, Subagent and discovery combinations reject execution. No output repair, coercion or extra model loop. Arbitrary schema dialects are unverified. |
-| Function configuration, saved/inline Agents | Required name/description/schema; `defer_loading` defaults false. Protocol errors, repeated names and explicit non-object root types reject with the official fields ([validation](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/official-semantics-alignment.md#agent-configuration-validation--september-23)). Saved references resolve into an immutable Session snapshot. Codex/Claude real calls: F1/F2/M2/S1/S2. [Parser](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/api/function_configuration.go), [saved tools](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/api/saved_tools.go). | MiniMax public functions reject. Claude requires an explicit object root. Local nonblank/512-byte name and 64-definition Session bounds are compatibility gaps. Saving configuration alone does not qualify execution. |
-| Function-result admission, `events.create` | Required `turn_id`, `call_id`, `success`; optional nullable `error` and `output`. Output is string or ordered text/image content. Scoped atomic batches retain field presence, original content and retry identity in storage; public result Items and events always carry `output` and `error`, null when not submitted ([item serialization](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/history-events-usage.md#item-serialization-2026-09-23)). Same result retries are accepted; changed results and results after cancellation return 409 `conflict_error`, including after terminal state. In the caller's Session, an unknown call or a call of another Turn returns 400 `invalid_request_error` without changing the pending action; missing and foreign Sessions stay 404 ([error rows](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/official-semantics-alignment.md#session-input-conflicts-and-result-targets--september-23)). F1/F2/M2 plus [controlled SDK/raw checks](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/tests/official_function_inputs.py). [Parser](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/api/function_inputs.go), [Store](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/store/function_inputs.go). | Admission is separate from application and public Item publication. Invalid or unqualified content cannot consume a pending call. Core messages omit the call and executor IDs that official messages name; hosted defaults and publication timing remain unverified. |
-| Function text results and native application | Codex waits for a matching live root dynamic-tool completion; Claude waits for a matching live root native tool result. Text/error results, retry/conflict, cancellation and cold continuation: F1/F2. [Receipt contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/function-result-images.md). | Transport writes alone do not confirm application. Confirmation is not provider consumption, crash recovery or exactly-once external effects. No automatic result replay. |
-| Function image results | Successful ordered inline PNG/JPEG with text, large PNG and image-only JPEG: Codex/Claude `none` F1/F2; Docker M2. Public Items retain submitted bytes. Codex receipt regression: F2. | Claude rejects failed images and remote references before persistence; native resizing may change its image bytes. Self-hosted Claude image results use the same native path; see the current [qualification record](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-capabilities-qualification.md). MiniMax functions remain unqualified. Other Codex image/error/reference combinations cannot be inferred from successful-inline evidence. |
-| Deferred function discovery | Type-only `tool_search` plus mixed eager/deferred functions: Claude SDK 0.3.269/native 2.1.269, Kimi K3, single Agent, medium, `none`, text results; text and PNG input D1. Native provider observations establish lazy schema loading for D1. [Self-hosted workspace callback, continuation and cancellation](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-capabilities-qualification.md) use the same native path; they do not add model-request observer evidence. [Contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/tool-search.md). | A repeated `tool_search` is a protocol error. Codex/MiniMax discovery, search-only/missing-search, workspace with Skills/Plugins, MCP, structured-output and Subagent combinations remain gaps. Opaque native policy changes lack a reliable pre-input deferral signal. Saved tools include `tool_search`; the pinned Session response union excludes it. Exact hosted projection is unverified. |
-| Explicit disabled search/PTC | Saved and inline `web_search.mode=disabled` and `programmatic_tool_calling.enabled=false`; shared native controls on initial and cold execution. All three harnesses on `none`: P1, including native inventory/control evidence. [Contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/tool-policy.md), [parser](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/api/disabled_tools.go). | Unsupported explicit enablement rejects at Session admission; saved Agents keep every pinned search mode as resource data (TV-05), and Sessions from such Agents reject unless they replace the tools. A repeated `web_search` is a protocol error. Omission retains approved native behavior, which does not establish official default-on PTC parity. Enabled search and default/error parity remain gaps; unrelated native utilities are not implicitly removed. |
-| Agent service-origin MCP | Implemented Codex/Claude HTTP `none` profiles, anonymous/static bearer, scoped Vault selection and native `mcp_call` Items. [Configuration and qualification limits](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/README.md#http-mcp-execution), [profiles](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/engine/profile.go). | This closure batch does not requalify MCP/provider combinations. MiniMax, self-hosted/hosted service-origin MCP, OAuth, nonempty inline headers/metadata and other transports reject. Environment origin follows the separate row below. Claude requires a static connected inventory; original MCP-envelope fidelity and continuing server health are unverified. |
-| Agent Environment-origin MCP | Public HTTP declarations reuse installed MCP's effective Runtime bindings; attached Vault selection and native observations remain common. [Origin and Harness matrix](/environments-and-files#public-mcp-connection-origin), [real qualification](https://github.com/MiniMax-AI/OpenAgentCore/blob/e974a7f880a2eb799f0dd39e6ba0870462854a53/contracts/agents-api/public-mcp-qualification.md). | Requires a workspace and enabled network. MiniMax rejects every non-null allowlist and required initialization. No service-origin relocation, automatic fallback or credential copy into native profiles. |
-| Environment Plugin MCP/native tools | Separate [Docker Plugin transport matrix](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-templates.md#environment-origin-mcp-plugins) and [V1 deployment evidence](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/user-managed-runtime-v1.md). Native tools stay within the existing colocated Runtime. | Plugin MCP is not Agent service-origin MCP or a public function action. No new optional cross-product is qualified here. Native utility inventories need not be identical. |
-| Required action: `function_call` | Session GET/list and Session SSE expose persisted `{arguments,call_id,name,turn_id,type}`. Actions remain pending until native application or cancellation/terminal settlement. [Projection](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/store/function_state.go), [confirmation](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/store/function_results.go); real handling F1/F2/M2/S1/S2/D1; explicit client disconnect/query/reconnect: F3. | Function-call history is not pending-state authority. Client reconnect does not replay events or redo external application effects. |
-| Required action: `environment_connection` | Offline waiting input exposes `{environment_id,type}` before Turn creation. Connect the exact Session Environment through our scoped daemon enrollment. Three-harness Docker/E2B execution: E1; explicit initial pending-input/query/connection/native completion: E2; expiry: [controlled initial-input test](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/tests/official_self_hosted_initial.py). | Idle offline Sessions without pending input request nothing. Registration alone is not connectivity or native readiness. Stock `exec-server`/Noise transport is outside the approved V1 route. Exact upstream registration/action-removal timing remains unverified. |
-| Stream disconnect and execution loss | SSE is live-only. Reconnect, buffer events, retrieve Session/Turn/Items and deduplicate Item IDs. Worker recovery fails previously claimed work without replay; queued work can remain. [Recovery contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/README.md#public-execution-admission), [connection reconciliation](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/store/environment_connection_recovery.go). | Client disconnect and daemon/Core loss are different cases. F3 qualifies client-stream loss and continued pending function handling; F2 qualifies native process loss with an unapplied saved result. Neither promises replay or recovery of unknown external effects. |
-
-## Required-action recovery contract
-
-The fixed [Session union](https://github.com/openai/openai-python/blob/d7c41efee1b0802b79f3f88a678ef2052b06e9ce/src/openai/types/beta/agent_session.py)
-defines both variants. The official [Functions](https://developers.openai.com/api/docs/guides/agents-api/tools/functions)
-and [Manage sessions](https://developers.openai.com/api/docs/guides/agents-api/sessions/manage)
-guides, checked on 2026-09-22, direct clients to retrieve `required_actions` after
-restart or stream loss. A historical `function_call` Item alone cannot establish
-that a result is still pending. The fixed SDK governs field/type compatibility;
-current prose does not silently change that pin.
-
-For a pending function, use the returned Session, Turn and call identity. If the
-application already performed the function, keep and submit that saved result;
-do not run an external effect again merely because an action remains visible.
-Core's acknowledgement boundary is native application. For an environment action,
-connect its exact Environment using the existing enrollment authorization.
-[Connection observations](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/store/environment_connections.go)
-fence stale generations; transport connection can clear pre-Turn activity before
-native preparation. Neither registration nor an action disappearing proves that
-a model ran successfully. Query the matching Turn and Items for its outcome.
-
-Two timing questions remain open. Repeated `requires_action` notification order
-and acknowledgement timing are local implementation choices, not proven upstream
-semantics. Also, an admitted result that is cancelled before native observation
-can remain internally saved without a public output Item or `item.added`.
-[Item publication](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/store/item_projection.go) and
-[the existing coverage record](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/README.md#public-function-configuration) preserve
-this gap. Successful retry cannot manufacture the missing observation or establish
-that the model consumed the result.
-
-## Evidence register
-
-Real records below use fixed SDK 3.13.0 and raw HTTP through Core, dedicated
-PostgreSQL, daemon and native harness. Evidence is private under `~/.parsar/remediation/` on `zju_a100_2` and the
-development host. Paths containing `validated/` or `server-evidence/` identify
-downloaded local mirrors; summary files may also live only on the development
-host. Locators identify retained evidence without publishing credentials or
-private launch configuration. Revisions identify the accepted change,
-not a claim that every historical workflow was rerun at the current baseline.
-
-| ID | Exact evidence and accepted scope |
-| --- | --- |
-| M1 | `20260922/message-image-input/public-codex-reviewed.log` (59.41s), `public-claude-reviewed.log` (79.52s), `public-mcode-network-fixed.log` (48.95s); [PR #12](https://github.com/MiniMax-AI/OpenAgentCore/pull/12), merge `37a2923`. Codex/Claude Kimi K3 PNG initial/active inputs, receipts, retries, cancellation, cold continuation and isolation; MiniMax M2.7 ordinary text regression. |
-| M2 | `20260922/workspace-images/validation-summary.json`; Codex `public-run-_lr5uiy_`, Claude `public-run-sb65p9e9`; candidate `2c295116d66ed9aafc808ec49a8cb6dcb5c674c2`, merge `1adb2489bc3415039440224e9a7905c53e68a557` ([#17](https://github.com/MiniMax-AI/OpenAgentCore/pull/17)). Kimi K3, Codex 0.153.4, Claude SDK 0.3.269/native 2.1.269; Docker seven-Turn image/workspace workflow. Codex's receipt conclusion is superseded by F2. |
-| F1 | `20260922/function-result-images/validation-summary.json`, `validated/function-image-public-2567456666/public.json`; candidate `d3cdb225bc7628b968b76c7e1b400101894ce8cd`, merge `fd23f169e1ede1b2f1c39a1d9dcce71886e3c006` ([#16](https://github.com/MiniMax-AI/OpenAgentCore/pull/16)). Claude SDK 0.3.269/native 2.1.269 with Kimi K3 on `none`; success PNG/JPEG, failed text, retries, cancellation, history continuation. Earlier Codex transport-only evidence does not qualify current receipts. |
-| F2 | `20260922/function-result-receipts/validation-summary.json`, `candidate-public-owner-sdk.log`; hosted `public-run-4fn70foy` (104.13s), `none` `function-image-public-945075091` (83.918s). Candidate `6dceb98e1c56469fcc70cd82025ce77fc870ed3d`, merge `206474a4c10901442b1faa094281bfb5559082b5` ([#20](https://github.com/MiniMax-AI/OpenAgentCore/pull/20)); real Kimi, Codex 0.153.4. Qualifies native receipts, not completed provider consumption. |
-| F3 | `20260922/execution-tools-closure/pending-actions/validation-summary.json`; Codex `codex/public-run-8gexf5a8` (65.58s), Claude `claude_sdk/public-run-5f2tr7e_` (74.33s), production source `206474a`. The same [public verifier](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/tests/official_pending_actions_native.py) checks disconnected-client pending queries, success/error/cancel, original results, target isolation, retry/conflict and no implicit call replay with real Kimi on Docker. No Core restart or native-loss injection is claimed by these runs. |
-| S1 | `20260922/structured-output/acceptance-summary.json`, `structured-public-1905281777/public.json`; real candidate `7f533d46c472f3cdf7c16ce9471c225a2ba7eded`, merge `8716e699dbc34904499c94b6b0b03857bbebfaad` ([#11](https://github.com/MiniMax-AI/OpenAgentCore/pull/11)). Claude/Kimi `none` schema/function execution and cold continuation. Schema-specific active steering was not separately qualified here. |
-| S2 | `20260922/hosted-structured-output/validation-summary.json`, `validated/public-inline.log`, `public-run-qvq3csf1` (186.09s); candidate `f6d2c3f2a1dc2ff5f177213bd2b20d78496011d0`, merge `aa85d8ecc60e0a8b7f2494b73caa81216ee197e2` ([#18](https://github.com/MiniMax-AI/OpenAgentCore/pull/18)). Claude SDK 0.3.269/native 2.1.269, real Kimi; Docker saved/inline schema, prepared/active input, native files and four completed structured answers. |
-| D1 | `20260922/deferred-tools/tool-search-public-2039155387/public.json`, `public-image-isolated-tests.log` (86.71s); merge `178507ae7a63d4068e1e82bef9cd256ba398ae00` ([#13](https://github.com/MiniMax-AI/OpenAgentCore/pull/13)). Claude SDK 0.3.269/native 2.1.269/Kimi K3 `none`; text results with initial/active PNGs, cancellation and cold continuation. `claude-native-1790052750` separately records provider schema inventories and native feasibility. |
-| P1 | `20260922/tool-policy/acceptance.json`, `server-evidence/tool-policy-{codex-2495445746,claude_sdk-2539346823,mcode-3747575401}/public.json`; candidate `eeb432c7495265ae3a9309e32f5b4323611c3245`, merge `4b8754a6eda6696d9b18eb8d583953ac16c6800f` ([#14](https://github.com/MiniMax-AI/OpenAgentCore/pull/14)). Codex/Claude Kimi K3, MiniMax M2.7; four `none` Sessions per harness, native disable controls and cold continuation. |
-| E1 | `20260921/self-hosted-onboarding/{source-candidate.json,source-verified.json,live,live-e2b}`; candidate `8f0cd2530d7b58cb7fb3ea124a1fc43dacecca36`. [Exact Docker/E2B run paths and limits](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/user-managed-runtime-v1.md#evidence-and-verification-boundaries): Codex Kimi K3 Responses, Claude Kimi K3 Anthropic-compatible API, MiniMax M2.7, immutable Linux amd64 Runtime builds. Native execution, restart/history, cancellation, Files/Artifacts and isolation; shared credential lifecycle evidence is not a separate live rotation run for every E2B profile. |
-| E2 | `20260922/execution-tools-closure/environment-actions/result.json` contains Codex/Claude Kimi passes (13 checks each) and the retained MiniMax direct-network failure; `mcode-relay-retry/result.json` separately passes MiniMax M2.7 (13 checks) after correcting provider routing. Source `206474a`; same shared SDK/raw workflow, isolated Core/PostgreSQL and user-managed Docker. Covers initial creation SSE, client disconnect, exact pending Environment/no Turn or Items, scoped enrollment, one actual completed model Turn and creation retries preserving history. This is connection-action qualification, not another full lifecycle or E2B regression. |
-
-Controlled tests establish parser, projection, atomicity and race behavior; native
-feasibility probes establish only feasibility. Neither replaces the real records.
-Failed setup, provider and assertion runs remain failures with their original
-scope. The unchanged gate requirements and independent review apply to this batch.
-
-## Milestone closure and remaining limits
-
-1. **Principal function recovery:** F3 directly verifies live client-stream loss
-   while a function is pending on Codex and Claude, authoritative queries, exact
-   targeting, rejection without mutation, original results, retry/conflict,
-   application, cancellation and isolation. F2 separately establishes truthful
-   native-loss settlement without replay. No active execution recovery is promised.
-2. **Principal environment recovery:** E2 explicitly verifies pending
-   `environment_connection` recovery and single initial execution on all three
-   harnesses. E1 retains broader deployment/history/isolation qualification.
-   Registration, connection and preparation remain distinct; no exact upstream
-   timing or arbitrary-provider qualification is inferred.
-3. **Recorded nonblocking timing:** an accepted result cancelled before native
-   application may lack a public result Item. The submitted data remains durable;
-   F2 confirms that native loss does not turn unknown delivery into Applied. The
-   fixed sources do not establish the publication point for this interleaving.
-   Keep it queued rather than inventing a public state or rewriting safe receipt
-   ownership. This limited timing question is not accepted protocol parity and
-   does not invalidate F3's principal pending-result workflow.
-
-Approved native capability differences (including default PTC), unsupported optional
-combinations, arbitrary provider parity and low-frequency error/default edge cases
-remain separate limitations. They do not authorize silently relabeling an unproved
-principal workflow as deferred. OAuth, full Usage, release publication, new tool
-kinds and new execution loops are outside this closure batch.
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/execution-tools.md)
diff --git a/apps/docs/content/docs/api-reference/agents.mdx b/apps/docs/content/docs/api-reference/agents.mdx
deleted file mode 100644
index 25bd137d4..000000000
--- a/apps/docs/content/docs/api-reference/agents.mdx
+++ /dev/null
@@ -1,75 +0,0 @@
----
-title: Agents
-description: >-
-  Agents. Application API: Project API key. Public schema constrained by the
-  pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core
-  extensions.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Lists only the authenticated tenant's saved Agents, independently of
-          Sessions. Limit 0 is treated as 1 and larger limits as 100, as
-          observed on the hosted service. The local default is 20; exact
-          upstream default/cap and empty cursor fields remain unverified. An
-          unknown, malformed or foreign after cursor returns not found.
-      - content: >-
-          Persists configuration independently of execution. Names over 128
-          characters and metadata outside 16 string pairs with 64-character keys
-          and 512-character values return invalid_request_error with the
-          official param; U+0000 in stored strings is rejected as a local
-          storage limit. As on every Agents API JSON route, a non-JSON
-          Content-Type, invalid UTF-8, malformed JSON, a repeated key at any
-          depth or a non-object root returns invalid_request_error with a null
-          param and the official message before other checks; an empty or null
-          body is {}. Missing, unknown, wrongly typed or unsupported enum
-          members of the pinned configuration shapes (tools, text, reasoning,
-          service_tier, multi_agent) return invalid_request_error with the JSON
-          path as param; duplicate function names, repeated web_search or
-          tool_search and non-object schema root types return it with a null
-          param. Supports model/name/instructions/metadata, explicit reasoning
-          and service tiers, multi_agent, text/json_schema,
-          function/tool_search/programmatic_tool_calling/web_search and HTTP MCP
-          with nullable credential_id, service origin (omitted or null on HTTP
-          transport is saved as service) and boolean required defaulting to
-          false. Saving credential_id grants no access: Session admission checks
-          attached Vault ownership and destination. MCP allowed_tools preserves
-          null versus empty; saved HTTP transport includes empty headers.
-          Model-derived reasoning defaults, other MCP variants and public retry
-          conformance remain incomplete. web_search saves every pinned mode:
-          omitted or null mode is saved as live and omitted or null context_size
-          as medium; allowed_domains preserves null versus empty and a present
-          location, including {}, includes all four keys with null for omitted
-          ones, as observed officially (req_db41d2f6261b4abfb69465eafe719ab5,
-          req_165d53b88445490b9146d8272c54134d). Session execution accepts only
-          explicit disabled web_search and disabled programmatic_tool_calling
-          through qualified Runtime controls; saved enabled forms reject at
-          Session admission. Session execution admits only its supported
-          configuration subset.
-      - content: >-
-          Reads the saved resource owned by the authenticated tenant,
-          independently of execution Sessions.
-      - content: >-
-          Preserves omitted fields and replaces supplied fields using shared
-          saved-configuration validation. Null name/instructions clear; null or
-          empty metadata clears all pairs. Name, metadata and configuration
-          validation errors return invalid_request_error with the official
-          param, using the Agent create rules before the Agent lookup. Existing
-          Session snapshots are unchanged. Empty updates advance updated_at
-          without changing saved fields. Nested replacement/null defaults,
-          model-derived reasoning and exact hosted error behavior remain
-          incompletely verified.
-      - content: >-
-          Deletes only the authenticated tenant's saved configuration. Existing
-          Session snapshots, history and recorded creation retry identities
-          remain independent. Missing and repeated deletion locally return404;
-          exact hosted error and in-flight creation/deletion semantics remain
-          unverified.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"public-api"} operations={[{"path":"/agents","method":"get"},{"path":"/agents","method":"post"},{"path":"/agents/{agent_id}","method":"get"},{"path":"/agents/{agent_id}","method":"post"},{"path":"/agents/{agent_id}","method":"delete"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/artifacts.mdx b/apps/docs/content/docs/api-reference/artifacts.mdx
deleted file mode 100644
index 012154e5f..000000000
--- a/apps/docs/content/docs/api-reference/artifacts.mdx
+++ /dev/null
@@ -1,33 +0,0 @@
----
-title: Artifacts
-description: >-
-  Artifacts. Application API: Project API key. Public schema constrained by the
-  pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core
-  extensions.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Lists published outputs independently of Environment availability.
-          Sorting uses publication time and ID. A later Turn publishes a path
-          again only when it is new, its bytes changed, or no Artifact remains
-          for it. A malformed environment_id matches nothing. An after value
-          that is not an Artifact of this Session, including a malformed one,
-          returns 400 invalid_request_error with the message "after is not a
-          valid artifact ID". The local default page size is 20; exact upstream
-          defaults remain unverified.
-      - content: >-
-          Deletes the published copy without modifying its original workspace
-          file. Already admitted content reads may finish; later reads reject.
-      - content: >-
-          Streams stored bytes after tenant and Session authorization, including
-          after Environment expiration. Exact upstream headers and Range
-          behavior remain unverified.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"public-api"} operations={[{"path":"/agents/sessions/{session_id}/artifacts","method":"get"},{"path":"/agents/sessions/{session_id}/artifacts/{artifact_id}","method":"get"},{"path":"/agents/sessions/{session_id}/artifacts/{artifact_id}","method":"delete"},{"path":"/agents/sessions/{session_id}/artifacts/{artifact_id}/content","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/administrator-projects.mdx b/apps/docs/content/docs/api-reference/core/administrator-projects.mdx
deleted file mode 100644
index 81b0dd3ca..000000000
--- a/apps/docs/content/docs/api-reference/core/administrator-projects.mdx
+++ /dev/null
@@ -1,17 +0,0 @@
----
-title: Administrator Projects
-description: >-
-  Administrator Projects. Core administration API: Core key held by Web’s server
-  or an operator script. Generated local management contract. This is not part
-  of the public OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents: []
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects","method":"get"},{"path":"/core/v1/projects","method":"post"},{"path":"/core/v1/projects/{project_id}","method":"post"},{"path":"/core/v1/projects/{project_id}/archive","method":"post"},{"path":"/core/v1/projects/{project_id}/keys","method":"get"},{"path":"/core/v1/projects/{project_id}/keys","method":"post"},{"path":"/core/v1/projects/{project_id}/keys/{key_id}","method":"delete"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/agents.mdx b/apps/docs/content/docs/api-reference/core/agents.mdx
deleted file mode 100644
index 3efbe8afb..000000000
--- a/apps/docs/content/docs/api-reference/core/agents.mdx
+++ /dev/null
@@ -1,29 +0,0 @@
----
-title: Agents
-description: >-
-  Agents. Core administration API: Core key held by Web’s server or an operator
-  script. Generated local management contract. This is not part of the public
-  OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/agents","method":"get"},{"path":"/core/v1/projects/{project_id}/agents/{agent_id}","method":"get"},{"path":"/core/v1/projects/{project_id}/agents/{agent_id}","method":"delete"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/artifacts.mdx b/apps/docs/content/docs/api-reference/core/artifacts.mdx
deleted file mode 100644
index 94f4020b7..000000000
--- a/apps/docs/content/docs/api-reference/core/artifacts.mdx
+++ /dev/null
@@ -1,33 +0,0 @@
----
-title: Artifacts
-description: >-
-  Artifacts. Core administration API: Core key held by Web’s server or an
-  operator script. Generated local management contract. This is not part of the
-  public OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/sessions/{session_id}/artifacts","method":"get"},{"path":"/core/v1/projects/{project_id}/sessions/{session_id}/artifacts/{artifact_id}","method":"get"},{"path":"/core/v1/projects/{project_id}/sessions/{session_id}/artifacts/{artifact_id}","method":"delete"},{"path":"/core/v1/projects/{project_id}/sessions/{session_id}/artifacts/{artifact_id}/content","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/core-administration.mdx b/apps/docs/content/docs/api-reference/core/core-administration.mdx
deleted file mode 100644
index 0ed580f68..000000000
--- a/apps/docs/content/docs/api-reference/core/core-administration.mdx
+++ /dev/null
@@ -1,56 +0,0 @@
----
-title: Core Administration
-description: >-
-  Core Administration. Core administration API: Core key held by Web’s server or
-  an operator script. Generated local management contract. This is not part of
-  the public OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. Newest-first cursor pagination of safe metadata. Actor
-          labels are unverified console labels, not authorization identities.
-          Request bodies and secrets are never recorded.
-      - content: >-
-          Core key only; available before any sandbox deployment exists. Reports
-          the public URL that applications, nodes, sandboxes and self-hosted
-          executors use, the API base URL, Core's source commit and installation
-          ID, the installer's settings snapshot with where to change it, and
-          what is bound to the current public URL. Sensitive settings report
-          only whether they are configured.
-      - content: >-
-          Core key only. Complete UTC buckets; unknown measurements are null.
-          Samples are process-local and are not backfilled after a restart.
-      - content: >-
-          Core key only. Reports actual resource disposition, including expiry
-          and failure cleanup. This is not archive provenance and does not
-          assert active Turn settlement. Read this after an uncertain archive
-          response; never infer released from a missing sandbox alone.
-      - content: >-
-          Core key only. Requires the current deployment generation; no
-          maintenance mode is required. Permanently closes execution, requests
-          cancellation and releases sandbox/snapshots through existing cleanup.
-          Session history and persisted files/artifacts remain; unpersisted
-          workspace contents are lost. A cleanup_pending response is not proof
-          of resource release. Does not affect caller-managed Runtime.
-      - content: >-
-          Core key only. Each observation is labelled with its owning Project
-          ID. Uses the existing read-only Runtime sampler, with bounded
-          concurrency and no execution or provisioning. A provider with a batch
-          metrics read, such as E2B, samples the page's running sandboxes in one
-          bounded request.
-      - content: >-
-          Core key only. after/limit/order paginate Projects. Agent grouping
-          returns groups within those spaces. Date bounds filter Session
-          creation, not current asset counts. Usage sums only non-null public
-          Session usage; coverage includes every selected Session. Each Project
-          is read in a consistent database snapshot. Totals are not billing
-          records.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/audit-log","method":"get"},{"path":"/core/v1/installation","method":"get"},{"path":"/core/v1/metrics","method":"get"},{"path":"/core/v1/projects/{project_id}/sessions/{session_id}/archive","method":"get"},{"path":"/core/v1/projects/{project_id}/sessions/{session_id}/archive","method":"post"},{"path":"/core/v1/sandbox/runtime-observations","method":"get"},{"path":"/core/v1/summary","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/credentials.mdx b/apps/docs/content/docs/api-reference/core/credentials.mdx
deleted file mode 100644
index f28389c4e..000000000
--- a/apps/docs/content/docs/api-reference/core/credentials.mdx
+++ /dev/null
@@ -1,29 +0,0 @@
----
-title: Credentials
-description: >-
-  Credentials. Core administration API: Core key held by Web’s server or an
-  operator script. Generated local management contract. This is not part of the
-  public OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/vaults/{vault_id}/credentials","method":"get"},{"path":"/core/v1/projects/{project_id}/vaults/{vault_id}/credentials/{credential_id}","method":"get"},{"path":"/core/v1/projects/{project_id}/vaults/{vault_id}/credentials/{credential_id}","method":"delete"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/deployment-model-providers.mdx b/apps/docs/content/docs/api-reference/core/deployment-model-providers.mdx
deleted file mode 100644
index 0ead2b602..000000000
--- a/apps/docs/content/docs/api-reference/core/deployment-model-providers.mdx
+++ /dev/null
@@ -1,43 +0,0 @@
----
-title: Deployment Model Providers
-description: >-
-  Deployment Model Providers. Core administration API: Core key held by Web’s
-  server or an operator script. Generated local management contract. This is not
-  part of the public OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. Returns every harness this build supports, in name
-          order. enabled and default are read-only views of the process
-          configuration (OAC_DEFAULT_HARNESS and OAC_HARNESSES).
-          model_configuration is the harness's deployment default, stored in
-          Core, or null. Keys are never returned; api_key_configured reports
-          that one is set.
-      - content: >-
-          Core key only. Returns the safe view; the key is never returned. 404
-          when the harness does not exist or has no deployment default. Nullable
-          last_used_at, last_error_code and last_error_at are best-effort
-          observations of committed root Turns using this exact default
-          revision; they do not establish current readiness and may remain stale
-          indefinitely.
-      - content: >-
-          Core key only. Idempotent; each successful request is audited.
-          Sessions that already froze the default keep it. Afterwards new
-          openai_hosted Sessions for this harness need a Session or Agent
-          bundle.
-      - content: >-
-          Core key only. Replaces one complete deployment model configuration,
-          including its write-only provider key. Validates through the selected
-          Harness declaration and freezes the resolved configuration for new
-          Sessions; existing Sessions are unchanged. See
-          contracts/agents-api/model-execution.md#deployment-defaults for
-          fields, source precedence and observation rules.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/harnesses","method":"get"},{"path":"/core/v1/harnesses/{harness}/model-configuration","method":"get"},{"path":"/core/v1/harnesses/{harness}/model-configuration","method":"delete"},{"path":"/core/v1/harnesses/{harness}/model-configuration","method":"put"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/environment-templates.mdx b/apps/docs/content/docs/api-reference/core/environment-templates.mdx
deleted file mode 100644
index 1f2754d5f..000000000
--- a/apps/docs/content/docs/api-reference/core/environment-templates.mdx
+++ /dev/null
@@ -1,29 +0,0 @@
----
-title: Environment Templates
-description: >-
-  Environment Templates. Core administration API: Core key held by Web’s server
-  or an operator script. Generated local management contract. This is not part
-  of the public OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/environment-templates","method":"get"},{"path":"/core/v1/projects/{project_id}/environment-templates/{environment_template_id}","method":"get"},{"path":"/core/v1/projects/{project_id}/environment-templates/{environment_template_id}","method":"delete"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/execution-configuration.mdx b/apps/docs/content/docs/api-reference/core/execution-configuration.mdx
deleted file mode 100644
index 207d504b0..000000000
--- a/apps/docs/content/docs/api-reference/core/execution-configuration.mdx
+++ /dev/null
@@ -1,27 +0,0 @@
----
-title: Execution configuration
-description: >-
-  Execution configuration. Core administration API: Core key held by Web’s
-  server or an operator script. Generated local management contract. This is not
-  part of the public OpenAI API.
-full: true
-_openapi:
-  method: GET
-  route: /core/v1/projects/{project_id}/sessions/{session_id}/execution-configuration
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only; the Project ID selects the target space and does not
-          authenticate. Returns the committed model, harness and safe provider
-          selection with recorded sources. This read never decrypts credentials,
-          resolves current defaults or probes execution health. Deployment
-          defaults frozen after they moved into Core show their safe view; older
-          deployment selections remain redacted. Historical provenance and
-          missing provider projections are explicitly unknown/unavailable.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/sessions/{session_id}/execution-configuration","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/executor-credentials.mdx b/apps/docs/content/docs/api-reference/core/executor-credentials.mdx
deleted file mode 100644
index 2ef8db657..000000000
--- a/apps/docs/content/docs/api-reference/core/executor-credentials.mdx
+++ /dev/null
@@ -1,42 +0,0 @@
----
-title: Executor Credentials
-description: >-
-  Executor Credentials. Core administration API: Core key held by Web’s server
-  or an operator script. Generated local management contract. This is not part
-  of the public OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. Returns metadata of the credentials restricted to this
-          Environment, oldest first; secrets are never listed. Connection
-          combines current credential authority and an open matching gateway
-          peer; timestamps are historical observations, not readiness. Without a
-          gateway it is never connected. The Environment must be a self_hosted
-          Environment of the Project whose Session exists; otherwise 404.
-      - content: >-
-          Core key only. Returns a connect-only secret once, restricted to
-          daemon enrollment and connection for this Environment, with the
-          Project's principal as its execution principal. Repeating an issuance
-          key_id returns 409 executor_credential_exists; after an uncertain
-          response, list the credentials and rotate that key_id explicitly.
-          Rotation keeps the key's Environment, invalidates the old secret and
-          restores a revoked key; rotating an unknown key_id returns 404. In an
-          archived Project, issuance and rotation return 409 project_archived.
-          The Environment must be a self_hosted Environment of the Project whose
-          Session exists; otherwise 404. Each write records an administrator
-          audit entry without the secret.
-      - content: >-
-          Core key only. Revokes one credential restricted to this Environment;
-          repeated revocation is safe and it also works in an archived Project.
-          Revocation denies future enrollment and connection but does not stop
-          executor-owned compute. The Environment must be a self_hosted
-          Environment of the Project whose Session exists; otherwise 404.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/environments/{environment_id}/executor-credentials","method":"get"},{"path":"/core/v1/projects/{project_id}/environments/{environment_id}/executor-credentials","method":"post"},{"path":"/core/v1/projects/{project_id}/environments/{environment_id}/executor-credentials/{key_id}","method":"delete"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/files.mdx b/apps/docs/content/docs/api-reference/core/files.mdx
deleted file mode 100644
index 186f103bb..000000000
--- a/apps/docs/content/docs/api-reference/core/files.mdx
+++ /dev/null
@@ -1,29 +0,0 @@
----
-title: Files
-description: >-
-  Files. Core administration API: Core key held by Web’s server or an operator
-  script. Generated local management contract. This is not part of the public
-  OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/files","method":"get"},{"path":"/core/v1/projects/{project_id}/files/{file_id}","method":"get"},{"path":"/core/v1/projects/{project_id}/files/{file_id}","method":"delete"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/index.mdx b/apps/docs/content/docs/api-reference/core/index.mdx
deleted file mode 100644
index ad2fc6c57..000000000
--- a/apps/docs/content/docs/api-reference/core/index.mdx
+++ /dev/null
@@ -1,33 +0,0 @@
----
-title: Core administration API
-description: /core/v1 — Core key held by Web’s server or an operator script.
----
-
-Generated local management contract. This is not part of the public OpenAI API.
-
-**Credential:** Core key held by Web’s server or an operator script. Examples use reserved `example.com` origins. This reference does not send requests or collect credentials.
-
-Operator scripts use Core’s loopback port. The public entry routes management through Web, which requires its signed-in session and supplies the Core key on the server.
-
-[API namespaces and credentials](/public-api) · [Application reference](/api-reference) · [Administration reference](/api-reference/core) · [Machine reference](/api-reference/machine)
-
-- [core-administration](/api-reference/core/core-administration)
-- [deployment-model-providers](/api-reference/core/deployment-model-providers)
-- [administrator-projects](/api-reference/core/administrator-projects)
-- [agents](/api-reference/core/agents)
-- [environment-templates](/api-reference/core/environment-templates)
-- [executor-credentials](/api-reference/core/executor-credentials)
-- [native-installation](/api-reference/core/native-installation)
-- [files](/api-reference/core/files)
-- [write-audit](/api-reference/core/write-audit)
-- [sessions](/api-reference/core/sessions)
-- [artifacts](/api-reference/core/artifacts)
-- [execution-configuration](/api-reference/core/execution-configuration)
-- [items](/api-reference/core/items)
-- [runtime-history](/api-reference/core/runtime-history)
-- [runtime-observations](/api-reference/core/runtime-observations)
-- [turns](/api-reference/core/turns)
-- [skills](/api-reference/core/skills)
-- [vaults](/api-reference/core/vaults)
-- [credentials](/api-reference/core/credentials)
-- [sandbox-manager](/api-reference/core/sandbox-manager)
diff --git a/apps/docs/content/docs/api-reference/core/items.mdx b/apps/docs/content/docs/api-reference/core/items.mdx
deleted file mode 100644
index 7589bc49b..000000000
--- a/apps/docs/content/docs/api-reference/core/items.mdx
+++ /dev/null
@@ -1,23 +0,0 @@
----
-title: Items
-description: >-
-  Items. Core administration API: Core key held by Web’s server or an operator
-  script. Generated local management contract. This is not part of the public
-  OpenAI API.
-full: true
-_openapi:
-  method: GET
-  route: /core/v1/projects/{project_id}/sessions/{session_id}/items
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/sessions/{session_id}/items","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/meta.json b/apps/docs/content/docs/api-reference/core/meta.json
deleted file mode 100644
index fb07e650d..000000000
--- a/apps/docs/content/docs/api-reference/core/meta.json
+++ /dev/null
@@ -1,26 +0,0 @@
-{
-  "title": "Core administration API",
-  "pages": [
-    "index",
-    "core-administration",
-    "deployment-model-providers",
-    "administrator-projects",
-    "agents",
-    "environment-templates",
-    "executor-credentials",
-    "native-installation",
-    "files",
-    "write-audit",
-    "sessions",
-    "artifacts",
-    "execution-configuration",
-    "items",
-    "runtime-history",
-    "runtime-observations",
-    "turns",
-    "skills",
-    "vaults",
-    "credentials",
-    "sandbox-manager"
-  ]
-}
diff --git a/apps/docs/content/docs/api-reference/core/native-installation.mdx b/apps/docs/content/docs/api-reference/core/native-installation.mdx
deleted file mode 100644
index a03fdfca8..000000000
--- a/apps/docs/content/docs/api-reference/core/native-installation.mdx
+++ /dev/null
@@ -1,23 +0,0 @@
----
-title: Native Installation
-description: >-
-  Native Installation. Core administration API: Core key held by Web’s server or
-  an operator script. Generated local management contract. This is not part of
-  the public OpenAI API.
-full: true
-_openapi:
-  method: GET
-  route: /core/v1/projects/{project_id}/environments/{environment_id}/installation
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. The commands contain a 30-minute installation
-          authorization, never an executor secret. Web displays these same
-          commands provided in public Session creation and detail responses.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/environments/{environment_id}/installation","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/runtime-history.mdx b/apps/docs/content/docs/api-reference/core/runtime-history.mdx
deleted file mode 100644
index 5b7e2da6f..000000000
--- a/apps/docs/content/docs/api-reference/core/runtime-history.mdx
+++ /dev/null
@@ -1,26 +0,0 @@
----
-title: Runtime history
-description: >-
-  Runtime history. Core administration API: Core key held by Web’s server or an
-  operator script. Generated local management contract. This is not part of the
-  public OpenAI API.
-full: true
-_openapi:
-  method: GET
-  route: /core/v1/projects/{project_id}/sessions/{session_id}/runtime-history
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only; the Project ID selects the target space and does not
-          authenticate. Returns stored Runtime observations for one Session. End
-          is exclusive; the server selects a bounded resolution. Responses
-          contain at most 1,000 series, 10,000 points per coverage/series array,
-          and 100,000 total coverage plus series points. It never reads or
-          changes live compute.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/sessions/{session_id}/runtime-history","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/runtime-observations.mdx b/apps/docs/content/docs/api-reference/core/runtime-observations.mdx
deleted file mode 100644
index b9a2917ae..000000000
--- a/apps/docs/content/docs/api-reference/core/runtime-observations.mdx
+++ /dev/null
@@ -1,23 +0,0 @@
----
-title: Runtime observations
-description: >-
-  Runtime observations. Core administration API: Core key held by Web’s server
-  or an operator script. Generated local management contract. This is not part
-  of the public OpenAI API.
-full: true
-_openapi:
-  method: GET
-  route: /core/v1/projects/{project_id}/sessions/{session_id}/runtime-observation
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only; the Project ID selects the target space and does not
-          authenticate. Returns one read-only current Runtime observation. It
-          never provisions, renews, restarts, pauses or stops compute.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/sessions/{session_id}/runtime-observation","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/sandbox-manager.mdx b/apps/docs/content/docs/api-reference/core/sandbox-manager.mdx
deleted file mode 100644
index de80e6d5a..000000000
--- a/apps/docs/content/docs/api-reference/core/sandbox-manager.mdx
+++ /dev/null
@@ -1,79 +0,0 @@
----
-title: Sandbox Manager
-description: >-
-  Sandbox Manager. Core administration API: Core key held by Web’s server or an
-  operator script. Generated local management contract. This is not part of the
-  public OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. Does not grant project resource access. Responses
-          contain only explicit safe fields. E2B template_build values are those
-          Core read when the selection was saved; this read does not call E2B.
-      - content: >-
-          Selects a provider, enforced resource limits and pinned Runtime
-          release. Core derives the deployment's core_url from the installation
-          public URL and rejects a core_url member with 400. E2B returns 409
-          sandbox_configuration_error while the public URL is loopback. E2B
-          credentials are write-only. E2B may omit resources to adopt the
-          validated template build's CPU and memory, returned in
-          specification.resources. Requires explicit expected_generation,
-          including zero at first setup. Stale retries reject before provider
-          validation. An identical selection at the current generation is a
-          no-op; differing selections and file-managed deployments reject. This
-          does not create compute or execute work.
-      - content: >-
-          Requires the observed generation, the same backend type and no active
-          reset. E2B same-team changes apply online: allocations retain
-          immutable generation and current credentials; omitted api_key
-          preserves it, explicit submission including the same key verifies and
-          advances generation. Other teams require explicit reset. Node
-          providers retain the zero-resource guard and retire old nodes/tokens
-          on change. Core rejects core_url input. Never automatically replay an
-          uncertain write; rollout.state is the authoritative preparation
-          polling signal.
-      - content: >-
-          Archives hosted Sessions and waits for confirmed provider cleanup,
-          preserving history and Files/Artifacts. Auto waits for started or
-          waiting Turns and file writes until the durable deadline; force
-          cancels them. The same clear is idempotent; force escalates auto.
-          Requires the current generation. Self-hosted Sessions are unchanged.
-      - content: >-
-          Restores admission but never restores Sessions already archived. With
-          no reset running this is an idempotent read, provided the generation
-          still matches.
-      - content: >-
-          Core key only. Uses a transient E2B credential and endpoint through
-          the pinned SDK helper; returns safe template metadata. Does not save
-          the credential or allocate compute.
-      - content: >-
-          Core key only. Reads one template through the pinned SDK helper with a
-          transient E2B credential. Returns ready builds only, without
-          allocating compute.
-      - content: >-
-          Core key only. Does not grant project resource access. Responses
-          contain only explicit safe fields.
-      - content: >-
-          Core key only. Does not grant project resource access. Responses
-          contain only explicit safe fields.
-      - content: >-
-          Core key only. Complete UTC buckets. Missing host measurements and
-          offline history are null; reads never sample or backfill.
-      - content: >-
-          Core key only. Does not grant project resource access. Responses
-          contain only explicit safe fields.
-      - content: >-
-          Core key only. Does not grant project resource access. Responses
-          contain only explicit safe fields.
-      - content: >-
-          Core key only. Does not grant project resource access. Responses
-          contain only explicit safe fields.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/sandbox/deployment","method":"get"},{"path":"/core/v1/sandbox/deployment","method":"post"},{"path":"/core/v1/sandbox/deployment","method":"put"},{"path":"/core/v1/sandbox/deployment/reset","method":"post"},{"path":"/core/v1/sandbox/deployment/reset","method":"delete"},{"path":"/core/v1/sandbox/e2b/templates","method":"post"},{"path":"/core/v1/sandbox/e2b/templates/{template_id}/builds","method":"post"},{"path":"/core/v1/sandbox/enrollment-tokens","method":"post"},{"path":"/core/v1/sandbox/nodes","method":"get"},{"path":"/core/v1/sandbox/nodes/{node_id}","method":"get"},{"path":"/core/v1/sandbox/nodes/{node_id}","method":"patch"},{"path":"/core/v1/sandbox/nodes/{node_id}","method":"delete"},{"path":"/core/v1/sandbox/nodes/{node_id}/allocations","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/sessions.mdx b/apps/docs/content/docs/api-reference/core/sessions.mdx
deleted file mode 100644
index a266de5f0..000000000
--- a/apps/docs/content/docs/api-reference/core/sessions.mdx
+++ /dev/null
@@ -1,32 +0,0 @@
----
-title: Sessions
-description: >-
-  Sessions. Core administration API: Core key held by Web’s server or an
-  operator script. Generated local management contract. This is not part of the
-  public OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Safe failure categories from one committed snapshot; no
-          native text or historical inference.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/sessions","method":"get"},{"path":"/core/v1/projects/{project_id}/sessions/{session_id}","method":"get"},{"path":"/core/v1/projects/{project_id}/sessions/{session_id}","method":"delete"},{"path":"/core/v1/projects/{project_id}/sessions/{session_id}/diagnostics","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/skills.mdx b/apps/docs/content/docs/api-reference/core/skills.mdx
deleted file mode 100644
index 1521c7fb9..000000000
--- a/apps/docs/content/docs/api-reference/core/skills.mdx
+++ /dev/null
@@ -1,49 +0,0 @@
----
-title: Skills
-description: >-
-  Skills. Core administration API: Core key held by Web’s server or an operator
-  script. Generated local management contract. This is not part of the public
-  OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/skills","method":"get"},{"path":"/core/v1/projects/{project_id}/skills/{skill_id}","method":"get"},{"path":"/core/v1/projects/{project_id}/skills/{skill_id}","method":"delete"},{"path":"/core/v1/projects/{project_id}/skills/{skill_id}/content","method":"get"},{"path":"/core/v1/projects/{project_id}/skills/{skill_id}/versions","method":"get"},{"path":"/core/v1/projects/{project_id}/skills/{skill_id}/versions/{version}","method":"get"},{"path":"/core/v1/projects/{project_id}/skills/{skill_id}/versions/{version}","method":"delete"},{"path":"/core/v1/projects/{project_id}/skills/{skill_id}/versions/{version}/content","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/turns.mdx b/apps/docs/content/docs/api-reference/core/turns.mdx
deleted file mode 100644
index d21b08bb2..000000000
--- a/apps/docs/content/docs/api-reference/core/turns.mdx
+++ /dev/null
@@ -1,28 +0,0 @@
----
-title: Turns
-description: >-
-  Turns. Core administration API: Core key held by Web’s server or an operator
-  script. Generated local management contract. This is not part of the public
-  OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. At most 1000 root Item receipt timings in public Item
-          order. Receipt intervals are not native execution durations.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/sessions/{session_id}/turns","method":"get"},{"path":"/core/v1/projects/{project_id}/sessions/{session_id}/turns/{turn_id}","method":"get"},{"path":"/core/v1/projects/{project_id}/sessions/{session_id}/turns/{turn_id}/diagnostics","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/vaults.mdx b/apps/docs/content/docs/api-reference/core/vaults.mdx
deleted file mode 100644
index 552e8e9de..000000000
--- a/apps/docs/content/docs/api-reference/core/vaults.mdx
+++ /dev/null
@@ -1,29 +0,0 @@
----
-title: Vaults
-description: >-
-  Vaults. Core administration API: Core key held by Web’s server or an operator
-  script. Generated local management contract. This is not part of the public
-  OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
-      - content: >-
-          Core key only. Reuses the public resource projection and operation
-          rules; the Project ID selects the target space and does not
-          authenticate.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/vaults","method":"get"},{"path":"/core/v1/projects/{project_id}/vaults/{vault_id}","method":"get"},{"path":"/core/v1/projects/{project_id}/vaults/{vault_id}","method":"delete"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/core/write-audit.mdx b/apps/docs/content/docs/api-reference/core/write-audit.mdx
deleted file mode 100644
index 70eed9da8..000000000
--- a/apps/docs/content/docs/api-reference/core/write-audit.mdx
+++ /dev/null
@@ -1,26 +0,0 @@
----
-title: Write Audit
-description: >-
-  Write Audit. Core administration API: Core key held by Web’s server or an
-  operator script. Generated local management contract. This is not part of the
-  public OpenAI API.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Core key only. The Project ID path selects its space. Returns null for
-          resources without recorded creation provenance, including historical
-          and foreign resources. No key secret is returned.
-      - content: >-
-          Core key only. Reverse chronological keyset pagination over committed
-          writes. Creation records remain; other records follow configured
-          retention. The key path selects its independent space, never a
-          caller-supplied tenant.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"core-api"} operations={[{"path":"/core/v1/projects/{project_id}/resource-owners","method":"get"},{"path":"/core/v1/projects/{project_id}/write-operations","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/credentials.mdx b/apps/docs/content/docs/api-reference/credentials.mdx
deleted file mode 100644
index b75f46360..000000000
--- a/apps/docs/content/docs/api-reference/credentials.mdx
+++ /dev/null
@@ -1,74 +0,0 @@
----
-title: Credentials
-description: >-
-  Credentials. Application API: Project API key. Public schema constrained by
-  the pinned OpenAI Agents API baseline; documented x_agents_core fields remain
-  Core extensions.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Lists only metadata from the authenticated project's requested Vault,
-          without decryption or execution. An unknown, malformed or foreign
-          after cursor, including another Vault's Credential, returns not found.
-          Includes active and archived Credentials by default, independently of
-          Vault status. Status accepts a scalar, the SDK status[] array or both,
-          filtering by their union; a repeated scalar is rejected. Limits
-          default to 20 and clamp to 1–100. Equal creation times use ID
-          ordering. Hosted errors, concurrent-page behavior and archive/delete
-          lifecycle remain unverified or unimplemented.
-      - content: >-
-          Stores static_bearer or mcp_oauth secrets as execution-owned
-          authenticated ciphertext without contacting any endpoint. Static
-          bearer and OAuth access tokens must be nonempty strings; their bytes
-          are preserved. OAuth accepts a required access token, nullable RFC3339
-          expiry and optional refresh configuration with none,
-          client_secret_basic or client_secret_post authentication. Required
-          name is trimmed to 1–256 UTF-8 bytes. Credential and token endpoints
-          require HTTPS without userinfo or fragments. Responses contain safe
-          metadata only, including explicit nullable OAuth expiry, refresh,
-          resource and scope. Missing encryption configuration returns local
-          503. External authorization and provider revocation remain caller
-          responsibilities; exact hosted error/default semantics remain
-          unverified.
-      - content: >-
-          Reads only non-secret metadata scoped to the authenticated project and
-          owning Vault. No token decryption, network request or execution is
-          performed. Unknown, foreign, wrong-Vault and malformed IDs use the
-          same local not-found response; hosted error parity remains unverified.
-      - content: >-
-          Explicitly empty static bearer or OAuth access tokens and OAuth
-          patches without a mutable field are rejected before storage. Omitted
-          OAuth access tokens preserve the existing grant when expiry or refresh
-          fields change. Updates the existing static_bearer or mcp_oauth
-          authentication method without network requests. OAuth access_token
-          omission/null retains the token; a new token clears omitted expiry,
-          explicit null clears expiry, and other omitted fields remain
-          unchanged. OAuth refresh patches cannot add configuration or change
-          client, endpoint, resource or authentication method; nullable
-          token/client-secret values retain stored secrets while explicit null
-          scope clears scope. Whole-null refresh and token_endpoint_auth retain
-          existing configuration under local policy. Identity, destination,
-          creation time and Session bindings remain unchanged. Responses expose
-          safe metadata only. Already-dispatched work is not revoked; provider
-          revocation, storage-key rotation and exact hosted
-          concurrent-update/error semantics remain separate.
-      - content: >-
-          Removes one Credential and its encrypted token within the
-          authenticated project and owning Vault, without an encryption key or
-          secret decryption. Subsequent metadata reads, updates and dispatch
-          lookups cannot use it. Existing Session snapshots and history retain
-          their frozen identities; already-resolved tokens and running Sessions
-          are not revoked or cancelled. This local policy removes the row rather
-          than defining archived lifecycle; missing/repeated deletion returns
-          404. Exact hosted archive, post-delete visibility and retry/error
-          semantics remain unverified. Provider revocation and physical erasure
-          from native history, WAL or backups are separate concerns.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"public-api"} operations={[{"path":"/vaults/{vault_id}/credentials","method":"get"},{"path":"/vaults/{vault_id}/credentials","method":"post"},{"path":"/vaults/{vault_id}/credentials/{credential_id}","method":"get"},{"path":"/vaults/{vault_id}/credentials/{credential_id}","method":"post"},{"path":"/vaults/{vault_id}/credentials/{credential_id}","method":"delete"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/environment-templates.mdx b/apps/docs/content/docs/api-reference/environment-templates.mdx
deleted file mode 100644
index 32e05af1a..000000000
--- a/apps/docs/content/docs/api-reference/environment-templates.mdx
+++ /dev/null
@@ -1,58 +0,0 @@
----
-title: Environment Templates
-description: >-
-  Environment Templates. Application API: Project API key. Public schema
-  constrained by the pinned OpenAI Agents API baseline; documented x_agents_core
-  fields remain Core extensions.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Lists tenant-owned safe template metadata in creation order with ID
-          tie-breaking. Defaults to limit 20 and descending order; limit 0 is
-          treated as 1 and larger limits as 100. Foreign, missing and malformed
-          cursors return the same not found error. Concurrent-page and exact
-          hosted error behavior remain unverified.
-      - content: >-
-          Saves tenant-owned hosted configuration. Supports nullable name,
-          enabled/disabled or exact-domain restricted network, initial
-          inline/file_id files, confidential env, ordered setup_commands,
-          npm/Python packages inline/referenced Skill ZIPs, Plugin ZIPs and
-          workspace-contained capability directories. Omitted/null network
-          defaults to enabled. Restricted network requires 1–100 exact ASCII
-          hostnames; other host forms and populated unsupported installations
-          are rejected before persistence without echoing input. Network policy
-          rejections return invalid_request_error with a null param. System
-          dependencies must be preinstalled in the sandbox image or template, or
-          on the host machine; packages.system is rejected. No compute is
-          allocated. Exact hosted error/retry semantics remain unverified.
-      - content: >-
-          Returns safe tenant-owned configuration metadata without allocating
-          compute. Missing and foreign resources return the same not-found
-          response.
-      - content: >-
-          Supplied fields replace atomically; omitted fields remain unchanged.
-          Null name clears and null network resets to the pinned enabled
-          default. Existing Session snapshots and creation retries remain
-          unchanged. Initial files replace as a list; null/empty clears. File
-          data is encrypted separately and excluded from response metadata.
-          Skills replace as a list; null/empty clears. Skill archives are
-          encrypted separately and omitted from responses. Plugins and
-          capability directories replace as lists; null/empty clears. Plugin
-          archives are encrypted and omitted from responses. Capability
-          directories are snapshotted after setup. Environment MCP execution
-          requires a qualified native transport and runtime network policy.
-          Empty updates advance updated_at without changing saved fields or
-          confidential contents. Network policy rejections return
-          invalid_request_error with a null param.
-      - content: >-
-          Deletes the tenant-owned reusable configuration without changing or
-          deleting existing Sessions and their frozen configuration.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"public-api"} operations={[{"path":"/agents/environments/templates","method":"get"},{"path":"/agents/environments/templates","method":"post"},{"path":"/agents/environments/templates/{environment_template_id}","method":"get"},{"path":"/agents/environments/templates/{environment_template_id}","method":"post"},{"path":"/agents/environments/templates/{environment_template_id}","method":"delete"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/environments.mdx b/apps/docs/content/docs/api-reference/environments.mdx
deleted file mode 100644
index 287d4db3f..000000000
--- a/apps/docs/content/docs/api-reference/environments.mdx
+++ /dev/null
@@ -1,63 +0,0 @@
----
-title: Environments
-description: >-
-  Environments. Application API: Project API key. Public schema constrained by
-  the pinned OpenAI Agents API baseline; documented x_agents_core fields remain
-  Core extensions.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Returns durable connection status and safe installed metadata for
-          supported self_hosted and basic openai_hosted profiles. Initial files
-          expose frozen safe metadata without content; Plugin/Skill entries
-          expose only safe configured installation metadata.
-          Capability-directory discoveries are not added to those arrays.
-          Unsupported installation configurations remain implementation gaps.
-          This read does not prepare execution, start compute or require an
-          enabled execution worker. Session deletion removes the associated
-          Environment from public reads; project-shared read authorization is
-          unchanged. Connection status does not prove native readiness or
-          process quiescence.
-      - content: >-
-          Lists direct regular files in one authorized self_hosted or qualified
-          local workspace directory. Local paths use the public /workspace root
-          and must be in cleaned form. This partial implementation defaults to
-          the workspace root and limit 20; recursive scope and these defaults
-          are not verified upstream semantics. A missing path, a regular file or
-          a symbolic link returns an empty page; links are never followed.
-          Daemons without a local workspace binding use the Claude SDK adapter
-          reader, which keeps 404 for a missing path and 503 for a regular file
-          or symbolic link. Well-formed unknown query keys are ignored;
-          malformed query encoding and a repeated supported key are rejected.
-          Sorts by case-sensitive path components, descending by default. Keep
-          the same path, order and limit when using page. Each page rereads the
-          complete bounded directory; changed file paths/sizes invalidate
-          continuation locally with 400. There is no snapshot guarantee. An
-          openai_hosted Environment that has not connected yet returns 400.
-          Truncated or uncertain native results fail with 503 without returning
-          a partial page. This read never starts a Turn or admits model input.
-          Actual transport disconnect/reconnect events remain observable.
-      - content: >-
-          Uploads standard Base64 bytes to a file beneath /workspace in a
-          qualified local Environment and returns 201. Accepts inline bytes or a
-          project-owned source file_id through the same write path. Unknown body
-          fields are rejected with their name as param. Basic public hosted
-          creation requires explicit managed Runtime configuration; an
-          openai_hosted Environment that has not connected yet returns 400.
-          Inline data is limited to 5 MiB decoded and a file_id copy to 50 MiB.
-          Missing parent directories are created with mode 0700 and the file
-          with mode 0600. An existing destination is never replaced; a
-          directory, an existing file or a path through a symlink or
-          non-directory returns 400. Idle writes exclude execution. Missing
-          receipts return unavailable and retain a durable mutation gate without
-          automatic replay. Error/timing parity with upstream remains
-          unverified.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"public-api"} operations={[{"path":"/agents/environments/{environment_id}","method":"get"},{"path":"/agents/environments/{environment_id}/files","method":"get"},{"path":"/agents/environments/{environment_id}/files","method":"post"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/events.mdx b/apps/docs/content/docs/api-reference/events.mdx
deleted file mode 100644
index f0b0639a7..000000000
--- a/apps/docs/content/docs/api-reference/events.mdx
+++ /dev/null
@@ -1,37 +0,0 @@
----
-title: Events
-description: >-
-  Events. Application API: Project API key. Public schema constrained by the
-  pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core
-  extensions.
-full: true
-_openapi:
-  method: GET
-  route: /agents/sessions/{session_id}/events
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Live-only events, including command output fragments from capable
-          Codex peers as agent.output.command_execution_output.delta with stable
-          Item/output indexes. Native text conversion and output quotas apply;
-          completion snapshots remain authoritative. Reconnect through Session,
-          Turn and Items reads; missed events are not replayed. A lagging stream
-          closes with an error when its bounded buffer is exceeded. When a
-          hosted Environment fails to provision, the stream sends
-          agent.session.environment.failed, an error event
-          (environment_error/sandbox_error with the safe step and exit-status
-          reason, never command output) and agent.session.failed, then ends.
-          Session activity includes immutable pending-input connection actions
-          before Turn creation; self_hosted environments use the same safe
-          output as Session retrieval.
-
-          Active streams revalidate the original Project key every second before
-          output; revocation, Project archival or authentication unavailability
-          closes the stream. Authentication checks use a five-second timeout.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"public-api"} operations={[{"path":"/agents/sessions/{session_id}/events","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/files.mdx b/apps/docs/content/docs/api-reference/files.mdx
deleted file mode 100644
index 21b1c0709..000000000
--- a/apps/docs/content/docs/api-reference/files.mdx
+++ /dev/null
@@ -1,48 +0,0 @@
----
-title: Files
-description: >-
-  Files. Application API: Project API key. Public schema constrained by the
-  pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core
-  extensions.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Lists project-owned Files without reading their bodies. The limit
-          defaults to 10000 and must be 1–10000. Equal creation times use ID
-          ordering. Purpose validation precedes cursor lookup; current storage
-          contains only user_data. An explicit empty purpose is treated as
-          omitted. Repeated purpose values remain rejected. Hosted positive
-          filtering, default order and concurrent-page behavior remain
-          unverified. No Beta header is required.
-      - content: >-
-          Accepts one multipart file and purpose=user_data in either order, with
-          a private 512 MiB content limit and 64 KiB envelope allowance. Commits
-          only after the entire request validates. The source is project-owned,
-          independent of Sessions and workspace copies. No Beta header is
-          required. Other purposes, expires_after, listing, resumable Uploads,
-          quotas/rate-limit and complete hosted error/status parity remain
-          unsupported or unverified.
-      - content: >-
-          Returns immutable project-owned user_data file metadata. No Beta
-          header is required. Other purposes, expiration and full hosted
-          status/error semantics remain unimplemented or unverified.
-      - content: >-
-          Atomically deletes project-owned metadata and stored bytes.
-          Already-admitted reads or copies may finish. Workspace copies remain
-          independent. Historical WAL/backups are not erased. No Beta header is
-          required; exact hosted concurrent deletion/error semantics remain
-          unverified.
-      - content: >-
-          Resolves project-owned File metadata before enforcing download policy.
-          Public download of user_data Files returns 400; missing and foreign
-          Files return the same 404. Internal initial-file and workspace copies
-          remain available. No Beta header is required.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"public-api"} operations={[{"path":"/files","method":"get"},{"path":"/files","method":"post"},{"path":"/files/{file_id}","method":"get"},{"path":"/files/{file_id}","method":"delete"},{"path":"/files/{file_id}/content","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/index.mdx b/apps/docs/content/docs/api-reference/index.mdx
deleted file mode 100644
index e2bee0bf0..000000000
--- a/apps/docs/content/docs/api-reference/index.mdx
+++ /dev/null
@@ -1,24 +0,0 @@
----
-title: Application API
-description: /v1 — Project API key.
----
-
-Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.
-
-**Credential:** Project API key. Examples use reserved `example.com` origins. This reference does not send requests or collect credentials.
-
-[API namespaces and credentials](/public-api) · [Application reference](/api-reference) · [Administration reference](/api-reference/core) · [Machine reference](/api-reference/machine)
-
-- [agents](/api-reference/agents)
-- [environments](/api-reference/environments)
-- [environment-templates](/api-reference/environment-templates)
-- [sessions](/api-reference/sessions)
-- [artifacts](/api-reference/artifacts)
-- [events](/api-reference/events)
-- [items](/api-reference/items)
-- [subagents](/api-reference/subagents)
-- [turns](/api-reference/turns)
-- [files](/api-reference/files)
-- [skills](/api-reference/skills)
-- [vaults](/api-reference/vaults)
-- [credentials](/api-reference/credentials)
diff --git a/apps/docs/content/docs/api-reference/items.mdx b/apps/docs/content/docs/api-reference/items.mdx
deleted file mode 100644
index 1c010f4b0..000000000
--- a/apps/docs/content/docs/api-reference/items.mdx
+++ /dev/null
@@ -1,26 +0,0 @@
----
-title: Items
-description: >-
-  Items. Application API: Project API key. Public schema constrained by the
-  pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core
-  extensions.
-full: true
-_openapi:
-  method: GET
-  route: /agents/sessions/{session_id}/items
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Returns supported message and tool Items in first-observation order.
-          Native engine fields are projected explicitly; unfinished Items on
-          terminal Turns are incomplete. Cursors are Items of the same tenant
-          and Session. Any other after value, including a malformed one, returns
-          400 invalid_request_error with the message "Invalid session item ID in
-          `after`".
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"public-api"} operations={[{"path":"/agents/sessions/{session_id}/items","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/machine/index.mdx b/apps/docs/content/docs/api-reference/machine/index.mdx
deleted file mode 100644
index a6d699b4d..000000000
--- a/apps/docs/content/docs/api-reference/machine/index.mdx
+++ /dev/null
@@ -1,15 +0,0 @@
----
-title: Machine connection API
-description: /api/v1 — Route-specific node enrollment, node, daemon, or executor credential.
----
-
-Generated local machine contract. These connections reach Core directly, never through Web.
-
-**Credential:** Route-specific node enrollment, node, daemon, or executor credential. Examples use reserved `example.com` origins. This reference does not send requests or collect credentials.
-
-This schema covers node configuration, enrollment and identity. Daemon WebSockets and executor connection details are described in the [machine overview](/public-api#machine-connection-api).
-
-[API namespaces and credentials](/public-api) · [Application reference](/api-reference) · [Administration reference](/api-reference/core) · [Machine reference](/api-reference/machine)
-
-- [native-installation](/api-reference/machine/native-installation)
-- [sandbox-node](/api-reference/machine/sandbox-node)
diff --git a/apps/docs/content/docs/api-reference/machine/meta.json b/apps/docs/content/docs/api-reference/machine/meta.json
deleted file mode 100644
index 5d07906a3..000000000
--- a/apps/docs/content/docs/api-reference/machine/meta.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "title": "Machine connection API",
-  "pages": [
-    "index",
-    "native-installation",
-    "sandbox-node"
-  ]
-}
diff --git a/apps/docs/content/docs/api-reference/machine/native-installation.mdx b/apps/docs/content/docs/api-reference/machine/native-installation.mdx
deleted file mode 100644
index 80f373a71..000000000
--- a/apps/docs/content/docs/api-reference/machine/native-installation.mdx
+++ /dev/null
@@ -1,26 +0,0 @@
----
-title: Native Installation
-description: >-
-  Native Installation. Machine connection API: Route-specific node enrollment,
-  node, daemon, or executor credential. Generated local machine contract. These
-  connections reach Core directly, never through Web.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Accepts a short-lived Environment installation Bearer authorization,
-          not a Project or Core key. Returns frozen connection constraints; it
-          does not claim or rotate credentials.
-      - content: >-
-          A valid installation Bearer authorization can claim one connect-only
-          key. The client persists its generated secret before submitting it.
-          Retries must present that same secret; a different, rotated or revoked
-          credential is never replaced.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"runtime-api"} operations={[{"path":"/api/v1/agent-daemon/installation","method":"post"},{"path":"/api/v1/agent-daemon/installation/claim","method":"post"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/machine/sandbox-node.mdx b/apps/docs/content/docs/api-reference/machine/sandbox-node.mdx
deleted file mode 100644
index 7ab0fde2a..000000000
--- a/apps/docs/content/docs/api-reference/machine/sandbox-node.mdx
+++ /dev/null
@@ -1,31 +0,0 @@
----
-title: Sandbox Node
-description: >-
-  Sandbox Node. Machine connection API: Route-specific node enrollment, node,
-  daemon, or executor credential. Generated local machine contract. These
-  connections reach Core directly, never through Web.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Authenticates with an unconsumed enrollment token, or a retained node
-          credential with X-OAC-Node-ID. Does not consume the token or expose
-          E2B credentials. Node files cannot override this specification.
-      - content: >-
-          Node machine connection. Consumes a one-use enrollment token; grants
-          no project or administrator access. Responses contain only explicit
-          safe fields. core_url is required and must equal the installation
-          public URL; a different address gets 409 sandbox_node_address_mismatch
-          and leaves the token unused.
-      - content: >-
-          Node machine connection. Authenticates with the retained node
-          credential; grants no project or administrator access. Responses
-          contain only explicit safe fields.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"runtime-api"} operations={[{"path":"/api/v1/sandbox-node/configuration","method":"get"},{"path":"/api/v1/sandbox-node/enroll","method":"post"},{"path":"/api/v1/sandbox-node/identity","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/meta.json b/apps/docs/content/docs/api-reference/meta.json
deleted file mode 100644
index f96a25397..000000000
--- a/apps/docs/content/docs/api-reference/meta.json
+++ /dev/null
@@ -1,21 +0,0 @@
-{
-  "title": "Application API",
-  "pages": [
-    "index",
-    "agents",
-    "environments",
-    "environment-templates",
-    "sessions",
-    "artifacts",
-    "events",
-    "items",
-    "subagents",
-    "turns",
-    "files",
-    "skills",
-    "vaults",
-    "credentials",
-    "core",
-    "machine"
-  ]
-}
diff --git a/apps/docs/content/docs/api-reference/sessions.mdx b/apps/docs/content/docs/api-reference/sessions.mdx
deleted file mode 100644
index 64a9dbeb0..000000000
--- a/apps/docs/content/docs/api-reference/sessions.mdx
+++ /dev/null
@@ -1,252 +0,0 @@
----
-title: Sessions
-description: >-
-  Sessions. Application API: Project API key. Public schema constrained by the
-  pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core
-  extensions.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Cursor and results are scoped to the authenticated execution tenant;
-          an unknown, malformed or foreign after cursor returns not found.
-          Optional agent_id matches the immutable root Agent ID, including
-          inline Agents and historical Sessions whose saved source was updated
-          or deleted. Omission lists all Agents. Returns the same Environment
-          and pending-input activity projection as Session retrieval, including
-          self_hosted Sessions.
-      - content: >-
-          The optional Core model_provider bundle resolves from the Session
-          override, saved Agent defaults, then, for openai_hosted and none, the
-          deployment default of the resolved harness; self_hosted never uses the
-          deployment default and none accepts only it. openai_hosted and
-          self_hosted Sessions that resolve no bundle return 400
-          model_provider_required with param x_agents_core.model_provider before
-          any write. Core encrypts and freezes the resolved bundle; later Agent
-          or deployment default edits and same-key retries cannot change it.
-          Keys are never returned. Supports inline configuration or a
-          tenant-owned saved agent_id with per-Session field replacements.
-          Execution supports model/instructions, text verbosity, non-deferred
-          function tools, adapter-qualified multi_agent with persisted Subagent
-          reads, implicit reasoning, service tier auto and environment type
-          none, subject to the configured engine. Codex additionally supports
-          HTTP MCP with service origin (omitted or null on HTTP transport is
-          saved as service), native allowed_tools and boolean required
-          defaulting to false. Session vault_ids attach only project-owned
-          Vaults; credential_id selects an attached static bearer or OAuth
-          credential for the exact HTTPS URL, while null/omission selects a
-          unique match or remains anonymous. Session reads, lists and event
-          snapshots show that implicitly selected credential ID in a null or
-          omitted credential_id, also after the credential is deleted; anonymous
-          selections stay null and the stored caller intent is unchanged. After
-          the input requirement and before any write, a credential_id without
-          vault_ids, one outside the attached Vaults (one message for missing,
-          foreign and unattached IDs) or one for another server_url returns 400
-          invalid_request_error, and several implicit matches return 409
-          conflict_error. Missing decryption configuration fails dispatch
-          without anonymous fallback. Required initialization uses native
-          startup before the first native Turn, including cold resume, and
-          requires a separately advertised capability; exact hosted creation
-          timing and error parity remain unverified. Explicit environment-origin
-          HTTP MCP is supported on managed and self-hosted workspaces through
-          the same Runtime bindings; native OAuth login remains unsupported. The
-          self_hosted profile uses a qualified native harness, a clean absolute
-          workspace_directory and optional absolute local capability_directories
-          prepared by Runtime, with optional non-deferred function tools and
-          HTTP MCP using explicit environment origin, optionally authenticated
-          by the attached Vault rules. Service-origin HTTP remains restricted to
-          service-side environment:none. Remote MCP and remote Bearer
-          authentication each require separately advertised combination support;
-          old peers cannot receive unsupported work. Omitted/null
-          capability_directories use the empty-list default; self_hosted
-          requires configured execution plus executor registry. Claude SDK
-          currently requires medium verbosity and object-root function schemas.
-          It supports anonymous or attached static-bearer service-origin HTTP
-          MCP on none with boolean required and separately advertised
-          MCP/bearer/required runtime support. Required servers must be
-          connected before the first native input is released; pending or failed
-          startup rejects execution. The shared Vault selection and immutable
-          binding rules apply; unsupported native labels/tool names reject
-          before persistence. An attached Vault with no matching credential may
-          remain anonymous; missing keys or failed credential lookup/decryption
-          never fall back to anonymous execution. Omitted stream defaults to
-          false; stream and agent_id cannot be null. Metadata may be null;
-          non-string values and limit violations return invalid_request_error
-          with a metadata or metadata.<key> param. The inline agent uses the
-          Agent create configuration validation with agent.-prefixed params,
-          reported before the input requirement and saved-Agent lookup; saved
-          configurations with conflicting tools or schema roots reject admission
-          with the same errors, and execution limits keep
-          unsupported_or_invalid_configuration. Hosted network policy rejections
-          return invalid_request_error with a null param. Initial input accepts
-          a string or ordered user-message array. Codex and Claude SDK on none
-          and qualified managed or self_hosted workspace profiles also accept
-          inline PNG/JPEG image content; other image combinations and remote
-          URLs are unsupported. None initial input atomically starts a Turn;
-          self_hosted initial input is reserved while returning its Environment
-          connection target, with execution deferred to native readiness and
-          Session failure on initial timeout. Initial input is required for none
-          and for streamed creation outside self_hosted. Omitted/null input
-          remains valid for non-streaming hosted and self_hosted creation. With
-          stream=true, returns live Session events starting with the committed
-          creation snapshot and closes right after the first agent.session.idle
-          recorded when a Turn ends or an input reservation stops being pending,
-          or any agent.session.failed, without sending later events. A creation
-          that admitted nothing closes after the snapshot; a settlement that
-          records no event closes after events up to the cursor read with a
-          settled Session projection. Required actions keep it open; disconnect
-          does not cancel execution. The GET events stream remains live-only.
-          New Sessions retain their authenticated creator; all creation retries
-          require the same typed subject, including across key rotation.
-          Saved-Agent retries and inline requests using Vault attachments or
-          credential references retain caller intent independently of later
-          resource changes; new hosted inline requests also freeze caller intent
-          before deployment defaults resolve; unrelated non-hosted inline
-          retries preserve resolved/default equivalences, and their resolved
-          hash leaves out any deployment default. Provider keys enter retry
-          hashes only as fingerprints keyed by the credential key. Unknown
-          historical creators reject retries; known creators without recorded
-          intent retain resolved-snapshot retry rules. These conflict policies
-          are local and not verified hosted parity. A same-key stream=true retry
-          of an existing creation returns 201 with no events and closes at once;
-          retry with stream=false or use the GET events stream to recover.
-          Claude SDK on none, Core-managed Docker openai_hosted and self_hosted
-          supports qualified object-root json_schema output with medium
-          verbosity, single-Agent execution and ordinary functions. Hosted
-          execution reuses native workspace tools and Files/Artifacts; Skills,
-          Plugins, capability directories, HTTP MCP, Subagent and tool_search
-          combinations remain unqualified, including inherited template
-          contents. Other non-text initial input remains unsupported. Basic
-          Codex and Claude SDK openai_hosted creation requires an explicitly
-          configured managed provider. The Claude workspace profile supports
-          non-deferred function tools with text or successful inline PNG/JPEG
-          results alongside native workspace tools; explicit environment-origin
-          HTTP MCP uses the common Runtime path. MiniMax accepts public
-          environment-origin HTTP MCP only with null or omitted allowed_tools
-          and required=false; even an empty non-null allowlist rejects. Idle
-          Sessions provision automatically; initial provisioning has no caller
-          connection action. Network defaults to enabled; disabled and
-          restricted policies reject before compute allocation because the
-          current Runtime cannot enforce them. The x_agents_core.environment
-          extension accepts common preparation fields for either hosted or
-          self-hosted placement: environment_template_id, files, env, packages,
-          setup_commands, skills, plugins and capability_directories. Duplicate
-          fields in environment and the extension reject. Confidential env,
-          npm/Python packages and ordered setup commands use the same
-          Environment-owned initialization lifecycle; compute allocation does
-          not own preparation. Unknown side effects are not replayed after
-          disconnect or restart. System dependencies must be preinstalled in the
-          sandbox image or template, or on the host machine; packages.system is
-          rejected. Initial inline and tenant-owned file_id files freeze
-          encrypted bytes before provisioning, then install through the common
-          Core lifecycle before native execution or live Files access. With a
-          template reference, omitted/null files, env, packages and
-          setup_commands inherit. Non-null files and command lists replace; env
-          overlays by key; each package manager inherits on omission/null and
-          otherwise replaces its list. Empty lists clear their selected field.
-          Tenant-owned environment_template_id references inherit omitted/null
-          network and allow only narrowing overrides. Inline hosted network:null
-          retains the enabled default; updating a Template with network:null
-          resets its saved policy to enabled. Core freezes effective
-          configuration; template updates/deletion do not alter Session
-          snapshots or same-intent creation retries. Inline or tenant-owned
-          skill_reference Skills share initialization. Templates preserve
-          default/latest/explicit selectors; Session creation freezes concrete
-          metadata and encrypted content atomically. Skill, Plugin and
-          capability-directory list omission/null inherit; a non-null list
-          replaces, including empty-list clearing. Omitted/null Skill version
-          selectors resolve the default version. Source deletion/default updates
-          cannot change committed Session Skill contents. Deferred function
-          discovery uses type-only tool_search and per-function defer_loading in
-          the qualified single-agent Claude function profile on none or a
-          managed/user-owned workspace, including qualified inline image
-          messages and text results. Explicit web_search mode disabled and
-          programmatic_tool_calling enabled false use frozen common Runtime
-          controls. Enabled forms, including those saved on an Agent, remain
-          unqualified and reject before any write unless the Session replaces
-          tools. Omitted programmatic configuration preserves native behavior, a
-          documented difference from the official default-on behavior. Other
-          combinations remain unqualified; see the operation coverage.
-      - content: >-
-          Returns supported none, self_hosted and basic openai_hosted Session
-          environments. Self-hosted pending input can require a caller
-          connection before a Turn exists. Hosted initial provisioning remains
-          idle until a Turn starts; connection observations are not native
-          execution readiness.
-      - content: >-
-          The metadata field is required in an update body. Send null or {} to
-          clear it, or supply an object to replace all pairs. Up to 16 string
-          pairs, with keys at most 64 characters and values at most 512
-          characters; violations and non-string values return
-          invalid_request_error with a metadata or metadata.<key> param. U+0000
-          is rejected as a local storage limit. Malformed, missing and foreign
-          Session IDs share the not-found response. Execution configuration and
-          activity are unchanged. Returns the same safe Environment and
-          pending-input activity projection as Session retrieval.
-      - content: >-
-          Removes a durably idle or failed Session and its history from the
-          public API. A Session whose root Turn is queued, in progress or
-          waiting (including required actions) or whose input reservation is
-          pending returns 409 conflict_error and is left unchanged; cancel it
-          and wait until it is idle before deleting. Subagent child Turns and
-          pending Environment file writes are not checked and do not block
-          deletion. Repeating the deletion of the caller's own deleted Session
-          returns the same confirmation; missing and foreign Sessions return
-          404. Internal records and native history are retained pending separate
-          physical cleanup; overlapping stream timing remains unverified.
-      - content: >-
-          An empty events array is a resource-authorized no-op; it creates no
-          execution retry identity, Turn, Item or input receipt. For environment
-          none, atomically accepts text messages, cancellation and function
-          results. Messages steer active work or start a queued Turn. Qualified
-          Codex and Claude SDK workspace profiles accept text and inline
-          PNG/JPEG messages, independently of managed or self_hosted ownership.
-          Under the Session lock, matching retries retain their original target;
-          new active messages append to the current Turn, while idle messages
-          reserve work and wait up to the original five-minute
-          connection/admission deadline. Return 202 only after durable
-          admission, without claiming native application; active messages create
-          no Turn or reservation. Cancellation-only prepared-environment batches
-          use existing durable cancellation admission and return 202 without
-          waiting for native exit; a new cancellation conflicts while a pre-Turn
-          reservation is pending. Homogeneous tool_result-only
-          prepared-environment batches reuse existing scoped result admission
-          and application receipts without creating a Turn or bypassing a
-          pending reservation. Mixed prepared-environment batches remain
-          unsupported. HTTP expiry/cancellation use local 409
-          environment_input_expired/environment_input_cancelled errors. New
-          input on a Session whose hosted Environment failed to provision
-          returns the observed 409 conflict_error "the hosted environment failed
-          to provision"; input already waiting when it fails and expired
-          Environments keep the local 409 environment_unavailable. Input the
-          Session cannot accept in its current state, such as a result after
-          cancellation or a batch while earlier input is pending, and a result
-          that differs from the call's saved result return 409 with type and
-          code conflict_error; reusing an Idempotency-Key with a different batch
-          returns the local 409 idempotency_conflict. Inside an owned Session, a
-          result for an unknown call or for a call of another Turn returns 400
-          invalid_request_error and changes nothing; missing and foreign
-          Sessions return 404. Losing execution ownership returns 503. The
-          response write deadline accommodates the admission window for either
-          prepared Environment, independently of new-hosted-admission and
-          executor URL settings. Disconnecting the waiting HTTP request does not
-          cancel retained work or restart its deadline. Retry keys identify the
-          whole ordered batch. Function output accepts text or ordered
-          text/image parts subject to engine support; Claude SDK accepts text
-          results and, on none and qualified workspace profiles, successful
-          inline PNG/JPEG results, preserving ordered content; error images and
-          remote references reject before admission. Native image resizing may
-          change bytes. Runtime image-result support is checked only for
-          image-bearing delivery. Codex and Claude SDK on none and qualified
-          managed or self_hosted workspace profiles accept ordered inline
-          PNG/JPEG image messages. Other engines remain text-only; remote image
-          URLs are unsupported. Image references are retained unchanged without
-          service-side downloads.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"public-api"} operations={[{"path":"/agents/sessions","method":"get"},{"path":"/agents/sessions","method":"post"},{"path":"/agents/sessions/{session_id}","method":"get"},{"path":"/agents/sessions/{session_id}","method":"post"},{"path":"/agents/sessions/{session_id}","method":"delete"},{"path":"/agents/sessions/{session_id}/events","method":"post"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/skills.mdx b/apps/docs/content/docs/api-reference/skills.mdx
deleted file mode 100644
index 8757bc526..000000000
--- a/apps/docs/content/docs/api-reference/skills.mdx
+++ /dev/null
@@ -1,51 +0,0 @@
----
-title: Skills
-description: >-
-  Skills. Application API: Project API key. Public schema constrained by the
-  pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core
-  extensions.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Lists tenant-owned metadata in timestamp order. Default page size 20,
-          maximum 100. Limit 0 returns an empty page whose has_more reports
-          whether any Skill follows the cursor; exact hosted defaults remain
-          unverified.
-      - content: >-
-          Accepts one ZIP in files or a directory in files[]. Applies the
-          qualified portable Skill bundle profile. No Beta header is required;
-          full hosted upload limits and activation extensions are not qualified.
-      - content: >-
-          Returns tenant-owned metadata without decrypting contents or starting
-          Runtime. No Beta header is required.
-      - content: >-
-          Changes only the tenant-owned default pointer; immutable versions and
-          existing Session snapshots remain unchanged.
-      - content: >-
-          Deletes tenant-owned source bundles. Existing Session installation
-          snapshots remain independent.
-      - content: >-
-          Downloads an authorized ZIP using the default pointer when no concrete
-          version is supplied. Exact upstream unversioned selection, content
-          headers and range semantics remain unverified.
-      - content: >-
-          Orders by version number; after identifies a version resource, not a
-          version number. An after value that does not begin with skillver, or a
-          version of another Skill, returns 400 invalid_value with param after;
-          a missing version returns not found. No contents are decrypted. Limit
-          0 returns an empty page whose has_more reports whether any version
-          follows the cursor.
-      - content: >-
-          Deleting the only remaining version also deletes the Skill; existing
-          Session installation snapshots remain independent. The default version
-          cannot be deleted while other versions remain. Version numbers are
-          never reused.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"public-api"} operations={[{"path":"/skills","method":"get"},{"path":"/skills","method":"post"},{"path":"/skills/{skill_id}","method":"get"},{"path":"/skills/{skill_id}","method":"post"},{"path":"/skills/{skill_id}","method":"delete"},{"path":"/skills/{skill_id}/content","method":"get"},{"path":"/skills/{skill_id}/versions","method":"get"},{"path":"/skills/{skill_id}/versions","method":"post"},{"path":"/skills/{skill_id}/versions/{version}","method":"get"},{"path":"/skills/{skill_id}/versions/{version}","method":"delete"},{"path":"/skills/{skill_id}/versions/{version}/content","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/subagents.mdx b/apps/docs/content/docs/api-reference/subagents.mdx
deleted file mode 100644
index e2f3346ee..000000000
--- a/apps/docs/content/docs/api-reference/subagents.mdx
+++ /dev/null
@@ -1,49 +0,0 @@
----
-title: Subagents
-description: >-
-  Subagents. Application API: Project API key. Public schema constrained by the
-  pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core
-  extensions.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Includes nested and closed Subagents. Cursors are Subagents of the
-          same tenant and Session. Any other after value, including a malformed
-          one, returns 400 invalid_request_error with the message "Invalid
-          resource ID in `after`". A limit outside 1–100 is rejected.
-      - content: >-
-          Returns this Session's persisted Subagent. Active includes idle
-          between Turns. Resuming preserves opened_at and clears closed_at.
-          Unknown or inaccessible parent scopes return not found.
-      - content: >-
-          Returns only this Subagent's own Items across all its Turns, not its
-          descendants' Items. Cursors are Items of the same tenant, Session and
-          Subagent. Any other after value, including a malformed one, returns
-          400 invalid_request_error with the message "Invalid session item ID in
-          `after`".
-      - content: >-
-          Includes this Subagent's Turns after resume, with the Session's Agent
-          ID as agent_id. Cursors are Turns of the same tenant, Session and
-          Subagent. Any other after value, including a malformed one, returns
-          400 invalid_request_error with the message "Invalid resource ID in
-          `after`". Missing recorded usage remains null. A limit outside 1–100
-          is rejected.
-      - content: >-
-          Returns a Turn owned by this Subagent. Its agent_id is the Session's
-          Agent ID and its subagent_id identifies the Subagent. Session Turn
-          routes do not return child Turns. Unknown or inaccessible parent
-          scopes return not found.
-      - content: >-
-          Returns Items owned by this exact Subagent Turn. Cursors are Items of
-          the same tenant, Session, Subagent and Turn. Any other after value,
-          including a malformed one, returns 400 invalid_request_error with the
-          message "Invalid session item ID in `after`".
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"public-api"} operations={[{"path":"/agents/sessions/{session_id}/subagents","method":"get"},{"path":"/agents/sessions/{session_id}/subagents/{subagent_id}","method":"get"},{"path":"/agents/sessions/{session_id}/subagents/{subagent_id}/items","method":"get"},{"path":"/agents/sessions/{session_id}/subagents/{subagent_id}/turns","method":"get"},{"path":"/agents/sessions/{session_id}/subagents/{subagent_id}/turns/{turn_id}","method":"get"},{"path":"/agents/sessions/{session_id}/subagents/{subagent_id}/turns/{turn_id}/items","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/turns.mdx b/apps/docs/content/docs/api-reference/turns.mdx
deleted file mode 100644
index e3dac307c..000000000
--- a/apps/docs/content/docs/api-reference/turns.mdx
+++ /dev/null
@@ -1,28 +0,0 @@
----
-title: Turns
-description: >-
-  Turns. Application API: Project API key. Public schema constrained by the
-  pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core
-  extensions.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Returns the Session's root Turns in creation order; Subagent Turns are
-          listed through the Subagent Turn routes. The cursor belongs to the
-          same Session and tenant; any other after value, including a malformed
-          one or a Subagent Turn ID, returns not found. Usage contains the
-          latest recorded complete token breakdown; missing measurements remain
-          null.
-      - content: >-
-          Returns a root Turn of this Session. A Subagent Turn ID returns the
-          same not found error as a missing Turn; read it through the Subagent
-          Turn routes.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"public-api"} operations={[{"path":"/agents/sessions/{session_id}/turns","method":"get"},{"path":"/agents/sessions/{session_id}/turns/{turn_id}","method":"get"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/api-reference/vaults.mdx b/apps/docs/content/docs/api-reference/vaults.mdx
deleted file mode 100644
index 3bb1698f4..000000000
--- a/apps/docs/content/docs/api-reference/vaults.mdx
+++ /dev/null
@@ -1,50 +0,0 @@
----
-title: Vaults
-description: >-
-  Vaults. Application API: Project API key. Public schema constrained by the
-  pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core
-  extensions.
-full: true
-_openapi:
-  toc: []
-  structuredData:
-    headings: []
-    contents:
-      - content: >-
-          Lists project-owned Vaults independently of execution. An unknown,
-          malformed or foreign after cursor returns not found. Includes active
-          and archived records by default. Status accepts a scalar, the SDK's
-          status[] array or both, filtering by their union; a repeated scalar is
-          rejected. Limits default to 20 and clamp to 1–100. Equal creation
-          times use ID ordering; exact hosted errors and concurrent-page
-          behavior remain unverified. Archive/delete lifecycle is not
-          implemented.
-      - content: >-
-          Creates a project-owned Vault independently of execution. Omitted name
-          stays null; a supplied string is trimmed and must contain 1–256 UTF-8
-          bytes. Explicit null name is invalid. Omitted/null metadata becomes an
-          empty object; non-string values return invalid_request_error with a
-          metadata.<key> param. Metadata has a local 64 KiB encoded storage
-          bound. U+0000 in stored strings is rejected as a local storage limit.
-          Credentials, Session binding and hosted error/retry parity remain
-          incomplete.
-      - content: >-
-          Reads a Vault owned by the authenticated project without resolving
-          credentials, Sessions or execution devices. Missing and foreign IDs
-          share the same not-found response; exact hosted error semantics remain
-          unverified.
-      - content: >-
-          Atomically removes the authenticated project's Vault and all its
-          stored Credentials without an encryption key, decryption or external
-          requests. Existing Session snapshots, history and recorded retries
-          retain their frozen identities; subsequent credential lookups fail
-          without reselection or anonymous fallback. Already-resolved tokens and
-          running Sessions are not revoked or cancelled. Missing/repeated
-          deletion locally returns 404. Exact hosted archive, post-delete
-          visibility and concurrent/error semantics remain unverified; physical
-          erasure from native history, WAL or backups is not established.
----
-
-{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
-
-<APIPage document={"public-api"} operations={[{"path":"/vaults","method":"get"},{"path":"/vaults","method":"post"},{"path":"/vaults/{vault_id}","method":"get"},{"path":"/vaults/{vault_id}","method":"delete"}]} webhooks={[]} hasHead={true} />
\ No newline at end of file
diff --git a/apps/docs/content/docs/bootstrap-projects-keys.mdx b/apps/docs/content/docs/bootstrap-projects-keys.mdx
deleted file mode 100644
index 529695e3d..000000000
--- a/apps/docs/content/docs/bootstrap-projects-keys.mdx
+++ /dev/null
@@ -1,145 +0,0 @@
----
-title: "Sign in and issue application keys"
-description: "Keep the Core key on the management side and issue Project API keys through Web."
----
-
-The console server (`services/web`, the `oac-web` process) serves the built console, signs the administrator in with the Core key and forwards the signed-in browser's `/core/v1` requests to Core with that key. The browser never holds the Core key or any API key. Applications, nodes and self-hosted executors call Core directly; the console forwards none of their traffic.
-
-## Request boundary
-
-```mermaid
-flowchart LR
-  browser["Administrator browser"]
-  console["Console server"]
-  core["Core"]
-  database[("PostgreSQL")]
-  application["Application / official SDK"]
-  machine["Nodes and Runtime daemons"]
-  installer["Installer domain service"]
-
-  browser -->|"same origin: /console/*, /core/v1/*; session cookie"| console
-  console -->|"/core/v1/* with the Core key"| core
-  console -->|"domain setup, Unix socket"| installer
-  application -->|"/v1 with a Project API key"| core
-  machine -->|"/api/v1 with machine credentials"| core
-  core <--> database
-```
-
-The deployment's reverse proxy routes `/v1` and `/api/v1` to Core and every other path to the console; the [installation options](/install-options#https-and-the-reverse-proxy) gives the routes. The console handles each path as follows:
-
-| Path | Sign-in | Handling |
-| --- | --- | --- |
-| `/healthz` | No | `GET` or `HEAD` answers `200 ok` |
-| `/v1`, `/api/v1` and below | — | 404, whatever credential the request carries |
-| `/node-install/*` | No | The node installation payload (see [Node installation payload](#node-installation-payload)) |
-| `/console/auth`, `/console/auth/login`, `/console/auth/logout` | No | [Sign-in](#sign-in) |
-| `/`, `/index.html`, `/favicon.svg`, `/oac-mark.svg`, `/assets/*` | No | Static console assets |
-| `/console/config` | Yes | [Console configuration](#console-configuration) |
-| `/console/installation/domain` | Yes | [Domain setup](#domain-setup) |
-| `/core/v1/*` | Yes | [Forwarded to Core](#forwarding-to-core) |
-| `/core` and other paths under `/core/` | Yes | 404 |
-| Any other path | Yes | Static assets; a path without a file extension falls back to `index.html` |
-
-Every request except `/healthz`, `/v1` and `/api/v1` must pass these checks first:
-
-1. **Host and origin.** The `Host` header must equal the host of `OAC_WEB_ORIGIN`. An `Origin` header, when present, must equal that origin, and `Sec-Fetch-Site` must be `same-origin` or `none`. A write that carries neither `Origin` nor `Sec-Fetch-Site: same-origin` needs a same-origin `Referer`. Otherwise the console answers 403. `/node-install/*` checks only the host and the path.
-2. **Safe request.** The path must start with `/` and contain no `%`, backslash, NUL, dot segment or empty segment. Absolute-form request targets, `CONNECT`, `TRACE` and any request with an `Upgrade` header get 400. A request can therefore never leave `/core/v1` on Core, and the console carries no WebSocket.
-3. **Sign-in.** Paths that need sign-in answer 401 without a valid session cookie.
-
-Under `/core`, these failures use the Core error envelope with the codes in [console-generated failures](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/core-errors.md#console-generated-failures); elsewhere they return `{"error": "…"}`, or plain text for an unsafe request. Every response carries `Cache-Control: no-store`, `X-Content-Type-Options: nosniff`, `Referrer-Policy: no-referrer` and `Content-Security-Policy: frame-ancestors 'none'`.
-
-## Forwarding to Core
-
-The console forwards each signed-in `/core/v1/*` request by prefix to `OAC_WEB_UPSTREAM`, with its path and query unchanged. Core alone decides whether the route exists, and its responses and errors pass through unchanged. The console therefore needs no change when Core adds a `/core/v1` route.
-
-On the way to Core, the console:
-
-- removes the browser's `Authorization`, `Proxy-Authorization`, `Cookie`, `Origin` and `Referer` headers;
-- sends `Authorization: Bearer <Core key>`;
-- sets `X-Core-Console-Actor: console`, replacing any value the browser sent. Core records it as a display-only audit label ([administrator API](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/admin-api.md));
-- ignores ambient HTTP proxy settings, so the Core key reaches only the configured Core;
-- streams responses without buffering.
-
-On the way back, it removes `Set-Cookie`, `WWW-Authenticate`, `Location`, `Refresh` and every `Access-Control-*` header. A redirect from Core, or a failed connection to Core, becomes 502 `core_unreachable`.
-
-The console never retries a request. Browser code calls `/core/v1` through the typed clients in [`packages/agents-client`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/packages/agents-client/README.md); [console API usage](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/web/console-api-usage.md) lists what each page reads and writes.
-
-## Sign-in
-
-| Method and route | Request | Result |
-| --- | --- | --- |
-| `GET /console/auth` | No body | `200 {"mode":"login"}` or `200 {"mode":"authenticated"}` |
-| `POST /console/auth/login` | `Content-Type: application/json`; body `{"core_key":"…"}` with no other member, at most 4 KiB | `200 {"mode":"authenticated"}` and the session cookie |
-| `POST /console/auth/logout` | No body | `200 {"mode":"login"}`; ends the session and clears the cookie |
-
-The administrator signs in with the deployment's [Core key](/troubleshooting#core-key). There are no console accounts, usernames or setup step, and signing in grants the whole console.
-
-- The console compares SHA-256 digests of the submitted and configured keys in constant time. It never logs or returns the key.
-- The session cookie `core_console_session` is HttpOnly, `SameSite=Strict`, and `Secure` when `OAC_WEB_ORIGIN` is HTTPS. It lasts 12 hours.
-- Sessions live only in the console's memory, at most 64 at a time; the oldest is dropped first. A console restart or a Core key rotation signs everyone out.
-- At most two sign-in checks run at once; another attempt gets 429 with `Retry-After: 1`.
-- Failed attempts share a budget of 10 per minute; beyond it, a wrong key gets 429 with `Retry-After: 60`. The correct key always signs in, which is why the console refuses to start with a Core key shorter than 32 characters.
-
-Sign-in errors: 400 for a malformed body, 401 `Invalid Core key`, 405 for a method other than `POST`, 415 for a body that is not JSON, 429 as above, and 503 when the console cannot create a session.
-
-## Console configuration
-
-`GET /console/config` returns what the signed-in browser needs to add nodes:
-
-| Field | Meaning |
-| --- | --- |
-| `node_installer` | Whether the console serves a node installation payload |
-| `node_installer_sha256` | SHA-256 of that payload's `node-install.pyz`; Add node commands verify it before running the installer |
-| `node_artifacts` | The providers (`docker`, `microsandbox`) whose node artifacts the payload holds, locally or as a pinned release download. Read on every request, so artifacts added by rerunning the installer appear without a restart |
-
-## Node installation payload
-
-With `OAC_WEB_NODE_PAYLOAD_DIR` set, the console serves the matched distribution's node payload at `/node-install/` without sign-in: `node-install.pyz`, `manifest.json`, `SHA256SUMS`, `runtime/seccomp.json`, and the node artifacts the manifest declares under `artifacts/`. An artifact missing locally redirects (307) to its pinned release download. Node install and uninstall commands download from `<public_url>/node-install/`, so the reverse proxy must send that path to the console. Nodes verify every checksum themselves.
-
-## Domain setup
-
-`GET` and `POST /console/installation/domain` let **System → Domain and HTTPS** configure a managed installation's domain. They are console routes, not Core routes. After the same origin and sign-in checks, the console passes the request body (at most 2 KiB) to the installer's Unix socket at `OAC_WEB_INSTALLATION_SOCKET`, authenticated with the Core key, and returns the installer's JSON answer and status. The request times out after 20 seconds.
-
-| Method | Request | Result |
-| --- | --- | --- |
-| `GET` | No body | The domain status |
-| `POST` | `{"hostname":"core.example.com"}`, optionally with `"confirm_public_url_change":"https://core.example.com"` | 202 and the status; the installer checks and applies the domain in the background |
-
-The status has `supported`, `state` (`unconfigured`, `checking`, `applying`, `ready` or `failed`), and nullable `public_url`, `target_url` and `message`. Installer errors use `{"error":{"code":"…","message":"…"}}`. Changing an address that nodes or executors already use returns 409 `public_url_confirmation_required` until the request confirms the new URL; pending `config.json` edits, an installation that is not applied or not running, hand-edited generated files, and another installation operation holding the lock (`installation_busy`) also return 409.
-
-Without `OAC_WEB_INSTALLATION_SOCKET` (external reverse proxy installations), `GET` reports `supported: false` and `POST` returns 400 `domain_setup_unavailable`. An unreachable installer or an invalid answer returns 502 `installation_unreachable`.
-
-The System page submits a hostname once, polls the status every 2 seconds while it is `checking` or `applying`, and asks for confirmation when the installer requires it. It never retries a write. Applying the domain restarts the console, which ends every session; the page keeps a sign-in link to the new HTTPS address. Only the `ready` state confirms HTTPS; the browser does not probe the new origin. The installer owns certificates, locking and recovery ([managed HTTPS](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/deploy/install/README.md#managed-https)).
-
-`OAC_WEB_BOOTSTRAP=1`, which the installer sets while no public URL is configured, lets the console also accept plain HTTP requests addressed to a literal IP address, treating `http://<that address>` as the origin, so an operator can sign in through the server's IP address. Host names still require `OAC_WEB_ORIGIN`, so DNS rebinding cannot reach the console.
-
-## Settings
-
-The installer sets these variables from `config.json`; set them yourself only when you run the console without the installer. Of the installation's secrets, the installer gives the console only `secrets/core.key`.
-
-| Variable | Default | Meaning |
-| --- | --- | --- |
-| `OAC_WEB_ADDR` | `:8080` | Listener address |
-| `OAC_WEB_ORIGIN` | `http://127.0.0.1:8080` | The exact browser-facing origin, HTTP or HTTPS, without a path. Host and origin checks use it; HTTPS makes the session cookie `Secure` |
-| `OAC_WEB_UPSTREAM` | `http://core:8091` | Core's origin, HTTP or HTTPS, without credentials, query or path |
-| `OAC_WEB_CORE_KEY_FILE` | `/admin/core.key` | Absolute path of a regular file with no group or other permissions, holding the Core key: at least 32 characters, no whitespace, at most 4 KiB |
-| `OAC_WEB_DIST` | `/www` | Absolute directory of the built console; must contain `index.html` |
-| `OAC_WEB_NODE_PAYLOAD_DIR` | unset | Absolute path of the matched distribution's node payload (the installer's `node-payload/`). Unset, `/node-install/*` is not served and Add node is unavailable |
-| `OAC_WEB_INSTALLATION_SOCKET` | unset | Absolute path of the installer's domain socket. Unset, domain setup reports unsupported |
-| `OAC_WEB_BOOTSTRAP` | `0` | `1` accepts literal-IP hosts before a domain is configured. Requires an `http://` origin and `OAC_WEB_INSTALLATION_SOCKET` |
-
-An invalid `OAC_WEB_*` value stops the console at startup with a message naming the variable. The console also reads `OAC_LOG_LEVEL`, `OAC_LOG_FORMAT` and `OAC_LOG_ADD_SOURCE` ([configuration](/configure#appendix-core-environment-without-the-installer)); unknown values fall back to their defaults. Use HTTPS for any browser that is not on the same machine.
-
-## Verification
-
-After installing or changing the console, check:
-
-1. `GET /healthz` on the console and on Core. Each proves only that the process answers.
-2. Sign in, then read `GET /core/v1/projects` in the browser. This proves the browser-to-console and console-to-Core path and the console's Core key.
-3. A Project API key works on `/v1` and fails on `/core/v1`. The Core key fails on `/v1`, and `/v1` sent to the console answers 404.
-4. A cross-origin write to the console is rejected, and a forged `X-Core-Console-Actor` header does not change the audit label.
-5. Neither sign-in nor the sandbox deployment read (`GET /core/v1/sandbox/deployment`) proves that a model or a sandbox is ready. Runtime observations and history report execution separately.
-
-A sign-in failure belongs to the console. A 401 from Core on a signed-in request means the console's Core key does not match Core's digest, or the console reaches the wrong Core. The [troubleshooting table](/troubleshooting#troubleshooting) covers the common symptoms.
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/web/console-server.md)
diff --git a/apps/docs/content/docs/concepts.mdx b/apps/docs/content/docs/concepts.mdx
deleted file mode 100644
index ef0c0da2e..000000000
--- a/apps/docs/content/docs/concepts.mdx
+++ /dev/null
@@ -1,95 +0,0 @@
----
-title: "Concepts and ownership"
-description: "Projects, credentials and the boundary between applications, administration and execution."
----
-
-OpenAgentCore implements the OpenAI Agents API under the
-[public API rules](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/AGENTS.md#public-api).
-
-## Three namespaces, three credentials
-
-Applications, administrators and machines each use their own namespace and
-credential. The [API index](/public-api) owns the complete matrix.
-
-Separating API authority does not stop an administrator from holding application
-credentials: they can issue a Project API key and use it like any application.
-
-## Projects own assets
-
-A Project owns one execution tenant and its assets.
-
-- **Keys.** A Project has one or more named API keys. They share its principal,
-  permissions and resources. Each write records the key that made it.
-- **No users or roles.** Core has no users, roles, memberships or read-only keys.
-  Names are labels; stable IDs identify Projects and keys.
-- **Storage.** Projects and keys live only in PostgreSQL, never in deployment
-  configuration. A key's plaintext is returned once, at issuance.
-- **Rotation.** Issue a new key in the same Project, then revoke the old one.
-  Revoking a key keeps assets, provenance and accepted work.
-- **Archive.** Archiving a Project revokes every key and blocks new ones.
-  Administrators can still inspect and delete its resources.
-
-The Core key is a deployment credential, managed separately; see
-[Core key](/troubleshooting#core-key). Product concepts such as users,
-workspaces and business permissions stay outside Core:
-a product like Parsar is an ordinary API-key holder in a Project.
-
-## Resource isolation
-
-Agents API reads, writes and references are scoped to the key's Project. A resource
-in another Project is indistinguishable from an absent one. Nothing is shared or
-copied across Projects. Nodes, configured model endpoints and startup settings are
-deployment infrastructure, not business assets.
-
-## What administrators can and cannot do
-
-| Administrators can | Administrators cannot |
-| --- | --- |
-| Inspect resources and execution history | Create, copy or edit arbitrary assets |
-| Delete resources, under the public deletion rules | Start a Session, send input or cancel work |
-| Manage Projects and API keys | Read stored credentials |
-| Issue node enrollment tokens and executor credentials | Impersonate an application |
-| Query operational counts and usage | |
-
-Web signs in with the Core key and keeps it on its server; signing in never creates
-a Session or gives the browser a Project API key.
-
-## Runtime and outer isolation
-
-The same daemon and protocol serve self-hosted Linux, macOS and Windows. OS
-differences belong to Runtime implementations; harness differences belong to
-adapters. Managed Providers are Linux-only.
-
-**The daemon is not a sandbox.** It runs tools with its launching user's
-permissions and adds no filesystem, permission or network isolation, on any OS.
-Isolation comes from the outer Environment: Docker, E2B or microsandbox for managed
-Sessions, or whatever container or VM you choose for a self-hosted machine.
-Authentication, private storage, locks and process cleanup still apply, but they do
-not protect Runtime data from tools running as the same user.
-
-## Secrets and audit
-
-- **Write-only secrets.** Credential values, model keys and confidential template
-  data are never returned by any read, including administrator reads. Conversation
-  text, Skill source and Artifact content are not secrets: administrators see them.
-- **Provenance.** Public writes record their API key. Administrator writes record a
-  separate audit identity and the target Project. Web's actor label is display-only;
-  Core trusts the Core key, not the label.
-- **Audit is transactional.** An audit failure rolls back the write. Reads are not
-  audited. Audit records never contain request bodies, secrets or file contents.
-- **History.** Resources from the removed copy operation keep their `admin_copy`
-  ownership, distinct from historical unknown ownership.
-
-## Out of scope
-
-Do not add product users, RBAC, cross-Project shared assets, administrator
-execution or compatibility with old private protocols. Implementers follow the
-[design rules](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/AGENTS.md#design-principles) and the
-[Core–Runtime protocol](/runtime-protocol).
-
-Native failure classification is adapter-owned and uses finite, structured native
-values. Optional Runtime error metadata is normalized once; it never replaces Core's
-terminal authority, cancellation receipts, Usage or native identity. See
-[native failure classification](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/native-error-classification.md).
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/design-principles.md)
diff --git a/apps/docs/content/docs/configure.mdx b/apps/docs/content/docs/configure.mdx
deleted file mode 100644
index 25eac36a0..000000000
--- a/apps/docs/content/docs/configure.mdx
+++ /dev/null
@@ -1,163 +0,0 @@
----
-title: "Configuration reference"
-description: "The operator config.json, generated files and database-owned runtime settings."
----
-
-Every setting of a Core installation has exactly one home. There are two kinds:
-
-| Kind | Examples | Home | Change it with | Takes effect |
-| --- | --- | --- | --- | --- |
-| [Process settings](#process-settings-configjson) | Public URL, ports, logging, harnesses, execution concurrency, audit retention, OAuth origins, database pool, Runtime history export | `config.json` in the installation directory (default `~/.oac/core`) | Web domain setup or `oac domain` for managed HTTPS; otherwise edit the file, then run `oac apply` | `oac apply` restarts the services that read the changed settings |
-| [Runtime settings](#runtime-settings-web) | Sandbox backend and size, nodes, Projects and keys, default models, executor credentials | Core's PostgreSQL database | Web, or the Core API (`/core/v1`) with the Core key | Saved without a Core restart; nodes prepare Runtime changes asynchronously |
-
-Web's **System** page shows the installation's addresses, the default models, the sandbox configuration and, under **Startup settings**, the process settings read-only with the path of `config.json` and the apply command. Secrets live in [`secrets/`](#installation-directory), one copy each. The files in `generated/` are derived from `config.json`. No configuration file defines Projects or API keys.
-
-## Process settings: config.json
-
-The installer writes every setting that applies to the installation's [mode](/install-options#modes), so the file shows each value. Installer flags listed in [installation options](/install-options) only seed it. To change a setting, edit the file and apply it:
-
-```sh
-~/.oac/core/oac apply --dry-run   # show the changed settings, files and restarts
-~/.oac/core/oac apply
-```
-
-### How oac apply works
-
-1. It validates `config.json` and changes nothing if a value is invalid. `mode`, `native_core` and `ingress` are fixed after installation; to change them, install into a new directory.
-2. It writes the files Core, Web and Compose read into `generated/`: `compose.json`, `core.env`, `core-key-digests.json`, `settings.json` and, when used, `runtime-history.json`, the managed `Caddyfile` and the native Core unit. Don't edit them. A generated file edited by hand stops `apply` until you move the change into `config.json` and run `oac apply --discard-edits`, which keeps the edited copy as `generated/<file>.edited-<time>`.
-3. It compares what it wrote with what actually runs. Each container carries a digest of its inputs (the `io.oac.inputs` label; native Core carries `OAC_INPUTS`), and `apply` recreates or restarts exactly the services whose inputs differ: Core first, then Web. The **Restarts** column below says which services a setting affects; see [stop and restart](/troubleshooting#stop-and-restart) for what a restart interrupts.
-4. While any service runs, `apply` also starts the stopped ones. After `oac stop`, it only writes the files and the installation stays stopped.
-5. If Core refuses a value at startup, `apply` prints Core's startup error. If every service was running with the previous files, it restores them and starts the services again; otherwise it reports the failure, and the next `apply` finishes the work.
-
-`oac status` reports changes to `config.json` that are not applied yet and generated files edited by hand.
-
-### Changing the public URL
-
-`public_url` is the one origin that applications, nodes, sandboxes and self-hosted executors use. Core derives the daemon WebSocket URL, the self-hosted `remote_url` and each sandbox's connection address from it. With `null`, Core uses its loopback origin. Until `public_url` is set, a managed installation serves only Web, over HTTP on the host's IP address at `ports.web`; afterwards that address redirects to `public_url`.
-
-With managed ingress, change it in Web (**System** → **Configure domain and HTTPS**) or with `oac domain HOSTNAME`. Both take the installation lock, verify the new certificate and address, then write `config.json` and apply it. With external ingress, update your reverse proxy first, then edit `public_url` and run `oac apply`.
-
-When nodes, hosted sandboxes or self-hosted executors are bound to the current address, `apply` lists them and asks you to type the new URL (`--confirm-public-url-change URL` without a terminal). Afterwards:
-
-- Nodes on the old address get no new sandboxes: remove them in Web and add them again.
-- Existing sandboxes and executors keep working only while the old address still reaches this Core. A managed domain change replaces the previous domain route.
-- Self-hosted executors must restart with the new `remote_url`, and their installer refuses an installation made for the old address: create new self-hosted Sessions and connect their hosts again.
-
-### Settings
-
-`core.runtime_history.headers` may hold export credentials. They stay in the `0600` `config.json` and the generated file Core reads, and never appear in `oac` output or in Core's settings snapshot. Model providers are not process settings; see [Default models](#default-models).
-
-
-| Key | Type | Default | Modes | Change | Restarts | Meaning |
-| --- | --- | --- | --- | --- | --- | --- |
-| `$schema` | string | none | all | any time | none | Editor hint that points at the installed copy of this schema. Ignored. |
-| `format` | `1` | none | all | fixed | none | Configuration format for this release. Fixed after installation. |
-| `mode` | `"all"` \| `"core-only"` \| `"web-only"` | `"all"` | all | fixed | none | Which services this installation runs. |
-| `native_core` | boolean | `false` | `all`, `core-only` | fixed | none | Run Core as a systemd user service instead of a container. |
-| `public_url` | string or null (canonical origin; HTTP only on loopback) | `null` | all | `oac apply` | core, web | Canonical public origin of Core and Web. With managed ingress, set the DNS hostname in Web or run oac domain; certificates are automatic. With external ingress, configure your TLS reverse proxy before applying this value. |
-| `host` | string (IPv4 or IPv6 address) | `"127.0.0.1"` | all | `oac apply` | core, web | Listener IP. With managed ingress only the gateway is public; Core stays on loopback. The default combined installer listens on all IPv4 interfaces. |
-| `ports.core` | integer 1024–65535 | `8091` | `all`, `core-only` | `oac apply` | core (core, web with native Core) | Host port of the Core API. With native Core, Web follows it. |
-| `ports.web` | integer 1024–65535 | `8080` | `all`, `web-only` | `oac apply` | web | Host port of Web. |
-| `ports.database` | integer 1024–65535 | none | `all`, `core-only` | `oac apply` | database, core | Loopback port of PostgreSQL. Present exactly when native_core is true; the installer picks a free port. |
-| `web.core_url` | string (canonical origin; HTTP only on loopback) | none | `web-only` | `oac apply` | web | Origin of the Core that this Web connects to: HTTPS, or HTTP on a loopback host. |
-| `log.level` | `"debug"` \| `"info"` \| `"warn"` \| `"error"` | `"info"` | all | `oac apply` | core, web | Minimum log level of Core and Web. |
-| `log.format` | `"auto"` \| `"text"` \| `"json"` | `"auto"` | all | `oac apply` | core, web | Log format. auto writes text to a terminal and JSON otherwise. |
-| `log.add_source` | boolean | `false` | all | `oac apply` | core, web | Add the source file and line to each log record. |
-| `core.execution_concurrency` | integer 1–1024 | `4` | `all`, `core-only` | `oac apply` | core | Concurrent execution work units in Core. Unrelated to node sandbox capacity. |
-| `core.harnesses` | array of `"claude_sdk"` \| `"codex"` \| `"mcode"` | `["claude_sdk", "codex", "mcode"]` | `all`, `core-only` | `oac apply` | core | Harnesses that Sessions may select. |
-| `core.default_harness` | `"claude_sdk"` \| `"codex"` \| `"mcode"` | `"codex"` | `all`, `core-only` | `oac apply` | core | Harness used when a Session names none. It must be listed in core.harnesses. |
-| `core.write_audit_retention` | string (Go duration, at least `1h`) | `"2160h"` | `all`, `core-only` | `oac apply` | core | How long non-creation write history is kept, as a Go duration of at least 1h. |
-| `core.oauth_trusted_origins` | array of string (canonical HTTPS origin) | `[]` | `all`, `core-only` | `oac apply` | core | Extra HTTPS origins trusted as private OAuth issuers. |
-| `core.database_pool.max_conns` | integer or null ≥ 1 | `null` | `all`, `core-only` | `oac apply` | core | Maximum database connections. null keeps the driver default, max(4, CPU count). |
-| `core.database_pool.min_conns` | integer or null ≥ 0 | `null` | `all`, `core-only` | `oac apply` | core | Minimum idle database connections. null keeps the driver default, 0. |
-| `core.database_pool.max_conn_lifetime` | string or null (Go duration) | `null` | `all`, `core-only` | `oac apply` | core | Go duration. null keeps the driver default, 1h. |
-| `core.database_pool.max_conn_idle_time` | string or null (Go duration) | `null` | `all`, `core-only` | `oac apply` | core | Go duration. null keeps the driver default, 30m. |
-| `core.database_pool.health_check_period` | string or null (Go duration) | `null` | `all`, `core-only` | `oac apply` | core | Go duration. null keeps the driver default, 1m. |
-| `core.runtime_history` | object or null | `null` | `all`, `core-only` | `oac apply` | core | Runtime history collection and OTLP export. null keeps local collection with Core's defaults. Core checks the values at startup. |
-| `core.runtime_history.transport` | string | none | `all`, `core-only` | `oac apply` | core | OTLP export transport: `otlp_http`. Required with endpoint. |
-| `core.runtime_history.endpoint` | string | none | `all`, `core-only` | `oac apply` | core | OTLP/HTTP metrics URL: a canonical absolute URL with a path and no credentials, query or fragment; HTTPS, or HTTP with insecure. Omit it to keep history local; transport, insecure and headers then must be absent. |
-| `core.runtime_history.insecure` | boolean | none | `all`, `core-only` | `oac apply` | core | Export without TLS. Required for an HTTP endpoint and refused for HTTPS. |
-| `core.runtime_history.headers` | object of string values | none | `all`, `core-only` | `oac apply` | core | Headers sent with each export, such as credentials. Host, Content-Length, Content-Type and Content-Encoding are refused. Never shown by oac or Core. Sensitive. |
-| `core.runtime_history.queue_capacity` | integer | none | `all`, `core-only` | `oac apply` | core | Capacity of the history write queue and of the export queue, up to 4096. Omitted or 0 selects 256. |
-| `core.runtime_history.timeout_seconds` | integer | none | `all`, `core-only` | `oac apply` | core | History write, export and query timeout in seconds, up to 30. Omitted or 0 selects 2. |
-| `core.runtime_history.sample_interval_seconds` | integer | none | `all`, `core-only` | `oac apply` | core | Periodic sampling interval in seconds, 5 to 300. Omitted or 0 selects 30. |
-| `ingress` | `"managed"` \| `"external"` | `"external"` | all | fixed | none | managed provides automatic HTTPS and Web domain setup for a combined Docker installation; install.sh selects it by default. external uses your existing proxy. Fixed after installation. |
-
-
-The schema is [`deploy/install/config.schema.json`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/deploy/install/config.schema.json); each installation keeps a copy in `generated/config.schema.json` for editors. Core serves the non-secret settings snapshot, with the path of `config.json` and the apply command, at `GET /core/v1/installation`. How Core collects and keeps Runtime history is in [retained history](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/runtime-observability.md#retained-history-and-optional-export).
-
-## Runtime settings: Web
-
-Runtime settings live in Core's database. Change them in Web; scripts use the same Core API with the Core key.
-
-| Setting | Where in Web | Core API | Notes |
-| --- | --- | --- | --- |
-| Sandbox backend: Docker, microsandbox or E2B | **System** → **Manage sandbox configuration**: the setup wizard, ending with **Save configuration** | `/core/v1/sandbox/deployment` | One backend per installation. `install.sh --sandbox` saves the first choice. Another backend needs **Reset deployment** first; see [change the sandbox configuration](/hosted-providers#change-the-sandbox-configuration) |
-| Sandbox size, Runtime release, E2B key and template build | **System** → **Manage sandbox configuration** → **Change resources** | `/core/v1/sandbox/deployment` | Web proposes the sizes in [`standard-sizes.json`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/web/src/features/sandbox/standard-sizes.json). Existing sandboxes keep their size and release. The E2B key is write-only and encrypted |
-| Nodes and their capacity | **Nodes**: **Add node**; **Edit node** and **Remove node** on a node's page | `/core/v1/sandbox/enrollment-tokens`, `/core/v1/sandbox/nodes` | See [Node capacity](#node-capacity) and the [nodes guide](/hosted-providers) |
-| Projects and API keys | **Projects and keys**: **Create project**, **Rename**, **Issue key**, **Revoke**, **Archive** | `/core/v1/projects` | Keys are shown once; Core stores digests |
-| Default model per harness | **System** → **Default model configuration**: **Set** | `/core/v1/harnesses/{harness}/model-configuration` | See [Default models](#default-models) |
-| Executor credentials of a self-hosted Session | **Session log**, then the **Session** page: **Executor credentials** | `/core/v1/projects/{project_id}/environments/{environment_id}/executor-credentials` | See [self-hosted executors](/self-hosted-execution) |
-
-Which harnesses are enabled, and the default one, are process settings (`core.harnesses`, `core.default_harness`); System shows them read-only. The [API index](/public-api#core-api) lists every Core API route, and the [deployment contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/sandbox-deployment.md) defines the sandbox fields, limits and change rules.
-
-### Node capacity
-
-Core approves a node's capacity when you generate its Add node command: **Sandboxes at once** (`max_active`, default 2) and, for microsandbox only, **Retained sandboxes** (`max_retained`, default 8), with `max_retained >= max_active >= 1`. Docker never suspends sandboxes, so Web doesn't ask for it and Core keeps `max_retained` equal to `max_active`. Change them later with **Edit node**. Reservations and cleanup that is not confirmed count against capacity; lowering a limit stops no running sandbox. A node's own files can't change its capacity, size or Runtime.
-
-`core.execution_concurrency` is unrelated: it limits concurrent execution work in Core.
-
-### Default models
-
-Set a default in **System** → **Default model configuration**, or use `PUT /core/v1/harnesses/{harness}/model-configuration`. Core encrypts provider keys with `secrets/credential.key` and never returns them. [Model execution](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/model-execution.md#deployment-defaults) owns the request fields and replacement rules, and [precedence](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/model-execution.md#saved-defaults-and-precedence) says which Sessions use a default.
-
-## Installation directory
-
-The installer creates the installation directory, `~/.oac/core` by default, with mode `0700`; the files in `secrets/` are `0600`.
-
-| Path | Content | Changed by |
-| --- | --- | --- |
-| `config.json` | [Process settings](#process-settings-configjson). The only file you edit | You, then `oac apply`; managed domain setup for `public_url` |
-| `oac` | The [management command](/troubleshooting#the-oac-command) | The installer |
-| `state.json` | Installation ID, Compose project name, image IDs, source commit and the digests of generated files | The tools only |
-| `secrets/core.key` | The [Core key](/troubleshooting#core-key) | `oac rotate-core-key` |
-| `secrets/credential.key` | Encryption key for what Core stores sealed in the database: model providers, the E2B key, Vault credentials, Skills, initial files and environment setup | Nothing. Keep it with the database; `oac apply` refuses a changed file |
-| `secrets/database.password` | PostgreSQL password | Nothing. PostgreSQL reads it only when the database is created; `oac apply` refuses a changed file |
-| `generated/` | Files derived from `config.json` | `oac apply` |
-| `node-payload/` | The node installer and node files that Web serves at `/node-install/`, one directory per release | The installer |
-| `native-installers/` | Self-hosted daemon installers for each platform, with their catalog, when the bundle carries them | The installer |
-| `state/e2b/` | Private E2B receipts | Core |
-| `ingress/` | Managed HTTPS: certificates and gateway state, domain setup status and the control sockets | The `gateway` and `installation` services |
-| `native/` | Core binaries, with native Core | The installer |
-| `.oac.lock` | The installation lock | The installer and mutating `oac` commands |
-
-A Web-only installation has only `secrets/core.key`, a copy of its Core's key, and no `state/` or `native-installers/`. A Core-only installation has no `node-payload/`. Only managed ingress has `ingress/`. With native Core, the installation directory and the bundle must be canonical absolute paths without control characters, quotes, backslashes or wildcards.
-
-In Docker, the Compose project is named `oac-<10 hex digits>` (`project` in `state.json`). Its services are `database`, `migrate`, `core` and `web`, plus `gateway` and `installation` with managed ingress. `gateway` publishes `ports.web`, 80 and 443 and routes to Core and Web; `installation` applies domain changes from Web and uses the Docker socket to do so. The volume `<project>_database` holds all data. Native Core runs Core as the systemd user unit `<project>-core.service` instead of a container. Apart from Docker's storage, nothing is written outside your home directory.
-
-## Appendix: Core environment without the installer
-
-Core reads only its environment. The installer renders `generated/core.env` from `config.json`; if you run Core yourself (see [Maintainers and advanced deployments](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/maintainers.md)), set these variables. Compose loads the file with `env_file` and systemd with `EnvironmentFile`, so Compose must be 2.26.0 or newer.
-
-| Variable | Set from |
-| --- | --- |
-| `OAC_PUBLIC_URL` | `public_url`, or Core's loopback origin. Core derives the daemon WebSocket URL, the self-hosted `remote_url`, the hosted sandbox address and the deployment's read-only `core_url` from it, never from request headers. Without it, Core runs no Runtime gateway and executes no Sessions |
-| `OAC_ADDR` | `ports.core` (native Core) or `:8091` in the container |
-| `OAC_DATABASE_URL` | The installation's PostgreSQL without a password, plus `core.database_pool` as `pool_*` query parameters |
-| `OAC_DATABASE_PASSWORD_FILE` | `secrets/database.password`. The URL must then carry no password; migrations and the maintenance commands read the file too |
-| `OAC_CREDENTIAL_KEY_FILE` | `secrets/credential.key` |
-| `OAC_CORE_KEY_DIGESTS_FILE` | `generated/core-key-digests.json`: a JSON array with the SHA-256 of the Core key |
-| `OAC_INSTALLATION_ID` | The installation ID from `state.json`, a canonical UUID. It enables the sandbox deployment and node routes and requires `OAC_PUBLIC_URL` and `OAC_CORE_KEY_DIGESTS_FILE`. Core refuses an ID other than the one its database recorded, so keep the two together |
-| `OAC_SETTINGS_FILE` | `generated/settings.json`, the snapshot Core serves at `GET /core/v1/installation`; Core does not act on it |
-| `OAC_EXECUTION_CONCURRENCY`, `OAC_DEFAULT_HARNESS`, `OAC_HARNESSES`, `OAC_WRITE_AUDIT_RETENTION`, `OAC_OAUTH_TRUSTED_ORIGINS` | The matching `core.*` settings |
-| `OAC_HISTORY_SETTINGS_FILE` | `generated/runtime-history.json`: the [`core.runtime_history`](#settings) object, when it is set |
-| `OAC_LOG_LEVEL`, `OAC_LOG_FORMAT`, `OAC_LOG_ADD_SOURCE` | `log.*`; Web reads the same three |
-| `OAC_E2B_STATE_DIR` | `state/e2b/`: an absolute directory owned by Core's user, with no group or other access. Back it up with the database and `credential.key`; don't mount it into Web or a Runtime |
-| `OAC_E2B_PROVIDER_BIN` | The E2B helper: `/opt/oac/e2b/oac-e2b-provider` in the Core image, `native/e2b/oac-e2b-provider` for native Core. The E2B key and template live in the database |
-| `OAC_NATIVE_INSTALLER_DIR` | `native-installers/`, served to self-hosted machines; the Core image has a copy at `/opt/oac/native-installers`, used when this is unset. Core checks the catalog against its own release before serving it |
-
-Core logs the file paths it loads, never environment values or file contents.
-
-A Web you run without the installer reads the variables in [Console server settings](/bootstrap-projects-keys#settings), plus `OAC_WEB_NODE_PAYLOAD_DIR`: the absolute path of the matched distribution's node payload (the installer's `node-payload/`). Without it, Add node is unavailable.
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/configuration.md)
diff --git a/apps/docs/content/docs/console.mdx b/apps/docs/content/docs/console.mdx
deleted file mode 100644
index 716126125..000000000
--- a/apps/docs/content/docs/console.mdx
+++ /dev/null
@@ -1,59 +0,0 @@
----
-title: "Administrator console"
-description: "Monitor Core, inspect resources and manage deployment settings through Web."
----
-
-Web is the administrator console of one OpenAgentCore deployment. Administrators use it to watch health, capacity, usage and failures, inspect each Project's resources and execution history, and manage Projects, keys, nodes and deployment settings. Applications do not use Web; they call Core's Agents API (`/v1`) with their own Project API keys.
-
-![OpenAgentCore Web overview](/images/source/docs/assets/console-overview-en.webp)
-
-## Sign in
-
-[Sign in](/install#sign-in-to-web) with the deployment's [Core key](/troubleshooting#core-key); the console has no user accounts. The browser keeps only a session cookie, and the [console server](/bootstrap-projects-keys) sends the Core key to Core on its behalf; [sign-in](/bootstrap-projects-keys#sign-in) describes how long a session lasts.
-
-Signing in opens the Overview. While any step is still to do, its **Getting started** checklist leads through four steps in any order: sandboxes ready, a default model provider, a Project with an active key, and a first Session. An optional tour of the console opens from it.
-
-## Console pages
-
-| Group | Page | Purpose |
-| --- | --- | --- |
-| Monitor | Overview | Service status, running Sessions, sandbox slots and work needing attention; 24-hour Session activity; Core and its nodes as a topology, each with a popover glance; Sessions needing attention; usage by Project |
-| Monitor | Core metrics | The Core process: CPU and resident memory against their limits, execution slots and the Turn queue, connected daemons, database latency and pool, background jobs |
-| Monitor | Agent metrics | Requests, errors, duration, tokens, models, tools, Agents and API keys over 1 h, 6 h, 24 h or 7 d |
-| Monitor | Sandbox metrics | Node capacity and hosted Runtime CPU and memory across Projects |
-| Monitor | Session log | Every Session, and each Session's read-only conversation, trace and Turns with the classified reason of a failure; a self-hosted Session's page also manages its executor credentials and gives the command that connects a host |
-| Resources | Agents, Environment templates, Skills, Files, Vaults | Inspection and permitted deletion, with the Project and the creating key of each resource |
-| Platform | Projects and keys | Create, rename and archive Projects; issue and revoke keys; each Project's usage, write history and how to call the API |
-| Platform | Nodes | Add, edit and remove Docker or microsandbox nodes; each node's readiness, capacity and allocations |
-| Platform | System | The installation's public address, API base URL, ID and source commit; **Domain and HTTPS**; each harness's default model; **Sandbox configuration**; Core's `config.json` startup settings, read-only, with where to change them |
-
-Missing data is shown as missing (—), never as zero. [Console API usage](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/web/console-api-usage.md) lists what each page reads and how its figures are bounded.
-
-## What administrators do here
-
-| Task | Where |
-| --- | --- |
-| Give the installation an HTTPS address | **System → Domain and HTTPS**, on an installation with managed ingress; see [Make Core reachable](/install#configure-the-domain-and-https) |
-| Choose the sandbox backend (Docker, microsandbox or E2B), the sandbox size and Runtime, or reset the backend | **System → Sandbox configuration**; see [change the sandbox configuration](/hosted-providers#change-the-sandbox-configuration) |
-| Add or remove execution nodes | **Nodes**; see the [nodes guide](/hosted-providers) |
-| Set the default model of a harness | **System → Default model configuration**; see [default models](/configure#default-models) |
-| Create a Project and issue its API keys | **Projects and keys**; see [Projects and API keys](/troubleshooting#projects-and-api-keys) |
-| Issue, rotate or revoke a self-hosted executor's credential, or copy its install command | The Session's page in the **Session log**; see [self-hosted executors](/self-hosted-execution) |
-| Delete a resource, for example a leaked Credential | The resource's row in its list, or its page; Files are deleted from the Files list. The public deletion rules apply |
-
-Installation creates no Project or key. Opening the console neither allocates compute nor calls a model, and an installation may have zero nodes. Web never starts a Session, sends input or cancels work; the [design principles](/concepts#what-administrators-can-and-cannot-do) state what administrators can and cannot do.
-
-The deployment's sandbox backend serves hosted Sessions. An application's `self_hosted` Runtime, including one in its own E2B account, is a separate path that the sandbox configuration does not change.
-
-A loopback public address (`local_only`) keeps nodes and remote applications from reaching Core. The console stays reachable at its own address and [warns about it](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/web/console-api-usage.md#provenance-and-monitoring).
-
-## More
-
-- [Console server](/bootstrap-projects-keys): request boundary, sign-in, settings and verification.
-- [Console API usage](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/web/console-api-usage.md): the Core routes each page uses.
-- [Web package](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/web/README.md): developing the console.
-- [Administrator API](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/admin-api.md): the `/core/v1` routes behind the console.
-
-OpenAgentCore Web is available under the [MIT License](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/LICENSE).
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/web/README.md)
diff --git a/apps/docs/content/docs/development.mdx b/apps/docs/content/docs/development.mdx
deleted file mode 100644
index aa4832646..000000000
--- a/apps/docs/content/docs/development.mdx
+++ /dev/null
@@ -1,191 +0,0 @@
----
-title: "Develop OpenAgentCore"
-description: "Set up a checkout and choose the right extension boundary."
----
-
-This guide is for contributors changing Core, Runtime, adapters, the Web console
-or the documentation site. For using a deployment, start with the
-[getting started guide](/). Read the
-[contributor rules](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/CONTRIBUTING.md) before changing code.
-
-![OpenAgentCore architecture: applications and the Web console connect to Core through separate APIs; Sandbox Providers, Runtime, Harnesses and model providers connect through shared protocols.](/images/source/docs/assets/development-architecture.png)
-
-## Set up a checkout
-
-Work from an isolated worktree so experiments and validation do not disturb
-another checkout. From an existing clone with an up-to-date `main`:
-
-```sh
-git worktree add ../openagentcore-change -b codex/my-change main
-cd ../openagentcore-change
-```
-
-Install Go at the version in [go.mod](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/go.mod), Node 22, pnpm at the version
-in [package.json](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/package.json), and Python 3.9 or newer. The complete gate
-runs on Linux and needs a dedicated PostgreSQL database, OpenSSL development
-libraries for the microsandbox helper, and a Playwright browser. Provider and
-Runtime builds have additional prerequisites in their component guides.
-
-```sh
-pnpm install --frozen-lockfile
-python3 -m venv .venv
-.venv/bin/python -m pip install -r services/core/tests/requirements.txt
-.venv/bin/python - <<'PYTHON'
-import json
-import subprocess
-import sys
-
-pin = json.load(open("contracts/agents-api/upstream.json"))
-subprocess.check_call([
-    sys.executable, "-m", "pip", "install",
-    "git+" + pin["repository"] + "@" + pin["commit"],
-])
-PYTHON
-pnpm exec playwright install --with-deps chrome
-export OAC_TEST_OFFICIAL_SDK_PYTHON="$PWD/.venv/bin/python"
-```
-
-Set `OAC_TEST_DATABASE_URL` privately to a dedicated PostgreSQL test database.
-Never point the test suite at an installation or product database. The
-[test database rules](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/CONTRIBUTING.md#test-database) list the required role
-permission.
-
-Third-party native packages are pinned build inputs; changing a pin requires the
-relevant native qualification as well as compilation.
-
-## Build and run components
-
-From the repository root:
-
-```sh
-make build-core
-make build-daemon
-```
-
-These produce the Core commands under `~/.oac/build/oac-core/` and the daemon
-under `~/.oac/build/daemon/` by default. `OAC_DEV_HOME` selects another build root;
-`OAC_DEV_CORE_BUILD_DIR` selects an absolute Core output directory. Building does
-not configure a database, start a deployment or qualify native execution.
-
-Use the [service guide](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/README.md#build-standalone-binaries)
-to run the Core migrator and server with a separate development database. The
-[configuration appendix](/configure#appendix-core-environment-without-the-installer)
-owns standalone process settings. For a complete operator installation, use the
-[installation guide](/install); building Core alone is a
-separate contributor workflow.
-
-The [Web package guide](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/web/README.md) describes console development and
-its management-only integration. `pnpm dev:web` starts the frontend development
-server; it does not install Core, issue keys or start native execution. The
-[docs app guide](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/docs/README.md) describes the independent documentation
-site; `pnpm dev:docs` starts its development server.
-
-## Repository map
-
-| Location | Responsibility | Read next |
-| --- | --- | --- |
-| `services/core/internal/api` | Public, administrator and machine HTTP boundaries | [API index](/public-api) |
-| `services/core/internal/store` and `internal/db` | Core persistence, transactions, queries and migrations | [Service guide](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/README.md#database-ownership) |
-| `services/core/internal/execution` | Durable Turn dispatch and scheduling | [Runtime protocol](/runtime-protocol) |
-| `services/core/internal/engine` | Pure qualification of harness operations and placements | [Harness onboarding](/harness-onboarding) |
-| `internal/agentdaemon/proto` and `gateway` | Shared wire types, validators and authenticated Runtime connections | [Runtime protocol](/runtime-protocol) |
-| `internal/runtimebootstrap` | Provider-to-Runtime startup input | [Runtime bootstrap](/runtime-bootstrap) |
-| `apps/daemon/internal/dispatch` | Runtime preparation, Executor reuse, Turn and cleanup ownership | [Harness lifecycle](/harness-onboarding#required-adapter-interfaces) |
-| `apps/daemon/internal/agent` | Native harness adapters | [Native references](/harness-onboarding#native-references) |
-| `services/core/internal/sandbox` | Provider interfaces and managed compute lifecycle | [Provider onboarding](/sandbox-provider) |
-| `services/web` | Console login and the server-side management proxy | [Console server](/bootstrap-projects-keys) |
-| `apps/web` and `packages/agents-client` | Console UI and typed clients | [Web guide](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/web/README.md) |
-| `deploy/install` and `scripts` | Distribution, installation and validation tools | [Maintainers](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/maintainers.md) |
-| `contracts/agents-api` | Pinned schema, local semantic contracts and qualification evidence | [Coverage ledger](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/README.md) |
-| `apps/docs` | Generated guide and API-reference website | [Generation workflow](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/docs/README.md) |
-
-Core owns durable execution facts. Runtime owns local execution and cleanup.
-Adapters translate native operations. Providers own outer compute. These boundaries
-apply to user-owned machines and Core-managed environments; read the
-[design principles](/concepts) for resource and credential vocabulary.
-
-## Choose an extension boundary
-
-Each boundary has one canonical guide. Read it before changing code; this page
-only helps you pick the right one.
-
-| Boundary | You are adding or changing | Canonical guide |
-| --- | --- | --- |
-| Harness adapter | A native agent engine behind the Runtime | [Harness onboarding](/harness-onboarding) |
-| Sandbox Provider | Outer compute that creates and reclaims Environments | [Sandbox Provider guide](/sandbox-provider) |
-| Runtime bootstrap | Starting a managed Runtime with its connection identity | [Runtime bootstrap](/runtime-bootstrap) |
-| Core–Runtime protocol | A message, receipt or lifecycle rule between Core and the daemon | [Core–Runtime protocol](/runtime-protocol) |
-| Public API operation | A `/v1`, `/core/v1` or `/api/v1` route | [API index](/public-api) and [contracts](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/README.md) |
-| Environment capability | Skills, Plugins, MCP or `packages.system` preparation | [Environments](/environments-and-files#runtime-capability-preparation) |
-
-### Add a Harness adapter
-
-Implement the shared `ExecutorFactory`, `Executor` and `Turn` interfaces in
-[`agent/harness.go`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/daemon/internal/agent/harness.go), register
-the adapter and add its profile/configuration entry to the shared catalog. Follow the numbered steps in
-[Harness onboarding](/harness-onboarding); qualification
-evidence belongs in [Harness integration](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/harnesses.md).
-
-### Add a Sandbox Provider
-
-Implement the five required `SandboxProvider` operations in
-[`sandbox_provider.go`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/sandbox/sandbox_provider.go),
-register the provider kind and pass `make check-sandbox-provider-contract`. Follow
-the numbered steps in the [Sandbox Provider guide](/sandbox-provider).
-
-### Extend the Core–Runtime protocol
-
-Change shared types and validators in `internal/agentdaemon/proto`, both peers
-and their contract tests together, keeping the exact wire-version check. The
-[protocol guide](/runtime-protocol) owns message order, receipts and failure
-ownership; `make check-runtime-contract` is its focused gate.
-
-## Validate a change
-
-Run checks for the affected boundary while developing. The repository
-[required checks](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/CONTRIBUTING.md#required-checks) define completion, including
-`make check` and any changed native component's real acceptance.
-
-| Change | Focused validation |
-| --- | --- |
-| Core handlers, persistence or clients | `make check-core` |
-| SQL queries | `make sqlc-generate`, inspect generated files, then `make check-sqlc` |
-| Handler annotations or API contract | `make openapi`, inspect all three namespace schemas |
-| Shared Runtime protocol | `make check-runtime-contract` |
-| Provider integration | `make check-sandbox-provider-contract` and the provider's native checks |
-| Claude SDK bridge and artifact | `make check-claude-sdk` |
-| Web UI and clients | `make check-web` |
-| Distribution or installer | `make check-distribution` |
-| Docs sources and generated site | `pnpm --dir apps/docs generate`, then `make check-docs` |
-
-When the complete change is ready:
-
-```sh
-make check
-```
-
-Fixture browser acceptance uses loopback ports 18092 and 4174. Select unused ports
-with `AGENTS_FIXTURE_PORT` and `AGENTS_WEB_PORT` when running parallel validation.
-Keep databases, ports and containers separate between validation workers.
-Compilation, fixture success and live model/provider acceptance establish different
-facts; report skipped or unavailable checks explicitly. Follow the
-[independent blind review workflow](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/CONTRIBUTING.md#review)
-after validation.
-
-## Change documentation
-
-Edit the source that owns the subject, using the
-[documentation ownership map](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/CONTRIBUTING.md#documentation-ownership).
-User guides explain a workflow and link to detailed contracts. Contributor rules
-explain ownership and required checks. Semantic contracts document exact behavior,
-implementation gaps and evidence. Avoid copying the same rule into all three.
-
-Update authored sources before regenerating the docs site. Adding a site page
-also requires a source entry and navigation entry; source/output hashes verify
-freshness. API references render the namespace-specific generated schemas. Follow
-[the docs app workflow](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/docs/README.md) for link, type, build and browser
-checks. The release bundle has a separate explicit documentation list in
-`scripts/core-distribution-manifest.py`; changing a bundled path or heading must
-also pass its relative-link and anchor checks.
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/development.md)
diff --git a/apps/docs/content/docs/environments-and-files.mdx b/apps/docs/content/docs/environments-and-files.mdx
deleted file mode 100644
index a3fc6914f..000000000
--- a/apps/docs/content/docs/environments-and-files.mdx
+++ /dev/null
@@ -1,854 +0,0 @@
----
-title: "Environments and files"
-description: "Execution placement, Environment resources and workspace ownership."
----
-
-This assessment covers the fixed [Python SDK contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/upstream.json), with partial
-coverage. Core-managed Docker runs the three qualified native harnesses. V1
-user-managed `self_hosted` enrollment uses the same colocated Runtime for Codex,
-Claude SDK and MiniMax. `/workspace` names the packaged workspace; a self-hosted
-Session may instead select its exact canonical physical directory. The
-[recorded deployment qualification](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/user-managed-runtime-v1.md) retains its historical
-source, paths and tested capability scope.
-For hosted compute, the deployment selects E2B, Docker or microsandbox through
-[sandbox deployment](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/sandbox-deployment.md).
-For the separate caller-managed E2B path, the user owns allocation, renewal and
-cleanup through the official SDK and [Runtime packaging](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/deploy/e2b/README.md).
-[Templates](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-templates.md) provide reusable preparation; the Core extension also applies their execution configuration to user-managed machines;
-[Files](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-files.md) reuse the exact authorized local workspace.
-
-The internal Store now owns a durable Environment association for newly created
-`self_hosted` and `openai_hosted` snapshots, atomically with Session creation.
-It derives configuration and tenant ownership from the Session; retries preserve
-the existing identity. Scoped reads hide associations after Session deletion while
-retaining the underlying record. The public text profile reuses this association
-and the preparation/admission path below; additional provider profiles remain open.
-Missing/`none` configurations and historical internal snapshots gain no backfill.
-
-
-The private daemon gateway authenticates the enrolled Environment executor key and
-exact dedicated device. Existing Worker connection observations retain generation
-and revision fencing; registration and connectivity do not establish native
-readiness. Rotation/revocation, Session deletion and ownership loss deny further
-access without promising immediate cessation of native effects. Native history
-remains local to the bound Runtime and cannot be replaced on retry. There is no
-registry/Noise relay or transient service-side harness credential.
-See the [enrollment guide](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/README.md#user-managed-runtime-enrollment).
-
-## Basic public Docker-hosted profile
-
-An explicitly configured default managed Docker provider enables `type=openai_hosted`
-for the qualified Codex, Claude Code and MiniMax Code profiles. Each uses the same
-Runtime lifecycle and workspace interfaces with its native adapter. The outer
-Environment provides managed isolation; the daemon adds no inner sandbox.
-See the [engine profile guides](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/README.md#public-engine-profiles) for setup and limits.
-The standalone [operator configuration](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/deploy/codex/README.md#standalone-operator-configuration)
-selects the qualified immutable Runtime image; advertised capabilities alone do
-not enable admission. An idle or initial-text creation commits Session, Environment
-and retry identity before the existing leased Worker provisions its allocation.
-A committed creation interrupted before bootstrap is recovered without replaying
-an existing allocation's Create.
-
-Omitted/null network defaults to enabled. The daemon does not enforce disabled
-or restricted networking. Current execution profiles reject both before Session
-creation and resource allocation.
-Templates and inline configuration share initial files, env, packages, ordered setup
-and inline or tenant-owned referenced Skills through ordered Environment initialization.
-The same authenticated daemon handles initial files, tool configuration, packages,
-setup, Skill/Plugin import and directory snapshot finalization through
-`runtime_prepare`. Providers place, create, bootstrap, inspect, renew and reclaim
-compute. npm/Python installation and setup use the host's existing network and
-starting account. System dependencies must be preinstalled; `packages.system`
-rejects explicitly, including null and empty lists, and never invokes apt, sudo
-or elevated execution. Package responses include the official required
-`system: []` field as empty metadata; it does not enable installation.
-Unsupported hostname forms and installation combinations reject explicitly; see
-the [Template coverage and limits](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-templates.md). Empty/null installation
-defaults produce safe empty metadata, not a live workspace inventory. Service-origin
-hosted MCP remains unsupported; Environment Plugin MCP has its
-own qualified transport matrix.
-
-Initial provisioning leaves a Session idle until a Turn starts, with no caller
-connection action. The managed scan records authenticated, exactly bound daemon
-connections through existing fenced generations. Native preparation remains
-separate. Core restart preserves allocation/workspace/native identity; it does not
-blindly replay uncertain work. Terminal cleanup revokes authority and settles
-pending input atomically before external reclamation. Matching retries preserve
-outcomes; new inputs reject terminal Environments. Expiry has no invented SSE
-variant. Local failure codes and exact event ordering remain unverified upstream
-semantics; this profile does not establish complete Environment compatibility.
-
-## User-managed E2B profile
-
-The application creates, renews and destroys its E2B sandbox through the official
-SDK. It deploys the shared Runtime, then enrolls that Runtime into a `self_hosted`
-Session. Core neither keeps an E2B allocation nor issues Provider renew/kill calls.
-The [E2B guide](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/deploy/e2b/README.md) owns packaging and
-user-side lifecycle instructions. Expiry or lost workspace/history must not trigger
-transparent replacement or replay. The [new enrollment qualification](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/user-managed-runtime-v1.md)
-records its own real deployment evidence.
-The [prior E2B qualification](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/README.md#e2b-v1-qualification) records a historical
-Core-managed route; it does not establish this caller-managed enrollment result.
-Current deployment-managed E2B is a separate hosted configuration in the manager guide.
-
-## Initial public self-hosted profile
-
-Create a Session with `environment.type=self_hosted`,
-a clean absolute `workspace_directory` and optional absolute local
-`capability_directories`. `/workspace` maps to the Runtime-bound workspace. Creation
-accepts initial text as a string or ordered user-message array. Omitted/null input
-creates no Turn or connection action. Configured execution, an enabled harness and
-the exact local profile are validated
-before persistence. Supported optional functions remain engine-specific.
-
-Initial text commits a reservation and connection action, then returns the Session
-and Environment connection target while offline. Streamed creation sends the same
-committed projection as its `created` snapshot, already showing `requires_action`
-and the connection action, then the committed `requires_action` event. Like
-every fresh creation stream it ends right after the idle recorded when the
-admitted Turn ends or the reservation stops being pending, or after a failure;
-the connection alone clearing the action does not end it. A creation without
-input ends right after its created snapshot, and a same-key stream retry ends at
-once without events. The existing Worker prepares and admits the input; closing the stream
-leaves committed work intact.
-Initial expiry leaves a failed Session, safe error and empty actions without a
-Turn or an Environment failure. Creation retries preserve the original identity,
-deadline and input. Later live observers do not replay creation events.
-
-Later text-only batches recover their original reservation or direct receipt under
-the Session lock. New active messages append to the current Turn through existing
-ordered admission and native delivery; they create no Turn, preparation or reservation.
-If no Turn is active, reserve and wait for the existing Worker to retain native
-preparation, admit and claim. Return 204 only after that
-transaction commits. Connection actions precede a Turn and clear on connection;
-connection alone is not readiness. Retries preserve identity and the five-minute
-database deadline. HTTP disconnect retains the reservation. Local expired/cancelled
-outcomes return 409, lost ownership 503, and deletion 404; exact hosted error
-status/body and pending-input crash recovery are unverified. See the
-[canonical wait rules](#ownership-and-placement-decision).
-
-Cancellation-only batches use the existing locked admission and native delivery.
-An idle cancellation creates no Turn, and retry identity preserves the original
-target during later work. Pending pre-Turn reservations still block new cancellation.
-HTTP 204 confirms admission, not native completion or OS quiescence. A cancellation
-before native Session transfer can still lack a final Outcome and conservatively
-fail; complete cancellation settlement remains open.
-Homogeneous function-result batches reuse scoped locked admission and native
-application receipts, without creating a Turn or preparation. Definitions use the
-existing function parser and remain fixed through native preparation and continuation;
-output/error field presence and ordered content keep their existing semantics.
-Retries retain the original call, including during later work. New results cannot
-bypass pending input. Function callbacks do not populate Environment installations.
-Mixed events and non-text input remain unsupported. Local capability directories
-use the same Runtime parser and installed snapshot as managed Skills and Plugins;
-preparation must finish before native execution. Reconnect reuses installed bytes,
-while new Sessions capture their own sources. Recursive references to the installed snapshot and escaping directory
-entries are rejected. Platform support and isolation follow
-[Platforms and isolation](#platforms-and-isolation). Enrollment must match either the `/workspace`
-logical alias or the exact canonical directory bound by the Runtime; selecting an
-arbitrary path does not grant access. `remote_url` is the configured daemon WebSocket URL,
-returned unchanged. This is our private connection contract and does not claim
-stock `exec-server` compatibility. Service-origin HTTP MCP is explicitly rejected
-on `self_hosted`; `none` MCP and hosted Template Plugin MCP retain their own scope.
-
-Mechanism tests cover enrollment, credential checks and exact-device dispatch. They
-do not establish real public qualification. Before claiming that qualification,
-exercise fixed SDK/raw HTTP creation/input, actual native tools, Files/Artifacts,
-second-Turn history, Core/Runtime restart, cancellation and credential rotation/
-revocation/deletion on each declared deployment.
-
-User-managed onboarding creates a `self_hosted` Session first, then passes its
-Environment ID and unchanged `remote_url` to our Runtime with connect-only
-authorization. This is our daemon connection contract, not stock OpenAI
-`exec-server` transport compatibility. Validate the pinned public HTTP/SDK
-resources, state transitions and lifecycle separately; do not infer complete
-compatibility from a working connection. User-side tooling owns local Runtime or
-E2B allocation, renewal and cleanup. Session deletion and credential revocation do
-not transfer ownership of user compute to Core or prove process quiescence.
-
-Keep prerequisites specific to the public operation being implemented. Native
-harnesses execute; adapters translate protocols and fill demonstrated capability
-gaps; Core owns public semantics, authorization and resources. Before adding a
-mechanism, identify the current operation it enables and why existing native
-capabilities or interfaces do not suffice. Durable metadata queries need no live
-runtime. Live file reads require an authorized, isolated view of the exact workspace
-and bounded operation ownership, but not a complete file-write, environment
-replacement or placement-retirement implementation. Apply mutation fencing and
-retirement guarantees where an operation can write, replace or retire that owner.
-Read-only access still requires tenant/resource checks, path isolation and safe
-failure when the authorized workspace cannot be reached; it never grants public
-admission merely because an adapter advertises a capability.
-
-Use distinct authorization for callers, devices and environment connections. A
-managed outer Environment must exclude broader application credentials and other
-tenants' secrets. The daemon does not hide its own state from same-user tools.
-Directory bindings and process identities do not provide filesystem isolation.
-Preserve or demonstrably restore native history across
-compute replacement; never silently move a bound Session or replay unknown work.
-Self-hosted compute/files remain caller-owned, with explicit cleanup separate from
-Session deletion. The full Environment implementation remains pending; follow the
-[pinned contract and acceptance sequence](/environments-and-files)
-and the [workspace placement map](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/workspace-placement.md).
-For co-location, qualify the outer deployment boundary and the shared Runtime
-lifecycle. Native tools use the starting account's permissions; do not claim a
-daemon or harness sandbox. Host operators choose their own outer isolation.
-Never enable an execution combination whose required outer behavior is unverified.
-
-The internal Store creates one Environment with an environment-bearing Session in
-its creation transaction. The Session upsert selects the retry winner; retries
-never create or repair associations. Environment identity/state live in their own
-table. Tenant ownership and immutable configuration come from the owning Session,
-without duplicated JSON, tenant columns or generated IDs in the creation hash.
-Environment reads join that Session and exclude deleted Sessions; deletion retains
-ownership for later settlement/cleanup. Existing `none` and legacy missing
-configuration create no Environment, and historical internal snapshots are not
-backfilled. Creation and recorded-intent retry snapshots load the Environment with
-the Session row/cursor in the same transaction, without borrowing subsequent
-activity or Turn state. Initial state is `pending`; authenticated connection observations follow
-the lifecycle rules below.
-Public creation supports `self_hosted` on the three enabled native profiles when
-the daemon gateway is configured. The workspace is a clean absolute host path matching the bound Runtime root;
-`/workspace` denotes that root through the existing logical mapping. Optional
-capability directories are clean absolute host-local selections. Supported non-deferred functions keep their engine-specific
-validation and native callback bridge. Enrollment binds the dedicated Runtime;
-Session output uses the owned Environment association. Public Files reuse the exact
-local workspace; populated self-hosted installation metadata remains unsupported.
-
-Environment retrieval uses the existing tenant-scoped join to a live owning Session
-and its durable connection status, independently of a live Runtime or gateway setup.
-It preserves project-shared read access and exposes only the pinned resource fields.
-The current closed self-hosted configuration has no API-managed file, plugin or skill
-installations, so those required arrays are empty. They are not a filesystem listing
-or a claim about native discovery. Reuse the strict Environment configuration parser
-and reject unsupported installation fields/capabilities or resource states instead
-of treating unknown inventory as empty. No read initiates native work or changes
-connection state; connection does not establish readiness or process quiescence.
-
-
-The private Environment input reservation stores one canonical message batch before
-Turn admission, with a five-minute deadline from the database clock. It requires
-an Environment-bearing Session without active work. Reservation and direct input
-paths share the Session lock and retry identity; pending or settled keys cannot
-bypass the reservation through direct admission. A pending reservation blocks new
-direct batches, including cancellation, while successful earlier retries remain
-readable. Promotion commits the original inputs, history, reservation settlement
-and execution claim (`queued` to `in_progress`) together; expiration and targeted
-cancellation retain the terminal identity. Session deletion
-is rejected while input is pending and changes nothing. A terminal reservation retry must not
-affect a later reservation or Turn. Evaluate deadlines after acquiring the Session
-lock, and return terminal storage outcomes without rolling their transaction back.
-
-A validated Runtime `failed` response with `preparation_failed` and no Run settles
-the pending input immediately with `runtime_preparation_failed`. Before admission,
-a rejection of the current `execution_prepare` request with no Run and code
-`invalid_configuration`, `unsupported_configuration` or `unsupported_preparation`
-settles through that same failure path. It records a
-safe Session failure before any Turn exists and releases the input gate; fixing
-the local cause allows new input. Transport loss, capacity rejection and
-unconfirmed cleanup remain retryable within the original deadline. Core uses
-these common control states, never Harness-specific error text.
-
-Initial messages for a newly created Environment-bearing Session use that same
-reservation in the creation transaction, including its connection-action event.
-The creation winner alone inserts it; the stream cursor still precedes that
-event, and creation retries never re-insert it. A durable initial/later flag
-defaults historical rows to later input without inferring origin. Initial expiry
-projects a failed Session and safe error before any Turn exists; later expiry
-retains idle semantics. Failure
-events capture the settled activity and Usage atomically. Late connections and
-creation retries cannot reset or replay expired input, and newer work supersedes
-old activity without changing its event snapshots. The Environment itself is not
-failed by an input deadline. This Store rule covers actual self-hosted and internal
-hosted associations; it does not enable hosted providers. None/absent Environment initial input retains
-immediate Turn admission. Cancellation/deletion keep their existing semantics.
-
-Ordinary and streamed public self-hosted creation accept initial text through this
-transaction after configuration and new-work lease checks. They return the owned
-Environment ID and executor URL while offline, without waiting for admission.
-The creation stream's `created` snapshot is the committed JSON 201 projection,
-including the connection action; the committed action event then follows from the
-creation cursor. A disconnected observer leaves committed input intact;
-only the existing Worker prepares, promotes and starts it. Saved-Agent retries with recorded intent
-recover before fresh execution admission or source resolution; inline retries keep
-their existing resolved-snapshot validation.
-Later live subscribers observe only future events and recover history through queries.
-
-The public self-hosted input profile accepts message-only batches. Under the same
-Session lock, recover the original reservation or direct receipt before choosing
-current active input or idle reservation. Active messages use existing ordered input
-receipts without a new Turn, preparation or reservation; idle messages retain the
-readiness and promotion path, including already-connected environments. Pending
-reservations keep their gate and deadline. An unlocked activity read or retry after
-a conflict must never choose a different admission path. Mixed inputs remain gaps;
-these restrictions do not narrow the pinned protocol target. Cancellation-only batches
-use the existing direct admission after configuration and execution-ownership checks.
-Only the Session-locked transaction chooses the active Turn or an idle receipt;
-matching retries retain that target even during later work. Cancellation cannot
-create a Turn or bypass preparation. A new cancellation still conflicts with a
-pending reservation; it does not cancel pre-Turn input. Its 204 response confirms
-durable admission, not native completion or process exit. Homogeneous function-result
-batches also use direct admission after those same checks: their explicit Turn/call
-identity selects an existing pending call, never new work. Reuse function validation,
-Session-locked whole-batch receipts, preserved output/error fields and native
-application acknowledgements. Matching retries remain bound to their original calls
-after completion or during later work; new results cannot bypass a pending reservation.
-Definitions remain fixed through preparation and cold native continuation. These
-callbacks are not installed Environment metadata. Mixed result/cancel publication
-and exact hosted action-removal timing remain separate gaps.
-Promotion requires the current leased execution writer and the caller's
-retained native preparation; never hold a database lock during external preparation. Only
-the first successful non-replay receipts authorize Start on that same preparation.
-An admitted retry returns the original receipts without reclaiming execution; a
-read or uncertain commit never authorizes another Start. A crash after promotion
-but before Start uses existing claimed-Turn reconciliation (`execution_interrupted`),
-including unbound or deleted Sessions, rather than ordinary queued dispatch. Deletion
-after claim is rejected like any active Turn.
-The Worker expires at most 32 due reservations on each existing tick, after
-checking ownership and before checking devices or execution slots. The sweep
-requires the leased Store and uses its connection with the existing transaction
-timeout; it never falls back to a pooled writer. A partial deadline index and
-Session row locks with SKIP LOCKED let unrelated work proceed around contention.
-The candidate cutoff is statement time; settlement rechecks the database clock
-after acquiring the Session lock. This bounds mutations and transaction time, not
-the number of examined locked rows. Restart resumes expiry on normal ticks without
-a separate scheduler or backlog-draining loop. No failed Turn may stand in for a
-pre-Turn connection failure.
-
-Session activity before a Turn is derived from the latest relevant reservation and
-authenticated connection state. Offline input requests `environment_connection`;
-connection arrival clears that action to `idle`, while the prepared Worker still
-owns native readiness and admission. An idle offline Environment alone requests no
-connection. Reservation/connection changes commit immutable Session activity and
-usage snapshots in the same transaction; SSE must not substitute a later Turn or
-action set. A newer or active Turn owns subsequent activity. Settled non-initial
-reservations clear their action to `idle` until newer work exists, even after an
-earlier failed Turn. This local settlement policy does not establish hosted expiry
-errors or initial-input asynchronous failure semantics; those remain unverified.
-
-Session GET/list/metadata responses and live SSE share the safe `self_hosted`
-output projection. Its `remote_url` comes only from the daemon gateway
-configuration, never request headers or a daemon address. Include
-the owned Environment ID, workspace and capability directories without exposing
-private configuration. The standalone Environment resource remains separate.
-Acceptance must pass that exact URL and ID to the
-caller-started executor and observe real remote execution through the existing
-Worker, daemon and harness, with fixed SDK and raw HTTP/SSE checks.
-
-A self-hosted input HTTP request returns 204 only after durable admission. Its
-wait uses bounded pooled operations, outside transactions and execution lease
-ownership; it cannot prepare or start native work. Only that route extends its
-response write deadline to six minutes for the original five-minute database
-admission deadline plus response grace. Request/observer disconnect stops waiting,
-not the durable reservation or execution; retries keep the original identity and
-deadline. The Worker remains the readiness, promotion and Start owner. Local failure
-mapping uses 409 `environment_input_expired` / `environment_input_cancelled`, 503
-`execution_unavailable` for ownership loss, and existing 404 for deletion. New input
-after a hosted provisioning failure returns the observed 409 `conflict_error`; other
-exact hosted failure statuses/bodies and pending-input crash recovery remain unverified.
-Principal acceptance must use public Session creation and input against the built
-standalone service, including a wait exceeding its ordinary 30-second write timeout,
-real remote commands/files and a second native-history Turn. Private provisioning
-or injected API handlers cannot substitute for that workflow.
-
-## Runtime capability preparation
-
-This section is the single owner of capability preparation: initial files, tool
-configuration, Skills, Plugins, Environment MCP, npm/Python packages, setup and
-`packages.system`. Hosted and self-hosted Environments use one Runtime path.
-
-### Ownership and lifetimes
-
-Resource management retains provider placement, capacity, allocation and
-Environment create/renew/reclaim. The authenticated Runtime connection carries
-initialization, capability preparation and executor operations; it never
-implicitly allocates or destroys compute.
-
-Executor close, Turn cancellation and transport loss preserve the installed
-snapshot, workspace and allocation. Reclamation is an explicit operation
-coordinated with active work; a disconnected socket is not proof that native
-effects have stopped. See
-[Executor and Turn lifetimes](/runtime-protocol#executor-and-turn-lifetimes).
-
-### Preparation order
-
-Core freezes resource versions, metadata and source selections. Environment
-initialization runs in this order, every step over the common `runtime_prepare`
-exchange with the same daemon:
-
-1. initial files and tool configuration;
-2. Skill/Plugin bundle import;
-3. npm/Python packages and ordered setup commands;
-4. capability directory snapshot finalization.
-
-Providers only place, create, bootstrap, inspect, renew and reclaim resources;
-they never execute Core initialization commands. The common runner uses only
-neutral Environment/Session identity and a Runtime peer, with no Provider,
-deployment or OS branch. Harness differences belong to native adapters.
-
-A missing authenticated Runtime connection waits before initialization is claimed.
-The Environment owns durable `pending`, `running`, `complete` or `failed`
-initialization state. The leased Worker processes both locations with the same
-bounded initializer, independently of Provider maintenance. A running operation
-whose process-local owner is lost is failed as unconfirmed; setup is never replayed.
-A confirmed failure records only the safe step and exit status. Both failure paths
-settle pending input through the common Environment failure transaction. Failure
-alone does not destroy compute or remove a workspace.
-
-The pinned self-hosted input retains `workspace_directory` and optional local
-`capability_directories`. For portable preparation, applications may supply
-`x_agents_core.environment` at Session creation in either location. This is a Core
-extension, not an upstream self-hosted field. It accepts `environment_template_id`,
-`files`, `env`, `packages`, `setup_commands`, `skills`, `plugins` and
-`capability_directories`, with the same parsers and inheritance rules as hosted
-input. A field supplied in both places rejects, including explicit null; there is
-no hidden precedence. Machine location, sizing and network policy are not extension
-preparation fields. A self-hosted selection cannot use a template requiring a
-managed network restriction.
-
-```json
-{
-  "agent_id": "agent_example",
-  "environment": {
-    "type": "self_hosted",
-    "workspace_directory": "/home/user/project"
-  },
-  "x_agents_core": {
-    "environment": {
-      "environment_template_id": "env_template_example"
-    }
-  }
-}
-```
-
-Switching `environment` to `{"type":"openai_hosted"}` reuses that same
-preparation input. Resource resolution, Project authorization, concrete Skill
-versions, encrypted file contents and confidential tool variables are frozen at
-Session creation. Same-intent retries and reconnects reuse those snapshots;
-new Sessions resolve new versions. User-managed Environments never require an
-allocation record. Local directory discovery does not populate API-managed
-installation arrays; managed Skills, Plugins and initial files do, in either
-location. Session self-hosted responses retain their pinned connection shape;
-the Environment resource exposes the safe installation metadata.
-
-Transport `connected` is still a connection observation, not readiness. Execution
-and live file access wait for initialization, then the common native preparation
-owner validates the installed snapshot and Harness before admitting a Turn. The
-model-provider authority rule is unchanged: deployment credentials are not
-implicitly sent to user-owned machines.
-
-### Transfer and paths
-
-The private `runtime_prepare`/`runtime_prepare_result` exchange carries typed
-initial files, configure/npm/python/setup operations, inert Skill/Plugin
-archives and finalization selections, with canonical Session and Environment
-identities.
-
-- Files and setup working directories use logical `/workspace` addresses.
-  Setup commands are explicit typed input; executable selection and physical
-  destinations stay Runtime-owned. Core supplies no executable or host-platform field.
-- Ordered 64 KiB chunks and SHA-256 receipts bound each file or archive to
-  50 MiB, each control frame to 1 MiB and each connection to one transfer.
-  Initialization and finalization headers carry no file data.
-- Begin, chunk and commit are never retried. Rejected, failed and unknown effects
-  stay distinct. Runtime owns transfer and filesystem work through settlement,
-  including disconnect or cancellation.
-- Source selections accept portable absolute Unix, Windows drive and UNC paths.
-  Core never resolves them on its own host; the daemon applies its local path and
-  access checks.
-
-### Installed snapshot
-
-Both origins use the common Runtime parser and `installed.json` manifest on
-Linux, macOS and Windows. The operator chooses the capability root (by default
-`capabilities` under `OAC_RUNTIME_HOME`); Core and transfer requests cannot.
-
-- The manifest binds the Session and Environment to the ordered source-selection
-  digest. The admitted asynchronous preparation owner verifies or creates it
-  before native execution, including for an empty selection.
-- Filesystem locking prevents concurrent installation. A private completion
-  record keeps only the operator installation root, so a deleted snapshot is
-  never mistaken for first preparation or recaptured.
-- Missing, partial, conflicting or foreign snapshots fail without deleting data,
-  automatic repair or replay.
-- Reconnection and replacement Executors load installed contents without
-  rereading sources. Source edits are seen only by a new Session with its own
-  Environment and fresh snapshot.
-- Read-only snapshot modes are integrity hints, not protection from the
-  launching user.
-
-### Executor admission
-
-Synchronous Executor admission validates the frozen descriptor only. The
-asynchronous preparation owner ensures capabilities are ready before invoking the
-native factory. Adapters receive only the resolved Runtime-owned Skill paths and
-MCP declarations; these remain Runtime-only fields. Reused Session Executors
-keep their original configuration.
-
-Files reads keep their separate readiness and authorization and do not require
-capability or native execution readiness. MCP environment variables come only
-from explicit immutable Runtime tool configuration; missing variables never fall
-back to daemon credentials or ambient process variables.
-
-### System dependencies and Runtime directories
-
-The daemon runs as its launching account and never uses sudo or elevates its
-permissions. Only user-directory dependencies install during preparation.
-
-- System dependencies must be preinstalled in the managed image/template or by
-  the self-hosted user.
-- `packages.system` is rejected explicitly, in Templates and inline
-  configuration, including a supplied null or empty list. It is never ignored or
-  translated into a privileged operation.
-- Runtime runs no apt, sudo, unprivileged system-root installer or other
-  automatic system-package operation. No managed-only exception exists. Missing
-  dependencies fail the consuming operation.
-- npm and Python use local prefix/target directories. Setup requires Bash;
-  Windows requires Git Bash, without a substitute shell.
-- Package responses keep the official required `system: []` field as empty
-  response metadata; it is not stored as an initialization option.
-
-Initialization and package directories default under `OAC_RUNTIME_HOME` and may
-be selected with `OAC_RUNTIME_INITIALIZATION_DIRECTORY` and
-`OAC_RUNTIME_PACKAGE_DIRECTORY`. Packaged Linux images select their existing
-`/environment` layout through those settings. `OAC_RUNTIME_TOOL_ENV_FILE`
-selects explicit tool configuration. These are resource paths, never
-Environment-source or OS switches in Core.
-
-Runtime process ownership waits for exit and I/O settlement. Confirmed failures
-keep only a bounded exit status, never command output.
-
-### Platforms and isolation
-
-The protocol and Go preparation implementation are shared by all three native
-platforms. Managed Providers remain Linux-only. Commands run directly with the
-starting account's permissions and host network; the daemon does not sandbox
-tools, files or network access. Outer Environments own managed isolation, and
-unsupported network restrictions reject instead of silently running unrestricted.
-
-Native installation and validation limits are in the
-[self-hosted guide](/self-hosted-execution#platforms). Historical acceptance evidence
-stays limited to its recorded binaries and inputs.
-
-On Windows, npm package installation and stdio MCP commands named `npm` or `npx`
-(including their `.cmd` shims) run through the resolved npm installation's
-JavaScript entrypoint with Node, without an extra shell.
-
-### Environment initialization and compute wake
-
-Environment initialization has pending, running, complete and failed states.
-Authentication and connection publication are independent of preparation. Execution
-bindings and live Files wait for initialization. The leased Worker's common
-scheduler scans 32 Environments at a time, wraps at EOF and bounds concurrent
-preparations by execution concurrency. Missing sockets do not consume a pending
-attempt; unavailable Harnesses fail before installation. Each operation rechecks
-current authority and the original socket. Completion rechecks the exact binding.
-Provider bootstrap and resource cleanup retain their own owners and settlement.
-
-After a next-Turn input is durably pending, a completed managed allocation in a
-suspension/recovery phase may hint this loop. Initial inputs, cold creation,
-running/disabled compute, terminal receipts, cancellation/tool-result events,
-history and file operations do not use this hint. Eligibility lookup and delivery
-are best effort; persisted work and the normal ticker remain authoritative.
-Coalesce hints without blocking, and allow at most one extra scan per normal
-five-second cycle. Keep the ticker independent of requests. A normal tick consumes
-already queued hints before scanning; simultaneous tick/hint readiness is one
-normal scan. Preserve hints arriving during a scan, the allocation cursor and all
-ownership checks. Never close the hint channel while handlers may still send.
-This bounds extra maintenance work but does not bypass capacity, a busy lifecycle
-gate or multi-page scheduling, and does not guarantee a resume deadline.
-
-A recovered or uncertain running installation fails without replaying writes.
-Preparation failure is terminal for its Session. It does not destroy compute or
-user files; explicit resource cleanup retains its existing owner. The Environment
-transaction stores a safe reason with the failed Environment and records
-`environment.failed`, `error` and one `agent.session.failed`; Session reads derive
-`failed`, that reason and the failure time from the same record, and live streams end
-after the failed event. The initializer reports only the integer exit status of a
-failed initialization command. Core composes the reason from a fixed step label and that status,
-never from command, package-manager or file output; unknown effects, timeouts and
-receipts without a status keep a generic reason. New input then gets the observed 409
-`conflict_error`; expiry and pending-input settlement keep their behavior.
-Completed environments never reinstall initial files on reconnect or native recovery.
-The typed Runtime preparation protocol carries bounded confidential input; the
-daemon owns the common Go initialization implementation. Confidential env
-and setup snapshots are encrypted independently of ordinary metadata. Adapters
-apply explicit tool variables without automatically inheriting daemon credentials;
-this does not prevent same-user tools from reading local Runtime state.
-Reuse runtimefs atomic replacement and anchored logical-workspace paths for initial
-files on every platform. Public Files creation keeps its own non-replacement rule.
-
-### Skills, Plugins and Environment MCP
-
-Skills and their immutable versions are Core-owned tenant resources, independent of
-Sessions and native Skill installations. Serialize version allocation and pointer
-mutations under the owning Skill row. Keep top-level name and description aligned
-with the default version in the same transaction, including default-changing uploads;
-nondefault uploads preserve that metadata. Preserve unique version identities across
-concurrent uploads and deletion. Metadata reads never load or decrypt bundle bytes.
-Encrypt bundle contents with a tenant, Skill and version binding using the existing
-service cipher. Deleting a Skill reclaims its versions without affecting already
-frozen Session initialization. Public reference metadata, unresolved template intent
-and the resolved Runtime bundle are distinct; do not report a reference as inline
-merely because it reuses the same installer. No compatibility reader, source
-cache, extra lifecycle owner or per-harness resource implementation is required.
-Resolve references inside the Session creation transaction, after the creation
-upsert establishes ownership. Lock referenced resources in a stable order; freeze
-the selected version, descriptive metadata and bytes together. Creation retries
-recover the recorded intent before reading mutable templates or Skill sources.
-Templates preserve default, latest and explicit version selectors. An omitted or
-null reference version selects the default at Session creation and projects as
-`version: null` in Template responses. Session responses contain concrete versions;
-only validated installation metadata crosses the Runtime boundary. A supplied
-Session Skill, Plugin or capability-directory list replaces its template list;
-omission and null inherit, while an empty list clears that selection. This differs
-from Template resource updates, where null clears lists and resets network to the
-pinned enabled default. Preserve caller intent and frozen Session snapshots in
-both cases. Public capability directories remain caller paths; adapter-owned
-installation directories are not portable public paths.
-
-Inline and referenced Skill ZIPs use the same confidential initialization snapshot and installer.
-Core validates portable manifests and bounded regular-file archives, returns only
-safe Skill metadata, and freezes content before native preparation. The Runtime
-owns `skills/<name>` below its configured capability root; the manifest validates
-the installed snapshot before reuse. This is state
-consistency, not protection from the launching user. Public Plugin ZIPs preserve their complete package
-layout and reuse the shared archive and portable Skill parsers. Core keeps safe
-Plugin metadata separate from encrypted archives. Templates inherit or replace
-Plugin and capability-directory lists through the same hosted resolver.
-
-After ordered setup, the existing initializer snapshots declared workspace-contained
-capability directories into Runtime storage and writes one installed manifest.
-This is an initialization artifact, not a second lifecycle owner or database ledger.
-Directory bytes are observed after setup; they are not frozen at Session creation.
-The common daemon resolves the manifest only for executable preparation and passes
-validated Runtime-owned Skill/package roots to adapters. Files reads do not require
-that artifact. Reconnection and recovery read installed bytes, never mutable source
-directories. Missing or inconsistent installations fail preparation without replay.
-
-Adapters register only selected Skill roots without changing the execution loop.
-Codex uses explicit extra roots; MiniMax projects its native catalog; Claude creates
-one controlled envelope per package with real directories and immutable hardlinks
-under content. Its explicit paths remain inside that envelope; original native
-control files are not activated. Keep automatic native MCP discovery disabled.
-Explicit Environment MCP declarations
-follow the separately qualified transport path below; unsupported native activation
-fails explicitly, without silent partial activation or a generic plugin framework.
-
-Environment-origin MCP declarations use the shared Plugin parser and frozen
-installed packages. The installation manifest retains selected MCP package roots;
-Runtime re-parses those installed packages without another configuration copy,
-credential cache or lifecycle ledger. Native adapters must explicitly qualify and
-project supported declarations before public admission. Parent-directory Skill
-discovery does not activate nested Plugin MCP configuration.
-
-The common daemon stdio entry resolves the installed declaration and launches its
-server under the same user permissions as the Harness. Unix replaces the helper
-process; Windows forwards native stdio within the owned process tree. Explicit
-initialized values override the selected declaration's variables. There is no
-Python sandbox launcher, mount policy, shell prefix or separate credential sandbox.
-Process groups and Windows Jobs own cancellation and descendant cleanup only.
-Claude composes MCP identity and observation with the same workspace profile;
-MiniMax uses the same effective bindings for stdio and HTTP. A public capability
-advertisement must still match the installed engine's actual supported transport.
-
-Runtime resolves public HTTP declarations and installed Plugin MCP through
-`agent.ResolveMCPBindings` before adapter projection. Each transient binding
-retains its connection origin, transport, nullable tool allowlist, required flag,
-credential authority and installed stdio identity. Bindings are never persisted
-or logged. Duplicate identities and unavailable selected credentials reject.
-Public HTTP MCP uses the same binding path as installed Plugin MCP. Its explicit
-`connection_origin` is retained from saved configuration through the Session
-snapshot and private Runtime request; the exact Runtime wire version is required.
-A service-origin request cannot silently become an Environment-origin connection.
-
-### Public MCP connection origin
-
-Core's Harness profile declares `MCPOrigins`; shared admission and dispatch check
-the origin against the Environment and Runtime's advertised HTTP/bearer/required
-capabilities. Runtime validates the same origin before invoking an adapter. No
-Harness-name or Sandbox Provider branch selects a different connection path.
-
-| Harness | `service` origin | `environment` origin | Optional policy |
-| --- | --- | --- | --- |
-| Codex | Service execution host, `environment:none` | Managed or self-hosted workspace | Nullable tool allowlist and required initialization |
-| Claude SDK | Service execution host, `environment:none` | Managed or self-hosted workspace; packaged `workspace_mcp_http` feature required | Nullable tool allowlist and required initialization |
-| MiniMax Code | Unsupported | Managed or self-hosted workspace | `allowed_tools` must be null/omitted; `required` must be false |
-
-Both origins support the declared Harness's anonymous HTTP and selected HTTPS
-bearer path. The existing attached-Vault selection freezes credential identity,
-including a unique implicit URL match or an anonymous selection. Only that
-Project-authorized credential may enter the transient Runtime request; Core
-defaults and unrelated Vaults are not searched. Decryption failure or a missing
-credential fails execution without an anonymous fallback. Public Environment
-MCP retains `project_vault` authority; Plugin credentials retain
-`environment_configuration` authority. Neither source overrides duplicate
-server labels. Bearers never enter persisted native configuration or argv.
-
-Omitted/null origin still means `service`, including on self-hosted requests;
-it does not select the local network automatically. Service-origin requests with
-a workspace remain rejected because they require separate service-side connection
-forwarding. This implementation adds no proxy. Environment origin requires an
-initialized workspace with enabled network access and is invalid on `none`.
-
-Null/omitted `allowed_tools` permits all server tools; an empty list permits none.
-MiniMax rejects every non-null allowlist, including an empty list, rather than
-silently expanding it. Codex and Claude preserve native allowlists and initialize
-required servers before releasing native input, including cold recovery.
-Public MCP with native Subagents remains unqualified. Nonempty literal HTTP
-headers, request metadata and public stdio declarations remain unsupported.
-See [public MCP qualification](https://github.com/MiniMax-AI/OpenAgentCore/blob/e974a7f880a2eb799f0dd39e6ba0870462854a53/contracts/agents-api/public-mcp-qualification.md) for actual model,
-platform and infrastructure coverage; admission support is not a claim of
-complete cross-platform/provider qualification.
-
-Environment-origin literal HTTP headers remain rejected for the pinned Claude
-and MiniMax clients because their cross-origin forwarding cannot preserve header
-authority. MiniMax supports installed stdio and HTTP servers with anonymous or
-explicit user-selected HTTPS bearer authentication. ACP HTTP declarations remain
-Session-local native memory; tokens do not enter native configuration files or
-process arguments. Required initialization and tool allowlists are not exposed
-through the Plugin manifest. Public MiniMax HTTP uses the same transient ACP map
-with the stricter admission limits above.
-MiniMax reads the existing Session-private native runtime-name registry for exact
-first-frame identities and cross-checks completed native results for both transports.
-Reuse existing observation and cancellation settlement; never fabricate a delayed
-start event, guess normalized identities or add a registry of our own.
-
-See [capability qualification](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-capabilities-qualification.md) for
-real model evidence and the remaining public-origin and image gaps.
-
-## Contract inventory
-
-Paths below follow the SDK resource methods, before the service's `/v1` prefix.
-The authoritative fields and unions are linked to the pinned source; this table
-is an inventory, not a replacement schema.
-
-| Resource | Operations | Contract distinctions |
-| --- | --- | --- |
-| [Environment](https://github.com/openai/openai-python/blob/d7c41efee1b0802b79f3f88a678ef2052b06e9ce/src/openai/resources/beta/agents/environments/environments.py) | `GET /agents/environments/{id}` | Created through Session configuration, with no standalone create/list/update/delete method in this resource. Safe metadata includes files, plugins, skills, type and status. |
-| [Template](https://github.com/openai/openai-python/blob/d7c41efee1b0802b79f3f88a678ef2052b06e9ce/src/openai/resources/beta/agents/environments/templates.py) | `POST`, `GET /agents/environments/templates`; `GET`, `POST`, `DELETE /agents/environments/templates/{id}` | Reusable hosted configuration, resolved for each Session. List uses `after`, `limit` and `order`. Supplied update fields replace their value; omitted fields stay unchanged. Deletion includes confidential inputs. |
-| [Files](https://github.com/openai/openai-python/blob/d7c41efee1b0802b79f3f88a678ef2052b06e9ce/src/openai/resources/beta/agents/environments/files.py) | `POST`, `GET /agents/environments/{id}/files` | Create accepts `file_id` or inline base64 data with an absolute path inside `/workspace`. List uses opaque `page`, not `after`, with stable path/order/limit across pages. |
-
-These are eight operations, separate from Session creation and live events.
-Templates use an `after` cursor and limit default 20, clamped to 1–100; file listing has nullable
-limit/path, non-null order/page when supplied, and case-sensitive path-component
-ordering. Both default to descending order. Do not reuse cursor decoding merely
-because both endpoints paginate.
-
-[Session environment input](https://github.com/openai/openai-python/blob/d7c41efee1b0802b79f3f88a678ef2052b06e9ce/src/openai/types/beta/environment_param.py)
-and [output](https://github.com/openai/openai-python/blob/d7c41efee1b0802b79f3f88a678ef2052b06e9ce/src/openai/types/beta/environment.py)
-have different shapes:
-
-- `none` selects no execution environment.
-- `self_hosted` input requires `type` and `workspace_directory`; its optional
-  nullable `capability_directories` defaults to an empty list. `remote_url` is
-  output-only. The output also includes the Environment ID and capability paths.
-  The output description's `/workspace` default does not make the input field
-  optional.
-- `openai_hosted` can reference a template and supply capability paths, network,
-  packages, files, plugins, skills, environment variables and setup commands.
-  Omitted template-backed values inherit; Session overrides cannot broaden the
-  template network policy. The service implementing this discriminator owns
-  provisioning; it does not rename the public discriminator for its provider.
-
-[Template responses](https://github.com/openai/openai-python/blob/d7c41efee1b0802b79f3f88a678ef2052b06e9ce/src/openai/types/beta/agents/environments/environment_template.py)
-expose safe metadata, retaining unresolved skill version selectors and file
-references. They do not return inline file/archive contents, environment variables
-or setup command bodies. Nullability and replacement behavior must be checked
-against each request type, not inferred from these response models.
-
-| Projection | State vocabulary |
-| --- | --- |
-| [Environment resource](https://github.com/openai/openai-python/blob/d7c41efee1b0802b79f3f88a678ef2052b06e9ce/src/openai/types/beta/agents/environment_info.py) | `pending`, `connected`, `disconnected`, `expired`, `failed` |
-| [Session environment event state](https://github.com/openai/openai-python/blob/d7c41efee1b0802b79f3f88a678ef2052b06e9ce/src/openai/types/beta/agent_session_environment_state.py) | `pending`, `ready`, `connected`, `disconnected`, `failed`; nullable error |
-
-These projections cannot share an unchecked string cast. Session environment
-notifications carry Session/Environment identity and optional Turn identity.
-The Session's `required_actions` union includes `environment_connection` with an
-Environment ID, separately from function calls. Environment readiness is distinct
-from Session and Turn status.
-
-## Ownership and placement decision
-
-The canonical [architecture rules](#ownership-and-placement-decision)
-keep Environment lifecycle common while leaving process placement and native
-transport to adapters. Logical ownership does not require a machine per object.
-
-| Object | Responsibility |
-| --- | --- |
-| API Session and Environment | Durable tenant ownership, configuration, pending interaction and connection observations. |
-| Provider allocation | Compute and filesystem lifetime; caller-owned for `self_hosted`, service-owned for hosted provisioning. |
-| Device and daemon connection | Authenticated engine-host identity and replaceable internal dispatch transport. |
-| Harness process and native Session | Native model/tool loop, execution state and proven history/continuation path. |
-| Runtime enrollment | Exact Environment/device/key binding for user-managed compute; no service-owned allocation. |
-
-Daemon, harness, tools and workspace are colocated in V1. Our daemon fills the
-executor role; a separate native executor and service-side harness are retired.
-The pinned public resources remain the target, while stock executor wire
-interoperability is explicitly outside this implementation.
-
-Co-location needs a real credential and isolation design: generated code must not
-gain the broader application credential or cross-tenant secrets through a shared
-unrestricted process account. A directory binding alone is not isolation. Retain
-native history independently of disposable compute, or prove native restoration;
-never treat an Environment ID as a filesystem or history backup. Do not silently
-move an existing Session away from its bound device.
-
-Environment identity, tenant/Session association, configuration and lifecycle belong
-in Agents API, independently of provider compute, authenticated device identity,
-daemon sockets and native harness Sessions. Create an Environment association in
-the same transaction as its Session and creation identity when this resource is
-implemented. Keep mutable connection/registration state out of immutable
-configuration; replacement ownership must fence stale observations.
-
-The current hosted architecture is V1: Core runs independently; each Environment
-sandbox contains its daemon, selected native harness, local tools and workspace.
-Execution and Files use the same authorized workspace through the existing
-Core/Runtime contract. Native tool calls stay local.
-CLI discovery uses a bounded 15-second version probe per installed harness;
-missing binaries fail immediately. A version result is availability, not Environment
-readiness, and does not change initialization or connection ownership. Process placement and native
-transport remain adapter responsibilities, without a second model/tool loop.
-The former separated Runtime/harness and workspace executor topology is a distant
-future V2 option, to revisit only after V1 is stable and concrete needs justify it.
-Do not extend that topology for hosted delivery, maintain two current hosted routes,
-or introduce dormant V2 compatibility scaffolding.
-
-When an execution Session has a previously started Turn but no recorded native
-Session ID, Core requires existing-history recovery through a verified Runtime
-capability. Read that condition before claiming the next Turn. A supplied native ID
-remains authoritative. The Codex adapter may recover only a unique, nonarchived
-root in the exact Session-private native home and expected working directory, using
-native listing and exact-ID resume. Missing, incomplete or ambiguous history must
-fail without starting a fresh root. A recorded start can precede native work; that
-uncertain case also fails conservatively. Recovery does not replay interrupted
-inputs, erase prior outcomes or promise transparent continuation of running tools.
-Keep Device identity and Environment scope in `ExecutionDevice`; native Session
-identity and prior API Turn state belong to `SessionExecutionBinding`.
-
-Platform-managed and user-managed deployment reuse this same Runtime. For platform
-management, SandboxProvider creates and reclaims it. For user management, the user
-starts the Runtime and its daemon authenticates and initiates the Core connection;
-Core verifies principal ownership and the exact Environment binding. These are
-management responsibilities, not separate execution architectures.
-
-In V1, our daemon fills the user-side executor role. Users deploy daemon, the
-selected harness, local tools and workspace together. Do not require Codex
-`exec-server`, a service-side harness, registry/Noise transport or remote tool
-forwarding. The explicit daemon-executor decision supersedes the previous native
-executor interoperability requirement. The superseded execution route is removed;
-retain reusable filesystem helpers,
-necessary regressions and historical evidence without a compatibility layer.
-
-### Explicit local tool environment
-
-`--tool-env-file` supplies the Runtime operator's base tool variables. Common
-preparation copies these explicit values into its private initialization snapshot;
-explicit Session `env` keys override the base. Runtime does not rewrite the source
-file or inherit unrelated ambient credentials. Setup, capability resolution and
-Harness execution read the same prepared snapshot. Reconnect preserves that
-snapshot even if the operator edits the source; a new installation for a new
-Session reads the current source. Harness profiles may reference the Runtime-owned
-environment file, but must not persist copies of its values. A missing or invalid explicitly configured file
-fails preparation.
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environments.md)
diff --git a/apps/docs/content/docs/examples.mdx b/apps/docs/content/docs/examples.mdx
deleted file mode 100644
index ee1f2b5a5..000000000
--- a/apps/docs/content/docs/examples.mdx
+++ /dev/null
@@ -1,66 +0,0 @@
----
-title: "Examples"
-description: "Complete applications built on the Agents API, and what each one shows."
----
-
-Complete applications built on the [Agents API](/sessions). Each one
-runs against a real Core installation with a Project API key.
-
-| Example | What it shows |
-| --- | --- |
-| [Parsar Agent workbench](#parsar-agent-workbench) | A product UI: models, Skills, MCP, reusable Agents, and Sessions on any runtime |
-
-## Parsar Agent workbench
-
-A small single-user product built on Core. You save model providers, Skills and MCP
-servers, combine them into Agents, then start Sessions in a managed sandbox, with
-no workspace, or on your own machine.
-
-Source: [`example/parsar`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/example/parsar/README.md).
-
-### Run it
-
-You need Node 22.13+, pnpm 10.30.3, a running Core with a default model, and a Project
-API key.
-
-```sh
-export OAC_EXAMPLE_CORE_URL='https://core.example'   # origin, without /v1
-export OAC_EXAMPLE_PROJECT_KEY='<project-api-key>'
-pnpm install --frozen-lockfile
-pnpm --filter @oac/parsar-example dev
-```
-
-Open &lt;http://127.0.0.1:18180>. The example [README](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/example/parsar/README.md) covers
-storage, a production build, tests and connecting your own machine.
-
-### What to look at
-
-Each feature maps to one part of the API. Read the code next to the guide section:
-
-| Feature | API used | Guide | Code |
-| --- | --- | --- | --- |
-| Server-side key and headers | Bearer key, `OpenAI-Beta`, route allowlist | [Before you start](/sessions#before-you-start) | [`server.mjs`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/example/parsar/server.mjs) |
-| Agents with a harness and model | `x_agents_core.harness`, `model_provider` | [Core extensions](/sessions#core-extensions-x_agents_core) | [`server/sessions.mjs`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/example/parsar/server/sessions.mjs) |
-| Sessions on three runtimes | `openai_hosted`, `none`, `self_hosted` with `workspace_directory` | [Create a Session](/sessions#create-a-session) | [`server/sessions.mjs`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/example/parsar/server/sessions.mjs) |
-| Crash-safe Session creation | `Idempotency-Key`, recovery from a lost response | [Idempotency](/sessions#idempotency) | [`server/sessions.mjs`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/example/parsar/server/sessions.mjs) |
-| Live replies | Event stream, text deltas, reconnect and reconcile | [Stream events](/sessions#stream-events) | [`src/lib/live-session.ts`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/example/parsar/src/lib/live-session.ts) |
-| Follow-ups and cancel | Input events with idempotency keys | [Send input](/sessions#send-input) | [`src/Composer.tsx`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/example/parsar/src/Composer.tsx) |
-| History | Paging Turns and Items | [Pagination](/sessions#pagination) | [`src/lib/api.ts`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/example/parsar/src/lib/api.ts) |
-| Skills and versions | `/skills`, default version | [Skills](/sessions#skills) | [`src/Skills.tsx`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/example/parsar/src/Skills.tsx) |
-| Connect your own machine | Environment status, executor credential | [Self-hosted execution](/self-hosted-execution) | [`src/ConnectMachine.tsx`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/example/parsar/src/ConnectMachine.tsx) |
-
-### Not covered
-
-Vaults and MCP authentication, OAuth, Session deletion, MiniMax Code on your own
-machine, and managed Skills or templates on your own machine
-(`x_agents_core.environment`).
-
-## Add an example
-
-Put it in its own directory under [`example/`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/example/README.md) with a README
-covering how to run it and which API features it shows, then add a row to the
-table above. Keep examples on the public API with a Project API key: never the Core
-key or private routes. Repository rules for examples are in
-[CONTRIBUTING.md](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/CONTRIBUTING.md#repository-boundary).
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/examples.md)
diff --git a/apps/docs/content/docs/execution-model.mdx b/apps/docs/content/docs/execution-model.mdx
deleted file mode 100644
index 2c14b3278..000000000
--- a/apps/docs/content/docs/execution-model.mdx
+++ /dev/null
@@ -1,147 +0,0 @@
----
-title: "Execution and API architecture"
-description: "Applications call the public API; the administrator browser calls Web; Runtime connects to Core."
----
-
-![Application, administration and machine credential boundaries](/images/architecture.svg)
-
-The console server (`services/web`, the `oac-web` process) serves the built console, signs the administrator in with the Core key and forwards the signed-in browser's `/core/v1` requests to Core with that key. The browser never holds the Core key or any API key. Applications, nodes and self-hosted executors call Core directly; the console forwards none of their traffic.
-
-## Request boundary
-
-```mermaid
-flowchart LR
-  browser["Administrator browser"]
-  console["Console server"]
-  core["Core"]
-  database[("PostgreSQL")]
-  application["Application / official SDK"]
-  machine["Nodes and Runtime daemons"]
-  installer["Installer domain service"]
-
-  browser -->|"same origin: /console/*, /core/v1/*; session cookie"| console
-  console -->|"/core/v1/* with the Core key"| core
-  console -->|"domain setup, Unix socket"| installer
-  application -->|"/v1 with a Project API key"| core
-  machine -->|"/api/v1 with machine credentials"| core
-  core <--> database
-```
-
-The deployment's reverse proxy routes `/v1` and `/api/v1` to Core and every other path to the console; the [installation options](/install-options#https-and-the-reverse-proxy) gives the routes. The console handles each path as follows:
-
-| Path | Sign-in | Handling |
-| --- | --- | --- |
-| `/healthz` | No | `GET` or `HEAD` answers `200 ok` |
-| `/v1`, `/api/v1` and below | — | 404, whatever credential the request carries |
-| `/node-install/*` | No | The node installation payload (see [Node installation payload](#node-installation-payload)) |
-| `/console/auth`, `/console/auth/login`, `/console/auth/logout` | No | [Sign-in](#sign-in) |
-| `/`, `/index.html`, `/favicon.svg`, `/oac-mark.svg`, `/assets/*` | No | Static console assets |
-| `/console/config` | Yes | [Console configuration](#console-configuration) |
-| `/console/installation/domain` | Yes | [Domain setup](#domain-setup) |
-| `/core/v1/*` | Yes | [Forwarded to Core](#forwarding-to-core) |
-| `/core` and other paths under `/core/` | Yes | 404 |
-| Any other path | Yes | Static assets; a path without a file extension falls back to `index.html` |
-
-Every request except `/healthz`, `/v1` and `/api/v1` must pass these checks first:
-
-1. **Host and origin.** The `Host` header must equal the host of `OAC_WEB_ORIGIN`. An `Origin` header, when present, must equal that origin, and `Sec-Fetch-Site` must be `same-origin` or `none`. A write that carries neither `Origin` nor `Sec-Fetch-Site: same-origin` needs a same-origin `Referer`. Otherwise the console answers 403. `/node-install/*` checks only the host and the path.
-2. **Safe request.** The path must start with `/` and contain no `%`, backslash, NUL, dot segment or empty segment. Absolute-form request targets, `CONNECT`, `TRACE` and any request with an `Upgrade` header get 400. A request can therefore never leave `/core/v1` on Core, and the console carries no WebSocket.
-3. **Sign-in.** Paths that need sign-in answer 401 without a valid session cookie.
-
-Under `/core`, these failures use the Core error envelope with the codes in [console-generated failures](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/core-errors.md#console-generated-failures); elsewhere they return `{"error": "…"}`, or plain text for an unsafe request. Every response carries `Cache-Control: no-store`, `X-Content-Type-Options: nosniff`, `Referrer-Policy: no-referrer` and `Content-Security-Policy: frame-ancestors 'none'`.
-
-## Forwarding to Core
-
-The console forwards each signed-in `/core/v1/*` request by prefix to `OAC_WEB_UPSTREAM`, with its path and query unchanged. Core alone decides whether the route exists, and its responses and errors pass through unchanged. The console therefore needs no change when Core adds a `/core/v1` route.
-
-On the way to Core, the console:
-
-- removes the browser's `Authorization`, `Proxy-Authorization`, `Cookie`, `Origin` and `Referer` headers;
-- sends `Authorization: Bearer <Core key>`;
-- sets `X-Core-Console-Actor: console`, replacing any value the browser sent. Core records it as a display-only audit label ([administrator API](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/admin-api.md));
-- ignores ambient HTTP proxy settings, so the Core key reaches only the configured Core;
-- streams responses without buffering.
-
-On the way back, it removes `Set-Cookie`, `WWW-Authenticate`, `Location`, `Refresh` and every `Access-Control-*` header. A redirect from Core, or a failed connection to Core, becomes 502 `core_unreachable`.
-
-The console never retries a request. Browser code calls `/core/v1` through the typed clients in [`packages/agents-client`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/packages/agents-client/README.md); [console API usage](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/web/console-api-usage.md) lists what each page reads and writes.
-
-## Sign-in
-
-| Method and route | Request | Result |
-| --- | --- | --- |
-| `GET /console/auth` | No body | `200 {"mode":"login"}` or `200 {"mode":"authenticated"}` |
-| `POST /console/auth/login` | `Content-Type: application/json`; body `{"core_key":"…"}` with no other member, at most 4 KiB | `200 {"mode":"authenticated"}` and the session cookie |
-| `POST /console/auth/logout` | No body | `200 {"mode":"login"}`; ends the session and clears the cookie |
-
-The administrator signs in with the deployment's [Core key](/troubleshooting#core-key). There are no console accounts, usernames or setup step, and signing in grants the whole console.
-
-- The console compares SHA-256 digests of the submitted and configured keys in constant time. It never logs or returns the key.
-- The session cookie `core_console_session` is HttpOnly, `SameSite=Strict`, and `Secure` when `OAC_WEB_ORIGIN` is HTTPS. It lasts 12 hours.
-- Sessions live only in the console's memory, at most 64 at a time; the oldest is dropped first. A console restart or a Core key rotation signs everyone out.
-- At most two sign-in checks run at once; another attempt gets 429 with `Retry-After: 1`.
-- Failed attempts share a budget of 10 per minute; beyond it, a wrong key gets 429 with `Retry-After: 60`. The correct key always signs in, which is why the console refuses to start with a Core key shorter than 32 characters.
-
-Sign-in errors: 400 for a malformed body, 401 `Invalid Core key`, 405 for a method other than `POST`, 415 for a body that is not JSON, 429 as above, and 503 when the console cannot create a session.
-
-## Console configuration
-
-`GET /console/config` returns what the signed-in browser needs to add nodes:
-
-| Field | Meaning |
-| --- | --- |
-| `node_installer` | Whether the console serves a node installation payload |
-| `node_installer_sha256` | SHA-256 of that payload's `node-install.pyz`; Add node commands verify it before running the installer |
-| `node_artifacts` | The providers (`docker`, `microsandbox`) whose node artifacts the payload holds, locally or as a pinned release download. Read on every request, so artifacts added by rerunning the installer appear without a restart |
-
-## Node installation payload
-
-With `OAC_WEB_NODE_PAYLOAD_DIR` set, the console serves the matched distribution's node payload at `/node-install/` without sign-in: `node-install.pyz`, `manifest.json`, `SHA256SUMS`, `runtime/seccomp.json`, and the node artifacts the manifest declares under `artifacts/`. An artifact missing locally redirects (307) to its pinned release download. Node install and uninstall commands download from `<public_url>/node-install/`, so the reverse proxy must send that path to the console. Nodes verify every checksum themselves.
-
-## Domain setup
-
-`GET` and `POST /console/installation/domain` let **System → Domain and HTTPS** configure a managed installation's domain. They are console routes, not Core routes. After the same origin and sign-in checks, the console passes the request body (at most 2 KiB) to the installer's Unix socket at `OAC_WEB_INSTALLATION_SOCKET`, authenticated with the Core key, and returns the installer's JSON answer and status. The request times out after 20 seconds.
-
-| Method | Request | Result |
-| --- | --- | --- |
-| `GET` | No body | The domain status |
-| `POST` | `{"hostname":"core.example.com"}`, optionally with `"confirm_public_url_change":"https://core.example.com"` | 202 and the status; the installer checks and applies the domain in the background |
-
-The status has `supported`, `state` (`unconfigured`, `checking`, `applying`, `ready` or `failed`), and nullable `public_url`, `target_url` and `message`. Installer errors use `{"error":{"code":"…","message":"…"}}`. Changing an address that nodes or executors already use returns 409 `public_url_confirmation_required` until the request confirms the new URL; pending `config.json` edits, an installation that is not applied or not running, hand-edited generated files, and another installation operation holding the lock (`installation_busy`) also return 409.
-
-Without `OAC_WEB_INSTALLATION_SOCKET` (external reverse proxy installations), `GET` reports `supported: false` and `POST` returns 400 `domain_setup_unavailable`. An unreachable installer or an invalid answer returns 502 `installation_unreachable`.
-
-The System page submits a hostname once, polls the status every 2 seconds while it is `checking` or `applying`, and asks for confirmation when the installer requires it. It never retries a write. Applying the domain restarts the console, which ends every session; the page keeps a sign-in link to the new HTTPS address. Only the `ready` state confirms HTTPS; the browser does not probe the new origin. The installer owns certificates, locking and recovery ([managed HTTPS](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/deploy/install/README.md#managed-https)).
-
-`OAC_WEB_BOOTSTRAP=1`, which the installer sets while no public URL is configured, lets the console also accept plain HTTP requests addressed to a literal IP address, treating `http://<that address>` as the origin, so an operator can sign in through the server's IP address. Host names still require `OAC_WEB_ORIGIN`, so DNS rebinding cannot reach the console.
-
-## Settings
-
-The installer sets these variables from `config.json`; set them yourself only when you run the console without the installer. Of the installation's secrets, the installer gives the console only `secrets/core.key`.
-
-| Variable | Default | Meaning |
-| --- | --- | --- |
-| `OAC_WEB_ADDR` | `:8080` | Listener address |
-| `OAC_WEB_ORIGIN` | `http://127.0.0.1:8080` | The exact browser-facing origin, HTTP or HTTPS, without a path. Host and origin checks use it; HTTPS makes the session cookie `Secure` |
-| `OAC_WEB_UPSTREAM` | `http://core:8091` | Core's origin, HTTP or HTTPS, without credentials, query or path |
-| `OAC_WEB_CORE_KEY_FILE` | `/admin/core.key` | Absolute path of a regular file with no group or other permissions, holding the Core key: at least 32 characters, no whitespace, at most 4 KiB |
-| `OAC_WEB_DIST` | `/www` | Absolute directory of the built console; must contain `index.html` |
-| `OAC_WEB_NODE_PAYLOAD_DIR` | unset | Absolute path of the matched distribution's node payload (the installer's `node-payload/`). Unset, `/node-install/*` is not served and Add node is unavailable |
-| `OAC_WEB_INSTALLATION_SOCKET` | unset | Absolute path of the installer's domain socket. Unset, domain setup reports unsupported |
-| `OAC_WEB_BOOTSTRAP` | `0` | `1` accepts literal-IP hosts before a domain is configured. Requires an `http://` origin and `OAC_WEB_INSTALLATION_SOCKET` |
-
-An invalid `OAC_WEB_*` value stops the console at startup with a message naming the variable. The console also reads `OAC_LOG_LEVEL`, `OAC_LOG_FORMAT` and `OAC_LOG_ADD_SOURCE` ([configuration](/configure#appendix-core-environment-without-the-installer)); unknown values fall back to their defaults. Use HTTPS for any browser that is not on the same machine.
-
-## Verification
-
-After installing or changing the console, check:
-
-1. `GET /healthz` on the console and on Core. Each proves only that the process answers.
-2. Sign in, then read `GET /core/v1/projects` in the browser. This proves the browser-to-console and console-to-Core path and the console's Core key.
-3. A Project API key works on `/v1` and fails on `/core/v1`. The Core key fails on `/v1`, and `/v1` sent to the console answers 404.
-4. A cross-origin write to the console is rejected, and a forged `X-Core-Console-Actor` header does not change the audit label.
-5. Neither sign-in nor the sandbox deployment read (`GET /core/v1/sandbox/deployment`) proves that a model or a sandbox is ready. Runtime observations and history report execution separately.
-
-A sign-in failure belongs to the console. A 401 from Core on a signed-in request means the console's Core key does not match Core's digest, or the console reaches the wrong Core. The [troubleshooting table](/troubleshooting#troubleshooting) covers the common symptoms.
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/web/console-server.md)
diff --git a/apps/docs/content/docs/harness-onboarding.mdx b/apps/docs/content/docs/harness-onboarding.mdx
deleted file mode 100644
index 9f77c3592..000000000
--- a/apps/docs/content/docs/harness-onboarding.mdx
+++ /dev/null
@@ -1,466 +0,0 @@
----
-title: "Add a Harness"
-description: "Implement and validate a native Harness adapter."
----
-
-A **Harness** is a native agent engine (Codex, Claude Code, MiniMax Code) that
-runs the model/tool loop. A **Harness adapter** translates the common
-Core–Runtime execution contract into that engine's SDK or protocol. This guide is
-the single numbered path for adding one. Qualification evidence and the
-per-operation support table live in [Harness integration](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/harnesses.md).
-
-Start from two entry points:
-
-- [`internal/harnessconfig/harness.go`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/harnessconfig/harness.go):
-  the shared model configuration contract (declarations and preparation).
-- [`agent/harness.go`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/daemon/internal/agent/harness.go): the
-  execution lifecycle, explicit extension contracts and registration methods.
-
-
-## Ownership
-
-```text
-Core: Session, Turn, immutable configuration, durable events
-                         |
-              common Runtime protocol
-                         |
-Runtime: Executor preparation, reuse, idle expiry, recovery
-                         |
-               Harness adapter package
-                         |
-          native SDK, process or connection
-```
-
-| Component | Responsibility | Location |
-| --- | --- | --- |
-| Core | Public API, authority, durable state, scheduling and configuration snapshots | `services/core` |
-| Runtime | Authenticated connection, shared capability preparation and common Executor/Turn lifecycle | `apps/daemon/internal/dispatch` |
-| Adapter | Native configuration, resources, API calls, event translation and restrictions | `apps/daemon/internal/agent/<kind>` |
-| Harness | Native model/tool loop and history | Pinned SDK or executable |
-| Service profile | Pure validation of qualified operations and placements | `services/core/internal/engine` |
-| Registration | Installed factories and verified capability declarations | `apps/daemon/internal/cli` |
-
-An Environment supplies execution resources. Managed Docker, E2B and user-managed
-machines differ in provisioning and connection; their connected Runtime uses this
-same contract. Operating-system support belongs in the implementation and its
-qualification. The native daemon supports Linux, macOS and Windows; each adapter
-declares its qualified platform scope. Managed Providers remain Linux-only.
-A platform-neutral interface alone does not qualify a harness on another platform.
-See [self-hosted platforms](/self-hosted-execution#platforms) for the current
-acceptance limits. Runtime connection, installed capability snapshot, Session Executor and Turn
-each have their own lifetime; see
-[Executor and Turn lifetimes](/runtime-protocol#executor-and-turn-lifetimes).
-Native factories receive
-capabilities only after the common Runtime has loaded its bound installed snapshot;
-see [capability preparation](/environments-and-files#runtime-capability-preparation).
-Model providers supply
-model communication configuration, not Turn scheduling or native process ownership.
-
-## Steps
-
-1. **Pin the native source.** Record the upstream package version and source
-   revision and document the native entry point next to the adapter.
-2. **Implement the adapter** in `apps/daemon/internal/agent/<kind>`: an
-   `ExecutorFactory`, an `Executor` and a `Turn`. See
-   [Required adapter interfaces](#required-adapter-interfaces). Reuse shared
-   process, credential/configuration and local workspace helpers.
-3. **Register the kind in the Runtime** in `apps/daemon/internal/cli`.
-   See [Register the adapter](#register-the-adapter).
-4. **Add the service profile and one catalog entry.** See
-   [Add the engine to Core](#add-the-engine-to-core).
-5. **Package native prerequisites.** Add a Runtime image under
-   `services/core/deploy/<kind>` and, optionally,
-   [native installer participation](#native-installer-participation).
-6. **Enable and select the engine** through
-   [engine selection](#engine-selection).
-7. **Qualify it.** Run the synthetic integration test, then the real acceptance in
-   [Harness integration](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/harnesses.md#acceptance-checklist). Record results in
-   the [qualification table](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/harnesses.md#current-qualified-operations).
-
-Implement the mandatory text lifecycle and explicitly handle every extension.
-Qualify supported extensions one at a time; an unqualified extension returns
-`agent.ErrUnsupportedOperation` without native effects. Call the reusable `agent/contracttest.TextLifecycle` assertions with the
-adapter's prepared Executor and deterministic native fixture. These assertions
-cover healthy reuse, durable input and cancellation for adapters whose native
-owner remains reusable. A native cancellation may instead require retirement:
-`Reusable=false` carries a reason and the caller must confirm `Executor.Close`.
-Do not force reuse to fit a test helper. Keep native fault and live acceptance
-separate. Name the entry test `TestSharedTextLifecycle` so
-`make check-runtime-contract` includes it. Do not copy an adapter's native
-limitations into the shared Core protocol.
-
-## Architecture rules
-
-- Codex, Claude Code and future Harnesses have equal architectural status. The
-  common Runtime wire protocol and Executor/Turn interfaces own lifecycle, input
-  receipts, cancellation, recovery and resource access. Each adapter keeps its
-  native implementation and model/tool loop.
-- A new engine supplies an adapter, a qualified profile, registration and an
-  independently verified deployment. It adds no engine-name branches to API
-  handlers, persistence, dispatch, scheduling or Environment providers.
-- Keep required lifecycle declarations, extension interfaces and registration
-  methods in `agent/harness.go`. Result types, errors and Registry storage may
-  stay in focused files. Keep this guide linked to that entry point.
-- Use the existing `proto.SupportedAgentKind` and `AgentKindCapabilities`
-  schema. Do not add a second capability descriptor or a combined optional
-  interface.
-- Onboarding does not require feature equality. Verify common lifecycle
-  obligations and use the same public assertions for each declared operation.
-  Native differences do not block onboarding, but an omitted declaration or
-  missing extension implementation does.
-- Never equate accepted parameters with applied native behavior.
-
-## Native model configuration
-
-[`internal/harnessconfig/harness.go`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/harnessconfig/harness.go) owns
-the shared configuration declaration and pure preparation contract. Each adapter
-supplies one `Configuration` to Core's composition and Runtime's `RegisterKind`.
-All three Runtime entry paths validate through that declaration before native
-side effects: direct factory, preparation and Executor. Registry wrappers retain
-the declaration alongside the factory. Lifecycle and cleanup ownership remain in
-[`agent/harness.go`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/daemon/internal/agent/harness.go).
-The shared wire object is `proto.HarnessConfig`.
-
-A supplied `model` must be a nonempty string, and an explicit `model_provider`
-requires it. The native-owned connection path may omit both; explicit null is
-invalid. An explicitly empty adapter declaration accepts no provider or nonempty
-native parameters. It does not advertise provider support. Unknown protocol
-formats and duplicate protocol declarations fail at registration.
-Adapter declarations in
-`internal/harnessconfig/<kind>` own these native fields:
-
-| Harness | Accepted native fields | Application |
-| --- | --- | --- |
-| Codex | `model_reasoning_effort`: `none`, `minimal`, `low`, `medium`, `high`, `xhigh` | Native app-server `-c model_reasoning_effort=...` and each Turn's `collaborationMode.settings.reasoning_effort` |
-| Claude SDK | `effort`: `low`, `medium`, `high`, `xhigh`, `max`; `thinking`: the SDK's `adaptive`, `enabled` or `disabled` object | SDK `Options.effort` and `Options.thinking` |
-| MiniMax Code | Empty object only | Existing provider token limits remain required; additional native generation parameters are not qualified |
-
-Claude `thinking` accepts `display` (`summarized` or `omitted`) for adaptive or
-enabled thinking, and an optional positive integer `budgetTokens` only for
-`enabled`. The deprecated `maxThinkingTokens` alternative is rejected.
-These are native settings, not a shared reasoning vocabulary; model availability
-and provider support remain the selected harness's responsibility.
-
-Native protocol and parameter declarations also feed Core administration's small
-configuration-support descriptor. Its ordered `protocols` list is the sole source
-for accepted protocols and the default (the first entry). Core and Runtime reject
-unsupported combinations through the same declaration. The current protocol
-matrix belongs to [model execution](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/model-execution.md#saved-defaults-and-precedence).
-Adapters connect directly through native configuration; they must not introduce
-a model API proxy or protocol converter. Follow the per-input capability
-requirements in the execution lifecycle contract; do not add a second model capability registry
-or infer capabilities from model names. Native protocol acceptance and remote
-model support remain separate facts.
-
-Claude's private bridge receives compiled native options and performs structural
-checks only, not a second copy of the declaration's rules. Planned fields and
-ownership are in the [unified model configuration design](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/model-configuration-design.md).
-
-
-## Required adapter interfaces
-
-[`agent/harness.go`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/daemon/internal/agent/harness.go) is the
-canonical interface entry point. Its required lifecycle is `ExecutorFactory`,
-`Executor`, `Turn` (including `DurableSteerer`) and `TurnSettlement`. Required
-methods must perform their native obligations; returning Unsupported is not an
-implementation of cancellation, receipts, settlement or cleanup. Turn and workspace
-extension interfaces remain small and separate, but every public adapter implements
-each explicitly. Their result types and errors stay in focused operation files. All use the existing neutral protocol types.
-
-The [Core–Runtime lifecycle contract](/runtime-protocol#executor-and-turn-lifetimes)
-owns preparation failure, partial StartTurn results, output closure, settlement,
-reuse and cleanup. Implement those obligations through the interfaces above.
-Native callbacks and resources stay inside the adapter; Runtime owns admission,
-idle expiry and replacement.
-
-For example, a Codex adapter retains its app-server and thread, a Claude adapter
-retains one streaming Query, and a MiniMax adapter retains its ACP connection and
-native Session. Their implementations expose the same Executor and Turn contract.
-
-### Cancellation ownership
-
-Implement cancellation on the exact Turn through `agent.Session`. Follow the
-[lifecycle and settlement rules](/runtime-protocol#executor-and-turn-lifetimes);
-the adapter must supply native completion evidence to the shared Runtime.
-Permission and user-choice responses use the explicit extension interfaces below.
-
-## Events, inputs and optional capabilities
-
-Use [`internal/agentdaemon/proto`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto) for neutral
-requests, events and receipts. Each Turn emits only its own events with its Run ID,
-in order, and one terminal outcome. Native IDs and usage must be observed rather
-than invented. Capture the originating Turn before asynchronous native callbacks;
-never attribute a late result to whichever Turn is currently active.
-
-Initial input and steering use ordered `proto.MessageInput`. Preserve user-message
-and content order. Text-only adapters reject images through `TextOnly()` instead
-of dropping them. A successful transport write is distinct from confirmed native
-application. User-choice answers use the emitted question ID and an array of
-values; shared `PromptForUserChoiceDecisionPayload.AnswersFor` validates identity
-before consuming a pending interaction. Do not map answers by header or position.
-Resume only the exact history bound to the Session; missing or ambiguous required
-history fails before new model input.
-
-| Interface or contract | Required handling | Obligation |
-| --- | --- | --- |
-| `ExecutorFactory`, `Executor.StartTurn`, `Executor.Close` | Real implementation | Prepare without model input; keep failed or uncertain resource ownership; confirm cleanup |
-| `Turn`, `Session.Cancel`, `CancellationOutcome`, `AwaitSettlement` | Real implementation | Cancel the exact Turn, preserve observed results and confirm settlement independently of cancellation requests |
-| `DurableSteerer` | Real implementation on every Turn | Distinguish complete write from native application receipt; preserve retry identity |
-| `Steerer` | Explicit implementation or Unsupported | Additional non-durable active-turn input |
-| `FunctionResultSubmitter` | Explicit implementation or Unsupported | Match native call/result identity and acknowledge application |
-| `PermissionResponder`, `UserChoiceResponder` | Explicit implementation or Unsupported | Respond to exact emitted identities; unknown/expired interactions remain distinct from Unsupported |
-| `WorkspaceReader`, `WorkspaceDirectoryLister`, `WorkspaceWriter` | Explicit on Turn, Executor and Prepared owners | Use the authorized workspace, confirm access/commit/close, or return the operation's Unsupported error |
-| `Prepared`, `PreparedCancellation` | Real implementation for an executable preparation | Preserve resource and output ownership across Start, cancellation and unused cleanup |
-| Neutral messages, images, MCP, structured output and Subagent observations | Explicit capability decisions | Preserve each operation's protocol semantics; reject unsupported input before submission |
-
-Each adapter's `contracts.go` contains individual compile-time assertions for these
-small interfaces. Do not embed a default implementation that makes future
-interfaces appear implemented. Adding a contract also requires classification in
-the common completeness check and an explicit assertion for every public adapter;
-the check follows the authored Harness catalog.
-
-For a design-level refusal, implement the method directly, for example:
-
-```go
-func (s *Session) SubmitFunctionResult(context.Context, proto.FunctionResultPayload) error {
-    return fmt.Errorf("%w: native public function tools are not qualified", agent.ErrUnsupportedOperation)
-}
-```
-
-The reason is a fixed safe string, never submitted content, a credential or raw
-native diagnostics. Unsupported guarantees no native side effect. It is not a
-successful empty operation. Installation unavailability, unknown interaction IDs,
-native failures and uncertain outcomes keep their existing errors and ownership.
-A nil `Turn` still means no input was submitted and output remains with the caller;
-it must not be repurposed as an Unsupported marker.
-
-Workspace capability describes the actual Runtime/resource-owner combination.
-Codex and MiniMax resource objects explicitly reject native workspace access while
-the common authorized `localworkspace` owner provides it. Claude can expose native
-read/list access; writes are provided by the common owner. Interface presence alone
-must never select a resource or advertise support.
-
-The service profile qualifies public combinations; the Runtime advertises the
-installed combination. Neither replaces schema validation or tenant authorization.
-Native behavior tests must agree with supported declarations. An advertised
-operation returning Unsupported is a contract violation, never success or grounds
-for automatic replay.
-
-## Register the adapter
-
-Registration is static and requires a build; dynamic plugins are outside this
-contract. The methods live in `agent/harness.go`, and built-in adapters call them
-from [`cli/agent_registration.go`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/daemon/internal/cli/agent_registration.go)
-(Codex, MiniMax Code) and [`cli/claude_sdk.go`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/daemon/internal/cli/claude_sdk.go)
-(Claude Code).
-
-| Order | Method | Registers |
-| --- | --- | --- |
-| 1 | `RegisterKind(proto.SupportedAgentKind, harnessconfig.Configuration, agent.Factory)` | Kind, availability, version, `AgentKindCapabilities`, the adapter's model configuration declaration and the direct-call factory. Resets the other registrations, so call it first. |
-| 2 | `RegisterExecutor(kind, agent.ExecutorFactory)` | The shared Executor/Turn lifecycle used for execution. Derives the `Preparation` capability. |
-| 3 | `RegisterPreparation(kind, workspaceRead, agent.PreparationFactory)` | Optional. Separate read-only workspace preparation when qualified workspace operations need it. |
-
-The direct-call `agent.Factory` should delegate to the same Executor
-implementation. Every `proto.AgentKindCapabilities` field must be explicitly
-`proto.CapabilitySupported` or `proto.CapabilityUnsupported`.
-`proto.CapabilityUnspecified` is invalid: zero values and omitted fields do not mean
-Unsupported. Installation probes may use `proto.CapabilityFromBool` for an
-individual field; they must not populate all unmentioned or future fields.
-Availability remains separate in `SupportedAgentKind.Available`.
-
-Registration and wire decoding validate the complete declaration. The wire carries
-an explicit boolean for every field; omitted and null fields are invalid. A new
-field requires a decision by every production declaration. Runtime consumers use
-`IsSupported()` and reject unsupported requests before native operations; an
-interface assertion only verifies implementation, never support. Every declaration
-must match behavior verified for that installation.
-
-The admission mapping is explicit: `Steering` controls non-durable `Steerer` input;
-`DurableInputReceipts` controls `DurableSteerer` input and also requires the Turn
-settlement contract. Neither implies the other. Core's current public text profile
-requires both advertised capabilities. `Permissions` qualifies permission and
-user-choice responses together; a supported declaration requires both native
-response paths. Workspace declarations describe the selected authorized resource
-owner, including the common Runtime workspace implementation.
-
-Runtime registration does not grant Core qualification;
-that belongs to the service profile.
-
-The runnable test-only example is
-[`testdata/onboarding/main.go`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/daemon/testdata/onboarding/main.go).
-It registers a text-only synthetic Harness, demonstrates a Session-owned
-Executor, fresh Turns, durable steering, cancellation and history binding, and is
-never shipped as a real engine.
-
-## Add the engine to Core
-
-Core recognizes the [built-in Harness registrations](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/harness-catalog.md).
-Add one entry to `internal/harnessconfig/builtin/catalog.json` with:
-
-- the public `kind` and display `label`;
-- the model `configuration` package under `internal/harnessconfig`;
-- the `profile` constructor under `services/core/internal/engine`.
-
-Implement the profile constructor, then run `make generate-harness-catalog`.
-This generates the model configuration registry, Core profile catalog, client
-identifiers/display names and registration reference. Public input validators read
-the generated registry. `make openapi` derives Harness enums from the same authored
-catalog; do not add handwritten enums to DTO tags or route annotations.
-`make check-harness-catalog` rejects stale projections.
-
-Runtime registration uses `builtin.Configuration(kind)` for public Harnesses and
-separately registers native factories, probes and installed capability evidence.
-The catalog cannot declare a machine's availability. Adapter discovery and
-packaging still require their own implementation and qualification; no dynamic
-plugin loader is introduced.
-
-The profile is pure: it declares supported placements, public configuration and
-result limits and required Runtime controls, using existing public/protocol
-types. Profile callbacks cannot query business data, decrypt credentials or
-control native processes. Public schema validation, qualified engine support and
-actual Runtime capabilities remain separate checks; Runtime advertisements alone
-never enable public operations. Shared dispatch checks capability combinations,
-not a whitelist of engine names.
-
-`execution.Policy` supplies immutable service qualification to HTTP admission,
-Worker device selection and final dispatch. Custom composition gives the same
-Policy to `api.WithExecutionPolicy` and `Dispatcher.Policy`. The zero value uses
-built-in profiles; an explicitly empty catalog authorizes none. There is no
-mutable global registration or compatibility fallback.
-
-## Engine selection
-
-The [Harness selection contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/harness-selection.md) owns the public selector,
-deployment enablement, defaults and immutable Session binding. This guide adds no
-second selector or fallback rule.
-
-## Required versus extension operations
-
-The current public text path requires durable turns, applied input receipts,
-ordered observations, cancellation and enforcement of disabled execution controls.
-Check `execution.Policy.engineCapabilities` for the exact current requirements.
-An engine without native tools can guarantee their absence; an engine with tools
-must actually disable them when requested. Configuration acceptance is not proof
-of enforcement.
-
-MCP, public function calls, deferred function discovery, structured output, image inputs, verbosity controls and other optional
-operations do not need to match another engine. Reject unqualified combinations
-with Unsupported and record the gap. Never advertise a capability to bypass selection.
-
-Structured-output adapters consume `ExecutionControls.OutputFormat` and publish
-confirmed native output through the existing Message contract. Register public
-qualification separately from the Runtime capability; see the
-[structured-output boundary](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/structured-output.md). No Core engine-name branch is required.
-
-Initial requests, `Executor.StartTurn` and steering consume the same ordered
-`proto.MessageInput`. Text-only adapters use `TextOnly()` to reject images without
-discarding content. Image adapters translate each part natively and acknowledge
-an active batch only after all its messages are applied. Register
-Runtime `MessageImages` and qualify the engine profile’s `MessageImages` separately; see the
-[message-input contract and real acceptance](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/message-input.md).
-
-Hosted workspace execution additionally requires verified preparation, workspace
-reads/output export, network behavior and credential/history isolation. Reuse the
-same dedicated Runtime binding and shared Files helpers. A native Bash sandbox
-alone does not establish isolation for other native file tools. Enable a placement
-only after its required security and lifecycle behavior is demonstrated.
-
-### MCP origin and native limits
-
-Declare supported public origins in the existing engine profile's `MCPOrigins`
-and bearer support in `MCPBearer`. Runtime advertises actual HTTP, bearer and
-required-initialization capabilities. Shared admission validates origin and
-placement; adapter validation retains native label, allowlist and initialization
-limits. These are separate checks, not a second MCP executor.
-
-Consume `agent.ResolveMCPBindings` for public and installed declarations; preserve
-origin, credential authority, null versus empty allowlists and required startup.
-Do not copy tokens into native profiles or reinterpret a service request as an
-Environment request. Reject unsupported native policies instead of dropping them.
-Follow [the MCP origin contract](/environments-and-files#public-mcp-connection-origin)
-and run public-client, failure, cancellation and cold-recovery qualification for
-each advertised combination. Model capability remains separate from Harness
-transport support; never infer it from model names or silently degrade input.
-
-## Optional Subagent observations
-
-A harness that supports the Subagent resource reads implements the existing
-[neutral observation contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/subagents.md#common-adapter-contract). It reports
-verified child identity, lifecycle effects and owned Turn/Item history through
-the authenticated Run, then qualifies those facts with real execution. It does
-not add routes, storage branches or a harness-specific Core scheduler. Report
-unsupported native facts explicitly; completing a child task is not closing its
-Subagent. Native background work must remain owned through settlement and cancel.
-
-## Contract verification
-
-Run `make check-runtime-contract`, the three adapter test packages and `make check`.
-The common completeness gate covers capability omissions and interface assertions;
-adapter tests must cover actual native semantics, not only method presence.
-
-| Boundary | Existing focused evidence |
-| --- | --- |
-| Codex reuse, cancellation and unconfirmed cleanup | `codex/executor_test.go`, `terminal_cleanup_test.go`, `prepared_cancel_test.go` |
-| Codex input receipts and strict recovery | `codex/function_write_receipt_test.go`, `function_receipt_test.go`, `resume_test.go`, `recovery_test.go` |
-| Claude input ownership, cancellation and preparation cleanup | `claudesdk/executor_test.go`, `cancellation_test.go`, `preparation_test.go` |
-| MiniMax cancellation retirement, failed Start and cleanup retry | `mcode/executor_test.go`, `executor_backpressure_test.go` |
-| MiniMax native history binding | `mcode/session_test.go` |
-| Explicit refusals without native effects or fabricated results | Each adapter's `unsupported_test.go` |
-
-These paths are relative to `apps/daemon/internal/agent`. Controlled native
-transport fixtures establish failure and ownership behavior; they are not live model
-qualification. Preserve the separate native acceptance requirements in
-[Harness integration](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/harnesses.md#acceptance-checklist).
-
-## Native installer participation
-
-An adapter may supply `agent.Installation` from `installation.go` in its own
-package: registered agent kind, pinned version, supported platforms, activation
-environment and a bounded
-readiness probe. Register it in `cli/native_harness.go` and add its pinned component
-to the native distribution builder. This optional contract does not change
-Executor/Turn semantics. Runtime owns checksums, copying, locks and additive
-installation; adapters own native layout and probes. Validate installation and
-actual execution on each advertised platform. Missing or incompatible native
-content must fail, never install itself during a Turn.
-
-## Native process ownership
-
-The shared daemon `clirunner` offers opt-in Unix process-group ownership for
-adapters whose SDK launches a native child. Existing callers keep their current
-process policy. Explicit cancellation and parent-context cancellation share a
-TERM grace period and bounded KILL escalation. An internal reaper also cleans
-remaining group members when the direct process exits, even if a descendant
-still holds stdout open. During cancellation, surviving descendants keep the
-remaining TERM grace after the leader exits. Unsupported hosts reject this mode before launch.
-
-Owned output pipes remain readable after the leader exits. Consumers must drain
-stdout and stderr before calling `Wait`, which joins the cached process result
-and closes the readers. `Done` reports leader reaping and group cleanup signals;
-it is not a native execution receipt or proof of persisted history. SDK adapters
-must settle each Turn and drain its observations before publishing completion.
-Executor close additionally closes the query and awaits the native child. Process groups are lifecycle supervision, not OS isolation
-or containment of descendants that deliberately leave the group.
-
-All Harness adapters use bypass execution. Do not restore named Codex permission
-profiles, bubblewrap wrappers, native Claude sandbox settings or MiniMax
-SandboxManager branches. There is one execution path for every Environment origin.
-Resource paths are ordinary operator configuration, not a permission boundary.
-
-The daemon does not enforce disabled or restricted network policies. Such a
-combination must be rejected unless its outer Environment implementation provides
-and qualifies the requested behavior. Do not advertise daemon-level network
-isolation or silently run a restricted request with unrestricted semantics.
-The normal self-hosted combination uses the host's existing network access.
-
-## Native references
-
-Use these adapters as implementation references after choosing a native API:
-
-| Harness | Adapter | Native transport | Runtime guide |
-| --- | --- | --- | --- |
-| Codex | [`agent/codex`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/daemon/internal/agent/codex/executor.go) | app-server | [Codex Runtime](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/deploy/codex/README.md) |
-| Claude Code | [`agent/claudesdk`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/daemon/internal/agent/claudesdk/executor.go) | [TypeScript SDK bridge](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/packages/claude-sdk-adapter/README.md) | [Claude Runtime](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/deploy/claude/README.md) |
-| MiniMax Code | [`agent/mcode`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/daemon/internal/agent/mcode) | ACP and native workspace companion | [MiniMax Code Runtime](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/deploy/mcode/README.md) |
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/harness-onboarding.md)
diff --git a/apps/docs/content/docs/hosted-providers.mdx b/apps/docs/content/docs/hosted-providers.mdx
deleted file mode 100644
index eb780dc33..000000000
--- a/apps/docs/content/docs/hosted-providers.mdx
+++ /dev/null
@@ -1,204 +0,0 @@
----
-title: "Nodes and hosted providers"
-description: "Add and remove Docker or microsandbox nodes; diagnose connection and readiness."
----
-
-A node is a Linux host that runs sandboxes for Core-hosted Sessions when the sandbox backend is Docker or microsandbox. Core places each new Session on a node with free capacity; the node creates the sandbox, and the sandbox connects back to Core. E2B needs no nodes. Machines that applications connect for their own Sessions are [self-hosted executors](/self-hosted-execution), not nodes.
-
-You add a node by generating a command in Web and running it on the host. The [sandbox deployment contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/sandbox-deployment.md) defines the sandbox settings and their change rules, and the [node protocol](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/node-generation-protocol.md) defines how nodes prepare and keep Runtime generations.
-
-## Before you add a node
-
-- **Core has an HTTPS public URL** that the host and its sandboxes can reach. Nodes download from Core's console and connect to Core at `public_url`. Until it is set, Add node says *Configure a domain and HTTPS in System before adding nodes*; see [Configure the domain and HTTPS](/install#configure-the-domain-and-https), or with external ingress [change the public URL](/configure#changing-the-public-url).
-- **The sandbox configuration is saved.** The installer saves microsandbox at the Standard size unless you passed another `--sandbox`. After `--sandbox none`, open **System** → **Manage sandbox configuration**, choose **Own machines**, then microsandbox (recommended) or Docker and a sandbox size, and **Save configuration**. Every node of an installation uses that backend.
-- **The console can serve the node files.** Nodes download their Runtime and provider files from the console, which redirects to the release for files it does not hold, and check each file's size and SHA-256 against the release manifest. For hosts without access to the release, install Core from the [offline bundle](/install-options#offline-hosts) so the console holds every file. Without the files, Add node says *This console has no node files for …*.
-
-The Core host joins like any other host: to run sandboxes on it, add it as a node.
-
-## Add a node
-
-1. In Web, open **Nodes** and choose **Add node**.
-2. Set **Sandboxes at once** and, with microsandbox, **Retained sandboxes**: the node's [capacity](/configure#node-capacity). You can change them later with **Edit node**.
-3. Choose **Generate command** and copy the command. It registers one node, once, and only if it runs within 10 minutes; Web counts down and offers **Generate new command** when it expires.
-4. Run it on the host. Web follows the node from registered to connected to ready.
-
-The command downloads the node installer from your console, checks its SHA-256 and runs it with a one-time enrollment token. The installer downloads the node files and checks each against the release manifest, imports the Runtime image, registers the node, starts its service and waits until Core reports the node connected and ready. It never installs software, and it stops with a one-line hint before changing anything when a prerequisite is missing.
-
-Node installation and removal require root. Web's command uses `sudo` unless the shell is already root. The installer creates an `oac-node` service user and a system service; the node runs as that user, not as root. Running the installer as an ordinary user fails before it reads the enrollment token or changes the host.
-
-### The command
-
-This is the command Web generates, with this installation's values:
-
-```sh
- (umask 077; d=$(mktemp -d) || exit; trap 'rm -rf "$d"' EXIT; s=; [ "$(id -u)" -eq 0 ] || s=sudo
-printf '\n==> Downloading node installer...\n' &&
-curl -fsS --max-time 30 --max-filesize 1048576 'https://core.example/node-install/node-install.pyz' -o "$d/node-install.pyz" &&
-printf '==> Verifying node installer...\n' &&
-printf '%s  %s\n' '<installer-sha256>' "$d/node-install.pyz" | sha256sum -c --status &&
-printf '%s\n' '<enrollment-token>' | $s python3 "$d/node-install.pyz" ${NO_COLOR+--no-color} --enrollment-token-stdin --source-url 'https://core.example' --core-url 'https://core.example' --provider 'docker' --installation-id '<installation-id>')
-```
-
-- It downloads the installer into a private temporary directory, checks its SHA-256, and runs it with `sudo`, or directly in a root shell.
-- The token reaches the installer on standard input, so it never appears in a process argument, an environment variable or sudo's log.
-- The leading space keeps the command out of the shell history where `HISTCONTROL` ignores such lines (the Debian and Ubuntu default).
-
-The installer shows each phase as it runs and, once Core confirms the node, a summary with status and log commands. `export NO_COLOR=1` disables colors; the command passes this through sudo as `--no-color`. It never prints tokens.
-
-### Host requirements
-
-- Linux amd64 with systemd; Python 3.9+, `curl` and `sha256sum`; root or sudo.
-- SELinux not enforcing. The installer does not support hosts with enforcing SELinux.
-- Docker: rootful Docker Engine running, its socket `/var/run/docker.sock` owned by the `docker` group with mode `0660`, enforcing CPU and memory limits (cgroup v2).
-- microsandbox: `/dev/kvm` in the `kvm` group (hardware or nested virtualization), and the libraries microsandbox links (glibc).
-- CPUs and memory for at least one sandbox of the installation's size, and about 2 GB of disk for the Runtime image.
-- HTTPS access to the console and Core at the public URL; sandboxes reach Core too.
-
-### Download through a proxy
-
-Export `http_proxy`, `https_proxy` and `no_proxy` before running the generated command. Uppercase `HTTP_PROXY`, `HTTPS_PROXY` and `NO_PROXY` work too; lowercase takes precedence when both are set, even when empty. Use an HTTP proxy URL, optionally with URL-encoded credentials, and comma-separated host exclusions in `no_proxy`. A proxy for HTTPS downloads must support CONNECT.
-
-The command asks sudo to preserve only these six names, and the installer keeps them when it drops to `oac-node`. If sudo policy refuses, ask the host administrator to permit those names, or run from a root shell with the variables exported there. An outer `sudo` you add yourself can discard them. Don't put credentials in command arguments or share shell traces.
-
-The proxy applies only to installation downloads. It is not saved in the node's configuration or service, so the running node needs its own network access to Core.
-
-## What the installer sets up
-
-| Item | Detail |
-| --- | --- |
-| Service user | System user `oac-node`, home `/var/lib/oac-node`, no login shell. An existing account with that home and a nologin shell is adopted; any other account named `oac-node` is refused |
-| Group | The group that owns `/var/run/docker.sock` (Docker) or `/dev/kvm` (microsandbox): `docker` or `kvm`, nothing else |
-| Service | `/etc/systemd/system/oac-node-<installation-id>.service`, a root-owned system unit with `User=oac-node`, enabled at boot. It restarts every 5 seconds while Core is unreachable and stops for good once Core no longer accepts the node |
-| Node state | `/var/lib/oac-node/.oac/nodes/<installation-id>/`: identity, configuration, node files. microsandbox keeps its images and sandboxes under `/var/lib/oac-node/.oac/m/` |
-| Records | `/etc/oac-node/`: what the installer created or changed, used by reruns and uninstall |
-| Docker | The Runtime image, imported once, and a network `oac-node-<installation-id>` |
-| microsandbox network policy | Sandboxes may reach Core, DNS on the host and public addresses, and nothing else: no inbound connections and no private networks. A private model or MCP endpoint needs a policy change on the node |
-
-Root only prepares the account, the group and the unit; everything else, the Docker network included, runs as `oac-node`, in its own session without a terminal. The installer never installs Docker, KVM or packages, never starts Docker, never changes device permissions, sudoers, firewall or SELinux settings, and never touches other accounts.
-
-**Docker mode is root-equivalent.** Membership in the `docker` group lets `oac-node`, and so anything that controls the node, act as root on the host. Containers also share the host kernel, so a container escape reaches the host. Add Docker nodes only on hosts dedicated to sandboxes. microsandbox nodes need only the `kvm` group and run each sandbox in its own microVM.
-
-**One Core per host.** Nodes share the `oac-node` account, so a host serves one Core; a command from a second Core is refused.
-
-**One release.** A node runs the program of the console that added it and is never upgraded in place; see the [installation version policy](/troubleshooting#installation-version-policy).
-
-**The token.** It is single-use, expires after 10 minutes and only registers the node. The installer takes it only on standard input and refuses it in the environment, where `sudo VAR=… python3` would record it in sudo's log. A sudoers policy with `log_input` records standard input, and so the token.
-
-## Rerun, expiry and slow links
-
-- Rerunning the same command is safe. Once the node is registered, a rerun uses the node's own credential, changes nothing that already matches and needs no token. It refuses, without changing anything, when the node's retained identity belongs to another Core address or installation.
-- A command that already expired, or was used on another host, fails at once with `Core rejected the node configuration read (HTTP 401)`: generate a new command and run it within 10 minutes.
-- If the command expires during a slow download, registration fails with `The enrollment command expired or was already used`. The downloaded files are kept: generate a new command in Web and run it.
-- Downloads resume where they stopped. A download that brings less than 64 KiB in a minute stops, keeping what it has; run the command again.
-- The Docker Runtime image is about 500 MB. On a slow link, load it first: copy the release's `oac-<commit>-linux-amd64-runtime.tar.gz` asset to the host and run `sudo docker load -i` on it. The installer then finds the exact image and skips the download.
-- Interrupting the installer, or closing its terminal, stops it; run the command again to continue.
-
-## Logs
-
-The installer prints the node's log command (`Logs: …`) when it finishes. The Add node dialog shows it too when something needs attention: when the node reports a problem, or when it hasn't become connected and ready about a minute after registering.
-
-Run `sudo journalctl -u oac-node-<installation-id>.service`. In a root shell, omit `sudo`. The installation ID is in the command (`--installation-id`) and on the **System** page.
-
-## Change the sandbox configuration
-
-Sandbox settings apply to the whole installation; nodes follow them.
-
-- **Size, Runtime release, E2B key or template build.** Open **System** → **Manage sandbox configuration** → **Change resources**, edit and save. Existing sandboxes keep their configuration. Each node prepares the new one while it keeps serving the old one, and **Nodes** shows its progress: **Preparing target**, **Ready for target** or **Preparation failed** with the [reason](#readiness-codes). Core places new Sessions on nodes ready for the new configuration first, and on nodes still serving an older one when those have no room. E2B changes apply at once.
-- **Backend.** On the same page, choose **Reset deployment**. Auto reset archives idle hosted Sessions at once and lets running work finish until the deadline you set; force cancels it now. Offline nodes must come back so Core can confirm their cleanup. When the reset completes, Core has retired every node and unused command: set up the new backend, then add nodes again. **Cancel reset** stops the remaining work; archived Sessions stay archived.
-
-The [reset contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/sandbox-deployment.md#generation-ownership-and-rollout) describes what reset archives and keeps. To archive a single hosted Session, use the [Core API](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/admin-api.md#administrative-session-archive).
-
-## Remove a node
-
-1. In Web, open **Nodes** and choose **Remove node** on the node's page, or **Remove** in its list row, then **Confirm removal**. Core refuses while the node still holds sandboxes, snapshots or pending cleanup; let them finish, or archive their Sessions. Removal is permanent: the host can come back only as a new node. Removing every node keeps the sandbox configuration.
-2. Web then shows **Clean up the host** with the uninstall command. Run it on the host:
-
-   ```sh
-    (umask 077; d=$(mktemp -d) || exit; trap 'rm -rf "$d"' EXIT; s=; [ "$(id -u)" -eq 0 ] || s=sudo
-   printf '\n==> Downloading node installer...\n' &&
-   curl -fsS --max-time 30 --max-filesize 1048576 'https://core.example/node-install/node-install.pyz' -o "$d/node-install.pyz" &&
-   printf '==> Verifying node installer...\n' &&
-   printf '%s  %s\n' '<installer-sha256>' "$d/node-install.pyz" | sha256sum -c --status &&
-   $s python3 "$d/node-install.pyz" ${NO_COLOR+--no-color} --uninstall --installation-id '<installation-id>')
-   ```
-
-Uninstall first asks Core, at the address the node enrolled with, whether the node was removed, and refuses while Core still lists it. When the node enrolled with an address other than the current public URL, the dialog also shows **Old Core address gone?**: if that address no longer responds, it gives the command with `--force`, which skips the check; remove the node on the Nodes page first. Without the dialog, take the installer's SHA-256 from the `node-install.pyz` line of `https://core.example/node-install/SHA256SUMS`. Uninstall stops and removes the service, the node state, the records and the Docker network. It deletes the `oac-node` account only if the installer created it and no node remains; an adopted account only loses the groups the installer added.
-
-It never deletes sandboxes, volumes or images. It keeps the Runtime image and prints the `docker image rm` command. For microsandbox it keeps the store under `/var/lib/oac-node/.oac/m/`, prints how to delete it (`sudo -u oac-node rm -rf <store>`), and keeps a created account until the store is gone; rerun uninstall afterwards. With `--force`, microVMs may still use the store, so check `pgrep -u oac-node` first. Uninstall can be rerun until it completes.
-
-## Register a node manually
-
-Use manual registration when you manage the node's files and service yourself instead of running Web's command. A manually registered node serves only the configuration it registered with: after a size or Runtime change, **Nodes** shows it as **Node software incompatible**, and it keeps serving the old configuration until you remove it and register the host again.
-
-1. Take `oac-node` from the same release as Core.
-2. Get an enrollment token: the token in a command from **Add node**, or `POST /core/v1/sandbox/enrollment-tokens` with the Core key. It is single-use and carries the node's approved capacity; the response's `expires_at` says when it expires. Save it in a `0600` file on the host.
-3. Read the node configuration with the token, which does not consume it: `GET /api/v1/sandbox-node/configuration` with `Authorization: Bearer <token>`.
-4. Write a private provider file. Copy `provider`, `installation_id`, `core_url`, `generation` and `specification` from the response, and add one adapter object for the host:
-   - `docker`: `host` (an explicit Unix socket), `image` (the locally imported Runtime image of the approved release), `network`, `extra_hosts`, an absolute `seccomp_file` and `nested_sandbox`.
-   - `microsandbox`: absolute `helper_path`, `runtime_path` and `firmware_path` with their `runtime_sha256` and `firmware_sha256`, `image`, the sandbox `cpus`, `memory_mib`, `root_disk_mib` and `environment_disk_mib`, a `network` policy, and `runtime_home`: a private directory, which the helper creates with mode `0700` when it is missing. microsandbox places Unix sockets under it, so keep its path within 48 bytes; the installer refuses a longer one for its own nodes.
-5. Register, then run the node under the host's service supervisor, with real absolute paths:
-
-   ```sh
-   oac-node register \
-     --config /var/lib/oac/provider.json \
-     --state-dir /var/lib/oac/node \
-     --core-url https://core.example \
-     --name worker-1 \
-     --enrollment-token-file /var/lib/oac/enrollment-token
-   oac-node run \
-     --config /var/lib/oac/provider.json \
-     --state-dir /var/lib/oac/node
-   ```
-
-`oac-node run` exits with status 78 once Core rejects its credential, after the node is removed; configure the supervisor not to restart it then (systemd: `RestartPreventExitStatus=78`).
-
-The node connects out to Core; Core needs no SSH or Docker TCP access to the host. Registration writes the node's identity to the state directory before contacting Core, so a lost response can be retried under the same identity. Keep the state directory on persistent storage, private to the node's account and used by one process at a time. Never copy it to another directory or host: Core refuses a second connection for a node while the first is open. The provider file can't change the node's capacity or sandbox configuration. Core compares its digest at registration and on every connection, and a node whose file differs takes no work until the approved configuration is restored.
-
-## When a node host fails
-
-A restarted node service keeps its identity and finds its existing sandboxes again. Core never replaces a missing sandbox by itself, and never moves a Session to another node: the Session's resources show as **Node disconnected** or **Sandbox resource missing** until the original host and its storage are back, or you archive the Session. A lost node state directory is a recovery incident: restore it from its [backup](/troubleshooting#back-up) together with the database and the provider storage, rather than registering the host again over existing resources.
-
-## Troubleshooting
-
-### Readiness codes
-
-When a node is online but its sandbox provider is not ready, **Nodes** and **Overview** show it as **Provider not ready**. Where the reason appears depends on how the node was added:
-
-- **Nodes added with Web's command** report a failed check of the current sandbox configuration as **Preparation failed** in the node's target status, with the reason in a help tip (`rollout.diagnostic` in `GET /core/v1/sandbox/nodes`). The tip beside **Provider not ready** only says *Sandbox provider unavailable*.
-- **Manually registered nodes** show the reason in the help tip beside **Provider not ready** (`diagnostic`).
-
-The node's log has the local error behind the code.
-
-A node reports only its first failed check, in this order: the Docker daemon or KVM, Docker's limit support, host capacity, then the installed Runtime files. An unreachable Docker daemon therefore hides a missing image. The next heartbeat, about ten seconds after a fix, clears or replaces the code. An offline node keeps its last code, which Web hides until the node reconnects.
-
-| Code | Help tip | Cause | Fix |
-| --- | --- | --- | --- |
-| `docker_unavailable` | Docker unavailable | The Docker socket is unreachable or not accessible, or Docker fails its info or image request | Start Docker and give the node's user access to `/var/run/docker.sock` |
-| `docker_limits_unsupported` | Docker limits unsupported | Docker reports no CPU quota or memory limit support | Use a host whose cgroups enforce CPU and memory limits (cgroup v2) |
-| `capacity_insufficient` | Host too small | The host has fewer CPUs or less memory than one sandbox | Use a larger host, or change the sandbox size |
-| `runtime_image_unavailable` | Runtime image missing | Docker does not have the pinned Runtime image | A node added with Web's command downloads it again by itself; otherwise load the image from the matching release |
-| `kvm_unavailable` | KVM unavailable | The node can't open `/dev/kvm` for reading and writing | Enable hardware virtualization and give the node's user KVM access, through the `kvm` group |
-| `microsandbox_artifacts_unavailable` | microsandbox components missing | The Runtime or firmware is missing or fails its SHA-256 check, or the helper is missing | A node added with Web's command downloads the missing files by itself; otherwise restore them from the matching release |
-| `runtime_download_failed` | Runtime download failed | While preparing a new configuration, the node could not download or verify the Runtime files | Check the node's HTTPS access to the console and the release. The node retries with growing delays, up to 30 minutes apart |
-| `provider_unavailable` | Sandbox provider unavailable | Any other failure | Read the node's log |
-
-A new group membership applies only to a new process. Restart the node service: `sudo systemctl restart oac-node-<installation-id>.service`. A node that is registered but never connects usually can't reach Core at the public URL, or its `/api/v1` WebSocket doesn't pass the reverse proxy.
-
-### Installer messages
-
-| Message | Fix |
-| --- | --- |
-| `Core rejected the node configuration read (HTTP 401)` before anything downloads, or `The enrollment command expired or was already used` | Generate a new command in Web and run it within 10 minutes |
-| Core's public URL changed after this command was generated | Generate a new command in Web and run it |
-| This host's node uses `<address>`, but this command uses `<address>` | The node was added under an older public URL. Remove it in Web, uninstall it, then add it again |
-| Docker Engine is not installed, or Docker is not running | Install Docker Engine, or `sudo systemctl enable --now docker`, then rerun |
-| Docker on this host does not enforce CPU and memory limits | Use cgroup v2, then rerun |
-| KVM is unavailable, or `/dev/kvm` must be group-accessible | Enable virtualization; your distribution's KVM package sets `root:kvm 0660` |
-| This host has N CPUs and M MiB of memory; each sandbox needs … | Use a larger host, or change the sandbox size |
-| SELinux is enforcing on this host | Use a host supported by the installer; it does not change SELinux settings |
-| This host already runs a sudo-mode node for another Core | Remove that node and uninstall it first |
-| Node installation and removal require root | Run Web's command with sudo, or from a root shell |
-| Core still lists this node | Remove it on the Nodes page first |
-| Core no longer accepts this node | It was removed, or a reset retired it. Uninstall it, then add the host with a new command |
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/getting-started/nodes.md)
diff --git a/apps/docs/content/docs/index.mdx b/apps/docs/content/docs/index.mdx
deleted file mode 100644
index 00eea342c..000000000
--- a/apps/docs/content/docs/index.mdx
+++ /dev/null
@@ -1,36 +0,0 @@
----
-title: "OpenAgentCore documentation"
-description: "Install Core and Web, create a Project API key, and add execution capacity."
----
-
-OpenAgentCore runs AI agents on your own infrastructure behind the OpenAI Agents API. The [architecture overview](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/architecture.md) explains its parts. Pick the guides for your role.
-
-## Operators
-
-Operators install Core and Web, add sandbox capacity and issue Project API keys.
-
-| Guide | Covers |
-| --- | --- |
-| [Install Core and Web](/install) | The default installation, from an empty host to the first Project API key |
-| [Installation options](/install-options) | Installer flags, existing reverse proxies, split and native deployments, offline hosts |
-| [Nodes](/hosted-providers) | Adding, changing, removing and troubleshooting sandbox nodes |
-| [Operations](/troubleshooting) | The `oac` command, the Core key, backups, upgrades and troubleshooting |
-| [Configuration reference](/configure) | Every setting, file and environment variable |
-| [Web console](/console) | What the console shows and manages |
-
-## Application developers
-
-Application developers call the API with a Project API key, and can run Sessions on machines they own.
-
-| Guide | Covers |
-| --- | --- |
-| [Quickstart](/quickstart) | From a Project API key to a finished Session |
-| [User guide](/user-guide) | Common tasks: harness and model choice, follow-ups, capabilities, files, cancel |
-| [Agents API guide](/sessions) | Every resource, with SDK and HTTP examples |
-| [Self-hosted execution](/self-hosted-execution) | Running a Session on your own machine |
-| [Examples](/examples) | Complete applications built on the API |
-| [API index](/public-api) | All three namespaces and their credentials |
-
-Contributors start with the [developer guide](/development) and [CONTRIBUTING.md](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/CONTRIBUTING.md).
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/getting-started/README.md)
diff --git a/apps/docs/content/docs/install-options.mdx b/apps/docs/content/docs/install-options.mdx
deleted file mode 100644
index be0beba1f..000000000
--- a/apps/docs/content/docs/install-options.mdx
+++ /dev/null
@@ -1,309 +0,0 @@
----
-title: "Installation options and advanced deployments"
-description: "Installer flags, sandbox backends, listeners, reverse proxies, split and native deployments and offline hosts."
----
-
-The [default installation](/install) needs no options. Use this page to choose the sandbox backend at install time, run behind an existing reverse proxy, split Core and Web across hosts, run Core natively or install without internet access.
-
-Pass options to the downloaded script:
-
-```sh
-./install.sh --sandbox docker
-```
-
-With the one-line command, append them after `bash -s --`. The release downloader also accepts `--version TAG` to select a published release; otherwise it selects the latest stable release. It verifies the bundle's SHA-256 before extracting it and keeps the verified bundle for [repair](/troubleshooting#installation-version-policy).
-
-The installer prints each stage, then a summary of addresses, sign-in details and next steps. Set `NO_COLOR=1` to disable colors. A failed step stops installation without a success message.
-
-## Process settings
-
-These flags seed the installation's `config.json` once. Their defaults, valid values and restart behavior are defined in the [configuration reference](/configure#settings). After installation, edit that file and run `oac apply`; rerunning the installer only [repairs](/troubleshooting#installation-version-policy) the installation.
-
-
-| Flag | config.json field |
-| --- | --- |
-| `--core-only` or `--web-only` | `mode` |
-| `--native-core` | `native_core` |
-| `--public-url` | `public_url` |
-| `--host` | `host` |
-| `--core-port` | `ports.core` |
-| `--port` | `ports.web` |
-| `--core-url` | `web.core_url` |
-| `--ingress` | `ingress` |
-
-
-`--config FILE` seeds `config.json` from a JSON file instead of these setting flags; they cannot be combined. A `--config` document follows the schema defaults, so set `ingress: "managed"` and `host: "0.0.0.0"` in it for managed HTTPS.
-
-## Installation actions
-
-These options choose an installation location or perform initial setup; they are not saved in `config.json`.
-
-| Option | Purpose |
-| --- | --- |
-| `--install-dir DIR` | Absolute installation directory; defaults to `~/.oac/core`. A new installation requires an empty or missing directory |
-| `--sandbox docker\|microsandbox\|e2b\|none` | Select the initial [sandbox backend](#sandbox-backend), saved in Core's database; change it later in Web |
-| `--accept-docker-risks` | Accept Docker's weaker isolation without an interactive prompt |
-| `--e2b-api-key-file FILE` | With E2B: absolute path to a private key file, no group/other access and at most 4 KiB |
-| `--e2b-template ID:BUILD` | With E2B: ready template build as `template-id:build-uuid` |
-| `--e2b-api-url URL` | With E2B: compatible service HTTPS API origin; use together with `--e2b-domain` |
-| `--e2b-domain DOMAIN` | With E2B: sandbox data-plane DNS suffix; use together with `--e2b-api-url` |
-| `--core-key-file FILE` | With Web-only: absolute path to a private file containing the existing Core key, at least 32 characters |
-
-Several installations can share a machine when they use distinct installation directories and ports. Only one managed gateway can own ports 80 and 443 on an IP address; use distinct IP addresses or an external shared proxy for more. Each installation has its own database, Core key and nodes.
-
-## Sandbox backend
-
-An installation runs its sandboxes on exactly one backend:
-
-| `--sandbox` | Sandboxes run on | You then |
-| --- | --- | --- |
-| `microsandbox` (default) | microVMs on your nodes, which need KVM | [Add nodes](/hosted-providers) in Web |
-| `docker` | Docker containers on your nodes; weaker isolation | [Add nodes](/hosted-providers) in Web |
-| `e2b` | E2B's cloud, sized by your template build | Nothing: E2B needs no nodes |
-| `none` | Nothing yet | Choose in Web under **System** → **Manage sandbox configuration** |
-
-Docker and microsandbox start at the Standard size in Web's [`standard-sizes.json`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/web/src/features/sandbox/standard-sizes.json). If Core refuses the choice, for example because E2B rejects the key, the installer prints Core's message and exits; the services keep running and you choose the backend in Web. To change the backend or size later, see [change the sandbox configuration](/hosted-providers#change-the-sandbox-configuration).
-
-**Docker** shares each node's kernel with its sandboxes, and its node service account is [root-equivalent](/hosted-providers#what-the-installer-sets-up). Choose it only for trusted workloads or hosts without KVM. The installer asks for confirmation (default No); without a terminal, pass `--accept-docker-risks`.
-
-**E2B** needs a public HTTPS URL that is not loopback, because E2B's sandboxes call Core from E2B's cloud, so pass `--public-url`. Prepare the template build with the [E2B guide](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/deploy/e2b/README.md), then:
-
-```sh
-./install.sh --public-url https://core.example --sandbox e2b \
-  --e2b-api-key-file "$HOME/.oac/e2b-api-key" --e2b-template '<template-id>:<build-uuid>'
-```
-
-## Listeners and access
-
-The default combined Docker installation selects `--ingress managed` and `--host 0.0.0.0`. Its gateway publishes Web on `--port` (8080 by default) and uses ports 80 and 443 for automatic HTTPS. Core's `--core-port` stays on loopback and PostgreSQL stays private. `--host` accepts IPv4 or IPv6, without a port, scheme or zone. Use a concrete server IP in the browser, not a wildcard. Managed ingress needs a local Docker Unix socket and Docker's ability to publish ports 80 and 443.
-
-`--ingress external` uses your own reverse proxy instead. It is the only choice for Core-only, Web-only and native Core installations, and their default. Core and Web then listen on `--host`, loopback by default. External non-loopback listeners require an HTTPS `public_url` and a [reverse proxy](#https-and-the-reverse-proxy), and Web's domain setup is unavailable: set `public_url` in `config.json` and run `oac apply`.
-
-`--public-url` seeds a DNS-based HTTPS origin for unattended setup; with managed ingress, the certificate and connectivity checks must pass. The ingress mode is fixed for an installation.
-
-## HTTPS and the reverse proxy
-
-With external ingress, Core and Web share one public origin. Your reverse proxy terminates TLS and routes by path:
-
-| Path | Goes to | Callers |
-| --- | --- | --- |
-| `/v1`, `/v1/*` | Core, `127.0.0.1:8091` by default | Applications, with a Project API key |
-| `/api/v1/*` | Core, `127.0.0.1:8091` | Nodes, sandboxes and self-hosted machines. Uses WebSockets |
-| Everything else | Web, `127.0.0.1:8080` by default | Browsers, and node installers at `/node-install/*` |
-
-The proxy must:
-
-- **Preserve Host.** Web accepts only the host of its public URL.
-- **Pass WebSocket upgrades** on `/api/v1`.
-- **Not buffer or time out streams.** `/v1` streams Session events.
-- **Accept large uploads.** Source files may reach 512 MiB; Core enforces the limits.
-
-Run the proxy on the Core host while Core and Web listen on loopback, the default. `oac status` prints these routes with your addresses and ports.
-
-**Caddy** obtains the certificate itself and passes Host and WebSockets by default:
-
-```text
-core.example {
-	@core path /v1 /v1/* /api/v1/*
-	handle @core {
-		reverse_proxy 127.0.0.1:8091
-	}
-	handle {
-		reverse_proxy 127.0.0.1:8080
-	}
-}
-```
-
-**nginx**, for example in `/etc/nginx/conf.d/oac.conf` inside the `http` block:
-
-```nginx
-map $http_upgrade $connection_upgrade {
-    default upgrade;
-    ''      close;
-}
-
-server {
-    listen 80;
-    server_name core.example;
-    return 301 https://$host$request_uri;
-}
-
-server {
-    listen 443 ssl;
-    server_name core.example;
-    ssl_certificate     /etc/letsencrypt/live/core.example/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/core.example/privkey.pem;
-
-    client_max_body_size 0;          # Core enforces its own upload limits
-    proxy_http_version 1.1;
-    proxy_set_header Host $http_host;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection $connection_upgrade;
-    proxy_buffering off;             # server-sent events on /v1
-    proxy_request_buffering off;
-    proxy_read_timeout 1h;           # long-lived WebSockets and streams
-    proxy_send_timeout 1h;
-
-    location = /v1    { proxy_pass http://127.0.0.1:8091; }
-    location /v1/     { proxy_pass http://127.0.0.1:8091; }
-    location /api/v1/ { proxy_pass http://127.0.0.1:8091; }
-    location /        { proxy_pass http://127.0.0.1:8080; }
-}
-```
-
-Then set `public_url` in `~/.oac/core/config.json` and run `~/.oac/core/oac apply`. Check the routing:
-
-```sh
-curl -s -o /dev/null -w '%{http_code}\n' -H 'OpenAI-Beta: agents=v1' https://core.example/v1/agents
-```
-
-`401` means `/v1` reached Core, which asks for a key. `404` means it reached Web: fix the proxy, or application calls and every node connection will fail.
-
-TLS verification stays on everywhere. With a private certificate authority, node hosts, self-hosted machines and the Runtime image must trust it.
-
-### Try it locally with a quick tunnel
-
-A [Cloudflare quick tunnel](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/do-more-with-tunnels/trycloudflare/) gives a trial installation with external ingress a temporary public HTTPS address. It forwards to one port, so put a local proxy with the same routes in front:
-
-```text
-http://:8443 {
-	bind 127.0.0.1
-	@core path /v1 /v1/* /api/v1/*
-	handle @core {
-		reverse_proxy 127.0.0.1:8091
-	}
-	handle {
-		reverse_proxy 127.0.0.1:8080
-	}
-}
-```
-
-1. Start the proxy: `caddy run --config Caddyfile`.
-2. Start the tunnel: `cloudflared tunnel --url http://127.0.0.1:8443`. It prints an address such as `https://random-words.trycloudflare.com`.
-3. Set that address as `public_url` in `~/.oac/core/config.json` and run `~/.oac/core/oac apply`.
-
-The address changes whenever `cloudflared` restarts; nodes bound to the old address must then be added again. Throughput is low, so a node's first Runtime download (about 500 MB) can be slow; see [slow links](/hosted-providers#rerun-expiry-and-slow-links).
-
-## Modes
-
-| Mode | Runs | Use it for |
-| --- | --- | --- |
-| all (default) | PostgreSQL, Core and Web | Most installations |
-| `--core-only` | PostgreSQL and Core | A Core whose Web runs elsewhere, or scripts only. No Add node command |
-| `--web-only` | Web | A second host for the console, paired with an existing Core |
-
-The mode and native Core are fixed once installed; to change them, install into a new directory.
-
-A Web-only console forwards signed-in `/core/v1` requests to its Core with the Core key, so `--core-url` must reach Core's `/core/v1` directly. The public URL doesn't, because the proxy sends `/core/v1` to Web:
-
-- **Web on the Core host:** use `--core-url http://127.0.0.1:8091`.
-- **Web on another host:** give Core a second HTTPS name that sends every path to Core, such as `https://core-api.example`, and allow only the Web host's address.
-
-### Split deployment
-
-| Host | Install | Reverse proxy |
-| --- | --- | --- |
-| Core | `./install.sh --core-only --public-url https://core.example` | `core.example`: `/v1`, `/v1/*` and `/api/v1/*` to Core; `/node-install/*` to the Web host with Host rewritten to `console.example`; nothing else. `core-api.example`: every path to Core, for the Web host's address only |
-| Web | `./install.sh --web-only …`, below | `console.example`: every path to Web |
-
-```sh
-./install.sh --web-only --install-dir "$HOME/.oac/web" \
-  --public-url https://console.example \
-  --core-url https://core-api.example \
-  --core-key-file "$HOME/core.key"
-```
-
-Browsers and node installers use `console.example`. Applications, nodes, sandboxes and self-hosted machines call Core at `core.example`; self-hosted machines also download their installer there, which is why `core.example` forwards `/node-install/*` to Web. Missing node files redirect to the release; for disconnected nodes, install Web from the [offline bundle](#offline-hosts).
-
-Caddy on the Core host, where `203.0.113.10` is the Web host's address:
-
-```text
-core.example {
-	@core path /v1 /v1/* /api/v1/*
-	handle @core {
-		reverse_proxy 127.0.0.1:8091
-	}
-	handle /node-install/* {
-		reverse_proxy https://console.example {
-			header_up Host console.example
-		}
-	}
-	handle {
-		respond 404
-	}
-}
-
-core-api.example {
-	@web remote_ip 203.0.113.10
-	handle @web {
-		reverse_proxy 127.0.0.1:8091
-	}
-	handle {
-		respond 403
-	}
-}
-```
-
-nginx on the Core host, with the `map` from the [main example](#https-and-the-reverse-proxy):
-
-```nginx
-server {
-    listen 443 ssl;
-    server_name core.example;
-    ssl_certificate     /etc/letsencrypt/live/core.example/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/core.example/privkey.pem;
-
-    client_max_body_size 0;
-    proxy_http_version 1.1;
-    proxy_set_header Host $http_host;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection $connection_upgrade;
-    proxy_buffering off;
-    proxy_request_buffering off;
-    proxy_read_timeout 1h;
-    proxy_send_timeout 1h;
-
-    location = /v1    { proxy_pass http://127.0.0.1:8091; }
-    location /v1/     { proxy_pass http://127.0.0.1:8091; }
-    location /api/v1/ { proxy_pass http://127.0.0.1:8091; }
-    location /node-install/ {
-        proxy_pass https://console.example;
-        proxy_set_header Host console.example;   # Web serves node files only for its own name
-        proxy_ssl_server_name on;
-        proxy_ssl_name console.example;
-        proxy_ssl_verify on;
-        proxy_ssl_verify_depth 2;
-        proxy_ssl_trusted_certificate /etc/ssl/certs/ca-certificates.crt;
-    }
-    location / { return 404; }
-}
-
-server {
-    listen 443 ssl;
-    server_name core-api.example;
-    ssl_certificate     /etc/letsencrypt/live/core-api.example/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/core-api.example/privkey.pem;
-
-    allow 203.0.113.10;                        # the Web host
-    deny all;
-    client_max_body_size 0;
-    proxy_http_version 1.1;
-    proxy_buffering off;
-    proxy_read_timeout 1h;
-    location / { proxy_pass http://127.0.0.1:8091; }
-}
-```
-
-The Web host's proxy sends every path to Web, for example `console.example { reverse_proxy 127.0.0.1:8080 }` in Caddy.
-
-Copy `secrets/core.key` from the Core host with mode `0600`, then delete `$HOME/core.key`; the installer keeps its own copy. After a [Core key rotation](/troubleshooting#rotate-the-core-key), copy it again. A Web-only install selects no sandbox backend.
-
-## Native Core
-
-`--native-core` runs Core as a systemd user service; PostgreSQL and Web stay in containers. It needs a running systemd user manager with lingering, which the host administrator enables with `sudo loginctl enable-linger "$USER"`, and the bundle's native binaries must load on the host. PostgreSQL then listens on a loopback port the installer picks (`ports.database`). Native Core is unrelated to the sandbox backend.
-
-## Offline hosts
-
-Transfer the release's `*-linux-amd64-offline.tar.gz` and its `.sha256` file, verify and extract them, then run the bundled `./install.sh`. The offline bundle also carries the node and Runtime files, so Web serves them to nodes without release access.
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/getting-started/install-options.md)
diff --git a/apps/docs/content/docs/install.mdx b/apps/docs/content/docs/install.mdx
deleted file mode 100644
index 31e53127f..000000000
--- a/apps/docs/content/docs/install.mdx
+++ /dev/null
@@ -1,95 +0,0 @@
----
-title: "Install Core and Web"
-description: "Host prerequisites, installation, HTTPS, first sign-in, a default model and the first Project API key."
----
-
-One command installs Core, the Web console and PostgreSQL on a Linux host. Web is the administrator console: you sign in with the Core key, give the installation a domain, set a default model and issue Project API keys. Applications then call Core's API with those keys, and their Sessions run in sandboxes on nodes you add, or on E2B.
-
-1. [Check the prerequisites](#prerequisites).
-2. [Run the installer](#install).
-3. [Sign in to Web](#sign-in-to-web).
-4. [Configure the domain and HTTPS](#configure-the-domain-and-https).
-5. [Set a default model](#set-a-default-model).
-6. [Issue a Project API key](#issue-a-project-api-key).
-7. [Add sandbox capacity](#add-sandbox-capacity).
-
-This page follows the default path. Every flag, existing reverse proxies, split and native deployments and offline hosts are in [installation options](/install-options).
-
-## Prerequisites
-
-- Linux amd64 with Python 3.9 or newer, and curl. No GitHub account or CLI is needed.
-- Docker Engine with Docker Compose 2.26.0 or newer (`docker compose version`).
-- An account that can run `docker` and write to its home directory. Ordinary users and root both work; the installer never calls sudo.
-- Free ports 8080 (initial Web access), 80 and 443 (HTTPS), and 8091 (Core, on loopback). Docker must be able to publish them; the installer does not change host policy.
-- A DNS hostname that points to this host, before you connect applications, nodes, E2B or self-hosted machines. You can install and sign in first.
-
-The Core host needs no KVM; nodes that run microsandbox do.
-
-## Install
-
-```sh
-curl -fsSL https://github.com/MiniMax-AI/OpenAgentCore/releases/latest/download/install.sh | bash
-```
-
-If DNS already points to this host, pass the address to set up HTTPS during installation instead of in step 4:
-
-```sh
-curl -fsSL https://github.com/MiniMax-AI/OpenAgentCore/releases/latest/download/install.sh | bash -s -- --public-url https://core.example
-```
-
-The script picks the latest stable release, verifies its checksum and runs the bundled installer, which:
-
-1. checks the host and loads the Core, Web, PostgreSQL and HTTPS gateway images;
-2. creates the [installation directory](/configure#installation-directory), `~/.oac/core`, with the Core key, `config.json` and the `oac` management command;
-3. starts the services with Docker Compose. The gateway serves Web on port 8080 of all IPv4 interfaces; Core stays on loopback and PostgreSQL stays private;
-4. selects the microsandbox sandbox backend at the Standard size. It adds no node.
-
-It creates no Project or key and makes no model request. It ends by printing the console address, the API base URL and the next steps.
-
-## Sign in to Web
-
-1. Open the console address the installer printed: `http://SERVER_IP:8080`, or your public URL if you passed one. Behind NAT, use the IP address your browser reaches. Until a domain is set, Web accepts IP addresses only, not host names.
-2. Sign in with the [Core key](/troubleshooting#core-key), the installation's administrator credential. Web has no user accounts.
-
-   ```sh
-   cat ~/.oac/core/secrets/core.key
-   ```
-
-## Configure the domain and HTTPS
-
-Applications, nodes and sandboxes reach Core at one HTTPS address, the public URL. The initial HTTP address serves only Web.
-
-1. Point the hostname's A/AAAA records to this host, and allow inbound ports 80 and 443 from the internet.
-2. In Web, open **System**, choose **Configure domain and HTTPS**, enter the hostname, such as `core.example.com`, and choose **Apply**.
-
-The installation requests a certificate and checks that the HTTPS address reaches this installation before switching Core and Web to it. Then open the HTTPS address and sign in again; the initial HTTP address redirects there. Certificates renew automatically. If DNS or the certificate fails, the previous address stays in use: correct the reported problem and retry. Retry an interrupted switch with the same hostname, or check it with `oac status` and finish it with `oac apply`.
-
-The same operation from a terminal:
-
-```sh
-~/.oac/core/oac domain core.example.com
-```
-
-To change the address later, see [changing the public URL](/configure#changing-the-public-url).
-
-## Set a default model
-
-Core-hosted Sessions without their own model provider use their harness's default model. On **System**, under **Default model configuration**, find the harness marked **Default** (Codex unless you changed `core.default_harness`) and choose **Set**. Enter the model ID, the protocol, and the provider's base URL and API key. MiniMax Code also needs the context window and max output tokens. See [default models](/configure#default-models).
-
-## Issue a Project API key
-
-1. On **Projects and keys**, choose **Create project**, then **Issue key**. The dialog shows the key once: copy it and keep it safe. Its **How to call** card shows the API base URL and sample requests.
-2. Give the key and the API base URL to the application developer. They continue with the [quickstart](/quickstart).
-
-Web's **Overview** tracks these steps in a **Getting started** checklist.
-
-## Add sandbox capacity
-
-Sessions need somewhere to run:
-
-- **Nodes** run the microsandbox backend the installer selected: [add a node](/hosted-providers) from Web's **Nodes** page. Docker nodes need `--sandbox docker` at installation, or a [reset](/hosted-providers#change-the-sandbox-configuration) to change the backend.
-- **E2B**, which needs no nodes: [change the sandbox configuration](/hosted-providers#change-the-sandbox-configuration) in Web, or [choose it during installation](/install-options#sandbox-backend).
-
-Day-to-day operation, backups and upgrades are in [Operations](/troubleshooting).
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/getting-started/install.md)
diff --git a/apps/docs/content/docs/meta.json b/apps/docs/content/docs/meta.json
deleted file mode 100644
index 286c8d94a..000000000
--- a/apps/docs/content/docs/meta.json
+++ /dev/null
@@ -1,36 +0,0 @@
-{
-  "title": "OpenAgentCore documentation",
-  "pages": [
-    "---Start here---",
-    "index",
-    "concepts",
-    "execution-model",
-    "install",
-    "install-options",
-    "configure",
-    "---Application access---",
-    "bootstrap-projects-keys",
-    "quickstart",
-    "user-guide",
-    "public-api",
-    "agents-and-tools",
-    "sessions",
-    "examples",
-    "---Execution---",
-    "environments-and-files",
-    "hosted-providers",
-    "self-hosted-execution",
-    "---Administration---",
-    "console",
-    "admin-api",
-    "observability",
-    "troubleshooting",
-    "api-reference",
-    "---Development---",
-    "development",
-    "harness-onboarding",
-    "runtime-bootstrap",
-    "runtime-protocol",
-    "sandbox-provider"
-  ]
-}
diff --git a/apps/docs/content/docs/observability.mdx b/apps/docs/content/docs/observability.mdx
deleted file mode 100644
index 83eb42560..000000000
--- a/apps/docs/content/docs/observability.mdx
+++ /dev/null
@@ -1,282 +0,0 @@
----
-title: "Runtime observations"
-description: "Current Runtime observations, recorded history and their availability limits."
----
-
-Status: Phase 2 and initial Core Web consumption implemented. The current-snapshot routes, strict
-`packages/agents-client` projection, and generated `core.openapi.yaml` contract are
-implemented and consumed by the Dashboard through complete Session/observation
-identity joins. Durable history uses the separate optional
-[Runtime history API](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/runtime-history-api.md); lifecycle controls remain outside
-this phase.
-
-These are administrator reads under `/core/v1`, authenticated by the Core key,
-not upstream OpenAI Agents resources. The
-former project routes `GET /v1/agents/runtime-observations` and
-`GET /v1/agents/sessions/{session_id}/runtime-observation` are removed.
-
-## Routes
-
-### List current Runtime observations
-
-```http
-GET /core/v1/sandbox/runtime-observations?after={session_id}&limit=20&order=desc
-Authorization: Bearer ...
-```
-
-| Field | Rules |
-| --- | --- |
-| `after` | Observation ID from the previous page. Optional, supplied once. |
-| `limit` | Integer 1–100, default 20. |
-| `order` | `asc` or `desc`, default `desc`. |
-
-The list contains one current Runtime context for every Session of every managed
-Project, labelled with its owning `project_id`, including explicit `none`,
-unsupported `self_hosted`, and released managed contexts. Ordering uses the same Session creation-time and ID
-keyset as the Session list. An observation ID is the Session UUID, so pagination
-does not change when the underlying Runtime incarnation changes. Pages are not an
-atomic telemetry snapshot; every row has its own `resolved_at`, and a successful
-provider sample has its own `observed_at`. A client completes the entire page chain
-before publishing a new Dashboard snapshot.
-
-```json
-{
-  "object": "list",
-  "data": [
-    {
-      "project_id": "3f0c2a9e-2b7d-4d0f-9a51-1c8e4b6d7a20",
-      "observation": {
-        "id": "6c77d3a2-71d6-4ed5-884f-687aecda02a3",
-        "object": "agent.runtime_observation",
-        "session_id": "6c77d3a2-71d6-4ed5-884f-687aecda02a3",
-        "environment_id": "6c02fb71-5fa8-4298-93e8-57c6625a3fc2",
-        "mode": "openai_hosted",
-        "provider_type": "docker",
-        "instance": {
-          "kind": "managed_allocation",
-          "allocation_id": "d23ab94e-e40b-45bd-93a2-444f1f74642b",
-          "device_id": "2e434f4f-76aa-4e54-a707-4757036d90ef",
-          "connection_generation": null
-        },
-        "status": "observed",
-        "reason": null,
-        "allocation_created_at": 1789951200,
-        "resolved_at": 1789953021,
-        "observed_at": 1789953020,
-        "started_at": 1789951220,
-        "cpu": {
-          "usage_seconds_total": 482.75,
-          "capacity_cores": 2.0,
-          "usage_cores": null,
-          "utilization_ratio": null
-        },
-        "memory": {
-          "usage_bytes": 805306368,
-          "limit_bytes": 2147483648
-        },
-        "disk": null
-      }
-    }
-  ],
-  "has_more": false,
-  "first_id": "6c77d3a2-71d6-4ed5-884f-687aecda02a3",
-  "last_id": "6c77d3a2-71d6-4ed5-884f-687aecda02a3"
-}
-```
-
-### Retrieve one Session's current Runtime observation
-
-```http
-GET /core/v1/projects/{project_id}/sessions/{session_id}/runtime-observation
-Authorization: Bearer ...
-```
-
-This returns the same object shape as a list item's `observation`, without the
-administrator list's `disk` (see the [administrator contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/admin-api.md)). It never starts a Turn, creates
-an Environment, provisions compute, renews a lease, or changes lifecycle state.
-
-A valid `environment:none` Session returns `200` with status `unsupported`; the
-Session exists but has no attributable Runtime instance. A missing Session, or one
-outside the Project, returns the existing indistinguishable not-found error.
-
-## Resource schema
-
-### `RuntimeObservation`
-
-| Field | Type | Required | Semantics |
-| --- | --- | --- | --- |
-| `id` | string | yes | Session UUID; stable identity of this current-observation resource and its list cursor. |
-| `object` | literal | yes | `agent.runtime_observation`. |
-| `session_id` | string | yes | Authorized Core Session. |
-| `environment_id` | string or null | yes | Null only for mode `none`. |
-| `mode` | enum | yes | `none`, `self_hosted`, `openai_hosted`. |
-| `provider_type` | string or null | yes | Forward-compatible safe source kind such as `docker` or `microsandbox`; null when no provider applies. Clients must not treat an unknown nonempty value as an error. |
-| `instance` | object | yes | Provider-neutral current incarnation identity; explicit `kind=none` when no compute applies. |
-| `status` | enum | yes | `observed`, `unsupported`, `unavailable`. |
-| `reason` | enum or null | yes | Safe reason when status is not `observed`. |
-| `allocation_created_at` | integer or null | yes | Unix seconds for managed allocation age. |
-| `resolved_at` | integer | yes | Unix seconds when Core resolved identity and status for this row. |
-| `observed_at` | integer or null | yes | Provider sample time; null without a sample. |
-| `started_at` | integer or null | yes | Current compute incarnation start time. |
-| `cpu` | object or null | yes | Null when no CPU fields were observed. |
-| `memory` | object or null | yes | Null when no memory fields were observed. |
-
-### `RuntimeInstance`
-
-```json
-{
-  "kind": "managed_allocation",
-  "allocation_id": "alloc_...",
-  "device_id": "device_...",
-  "connection_generation": null
-}
-```
-
-`kind` is `managed_allocation`, `self_hosted_connection`, or `none`. For a managed
-context, `allocation_id` is the incarnation key; for self-hosted, the current
-`connection_generation` is the incarnation key. Fields that do not apply are
-explicit nulls. Provider-native container IDs, pod names, host paths, credentials,
-and raw labels are not public fields.
-
-### `RuntimeCPUObservation`
-
-```json
-{
-  "usage_seconds_total": 482.75,
-  "capacity_cores": 2.0,
-  "usage_cores": 1.42,
-  "utilization_ratio": 0.71
-}
-```
-
-All fields are `number | null`. Values are finite and nonnegative;
-`capacity_cores`, when present, is greater than zero. Numeric zero is observed
-zero. Null is unavailable. `usage_cores` is the cumulative CPU delta divided by
-the observation-time delta for two ordered samples of the same incarnation.
-`utilization_ratio` is `usage_cores / capacity_cores`. It is not clamped: a value
-above 1 is retained as provider/accounting evidence and is not interpreted as a
-lifecycle signal. Both derived fields are null after a cache restart or whenever
-either source sample is absent or invalid. The API never derives CPU rate from a
-single sample of cumulative time. A provider that reports only a current share
-of its CPU capacity (E2B) fills `utilization_ratio` with that report and leaves
-`usage_seconds_total` and `usage_cores` null.
-
-### `RuntimeMemoryObservation`
-
-```json
-{
-  "usage_bytes": 805306368,
-  "limit_bytes": 2147483648
-}
-```
-
-Both fields are `integer | null`. Values are nonnegative and safe JSON integers.
-Zero usage is observed zero. A missing or unlimited provider limit is null.
-
-## Status and reason matrix
-
-| Status | Allowed reason |
-| --- | --- |
-| `observed` | null |
-| `unsupported` | `runtime_mode_not_observable` |
-| `unavailable` | `allocation_pending`, `runtime_not_running`, `source_not_configured`, `sample_timeout`, `sample_unavailable` |
-
-Ownership mismatch, malformed durable identity, corrupt provider evidence, and
-authorization failure are not downgraded to unavailable rows.
-
-## Error responses
-
-Use the existing Agents API error envelope.
-
-| HTTP | Type / code | When |
-| --- | --- | --- |
-| 400 | `invalid_request_error` / `invalid_request_error` | List: a repeated supported query key, or an empty or invalid limit or order, with the shared Beta list messages. Unknown list query keys are ignored. |
-| 400 | `invalid_request_error` / `unsupported_parameter` | Single-Session retrieval with any query parameter. |
-| 401 | `invalid_request_error` / `invalid_admin_key` | Missing or invalid Core key. |
-| 404 | `not_found_error` / `not_found_error` | Missing, malformed or foreign Session/cursor, indistinguishably, as for the [Session list cursor](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/list-query-semantics.md#list-cursor-errors--september-23-2026). |
-| 500 | `server_error` / `internal_error` | Integrity, ownership, or invalid provider evidence. |
-| 503 | `server_error` / `execution_unavailable` | Required Runtime observation service is not configured, or list collection exceeded its request budget. |
-
-Errors never include provider raw responses or credentials.
-
-## Freshness and caching
-
-- Return `Cache-Control: no-store`.
-- The Phase 2 implementation performs bounded direct reads and has no observation
-  cache. A later internal cache may coalesce reads for at most five seconds.
-- `observed_at` is authoritative for freshness; HTTP response time is not.
-- Clients mark samples stale according to their own explicit threshold.
-- `ETag` is not proposed because observations change independently.
-
-## Client contract
-
-`packages/agents-client` exposes:
-
-```ts
-type RuntimeObservationStatus = "observed" | "unsupported" | "unavailable";
-type RuntimeObservationReason =
-  | "runtime_mode_not_observable"
-  | "allocation_pending"
-  | "runtime_not_running"
-  | "source_not_configured"
-  | "sample_timeout"
-  | "sample_unavailable";
-
-type RuntimeObservation =
-  | RuntimeObservedObservation
-  | RuntimeUnavailableObservation
-  | RuntimeNoneObservation
-  | RuntimeSelfHostedObservation;
-
-interface AdminRuntimeObservation {
-  project_id: string;
-  observation: RuntimeObservation & { disk: RuntimeDiskObservation | null };
-}
-
-class AdminClient {
-  listRuntimeObservations(options?: {
-    after?: string;
-    limit?: number;
-    order?: "asc" | "desc";
-  }): Promise<ListPage<AdminRuntimeObservation>>;
-
-  retrieveRuntimeObservation(projectId: string, sessionId: string): Promise<RuntimeObservation>;
-}
-```
-
-These exported variants discriminate on `status` and `mode`; their instance,
-reason, timestamps, CPU, and memory fields narrow accordingly. The exact variant
-definitions live in `packages/agents-client/src/types.ts` and mirror the status
-and reason matrix above.
-
-The client validates every required field, enum, nullability rule, timestamp, and
-finite number. The current pinned contract rejects unknown additive fields so an
-unreviewed server expansion cannot silently cross the browser boundary. Malformed
-data rejects the whole page; Web does not publish a partial snapshot.
-
-The generated OpenAPI 2 schema records field-level required/nullability rules,
-UUID formats, reason enums, and numeric minima. OpenAPI 2
-cannot encode the complete cross-field discriminated union. The matrix above is
-normative for wire consumers; the server projection and strict TypeScript
-projector enforce it, and the exported TypeScript type prevents invalid
-status/mode combinations in typed consumers.
-
-Web also applies a configured whole-refresh budget. If `has_more` remains true
-when that budget is exhausted, it retains the prior complete snapshot and marks
-the refresh incomplete; it does not publish partial values as global totals.
-After both Runtime-observation and Session traversals complete, Web also requires
-their Session ID sets to be identical. A mismatch caused by concurrent creation or
-deletion makes the candidate incomplete and prevents publication.
-
-## Deliberately excluded
-
-- Token usage: use existing Session/Turn Usage.
-- Billing and cost: product/backend concern.
-- Historical series in these routes: the optional capability uses the separate
-  [Runtime history API](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/runtime-history-api.md).
-- Container logs and command output.
-- Provider credentials or native configuration.
-- Start, stop, pause, resume, restart, renew, or delete operations.
-- Idle classification and automatic shutdown.
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/runtime-observability-api.md)
diff --git a/apps/docs/content/docs/public-api.mdx b/apps/docs/content/docs/public-api.mdx
deleted file mode 100644
index 748161b2e..000000000
--- a/apps/docs/content/docs/public-api.mdx
+++ /dev/null
@@ -1,141 +0,0 @@
----
-title: "API namespaces and credentials"
-description: "The public application API, private administration API and machine connection interface."
----
-
-Core serves three namespaces. Each has one kind of caller and its own credential;
-no credential works in another namespace. Versioned native installer downloads are
-public release content.
-
-| Namespace | Caller | Credential | Contents | Reference |
-| --- | --- | --- | --- | --- |
-| `/v1` | Applications (business systems, SDKs) | Project API key | Exactly the pinned official Agents API routes. Core-only fields live only in `x_agents_core` (`harness`, `model_provider`, `harness_config`, Session `installation`) | [Agents API guide](/sessions) |
-| `/core/v1` | Core Web's server and operator scripts | [Core key](/troubleshooting#core-key) | Installation facts, Projects and keys, resource reads and deletion, Session archive, credential issuance, metrics, audit, sandbox deployment and nodes, deployment model providers | [Core API](#core-api), [Web API](/admin-api), [Core OpenAPI](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/core.openapi.yaml) |
-| `/api/v1` | Nodes, Runtime daemons, self-hosted executors | Machine credentials: short-lived Session installation grants, node enrollment tokens and executor credentials issued through `/core/v1` or claimed by installation, node credentials registered with an enrollment token, and daemon credentials Core issues for hosted sandboxes | Machine bootstrap and connections: `/api/v1/sandbox-node/*` and `/api/v1/agent-daemon/*`, including WebSockets; each credential works only on its own routes | [Node routes](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/sandbox-deployment.md#authority-and-routes), [executor credentials](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-executor-credentials.md), [machine OpenAPI](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/runtime.openapi.yaml) |
-
-A credential used in another namespace gets 401: a Project API key on `/core/v1` or
-`/api/v1`, the Core key on `/v1` or `/api/v1`. How Projects and keys behave is in
-[Projects own assets](/concepts#projects-own-assets).
-
-**Routing.** The reverse proxy sends `/v1` and `/api/v1` to Core and everything else
-to Web ([proxy setup](/install-options#https-and-the-reverse-proxy)).
-Browsers reach `/core/v1` only through Web's server, which adds the Core key after
-sign-in; Web returns 404 for `/v1` and `/api/v1`. Operator scripts call `/core/v1`
-on Core's loopback port. Details: [Web and Core](/admin-api).
-
-## Public API
-
-Applications call `/v1` with a Project API key. The routes are exactly the 58 pairs
-in [upstream-routes.json](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/upstream-routes.json). The
-[Agents API guide](/sessions) explains every resource with SDK and HTTP
-examples.
-
-## Core API
-
-All routes are under `/core/v1`. Core Web's server and operator scripts call them
-with the Core key. Most administrators use Web instead; call the API directly for
-automation.
-
-### Common tasks
-
-Run these on the Core host, against Core's loopback port. The helper reads the key
-from its file, keeping it off the command line:
-
-```sh
-core() {  # core METHOD PATH [JSON body]
-  curl -fsS -X "$1" "http://127.0.0.1:8091/core/v1$2" \
-    -H @<(printf 'Authorization: Bearer %s\n' "$(cat ~/.oac/core/secrets/core.key)") \
-    -H 'Content-Type: application/json' ${3:+-d "$3"}
-}
-```
-
-| Task | Command |
-| --- | --- |
-| List Projects | `core GET /projects` |
-| Create a Project | `core POST /projects '{"name": "billing-bot"}'` |
-| Issue an API key (shown once, as `key`) | `core POST /projects/$PROJECT_ID/keys '{"name": "prod"}'` |
-| Revoke a key | `core DELETE /projects/$PROJECT_ID/keys/$KEY_ID` |
-| Archive a Project (revokes all keys) | `core POST /projects/$PROJECT_ID/archive` |
-| See harnesses and their default models | `core GET /harnesses` |
-| Set Codex's default model | `core PUT /harnesses/codex/model-configuration '{"model": "your-model-id", "model_provider": {"protocol": "responses", "base_url": "https://provider.example/v1", "api_key": "sk-..."}}'` |
-| Issue an executor credential | See [executor credentials](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-executor-credentials.md#core-key-routes) |
-| Installation facts, including the API base URL | `core GET /installation` |
-
-Errors use the [Core error envelope](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/core-errors.md).
-
-### All routes
-
-| Routes | Contents | Contract |
-| --- | --- | --- |
-| `projects`, `projects/{project_id}[/archive]`, `projects/{project_id}/keys[/{key_id}]` | Projects and their API keys | [Administrator contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/admin-api.md) |
-| `projects/{project_id}/{agents,environment-templates,skills,files,vaults,sessions}/**` | Resource reads and deletion, Session history, artifacts and archive | [Administrator contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/admin-api.md) |
-| `projects/{project_id}/sessions/{session_id}/execution-configuration` | Committed harness and model selection | [Execution configuration](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/execution-configuration.md) |
-| `projects/{project_id}/sessions/{session_id}/diagnostics`, `projects/{project_id}/sessions/{session_id}/turns/{turn_id}/diagnostics` | Root failure categories and Item receipt timing | [Session diagnostics](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/session-diagnostics.md) |
-| `projects/{project_id}/sessions/{session_id}/runtime-observation`, `sandbox/runtime-observations` | Current Runtime observations | [Runtime observations](/observability) |
-| `projects/{project_id}/sessions/{session_id}/runtime-history` | Stored Runtime history | [Runtime history](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/runtime-history-api.md) |
-| `projects/{project_id}/{resource-owners,write-operations}`, `audit-log`, `summary` | Provenance, write history, administrator audit and usage summary | [Write audit](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/write-audit.md), [administrator contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/admin-api.md) |
-| `projects/{project_id}/environments/{environment_id}/executor-credentials[/{key_id}]` | Executor credentials for a self-hosted Environment | [Executor credentials](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-executor-credentials.md) |
-| `installation` | Public URL, API base URL, source commit, the installer's process settings and what is bound to the public URL; available before any deployment | [Installation](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/installation.md) |
-| `metrics` | Core's own process metrics | [Core metrics](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/core-metrics.md) |
-| `sandbox/deployment[/reset]`, `sandbox/e2b/templates[/{template_id}/builds]`, `sandbox/enrollment-tokens`, `sandbox/nodes[/{node_id}[/allocations]]` | Sandbox deployment, read-only E2B template discovery, node enrollment tokens and nodes | [Sandbox deployment](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/sandbox-deployment.md), [nodes guide](/hosted-providers), [node host history](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/node-host-history.md) |
-| `harnesses`, `harnesses/{harness}/model-configuration` | Supported harnesses and each harness's deployment default model configuration (write-only provider key) | [Model execution](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/model-execution.md#deployment-defaults) |
-
-## Machine connection API
-
-These routes are under `/api/v1`. Each accepts only the credential listed, never
-the Core key or a Project API key.
-
-| Routes | Caller | Credential | Contract |
-| --- | --- | --- | --- |
-| `POST sandbox-node/enroll` | Node installer | One-use enrollment token from `POST /core/v1/sandbox/enrollment-tokens` | [Node routes](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/sandbox-deployment.md#authority-and-routes), [machine OpenAPI](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/runtime.openapi.yaml) |
-| `GET sandbox-node/configuration` | Node installer and node | Enrollment token, or node credential with `X-OAC-Node-ID` | [Sandbox deployment](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/sandbox-deployment.md), [machine OpenAPI](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/runtime.openapi.yaml) |
-| `GET sandbox-node/identity`, WebSocket `GET sandbox-node/connect` | Node | Node credential registered at enrollment | [Node routes](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/sandbox-deployment.md#authority-and-routes) |
-| `POST agent-daemon/enroll`, `GET agent-daemon/connection` | Self-hosted executor and its installer | Executor credential from `/core/v1/projects/{project_id}/environments/{environment_id}/executor-credentials` | [Executor credentials](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-executor-credentials.md) |
-| WebSocket `GET agent-daemon/ws`, `POST agent-daemon/bootstrap`, `GET agent-daemon/device-status` | Runtime daemons | Daemon credential: Core writes one into each hosted sandbox it prepares; a self-hosted executor uses its executor credential | [Runtime enrollment](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/README.md#user-managed-runtime-enrollment) |
-
-## Contract sources
-
-- [Pinned upstream baseline](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/upstream.json): OpenAI
-  Python SDK 3.13.0, exact upstream commit and `agents=v1`.
-- [Pinned routes](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/upstream-routes.json) and
-  [fields](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/upstream-fields.json): extracted from the
-  pinned SDK by `scripts/extract-agents-api-upstream.py`. Contract tests require the
-  public OpenAPI to have exactly these routes and to keep every other field inside
-  `x_agents_core`.
-- [Public OpenAPI](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/openapi.yaml): public schema snapshot;
-  combine it with the fixed SDK and [operation evidence](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/operation-evidence.md).
-- [Core OpenAPI](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/core.openapi.yaml): generated `/core/v1`
-  routes, all authenticated by the Core key.
-- [Machine connection OpenAPI](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/runtime.openapi.yaml):
-  generated `/api/v1` sandbox node routes. The node WebSocket is described in the [generation protocol](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/node-generation-protocol.md); the private
-  daemon transport is described in the Runtime credential guide.
-- [Administrator contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/admin-api.md): Project/key
-  lifecycle, resources, explicit hosted Session archive, summary,
-  errors/deletion preconditions, audit and historical copy provenance.
-- [Web integration](/admin-api): browser, console and Core boundaries and frontend handoff.
-- [Design rules](/concepts) and [contributor guide](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/CONTRIBUTING.md):
-  ownership, security and change requirements.
-
-Generated schemas do not establish complete compatibility or real execution
-support. The [coverage record](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/README.md) identifies
-qualified workflows, native differences and unresolved behavior. Update the
-relevant contract and this index when adding or moving an API surface.
-
-## Self-hosted installation
-
-Creating or reading a `self_hosted` Session returns short-lived install commands in
-`x_agents_core.installation`. Core Web reads the same commands at
-`GET /core/v1/projects/{project_id}/environments/{environment_id}/installation`.
-Machine installers use `POST /api/v1/agent-daemon/installation` and its `/claim`
-subroute with the installation Bearer authorization. Qualified artifacts under
-`/api/v1/agent-daemon/install/{version}/` are public, immutable release content. The
-[installation grant](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-executor-credentials.md#installation-grant)
-owns expiry, retry and credential ownership; the
-[self-hosted guide](/self-hosted-execution#platforms) lists platforms.
-
-The console-local `GET`/`POST /console/installation/domain` surface uses the signed-in
-browser session and same-origin checks. It delegates only domain setup to the
-installer, with the server-held Core key over a private Unix socket; it is not part
-of the Agents API or Core management API. See [console domain setup](/bootstrap-projects-keys#domain-setup).
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/api/README.md)
diff --git a/apps/docs/content/docs/quickstart.mdx b/apps/docs/content/docs/quickstart.mdx
deleted file mode 100644
index e1f980889..000000000
--- a/apps/docs/content/docs/quickstart.mdx
+++ /dev/null
@@ -1,117 +0,0 @@
----
-title: "Call the Agent API"
-description: "From a Project API key to a finished Session in three steps."
----
-
-This walkthrough takes you from a Project API key to an agent that has created a file and reported back. You need:
-
-- a Project API key and the API base URL, from your administrator ([Issue a Project API key](/install#issue-a-project-api-key));
-- a ready node or E2B backend, so Core has somewhere to run the agent ([Nodes](/hosted-providers));
-- Python 3.9 or newer;
-- a model: the installation's default model, or your own provider's model ID, base URL and API key. [Model execution](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/model-execution.md#saved-defaults-and-precedence) says which one a Session uses and which protocols each harness speaks.
-
-The example uses Codex, whose model provider must speak the OpenAI Responses API.
-
-## 1. Connect
-
-Core serves the OpenAI Agents API, so the official OpenAI SDK works unchanged. It reads two environment variables:
-
-| Variable | Value |
-| --- | --- |
-| `OPENAI_BASE_URL` | The API base URL: the public URL plus `/v1`, such as `https://core.example/v1`. Web's **System** page shows it |
-| `OPENAI_API_KEY` | Your Project API key |
-
-```sh
-python3 -m venv .venv
-. .venv/bin/activate
-pip install openai==3.13.0
-export OPENAI_BASE_URL=https://core.example/v1
-read -rs OPENAI_API_KEY && export OPENAI_API_KEY   # paste the key; it is not echoed
-```
-
-Check access. This runs no model and creates no sandbox:
-
-```python
-from openai import OpenAI
-
-client = OpenAI()  # reads OPENAI_BASE_URL and OPENAI_API_KEY
-print(client.beta.agents.list().data)
-```
-
-An empty list means you are connected. The same check with curl:
-
-```sh
-curl "$OPENAI_BASE_URL/agents" -H "OpenAI-Beta: agents=v1" \
-  -H @<(printf 'Authorization: Bearer %s\n' "$OPENAI_API_KEY")
-```
-
-## 2. Start a Session
-
-A Session is one agent conversation with its own workspace. With `openai_hosted`, Core creates a sandbox for it on a node or E2B and starts the harness inside.
-
-With the installation's default model, skip this. To use your own provider:
-
-```sh
-export MODEL_NAME='your-model-id'
-export MODEL_BASE_URL='https://your-provider.example/v1'
-read -rs MODEL_API_KEY && export MODEL_API_KEY
-```
-
-```python
-import os
-
-extra = {"agent": {"x_agents_core": {"harness": "codex"}}}
-if os.environ.get("MODEL_API_KEY"):
-    extra["agent"]["model"] = os.environ["MODEL_NAME"]
-    extra["x_agents_core"] = {"model_provider": {
-        "protocol": "responses",
-        "base_url": os.environ["MODEL_BASE_URL"],
-        "api_key": os.environ["MODEL_API_KEY"],
-    }}
-
-session = client.beta.agents.sessions.create(
-    environment={"type": "openai_hosted"},
-    input="Create /workspace/hello.txt with a short greeting, then describe it.",
-    extra_body=extra,
-)
-print(session.id)
-```
-
-This makes a real model request and may incur charges.
-
-- `x_agents_core` holds Core's additions to the OpenAI API; see [Core extensions](/sessions#core-extensions-x_agents_core).
-- Keep the whole `agent` object in `extra_body`. SDK 3.13.0 replaces a body field with the matching `extra_body` field instead of merging them.
-
-## 3. Wait for the result
-
-A Session ID confirms creation, not success. Poll durable state; never resubmit to "retry":
-
-```python
-import time
-
-for _ in range(120):
-    turns = client.beta.agents.sessions.turns.list(session.id, order="desc").data
-    if turns and turns[0].status in {"completed", "failed", "cancelled"}:
-        turn = turns[0]
-        print("Turn:", turn.id, turn.status)
-        print(client.beta.agents.sessions.items.list(session.id).data)
-        break
-    if client.beta.agents.sessions.retrieve(session.id).status == "failed":
-        raise RuntimeError("Session preparation failed; inspect its Environment")
-    time.sleep(1)
-else:
-    raise TimeoutError(f"Session {session.id} is still running; inspect it before retrying")
-```
-
-Success is a `completed` Turn whose Items describe the new file. A timeout neither cancels the work nor proves it failed.
-
-## Next steps
-
-| To | Read |
-| --- | --- |
-| Stream output, send follow-up messages, upload files, add Skills or MCP, cancel | [User guide](/user-guide) |
-| See every resource with request and response examples | [Agents API guide](/sessions) |
-| Run the agent on your own machine | [Self-hosted execution](/self-hosted-execution) |
-| See a complete application | [Examples](/examples) |
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/getting-started/quickstart.md)
diff --git a/apps/docs/content/docs/runtime-bootstrap.mdx b/apps/docs/content/docs/runtime-bootstrap.mdx
deleted file mode 100644
index a147abee9..000000000
--- a/apps/docs/content/docs/runtime-bootstrap.mdx
+++ /dev/null
@@ -1,61 +0,0 @@
----
-title: "Runtime startup"
-description: "Provider delivery of Runtime-owned connection input."
----
-
-This document owns the Provider-to-Runtime startup boundary. The input type and
-validator live in [runtimebootstrap](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/runtimebootstrap/bootstrap.go).
-Providers must not read or write Runtime's private authentication store.
-
-## Launch input
-
-Deliver one JSON object in a regular file accessible only to the Runtime account
-and trusted provisioning processes (0600 on managed Linux). Pass its absolute path:
-
-```sh
-oac-daemon connect --bootstrap-file /home/runtime/runtime-bootstrap.json
-```
-
-| Field | Meaning |
-| --- | --- |
-| `version` | Exact bootstrap version declared by `runtimebootstrap.Version` |
-| `core_url` | HTTP(S) machine API base ending in `/api/v1`, without credentials, query or fragment |
-| `device_id` | Canonical nonzero UUID for the daemon identity issued by Core |
-| `credential` | Nonempty daemon credential issued by Core, without whitespace or NUL |
-
-The decoder rejects unknown, duplicate, missing and case-aliased fields, other
-versions and documents exceeding `runtimebootstrap.MaxBytes`. Errors exclude
-submitted values. Go providers use `Bootstrap.RuntimeConnection()`; SDK helpers
-forward the serialized object without defining their own authentication format.
-
-The file is the sole authentication input for this launch. It cannot be combined
-with pairing or self-hosted enrollment flags. Credentials never go in command
-arguments, environment variables or receipts. The provider retains the protected
-file for process restarts and removes it only with explicit owned-resource cleanup.
-Runtime reads it into memory and neither overwrites nor falls back to a private
-auth profile. A missing or malformed file fails before connecting.
-
-## Responsibilities and readiness
-
-The Provider provisions the account, mounts and workspace, delivers this input,
-sets the existing Runtime resource and Environment binding settings, and starts
-the daemon as the unprivileged Runtime account. Docker supplies a file in its
-owned home volume; microsandbox and E2B deliver it before launching the same
-command. These are delivery mechanisms, not different bootstrap protocols.
-
-Runtime validates the input and owns authentication and connection establishment.
-A successful process launch proves only handoff; authenticated connection,
-capability preparation and execution readiness remain separate observations under
-the [Core–Runtime protocol](/runtime-protocol).
-
-Self-hosted enrollment exchanges its executor credential for a daemon identity
-through the machine API; it is a different source of authority, not a managed
-bootstrap-file fallback. Both paths enter the same Runtime execution loop.
-
-## Verification
-
-`go test ./internal/runtimebootstrap ./apps/daemon/internal/cli` covers the
-input contract, credential-source exclusivity and restart behavior. Provider tests
-verify delivery and permissions without relying on private Runtime storage.
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/runtime-bootstrap.md)
diff --git a/apps/docs/content/docs/runtime-protocol.mdx b/apps/docs/content/docs/runtime-protocol.mdx
deleted file mode 100644
index d83bbc2ec..000000000
--- a/apps/docs/content/docs/runtime-protocol.mdx
+++ /dev/null
@@ -1,571 +0,0 @@
----
-title: "Core–Runtime protocol"
-description: "Runtime lifecycle, messages, receipts and recovery."
----
-
-This is the integration entry point for a Runtime that executes work for Core.
-The wire definitions live once in
-[`internal/agentdaemon/proto`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto);
-Core's [gateway](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/gateway) and the reference Runtime's
-[dispatcher](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/daemon/internal/dispatch) both use them.
-The [machine HTTP API](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/runtime.openapi.yaml) describes
-registration and connection endpoints. This document defines the meaning and
-ordering of the messages after connection; it does not replace the typed payloads.
-
-Use this protocol for hosted and self-hosted Runtime implementations. A new
-Harness implements the [adapter contract](/harness-onboarding)
-behind the Runtime registry. Do not add a Core orchestration branch named after
-the Harness, operating system or Sandbox Provider.
-
-## Ownership and connection
-
-Core owns durable Session, Turn, input and Environment records, scheduling and
-reconciliation. Runtime owns native Executors, active Turns, transfer state and
-cleanup until settlement. A Sandbox Provider owns placement and the surrounding
-compute lifecycle. Releasing an execution admission or closing an Executor does
-not delete, suspend or reclaim a sandbox.
-
-An installed daemon runs with the authority of the user who starts it. The
-protocol does not make the daemon a tool, filesystem or network isolation
-boundary. Core-managed Docker, E2B or other sandboxes provide the outer isolation.
-A logical workspace, native tool configuration, advertised capability or successful
-preparation is not proof of containment.
-
-1. Obtain the appropriate machine credential using the documented registration
-   flow. Applications use Project API keys; operators use Core keys. Neither is
-   a Runtime connection credential.
-2. Bootstrap through `/api/v1/agent-daemon/bootstrap` with an Authorization Bearer
-   header and device identity. Use its authenticated connection URL.
-3. Dial the reverse WebSocket at `/api/v1/agent-daemon/ws`, supplying `device_id`
-   and `version` query parameters and the Bearer header. Never put credentials
-   in a URL, payload log or trace.
-4. Send an immediate heartbeat, then continue at the configured interval.
-   Declare `supported_agent_kinds`, availability and capabilities explicitly.
-   An absent first heartbeat means capabilities are unknown; an omitted kind in
-   a received heartbeat means it is not advertised. Neither permits inference.
-5. Dispatch ordered JSON envelopes over the connection. Heartbeats establish
-   liveness only, not execution progress or a receipt for earlier messages.
-
-The wire version is [`proto.Version`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/version.go),
-independent of the Runtime build version reported in heartbeats. Core accepts
-only an exact match, including the patch component. A mismatch returns HTTP 426
-`incompatible_version` before dispatch; the daemon treats it as permanent and
-stops reconnecting. Deploy matching peers together. Removed fields, inferred
-Claude availability and old interaction shapes have no compatibility path.
-
-Each physical connection has fresh routing, admission handles and transfer state.
-A newer connection replaces the previous device connection. Core fences owner
-leases and evicts old Run/interaction routes; the new connection does not inherit
-them. A valid credential and connection are not authority to choose another
-Session or Environment binding.
-
-### Explicit capability declarations
-
-`AgentKindCapabilities` describes the composed Runtime and Harness, independently
-of `Available` and the Core model profile. Every field uses `CapabilitySupport`:
-`CapabilitySupported` or `CapabilityUnsupported`. Zero means unspecified and is
-invalid even for an unavailable Harness. Registration validates the complete
-struct before changing the registry; there is no implicit basic descriptor.
-
-The wire still uses JSON booleans and includes every field, including `false`.
-Encoding incomplete declarations fails; decoding rejects omitted, null, invalid
-or unknown capability fields, including a missing capability object. An invalid
-heartbeat clears the connection's admission snapshot and closes its transport.
-That establishes no native completion or cancellation result. Both peers use the
-same exact wire version; no historical declaration format is accepted.
-
-Each admitted Executor and Turn retains its declaration. Rediscovery cannot add
-operations to an existing owner. Optional operations check this snapshot before
-native calls; interface presence alone never grants support. A declared operation
-returning `agent.ErrUnsupportedOperation` is a contract violation, distinct from
-unavailability, a failed native call or an uncertain write. Uncertain operations
-keep their existing receipts and ownership; they are never automatically replayed.
-Workspace support includes the common Runtime workspace implementation, so a
-native adapter's unsupported workspace method does not disable that composition.
-
-New fields require an explicit decision in each production declaration. Contract
-tests enumerate every field for registration, wire round trips and the persisted
-boolean projection. The shared test fixture lists current fields individually;
-it does not supply defaults for future fields. The Harness interface inventory
-also requires a role decision and compile assertions for every public adapter;
-see [Harness onboarding](/harness-onboarding).
-
-### Executor and Turn lifetimes
-
-This section owns the separation of execution and resource lifetimes.
-
-| Lifetime | Owner | Ends when |
-| --- | --- | --- |
-| Environment allocation | Resource management (Sandbox Provider) | Explicit reclamation, coordinated with Runtime execution |
-| Runtime connection | Runtime transport | Disconnection or replacement by a newer connection |
-| Installed capability snapshot | Runtime | Its Environment is reclaimed; never on Executor close |
-| Session Executor | Runtime | `Executor.Close` on idle expiry, shutdown or confirmed invalidation |
-| Turn | Adapter `Turn`, tracked by Runtime | `AwaitSettlement` confirms settlement |
-
-A Session owns one reusable Executor in its connected Runtime. A Turn owns one
-input execution, its output stream and its cancellation. `agent.ExecutorFactory`
-prepares the fixed configuration; `Executor.StartTurn` creates a new `agent.Turn`
-without replacing healthy native resources. Normal completion settles only the
-Turn. `Executor.Close` releases native resources on idle expiry, environment
-shutdown or confirmed invalidation. Core does not keep a second Executor cache.
-The same lifecycle applies after managed or user-managed environments connect,
-and to the qualified no-environment profiles. Resource management owns machine
-selection, allocation and Environment creation/reclamation. Closing an Executor
-does not release the Environment allocation or delete its workspace. Environment
-reclamation explicitly coordinates with Runtime execution. Connection, installed
-capability snapshot, Session Executor and Turn retain separate lifetimes.
-
-The Runtime binds its Executor record to Session, Environment, connection and
-immutable execution configuration. Resume identity and prior-Turn recovery flags
-are continuity assertions, not configuration changes. A supplied native identity
-must match the retained owner; exact-history recovery never starts a new root
-when existing history is required. A configuration conflict is an error, not a
-hot switch. Lost connections retire their owners and handles. Old timers, output
-and cancellation cannot affect replacements.
-
-Each Turn receives a fresh wrapper, output channel and receipt state. Optional
-steering, functions, permissions and user-choice interfaces belong to that fixed
-Turn. Native callbacks capture the originating Turn before asynchronous work;
-late events cannot be assigned to whichever Turn happens to be active. Native
-processes, query/transport connections, fixed capability configuration and native
-Session identity belong to the Executor. Do not reset completed `sync.Once`
-values or repurpose an old Turn object.
-
-`StartTurn` returning nil guarantees that no native input was submitted and the
-output channel was not retained. The Runtime then closes that channel. Once input
-may have been submitted, return a non-nil Turn even with an error: the Turn owns
-exactly-once output closure and remains tracked until settlement. Unknown input
-is never replayed. A definite `executor_unavailable` Start rejection permits one
-common recovery attempt only after the previous Executor has been closed and no
-input was submitted. Recheck the same physical peer and current authorization.
-
-`Turn.Cancel` targets only that Turn and does not close a healthy Executor.
-`AwaitSettlement` applies after both natural completion and cancellation. Success
-means output can no longer be written and the Turn's native events, input,
-functions, interactions and child work have settled. Native completion or
-cancellation confirmation is independent of resource retirement: closing a
-transport cannot supply missing native terminal or operation receipts.
-`Reusable=true` additionally
-confirms that the native owner can accept the next Turn. `Reusable=false` requires
-a reason and subsequent confirmed Executor close. An error means settlement is
-unconfirmed; it cannot free ownership or capacity. Caller deadlines stop waiting,
-not tracked cleanup. Retry the same cleanup target serially. Failed cleanup
-blocks replacement and retains its resource slot. Executor Close confirms resource
-retirement independently of the Turn outcome: an immutable Turn error must not
-prevent closing the native transport and releasing resources once their work and
-output have stopped.
-
-One output consumer starts before native Start, drains the bounded 64-frame
-channel, and retains the terminal observation until Start publication, Turn
-settlement and admitted operation receipts finish. Natural Done never calls
-Cancel. Input, function and interaction admission close before settlement, and
-operations already admitted hold their barrier through native receipts and
-outbound acknowledgement. Send cancellation to the fixed Turn before waiting
-for that barrier: a written input may need native interruption to produce its
-receipt. Join native settlement, any required confirmed Executor close, output
-drain and all admitted operations before an applied acknowledgement or reuse.
-A failed Close may report failure while retaining the same Run and outstanding
-operations for retry. Closing a caller wait cannot manufacture an applied input receipt. Only then forward Done or an applied cancellation
-receipt. Commit native continuity and release the old Run admission before
-publishing Done, since the receiver may immediately start another Turn. A late
-terminal-send failure belongs to the old Run; it cannot invalidate a successor
-that already owns the Executor. Connection shutdown owns transport-loss cleanup.
-Preserve the ten-second settlement wait and separate five-second receipt
-send budget; timeout is not proof of quiescence. The observed cancellation outcome
-retains native identity, Usage and output without fabricating missing evidence.
-Adapters must include owned background work in settlement and retain the exact
-native cleanup target after failure. Native termination mechanisms belong to the
-adapter; a bulk cleanup acknowledgement alone cannot establish quiescence.
-
-Private preparation controls reserve a per-Turn admission, not a new Executor.
-They carry an explicit Session identity and immutable configuration without model
-input or Run identity. A fresh request returns a connection-local admission handle
-and the owning Executor ID. Start supplies both identities and its actual Run ID
-and ordered MessageInput. Per-admission revisions order status observations;
-rejections describe control errors without inventing Run events. A reused healthy
-Executor returns ready without native preparation. An admission release abandons
-that admission; it does not close the Session's healthy idle Executor or cancel a
-later Turn. Cancellation uses the exact Run identity.
-
-Preparations and Start execute outside the receive loop and Router lock. Admission
-expires after five minutes; retries do not extend that deadline. Bound active
-preparation and execution separately from idle retained resources, and count
-closing or uncertain resources until cleanup succeeds. A definite
-`execution_prepare` rejection with `preparation_capacity` leaves an unclaimed
-queued Turn for the existing Worker scheduler to retry, including capacity held
-by cleanup. Other errors and uncertain input delivery do not authorize replay.
-At most 64 admission records are retained; old handles never consume replacement
-admissions. Idle expiry
-is a Runtime resource policy, not Core active-Turn concurrency. Shutdown tracks and
-closes active and idle Executors, retains failed close targets, and allows a later
-serialized retry. Ordinary disconnection closes the failed transport and keeps
-the exact Router until shutdown succeeds. A wait timeout or failed cleanup cannot
-authorize reconnect; process shutdown also keeps waiting rather than silently
-discarding owned native resources. These records are connection-local, not durable
-input replay.
-
-Read-only workspace preparations remain separate bounded filesystem operations;
-they cannot start model work. Workspace operations retain exact binding and
-settlement rules across Turn boundaries and Executor closure.
-
-## Envelope and identity
-
-Every data frame is one JSON
-[`Envelope`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/envelope.go):
-`type`, type-dependent `id`, typed `payload`, and optional W3C `trace`.
-Trace is diagnostic correlation only; missing or invalid trace data creates a
-local trace and never changes ownership. Do not use a trace ID as a request ID.
-
-| Identity | Scope and meaning |
-| --- | --- |
-| Device ID and connection | Authenticated Runtime routing and connection ownership |
-| Session ID / Environment ID | Core-owned configuration and workspace binding; canonical UUIDs where required by the payload validator |
-| Executor ID | Runtime-owned native resource, potentially retained across settled Turns with identical configuration |
-| Preparation request ID | `Envelope.id` for prepare/start/release/status; distinct from a Run |
-| Admission handle | Runtime-generated reservation, valid only on its accepting connection |
-| Run ID | Execution attempt; `Envelope.id` for output, cancellation, active input and functions |
-| Interaction ID | `permission_request.payload.request_id` or `prompt_for_user_choice.payload.ask_id`; these request envelopes still carry the Run ID |
-| Delivery ID / input ID / call ID | Resolve attempt, active-input receipt and native function identity respectively; never interchangeable |
-| Transfer ID / suspension ID | Connection-local transfer correlation / persisted suspension-attempt fencing |
-
-Decision and permission-cancel envelopes use the interaction ID. Cancellation and
-function-result acknowledgements use the Run ID. All application decision
-receipts additionally match the delivery ID. A reply without the required
-correlation cannot establish acceptance.
-
-User-choice decisions carry `question_answers` with an explicit `question_id`
-and an `answers` array for each provided answer. The IDs must belong to the emitted
-questions and cannot repeat. Question order and display headers do not identify
-answers; omitted questions remain unanswered and an empty array is an explicit
-non-answer. Cancellation carries `cancelled: true` without answers. Shared
-validation rejects other shapes before native submission. Adapters translate the
-identified values into their native response without changing question identity.
-
-## Message families
-
-Use the linked source definitions for required fields, validators, limits and
-finite error categories. There is no parallel payload schema to keep in sync.
-
-| Core → Runtime | Runtime → Core | Definition |
-| --- | --- | --- |
-| `runtime_prepare` | `runtime_prepare_result` | [Initialization and capability transfer](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/runtime_prepare.go) |
-| `execution_prepare`, `execution_start`, `execution_release` | `preparation_status` | [Execution admission](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/preparation.go) |
-| `prompt_request`, `prompt_cancel`, `device_shutdown` | `delta`, `thinking`, `output_message`, `tool_call`, `usage`, `error`, `done`, `heartbeat` | [Requests](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/outbound.go), [events and capabilities](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/inbound.go) |
-| `permission_decision`, `prompt_for_user_choice_decision` | `permission_request`, `permission_cancel`, `prompt_for_user_choice`, `interaction_decision_ack` | [Requests](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/outbound.go), [interactions](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/inbound.go) |
-| `prompt_steer` | `prompt_steer_ack` | [Active input receipts](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/steering.go) |
-| `function_result` | `function_call`, `interaction_decision_ack` | [Function calls](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/functions.go) |
-| `workspace_read`, `workspace_write`, `workspace_export` | Matching `*_result` | [Read](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/workspace_read.go), [write](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/workspace_write.go), [export](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/workspace_export.go) |
-| `environment_quiesce`, `environment_resume` | `environment_quiesced`, `environment_resumed` | [Suspension fencing](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/suspend.go) |
-
-Initial and active input share [ordered MessageInput](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/internal/agentdaemon/proto/message_input.go).
-Adapters preserve message/content order and explicitly reject unsupported content.
-Usage frames and the final usage snapshot replace earlier cumulative snapshots;
-do not add them. An absent measurement is unknown, not zero.
-
-The wire version is `proto.Version` (see above). Initial, prepared and active input use
-the same ordered MessageInput contract, replacing scalar prompts and attachments.
-User-message boundaries and text/image order remain intact through Core and the
-Runtime wire; adapters own native conversion and receipt aggregation. Text-only
-transports reject image content rather than dropping it. Text is never trimmed:
-engine profiles declare whether whitespace-only messages are qualified, and
-unqualified harnesses (Claude SDK, MiniMax Code) reject them at admission rather than having
-their input rewritten. Codex has a flat native
-input list and uses blank-line separators between messages; this does not preserve
-independent native user-message boundaries.
-The independently packaged Claude bridge uses protocol 3 for a prepared Executor
-and separately identified Turns; readiness rejects other protocol versions.
-Image-bearing messages require a qualified operation profile before persistence
-and image support from the selected Runtime before native delivery. These checks
-apply to that operation only; ordinary text retains offline queueing. Initial,
-prepared and active paths use the same content and preserve receipt ownership.
-The qualified public profile is inline PNG/JPEG on Codex/Claude `none` and
-Core-managed Docker `openai_hosted` and user-managed `self_hosted`. MiniMax
-images and remote URLs remain explicit implementation gaps. Workspace images reuse
-the existing preparation, active-input and workspace authority; they do not add
-a downloader, a mount or a separate execution lifecycle. Core
-does not fetch or transform media. See [message input coverage](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/message-input.md).
-
-## Preparation and execution order
-
-Hosted and self-hosted execution use the same preparation semantics. Placement
-selects a connection and Runtime-owned workspace; Harness adapters perform native
-configuration. The existing `prompt_request` message remains a direct execution
-operation, not a fallback after failed prepared execution.
-
-Environment initialization uses `runtime_prepare`. For files or archives, send
-`begin`, wait for `ready`, send ordered chunks and await matching `received`
-offsets, then `commit` and await `completed`. Initialization and finalization
-have typed headers without file data. Validate the expected outcome, offset,
-size and finite error code with the shared validator. Only one transfer is
-allowed per connection. A chunk receipt confirms staged bytes, not installation.
-A completed commit confirms that operation, not that a future Turn has executed.
-
-For an execution Turn:
-
-1. Subscribe to preparation status before sending `execution_prepare` with
-   immutable Session configuration and no Run input.
-2. `preparing` means the Runtime owns preparation; `ready` supplies the Executor
-   ID, admission handle, revision and expiry. Neither submits user input.
-3. Subscribe to the Run before sending `execution_start` with that Executor,
-   handle, Run ID and ordered input. A valid start transfers the reservation
-   once. `started` confirms transfer to the Turn, not Turn completion; output
-   can race status delivery and must already have a subscriber.
-4. Consume Run events until a native terminal outcome or loss of observation.
-   An execution error is followed by `done` to close that execution stream.
-   `done` closes the stream; preceding errors remain part of its outcome.
-5. On abandonment before start, send `execution_release`. After ownership
-   transfers to a Run, use `prompt_cancel`; releasing the old handle cannot
-   cancel its successor.
-
-Preparation observations use monotonically increasing revisions per handle.
-Ignore older or repeated revisions; do not apply a status for a different handle.
-Typical transitions are `preparing → ready → starting → started`, or termination
-by `released`, `expired`, or `failed`. A `rejected` control operation has an
-`operation` and error code but does not replace the resource's current revision.
-Read-only workspace preparation cannot start a Turn. Expiry does not remove the
-Runtime's obligation to settle cleanup.
-
-Core and Runtime use common preparation, start, input-receipt, cancellation,
-release and recovery semantics for Codex, Claude Code and MiniMax Code. Retain each
-harness's native implementation behind its adapter. Core acts on verified capabilities and runtime
-conditions; a capability declaration alone never grants public feature admission.
-Extend existing interfaces during related functional work without introducing a
-second framework or a broad rewrite. Codex, Claude Code and MiniMax Code have
-qualified dedicated Docker profiles and historical Core-managed E2B evidence.
-New user-managed enrollment requires separate real acceptance. Each harness has equal standing;
-qualify each image/template with the common full-loop acceptance before deploying.
-Additional engines remain separate work; V1 has no separate remote executor.
-Later engines must satisfy the same applicable acceptance contract while keeping
-their suitable native deployment layout.
-
-Workspace reads may request the private `workspace_read_only` preparation profile
-through the existing preparation factory and verified `workspace_read_preparation`
-capability. It accepts only the bound Environment and resource identity; execution
-options, model/MCP credentials, native Session continuation and model/tool input are excluded.
-A read-only owner rejects Start and excludes model input, execution configuration
-and plugin startup. A Runtime may satisfy this contract through its bound local
-filesystem implementation; starting a native Harness process is not required.
-Adapters that use native filesystem controls retain their own initialization rules.
-For this read profile, `released` is published only after local Close succeeds;
-cleanup errors retain ownership and report `cleanup_unconfirmed`. A failed factory
-must return its resource with the error if cleanup remains unconfirmed; wrappers
-must preserve both values. Successful cleanup retries publish confirmed release,
-and stale status snapshots cannot publish success. Failed terminal status delivery
-does not retry cleanup; ownership remains until an explicit release or shutdown retry.
-A release request,
-HTTP disconnect or remote socket closure alone is not cleanup confirmation. This
-profile does not establish remote mutation quiescence or public Files admission.
-
-Core directory reads reuse the Worker's Session scheduling reservation for idle
-preparation and target the exact Run for active execution. Device selection uses
-operation-specific capabilities; reading files never resolves model/MCP options
-or creates a Turn. HTTP cancellation ends observation, not an admitted native read.
-Keep the idle reservation through the bounded read and release attempt. Return
-directory data only after confirmed Close; incomplete reads or uncertain cleanup
-return unavailable without data. Release the Worker's scheduling reservation before
-delivering the result so the caller can immediately request the next page.
-Revoke the scoped read transport credential on
-completion or failure. Runtime retains uncertain cleanup ownership and capacity;
-this does not require a second durable Core owner registry or establish remote
-write retirement. Public Files.list delegates workspace access to this reader;
-the API owns tenant authorization, path validation and protocol pagination. Only
-the reader's distinct `not_directory` result (a missing path, a regular file or an
-unfollowed symlink) becomes an empty page; root, permission, transport and
-uncertain failures keep their errors. Keep partial directory coverage and
-unverified defaults explicit in the Files contract.
-
-Local inline file delivery uses the same authenticated daemon connection and exact
-Environment/Session binding. All platforms use the daemon's Go implementation
-for bounded file reads, directory listing, file creation and output export.
-Files operations require no external helper executable or staging directory.
-The Files API keeps workspace-relative paths and no-overwrite creation semantics;
-it does not restrict native Harness tools' host permissions.
-
-Transfer a complete bounded body in acknowledged 64 KiB frames before invoking
-the native file writer, verify the declared digest, and run no model for upload.
-Keep the private 50 MiB transfer bound distinct from the official 5 MiB decoded
-inline bound, which the API checks before any Runtime work. Files.create uses the
-native writer's no-overwrite operation. Initial Session files retain their separate
-atomic replacement behavior; do not change one caller's semantics for another.
-The dedicated Runtime excludes execution while receiving or applying a write;
-malformed, incomplete or expired transfers cannot reach the installer. Exact
-commit/rejection receipts release the mutation owner. Missing or ambiguous
-receipts retain uncertainty; observer cancellation and local process exit cannot
-prove non-mutation. Before public admission, Core must durably reserve the write
-under the Session lock and prevent successor mutation across restart until exact
-settlement. Do not replay the request or introduce general replacement machinery.
-Read-only operations retain their own authority and bounded ownership requirements.
-
-## What each acknowledgement proves
-
-| Observation | Proven fact |
-| --- | --- |
-| Core gateway `Send` returns nil | Envelope entered the local send queue |
-| Runtime transport `Send` returns nil | WebSocket write completed locally |
-| Transfer `received`, active-input `written` | Defined receive/write phase occurred; native execution or consumption is unconfirmed |
-| Preparation `preparing` / `ready` | Preparation accepted / reservation ready, with no submitted Run input |
-| Preparation `started` | Admission transferred to the identified Turn |
-| Active-input `accepted` | Adapter confirmed native consumption under its declared receipt semantics |
-| `interaction_decision_ack.applied=true` | Identified operation settled; cancellation additionally requires native settlement |
-| `done` and preceding execution events | Execution stream completed with its observed outcome |
-
-There is no generic receipt for every envelope. A successful send is not proof
-that the peer received, accepted or completed a request. Process exit, a stop
-signal and a canceled local context do not prove successful cancellation.
-A `done` frame may also close a settled cancellation stream; it does not
-override the cancellation receipt or imply successful execution. Cancellation
-receipts may retain partial content, native identity and usage in `outcome`
-even when no `done` is published. Failure to obtain settlement must
-remain failed or unknown; it cannot become `applied=true`.
-
-## Failures, retries and cleanup
-
-Transport and execution outcomes are separate. Core's only Run subscription
-entry point is `SubscribeDurable`; inspect `Subscription.Err()` when its event
-channel closes. Disconnection and subscriber overflow close it with an explicit
-observation error, without fabricating `error` or `done`. Core retains durable
-truth and reconciles from confirmed facts. Runtime retains cleanup ownership
-until native work, input receipts, interactions and child work have settled.
-
-The public Turn status is a separate, existing projection:
-[`execution/delivery.go`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/execution/delivery.go)
-records an unsuccessful orchestration attempt as `failed`, including
-`delivery_unknown` after an unconfirmed send and `event_stream_incomplete`
-after subscription failure. A closed subscription can replace the send reason
-with `event_stream_incomplete`; both retain an unknown native effect.
-This public `failed` status is not proof that the Harness failed, that no side
-effect occurred or that cleanup completed. Native error classification comes
-only from observed Runtime error frames. Consumers must keep the observation
-reason and any native evidence distinct; this contract does not add a public
-`unknown` status or change the existing Turn state machine.
-
-| Condition | Required responsibility |
-| --- | --- |
-| Unsupported capability or invalid binding | Reject explicitly before starting the unsupported operation; do not select another Harness |
-| Confirmed preparation/execution failure | Preserve the finite error category and any observed result; Runtime settles its resources |
-| Deadline or connection loss after dispatch | Caller has an unknown effect unless an application receipt proves otherwise; do not convert it to execution failure |
-| Reconnection | Reestablish transport and capability advertisement; do not replay input, initialization, transfers or unresolved mutations |
-| Duplicate preparation/start | Existing connection-local identity and fingerprint rules apply; a conflicting request rejects and an old handle cannot start replacement work |
-| Duplicate input/function/decision | Use that family's existing receipt identity and conflict rules; no transport-wide deduplication or exactly-once promise exists |
-| Cleanup failure | Retain resource ownership and report unconfirmed cleanup; a resource is not reusable merely because a waiter timed out |
-| Lost cancellation receipt | Cancellation may have happened; lack of receipt cannot establish success or authorize another execution |
-
-Only retry operations whose own contract establishes that retry is safe. Retired
-preparation request IDs may eventually allocate a new handle, so they are not
-durable idempotency keys. Native-session resume is an explicit operation with
-verified identity, not a response to a socket failure. A transient connection
-error permits reconnecting the channel; authentication/version rejection requires
-operator correction. Cleanup of an Executor remains separate from the Sandbox
-Provider's confirmed reclamation of compute.
-
-## Workspace operations and connection observations
-
-The private daemon `workspace_read` control targets an existing preparation handle
-or its transferred active Run on the same authenticated device connection. Require
-the exact frozen Environment identity; callers cannot supply sockets, credentials
-or workspace roots. Shared routing uses the optional `agent.WorkspaceReader`
-interface, without selecting an engine by name.
-The same control accepts `operation: directory` through the optional
-`agent.WorkspaceDirectoryLister`, with mutually exclusive byte/entry limits and
-typed directory metadata. Directory responses carry at most 1024 single-component
-UTF-8 names of at most 255 bytes, so escaped metadata stays below the existing
-frame bound. These are private transport limits, not public Files parameters.
-Byte and directory operations share target checks, correlation, capacity and
-retained operation waits; neither creates a Run or selects an engine by name.
-This control does not itself authorize a public Files endpoint or placement.
-
-The separate optional `agent.WorkspaceDirectoryLister` observes one workspace-relative
-directory on the existing Prepared/Session owner; empty path selects its root.
-Return single-component names, entry kind, regular-file byte size and explicit
-truncation only after directory/metadata access and handle cleanup settle. Reuse
-byte-read admission, uncertainty and caller-detach ownership where applicable.
-Do not promise a snapshot, recursive traversal or public pagination through this
-private interface. The Runtime binds access to the frozen local workspace,
-prevents path escape, bounds enumeration and requires a complete validated result.
-Filesystem readiness alone does not enable public Files admission.
-
-Bound encoded request payloads to 8 KiB and correlation IDs to 128 bytes before
-admission. Do not echo oversized IDs; omit oversized trace metadata in replies.
-Bound raw control results to 1 MiB within the existing 4 MiB transport frame; the
-limits are local policies, not pinned public protocol limits. Successful reads require complete bytes/truncation and acknowledged native
-close. Safe native rejections carry no bytes; interrupted or ambiguous reads remain
-unknown and stop further reads on that owner. Local RPC reap never establishes file
-settlement. Retain a dispatched read's original bounded waiter across observer
-cancellation and resource transfer/release; stop new admission on resource closure.
-The gateway bounds subscriptions and never retries or replays on reconnect. Duplicate
-pending operation IDs cannot start another read; this control does not promise durable
-idempotency or result recovery. Preparation/Run ownership, public path authorization,
-public file authorization and native cleanup retain their separate requirements.
-
-Connection observations use the existing execution lease and Session lock. A
-separate `environment_connections` row retains the current generation and revision;
-`environments.status` and its Session Environment-event snapshot commit together.
-The producer serializes replacements, then numbers socket observations within each
-generation. Duplicate or older revisions and superseded generations are inert.
-Replacement retires a previously connected observation before publishing its new
-registration. Registration alone creates no connected event. Event payloads contain
-only public Environment identity/type/status and nullable error, never configuration,
-credentials, registration IDs or revisions. Transport observations have no asserted
-Turn association. `connected`/`disconnected` are distinct from native preparation
-readiness; do not cast resource `expired` into the event vocabulary or emit `ready`
-for a self-hosted connection.
-
-The existing Worker observes authenticated daemon peers for enrolled Environments,
-using durable generation/revision fencing under its execution lease. On restart it
-reconciles old connection observations before admitting new ones. A connection or
-heartbeat does not prove native readiness or process quiescence. Failed or stale
-observations cannot establish a current connection.
-
-## Contract verification
-
-Run `make check-runtime-contract` from the repository root. It exercises the
-shared wire validators, gateway, transport and dispatcher, plus
-[real WebSocket contract scenarios](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/daemon/internal/contracttest/wire_test.go)
-using a controlled Harness adapter, plus the [observation-result regression](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/execution/runtime_protocol_test.go). It requires no model credentials or external
-sandbox. These tests are also included in `make check` through `check-go` and
-`check-core`.
-
-The suite checks incompatible versions, preparation failure, cancellation
-settlement, connection loss without invented terminal events, reconnect without
-replay, stale/duplicate handles and receipts, cleanup failures, bounded transfer
-validation and resource ownership after timeout. Existing detailed fault
-injection remains next to the owning gateway/dispatcher implementation.
-
-For another Runtime or Harness, reuse these protocol sequences and assertions,
-then run its own native acceptance for the capabilities it advertises. A passing
-controlled-adapter test establishes the transport contract, not native Harness
-behavior, OS support, provider authentication or sandbox isolation. Update the
-shared types, this guide and the contract checks together when semantics change.
-
-The reusable [Harness text assertions](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/apps/daemon/internal/agent/contracttest/text.go)
-accept any prepared Executor and a small fixture supplying deterministic normal,
-active and steering inputs. They check independent Turn streams, native owner and
-history continuity, durable write/application receipts, stale cancellation and
-healthy continuation after cancellation. The Claude Go adapter runs them against
-its controlled native subprocess fixture. New adapters can call the same assertions;
-no optional feature is implied. Native failures, uncertain cleanup and exact-history
-recovery still require the adapter's fault and real-provider acceptance tests.
-
-### Environment preparation ownership
-
-Core tracks initialization on the Environment, independently of a managed
-allocation. After authentication, both managed and user-owned Runtime connections
-receive the same `runtime_prepare` operations and resource snapshots. Core never
-replays a running initialization whose owner or confirmation was lost. Preparation
-failure settles Environment input without destroying the machine or workspace.
-The public `connected` state describes transport; initialization completion and
-native executor readiness remain separate prerequisites for execution. Input
-sources and frozen metadata follow the [Environment contract](/environments-and-files#runtime-capability-preparation).
-
-
-### MCP connection authority
-
-Public `MCPHTTPServer` messages carry an explicit `connection_origin`; missing or
-unknown values reject rather than selecting a default. Core freezes the public
-default before dispatch. Both peers require the exact wire version. Runtime uses
-the common origin validator before selecting a factory and resolves public and
-installed MCP into transient effective bindings. See the
-[origin and credential contract](/environments-and-files#public-mcp-connection-origin)
-for supported combinations, native limits and failure ownership.
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/runtime-protocol.md)
diff --git a/apps/docs/content/docs/sandbox-provider.mdx b/apps/docs/content/docs/sandbox-provider.mdx
deleted file mode 100644
index fdb7e67a8..000000000
--- a/apps/docs/content/docs/sandbox-provider.mdx
+++ /dev/null
@@ -1,326 +0,0 @@
----
-title: "Add a Sandbox Provider"
-description: "Environment allocation, bootstrap and reclamation."
----
-
-A **Sandbox Provider** supplies the outer compute (an *Environment*) that a Core
-Runtime daemon runs in, plus the bounded bootstrap that starts it. This guide is
-the single start-to-finish path for adding one. The canonical interface is
-[`SandboxProvider`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/sandbox/sandbox_provider.go).
-
-## Before you start
-
-| Term | Meaning |
-| --- | --- |
-| Environment | Durable execution place owned by Core; see [Environments](/environments-and-files) |
-| Allocation | One Core-owned compute lease for an Environment, identified by `Reference` |
-| Runtime | The daemon inside the Environment; it prepares capabilities and executes Turns |
-| Deployment | The single deployment-wide provider selection; see [Sandbox deployment](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/sandbox-deployment.md) |
-
-Core owns durable Environment, allocation, placement and cleanup state. The
-Provider supplies compute and bootstrap only. Runtime prepares capabilities and
-workspaces through the common [daemon protocol](/runtime-protocol); Harness
-adapters translate execution. A user-owned machine uses the same Runtime
-contract but has no Core-owned allocation to create or destroy.
-
-Use maintained provider SDKs behind thin adapters. Hosted deployments select one
-deployment-wide Provider: E2B cloud, or Docker/microsandbox on
-administrator-owned nodes. Providers never execute Core initialization commands;
-initialization, daily execution and Files use the daemon's typed Runtime operations.
-
-Isolation belongs to the outer infrastructure. The daemon runs with its
-launching user's authority and adds no filesystem, tool or network sandbox.
-Qualify provider isolation and network enforcement independently of daemon
-connectivity; see [Runtime and outer isolation](/concepts#runtime-and-outer-isolation).
-
-## Steps
-
-1. **Read the contract.** Implement the five required operations and explicitly handle all
-   extension interfaces in [Implement the interface](#implement-the-interface).
-2. **Write the adapter package** under `services/core/internal/sandbox/<kind>`
-   (native SDK calls, ownership checks, identity translation, private config).
-   Assert `var _ sandbox.SandboxProvider = (*YourAdapter)(nil)` at compile time.
-   Out-of-process helpers live in `services/core/tools/<kind>-provider`.
-3. **Register the kind** once using
-   [Register the provider kind](#register-the-provider-kind). Registration is
-   explicit construction, not an init-time plugin registry.
-4. **Label owned resources** with `io.oac.*` labels, or `oac_*` metadata keys
-   where the vendor rejects dotted keys. See [Label naming](#label-naming).
-5. **Run the contract suite** with `make check-sandbox-provider-contract`. See
-   [Validate the integration](#validate-the-integration).
-6. **Run native acceptance** against real compute, then `make check`. Record
-   evidence and limits in [Sandbox deployment](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/sandbox-deployment.md).
-7. **Document operator setup** next to the adapter, like the
-   [reference adapters](#reference-adapters).
-
-## Implement the interface
-
-`SandboxProvider` has **five required operations**:
-
-| Operation | Purpose |
-| --- | --- |
-| `Create` | Create compute for a `Reference` and run the bounded daemon bootstrap |
-| `GetInfo` | Observe current compute without mutation |
-| `Renew` | Extend a native lease, or observe when the backend has none |
-| `Kill` | Reclaim the allocation's compute and retained resources |
-| `RunCommand` | Bounded administrative bootstrap/diagnostic command |
-
-Use the existing types; do not introduce another lifecycle protocol or a
-vendor-specific execution path. A backend without a native renewable lease
-(Docker) still keeps service-owned hosted expiry and cleanup requirements.
-
-### Explicit operation contracts
-
-Keep the existing small interfaces. Every Provider must implement their methods
-and return a complete `ProviderOperations()` declaration. The interface methods
-are the operation inventory; `sandbox.ValidateOperations` checks it without a
-second hand-maintained list.
-
-| Contract | Requirement | Responsibility |
-| --- | --- | --- |
-| `sandbox.SandboxProvider` | Five operations must be supported | Allocation lifecycle and bounded administrative commands |
-| `sandbox.CheckpointProvider` | Explicit supported or unsupported decision for every method | Exact compute incarnations, capture/restore, retained-source resume and cleanup |
-| `runtimeobs.Source` | Explicit decision | Ownership-checked read-only observations |
-| `runtimeobs.BatchSource` | Explicit decision | Bounded observations in input order, with per-target errors |
-| `sandbox.SelectionDiscoverer` | Explicit decision | Read-only native configuration discovery before commit |
-| `sandbox.CredentialVerifier` | Explicit decision | Verify access to owned resources without mutation |
-
-Each declaration entry has `state: supported` with no reason, or
-`state: unsupported` with an authored reason code. Missing entries, zero states,
-unknown entries, missing methods and unsafe reasons fail validation. The entire
-checkpoint lifecycle must agree on support; batch observation requires single
-observation. Adding a method to an existing interface requires an explicit
-decision and implementation in every adapter. Never supply a default base class
-or generate blanket unsupported implementations for future methods.
-
-Unsupported methods return `providercontract.UnsupportedError` before native
-I/O. The error identifies the exact operation and a safe code, not a native
-message, resource identity, endpoint or credential. Empty results, nil errors,
-`Unavailable`, and unknown mutation outcomes cannot substitute for unsupported.
-The five required methods cannot return unsupported; a backend without a native
-lease preserves the existing read-only `Renew` semantics.
-
-Each adapter owns one `Operations()` function, shared by its concrete instance
-and registration. `providers.ValidateBinding` checks both against the existing
-interfaces and against each other. Runtime admission and node generation loading
-also reject incomplete providers. Interface assertions establish method shape
-only; callers use the declaration to decide whether an operation is supported.
-
-`ObserveBatch` returns an error instead of an ambiguous boolean. Only a typed,
-safe `UnsupportedError` for `ObserveBatch` permits per-target `Observe` calls.
-An unavailable service, timeout or other failure never triggers that fallback.
-Observation never renews, starts, prepares or stops compute; see the
-[observation contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/runtime-observability.md).
-
-Contract tests call every declared unsupported native method with no configured
-native client, require its matching error and zero result, and reject incomplete
-or contradictory declarations. Supported behavior still requires native and
-lifecycle tests; declaration validation alone cannot prove SDK semantics.
-
-`RunCommand` is an existing administrative bootstrap/diagnostic facility, not an
-alternate route for Skills, Plugins, MCP setup, initial files, Session execution or
-Files. Those use Runtime. Confidential command input travels in `Command.Stdin`,
-not argv or logs. Preserve its byte order, bounded output and actual exit status.
-
-### Identity and resource ownership
-
-`Reference` is the exact `(TenantID, EnvironmentID, AllocationID)` tuple. Core
-persists a fresh allocation ID **before** `Create`; it is not the Environment ID.
-The adapter also binds resources to its installation. Do not locate or authorize
-resources by a bare native ID, display name, guessed path or an unverified label.
-All mutations, reads and cleanup must verify the same ownership.
-
-Core serializes lifecycle operations and retains the allocation after any
-uncertain mutation. An adapter must preserve enough native identity/receipts for
-observation and cleanup. A failed call may return both `Info` and an error:
-preserve reference-bound settlement evidence without converting failure to success.
-Adapters must not silently create replacement resources, overwrite credentials or
-switch to a new allocation after a conflict.
-
-`Info.ProviderID` and `Info.State` describe compute. Core recognizes `running`
-only with the matching Reference and a native identity. Other native states can
-be observed without claiming readiness. `BootstrapComplete` says the bootstrap
-reached its final mutating step. `CreateSettled` proves the original attempt can
-no longer mutate resources; it does not mean success. In particular:
-
-- `State="absent"` plus matching Reference and `CreateSettled=true` is an explicit
-  creation-absence receipt, with no native ID or completed bootstrap.
-- `ErrNotFound`, an empty listing, a timeout or a successful `Kill` alone is not
-  proof that an in-flight create cannot appear later.
-- Core can also settle creation from a matching running resource with completed
-  bootstrap. It must retain unknown creation until it has such evidence or an
-  explicit receipt, even if a cleanup attempt currently sees no resources.
-
-`Kill` owns cleanup of the allocation's compute and retained resources, including
-partial bootstrap storage. It must not remove another tenant's resource on a
-name collision. Core releases durable ownership only after confirmed cleanup
-**and** settled creation. Executor release or Harness cancellation does not delete
-an Environment, its workspace or its Sandbox Provider allocation.
-
-### Operation outcomes and retries
-
-All calls receive bounded contexts. Expiry or cancellation ends the caller's
-wait; it does not prove rollback, native stop, cleanup or absence. An adapter or
-transport must not detach untracked mutations or replay a timed-out command.
-
-| Operation | Confirmed result | Failure or unknown result | Recovery |
-| --- | --- | --- | --- |
-| `Create` | Matching compute and bootstrap evidence; execution still needs Runtime preparation | Invalid/foreign configuration rejects; duplicate returns `ErrExists`; transport failure may hide created resources | Observe the original Reference. Never replay `Create`, even with a new credential. Preserve partial resources for owned cleanup. |
-| `GetInfo` | Current compute observation without mutation | `ErrNotFound` is only a missing observation; an error is not absence proof | Repeat a bounded read; never turn it into create/start/renew. |
-| `Renew` | Existing native lease extended, or an observation for a provider without leases | Timeout may hide a lease extension; stopped/missing compute stays stopped/missing | Observe then let the normal reconciler renew the same allocation. Never revive it or fabricate a lease expiry. |
-| `Kill` | Owned compute and retained storage removed; repeated confirmed absence succeeds | Error retains ownership and cleanup intent; ownership mismatch must not delete foreign resources | Retry cleanup of the same Reference after outstanding creation/mutation is fenced. Do not release the durable owner early. |
-| `RunCommand` | Collected output and actual exit code; nonzero exit is a settled command failure | Missing native completion is `ErrCommandUnconfirmed`; partial output is not success | Do not replay. Preserve the owner and reclaim before reuse when completion cannot be proved. |
-
-Use `ErrInvalid`, `ErrOwnership`, `ErrExists`, `ErrNotFound`,
-`ErrComputeUnconfirmed` and `ErrCommandUnconfirmed` for their existing meanings.
-An unclassified native/transport error is conservatively unknown, not permission
-to retry a mutation. Core must not interpret provider diagnostics as lifecycle
-truth or expose native error text/credentials. The node boundary maps errors to
-fixed codes; direct SDK details stay private.
-
-Checkpoint support adds `Compute` generation/name/ID and `SnapshotIdentity`.
-Persist operation IDs and provider-returned snapshot provenance unchanged.
-`ObserveOnly` on suspend/resume observes the previous attempt and must not start
-another capture or restore. `ResumeCompute` only thaws the retained source; it
-must not cold-start a stopped one. Cleanup targets the exact compute incarnation
-and snapshot, not whichever instance currently has the same display name. See
-[the lifecycle implementation](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/execution/runtime_compute.go)
-and its failure tests before advertising this capability.
-
-### Four distinct readiness facts
-
-| Fact | Evidence | Does not establish |
-| --- | --- | --- |
-| Compute available | Provider observation for the owned allocation | Authenticated Runtime connection or prepared capabilities |
-| Runtime connected | Gateway authentication and exact Environment/device binding | Completed Runtime preparation or a usable Harness |
-| Capabilities prepared | Successful common Runtime preparation with the fixed configuration/snapshot | Acceptance or completion of a Turn |
-| Execution admitted | Qualified Harness capabilities and the existing executor/Turn acceptance path | A completed input, cancellation or reclaimed compute |
-
-For both hosted and self-hosted environments, Core uses the daemon preparation
-and execution protocol. Core resolves configuration and supplies resources;
-Runtime installs/reads local capabilities and freezes the result for the Session.
-Reconnection can reuse that prepared content; a new Session takes a new snapshot.
-A provider must not implement a competing preparation path.
-
-## Register the provider kind
-
-`sandbox/providers/registry.go` is the sole registration table. Each entry binds
-an adapter's specification/resource validators, selection normalization, deployment
-mode, defaults, the adapter-owned operation declaration, and local or direct constructor.
-`providers.Build` constructs node-local adapters; `providers.BuildDirect` constructs
-direct adapters. Neither allocates compute. There is no init-time registration or
-runtime plugin loading.
-
-For a new implementation:
-
-1. Implement the operation contracts above in the adapter package and add native contract tests.
-2. Add its configuration validators and optional read-only `SelectionDiscoverer`
-   for native resource discovery. Normalization must copy input before changing it.
-   `RestoreSelection` must retain access to owned resources without requiring new
-   template validation. Put native credential verification behind
-   `CredentialVerifier` when needed.
-3. Register its constructor, policies, operation declaration and defaults in `providers/registry.go`.
-   Node proxy identity and checkpoint advertisement consume this same entry.
-   The installer projection uses those registered policies and the common field
-   bounds in `sandbox/deployment_contract.go`; regenerate it with
-   `go run ./services/core/cmd/specification-contract -write`.
-4. If new configuration fields are necessary, extend the typed `sandbox.Selection`
-   envelope and its dedicated encrypted persistence fields, API DTO and operator
-   client. Do not replace typed configuration with unrestricted JSON. Field codecs
-   may map columns; Store must not parse native endpoints, templates or defaults.
-5. Supply required installer/distribution artifacts and operator labels. A new
-   provider must not add a Session/Turn scheduling path or a Store vendor switch.
-
-Preview and persistence use `providers.Normalize` and `providers.Describe`.
-`SelectionDiscoverer` resolves omitted native resource values before commit; the
-complete specification is validated again at persistence. Store owns transactions,
-credential encryption, generation fencing, resource ownership and typed column
-mapping. Database constraints validate structure, not the registration list.
-`providers.ResolveChange` owns configuration inheritance and comparison uses
-normalized selectors, so preview, retry and commit share the same defaults.
-
-A direct adapter with credentials verifies all retained generations and allocation
-references before replacing a key. The common `sandbox.CallFence` excludes native
-calls and waits for helper completion, including calls whose callers timed out.
-Execution invokes prepared verification/fencing callbacks without branching on a
-vendor. A transport wrapper advertises only capabilities that its adapter supports;
-new optional capabilities need forwarding and qualification before registration.
-
-Keep vendor-specific deployment validation and SDK setup at the construction
-boundary. Construction must not create an Environment. For node-local adapters
-the `providers.Built` result returns the provider, probe, installation identity, backend
-fingerprint and specification digest; the factory also returns its close function.
-
-Preserve the `execution.RuntimeProvider` deployment binding: `ProviderKind`,
-installation ID, backend fingerprint, generation, mode and node ownership
-identify the backend. The database owns the selection; the in-memory selection
-is not an alternate authority. Register optional interfaces consistently on
-direct adapters and their transport wrappers. A new public capability needs its
-own protocol change.
-
-Today Docker and microsandbox use nodes; E2B is constructed directly. The node
-proxy exposes checkpoint operations only for its registered checkpoint-capable
-backend. A new node backend must register both construction and the corresponding
-proxy capability; otherwise that capability is unavailable. Provider names belong
-in this adapter/configuration wiring, not Session scheduling, capability
-preparation or Turn execution. Common lifecycle code uses `CheckpointProvider`
-to admit suspension, independently of a provider name.
-
-The backend fingerprint identifies a native resource namespace, not mutable
-capacity. Core retains deployment generations so old owned allocations continue
-to resolve to their original backend. This is resource ownership, not historical
-binary compatibility. Do not repoint retained allocations at a replacement backend.
-
-## Label naming
-
-Every owned native resource carries ownership labels so mutations, reads and
-cleanup can verify the `Reference` and installation.
-
-- Use the `io.oac.` prefix, for example `io.oac.installation` and `io.oac.tenant`.
-- Where the vendor rejects dotted keys, use `oac_` metadata keys (E2B).
-- Never accept older label names as a fallback; see
-  [Runtime names](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/CONTRIBUTING.md#openagentcore-runtime-names).
-
-## Validate the integration
-
-Run `make check-sandbox-provider-contract` while developing. It runs the shared
-[`contracttest`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/sandbox/contracttest) suite through
-real adapter boundaries using controlled native failures, plus existing adapter
-and node transport tests. The same packages are included in `make check`.
-New adapters should call the public failure runner with native-side fixtures,
-not substitute a fake implementation of `SandboxProvider` for the adapter under
-test. Preserve tests for foreign ownership, unknown mutation results, cancellation,
-no automatic replay, failed cleanup and reference-bound settlement.
-
-Node tests separately exercise disconnect/reconnect fencing and cleanup after a
-lost create response. Provider helper protocols and the node protocol require an
-exact version match and reject mismatches; do not add fallback decoders or old
-binary migration. Direct in-process interfaces have no independent wire version.
-Node generation management is an explicit current hello capability, not another
-wire version. Fixed-configuration manual nodes use the same protocol and only
-serve their enrolled deployment generation. See the
-[node contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/node-generation-protocol.md).
-
-Run `make check` with its dedicated database before completion. Retain native
-acceptance for SDK behavior that fixtures cannot prove: creation, lease behavior,
-owned partial cleanup, declared isolation/limits, and snapshots where supported.
-The opt-in Docker lifecycle/recovery tests use `AGENTS_RUNTIME_DOCKER_TEST_IMAGE`;
-SDK helper tests use `make check-e2b-provider` and
-`make check-microsandbox-provider`. Passing controlled contract tests is not a
-claim of live cloud or model acceptance.
-
-Mocked compute cannot prove that resources were reclaimed or that the outer
-Environment provides isolation.
-
-## Reference adapters
-
-| Kind | Adapter | Helper | Operator guide |
-| --- | --- | --- | --- |
-| Docker (node) | [`sandbox/docker`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/sandbox/docker) | Node proxy in [`sandbox/node`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/sandbox/node) | [Nodes](/hosted-providers) |
-| microsandbox (node) | [`sandbox/microsandbox`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/sandbox/microsandbox) | [`tools/microsandbox-provider`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/tools/microsandbox-provider) | [`deploy/microsandbox`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/deploy/microsandbox/README.md) |
-| E2B (direct) | [`sandbox/e2b`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/internal/sandbox/e2b) | [`tools/e2b-provider`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/tools/e2b-provider/README.md) | [`deploy/e2b`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/services/core/deploy/e2b/README.md) |
-
-Provider selection and E2B setup are owned by
-[Sandbox deployment](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/sandbox-deployment.md).
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/sandbox-provider.md)
diff --git a/apps/docs/content/docs/self-hosted-execution.mdx b/apps/docs/content/docs/self-hosted-execution.mdx
deleted file mode 100644
index b63eac510..000000000
--- a/apps/docs/content/docs/self-hosted-execution.mdx
+++ /dev/null
@@ -1,166 +0,0 @@
----
-title: "Self-hosted executors"
-description: "Connect a user-owned Runtime to its Environment with a restricted executor credential."
----
-
-A `self_hosted` Session runs on a machine your application owns: a workstation, a VM or a sandbox you manage. The application creates the Session through `/v1` and receives a command that installs `oac-daemon`, starts it and connects it to Core. Web shows the same command on the Session's page; it is optional. Core never creates, stops or reclaims the machine.
-
-**The daemon is not a sandbox.** Tools run with the permissions of the account that starts it and can reach whatever that account can. Use a container or VM when you need isolation; see [Runtime and outer isolation](/concepts#runtime-and-outer-isolation). The daemon does not restrict network access, so a Template that requires a network policy is rejected for a self-hosted Session.
-
-The Session brings its own model provider; the installation default never applies ([why](/user-guide#which-model-provider-a-session-uses)). The machine gets an executor credential that works for this one Environment and nothing else.
-
-## Platforms
-
-| Platform | Codex | Claude Code | MiniMax Code |
-| --- | --- | --- | --- |
-| Linux amd64 | Supported | Supported | Supported |
-| macOS arm64 | Supported | Supported | Supported |
-| Windows amd64 | Supported | Supported | Not supported |
-
-The installer brings its own pinned Node.js and Harness versions (listed in [`scripts/build-native-installer.mjs`](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/scripts/build-native-installer.mjs)) and leaves other installations of those tools untouched. On a platform without a matching installer, the command fails.
-
-The machine needs:
-
-- HTTPS access to Core (plain HTTP only on loopback), and to the release download host unless Core carries an offline copy of the installers;
-- Bash for environment setup and MiniMax Code tools; on Windows, Git Bash, which Claude Code also requires;
-- Python and pip when the Session's packages need them;
-- any system packages your setup needs. The daemon never runs apt, sudo or another elevation command, so install them through the host's normal administration.
-
-No administrator privileges or Docker are needed.
-
-## Connect a machine
-
-1. Choose an absolute workspace path on the target machine. Create a Session with that path and the application's Project API key:
-
-   ```python
-   import os
-   from openai import OpenAI
-
-   client = OpenAI()  # reads OPENAI_BASE_URL and OPENAI_API_KEY
-   session = client.beta.agents.sessions.create(
-       environment={
-           "type": "self_hosted",
-           "workspace_directory": os.environ["EXECUTOR_WORKSPACE"],
-       },
-       extra_body={
-           "agent": {"model": os.environ["MODEL_NAME"], "x_agents_core": {"harness": "codex"}},
-           "x_agents_core": {"model_provider": {
-               "protocol": "responses",
-               "base_url": os.environ["MODEL_BASE_URL"],
-               "api_key": os.environ["MODEL_API_KEY"],
-           }},
-       },
-   )
-   installation = session.model_dump()["x_agents_core"]["installation"]
-   print(installation["commands"]["posix"])  # use "powershell" on Windows
-   ```
-
-2. Run the command on the target machine with the account that should run the tools. It downloads the installer matched to this Core, verifies its checksum, asks which Harnesses to install and where, installs them, creates the workspace if needed, starts the daemon and checks its connection.
-3. Send a Turn. A connected machine proves only authentication; the first Turn checks the Harness and the model.
-
-In Web, open the Session and copy the command under **Connect a host**.
-
-Keep the command private: it carries a short-lived [installation grant](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-executor-credentials.md#installation-grant) that claims the machine's credential. When it has expired, read the Session again or copy a fresh command from Web.
-
-The installer reports three results:
-
-| Result | Meaning |
-| --- | --- |
-| **Installation** | The selected Harnesses passed their readiness checks |
-| **Daemon connection** | Core confirmed the daemon's authenticated connection |
-| **Model configuration** | Not checked; the first Turn uses the Session's model provider |
-
-If the connection is not confirmed within 45 seconds, the installer prints the path of the daemon's log. The daemon keeps reconnecting. Fix the cause and run the install command again with the same installation directory, copying a fresh one from Web if it has expired: completed components and the credential are kept and a running daemon is reused. Do not remove the workspace or the Session to retry.
-
-### Options for automation
-
-Append these to the command:
-
-| Option | Effect |
-| --- | --- |
-| `--non-interactive` | Never prompt; missing input fails |
-| `--harness codex,claude,minimax` | Harnesses to install, comma-separated. Must include the Session's Harness |
-| `--install-dir ABS` | Installation directory. Default: `environments/<environment-id>` under `~/.oac`, or under `OAC_RUNTIME_HOME` when set |
-| `--capability-directory ABS` | Where [capability snapshots](#local-capability-directories) are stored. Default: `capabilities` in the installation directory |
-| `--tool-env-file ABS` | A JSON file of string variables for tools and MCP servers; see [explicit local tool environment](/environments-and-files#explicit-local-tool-environment) |
-
-The workspace is fixed when the Session is created. For a different workspace, create another Session.
-
-## Local capability directories
-
-A self-hosted Session may supply `capability_directories` alongside its workspace:
-
-```python
-environment = {
-    "type": "self_hosted",
-    "workspace_directory": os.environ["EXECUTOR_WORKSPACE"],
-    "capability_directories": [os.environ["EXECUTOR_CAPABILITIES"]],
-}
-```
-
-Paths are absolute in the machine's own syntax (Unix, Windows drive or UNC); the daemon checks them, not Core. Fill these directories before the daemon connects. They are ordinary paths visible to the daemon; naming one does not mount it or create a sandbox.
-
-Use `x_agents_core.environment` for the same Project-owned Skills, Plugin archives, files, packages, setup commands or Template used by a managed Session:
-
-```python
-session = client.beta.agents.sessions.create(
-    agent_id=agent_id,
-    environment=environment,
-    extra_body={"x_agents_core": {
-        "model_provider": model_provider,
-        "environment": {"environment_template_id": template_id},
-    }},
-)
-```
-
-The same extension works with `environment={"type": "openai_hosted"}`. Do not repeat a field in both `environment` and the extension. Setup runs with the daemon's account permissions. Deployment model keys are never sent to your machine.
-
-Before the first Turn the daemon copies these sources into a snapshot. Reconnecting reuses the snapshot even after you edit the sources; a new Session takes a new snapshot. The [preparation contract](/environments-and-files#runtime-capability-preparation) lists fields, merge rules, snapshot behavior and failures.
-
-## Operate the installation
-
-The installation's `bin/oac-daemon` finds its own installation. Use it for:
-
-| Command | Effect |
-| --- | --- |
-| `oac-daemon start` | Validate the installed Harnesses and start the daemon in the background |
-| `oac-daemon status` | Show the local profile and process; not the connection |
-| `oac-daemon logs -n 100`, `oac-daemon logs -f` | Print or follow the daemon log |
-| `oac-daemon stop` | Stop the daemon |
-
-If you set `OAC_RUNTIME_HOME`, use the same value for every command. Check the connection under **Host connection** on the Session's page in Web, or with the [connection status](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-executor-credentials.md#connection-status).
-
-To add a Harness, run the install command again (a fresh copy from Web if it has expired) with the same installation directory and the Harness to add. The installer checks the existing contents, adds only missing components and keeps the Harnesses already installed. Restart a running daemon afterwards so it discovers the new Harness.
-
-Stopping the daemon, cancelling a Turn or deleting the Session never removes the machine's workspace, native history or capability snapshot. An installation from another daemon version, or one whose files were changed, is refused. The installer never upgrades, repairs or migrates it; install into a separate directory.
-
-## Rotate or revoke
-
-In Web, the Session's **Executor credentials** list the machine's credential:
-
-| Action | Effect |
-| --- | --- |
-| **Rotate** | The credential gets a new secret; the old secret stops working at once. On a revoked credential the action is **Restore** |
-| **Revoke** | The credential stops working at once |
-
-To reconnect after a rotation, stop the daemon with `oac-daemon stop`, replace the JSON at its configured credential-file path with the new credential, and run `oac-daemon start`. Do not run `install` again over the existing installation, and rotate the existing credential rather than issuing a second one, which [cannot connect](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-executor-credentials.md#revoked-or-rotated-credential).
-
-In an archived Project, credentials cannot be issued or rotated; revocation remains available. Operators can manage credentials with the Core key; see the [credential contract](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-executor-credentials.md#core-key-routes).
-
-## Install from an extracted distribution
-
-The same installer accepts an already extracted distribution and a credential file issued by an operator, without the install command:
-
-```sh
-./oac-daemon install --non-interactive --harness codex \
-  --install-dir "$HOME/.oac/my-runtime" \
-  --remote 'wss://core.example/api/v1/agent-daemon/ws' \
-  --environment-id '11111111-2222-4333-8444-555555555555' \
-  --workspace "$HOME/workspace" \
-  --credential-file "$HOME/executor-credential.json"
-"$HOME/.oac/my-runtime/bin/oac-daemon" start
-```
-
-Use the Session's `remote_url` and Environment ID. In PowerShell, run `.\oac-daemon.exe` with native absolute paths. This mode needs an existing workspace and does not start the daemon until you run `start`.
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/getting-started/self-hosted.md)
diff --git a/apps/docs/content/docs/sessions.mdx b/apps/docs/content/docs/sessions.mdx
deleted file mode 100644
index eee81bb29..000000000
--- a/apps/docs/content/docs/sessions.mdx
+++ /dev/null
@@ -1,589 +0,0 @@
----
-title: "Agents API guide"
-description: "Every public resource with OpenAI SDK and HTTP examples: Agents, Sessions, input, streaming, files, Skills, templates and Vaults."
----
-
-Core serves the [OpenAI Agents API](https://platform.openai.com/docs/api-reference) at
-`/v1`. Use the official OpenAI SDK or plain HTTP. This guide shows both for every
-common operation, and notes where Core differs from OpenAI.
-
-New to the API? Run the [quickstart](/quickstart) first.
-
-## Before you start
-
-**Base URL and key.** Your administrator gives you the API base URL, such as
-`https://core.example/v1`, and a Project API key.
-
-```sh
-export OPENAI_BASE_URL=https://core.example/v1
-read -rs OPENAI_API_KEY && export OPENAI_API_KEY
-```
-
-**SDK.** Use the pinned version:
-
-```sh
-pip install openai==3.13.0
-```
-
-```python
-from openai import OpenAI
-
-client = OpenAI()  # reads OPENAI_BASE_URL and OPENAI_API_KEY
-```
-
-**HTTP.** Every request needs a Bearer key. Routes under `/agents` and `/vaults` also
-need `OpenAI-Beta: agents=v1`; `/files` and `/skills` do not. The SDK sets both. The
-HTTP examples below use this shell helper:
-
-```sh
-oac() {  # oac PATH [curl options]: call /agents or /vaults with the required headers
-  curl -sS "$OPENAI_BASE_URL$1" \
-    -H "Authorization: Bearer $OPENAI_API_KEY" \
-    -H "OpenAI-Beta: agents=v1" \
-    -H "Content-Type: application/json" "${@:2}"
-}
-oac /agents
-```
-
-On a shared host, `-H @<(printf 'Authorization: Bearer %s\n' "$OPENAI_API_KEY")`
-keeps the key out of the process list.
-
-## Resources at a glance
-
-| Resource | Path | What it is |
-| --- | --- | --- |
-| [Agents](#agents) | `/agents` | Reusable configuration: model, instructions, tools, harness |
-| [Sessions](#sessions) | `/agents/sessions` | One agent conversation with its own Environment |
-| [Input events](#send-input) | `/agents/sessions/{id}/events` (POST) | Messages, cancellation and tool results |
-| [Event stream](#stream-events) | `/agents/sessions/{id}/events` (GET) | Live server-sent events |
-| [Turns and Items](#turns-and-items) | `/agents/sessions/{id}/turns`, `/items` | Durable history |
-| [Files](#files) | `/files`, `/agents/environments/{id}/files`, `/agents/sessions/{id}/artifacts` | Uploads, workspace files and outputs |
-| [Skills](#skills) | `/skills` | Versioned capability bundles |
-| [Environment Templates](#environment-templates) | `/agents/environments/templates` | Reusable workspace setup |
-| [Vaults](#vaults) | `/vaults` | Write-only credentials for MCP servers |
-| Subagents | `/agents/sessions/{id}/subagents` | Read-only child work; see [subagents](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/subagents.md) |
-
-Core has exactly the routes of the pinned SDK, listed in
-[upstream-routes.json](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/upstream-routes.json). It adds no
-route; its additions live in [`x_agents_core`](#core-extensions-x_agents_core).
-
-## Conventions
-
-### Pagination
-
-Lists return:
-
-```json
-{"object": "list", "data": [...], "has_more": true, "first_id": "...", "last_id": "..."}
-```
-
-| Parameter | Meaning |
-| --- | --- |
-| `limit` | 1–100, default 20 |
-| `order` | `desc` (default) or `asc` |
-| `after` | Pass the previous page's `last_id` |
-
-The SDK pages for you:
-
-```python
-for session in client.beta.agents.sessions.list(limit=100):
-    print(session.id, session.status)
-```
-
-```sh
-oac "/agents/sessions?limit=100&after=$LAST_ID"
-```
-
-Two lists differ: `GET /files` returns up to 10,000 files at once, and workspace
-files use an opaque `page` token (see [Workspace files](#workspace-files)).
-
-### Idempotency
-
-Send an `Idempotency-Key` (up to 128 bytes) when creating a Session or sending input.
-A retry with the same key and body returns the original result instead of doing the
-work twice. The same key with a different body fails with 409 `idempotency_conflict`.
-
-```python
-import uuid
-
-key = str(uuid.uuid4())  # store it before sending, reuse it on retry
-client.beta.agents.sessions.events.create(session_id, events=[...], idempotency_key=key)
-client.beta.agents.sessions.create(environment=..., extra_headers={"Idempotency-Key": key})
-```
-
-**After a lost response,** retry with the same key, then read the Session, Turns and
-Items. Never resend without the key. Core keeps creation keys even after the Session
-is deleted.
-
-> Core difference: OpenAI creates a new Session for each create request even with the
-> same key. Core returns the original.
-
-### Errors
-
-```json
-{"error": {"type": "invalid_request_error", "message": "...", "code": "model_provider_required", "param": "x_agents_core.model_provider"}}
-```
-
-| Status | Common codes | Meaning |
-| --- | --- | --- |
-| 400 | `invalid_request_error`, `invalid_beta`, `model_provider_required`, `unsupported_or_invalid_configuration` | Fix the request. `invalid_beta` means a missing or wrong `OpenAI-Beta` header |
-| 401 | `invalid_api_key` or none | Wrong or missing key, or a key from another namespace |
-| 404 | | Missing, or belongs to another Project. The two look the same |
-| 405 | `unsupported_operation` | Core doesn't support this operation |
-| 409 | `conflict_error`, `idempotency_conflict` | State conflict, for example deleting a busy Session |
-| 413 | | Body too large |
-| 503 | | Temporarily uncertain; read state before retrying |
-
-Every response carries `X-Request-Id`; include it when reporting a problem.
-
-### Core extensions: `x_agents_core`
-
-Core runs several harnesses and accepts your own model access. Those settings are the
-only additions to the OpenAI shapes, and they sit inside `x_agents_core`:
-
-| Field | Where | Value |
-| --- | --- | --- |
-| `harness` | Agent, or a Session's inline `agent` | `codex`, `claude_sdk` or `mcode` |
-| `model_provider` | Agent, or Session creation (top level) | `protocol`, `base_url`, `api_key`, and for `mcode` also `context_window` and `max_output_tokens`. The protocol must be one the harness supports: Codex `responses`, Claude Code `anthropic`, MiniMax Code any of `anthropic`, `responses`, `chat_completions` |
-| `harness_config` | Agent, inline `agent`, or Session creation (top level, wins) | The harness's native model parameters, such as Codex's `model_reasoning_effort` |
-| `environment` | Session creation (top level), any placement | Portable preparation: `environment_template_id`, `files`, `env`, `packages`, `setup_commands`, `skills`, `plugins`, `capability_directories`. A field may not also appear in `environment`; see [Environments](/environments-and-files#preparation-order) |
-| `installation` | Read-only, on `self_hosted` Sessions | Short-lived install commands for your machine; see [self-hosted execution](/self-hosted-execution) |
-
-Any other member is rejected with 400. `api_key` is write-only: reads return
-`api_key_configured`. `harness_config` replaces the whole object; `{}` clears it. With the SDK, pass these through `extra_body`. How to pick a
-harness and model, and which provider a Session uses, is in the
-[user guide](/user-guide#choose-a-harness-and-a-model).
-
-## Agents
-
-An Agent is saved configuration. Sessions copy it when they start, so editing an
-Agent affects only new Sessions.
-
-```python
-agent = client.beta.agents.create(
-    model="your-model-id",
-    name="Reviewer",
-    instructions="Review code changes and report problems.",
-    extra_body={"x_agents_core": {"harness": "codex"}},
-)
-```
-
-```sh
-oac "/agents" -d '{
-  "model": "your-model-id",
-  "name": "Reviewer",
-  "instructions": "Review code changes and report problems.",
-  "x_agents_core": {"harness": "codex"}
-}'
-```
-
-```json
-{"id": "agent_...", "object": "agent", "model": "your-model-id", "name": "Reviewer",
- "instructions": "...", "tools": [], "metadata": {}, "created_at": 1790000000,
- "x_agents_core": {"harness": "codex"}}
-```
-
-| Operation | SDK | HTTP |
-| --- | --- | --- |
-| Create | `agents.create(...)` | `POST /agents` |
-| Read | `agents.retrieve(id)` | `GET /agents/{id}` |
-| Update | `agents.update(id, ...)` | `POST /agents/{id}` |
-| List | `agents.list()` | `GET /agents` |
-| Delete | `agents.delete(id)` | `DELETE /agents/{id}` |
-
-(`agents` is `client.beta.agents` throughout.)
-
-- **Update** changes only the fields you send. `metadata` replaces all pairs; `null`
-  clears `name` or `instructions`.
-- **Delete** keeps existing Sessions.
-- **Tools** are functions, MCP servers, `tool_search` (Claude) and `web_search` with
-  `mode: "disabled"`. Support depends on harness and Environment; see
-  [execution tools](/agents-and-tools).
-
-## Sessions
-
-A Session is one conversation with a fixed configuration and its own Environment.
-
-### Create a Session
-
-```python
-session = client.beta.agents.sessions.create(
-    environment={"type": "openai_hosted"},
-    agent_id=agent.id,
-    input="Review the files in /workspace and summarize the risks.",
-    metadata={"ticket": "T-123"},
-)
-```
-
-```sh
-oac "/agents/sessions" -H "Idempotency-Key: $(uuidgen)" -d '{
-  "environment": {"type": "openai_hosted"},
-  "agent_id": "agent_...",
-  "input": "Review the files in /workspace and summarize the risks.",
-  "metadata": {"ticket": "T-123"}
-}'
-```
-
-Returns 201 with the Session:
-
-```json
-{"id": "sess_...", "object": "agent.session", "status": "in_progress",
- "agent": {"model": "...", ...}, "environment": {"id": "env_...", "type": "openai_hosted", ...},
- "metadata": {"ticket": "T-123"}, "required_actions": [], "vault_ids": [],
- "created_at": 1790000000, "last_active_at": 1790000000}
-```
-
-| Field | Meaning |
-| --- | --- |
-| `environment` | Required. Where the agent works; see the table below |
-| `agent_id` or `agent` | A saved Agent, or an inline Agent object (same fields as create). An inline Agent on `openai_hosted` or `none` may omit `model` to use the installation default |
-| `input` | The first message: a string or a message array. Optional for `openai_hosted` and `self_hosted` |
-| `metadata` | Your own string key-value pairs |
-| `vault_ids` | [Vaults](#vaults) whose credentials MCP servers may use |
-| `stream` | `true` returns [server-sent events](#stream-events) instead of JSON |
-| `x_agents_core.model_provider` | This Session's model access, if not from the Agent or the default |
-
-| `environment.type` | Runs on | Notes |
-| --- | --- | --- |
-| `openai_hosted` | A sandbox Core creates (node or E2B) | Optional `network`, `packages`, `files`, `skills`, `plugins`, `setup_commands`, or a template |
-| `self_hosted` | Your machine | Requires an absolute `workspace_directory`. Skills, packages, files or a template go in `x_agents_core.environment`. The response carries install commands in `x_agents_core.installation`; see [self-hosted execution](/self-hosted-execution) |
-| `none` | An existing device connection | `input` required; uses the default model only |
-
-### Session status
-
-| `status` | Meaning |
-| --- | --- |
-| `in_progress` | A Turn is running |
-| `idle` | Waiting for input |
-| `requires_action` | Waiting for you: a [function result](#function-tools) or a self-hosted machine to connect |
-| `failed` | The Environment could not be prepared. See `error` |
-
-### Update, list and delete
-
-```python
-client.beta.agents.sessions.update(session.id, metadata={"ticket": "T-124"})
-for s in client.beta.agents.sessions.list(agent_id=agent.id):
-    print(s.id)
-client.beta.agents.sessions.delete(session.id)
-```
-
-| Operation | HTTP | Notes |
-| --- | --- | --- |
-| Read | `GET /agents/sessions/{id}` | |
-| Update | `POST /agents/sessions/{id}` | Only `metadata` |
-| List | `GET /agents/sessions?agent_id=...` | Filter by Agent is optional |
-| Delete | `DELETE /agents/sessions/{id}` | Only when `idle` or `failed` with nothing pending; otherwise 409. Cancel first |
-
-## Send input
-
-All input goes to one endpoint as a list of events. It returns 202 once the input is
-stored, before the agent reads it.
-
-### Send a message
-
-```python
-client.beta.agents.sessions.events.create(
-    session.id,
-    events=[{
-        "type": "agent.session.input.message",
-        "input": [{"role": "user", "content": [{"type": "input_text", "text": "Now fix the first risk."}]}],
-    }],
-    idempotency_key=key,
-)
-```
-
-```sh
-oac "/agents/sessions/$SESSION_ID/events" -H "Idempotency-Key: $KEY" -d '{
-  "events": [{"type": "agent.session.input.message",
-              "input": [{"role": "user", "content": [{"type": "input_text", "text": "Now fix the first risk."}]}]}]
-}'
-```
-
-- **When idle,** a message starts a new Turn. **While a Turn runs,** it joins that
-  Turn (steering); it does not start a parallel task.
-- **Content** is `input_text`, plus `input_image` as an inline PNG or JPEG data URI.
-  Images work with Codex and Claude Code wherever the Runtime supports them;
-  MiniMax Code rejects them. The
-  whole request is limited to 1 MiB.
-- Full rules: [message input](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/message-input.md).
-
-### Cancel
-
-```python
-client.beta.agents.sessions.events.create(session.id, events=[{"type": "agent.session.input.cancel"}])
-```
-
-```sh
-oac "/agents/sessions/$SESSION_ID/events" -d '{"events": [{"type": "agent.session.input.cancel"}]}'
-```
-
-The Turn is cancelled when it reaches `cancelled`, not when the request returns. A
-cancel while idle does nothing.
-
-## Stream events
-
-`GET /agents/sessions/{id}/events` is a server-sent event stream. It is **live only**:
-events sent while you were disconnected are not replayed. Open it before sending
-input, and recover gaps from [Turns and Items](#turns-and-items).
-
-Open streams recheck the original Project key once per second, including before
-output. Revocation or Project archival closes the stream; authentication failure
-also closes it. Rechecks use the normal five-second authentication timeout and
-send no Session data while waiting. Bytes already sent cannot be recalled.
-
-```python
-with client.beta.agents.sessions.events.stream(session.id) as stream:
-    for event in stream:
-        if event.type == "agent.session.turn.output_text.delta":
-            print(event.delta, end="", flush=True)
-        elif event.type in {"agent.session.turn.completed", "agent.session.turn.failed", "agent.session.turn.cancelled"}:
-            break
-```
-
-```sh
-oac "/agents/sessions/$SESSION_ID/events" -N
-```
-
-```text
-event: agent.session.turn.output_text.delta
-data: {"type": "agent.session.turn.output_text.delta", "item_id": "item_...", "delta": "Hello", ...}
-```
-
-| Event | When |
-| --- | --- |
-| `agent.session.turn.created`, `.in_progress` | A Turn starts |
-| `agent.session.turn.item.added`, `.item.done` | An Item (message, tool call, …) starts or finishes |
-| `agent.session.turn.output_text.delta`, `.done` | Assistant text, piece by piece |
-| `agent.session.turn.completed`, `.failed`, `.cancelled` | A Turn ends. Carries `usage` |
-| `agent.session.in_progress`, `.idle`, `.requires_action`, `.failed` | Session status changes |
-| `agent.session.subagent.*` | Child work starts or ends |
-| `error` | A stream-level error |
-
-The stream stays open across Turns. To stream one Turn and handle
-[function calls](#function-tools) automatically, the SDK's `sessions.stream` helper
-does both.
-
-**Stream the creation itself** with `stream=True` on `sessions.create`. You get
-`agent.session.created` first, and the stream ends at the first `idle` or `failed`.
-
-**Reconnecting:** resubscribe, then read Items and drop any you already have by ID.
-Details: [history and events](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/history-events-usage.md).
-
-## Turns and Items
-
-A Turn is one piece of work started by input. Items are its recorded content:
-messages, reasoning, tool calls and their results. Both are durable; read them to
-check results or recover after a disconnect.
-
-```python
-turns = client.beta.agents.sessions.turns.list(session.id, order="desc")
-latest = turns.data[0]
-print(latest.status, latest.usage)
-for item in client.beta.agents.sessions.items.list(session.id, order="asc"):
-    print(item.type)
-```
-
-```sh
-oac "/agents/sessions/$SESSION_ID/turns?order=desc&limit=1"
-oac "/agents/sessions/$SESSION_ID/items?order=asc"
-```
-
-| Turn `status` | Meaning |
-| --- | --- |
-| `queued`, `in_progress` | Not finished |
-| `waiting` | Waiting for a function result |
-| `completed`, `failed`, `cancelled` | Finished |
-
-- **Usage** (`input_tokens`, `output_tokens`, `total_tokens`, …) may arrive after the
-  Turn ends. Treat `null` as "not yet known", not zero.
-- Turn lists contain top-level Turns only. Read child work under `/subagents`.
-
-## Function tools
-
-Declare a function on the Agent. When the model calls it, the Session enters
-`requires_action` and the Turn `waiting` until you return a result.
-
-```python
-agent = client.beta.agents.create(
-    model="your-model-id",
-    tools=[{
-        "type": "function",
-        "name": "get_weather",
-        "description": "Current weather for a city",
-        "parameters": {"type": "object", "properties": {"city": {"type": "string"}}, "required": ["city"]},
-    }],
-)
-
-def get_weather(args):
-    return f"Sunny in {args['city']}"
-
-with client.beta.agents.sessions.stream(
-    session.id, input="What's the weather in Paris?", tool_handlers={"get_weather": get_weather}
-) as stream:
-    for event in stream:
-        pass  # the helper submits each result and stops when the Turn ends
-```
-
-Without the helper, read the call from `session.required_actions`, then send:
-
-```sh
-oac "/agents/sessions/$SESSION_ID/events" -d '{
-  "events": [{"type": "agent.session.input.tool_result",
-              "turn_id": "turn_...", "call_id": "call_...", "success": true, "output": "Sunny in Paris"}]
-}'
-```
-
-Resending the same result is safe. A different result for the same call, or one sent
-after cancellation, fails with 409. MiniMax Code doesn't support public functions.
-
-## Files
-
-Three kinds of file serve different purposes:
-
-| Kind | Use it to | Path |
-| --- | --- | --- |
-| [Source Files](#source-files) | Upload bytes once and reference them by ID | `/files` |
-| [Workspace files](#workspace-files) | Put files into a running Session's workspace, or list it | `/agents/environments/{id}/files` |
-| [Artifacts](#artifacts) | Download what the agent produced | `/agents/sessions/{id}/artifacts` |
-
-### Source Files
-
-```python
-f = client.files.create(file=open("data.csv", "rb"), purpose="user_data")
-```
-
-```sh
-curl "$OPENAI_BASE_URL/files" -H "Authorization: Bearer $OPENAI_API_KEY" \
-  -F purpose=user_data -F file=@data.csv
-```
-
-Only `purpose=user_data` is accepted, up to 512 MiB. No Beta header. Their content
-cannot be downloaded again; use the ID in workspace files or templates.
-
-### Workspace files
-
-Copy a file into the workspace of the Session's Environment (`session.environment.id`):
-
-```python
-env_id = session.environment.id
-client.beta.agents.environments.files.create(env_id, type="file_id", file_id=f.id, path="/workspace/data.csv")
-client.beta.agents.environments.files.create(env_id, type="inline", data="aGVsbG8K", path="/workspace/hello.txt")
-page = client.beta.agents.environments.files.list(env_id, path="/workspace")
-```
-
-```sh
-oac "/agents/environments/$ENV_ID/files" -d '{"type": "file_id", "file_id": "file_...", "path": "/workspace/data.csv"}'
-```
-
-- `inline` data is base64, up to 5 MiB decoded; `file_id` up to 50 MiB.
-- Parent directories are created. An existing file is never overwritten (400).
-- The list shows regular files in one directory, not recursively. It pages with a
-  `page` token and returns `next`.
-
-### Artifacts
-
-When a Turn completes, Core captures the regular files under the workspace's
-`outputs/` directory. Artifacts stay readable after the Environment is gone.
-
-```python
-for a in client.beta.agents.sessions.artifacts.list(session.id):
-    data = client.beta.agents.sessions.artifacts.content(a.id, session_id=session.id)
-    data.write_to_file(a.path.rsplit("/", 1)[-1])
-```
-
-```sh
-oac "/agents/sessions/$SESSION_ID/artifacts"
-oac "/agents/sessions/$SESSION_ID/artifacts/$ARTIFACT_ID/content" -o report.md
-```
-
-Each Artifact has `path`, `size_bytes`, `turn_id` and `environment_id`. Deleting one
-leaves the workspace file alone.
-
-## Skills
-
-A Skill is a versioned bundle of instructions and files an agent can use. Upload a
-directory or a ZIP; each upload is a version.
-
-```sh
-curl "$OPENAI_BASE_URL/skills" -H "Authorization: Bearer $OPENAI_API_KEY" -F files=@my-skill.zip
-```
-
-```python
-skill = client.skills.create(files=[("my-skill/SKILL.md", open("my-skill/SKILL.md", "rb"))])
-client.skills.versions.create(skill.id, files=[...], default=True)
-```
-
-- No Beta header. Up to 50 Skills; 5 MiB compressed, 20 MiB expanded per archive.
-- SDK 3.13.0 drops a single ZIP file from the upload; use HTTP for a ZIP.
-- Attach Skills to a Session through its `environment.skills` or a
-  [template](#environment-templates).
-
-Details: [Source Files and Skills](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/source-files.md).
-
-## Environment Templates
-
-A template saves workspace setup for reuse. `openai_hosted` Sessions reference it in
-`environment`; `self_hosted` Sessions in `x_agents_core.environment`:
-
-```python
-template = client.beta.agents.environments.templates.create(
-    name="python-data",
-    packages={"python": ["pandas"]},
-    setup_commands=[{"command": "mkdir -p /workspace/outputs"}],
-)
-```
-
-| Field | Meaning |
-| --- | --- |
-| `network` | `access`: `enabled` (default), `disabled`, or `restricted` to 1–100 exact hosts in `allowed_domains`. A Session can only narrow it. Current Runtimes don't enforce `disabled` or `restricted`, so a Session that needs them is rejected; see [restricted network policy](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-templates.md#restricted-network-policy) |
-| `packages` | `npm` and `python` packages. `system` packages are rejected: preinstall them in the image or on the machine |
-| `setup_commands`, `env` | Run and set at preparation. Never returned by reads |
-| `files`, `skills`, `plugins` | Initial content. Up to 50 files, 10 MiB inline in total |
-
-A Session freezes the template when it starts. Details:
-[Environment Templates](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/environment-templates.md).
-
-## Vaults
-
-Vaults hold credentials for HTTP MCP servers: a `static_bearer` token or an `mcp_oauth`
-token with optional refresh. Tokens are write-only.
-
-```python
-vault = client.beta.agents.vaults.create(name="github")
-client.beta.agents.vaults.credentials.create(
-    vault.id, name="github-token",
-    auth={"type": "static_bearer", "token": "ghp_...", "mcp_server_url": "https://api.githubcopilot.com/mcp/"},
-)
-session = client.beta.agents.sessions.create(environment={"type": "none"}, input="...", vault_ids=[vault.id], agent_id=agent.id)
-```
-
-The HTTP path is `/vaults`, with the Beta header. A credential is used when an MCP
-server's URL matches its `mcp_server_url` exactly, or when the tool names its
-`credential_id`.
-
-An MCP tool's `connection_origin` decides who connects:
-
-| `connection_origin` | Connects from | Works with |
-| --- | --- | --- |
-| `service` (default) | Core's side, for `none` Sessions | Codex and Claude Code |
-| `environment` | Inside the workspace (managed or your own machine) | Codex, Claude Code and MiniMax Code. MiniMax Code needs a null allowlist and `required: false` |
-
-Current rules: [public MCP connection origin](/environments-and-files#public-mcp-connection-origin).
-
-## Limits and differences from OpenAI
-
-| Area | Core behavior |
-| --- | --- |
-| Routes | Exactly the pinned SDK's routes; no extra routes |
-| Extensions | Only `x_agents_core.harness` and `x_agents_core.model_provider` |
-| Session create idempotency | Same key returns the original Session |
-| Event stream | Live only; no replay, `Last-Event-ID` ignored |
-| Tools | No enabled `web_search`; no multi-agent with functions; MiniMax Code has no public functions |
-| Images | Inline PNG/JPEG only; Codex and Claude Code; MiniMax Code rejects them |
-| Packages | `packages.system` rejected |
-
-Per-operation status and harness differences are in the
-[coverage record](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/README.md). The exact schemas are in the
-[public OpenAPI](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/openapi.yaml).
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/api/public-agent-api.md)
diff --git a/apps/docs/content/docs/troubleshooting.mdx b/apps/docs/content/docs/troubleshooting.mdx
deleted file mode 100644
index 945048cfc..000000000
--- a/apps/docs/content/docs/troubleshooting.mdx
+++ /dev/null
@@ -1,187 +0,0 @@
----
-title: "Operations and troubleshooting"
-description: "oac lifecycle commands, backups, key rotation, current-version repair and diagnostics."
----
-
-The installation operator owns the Core host, its storage and its availability. Node hosts run their own services; see [Nodes](/hosted-providers). Settings are described in the [configuration reference](/configure).
-
-## The oac command
-
-Each installation has its own management command in its directory. It needs neither the bundle nor root:
-
-```sh
-~/.oac/core/oac status
-```
-
-| Command | What it does |
-| --- | --- |
-| `oac status` | Shows each service and its health, Core and Web health, the public URL, API base URL, console address and source commit, the routes a reverse proxy needs, `config.json` changes not applied yet and generated files edited by hand. A Web-only installation also checks that its Core accepts its Core key. Exits non-zero when a service is unavailable. It never calls a model |
-| `oac start` | Starts every service with the files last written by `apply`; warns about unapplied changes |
-| `oac stop` | Stops PostgreSQL, Core and Web. Data, nodes and sandboxes are kept, and running sandbox work may continue |
-| `oac apply` | Applies `config.json` and restarts what changed; see [how apply works](/configure#how-oac-apply-works) |
-| `oac apply --dry-run` | Shows the changed settings, files and restarts, and changes nothing |
-| `oac apply --discard-edits` | Overwrites generated files edited by hand, keeping each as `generated/<file>.edited-<time>` |
-| `oac apply --confirm-public-url-change URL` | Confirms a public URL change without a prompt; must equal the new URL |
-| `oac apply --yes` | Web-only: pairs Web with a different Core without asking |
-| `oac domain HOSTNAME [--confirm-public-url-change URL]` | Managed ingress: sets the public URL to `https://HOSTNAME`, as **Configure domain and HTTPS** in Web does; see [Configure the domain and HTTPS](/install#configure-the-domain-and-https) |
-| `oac rotate-core-key [--yes]` | Replaces the Core key; see [Rotate the Core key](#rotate-the-core-key) |
-
-For a second installation, use its own command, such as `~/.oac/web/oac status`.
-
-## Service health
-
-Use these observations for different questions:
-
-| Observation | What it establishes |
-| --- | --- |
-| `oac status`, PostgreSQL health | The database accepts its readiness check |
-| Core `/healthz` | Core's process is alive |
-| An authenticated API read | The caller's key works for that resource |
-| Environment connection | The Runtime transport is connected |
-| A finished Turn and its results | The task's recorded outcome |
-
-Service health does not show that a harness or a model works. Use Session, Turn, Items and Usage reads for execution, and Web's **Nodes** page for node connection, readiness and placement. For local diagnosis, use the installation's own Compose file:
-
-```sh
-docker compose -f "$HOME/.oac/core/generated/compose.json" ps --all
-docker compose -f "$HOME/.oac/core/generated/compose.json" logs --tail 200 core
-```
-
-Native Core logs to its user unit: `journalctl --user -u <project>-core.service`, with `project` from `state.json`. Don't paste `docker compose config`, `docker inspect` or raw logs into public issue reports.
-
-## Stop and restart
-
-Let active work settle before a planned restart:
-
-```sh
-~/.oac/core/oac stop
-~/.oac/core/oac start
-```
-
-Stopping Core stops no node and no sandbox. Node services, their microVMs and Docker containers keep running; stopping is not a way to reclaim compute. A Core restart does not continue an interrupted native tool call transparently. After reconnecting, query the same Session; don't create a new Session to replay uncertain work. Session event streams are live only; recover through Session, Turn and Items reads.
-
-A Web restart, including one caused by `oac apply`, signs everyone out of the console. Web sign-ins otherwise last 12 hours.
-
-## Core key
-
-Each installation has one administrator credential, the Core key. The installer generates a 64-character random key in `<install dir>/secrets/core.key`, by default `~/.oac/core/secrets/core.key`. The Core key:
-
-- signs in to Web. The browser gets an HttpOnly session cookie, never the key;
-- authorizes Core API (`/core/v1`) requests sent as `Authorization: Bearer <Core key>`;
-- never authorizes the Agents API (`/v1`). Applications use Project API keys, which in turn can't call `/core/v1`.
-
-Keep it private: `secrets/` is mode `0700` and its files `0600`. Web and, with managed ingress, the `installation` service read `core.key`; Core reads only its SHA-256 from `generated/core-key-digests.json`, which `oac apply` derives from the key. A Core key has at least 32 characters and no whitespace. Web limits failed sign-ins.
-
-### Script the Core API
-
-Run scripts on the Core host against Core's loopback port. This helper reads the key from its file, keeping it off the command line:
-
-```sh
-core() {  # core METHOD PATH [JSON body]
-  curl -fsS -X "$1" "http://127.0.0.1:8091/core/v1$2" \
-    -H @<(printf 'Authorization: Bearer %s\n' "$(cat ~/.oac/core/secrets/core.key)") \
-    -H 'Content-Type: application/json' ${3:+-d "$3"}
-}
-```
-
-| Task | Command |
-| --- | --- |
-| List Projects | `core GET /projects` |
-| Create a Project | `core POST /projects '{"name": "billing-bot"}'` |
-| Issue an API key (shown once, as `key`) | `core POST /projects/$PROJECT_ID/keys '{"name": "prod"}'` |
-| Revoke a key | `core DELETE /projects/$PROJECT_ID/keys/$KEY_ID` |
-| Archive a Project (revokes all keys) | `core POST /projects/$PROJECT_ID/archive` |
-| See harnesses and their default models | `core GET /harnesses` |
-| Set Codex's default model | `core PUT /harnesses/codex/model-configuration '{"model": "your-model-id", "model_provider": {"protocol": "responses", "base_url": "https://provider.example/v1", "api_key": "sk-..."}}'` |
-| Installation facts, including the API base URL | `core GET /installation` |
-
-The [API index](/public-api#core-api) lists every route; errors use the [Core error envelope](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/core-errors.md).
-
-### Rotate the Core key
-
-```sh
-~/.oac/core/oac rotate-core-key
-```
-
-It refuses while `config.json` has changes that are not applied or a generated file was edited by hand: run `oac apply` first. It asks for confirmation (`--yes` skips it), stops Web, writes a new key to `secrets/core.key` and regenerates the digest file. On a running installation it then restarts Core, starts Web and checks that Core accepts the new key and refuses the old one; a stopped installation only gets the new files and uses the new key at the next `oac start`. The old key stops working as soon as Core restarts, and every console session ends: sign in again and update your scripts. If the command stops early, `secrets/core.key` holds the key to use; run `oac apply` to finish.
-
-A separate Web-only installation keeps its own copy of the key. After rotating, copy `secrets/core.key` from the Core host into that installation's `secrets/core.key` (mode `0600`) and run its `oac apply`. Its `oac status` reports a key that Core refuses. `rotate-core-key` refuses to run on a Web-only installation.
-
-## Projects and API keys
-
-Create Projects and issue keys in Web, on **Projects and keys**, or through the [Core API](#script-the-core-api). How Projects and keys behave is in [Projects own assets](/concepts#projects-own-assets).
-
-To rotate an application key:
-
-1. Issue a new key in the same Project.
-2. Update the application to use it.
-3. **Revoke** the old key.
-
-**Archive** disables every key of a Project and keeps its assets.
-
-Core records which key made each public resource write; the retention of that history is [`core.write_audit_retention`](/configure#settings).
-
-## Back up
-
-Back up these together; a restore needs all of them:
-
-- the PostgreSQL volume `<project>_database`. It holds Projects, key digests, nodes, default models, encrypted credentials and all execution history, including large objects. A logical dump:
-
-  ```sh
-  docker compose -f "$HOME/.oac/core/generated/compose.json" exec -T database \
-    pg_dump -U agents_api agents_api > oac-backup.sql
-  ```
-
-- the installation directory: `config.json`, `state.json` (installation ID) and `secrets/`. `credential.key` must stay with the database, or stored credentials can't be decrypted; never regenerate it to get past an error.
-- `state/e2b/`, when E2B is used: receipts Core needs to clean up E2B sandboxes.
-- each node's state directory on its host, `/var/lib/oac-node/.oac/nodes/<installation-id>/`, with its provider storage: Docker volumes or microsandbox's store. See [when a node host fails](/hosted-providers#when-a-node-host-fails) for restoring them.
-- the bundle you installed from, to repair the same release.
-
-Never prune Docker volumes or delete native harness history to make a retry pass. A deleted Session does not prove that all provider resources were reclaimed.
-
-## Installation version policy
-
-An installation runs one release for its whole life. In-place version upgrades, downgrades and historical conversions are not supported. Nothing migrates data between releases.
-
-To move to a new release, install it into a new, empty directory, with its own database, Core key and nodes, and add nodes from its Web. Keep the old installation, its data and its nodes until their work is finished. Nodes run the program of the console that added them and are never upgraded in place; Core accepts only nodes that speak its own node protocol.
-
-Repair the current release by rerunning `./install.sh --install-dir DIR` from the exact same bundle; the downloader keeps it under `~/.oac/releases/`. Repair reloads missing images, restores the `oac` command, applies `config.json` and starts the services. It preserves identity, settings, secrets and history, accepts only `--install-dir`, and refuses a bundle from another release.
-
-The installer and mutating `oac` commands hold the same installation lock, `.oac.lock`, including during repair and interrupted apply recovery. If another command holds it, retry after that command finishes; never remove or replace `.oac.lock` to get past a busy installation. Reinstallation never deletes another installation's files, database, Runtime resources or Session history.
-
-## Troubleshooting
-
-| Symptom | Cause and fix |
-| --- | --- |
-| `Core installation requires Linux amd64 with Docker access` | Use Linux amd64 and an account with Docker access; root and ordinary users are supported |
-| `Installation failed: inspect prerequisites and private deployment files` | A prerequisite failed without its own message, most often Docker: check that `docker info` and `docker compose version` work for this user |
-| `Docker Compose 2.26.0 or newer is required …` | Update the Docker Compose plugin |
-| `Port N is already in use; select another port` | Free the port, or install with `--core-port`/`--port` |
-| `Installation directory is not empty …` | Use an empty `--install-dir` |
-| `This installation is configured by …/config.json …` | Flags only seed a new installation: edit `config.json` and run `oac apply` |
-| `This installation version or historical conversion is not supported …` | The target directory holds an installation of another release, or a default install found one at `~/.parsar/core`. Keep it, and install into another empty `--install-dir` ([version policy](#installation-version-policy)) |
-| `generated/<file> was edited by hand` | Put the change in `config.json`, then `oac apply --discard-edits` |
-| `config.json has changes that are not applied` | Run `oac apply` |
-| `Core rejects secrets/core.key …` | Run `oac apply`, which restarts Core with the key's digest |
-| `config.json not applied: …` | `oac apply` printed Core's startup error above; fix `config.json` and apply again |
-| `HTTPS verification failed …` during domain setup | See [Configure the domain and HTTPS](/install#configure-the-domain-and-https) |
-| Web answers 403 `Forbidden` | Open exactly the console address `oac status` prints; a reverse proxy must pass the original Host |
-| `/v1` or `/api/v1` answers 404 | Those paths reach Web; route them to Core ([reverse proxy](/install-options#https-and-the-reverse-proxy)) |
-| Web shows that Core is unavailable (502) | Core is stopped or failing: `oac status`, then Core's log |
-| Session creation returns 400 `model_provider_required` | No model provider: set a [default model](/configure#default-models) for the harness, or pass one; self-hosted Sessions always pass their own |
-| Add node shows no command | See [Before you add a node](/hosted-providers#before-you-add-a-node) |
-| A node is not ready | See [node troubleshooting](/hosted-providers#troubleshooting) |
-
-## Exposure and network policy
-
-| Listener | Managed ingress (default) | External ingress |
-| --- | --- | --- |
-| Web | Reached only through the `gateway` service, which publishes `ports.web` (8080), 80 and 443 on `host` (all IPv4 interfaces by default) | `host:ports.web` (loopback by default), behind your reverse proxy |
-| Core | `127.0.0.1:ports.core` (8091); the gateway routes `/v1` and `/api/v1` to it | `host:ports.core`, behind your reverse proxy |
-| PostgreSQL | No published port | No published port, or a loopback port with native Core |
-
-Web signs administrators in with the Core key, checks the origin of every request, and forwards signed-in `/core/v1` requests to Core with the Core key, which stays on the server. It answers 404 on `/v1` and `/api/v1` whatever credential a request carries, serves only the non-secret node payload at `/node-install/`, and has no Docker or KVM access. Machine routes under `/api/v1` use their own enrollment and connection credentials. With managed ingress, the `installation` service applies domain changes through the Docker socket; Web reaches it only over a private Unix socket, and it checks the Core key on every request.
-
-Sandboxes are the isolation boundary ([Runtime and outer isolation](/concepts#runtime-and-outer-isolation)). Docker sandboxes share the node's kernel, and a Docker node is [root-equivalent](/hosted-providers#what-the-installer-sets-up) on its host; microsandbox gives each sandbox a microVM with an explicit [network policy](/hosted-providers#what-the-installer-sets-up). Core itself has no Docker socket or KVM access.
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/getting-started/operations.md)
diff --git a/apps/docs/content/docs/user-guide.mdx b/apps/docs/content/docs/user-guide.mdx
deleted file mode 100644
index b06f94b42..000000000
--- a/apps/docs/content/docs/user-guide.mdx
+++ /dev/null
@@ -1,161 +0,0 @@
----
-title: "Use OpenAgentCore"
-description: "Sessions, capabilities, files, cancellation and recovery."
----
-
-Common tasks for application developers. Start with the
-[quickstart](/quickstart); it sets up `client` and `session`. Every
-operation here is shown with SDK and HTTP examples in the
-[Agents API guide](/sessions).
-
-## Choose where a task runs
-
-A Session's `environment.type` decides where its agent works:
-
-| Environment | Runs on | You prepare |
-| --- | --- | --- |
-| `openai_hosted` | A sandbox Core creates on a node or E2B | Nothing; the administrator provides capacity |
-| `self_hosted` | Your own Linux, macOS or Windows machine | The machine, a workspace directory and the daemon. See [self-hosted execution](/self-hosted-execution) |
-| `none` | An existing device connection, no workspace | A connected device with its harness |
-
-Placement, expiry and supported combinations:
-[Environment contract](/environments-and-files).
-
-## Choose a harness and a model
-
-The harness is the agent program that runs your Session. Set it in
-`x_agents_core.harness` on the Agent; if you don't, the installation's default
-(Codex unless changed) is used.
-
-| Harness | `harness` | Provider `protocol` | Native model parameters (`harness_config`) |
-| --- | --- | --- | --- |
-| Codex | `codex` | `responses` | `model_reasoning_effort` |
-| Claude Code | `claude_sdk` | `anthropic` | `effort`, `thinking` |
-| MiniMax Code | `mcode` | `anthropic` (default), `responses` or `chat_completions` | None. The provider must set `context_window` and `max_output_tokens` |
-
-- **Model.** `agent.model` is the provider's exact model ID. An inline Agent on an
-  `openai_hosted` or `none` Session may omit it to use the installation default's
-  model. Saved Agents always need one.
-- **Provider protocol.** The harness connects to your provider directly, so the
-  provider must speak one of the harness's protocols above. There is no conversion;
-  a mismatch is rejected when the Session is created.
-- **Native parameters.** `x_agents_core.harness_config` passes the harness's own
-  settings; see [native model configuration](/harness-onboarding#native-model-configuration).
-
-Selecting a harness doesn't make an unsupported model or operation work; see
-[harness selection](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/harness-selection.md).
-
-### Which model provider a Session uses
-
-A Session takes its model provider from the first of these that has one. They are
-never merged:
-
-1. `x_agents_core.model_provider` in the Session creation request;
-2. the saved Agent's `x_agents_core.model_provider`;
-3. the installation's default model configuration for the harness, set by the
-   administrator. It also supplies the model and native parameters when the Session
-   leaves them out.
-
-| Environment | Request or Agent provider | Installation default | Neither |
-| --- | --- | --- | --- |
-| `openai_hosted` | Used | Used | 400 `model_provider_required` |
-| `self_hosted` | Used | Never | 400 `model_provider_required` |
-| `none` | Rejected (400) | Used | Allowed: the device supplies the model |
-
-Self-hosted Sessions never use the default, because it holds the operator's key and
-your machine is outside the operator's control. A Session freezes its provider at
-creation; later changes affect only new Sessions. Full rules:
-[model execution](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/contracts/agents-api/model-execution.md).
-
-## Follow up and steer
-
-Send another message to the same Session to continue with its history and workspace:
-
-```python
-client.beta.agents.sessions.events.create(session.id, events=[{
-    "type": "agent.session.input.message",
-    "input": [{"role": "user", "content": [{"type": "input_text", "text": "Summarize the file you created."}]}],
-}])
-```
-
-- **Idle Session:** the message starts a new Turn.
-- **Running Turn:** the message joins it (steering). It never starts a parallel task.
-- **Different configuration or workspace:** create a new Session.
-
-See [Send input](/sessions#send-input).
-
-## Watch the output live
-
-Open the event stream before sending input, and print text as it arrives:
-
-```python
-with client.beta.agents.sessions.events.stream(session.id) as stream:
-    for event in stream:
-        if event.type == "agent.session.turn.output_text.delta":
-            print(event.delta, end="", flush=True)
-        if event.type in {"agent.session.turn.completed", "agent.session.turn.failed", "agent.session.turn.cancelled"}:
-            break
-```
-
-The stream is live only. After a disconnect, read Turns and Items to fill the gap.
-See [Stream events](/sessions#stream-events).
-
-## Give the agent Skills, Plugins and MCP
-
-Choose capabilities when you create the Session. The Runtime installs them once, as a
-snapshot; editing the source later doesn't change a running Session.
-
-| To | Use |
-| --- | --- |
-| Upload a Skill and pick a version | [Skills](/sessions#skills) |
-| Reuse packages, files and setup commands | [Environment Templates](/sessions#environment-templates) |
-| Call your own code from the agent | [Function tools](/sessions#function-tools) |
-| Connect an MCP server, with credentials | [Execution tools](/agents-and-tools) and [Vaults](/sessions#vaults) |
-| Use Skill or Plugin directories on your machine | [Local capability directories](/self-hosted-execution#local-capability-directories) |
-
-System packages must already be in the machine or image. Preparation errors fail the
-Session before any work runs; fix the cause instead of retrying in a new Session.
-
-## Send files and get results
-
-| To | Use |
-| --- | --- |
-| Put a file in the workspace | [Workspace files](/sessions#workspace-files) |
-| Upload once, reference by ID | [Source Files](/sessions#source-files) |
-| Download what the agent wrote to `outputs/` | [Artifacts](/sessions#artifacts) |
-| Read the conversation and tool results | [Turns and Items](/sessions#turns-and-items) |
-
-Deleting a Session doesn't erase files on your own machine. Reclaiming a managed
-sandbox is a separate operation.
-
-## Cancel and recover
-
-Cancel the current Turn:
-
-```python
-client.beta.agents.sessions.events.create(session.id, events=[{"type": "agent.session.input.cancel"}])
-```
-
-The work has stopped when the Turn reads `cancelled`, not when the request returns.
-
-After a lost response or connection:
-
-1. Read the Session, its Turns and Items.
-2. If the work isn't there, retry with the **same** `Idempotency-Key`.
-3. Never resend without a key; you may run the work twice.
-
-On a self-hosted machine, restart the same installation to keep its workspace and
-history; see [operating the installation](/self-hosted-execution#operate-the-installation).
-
-## Diagnose a failure
-
-1. Read the Session's `status` and `error`, and the latest Turn's `error`.
-2. Check that the Environment is connected and its harness is available.
-3. Check the harness, model and tool combination in
-   [execution tools](/agents-and-tools).
-4. Ask the administrator to check [operations and troubleshooting](/troubleshooting#troubleshooting)
-   for service logs, credentials and node readiness.
-
-A 401 usually means a key from the wrong namespace; see the [API index](/public-api).
-
-[Repository source](https://github.com/MiniMax-AI/OpenAgentCore/blob/f6d258735fc601c521dd990e6f9e1ed261f4ef2d/docs/user-guide.md)
diff --git a/apps/docs/content/guide-sources.json b/apps/docs/content/guide-sources.json
deleted file mode 100644
index 9b51c413a..000000000
--- a/apps/docs/content/guide-sources.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "revision": "f6d258735fc601c521dd990e6f9e1ed261f4ef2d",
-  "sources": {
-    "docs/getting-started/README.md": "d93c270e208fdf84edaf71827ed635a017be8cf67e0a4afef7279e3945d53173",
-    "docs/design-principles.md": "334e0d477c255552f874f3ca8a2db603d0d07892ad7d58930bf8e3d06b86c636",
-    "docs/web/console-server.md": "974ccb12b6034ad970c8b02a42a3c495a14b460c56cc1ecea77345a2c11df4ed",
-    "docs/getting-started/install.md": "135c668c0439c3a3084a7eb03ac37ddb4525df1a07e30485b420c23c91a0a947",
-    "docs/getting-started/install-options.md": "3299f76b51a41a35f41448a05702a27f540c2976f4cf6a7c826d72b1da0b80a1",
-    "docs/configuration.md": "ff24b556096841bb89df3747da04e57331346020f349d7208f708e6bbfab5589",
-    "docs/getting-started/quickstart.md": "51374df1c86cc3376a92da4599915818d05b94863d728b234bd12be445d1156d",
-    "docs/api/README.md": "fff58d7789db361cda8353020703dd866d32ce0db88ad05da7d8ecd0cc25c332",
-    "contracts/agents-api/execution-tools.md": "a66c5ba217d532c64f3b041abf7f815692578f432656e64f516061987563089e",
-    "docs/api/public-agent-api.md": "e1111aaf5215392178246969e281b930374b22ee380d529b08b2482836d6333d",
-    "docs/examples.md": "c12c34adc5b2fa57c81602b23d8ecc8317596f9c5a4aedbf1f1fe934a08a94f5",
-    "contracts/agents-api/environments.md": "72d037ac95930c46c519e19e9d48db242f86d4ed1ac3579cb4fb2f52484da286",
-    "docs/getting-started/nodes.md": "395d04a29b95a9299a2474d76955d65e66edebdfd5bf3d8ce798e1bbda223148",
-    "docs/getting-started/self-hosted.md": "653a9132ea6bbc39186f7917fa1596027d091071172e6a6afd9f618fc1dab725",
-    "docs/assets/console-overview-en.webp": "86c663ffb214b3e428eb09fc998f55c22a3d3706164216dc4386031728a7352c",
-    "docs/web/README.md": "b8fcda4f7494af63225ca39e489540233c1654a3cd6d2d17fbe9d4114cf0bc30",
-    "docs/api/web-management.md": "efba58e8d38734e167e767d2c75d5991202d97f519ec1829d2e531b0e3ea4af2",
-    "contracts/agents-api/runtime-observability-api.md": "cd46e777fe716a7e76374f4655c96dfbad9d8be1bfca6203ed6118ab87874c2b",
-    "docs/getting-started/operations.md": "5cf3f4c6fa26b6445645c501ed53f78f450e9d9a31667166afebfaf02131f9a7",
-    "docs/user-guide.md": "078ad930003dd333e65beb152dab11809b08d58dcc9d5d108c61f60dc3a320e2",
-    "docs/assets/development-architecture.png": "24e6d0145d4f16ad70b07b6bc643808a6455aaf6398434d199cf74def200fca6",
-    "docs/development.md": "0532097a1c1c7e92407712a1d9e2a820476a4e78a3de37f84f8718d211860c4d",
-    "contracts/agents-api/harness-onboarding.md": "4f05ac81ebfabfb8e860a92e25eaaaa39e08b6ba5011fb492c1935882646e340",
-    "docs/runtime-bootstrap.md": "4edf9c7863e4f0033063145371df605ce21facafd79eeeb3492826b7a05e2f80",
-    "docs/runtime-protocol.md": "b9d764ab7fc123b55f51aa750fa399fa9156448173f6f7d3a44ffe7b8dd4ce50",
-    "docs/sandbox-provider.md": "f46f408c6ee86d52a2c332978c0767052680fd98bb2b83d8b581ea739a9d9d10",
-    "apps/docs/scripts/guides.json": "3b91ba5094ead91a719fa8260f5aad87e1e5aac7ecf9703b546fdef21772355b"
-  },
-  "outputs": {
-    "content/docs/index.mdx": "d185ee4c3057995b059b5841e58a1ecdfcc1602c998e598303db977a3511c918",
-    "content/docs/concepts.mdx": "d280cc3bffeae6ce61efa46e38b797baf40ed6b96a0d84515f8110409f12bf5f",
-    "content/docs/execution-model.mdx": "7297e1aac1f80cce0d73b1e54503fdf5d151c39ea84d0e569c3dec0e2d036ea6",
-    "content/docs/install.mdx": "acb7dc71e35a67f2561ba7ff18f6399232f65d48af0978f44eb9b944de3082d3",
-    "content/docs/install-options.mdx": "686d0a4a0bcc3eec2d27cb3b32bf10c841cb234684c40bbcdce9b6d5450d93b3",
-    "content/docs/configure.mdx": "f25b4238ceaea39c76aa0b9670510461579ca4ba4b9c58eff58c8f61c3d440b2",
-    "content/docs/bootstrap-projects-keys.mdx": "663c985f1f1c76abada147f589b0577b3406cd8fb317df48167ca8d8ef213f53",
-    "content/docs/quickstart.mdx": "fb0b4171e31032bc14a013d6a2e57114c4a120c64ad1d8716cfa02bf21579487",
-    "content/docs/public-api.mdx": "288d52390e51dd28ede986a573fc61125b6136cfe2fd024e3b2e39ff2bc58aff",
-    "content/docs/agents-and-tools.mdx": "7f592336db8961b3bb385f425ba5335a8d30714e201d1bcfb6eff74ca7f63454",
-    "content/docs/sessions.mdx": "8262b0fac4b8f030da179189b29a2c458c36a6757d70cf6017e428d6b1c6dd7e",
-    "content/docs/examples.mdx": "cc266017e9874027003d234b29df3581ebc3caa5bd6fcd126c92be71fb7ab86f",
-    "content/docs/environments-and-files.mdx": "73b017cb26f2983bac2d3d9a8914e94ade02ec3aa2adfa8e6c7a8091197b9d6e",
-    "content/docs/hosted-providers.mdx": "56078aea1459895a8f11978f4bbabcd27527b97b06dfd27918c9c4667efd05d1",
-    "content/docs/self-hosted-execution.mdx": "1a7b67384d2e44d63211c7f1c9cc9775ffff18e647dc8d188ec08cea9724f1dc",
-    "public/images/source/docs/assets/console-overview-en.webp": "86c663ffb214b3e428eb09fc998f55c22a3d3706164216dc4386031728a7352c",
-    "content/docs/console.mdx": "8fa26954eeb4d795238df56f1968208e18c06113f7ee42eff1217760dab38c03",
-    "content/docs/admin-api.mdx": "ea47ada04e91fa65a87d42960467c2ec76548bf496bbd50dde01f8ed71b962f2",
-    "content/docs/observability.mdx": "d4b37bf5c2b44b55f3e38b71ffadd6e4d590e4891c6ae2f6a03893579b067754",
-    "content/docs/troubleshooting.mdx": "bc1bc142ccbd7911523c80d21869c0c219d29d3d69c75d6b32232032bd7af635",
-    "content/docs/user-guide.mdx": "052b394d433bfa42a478e51a3d40ac4a79d5b8e0375fc0fcab0b3ddcd655a11b",
-    "public/images/source/docs/assets/development-architecture.png": "24e6d0145d4f16ad70b07b6bc643808a6455aaf6398434d199cf74def200fca6",
-    "content/docs/development.mdx": "a4be0be579a07330c6ec1bf6ae4b6b08a13bf22fee5ca204f0646ff6b30da626",
-    "content/docs/harness-onboarding.mdx": "d1950e897ca03cdc411922da0edbf823f805cc897392b3f5d4b6dd3c1a24cb52",
-    "content/docs/runtime-bootstrap.mdx": "3f7ae2330194c0d639a89737fbf9a43cf33c354694bfa1ac6900e96f84aac2a8",
-    "content/docs/runtime-protocol.mdx": "7bd6a1a5fb6a49042277c13a866b336ae36e65bbd20eabc5a6bc7cda71ae7b6f",
-    "content/docs/sandbox-provider.mdx": "7e800f15373fa3e560044d0e1790f417275e5d8d5b9de1b240445606c6c0f960"
-  }
-}
diff --git a/apps/docs/lib/openapi.ts b/apps/docs/lib/openapi.ts
deleted file mode 100644
index c41dbaf49..000000000
--- a/apps/docs/lib/openapi.ts
+++ /dev/null
@@ -1,45 +0,0 @@
-// Registers the OpenAPI documents the reference pages render.
-//
-// Generated MDX names its surface by id rather than by file path so the pages
-// stay portable across checkout locations. `scripts/generate-api-reference.mjs`
-// owns the ids and the files; add an entry here when it gains a surface.
-//
-// `getSchemas()` keys its result by the very string passed as `input`, so the
-// lookup below goes through the same `absolute` map that built the input.
-
-import { createOpenAPI } from "fumadocs-openapi/server"
-import path from "node:path"
-
-export const SURFACES = {
-  "public-api": "openapi/public-api.yaml",
-  "core-api": "openapi/core-api.yaml",
-  "runtime-api": "openapi/runtime-api.yaml",
-} as const
-
-export type SurfaceId = keyof typeof SURFACES
-
-const absolute = Object.fromEntries(
-  Object.entries(SURFACES).map(([id, relative]) => [
-    id,
-    path.join(process.cwd(), relative),
-  ]),
-) as Record<SurfaceId, string>
-
-export const openapi = createOpenAPI({ input: Object.values(absolute), disablePlayground: true })
-
-/** Reads one surface, by the id the generated MDX refers to. */
-export async function loadSurface(id: string) {
-  const file = absolute[id as SurfaceId]
-  if (!file) {
-    throw new Error(
-      `Unknown API surface "${id}". Known surfaces: ` +
-        `${Object.keys(SURFACES).join(", ")}.`,
-    )
-  }
-  const schemas = await openapi.getSchemas()
-  const document = schemas[file]
-  if (!document) {
-    throw new Error(`API surface "${id}" was not processed from ${file}.`)
-  }
-  return document
-}
diff --git a/apps/docs/lib/site.ts b/apps/docs/lib/site.ts
deleted file mode 100644
index 6632016e5..000000000
--- a/apps/docs/lib/site.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-// Set the published origin before building crawler metadata.
-const siteOrigin = (process.env.DOCS_SITE_ORIGIN ?? "http://127.0.0.1:4001").replace(/\/+$/, "")
-
-export function absoluteDocsUrl(relative: string): string {
-  return `${siteOrigin}${relative === "/" ? "" : relative}`
-}
diff --git a/apps/docs/lib/source.ts b/apps/docs/lib/source.ts
deleted file mode 100644
index 9c2f6f15f..000000000
--- a/apps/docs/lib/source.ts
+++ /dev/null
@@ -1,7 +0,0 @@
-import { docs } from "@/.source"
-import { loader } from "fumadocs-core/source"
-
-export const source = loader({
-  baseUrl: "/",
-  source: docs.toFumadocsSource(),
-})
diff --git a/apps/docs/next-env.d.ts b/apps/docs/next-env.d.ts
deleted file mode 100644
index 830fb594c..000000000
--- a/apps/docs/next-env.d.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-/// <reference types="next" />
-/// <reference types="next/image-types/global" />
-/// <reference path="./.next/types/routes.d.ts" />
-
-// NOTE: This file should not be edited
-// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.
diff --git a/apps/docs/next.config.mjs b/apps/docs/next.config.mjs
deleted file mode 100644
index a1c49cfb3..000000000
--- a/apps/docs/next.config.mjs
+++ /dev/null
@@ -1,14 +0,0 @@
-import { createMDX } from "fumadocs-mdx/next"
-import { fileURLToPath } from "node:url"
-
-const withMDX = createMDX()
-
-/** @type {import('next').NextConfig} */
-const config = {
-  reactStrictMode: true,
-  outputFileTracingRoot: fileURLToPath(new URL("../../", import.meta.url)),
-  // Keep the Next.js development overlay indicator out of the product UI.
-  devIndicators: false,
-}
-
-export default withMDX(config)
diff --git a/apps/docs/openapi/core-api.yaml b/apps/docs/openapi/core-api.yaml
deleted file mode 100644
index 94179a5b2..000000000
--- a/apps/docs/openapi/core-api.yaml
+++ /dev/null
@@ -1,7884 +0,0 @@
-# Generated documentation projection; do not edit.
-info:
-  contact: {}
-  description: Deployment and operations routes under /core/v1 for Core Web's server and operator scripts. Every operation requires the Core key; Project API keys and machine credentials are not accepted.
-  license:
-    name: Apache 2.0
-    url: https://www.apache.org/licenses/LICENSE-2.0.html
-  title: OpenAgentCore Core API
-  version: '1'
-paths:
-  /core/v1/audit-log:
-    get:
-      description: Core key only. Newest-first cursor pagination of safe metadata. Actor labels are unverified console labels, not authorization identities. Request bodies and secrets are never recorded.
-      parameters:
-        - schema:
-            type: string
-          description: Target Project ID
-          in: query
-          name: project_id
-        - schema:
-            type: string
-          description: Resource type
-          in: query
-          name: resource_type
-        - schema:
-            type: string
-          description: Resource ID
-          in: query
-          name: resource_id
-        - schema:
-            type: string
-          description: Mutation action
-          in: query
-          name: action
-        - schema:
-            type: string
-          description: Inclusive RFC3339 timestamp
-          in: query
-          name: created_after
-        - schema:
-            type: string
-          description: Exclusive RFC3339 timestamp
-          in: query
-          name: created_before
-        - schema:
-            type: integer
-            maximum: 100
-            minimum: 1
-          description: Page size
-          in: query
-          name: limit
-        - schema:
-            type: string
-          description: Opaque next_cursor from the preceding page
-          in: query
-          name: after
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.AdminAuditPage'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Query committed administrator mutations
-      tags:
-        - Core Administration
-  /core/v1/harnesses:
-    get:
-      description: Core key only. Returns every harness this build supports, in name order. enabled and default are read-only views of the process configuration (OAC_DEFAULT_HARNESS and OAC_HARNESSES). model_configuration is the harness's deployment default, stored in Core, or null. Keys are never returned; api_key_configured reports that one is set.
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreHarnessList'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List harnesses and their deployment default model providers
-      tags:
-        - Deployment Model Providers
-  /core/v1/harnesses/{harness}/model-configuration:
-    delete:
-      description: Core key only. Idempotent; each successful request is audited. Sessions that already froze the default keep it. Afterwards new openai_hosted Sessions for this harness need a Session or Agent bundle.
-      parameters:
-        - schema:
-            type: string
-            enum:
-              - claude_sdk
-              - codex
-              - mcode
-          description: Harness
-          in: path
-          name: harness
-          required: true
-      responses:
-        '204':
-          description: No Content
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Remove a harness's deployment default model provider
-      tags:
-        - Deployment Model Providers
-    get:
-      description: Core key only. Returns the safe view; the key is never returned. 404 when the harness does not exist or has no deployment default. Nullable last_used_at, last_error_code and last_error_at are best-effort observations of committed root Turns using this exact default revision; they do not establish current readiness and may remain stale indefinitely.
-      parameters:
-        - schema:
-            type: string
-            enum:
-              - claude_sdk
-              - codex
-              - mcode
-          description: Harness
-          in: path
-          name: harness
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.HarnessModelConfiguration'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve a harness's deployment default model provider
-      tags:
-        - Deployment Model Providers
-    put:
-      description: Core key only. Replaces one complete deployment model configuration, including its write-only provider key. Validates through the selected Harness declaration and freezes the resolved configuration for new Sessions; existing Sessions are unchanged. See contracts/agents-api/model-execution.md#deployment-defaults for fields, source precedence and observation rules.
-      parameters:
-        - schema:
-            type: string
-            enum:
-              - claude_sdk
-              - codex
-              - mcode
-          description: Harness
-          in: path
-          name: harness
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.HarnessModelConfiguration'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Replace a harness's deployment default model provider
-      tags:
-        - Deployment Model Providers
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/v1.ModelConfigurationInput'
-        description: Complete model provider bundle
-        required: true
-  /core/v1/installation:
-    get:
-      description: Core key only; available before any sandbox deployment exists. Reports the public URL that applications, nodes, sandboxes and self-hosted executors use, the API base URL, Core's source commit and installation ID, the installer's settings snapshot with where to change it, and what is bound to the current public URL. Sensitive settings report only whether they are configured.
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.Installation'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve installation facts and process settings
-      tags:
-        - Core Administration
-  /core/v1/metrics:
-    get:
-      description: Core key only. Complete UTC buckets; unknown measurements are null. Samples are process-local and are not backfilled after a restart.
-      parameters:
-        - schema:
-            type: string
-            enum:
-              - 1h
-              - 6h
-              - 24h
-              - 7d
-          description: Time range (default 1h)
-          in: query
-          name: range
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/coremetrics.View'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve Core operational metrics
-      tags:
-        - Core Administration
-  /core/v1/projects:
-    get:
-      parameters:
-        - schema:
-            type: string
-          description: Project ID cursor
-          in: query
-          name: after
-        - schema:
-            type: integer
-          description: Page size (1-100)
-          in: query
-          name: limit
-        - schema:
-            type: string
-          description: asc or desc by Project ID
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.ProjectPage'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List Projects and active key counts
-      tags:
-        - Administrator Projects
-    post:
-      responses:
-        '201':
-          description: Created
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.Project'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Create an empty independent Project
-      tags:
-        - Administrator Projects
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/api.ProjectRequest'
-        description: Project display name
-        required: true
-  /core/v1/projects/{project_id}:
-    post:
-      parameters:
-        - schema:
-            type: string
-          description: Project UUID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.Project'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Rename a Project
-      tags:
-        - Administrator Projects
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/api.ProjectRequest'
-        description: Project display name
-        required: true
-  /core/v1/projects/{project_id}/agents:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Last Agent ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            minimum: 0
-          description: Page size; 0 is treated as 1 and values above 100 as 100
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SavedAgentList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List reusable Agents in a Project
-      tags:
-        - Agents
-  /core/v1/projects/{project_id}/agents/{agent_id}:
-    delete:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Agent ID
-          in: path
-          name: agent_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.AgentDeleted'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Delete a reusable Agent in a Project
-      tags:
-        - Agents
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Agent ID
-          in: path
-          name: agent_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SavedAgent'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve a reusable Agent in a Project
-      tags:
-        - Agents
-  /core/v1/projects/{project_id}/archive:
-    post:
-      parameters:
-        - schema:
-            type: string
-          description: Project UUID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.Project'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Archive a Project and revoke all its keys while retaining assets
-      tags:
-        - Administrator Projects
-  /core/v1/projects/{project_id}/environment-templates:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Previous Template ID
-          in: query
-          name: after
-        - schema:
-            type: integer
-            minimum: 0
-          description: Page size; 0 is treated as 1 and values above 100 as 100
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.EnvironmentTemplateList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List Environment Templates in a Project
-      tags:
-        - Environment Templates
-  /core/v1/projects/{project_id}/environment-templates/{environment_template_id}:
-    delete:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Template ID
-          in: path
-          name: environment_template_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.EnvironmentTemplateDeleted'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Delete an Environment Template in a Project
-      tags:
-        - Environment Templates
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Template ID
-          in: path
-          name: environment_template_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.EnvironmentTemplate'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve an Environment Template in a Project
-      tags:
-        - Environment Templates
-  /core/v1/projects/{project_id}/environments/{environment_id}/executor-credentials:
-    get:
-      description: Core key only. Returns metadata of the credentials restricted to this Environment, oldest first; secrets are never listed. Connection combines current credential authority and an open matching gateway peer; timestamps are historical observations, not readiness. Without a gateway it is never connected. The Environment must be a self_hosted Environment of the Project whose Session exists; otherwise 404.
-      parameters:
-        - schema:
-            type: string
-          description: Project UUID
-          in: path
-          name: project_id
-          required: true
-        - schema:
-            type: string
-          description: Environment UUID
-          in: path
-          name: environment_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.ExecutorCredentialList'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List a self_hosted Environment's executor credentials
-      tags:
-        - Executor Credentials
-    post:
-      description: Core key only. Returns a connect-only secret once, restricted to daemon enrollment and connection for this Environment, with the Project's principal as its execution principal. Repeating an issuance key_id returns 409 executor_credential_exists; after an uncertain response, list the credentials and rotate that key_id explicitly. Rotation keeps the key's Environment, invalidates the old secret and restores a revoked key; rotating an unknown key_id returns 404. In an archived Project, issuance and rotation return 409 project_archived. The Environment must be a self_hosted Environment of the Project whose Session exists; otherwise 404. Each write records an administrator audit entry without the secret.
-      parameters:
-        - schema:
-            type: string
-          description: Project UUID
-          in: path
-          name: project_id
-          required: true
-        - schema:
-            type: string
-          description: Environment UUID
-          in: path
-          name: environment_id
-          required: true
-      responses:
-        '201':
-          description: Created
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.IssuedExecutorCredential'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Issue or explicitly rotate a self_hosted Environment executor credential
-      tags:
-        - Executor Credentials
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/api.EnvironmentExecutorCredentialRequest'
-        description: Request
-        required: true
-  /core/v1/projects/{project_id}/environments/{environment_id}/executor-credentials/{key_id}:
-    delete:
-      description: Core key only. Revokes one credential restricted to this Environment; repeated revocation is safe and it also works in an archived Project. Revocation denies future enrollment and connection but does not stop executor-owned compute. The Environment must be a self_hosted Environment of the Project whose Session exists; otherwise 404.
-      parameters:
-        - schema:
-            type: string
-          description: Project UUID
-          in: path
-          name: project_id
-          required: true
-        - schema:
-            type: string
-          description: Environment UUID
-          in: path
-          name: environment_id
-          required: true
-        - schema:
-            type: string
-          description: Executor key UUID
-          in: path
-          name: key_id
-          required: true
-      responses:
-        '204':
-          description: No Content
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Revoke a self_hosted Environment executor credential
-      tags:
-        - Executor Credentials
-  /core/v1/projects/{project_id}/environments/{environment_id}/installation:
-    get:
-      description: Core key only. The commands contain a 30-minute installation authorization, never an executor secret. Web displays these same commands provided in public Session creation and detail responses.
-      parameters:
-        - schema:
-            type: string
-          description: Project UUID
-          in: path
-          name: project_id
-          required: true
-        - schema:
-            type: string
-          description: Environment UUID
-          in: path
-          name: environment_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.EnvironmentInstallation'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Get a self_hosted Session's installation commands
-      tags:
-        - Native Installation
-  /core/v1/projects/{project_id}/files:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Last File ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            maximum: 10000
-            minimum: 1
-          description: Maximum page size, 1–10000
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-          description: Only return Files with this purpose
-          in: query
-          name: purpose
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SourceFileList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List source files in a Project
-      tags:
-        - Files
-  /core/v1/projects/{project_id}/files/{file_id}:
-    delete:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Source file ID
-          in: path
-          name: file_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SourceFileDeleted'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Delete a source file in a Project
-      tags:
-        - Files
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Source file ID
-          in: path
-          name: file_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SourceFile'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve source file metadata in a Project
-      tags:
-        - Files
-  /core/v1/projects/{project_id}/keys:
-    get:
-      parameters:
-        - schema:
-            type: string
-          description: Project UUID
-          in: path
-          name: project_id
-          required: true
-        - schema:
-            type: string
-          description: Key ID cursor
-          in: query
-          name: after
-        - schema:
-            type: integer
-          description: Page size (1-100)
-          in: query
-          name: limit
-        - schema:
-            type: string
-          description: asc or desc by key ID
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.ProjectAPIKeyPage'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List safe key metadata for a Project
-      tags:
-        - Administrator Projects
-    post:
-      parameters:
-        - schema:
-            type: string
-          description: Project UUID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '201':
-          description: Created
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.IssuedProjectAPIKey'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Issue an independent secret in an existing Project
-      tags:
-        - Administrator Projects
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/api.ProjectAPIKeyRequest'
-        description: Key display name
-        required: true
-  /core/v1/projects/{project_id}/keys/{key_id}:
-    delete:
-      parameters:
-        - schema:
-            type: string
-          description: Project UUID
-          in: path
-          name: project_id
-          required: true
-        - schema:
-            type: string
-          description: API key UUID
-          in: path
-          name: key_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.SandboxMutationResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Revoke one Project key while retaining shared assets
-      tags:
-        - Administrator Projects
-  /core/v1/projects/{project_id}/resource-owners:
-    get:
-      description: Core key only. The Project ID path selects its space. Returns null for resources without recorded creation provenance, including historical and foreign resources. No key secret is returned.
-      parameters:
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-        - schema:
-            type: string
-          description: Resource type
-          in: query
-          name: resource_type
-          required: true
-        - schema:
-            type: string
-          description: Comma-separated public resource IDs, maximum 100
-          in: query
-          name: resource_ids
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.ResourceOwnerList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Batch lookup resource creation keys
-      tags:
-        - Write Audit
-  /core/v1/projects/{project_id}/sessions:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Root Agent ID whose Sessions to return
-          in: query
-          name: agent_id
-        - schema:
-            type: string
-          description: Last Session ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            minimum: 0
-          description: Page size; 0 is treated as 1 and values above 100 as 100
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SessionList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List execution Sessions in a Project
-      tags:
-        - Sessions
-  /core/v1/projects/{project_id}/sessions/{session_id}:
-    delete:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SessionDeleted'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Delete an execution Session in a Project
-      tags:
-        - Sessions
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Session'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve an execution Session in a Project
-      tags:
-        - Sessions
-  /core/v1/projects/{project_id}/sessions/{session_id}/archive:
-    get:
-      description: Core key only. Reports actual resource disposition, including expiry and failure cleanup. This is not archive provenance and does not assert active Turn settlement. Read this after an uncertain archive response; never infer released from a missing sandbox alone.
-      parameters:
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.ManagedSessionArchive'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve a managed Session's resource cleanup state
-      tags:
-        - Core Administration
-    post:
-      description: Core key only. Requires the current deployment generation; no maintenance mode is required. Permanently closes execution, requests cancellation and releases sandbox/snapshots through existing cleanup. Session history and persisted files/artifacts remain; unpersisted workspace contents are lost. A cleanup_pending response is not proof of resource release. Does not affect caller-managed Runtime.
-      parameters:
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.ManagedSessionArchive'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Release a managed Session's execution resources while retaining history
-      tags:
-        - Core Administration
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/api.AdminSessionArchiveRequest'
-        description: Current deployment generation
-        required: true
-  /core/v1/projects/{project_id}/sessions/{session_id}/artifacts:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Producing Environment ID; an unknown or malformed ID returns an empty page
-          in: query
-          name: environment_id
-        - schema:
-            type: string
-          description: Last immutable artifact ID
-          in: query
-          name: after
-        - schema:
-            type: integer
-            maximum: 100
-            minimum: 1
-          description: Page size
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Publication order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SessionArtifactList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List immutable Session artifacts in a Project
-      tags:
-        - Artifacts
-  /core/v1/projects/{project_id}/sessions/{session_id}/artifacts/{artifact_id}:
-    delete:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Artifact ID
-          in: path
-          name: artifact_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SessionArtifactDeleted'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Delete a published artifact in a Project
-      tags:
-        - Artifacts
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Artifact ID
-          in: path
-          name: artifact_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SessionArtifact'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve immutable artifact metadata in a Project
-      tags:
-        - Artifacts
-  /core/v1/projects/{project_id}/sessions/{session_id}/artifacts/{artifact_id}/content:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Artifact ID
-          in: path
-          name: artifact_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/octet-stream:
-              schema:
-                type: string
-                format: binary
-        '400':
-          description: Bad Request
-          content:
-            application/octet-stream:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/octet-stream:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/octet-stream:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/octet-stream:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/octet-stream:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Download immutable artifact bytes in a Project
-      tags:
-        - Artifacts
-  /core/v1/projects/{project_id}/sessions/{session_id}/diagnostics:
-    get:
-      description: Core key only. Safe failure categories from one committed snapshot; no native text or historical inference.
-      parameters:
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.SessionDiagnostics'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve root Session diagnostics
-      tags:
-        - Sessions
-  /core/v1/projects/{project_id}/sessions/{session_id}/execution-configuration:
-    get:
-      description: Core key only; the Project ID selects the target space and does not authenticate. Returns the committed model, harness and safe provider selection with recorded sources. This read never decrypts credentials, resolves current defaults or probes execution health. Deployment defaults frozen after they moved into Core show their safe view; older deployment selections remain redacted. Historical provenance and missing provider projections are explicitly unknown/unavailable.
-      parameters:
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SessionExecutionConfiguration'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve a Session's frozen execution configuration in a Project
-      tags:
-        - Execution configuration
-  /core/v1/projects/{project_id}/sessions/{session_id}/items:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Last Item ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            minimum: 0
-          description: Page size; 0 is treated as 1 and values above 100 as 100
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ItemList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List persisted execution Items in a Project
-      tags:
-        - Items
-  /core/v1/projects/{project_id}/sessions/{session_id}/runtime-history:
-    get:
-      description: Core key only; the Project ID selects the target space and does not authenticate. Returns stored Runtime observations for one Session. End is exclusive; the server selects a bounded resolution. Responses contain at most 1,000 series, 10,000 points per coverage/series array, and 100,000 total coverage plus series points. It never reads or changes live compute.
-      parameters:
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: integer
-            maximum: 9007199254740991
-            minimum: 0
-          description: Inclusive Unix-second start
-          in: query
-          name: start
-          required: true
-        - schema:
-            type: integer
-            maximum: 9007199254740991
-            minimum: 1
-          description: Exclusive Unix-second end
-          in: query
-          name: end
-          required: true
-        - schema:
-            type: integer
-            maximum: 10000
-            minimum: 2
-          description: Maximum points per series; defaults to the lower of 120 and the advertised service maximum
-          in: query
-          name: max_points
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.RuntimeHistory'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve Session Runtime history in a Project
-      tags:
-        - Runtime history
-  /core/v1/projects/{project_id}/sessions/{session_id}/runtime-observation:
-    get:
-      description: Core key only; the Project ID selects the target space and does not authenticate. Returns one read-only current Runtime observation. It never provisions, renews, restarts, pauses or stops compute.
-      parameters:
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.RuntimeObservation'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve a Session Runtime observation in a Project
-      tags:
-        - Runtime observations
-  /core/v1/projects/{project_id}/sessions/{session_id}/turns:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Last Turn ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            maximum: 100
-            minimum: 1
-          description: Page size
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.TurnList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List execution Turns in a Project
-      tags:
-        - Turns
-  /core/v1/projects/{project_id}/sessions/{session_id}/turns/{turn_id}:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Turn ID
-          in: path
-          name: turn_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Turn'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve an execution Turn in a Project
-      tags:
-        - Turns
-  /core/v1/projects/{project_id}/sessions/{session_id}/turns/{turn_id}/diagnostics:
-    get:
-      description: Core key only. At most 1000 root Item receipt timings in public Item order. Receipt intervals are not native execution durations.
-      parameters:
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Root Turn ID
-          in: path
-          name: turn_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.TurnDiagnostics'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve root Turn diagnostics
-      tags:
-        - Turns
-  /core/v1/projects/{project_id}/skills:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Skill resource cursor
-          in: query
-          name: after
-        - schema:
-            type: integer
-            maximum: 100
-            minimum: 0
-          description: Page size; 0 returns an empty page
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SkillList'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List Skills in a Project
-      tags:
-        - Skills
-  /core/v1/projects/{project_id}/skills/{skill_id}:
-    delete:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SkillDeleted'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Delete a Skill and its versions in a Project
-      tags:
-        - Skills
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Skill'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve Skill metadata in a Project
-      tags:
-        - Skills
-  /core/v1/projects/{project_id}/skills/{skill_id}/content:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/octet-stream:
-              schema:
-                type: string
-                format: binary
-      security:
-        - DeploymentAdminAuth: []
-      summary: Download Skill content in a Project
-      tags:
-        - Skills
-  /core/v1/projects/{project_id}/skills/{skill_id}/versions:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-        - schema:
-            type: string
-          description: Version resource cursor
-          in: query
-          name: after
-        - schema:
-            type: integer
-            maximum: 100
-            minimum: 0
-          description: Page size; 0 returns an empty page
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Version order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SkillVersionList'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List Skill versions in a Project
-      tags:
-        - Skills
-  /core/v1/projects/{project_id}/skills/{skill_id}/versions/{version}:
-    delete:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-        - schema:
-            type: string
-          description: Concrete version number
-          in: path
-          name: version
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SkillVersionDeleted'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Delete a Skill version in a Project
-      tags:
-        - Skills
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-        - schema:
-            type: string
-          description: Concrete version number
-          in: path
-          name: version
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SkillVersion'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve Skill version metadata in a Project
-      tags:
-        - Skills
-  /core/v1/projects/{project_id}/skills/{skill_id}/versions/{version}/content:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-        - schema:
-            type: string
-          description: Concrete version number
-          in: path
-          name: version
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/octet-stream:
-              schema:
-                type: string
-                format: binary
-      security:
-        - DeploymentAdminAuth: []
-      summary: Download immutable Skill version content in a Project
-      tags:
-        - Skills
-  /core/v1/projects/{project_id}/vaults:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Last Vault ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-          description: Requested page size, clamped to 1–100
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-            enum:
-              - active
-              - archived
-          description: Scalar status filter
-          in: query
-          name: status
-        - schema:
-            type: array
-            items:
-              enum:
-                - active
-                - archived
-              type: string
-          style: form
-          explode: true
-          description: Array status filter; combined with status as a union
-          in: query
-          name: status[]
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.VaultList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List Vaults in a Project
-      tags:
-        - Vaults
-  /core/v1/projects/{project_id}/vaults/{vault_id}:
-    delete:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Vault ID
-          in: path
-          name: vault_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.VaultDeleted'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Delete a Vault and all its Credentials in a Project
-      tags:
-        - Vaults
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Vault ID
-          in: path
-          name: vault_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Vault'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve a Vault in a Project
-      tags:
-        - Vaults
-  /core/v1/projects/{project_id}/vaults/{vault_id}/credentials:
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Vault ID
-          in: path
-          name: vault_id
-          required: true
-        - schema:
-            type: string
-          description: Last Credential ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-          description: Requested page size, clamped to 1–100
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-            enum:
-              - active
-              - archived
-          description: Scalar status filter
-          in: query
-          name: status
-        - schema:
-            type: array
-            items:
-              enum:
-                - active
-                - archived
-              type: string
-          style: form
-          explode: true
-          description: Array status filter; combined with status as a union
-          in: query
-          name: status[]
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.CredentialList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List safe Vault Credential metadata in a Project
-      tags:
-        - Credentials
-  /core/v1/projects/{project_id}/vaults/{vault_id}/credentials/{credential_id}:
-    delete:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Vault ID
-          in: path
-          name: vault_id
-          required: true
-        - schema:
-            type: string
-          description: Credential ID
-          in: path
-          name: credential_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.CredentialDeleted'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Delete a Vault Credential in a Project
-      tags:
-        - Credentials
-    get:
-      description: Core key only. Reuses the public resource projection and operation rules; the Project ID selects the target space and does not authenticate.
-      parameters:
-        - schema:
-            type: string
-          description: Vault ID
-          in: path
-          name: vault_id
-          required: true
-        - schema:
-            type: string
-          description: Credential ID
-          in: path
-          name: credential_id
-          required: true
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Credential'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve safe Vault Credential metadata in a Project
-      tags:
-        - Credentials
-  /core/v1/projects/{project_id}/write-operations:
-    get:
-      description: Core key only. Reverse chronological keyset pagination over committed writes. Creation records remain; other records follow configured retention. The key path selects its independent space, never a caller-supplied tenant.
-      parameters:
-        - schema:
-            type: string
-          description: Project ID
-          in: path
-          name: project_id
-          required: true
-        - schema:
-            type: string
-          description: Recorded creator key ID
-          in: query
-          name: key_id
-        - schema:
-            type: string
-          description: Resource type
-          in: query
-          name: resource_type
-        - schema:
-            type: string
-          description: Public resource ID
-          in: query
-          name: resource_id
-        - schema:
-            type: string
-          description: Inclusive RFC3339 timestamp
-          in: query
-          name: created_after
-        - schema:
-            type: string
-          description: Exclusive RFC3339 timestamp
-          in: query
-          name: created_before
-        - schema:
-            type: integer
-          description: Page size, 1-100, default 50
-          in: query
-          name: limit
-        - schema:
-            type: string
-          description: Opaque next_cursor from the preceding page
-          in: query
-          name: after
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.WriteOperationPage'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Query API-key write operations
-      tags:
-        - Write Audit
-  /core/v1/sandbox/deployment:
-    get:
-      description: Core key only. Does not grant project resource access. Responses contain only explicit safe fields. E2B template_build values are those Core read when the selection was saved; this read does not call E2B.
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.RuntimeDeploymentView'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve sandbox deployment
-      tags:
-        - Sandbox Manager
-    post:
-      description: Selects a provider, enforced resource limits and pinned Runtime release. Core derives the deployment's core_url from the installation public URL and rejects a core_url member with 400. E2B returns 409 sandbox_configuration_error while the public URL is loopback. E2B credentials are write-only. E2B may omit resources to adopt the validated template build's CPU and memory, returned in specification.resources. Requires explicit expected_generation, including zero at first setup. Stale retries reject before provider validation. An identical selection at the current generation is a no-op; differing selections and file-managed deployments reject. This does not create compute or execute work.
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.RuntimeDeploymentView'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Initialize the deployment sandbox provider
-      tags:
-        - Sandbox Manager
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/api.SandboxDeploymentInput'
-        description: Deployment selection
-        required: true
-    put:
-      description: 'Requires the observed generation, the same backend type and no active reset. E2B same-team changes apply online: allocations retain immutable generation and current credentials; omitted api_key preserves it, explicit submission including the same key verifies and advances generation. Other teams require explicit reset. Node providers retain the zero-resource guard and retire old nodes/tokens on change. Core rejects core_url input. Never automatically replay an uncertain write; rollout.state is the authoritative preparation polling signal.'
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.RuntimeDeploymentView'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Change the sandbox deployment configuration
-      tags:
-        - Sandbox Manager
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/api.SandboxDeploymentChangeInput'
-        description: Replacement deployment selection
-        required: true
-  /core/v1/sandbox/deployment/reset:
-    delete:
-      description: Restores admission but never restores Sessions already archived. With no reset running this is an idempotent read, provided the generation still matches.
-      parameters:
-        - schema:
-            type: integer
-          description: Current deployment generation
-          in: query
-          name: expected_generation
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.RuntimeDeploymentView'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Cancel a sandbox deployment reset
-      tags:
-        - Sandbox Manager
-    post:
-      description: Archives hosted Sessions and waits for confirmed provider cleanup, preserving history and Files/Artifacts. Auto waits for started or waiting Turns and file writes until the durable deadline; force cancels them. The same clear is idempotent; force escalates auto. Requires the current generation. Self-hosted Sessions are unchanged.
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.RuntimeDeploymentView'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Start or escalate a durable sandbox deployment reset
-      tags:
-        - Sandbox Manager
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/store.SandboxResetRequest'
-        description: Reset mode and current deployment generation
-        required: true
-  /core/v1/sandbox/e2b/templates:
-    post:
-      description: Core key only. Uses a transient E2B credential and endpoint through the pinned SDK helper; returns safe template metadata. Does not save the credential or allocate compute.
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.SandboxE2BDiscoveryResult'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List templates visible to an E2B credential
-      tags:
-        - Sandbox Manager
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/api.SandboxE2BDiscoveryInput'
-        description: Transient E2B connection
-        required: true
-  /core/v1/sandbox/e2b/templates/{template_id}/builds:
-    post:
-      description: Core key only. Reads one template through the pinned SDK helper with a transient E2B credential. Returns ready builds only, without allocating compute.
-      parameters:
-        - schema:
-            type: string
-          description: Template ID
-          in: path
-          name: template_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.SandboxE2BDiscoveryResult'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List ready builds for an E2B template
-      tags:
-        - Sandbox Manager
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/api.SandboxE2BDiscoveryInput'
-        description: Transient E2B connection
-        required: true
-  /core/v1/sandbox/enrollment-tokens:
-    post:
-      description: Core key only. Does not grant project resource access. Responses contain only explicit safe fields.
-      responses:
-        '201':
-          description: Created
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.SandboxEnrollmentToken'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Create a ten-minute one-use node enrollment token
-      tags:
-        - Sandbox Manager
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/api.SandboxEnrollmentTokenRequest'
-        description: Request
-        required: true
-  /core/v1/sandbox/nodes:
-    get:
-      description: Core key only. Does not grant project resource access. Responses contain only explicit safe fields.
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.SandboxNodeList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List deployment sandbox nodes
-      tags:
-        - Sandbox Manager
-  /core/v1/sandbox/nodes/{node_id}:
-    delete:
-      description: Core key only. Does not grant project resource access. Responses contain only explicit safe fields.
-      parameters:
-        - schema:
-            type: string
-          description: Sandbox node UUID
-          in: path
-          name: node_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.SandboxMutationResponse'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Remove a sandbox node with no retained resources
-      tags:
-        - Sandbox Manager
-    get:
-      description: Core key only. Complete UTC buckets. Missing host measurements and offline history are null; reads never sample or backfill.
-      parameters:
-        - schema:
-            type: string
-          description: Sandbox node UUID
-          in: path
-          name: node_id
-          required: true
-        - schema:
-            type: string
-            enum:
-              - 1h
-              - 6h
-              - 24h
-          description: Time range (default 1h)
-          in: query
-          name: range
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.RuntimeNodeDetail'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Retrieve sandbox node and host history
-      tags:
-        - Sandbox Manager
-    patch:
-      description: Core key only. Does not grant project resource access. Responses contain only explicit safe fields.
-      parameters:
-        - schema:
-            type: string
-          description: Sandbox node UUID
-          in: path
-          name: node_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.SandboxMutationResponse'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Update sandbox node name and capacity
-      tags:
-        - Sandbox Manager
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/store.RuntimeNodeUpdate'
-        description: Request
-        required: true
-  /core/v1/sandbox/nodes/{node_id}/allocations:
-    get:
-      description: Core key only. Does not grant project resource access. Responses contain only explicit safe fields.
-      parameters:
-        - schema:
-            type: string
-          description: Sandbox node UUID
-          in: path
-          name: node_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.SandboxAllocationList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List retained allocations on a sandbox node
-      tags:
-        - Sandbox Manager
-  /core/v1/sandbox/runtime-observations:
-    get:
-      description: Core key only. Each observation is labelled with its owning Project ID. Uses the existing read-only Runtime sampler, with bounded concurrency and no execution or provisioning. A provider with a batch metrics read, such as E2B, samples the page's running sandboxes in one bounded request.
-      parameters:
-        - schema:
-            type: string
-          description: Last Session ID from the preceding page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            maximum: 100
-            minimum: 1
-          description: Page size
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Session creation order
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.AdminRuntimeObservationList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: List Runtime observations across managed Projects
-      tags:
-        - Core Administration
-  /core/v1/summary:
-    get:
-      description: Core key only. after/limit/order paginate Projects. Agent grouping returns groups within those spaces. Date bounds filter Session creation, not current asset counts. Usage sums only non-null public Session usage; coverage includes every selected Session. Each Project is read in a consistent database snapshot. Totals are not billing records.
-      parameters:
-        - schema:
-            type: string
-          description: One API Project
-          in: query
-          name: project_id
-        - schema:
-            type: string
-            enum:
-              - project
-              - agent
-              - key
-          description: Grouping
-          in: query
-          name: group_by
-        - schema:
-            type: string
-          description: Inclusive RFC3339 Session creation time
-          in: query
-          name: created_after
-        - schema:
-            type: string
-          description: Exclusive RFC3339 Session creation time
-          in: query
-          name: created_before
-        - schema:
-            type: string
-          description: Last Project ID in preceding page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            maximum: 100
-            minimum: 1
-          description: Number of Projects
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Project order
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.AdminSummaryResponse'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      security:
-        - DeploymentAdminAuth: []
-      summary: Summarize resource counts and Session usage by Project, Agent or creator key
-      tags:
-        - Core Administration
-schemes:
-  - http
-  - https
-openapi: 3.1.0
-servers:
-  - url: https://core-direct.example.com
-    description: 'Operator-script placeholder: replace with the Core loopback origin, not the public Web entry.'
-components:
-  schemas:
-    api.AdminRuntimeObservation:
-      properties:
-        observation:
-          $ref: '#/components/schemas/api.AdminRuntimeObservationDetail'
-        project_id:
-          type: string
-      type: object
-    api.AdminRuntimeObservationDetail:
-      properties:
-        allocation_created_at:
-          anyOf:
-            - minimum: 0
-              type: integer
-            - type: 'null'
-        cpu:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.RuntimeCPUObservation'
-            - type: 'null'
-        disk:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/api.RuntimeDiskObservation'
-            - type: 'null'
-          description: |-
-            Current Runtime disk usage and capacity. E2B reports them; Docker and
-            microsandbox observations return null.
-        environment_id:
-          anyOf:
-            - format: uuid
-              type: string
-            - type: 'null'
-        id:
-          format: uuid
-          type: string
-        instance:
-          $ref: '#/components/schemas/v1.RuntimeInstance'
-        lifecycle_state:
-          anyOf:
-            - enum:
-                - active
-                - sleeping
-                - transitioning
-                - pending
-                - stopped
-              type: string
-            - type: 'null'
-        memory:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.RuntimeMemoryObservation'
-            - type: 'null'
-        mode:
-          enum:
-            - none
-            - self_hosted
-            - openai_hosted
-          type: string
-        object:
-          enum:
-            - agent.runtime_observation
-          type: string
-        observed_at:
-          anyOf:
-            - minimum: 0
-              type: integer
-            - type: 'null'
-        provider_type:
-          anyOf:
-            - type: string
-            - type: 'null'
-        reason:
-          anyOf:
-            - enum:
-                - runtime_mode_not_observable
-                - allocation_pending
-                - runtime_not_running
-                - source_not_configured
-                - sample_timeout
-                - sample_unavailable
-              type: string
-            - type: 'null'
-        resolved_at:
-          minimum: 0
-          type: integer
-        session_id:
-          format: uuid
-          type: string
-        started_at:
-          anyOf:
-            - minimum: 0
-              type: integer
-            - type: 'null'
-        status:
-          enum:
-            - observed
-            - unsupported
-            - unavailable
-          type: string
-      required:
-        - allocation_created_at
-        - cpu
-        - disk
-        - environment_id
-        - id
-        - instance
-        - lifecycle_state
-        - memory
-        - mode
-        - object
-        - observed_at
-        - provider_type
-        - reason
-        - resolved_at
-        - session_id
-        - started_at
-        - status
-      type: object
-    api.AdminRuntimeObservationList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/api.AdminRuntimeObservation'
-          type: array
-        first_id:
-          type: string
-        has_more:
-          type: boolean
-        last_id:
-          type: string
-        object:
-          type: string
-      type: object
-    api.AdminSessionArchiveRequest:
-      properties:
-        expected_generation:
-          type: integer
-      type: object
-    api.AdminSessionCounts:
-      properties:
-        failed:
-          type: integer
-        idle:
-          type: integer
-        in_progress:
-          type: integer
-        requires_action:
-          type: integer
-        total:
-          type: integer
-      type: object
-    api.AdminSummaryResponse:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/api.AdminSummaryRow'
-          type: array
-        has_more:
-          type: boolean
-        next_cursor:
-          type: string
-      type: object
-    api.AdminSummaryRow:
-      properties:
-        agent_id:
-          type: string
-        assets:
-          $ref: '#/components/schemas/store.AdminAssetCounts'
-        coverage:
-          $ref: '#/components/schemas/api.AdminUsageCoverage'
-        key_id:
-          type: string
-        last_active_at:
-          type: integer
-        project_id:
-          type: string
-        sessions:
-          $ref: '#/components/schemas/api.AdminSessionCounts'
-        usage:
-          $ref: '#/components/schemas/v1.TokenUsage'
-      type: object
-    api.AdminUsageCoverage:
-      properties:
-        measured_sessions:
-          type: integer
-        ratio:
-          type: number
-        total_sessions:
-          type: integer
-      type: object
-    api.CoreAPIError:
-      properties:
-        code:
-          anyOf:
-            - type: string
-            - type: 'null'
-        details:
-          description: |-
-            Details contains only documented, Core-owned facts: string, finite number,
-            boolean, null or string array values. Never include request echoes, secrets
-            or native/provider error text. Empty or invalid details are omitted.
-          type: object
-        message:
-          type: string
-        param:
-          anyOf:
-            - type: string
-            - type: 'null'
-        type:
-          type: string
-      required:
-        - message
-        - type
-      type: object
-    api.CoreErrorResponse:
-      properties:
-        error:
-          $ref: '#/components/schemas/api.CoreAPIError'
-      required:
-        - error
-      type: object
-    api.CoreHarness:
-      properties:
-        default:
-          type: boolean
-        enabled:
-          type: boolean
-        id:
-          enum:
-            - claude_sdk
-            - codex
-            - mcode
-          type: string
-        model_configuration:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/api.HarnessModelConfiguration'
-            - type: 'null'
-        model_configuration_support:
-          $ref: '#/components/schemas/v1.ModelConfigurationSupport'
-        object:
-          enum:
-            - core.harness
-          type: string
-      required:
-        - default
-        - enabled
-        - id
-        - model_configuration
-        - model_configuration_support
-        - object
-      type: object
-    api.CoreHarnessList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/api.CoreHarness'
-          type: array
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - object
-      type: object
-    api.DiagnosticFailure:
-      properties:
-        code:
-          enum:
-            - harness_error
-            - model_provider_required
-            - runtime_unavailable
-            - runtime_disconnected
-            - runtime_preparation_failed
-            - execution_interrupted
-            - delivery_unconfirmed
-            - input_rejected
-            - executor_protocol_error
-            - core_storage_failed
-            - internal_error
-            - environment_connection_timeout
-            - environment_unavailable
-            - environment_provisioning_failed
-            - authentication_error
-            - rate_limit_exceeded
-            - usage_limit_exceeded
-            - server_overloaded
-            - server_error
-            - invalid_request
-            - resource_not_found
-            - request_timeout
-            - context_length_exceeded
-            - cyber_policy
-            - connection_failed
-          type: string
-        failed_at:
-          anyOf:
-            - type: string
-            - type: 'null'
-        params:
-          type: object
-      type: object
-    api.EnvironmentExecutorCredentialRequest:
-      properties:
-        key_id:
-          format: uuid
-          type: string
-        rotate:
-          type: boolean
-      type: object
-    api.ExecutorConnection:
-      properties:
-        bound_key_id:
-          anyOf:
-            - format: uuid
-              type: string
-            - type: 'null'
-        enrolled_at:
-          anyOf:
-            - format: date-time
-              type: string
-            - type: 'null'
-        last_seen_at:
-          anyOf:
-            - format: date-time
-              type: string
-            - type: 'null'
-        status:
-          enum:
-            - never_enrolled
-            - connected
-            - disconnected
-          type: string
-      required:
-        - bound_key_id
-        - enrolled_at
-        - last_seen_at
-        - status
-      type: object
-    api.ExecutorCredentialList:
-      properties:
-        connection:
-          $ref: '#/components/schemas/api.ExecutorConnection'
-        data:
-          items:
-            $ref: '#/components/schemas/store.ExecutorCredential'
-          type: array
-      required:
-        - connection
-        - data
-      type: object
-    api.HarnessModelConfiguration:
-      properties:
-        harness:
-          enum:
-            - claude_sdk
-            - codex
-            - mcode
-          type: string
-        harness_config:
-          type: object
-        last_error_at:
-          anyOf:
-            - format: date-time
-              type: string
-            - type: 'null'
-        last_error_code:
-          anyOf:
-            - enum:
-                - authentication_error
-                - connection_failed
-                - rate_limit_exceeded
-                - usage_limit_exceeded
-                - server_overloaded
-                - server_error
-                - resource_not_found
-                - request_timeout
-                - invalid_request
-              type: string
-            - type: 'null'
-        last_used_at:
-          anyOf:
-            - format: date-time
-              type: string
-            - type: 'null'
-        model:
-          type: string
-        model_provider:
-          $ref: '#/components/schemas/v1.ModelProviderView'
-        object:
-          enum:
-            - core.model_configuration
-          type: string
-        updated_at:
-          type: string
-      required:
-        - harness
-        - harness_config
-        - last_error_at
-        - last_error_code
-        - last_used_at
-        - model
-        - model_provider
-        - object
-        - updated_at
-      type: object
-    api.Installation:
-      properties:
-        address_bindings:
-          $ref: '#/components/schemas/store.AddressBindings'
-        api_base_url:
-          anyOf:
-            - type: string
-            - type: 'null'
-          description: public_url followed by /v1; null when public_url is null.
-        configuration:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/api.InstallationConfiguration'
-            - type: 'null'
-          description: The installer's settings snapshot (OAC_SETTINGS_FILE); null when the installer did not start Core.
-        installation_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-          description: OAC_INSTALLATION_ID; null when Core runs without the sandbox manager.
-        local_only:
-          description: True when public_url names a loopback host, reachable only from the Core host.
-          type: boolean
-        object:
-          enum:
-            - core.installation
-          type: string
-        public_url:
-          anyOf:
-            - type: string
-            - type: 'null'
-          description: 'OAC_PUBLIC_URL: the origin applications, nodes, sandboxes and self-hosted executors use. Null when unset.'
-        source_commit:
-          anyOf:
-            - type: string
-            - type: 'null'
-          description: Full source commit Core was built from; null for development builds.
-      type: object
-    api.InstallationConfiguration:
-      properties:
-        applied_at:
-          type: string
-        apply_command:
-          description: Command that applies config.json changes.
-          type: string
-        path:
-          description: Absolute host path of the installation's config.json.
-          type: string
-        settings:
-          items:
-            $ref: '#/components/schemas/api.InstallationSetting'
-          type: array
-      type: object
-    api.InstallationSetting:
-      properties:
-        changeable:
-          description: False for settings fixed at installation.
-          type: boolean
-        configured:
-          description: 'Present only for a sensitive setting: whether it has a value.'
-          type: boolean
-        default:
-          anyOf:
-            - {}
-            - type: 'null'
-        key:
-          description: Dotted config.json key, such as ports.core.
-          type: string
-        restarts:
-          description: Services that restart when the setting changes.
-          items:
-            type: string
-          type: array
-        sensitive:
-          type: boolean
-        value:
-          anyOf:
-            - {}
-            - type: 'null'
-          description: Applied value; always null for a sensitive setting.
-      type: object
-    api.ItemDiagnosticTiming:
-      properties:
-        completed_at:
-          anyOf:
-            - type: string
-            - type: 'null'
-        item_id:
-          type: string
-        observed_duration_ms:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        started_at:
-          type: string
-      type: object
-    api.ProjectAPIKeyRequest:
-      properties:
-        name:
-          type: string
-      type: object
-    api.ProjectRequest:
-      properties:
-        name:
-          type: string
-      type: object
-    api.ResourceOwnerList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/store.ResourceOwner'
-          type: array
-      type: object
-    api.RuntimeDiskObservation:
-      properties:
-        limit_bytes:
-          anyOf:
-            - minimum: 1
-              type: integer
-            - type: 'null'
-        usage_bytes:
-          anyOf:
-            - minimum: 0
-              type: integer
-            - type: 'null'
-      required:
-        - limit_bytes
-        - usage_bytes
-      type: object
-    api.SandboxAllocationList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/store.RuntimeNodeAllocation'
-          type: array
-      type: object
-    api.SandboxDeploymentChangeInput:
-      properties:
-        e2b:
-          $ref: '#/components/schemas/api.SandboxE2BInput'
-        expected_generation:
-          type: integer
-        provider:
-          type: string
-        resources:
-          allOf:
-            - $ref: '#/components/schemas/sandbox.Resources'
-          description: |-
-            Per-sandbox limits, required for Docker and microsandbox. E2B may omit
-            them; Core then uses the validated template build's cpus and memory_mib.
-        runtime:
-          $ref: '#/components/schemas/sandbox.RuntimeRelease'
-      required:
-        - expected_generation
-      type: object
-    api.SandboxDeploymentInput:
-      properties:
-        e2b:
-          $ref: '#/components/schemas/api.SandboxE2BInput'
-        expected_generation:
-          type: integer
-        provider:
-          type: string
-        resources:
-          allOf:
-            - $ref: '#/components/schemas/sandbox.Resources'
-          description: |-
-            Per-sandbox limits, required for Docker and microsandbox. E2B may omit
-            them; Core then uses the validated template build's cpus and memory_mib.
-        runtime:
-          $ref: '#/components/schemas/sandbox.RuntimeRelease'
-      required:
-        - expected_generation
-      type: object
-    api.SandboxE2BDiscoveryInput:
-      properties:
-        api_key:
-          type: string
-        api_url:
-          type: string
-        domain:
-          type: string
-      type: object
-    api.SandboxE2BDiscoveryResult:
-      properties:
-        builds:
-          items:
-            $ref: '#/components/schemas/e2b.ReadyBuild'
-          type: array
-        templates:
-          items:
-            $ref: '#/components/schemas/e2b.TemplateSummary'
-          type: array
-      type: object
-    api.SandboxE2BInput:
-      properties:
-        api_key:
-          type: string
-        api_url:
-          type: string
-        domain:
-          type: string
-        template:
-          type: string
-      type: object
-    api.SandboxEnrollmentToken:
-      properties:
-        enrollment_id:
-          description: Public, non-secret handle of this command; never a credential. The node it registers reports the same value as enrollment_id.
-          type: string
-        expires_at:
-          type: string
-        token:
-          type: string
-      type: object
-    api.SandboxEnrollmentTokenRequest:
-      properties:
-        max_active:
-          type: integer
-        max_retained:
-          description: Docker never suspends, so Core replaces this with max_active; microsandbox uses both limits.
-          type: integer
-      type: object
-    api.SandboxMutationResponse:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        updated:
-          type: boolean
-      type: object
-    api.SandboxNodeList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/store.RuntimeNode'
-          type: array
-      type: object
-    api.SessionDiagnosticFailure:
-      properties:
-        code:
-          enum:
-            - harness_error
-            - model_provider_required
-            - runtime_unavailable
-            - runtime_disconnected
-            - runtime_preparation_failed
-            - execution_interrupted
-            - delivery_unconfirmed
-            - input_rejected
-            - executor_protocol_error
-            - core_storage_failed
-            - internal_error
-            - environment_connection_timeout
-            - environment_unavailable
-            - environment_provisioning_failed
-            - authentication_error
-            - rate_limit_exceeded
-            - usage_limit_exceeded
-            - server_overloaded
-            - server_error
-            - invalid_request
-            - resource_not_found
-            - request_timeout
-            - context_length_exceeded
-            - cyber_policy
-            - connection_failed
-          type: string
-        failed_at:
-          anyOf:
-            - type: string
-            - type: 'null'
-        params:
-          type: object
-        source:
-          enum:
-            - turn
-            - environment
-            - environment_input
-          type: string
-        turn_id:
-          type: string
-      type: object
-    api.SessionDiagnostics:
-      properties:
-        failure:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/api.SessionDiagnosticFailure'
-            - type: 'null'
-        object:
-          enum:
-            - core.session_diagnostics
-          type: string
-        session_id:
-          type: string
-        status:
-          enum:
-            - idle
-            - in_progress
-            - requires_action
-            - failed
-          type: string
-      type: object
-    api.TurnDiagnostics:
-      properties:
-        failure:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/api.DiagnosticFailure'
-            - type: 'null'
-        items:
-          items:
-            $ref: '#/components/schemas/api.ItemDiagnosticTiming'
-          type: array
-        items_truncated:
-          type: boolean
-        object:
-          enum:
-            - core.turn_diagnostics
-          type: string
-        session_id:
-          type: string
-        status:
-          type: string
-        turn_id:
-          type: string
-      type: object
-    coremetrics.Database:
-      properties:
-        ping_ms:
-          $ref: '#/components/schemas/coremetrics.Latency'
-        pool:
-          $ref: '#/components/schemas/coremetrics.Pool'
-        series:
-          items:
-            $ref: '#/components/schemas/coremetrics.DatabaseBucket'
-          type: array
-        size_bytes:
-          anyOf:
-            - type: integer
-            - type: 'null'
-      type: object
-    coremetrics.DatabaseBucket:
-      properties:
-        ping_p95_ms:
-          anyOf:
-            - type: number
-            - type: 'null'
-        pool_in_use:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        start:
-          type: string
-      type: object
-    coremetrics.Execution:
-      properties:
-        connected_daemons:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        in_progress_turns:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        interrupted:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        oldest_queued_seconds:
-          anyOf:
-            - type: number
-            - type: 'null'
-        queue_wait_ms:
-          $ref: '#/components/schemas/coremetrics.Latency'
-        queued_turns:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        series:
-          items:
-            $ref: '#/components/schemas/coremetrics.ExecutionBucket'
-          type: array
-        slots_in_use:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        slots_total:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        unavailable:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        waiting_for_daemon:
-          anyOf:
-            - type: integer
-            - type: 'null'
-      type: object
-    coremetrics.ExecutionBucket:
-      properties:
-        in_progress:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        queue_wait_p95_ms:
-          anyOf:
-            - type: number
-            - type: 'null'
-        queued:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        start:
-          type: string
-      type: object
-    coremetrics.Job:
-      properties:
-        failed:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        id:
-          type: string
-        last_run_at:
-          anyOf:
-            - type: string
-            - type: 'null'
-        processed:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        status:
-          type: string
-      type: object
-    coremetrics.Latency:
-      properties:
-        p50:
-          anyOf:
-            - type: number
-            - type: 'null'
-        p95:
-          anyOf:
-            - type: number
-            - type: 'null'
-      type: object
-    coremetrics.Pool:
-      properties:
-        idle:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        in_use:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        max:
-          anyOf:
-            - type: integer
-            - type: 'null'
-      type: object
-    coremetrics.Process:
-      properties:
-        cpu_cores:
-          anyOf:
-            - type: number
-            - type: 'null'
-        cpu_limit_cores:
-          anyOf:
-            - type: number
-            - type: 'null'
-        goroutines:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        memory_bytes:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        memory_limit_bytes:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        rss_bytes:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        series:
-          items:
-            $ref: '#/components/schemas/coremetrics.ProcessBucket'
-          type: array
-      type: object
-    coremetrics.ProcessBucket:
-      properties:
-        cpu_cores:
-          anyOf:
-            - type: number
-            - type: 'null'
-        rss_bytes:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        start:
-          type: string
-      type: object
-    coremetrics.Range:
-      properties:
-        end:
-          type: string
-        resolution_seconds:
-          type: integer
-        start:
-          type: string
-      type: object
-    coremetrics.ServiceState:
-      properties:
-        execution_owner:
-          anyOf:
-            - type: boolean
-            - type: 'null'
-        revision:
-          anyOf:
-            - type: string
-            - type: 'null'
-        started_at:
-          anyOf:
-            - type: string
-            - type: 'null'
-        status:
-          type: string
-      type: object
-    coremetrics.View:
-      properties:
-        database:
-          $ref: '#/components/schemas/coremetrics.Database'
-        execution:
-          $ref: '#/components/schemas/coremetrics.Execution'
-        jobs:
-          items:
-            $ref: '#/components/schemas/coremetrics.Job'
-          type: array
-        object:
-          type: string
-        process:
-          $ref: '#/components/schemas/coremetrics.Process'
-        range:
-          $ref: '#/components/schemas/coremetrics.Range'
-        service:
-          $ref: '#/components/schemas/coremetrics.ServiceState'
-      type: object
-    e2b.ReadyBuild:
-      properties:
-        cpus:
-          type: integer
-        id:
-          type: string
-        memory_mib:
-          type: integer
-      type: object
-    e2b.TemplateSummary:
-      properties:
-        id:
-          type: string
-        names:
-          items:
-            type: string
-          type: array
-      type: object
-    sandbox.DeploymentSpec:
-      properties:
-        resources:
-          $ref: '#/components/schemas/sandbox.Resources'
-        runtime:
-          $ref: '#/components/schemas/sandbox.RuntimeRelease'
-      type: object
-    sandbox.Resources:
-      properties:
-        cpus:
-          type: integer
-        environment_disk_mib:
-          type: integer
-        memory_mib:
-          type: integer
-        root_disk_mib:
-          type: integer
-      type: object
-    sandbox.RuntimeRelease:
-      properties:
-        firmware_sha256:
-          type: string
-        image_id:
-          type: string
-        image_manifest_digest:
-          type: string
-        microsandbox_ref:
-          type: string
-        runtime_sha256:
-          type: string
-        source_commit:
-          type: string
-      type: object
-    store.AddressBindings:
-      properties:
-        hosted_sandboxes:
-          type: integer
-        nodes:
-          type: integer
-        nodes_on_other_address:
-          type: integer
-        self_hosted_executors:
-          type: integer
-      type: object
-    store.AdminAssetCounts:
-      properties:
-        agents:
-          type: integer
-        credentials:
-          type: integer
-        environment_templates:
-          type: integer
-        files:
-          type: integer
-        skills:
-          type: integer
-        vaults:
-          type: integer
-      type: object
-    store.AdminAuditOperation:
-      properties:
-        action:
-          type: string
-        actor_label:
-          type: string
-        admin_credential_id:
-          type: string
-        created_at:
-          type: string
-        id:
-          type: string
-        project_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        request_id:
-          type: string
-        resource_id:
-          type: string
-        resource_type:
-          type: string
-        result_ids:
-          items:
-            type: object
-          type: array
-        trace_id:
-          type: string
-      type: object
-    store.AdminAuditPage:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/store.AdminAuditOperation'
-          type: array
-        has_more:
-          type: boolean
-        next_cursor:
-          type: string
-      type: object
-    store.AuditAPIKey:
-      properties:
-        id:
-          type: string
-        kind:
-          type: string
-        name:
-          type: string
-        prefix:
-          type: string
-        revoked_at:
-          type: string
-      type: object
-    store.ExecutorCredential:
-      properties:
-        created_at:
-          type: string
-        key_id:
-          format: uuid
-          type: string
-        revoked_at:
-          anyOf:
-            - type: string
-            - type: 'null'
-      type: object
-    store.IssuedExecutorCredential:
-      properties:
-        environment_id:
-          type: string
-        executor_token:
-          type: string
-        key_id:
-          type: string
-      type: object
-    store.IssuedProjectAPIKey:
-      properties:
-        created_at:
-          type: string
-        id:
-          type: string
-        key:
-          type: string
-        name:
-          type: string
-        prefix:
-          type: string
-        project_id:
-          type: string
-        revoked_at:
-          type: string
-      type: object
-    store.ManagedSessionArchive:
-      properties:
-        environment_id:
-          type: string
-        session_id:
-          type: string
-        state:
-          type: string
-      type: object
-    store.NodeHostHistory:
-      properties:
-        points:
-          items:
-            $ref: '#/components/schemas/store.NodeHostHistoryPoint'
-          type: array
-        resolution_seconds:
-          type: integer
-      type: object
-    store.NodeHostHistoryPoint:
-      properties:
-        available_disk_bytes_min:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        cpu_utilization_max:
-          anyOf:
-            - type: number
-            - type: 'null'
-        memory_used_bytes_max:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        start:
-          type: string
-      type: object
-    store.Project:
-      properties:
-        active_key_count:
-          type: integer
-        archived_at:
-          type: string
-        created_at:
-          type: string
-        id:
-          type: string
-        name:
-          type: string
-      type: object
-    store.ProjectAPIKey:
-      properties:
-        created_at:
-          type: string
-        id:
-          type: string
-        name:
-          type: string
-        prefix:
-          type: string
-        project_id:
-          type: string
-        revoked_at:
-          type: string
-      type: object
-    store.ProjectAPIKeyPage:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/store.ProjectAPIKey'
-          type: array
-        has_more:
-          type: boolean
-      type: object
-    store.ProjectPage:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/store.Project'
-          type: array
-        has_more:
-          type: boolean
-      type: object
-    store.ResourceOwner:
-      properties:
-        admin_audit_id:
-          type: string
-        api_key:
-          $ref: '#/components/schemas/store.AuditAPIKey'
-        resource_id:
-          type: string
-        source:
-          type: string
-      type: object
-    store.RuntimeDeploymentView:
-      properties:
-        core_url:
-          description: 'Read-only: the installation public URL (OAC_PUBLIC_URL), which nodes and sandboxes use to reach Core. The deployment API does not accept it.'
-          type: string
-        e2b:
-          $ref: '#/components/schemas/store.SandboxE2BView'
-        generation:
-          type: integer
-        installation_id:
-          type: string
-        mode:
-          type: string
-        owner_epoch:
-          type: integer
-        provider:
-          type: string
-        reset:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/store.SandboxResetView'
-            - type: 'null'
-        resources:
-          $ref: '#/components/schemas/store.SandboxDeploymentResources'
-        rollout:
-          $ref: '#/components/schemas/store.SandboxRollout'
-        specification:
-          $ref: '#/components/schemas/sandbox.DeploymentSpec'
-        specification_digest:
-          type: string
-        suspension:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/store.SandboxSuspensionView'
-            - type: 'null'
-          description: Idle suspension policy; microsandbox only, otherwise null.
-      type: object
-    store.RuntimeNode:
-      properties:
-        active:
-          type: integer
-        available_disk_bytes:
-          type: integer
-        available_memory_bytes:
-          type: integer
-        cleanup_pending:
-          type: integer
-        core_url:
-          description: |-
-            The Core address this node enrolled with. A node whose address differs
-            from the installation public URL receives no new sandboxes; re-add it.
-          type: string
-        cpu_count:
-          type: integer
-        created_at:
-          type: string
-        diagnostic:
-          description: Fixed reason for the last reported unreadiness; absent while the provider is ready. Clients treat an unknown value as provider_unavailable.
-          enum:
-            - provider_unavailable
-            - docker_unavailable
-            - docker_limits_unsupported
-            - runtime_download_failed
-            - runtime_image_unavailable
-            - kvm_unavailable
-            - microsandbox_artifacts_unavailable
-            - capacity_insufficient
-          type: string
-        enrollment_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-          description: The enrollment_id of the command that registered this node (POST /core/v1/sandbox/enrollment-tokens); null for nodes enrolled before Core recorded it.
-        id:
-          type: string
-        last_seen_at:
-          type: string
-        max_active:
-          type: integer
-        max_retained:
-          type: integer
-        name:
-          type: string
-        online:
-          type: boolean
-        provider:
-          type: string
-        provider_ready:
-          type: boolean
-        reserved:
-          type: integer
-        retained:
-          type: integer
-        rollout:
-          $ref: '#/components/schemas/store.SandboxNodeRollout'
-        running:
-          type: integer
-        snapshots:
-          type: integer
-      type: object
-    store.RuntimeNodeAllocation:
-      properties:
-        compute_phase:
-          type: string
-        compute_phase_changed_at:
-          anyOf:
-            - type: string
-            - type: 'null'
-          description: The time the allocation entered its current compute_phase, or null when unknown; an allocation that existed before Core recorded it reports null until its next phase change. For a suspended microsandbox allocation, this time plus the deployment's snapshot retention tells roughly when Core reclaims it.
-        created_at:
-          type: string
-        deployment_generation:
-          type: integer
-        diagnostic:
-          type: string
-        environment_id:
-          type: string
-        id:
-          type: string
-        initialization:
-          type: string
-        node_id:
-          type: string
-        session_id:
-          type: string
-        state:
-          type: string
-        tenant_id:
-          type: string
-      type: object
-    store.RuntimeNodeDetail:
-      properties:
-        active:
-          type: integer
-        available_disk_bytes:
-          type: integer
-        available_memory_bytes:
-          type: integer
-        cleanup_pending:
-          type: integer
-        core_url:
-          description: |-
-            The Core address this node enrolled with. A node whose address differs
-            from the installation public URL receives no new sandboxes; re-add it.
-          type: string
-        cpu_count:
-          type: integer
-        created_at:
-          type: string
-        diagnostic:
-          description: Fixed reason for the last reported unreadiness; absent while the provider is ready. Clients treat an unknown value as provider_unavailable.
-          enum:
-            - provider_unavailable
-            - docker_unavailable
-            - docker_limits_unsupported
-            - runtime_download_failed
-            - runtime_image_unavailable
-            - kvm_unavailable
-            - microsandbox_artifacts_unavailable
-            - capacity_insufficient
-          type: string
-        enrollment_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-          description: The enrollment_id of the command that registered this node (POST /core/v1/sandbox/enrollment-tokens); null for nodes enrolled before Core recorded it.
-        history:
-          $ref: '#/components/schemas/store.NodeHostHistory'
-        host:
-          $ref: '#/components/schemas/store.RuntimeNodeHost'
-        id:
-          type: string
-        last_seen_at:
-          type: string
-        max_active:
-          type: integer
-        max_retained:
-          type: integer
-        name:
-          type: string
-        online:
-          type: boolean
-        provider:
-          type: string
-        provider_ready:
-          type: boolean
-        reserved:
-          type: integer
-        retained:
-          type: integer
-        rollout:
-          $ref: '#/components/schemas/store.SandboxNodeRollout'
-        running:
-          type: integer
-        snapshots:
-          type: integer
-      type: object
-    store.RuntimeNodeHost:
-      properties:
-        available_disk_bytes:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        available_memory_bytes:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        cpu_utilization:
-          anyOf:
-            - type: number
-            - type: 'null'
-        effective_cpu_cores:
-          anyOf:
-            - type: number
-            - type: 'null'
-        observed_at:
-          anyOf:
-            - type: string
-            - type: 'null'
-        total_memory_bytes:
-          anyOf:
-            - type: integer
-            - type: 'null'
-      type: object
-    store.RuntimeNodeUpdate:
-      properties:
-        max_active:
-          type: integer
-        max_retained:
-          description: Docker never suspends, so Core replaces this with max_active; microsandbox uses both limits.
-          type: integer
-        name:
-          type: string
-      type: object
-    store.SandboxDeploymentResources:
-      properties:
-        allocations:
-          type: integer
-        pending:
-          type: integer
-      type: object
-    store.SandboxE2BTemplateBuildView:
-      properties:
-        resources:
-          $ref: '#/components/schemas/store.SandboxTemplateResources'
-        status:
-          anyOf:
-            - type: string
-            - type: 'null'
-          description: Build status at selection time; validation admits only ready builds.
-      type: object
-    store.SandboxE2BView:
-      properties:
-        api_url:
-          type: string
-        credential_configured:
-          type: boolean
-        domain:
-          type: string
-        template:
-          type: string
-        template_build:
-          allOf:
-            - $ref: '#/components/schemas/store.SandboxE2BTemplateBuildView'
-          description: The fixed template build as Core read it when this selection was saved.
-      type: object
-    store.SandboxNodeRollout:
-      properties:
-        diagnostic:
-          enum:
-            - provider_unavailable
-            - docker_unavailable
-            - docker_limits_unsupported
-            - runtime_download_failed
-            - runtime_image_unavailable
-            - kvm_unavailable
-            - microsandbox_artifacts_unavailable
-            - capacity_insufficient
-          type: string
-        ready_generation:
-          anyOf:
-            - type: integer
-            - type: 'null'
-          description: Durable serving-generation pin; online and provider_ready still gate placement.
-        state:
-          description: Target preparation, independent of an old pin's serving readiness.
-          enum:
-            - ready
-            - preparing
-            - failed
-            - update_required
-            - unknown
-          type: string
-      type: object
-    store.SandboxResetOfflineNode:
-      properties:
-        name:
-          type: string
-        node_id:
-          type: string
-        resources:
-          type: integer
-      type: object
-    store.SandboxResetRemaining:
-      properties:
-        busy:
-          type: integer
-        cleanup:
-          type: integer
-        idle:
-          type: integer
-        offline_nodes:
-          items:
-            $ref: '#/components/schemas/store.SandboxResetOfflineNode'
-          type: array
-        on_offline_nodes:
-          type: integer
-      type: object
-    store.SandboxResetRequest:
-      properties:
-        clear:
-          enum:
-            - auto
-            - force
-          type: string
-        deadline_seconds:
-          maximum: 86400
-          minimum: 300
-          type: integer
-        expected_generation:
-          minimum: 0
-          type: integer
-      required:
-        - clear
-        - expected_generation
-      type: object
-    store.SandboxResetView:
-      properties:
-        clear:
-          type: string
-        deadline_at:
-          anyOf:
-            - type: string
-            - type: 'null'
-        forced_at:
-          anyOf:
-            - type: string
-            - type: 'null'
-        remaining:
-          $ref: '#/components/schemas/store.SandboxResetRemaining'
-        requested_at:
-          type: string
-      type: object
-    store.SandboxRollout:
-      properties:
-        nodes:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/store.SandboxRolloutNodes'
-            - type: 'null'
-        previous_generation_sandboxes:
-          type: integer
-        state:
-          enum:
-            - settled
-            - preparing
-          type: string
-      type: object
-    store.SandboxRolloutNodes:
-      properties:
-        failed:
-          type: integer
-        preparing:
-          type: integer
-        ready:
-          type: integer
-        unknown:
-          type: integer
-        update_required:
-          type: integer
-      type: object
-    store.SandboxSuspensionView:
-      properties:
-        idle_seconds:
-          type: integer
-        retention_seconds:
-          type: integer
-      type: object
-    store.SandboxTemplateResources:
-      properties:
-        cpus:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        memory_mib:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        root_disk_mib:
-          anyOf:
-            - type: integer
-            - type: 'null'
-      type: object
-    store.WriteOperation:
-      properties:
-        action:
-          type: string
-        api_key:
-          $ref: '#/components/schemas/store.AuditAPIKey'
-        created_at:
-          type: string
-        id:
-          type: string
-        parent_id:
-          type: string
-        request_id:
-          type: string
-        resource_id:
-          type: string
-        resource_type:
-          type: string
-        trace_id:
-          type: string
-      type: object
-    store.WriteOperationPage:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/store.WriteOperation'
-          type: array
-        has_more:
-          type: boolean
-        next_cursor:
-          type: string
-      type: object
-    v1.Agent:
-      properties:
-        id:
-          type: string
-        instructions:
-          anyOf:
-            - type: string
-            - type: 'null'
-        model:
-          type: string
-        multi_agent:
-          $ref: '#/components/schemas/v1.MultiAgentConfig'
-        name:
-          anyOf:
-            - type: string
-            - type: 'null'
-        reasoning:
-          $ref: '#/components/schemas/v1.Reasoning'
-        service_tier:
-          enum:
-            - auto
-          type: string
-        text:
-          $ref: '#/components/schemas/v1.TextConfig'
-        tools:
-          items:
-            type: object
-          type: array
-        x_agents_core:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.AgentsCore'
-            - type: 'null'
-      required:
-        - id
-        - model
-        - multi_agent
-        - reasoning
-        - service_tier
-        - text
-        - tools
-      type: object
-    v1.AgentDeleted:
-      properties:
-        deleted:
-          enum:
-            - true
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - agent.deleted
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.AgentsCore:
-      properties:
-        harness:
-          enum:
-            - claude_sdk
-            - codex
-            - mcode
-          type: string
-        harness_config:
-          type: object
-      type: object
-    v1.Credential:
-      properties:
-        auth:
-          $ref: '#/components/schemas/v1.CredentialAuth'
-        created_at:
-          type: integer
-        id:
-          type: string
-        name:
-          type: string
-        object:
-          enum:
-            - vault.credential
-          type: string
-        updated_at:
-          type: integer
-        vault_id:
-          type: string
-      required:
-        - auth
-        - created_at
-        - id
-        - name
-        - object
-        - updated_at
-        - vault_id
-      type: object
-    v1.CredentialAuth:
-      properties:
-        expires_at:
-          anyOf:
-            - type: string
-            - type: 'null'
-        mcp_server_url:
-          type: string
-        refresh:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.OAuthCredentialRefresh'
-            - type: 'null'
-        type:
-          enum:
-            - static_bearer
-            - mcp_oauth
-          type: string
-      required:
-        - mcp_server_url
-        - type
-      type: object
-    v1.CredentialDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - vault.credential.deleted
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.CredentialList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.Credential'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.EnvironmentInstallation:
-      properties:
-        commands:
-          additionalProperties:
-            type: string
-          type: object
-        expires_at:
-          type: integer
-        message:
-          type: string
-        status:
-          enum:
-            - available
-            - unavailable
-          type: string
-        version:
-          type: string
-      type: object
-    v1.EnvironmentNetwork:
-      properties:
-        access:
-          enum:
-            - enabled
-            - disabled
-            - restricted
-          type: string
-        allowed_domains:
-          items:
-            type: string
-          type: array
-      required:
-        - access
-        - allowed_domains
-      type: object
-    v1.EnvironmentPackagesResponse:
-      properties:
-        npm:
-          items:
-            type: string
-          type: array
-        python:
-          items:
-            type: string
-          type: array
-        system:
-          items:
-            type: string
-          type: array
-      required:
-        - npm
-        - python
-        - system
-      type: object
-    v1.EnvironmentTemplate:
-      properties:
-        capability_directories:
-          items:
-            type: string
-          type: array
-        created_at:
-          type: integer
-        files:
-          items:
-            type: object
-          type: array
-        id:
-          type: string
-        name:
-          anyOf:
-            - type: string
-            - type: 'null'
-        network:
-          $ref: '#/components/schemas/v1.EnvironmentNetwork'
-        object:
-          enum:
-            - agent.environment.template
-          type: string
-        packages:
-          $ref: '#/components/schemas/v1.EnvironmentPackagesResponse'
-        plugins:
-          items:
-            type: object
-          type: array
-        skills:
-          items:
-            type: object
-          type: array
-        updated_at:
-          type: integer
-      required:
-        - capability_directories
-        - created_at
-        - files
-        - id
-        - network
-        - object
-        - packages
-        - plugins
-        - skills
-        - updated_at
-      type: object
-    v1.EnvironmentTemplateDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - agent.environment.template.deleted
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.EnvironmentTemplateList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.EnvironmentTemplate'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.ExecutionHarnessConfigSelection:
-      properties:
-        source:
-          enum:
-            - session
-            - agent
-            - deployment
-            - unknown
-          type: string
-        value:
-          type: object
-      required:
-        - source
-        - value
-      type: object
-    v1.ExecutionProviderSelection:
-      properties:
-        configuration:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.ModelProviderView'
-            - type: 'null'
-        source:
-          enum:
-            - session
-            - agent
-            - deployment
-            - unknown
-          type: string
-        status:
-          enum:
-            - available
-            - redacted
-            - unavailable
-          type: string
-      required:
-        - configuration
-        - source
-        - status
-      type: object
-    v1.ExecutionSelection:
-      properties:
-        source:
-          enum:
-            - session
-            - agent
-            - deployment
-            - unknown
-          type: string
-        value:
-          anyOf:
-            - type: string
-            - type: 'null'
-      required:
-        - source
-        - value
-      type: object
-    v1.InputTokenDetails:
-      properties:
-        cached_tokens:
-          type: integer
-      required:
-        - cached_tokens
-      type: object
-    v1.Item:
-      properties:
-        action:
-          $ref: '#/components/schemas/v1.WebSearchAction'
-        agent_id:
-          type: string
-        arguments: {}
-        call_id:
-          type: string
-        command:
-          type: string
-        content:
-          items:
-            $ref: '#/components/schemas/v1.ItemContent'
-          type: array
-        cwd:
-          type: string
-        duration_ms:
-          type: integer
-        error: {}
-        exit_code:
-          type: integer
-        id:
-          type: string
-        model:
-          type: string
-        name:
-          type: string
-        output: {}
-        phase:
-          anyOf:
-            - enum:
-                - commentary
-                - final_answer
-              type: string
-            - type: 'null'
-        reasoning_effort:
-          type: string
-        recipient_agent_id:
-          type: string
-        recipient_agent_ids:
-          items:
-            type: string
-          type: array
-        role:
-          enum:
-            - user
-            - assistant
-          type: string
-        sender_agent_id:
-          type: string
-        server_label:
-          type: string
-        status:
-          enum:
-            - in_progress
-            - completed
-            - failed
-            - incomplete
-          type: string
-        summary:
-          items:
-            $ref: '#/components/schemas/v1.SummaryText'
-          type: array
-        turn_id:
-          type: string
-        type:
-          enum:
-            - message
-            - command_execution
-            - mcp_call
-            - function_call
-            - function_call_output
-            - web_search_call
-            - reasoning
-            - agent_message
-            - create_subagent_call
-            - send_subagent_input_call
-            - resume_subagent_call
-            - wait_for_subagents_call
-            - interrupt_subagent_call
-            - close_subagent_call
-          type: string
-      required:
-        - id
-        - turn_id
-        - type
-      type: object
-    v1.ItemContent:
-      properties:
-        encrypted_content:
-          type: string
-        image_url:
-          type: string
-        text:
-          type: string
-        type:
-          enum:
-            - input_text
-            - output_text
-            - input_image
-            - encrypted_content
-          type: string
-      required:
-        - type
-      type: object
-    v1.ItemList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.Item'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.ModelConfigurationInput:
-      properties:
-        harness_config:
-          type: object
-        model:
-          type: string
-        model_provider:
-          $ref: '#/components/schemas/v1.ModelProviderInput'
-      required:
-        - model
-        - model_provider
-      type: object
-    v1.ModelConfigurationSupport:
-      properties:
-        accepts_harness_config:
-          type: boolean
-        protocols:
-          items:
-            type: string
-          type: array
-        token_limits_required:
-          type: boolean
-      required:
-        - accepts_harness_config
-        - protocols
-        - token_limits_required
-      type: object
-    v1.ModelProviderInput:
-      properties:
-        api_key:
-          type: string
-        base_url:
-          type: string
-        context_window:
-          type: integer
-        max_output_tokens:
-          type: integer
-        protocol:
-          enum:
-            - anthropic
-            - responses
-            - chat_completions
-          type: string
-      required:
-        - api_key
-        - base_url
-        - protocol
-      type: object
-    v1.ModelProviderView:
-      properties:
-        api_key_configured:
-          type: boolean
-        base_url:
-          type: string
-        context_window:
-          type: integer
-        max_output_tokens:
-          type: integer
-        protocol:
-          enum:
-            - anthropic
-            - responses
-            - chat_completions
-          type: string
-      required:
-        - api_key_configured
-        - base_url
-        - protocol
-      type: object
-    v1.MultiAgentConfig:
-      properties:
-        enabled:
-          type: boolean
-        max_concurrent_subagents:
-          anyOf:
-            - type: integer
-            - type: 'null'
-      required:
-        - enabled
-      type: object
-    v1.OAuthCredentialRefresh:
-      properties:
-        client_id:
-          type: string
-        resource:
-          anyOf:
-            - type: string
-            - type: 'null'
-        scope:
-          anyOf:
-            - type: string
-            - type: 'null'
-        token_endpoint:
-          type: string
-        token_endpoint_auth:
-          $ref: '#/components/schemas/v1.OAuthEndpointAuth'
-      required:
-        - client_id
-        - token_endpoint
-        - token_endpoint_auth
-      type: object
-    v1.OAuthEndpointAuth:
-      properties:
-        type:
-          enum:
-            - none
-            - client_secret_basic
-            - client_secret_post
-          type: string
-      required:
-        - type
-      type: object
-    v1.OutputTokenDetails:
-      properties:
-        reasoning_tokens:
-          type: integer
-      required:
-        - reasoning_tokens
-      type: object
-    v1.Reasoning:
-      properties:
-        effort:
-          anyOf:
-            - type: string
-            - type: 'null'
-        summary:
-          anyOf:
-            - type: string
-            - type: 'null'
-      type: object
-    v1.RequiredAction:
-      properties:
-        arguments: {}
-        call_id:
-          type: string
-        environment_id:
-          type: string
-        name:
-          type: string
-        turn_id:
-          type: string
-        type:
-          enum:
-            - function_call
-            - environment_connection
-          type: string
-      required:
-        - type
-      type: object
-    v1.RuntimeCPUObservation:
-      properties:
-        capacity_cores:
-          anyOf:
-            - minimum: 5.e-324
-              type: number
-            - type: 'null'
-        usage_cores:
-          anyOf:
-            - minimum: 0
-              type: number
-            - type: 'null'
-        usage_seconds_total:
-          anyOf:
-            - minimum: 0
-              type: number
-            - type: 'null'
-        utilization_ratio:
-          anyOf:
-            - minimum: 0
-              type: number
-            - type: 'null'
-      required:
-        - capacity_cores
-        - usage_cores
-        - usage_seconds_total
-        - utilization_ratio
-      type: object
-    v1.RuntimeHistory:
-      properties:
-        coverage:
-          $ref: '#/components/schemas/v1.RuntimeHistoryCoverage'
-        generated_at:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-        object:
-          enum:
-            - agent.runtime_history
-          type: string
-        requested_range:
-          $ref: '#/components/schemas/v1.RuntimeHistoryRange'
-        resolution_seconds:
-          maximum: 9007199254740991
-          minimum: 1
-          type: integer
-        series:
-          items:
-            $ref: '#/components/schemas/v1.RuntimeHistorySeries'
-          maxItems: 1000
-          type: array
-        session_id:
-          format: uuid
-          type: string
-        source:
-          enum:
-            - durable
-          type: string
-        token_usage:
-          items:
-            $ref: '#/components/schemas/v1.RuntimeHistoryTokenUsagePoint'
-          maxItems: 10000
-          type: array
-      required:
-        - coverage
-        - generated_at
-        - object
-        - requested_range
-        - resolution_seconds
-        - series
-        - session_id
-        - source
-        - token_usage
-      type: object
-    v1.RuntimeHistoryCPU:
-      properties:
-        capacity_cores:
-          anyOf:
-            - minimum: 5.e-324
-              type: number
-            - type: 'null'
-        contributor_count:
-          maximum: 9007199254740991
-          minimum: 1
-          type: integer
-        utilization_ratio:
-          anyOf:
-            - minimum: 0
-              type: number
-            - type: 'null'
-      required:
-        - capacity_cores
-        - contributor_count
-        - utilization_ratio
-      type: object
-    v1.RuntimeHistoryCoverage:
-      properties:
-        buckets:
-          items:
-            $ref: '#/components/schemas/v1.RuntimeHistoryCoveragePoint'
-          maxItems: 10000
-          type: array
-        expected_sample_count:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-        first_sample_at:
-          anyOf:
-            - maximum: 9007199254740991
-              minimum: 0
-              type: integer
-            - type: 'null'
-        last_sample_at:
-          anyOf:
-            - maximum: 9007199254740991
-              minimum: 0
-              type: integer
-            - type: 'null'
-        retained_start:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-        sample_count:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-      required:
-        - buckets
-        - expected_sample_count
-        - first_sample_at
-        - last_sample_at
-        - retained_start
-        - sample_count
-      type: object
-    v1.RuntimeHistoryCoveragePoint:
-      properties:
-        end:
-          maximum: 9007199254740991
-          minimum: 1
-          type: integer
-        first_observed_at:
-          anyOf:
-            - maximum: 9007199254740991
-              minimum: 0
-              type: integer
-            - type: 'null'
-        last_observed_at:
-          anyOf:
-            - maximum: 9007199254740991
-              minimum: 0
-              type: integer
-            - type: 'null'
-        observation_count:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-        observed_count:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-        start:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-        unavailable_count:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-      required:
-        - end
-        - first_observed_at
-        - last_observed_at
-        - observation_count
-        - observed_count
-        - start
-        - unavailable_count
-      type: object
-    v1.RuntimeHistoryMemory:
-      properties:
-        contributor_count:
-          maximum: 9007199254740991
-          minimum: 1
-          type: integer
-        limit_bytes:
-          anyOf:
-            - maximum: 9007199254740991
-              minimum: 1
-              type: integer
-            - type: 'null'
-        usage_bytes:
-          anyOf:
-            - maximum: 9007199254740991
-              minimum: 0
-              type: integer
-            - type: 'null'
-      required:
-        - contributor_count
-        - limit_bytes
-        - usage_bytes
-      type: object
-    v1.RuntimeHistoryPoint:
-      properties:
-        cpu:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.RuntimeHistoryCPU'
-            - type: 'null'
-        end:
-          maximum: 9007199254740991
-          minimum: 1
-          type: integer
-        first_observed_at:
-          anyOf:
-            - maximum: 9007199254740991
-              minimum: 0
-              type: integer
-            - type: 'null'
-        last_observed_at:
-          anyOf:
-            - maximum: 9007199254740991
-              minimum: 0
-              type: integer
-            - type: 'null'
-        memory:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.RuntimeHistoryMemory'
-            - type: 'null'
-        observation_count:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-        observed_count:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-        start:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-        unavailable_count:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-      required:
-        - cpu
-        - end
-        - first_observed_at
-        - last_observed_at
-        - memory
-        - observation_count
-        - observed_count
-        - start
-        - unavailable_count
-      type: object
-    v1.RuntimeHistoryRange:
-      properties:
-        end:
-          maximum: 9007199254740991
-          minimum: 1
-          type: integer
-        start:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-      required:
-        - end
-        - start
-      type: object
-    v1.RuntimeHistorySeries:
-      properties:
-        allocation_id:
-          format: uuid
-          type: string
-        environment_id:
-          format: uuid
-          type: string
-        points:
-          items:
-            $ref: '#/components/schemas/v1.RuntimeHistoryPoint'
-          maxItems: 10000
-          type: array
-        provider_type:
-          pattern: ^[a-z][a-z0-9_]{0,31}$
-          type: string
-        started_at:
-          $ref: '#/components/schemas/v1.RuntimeHistoryTime'
-      required:
-        - allocation_id
-        - environment_id
-        - points
-        - provider_type
-        - started_at
-      type: object
-    v1.RuntimeHistoryTime:
-      properties:
-        nanoseconds:
-          maximum: 999999999
-          minimum: 0
-          type: integer
-        seconds:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-      required:
-        - nanoseconds
-        - seconds
-      type: object
-    v1.RuntimeHistoryTokenUsagePoint:
-      properties:
-        end:
-          maximum: 9007199254740991
-          minimum: 1
-          type: integer
-        input_tokens:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-        output_tokens:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-        sampled_at:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-        start:
-          maximum: 9007199254740991
-          minimum: 0
-          type: integer
-      required:
-        - end
-        - input_tokens
-        - output_tokens
-        - sampled_at
-        - start
-      type: object
-    v1.RuntimeInstance:
-      properties:
-        allocation_id:
-          anyOf:
-            - format: uuid
-              type: string
-            - type: 'null'
-        connection_generation:
-          anyOf:
-            - format: uuid
-              type: string
-            - type: 'null'
-        device_id:
-          anyOf:
-            - format: uuid
-              type: string
-            - type: 'null'
-        kind:
-          enum:
-            - managed_allocation
-            - self_hosted_connection
-            - none
-          type: string
-      required:
-        - allocation_id
-        - connection_generation
-        - device_id
-        - kind
-      type: object
-    v1.RuntimeMemoryObservation:
-      properties:
-        limit_bytes:
-          anyOf:
-            - minimum: 1
-              type: integer
-            - type: 'null'
-        usage_bytes:
-          anyOf:
-            - minimum: 0
-              type: integer
-            - type: 'null'
-      required:
-        - limit_bytes
-        - usage_bytes
-      type: object
-    v1.RuntimeObservation:
-      properties:
-        allocation_created_at:
-          anyOf:
-            - minimum: 0
-              type: integer
-            - type: 'null'
-        cpu:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.RuntimeCPUObservation'
-            - type: 'null'
-        environment_id:
-          anyOf:
-            - format: uuid
-              type: string
-            - type: 'null'
-        id:
-          format: uuid
-          type: string
-        instance:
-          $ref: '#/components/schemas/v1.RuntimeInstance'
-        lifecycle_state:
-          anyOf:
-            - enum:
-                - active
-                - sleeping
-                - transitioning
-                - pending
-                - stopped
-              type: string
-            - type: 'null'
-        memory:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.RuntimeMemoryObservation'
-            - type: 'null'
-        mode:
-          enum:
-            - none
-            - self_hosted
-            - openai_hosted
-          type: string
-        object:
-          enum:
-            - agent.runtime_observation
-          type: string
-        observed_at:
-          anyOf:
-            - minimum: 0
-              type: integer
-            - type: 'null'
-        provider_type:
-          anyOf:
-            - type: string
-            - type: 'null'
-        reason:
-          anyOf:
-            - enum:
-                - runtime_mode_not_observable
-                - allocation_pending
-                - runtime_not_running
-                - source_not_configured
-                - sample_timeout
-                - sample_unavailable
-              type: string
-            - type: 'null'
-        resolved_at:
-          minimum: 0
-          type: integer
-        session_id:
-          format: uuid
-          type: string
-        started_at:
-          anyOf:
-            - minimum: 0
-              type: integer
-            - type: 'null'
-        status:
-          enum:
-            - observed
-            - unsupported
-            - unavailable
-          type: string
-      required:
-        - allocation_created_at
-        - cpu
-        - environment_id
-        - id
-        - instance
-        - lifecycle_state
-        - memory
-        - mode
-        - object
-        - observed_at
-        - provider_type
-        - reason
-        - resolved_at
-        - session_id
-        - started_at
-        - status
-      type: object
-    v1.SavedAgent:
-      properties:
-        created_at:
-          type: integer
-        id:
-          type: string
-        instructions:
-          anyOf:
-            - type: string
-            - type: 'null'
-        metadata:
-          additionalProperties:
-            type: string
-          type: object
-        model:
-          type: string
-        multi_agent:
-          $ref: '#/components/schemas/v1.MultiAgentConfig'
-        name:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - agent
-          type: string
-        reasoning:
-          $ref: '#/components/schemas/v1.Reasoning'
-        service_tier:
-          enum:
-            - auto
-            - default
-            - flex
-            - priority
-            - fast
-          type: string
-        text:
-          $ref: '#/components/schemas/v1.SavedAgentText'
-        tools:
-          items:
-            type: object
-          type: array
-        updated_at:
-          type: integer
-        x_agents_core:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.SavedAgentCore'
-            - type: 'null'
-      required:
-        - created_at
-        - id
-        - metadata
-        - model
-        - multi_agent
-        - object
-        - reasoning
-        - service_tier
-        - text
-        - tools
-        - updated_at
-      type: object
-    v1.SavedAgentCore:
-      properties:
-        harness:
-          enum:
-            - claude_sdk
-            - codex
-            - mcode
-          type: string
-        harness_config:
-          type: object
-        model_provider:
-          $ref: '#/components/schemas/v1.ModelProviderView'
-      type: object
-    v1.SavedAgentList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.SavedAgent'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.SavedAgentText:
-      properties:
-        format:
-          $ref: '#/components/schemas/v1.SavedAgentTextFormat'
-        verbosity:
-          enum:
-            - low
-            - medium
-            - high
-          type: string
-      required:
-        - format
-        - verbosity
-      type: object
-    v1.SavedAgentTextFormat:
-      properties:
-        schema:
-          type: object
-        type:
-          enum:
-            - text
-            - json_schema
-          type: string
-      required:
-        - type
-      type: object
-    v1.Session:
-      properties:
-        agent:
-          $ref: '#/components/schemas/v1.Agent'
-        created_at:
-          type: integer
-        environment:
-          $ref: '#/components/schemas/v1.SessionEnvironment'
-        error:
-          anyOf:
-            - type: string
-            - type: 'null'
-        id:
-          type: string
-        last_active_at:
-          type: integer
-        metadata:
-          additionalProperties:
-            type: string
-          type: object
-        object:
-          enum:
-            - agent.session
-          type: string
-        required_actions:
-          items:
-            $ref: '#/components/schemas/v1.RequiredAction'
-          type: array
-        status:
-          enum:
-            - idle
-            - in_progress
-            - requires_action
-            - failed
-          type: string
-        usage:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.TokenUsage'
-            - type: 'null'
-        vault_ids:
-          items:
-            type: string
-          type: array
-        x_agents_core:
-          $ref: '#/components/schemas/v1.SessionCore'
-      required:
-        - agent
-        - created_at
-        - environment
-        - id
-        - last_active_at
-        - metadata
-        - object
-        - required_actions
-        - status
-        - vault_ids
-      type: object
-    v1.SessionArtifact:
-      properties:
-        created_at:
-          type: integer
-        environment_id:
-          type: string
-        id:
-          type: string
-        object:
-          enum:
-            - agent.session.artifact
-          type: string
-        path:
-          type: string
-        session_id:
-          type: string
-        size_bytes:
-          type: integer
-        turn_id:
-          type: string
-      required:
-        - created_at
-        - environment_id
-        - id
-        - object
-        - path
-        - session_id
-        - size_bytes
-        - turn_id
-      type: object
-    v1.SessionArtifactDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - agent.session.artifact.deleted
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.SessionArtifactList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.SessionArtifact'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.SessionCore:
-      properties:
-        installation:
-          $ref: '#/components/schemas/v1.EnvironmentInstallation'
-      type: object
-    v1.SessionDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - agent.session.deleted
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.SessionEnvironment:
-      properties:
-        capability_directories:
-          items:
-            type: string
-          type: array
-        files:
-          items:
-            type: object
-          type: array
-        id:
-          type: string
-        network:
-          $ref: '#/components/schemas/v1.EnvironmentNetwork'
-        packages:
-          $ref: '#/components/schemas/v1.EnvironmentPackagesResponse'
-        plugins:
-          items:
-            type: object
-          type: array
-        remote_url:
-          type: string
-        skills:
-          items:
-            type: object
-          type: array
-        type:
-          enum:
-            - none
-            - self_hosted
-            - openai_hosted
-          type: string
-        workspace_directory:
-          type: string
-      required:
-        - type
-      type: object
-    v1.SessionExecutionConfiguration:
-      properties:
-        harness:
-          $ref: '#/components/schemas/v1.ExecutionSelection'
-        harness_config:
-          $ref: '#/components/schemas/v1.ExecutionHarnessConfigSelection'
-        model:
-          $ref: '#/components/schemas/v1.ExecutionSelection'
-        model_provider:
-          $ref: '#/components/schemas/v1.ExecutionProviderSelection'
-        object:
-          enum:
-            - agent.session.execution_configuration
-          type: string
-        schema_version:
-          enum:
-            - 1
-          type: integer
-        session_id:
-          type: string
-      required:
-        - harness
-        - harness_config
-        - model
-        - model_provider
-        - object
-        - schema_version
-        - session_id
-      type: object
-    v1.SessionList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.Session'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.Skill:
-      properties:
-        created_at:
-          type: integer
-        default_version:
-          type: string
-        description:
-          type: string
-        id:
-          type: string
-        latest_version:
-          type: string
-        name:
-          type: string
-        object:
-          enum:
-            - skill
-          type: string
-      required:
-        - created_at
-        - default_version
-        - description
-        - id
-        - latest_version
-        - name
-        - object
-      type: object
-    v1.SkillDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - skill.deleted
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.SkillList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.Skill'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.SkillVersion:
-      properties:
-        created_at:
-          type: integer
-        description:
-          type: string
-        id:
-          type: string
-        name:
-          type: string
-        object:
-          enum:
-            - skill.version
-          type: string
-        skill_id:
-          type: string
-        version:
-          type: string
-      required:
-        - created_at
-        - description
-        - id
-        - name
-        - object
-        - skill_id
-        - version
-      type: object
-    v1.SkillVersionDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - skill.version.deleted
-          type: string
-        version:
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-        - version
-      type: object
-    v1.SkillVersionList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.SkillVersion'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.SourceFile:
-      properties:
-        bytes:
-          minimum: 0
-          type: integer
-        created_at:
-          type: integer
-        expires_at:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        filename:
-          type: string
-        id:
-          type: string
-        object:
-          enum:
-            - file
-          type: string
-        purpose:
-          enum:
-            - user_data
-          type: string
-        status:
-          enum:
-            - processed
-          type: string
-        status_details:
-          anyOf:
-            - type: string
-            - type: 'null'
-      required:
-        - bytes
-        - created_at
-        - filename
-        - id
-        - object
-        - purpose
-        - status
-      type: object
-    v1.SourceFileDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - file
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.SourceFileList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.SourceFile'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.SummaryText:
-      properties:
-        text:
-          type: string
-        type:
-          enum:
-            - summary_text
-          type: string
-      required:
-        - text
-        - type
-      type: object
-    v1.TextConfig:
-      properties:
-        format:
-          $ref: '#/components/schemas/v1.TextFormat'
-        verbosity:
-          enum:
-            - low
-            - medium
-            - high
-          type: string
-      required:
-        - format
-        - verbosity
-      type: object
-    v1.TextFormat:
-      properties:
-        schema:
-          type: object
-        type:
-          enum:
-            - text
-            - json_schema
-          type: string
-      required:
-        - type
-      type: object
-    v1.TokenUsage:
-      properties:
-        input_tokens:
-          type: integer
-        input_tokens_details:
-          $ref: '#/components/schemas/v1.InputTokenDetails'
-        output_tokens:
-          type: integer
-        output_tokens_details:
-          $ref: '#/components/schemas/v1.OutputTokenDetails'
-        total_tokens:
-          type: integer
-      required:
-        - input_tokens
-        - input_tokens_details
-        - output_tokens
-        - output_tokens_details
-        - total_tokens
-      type: object
-    v1.Turn:
-      properties:
-        agent_id:
-          type: string
-        completed_at:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        created_at:
-          type: integer
-        error:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.TurnError'
-            - type: 'null'
-        id:
-          type: string
-        object:
-          enum:
-            - agent.session.turn
-          type: string
-        session_id:
-          type: string
-        started_at:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        status:
-          enum:
-            - queued
-            - in_progress
-            - waiting
-            - completed
-            - failed
-            - cancelled
-          type: string
-        subagent_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        usage:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.TokenUsage'
-            - type: 'null'
-      required:
-        - agent_id
-        - created_at
-        - id
-        - object
-        - session_id
-        - status
-      type: object
-    v1.TurnError:
-      properties:
-        code:
-          enum:
-            - context_length_exceeded
-            - session_budget_exceeded
-            - usage_limit_exceeded
-            - rate_limit_exceeded
-            - server_overloaded
-            - cyber_policy
-            - connection_failed
-            - server_error
-            - authentication_error
-            - invalid_request
-            - resource_not_found
-            - sandbox_error
-            - executor_version_incompatible
-            - active_turn_not_steerable
-            - request_timeout
-            - internal_error
-          type: string
-        message:
-          type: string
-      required:
-        - code
-        - message
-      type: object
-    v1.TurnList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.Turn'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.Vault:
-      properties:
-        created_at:
-          type: integer
-        id:
-          type: string
-        metadata:
-          additionalProperties:
-            type: string
-          type: object
-        name:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - vault
-          type: string
-      required:
-        - created_at
-        - id
-        - metadata
-        - object
-      type: object
-    v1.VaultDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - vault.deleted
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.VaultList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.Vault'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.WebSearchAction:
-      properties:
-        pattern:
-          type: string
-        queries:
-          items:
-            type: string
-          type: array
-        query:
-          type: string
-        type:
-          enum:
-            - search
-            - open_page
-            - find_in_page
-            - other
-          type: string
-        url:
-          type: string
-      required:
-        - type
-      type: object
-  securitySchemes:
-    DeploymentAdminAuth:
-      type: http
-      scheme: bearer
-tags:
-  - name: Core Administration
-    description: 'Core Administration. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Deployment Model Providers
-    description: 'Deployment Model Providers. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Administrator Projects
-    description: 'Administrator Projects. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Agents
-    description: 'Agents. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Environment Templates
-    description: 'Environment Templates. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Executor Credentials
-    description: 'Executor Credentials. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Native Installation
-    description: 'Native Installation. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Files
-    description: 'Files. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Write Audit
-    description: 'Write Audit. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Sessions
-    description: 'Sessions. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Artifacts
-    description: 'Artifacts. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Execution configuration
-    description: 'Execution configuration. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Items
-    description: 'Items. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Runtime history
-    description: 'Runtime history. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Runtime observations
-    description: 'Runtime observations. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Turns
-    description: 'Turns. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Skills
-    description: 'Skills. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Vaults
-    description: 'Vaults. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Credentials
-    description: 'Credentials. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
-  - name: Sandbox Manager
-    description: 'Sandbox Manager. Core administration API: Core key held by Web’s server or an operator script. Generated local management contract. This is not part of the public OpenAI API.'
diff --git a/apps/docs/openapi/public-api.yaml b/apps/docs/openapi/public-api.yaml
deleted file mode 100644
index 7e81e65bb..000000000
--- a/apps/docs/openapi/public-api.yaml
+++ /dev/null
@@ -1,5739 +0,0 @@
-# Generated documentation projection; do not edit.
-info:
-  contact: {}
-  description: Supported single-Agent execution resources from the pinned openai-python beta/agents contract. Bearer keys bind an execution principal to one project; optional OpenAI-Organization and OpenAI-Project headers must match that binding.
-  license:
-    name: Apache 2.0
-    url: https://www.apache.org/licenses/LICENSE-2.0.html
-  title: OpenAgentCore Agents API
-  version: '1'
-paths:
-  /agents:
-    get:
-      description: Lists only the authenticated tenant's saved Agents, independently of Sessions. Limit 0 is treated as 1 and larger limits as 100, as observed on the hosted service. The local default is 20; exact upstream default/cap and empty cursor fields remain unverified. An unknown, malformed or foreign after cursor returns not found.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Last Agent ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            minimum: 0
-          description: Page size; 0 is treated as 1 and values above 100 as 100
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SavedAgentList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: List reusable Agents
-      tags:
-        - Agents
-    post:
-      description: 'Persists configuration independently of execution. Names over 128 characters and metadata outside 16 string pairs with 64-character keys and 512-character values return invalid_request_error with the official param; U+0000 in stored strings is rejected as a local storage limit. As on every Agents API JSON route, a non-JSON Content-Type, invalid UTF-8, malformed JSON, a repeated key at any depth or a non-object root returns invalid_request_error with a null param and the official message before other checks; an empty or null body is {}. Missing, unknown, wrongly typed or unsupported enum members of the pinned configuration shapes (tools, text, reasoning, service_tier, multi_agent) return invalid_request_error with the JSON path as param; duplicate function names, repeated web_search or tool_search and non-object schema root types return it with a null param. Supports model/name/instructions/metadata, explicit reasoning and service tiers, multi_agent, text/json_schema, function/tool_search/programmatic_tool_calling/web_search and HTTP MCP with nullable credential_id, service origin (omitted or null on HTTP transport is saved as service) and boolean required defaulting to false. Saving credential_id grants no access: Session admission checks attached Vault ownership and destination. MCP allowed_tools preserves null versus empty; saved HTTP transport includes empty headers. Model-derived reasoning defaults, other MCP variants and public retry conformance remain incomplete. web_search saves every pinned mode: omitted or null mode is saved as live and omitted or null context_size as medium; allowed_domains preserves null versus empty and a present location, including {}, includes all four keys with null for omitted ones, as observed officially (req_db41d2f6261b4abfb69465eafe719ab5, req_165d53b88445490b9146d8272c54134d). Session execution accepts only explicit disabled web_search and disabled programmatic_tool_calling through qualified Runtime controls; saved enabled forms reject at Session admission. Session execution admits only its supported configuration subset.'
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-      responses:
-        '201':
-          description: Created
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SavedAgent'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Create a reusable Agent
-      tags:
-        - Agents
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/v1.CreateAgentRequest'
-        description: Reusable Agent configuration
-        required: true
-  /agents/{agent_id}:
-    delete:
-      description: Deletes only the authenticated tenant's saved configuration. Existing Session snapshots, history and recorded creation retry identities remain independent. Missing and repeated deletion locally return404; exact hosted error and in-flight creation/deletion semantics remain unverified.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Agent ID
-          in: path
-          name: agent_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.AgentDeleted'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Delete a reusable Agent
-      tags:
-        - Agents
-    get:
-      description: Reads the saved resource owned by the authenticated tenant, independently of execution Sessions.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Agent ID
-          in: path
-          name: agent_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SavedAgent'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Retrieve a reusable Agent
-      tags:
-        - Agents
-    post:
-      description: Preserves omitted fields and replaces supplied fields using shared saved-configuration validation. Null name/instructions clear; null or empty metadata clears all pairs. Name, metadata and configuration validation errors return invalid_request_error with the official param, using the Agent create rules before the Agent lookup. Existing Session snapshots are unchanged. Empty updates advance updated_at without changing saved fields. Nested replacement/null defaults, model-derived reasoning and exact hosted error behavior remain incompletely verified.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Agent ID
-          in: path
-          name: agent_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SavedAgent'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Update a reusable Agent
-      tags:
-        - Agents
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/v1.UpdateAgentRequest'
-        description: Supplied reusable Agent fields
-        required: true
-  /agents/environments/{environment_id}:
-    get:
-      description: Returns durable connection status and safe installed metadata for supported self_hosted and basic openai_hosted profiles. Initial files expose frozen safe metadata without content; Plugin/Skill entries expose only safe configured installation metadata. Capability-directory discoveries are not added to those arrays. Unsupported installation configurations remain implementation gaps. This read does not prepare execution, start compute or require an enabled execution worker. Session deletion removes the associated Environment from public reads; project-shared read authorization is unchanged. Connection status does not prove native readiness or process quiescence.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Environment ID
-          in: path
-          name: environment_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.EnvironmentInfo'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Retrieve an execution Environment
-      tags:
-        - Environments
-  /agents/environments/{environment_id}/files:
-    get:
-      description: Lists direct regular files in one authorized self_hosted or qualified local workspace directory. Local paths use the public /workspace root and must be in cleaned form. This partial implementation defaults to the workspace root and limit 20; recursive scope and these defaults are not verified upstream semantics. A missing path, a regular file or a symbolic link returns an empty page; links are never followed. Daemons without a local workspace binding use the Claude SDK adapter reader, which keeps 404 for a missing path and 503 for a regular file or symbolic link. Well-formed unknown query keys are ignored; malformed query encoding and a repeated supported key are rejected. Sorts by case-sensitive path components, descending by default. Keep the same path, order and limit when using page. Each page rereads the complete bounded directory; changed file paths/sizes invalidate continuation locally with 400. There is no snapshot guarantee. An openai_hosted Environment that has not connected yet returns 400. Truncated or uncertain native results fail with 503 without returning a partial page. This read never starts a Turn or admits model input. Actual transport disconnect/reconnect events remain observable.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Environment ID
-          in: path
-          name: environment_id
-          required: true
-        - schema:
-            type: string
-          description: Absolute directory in cleaned form inside /workspace
-          in: query
-          name: path
-        - schema:
-            type: integer
-            maximum: 100
-            minimum: 1
-          description: Maximum file count; local default 20
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Case-sensitive path-component order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-          description: Opaque continuation token; keep path, order and limit unchanged
-          in: query
-          name: page
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.EnvironmentFileList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: List live Environment files
-      tags:
-        - Environments
-    post:
-      description: Uploads standard Base64 bytes to a file beneath /workspace in a qualified local Environment and returns 201. Accepts inline bytes or a project-owned source file_id through the same write path. Unknown body fields are rejected with their name as param. Basic public hosted creation requires explicit managed Runtime configuration; an openai_hosted Environment that has not connected yet returns 400. Inline data is limited to 5 MiB decoded and a file_id copy to 50 MiB. Missing parent directories are created with mode 0700 and the file with mode 0600. An existing destination is never replaced; a directory, an existing file or a path through a symlink or non-directory returns 400. Idle writes exclude execution. Missing receipts return unavailable and retain a durable mutation gate without automatic replay. Error/timing parity with upstream remains unverified.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Environment ID
-          in: path
-          name: environment_id
-          required: true
-      responses:
-        '201':
-          description: Created
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.EnvironmentFile'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Create an Environment file from inline bytes or a source file
-      tags:
-        - Environments
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/v1.EnvironmentFileCreateRequest'
-        description: Inline bytes or source file ID and absolute workspace path
-        required: true
-  /agents/environments/templates:
-    get:
-      description: Lists tenant-owned safe template metadata in creation order with ID tie-breaking. Defaults to limit 20 and descending order; limit 0 is treated as 1 and larger limits as 100. Foreign, missing and malformed cursors return the same not found error. Concurrent-page and exact hosted error behavior remain unverified.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Previous Template ID
-          in: query
-          name: after
-        - schema:
-            type: integer
-            minimum: 0
-          description: Page size; 0 is treated as 1 and values above 100 as 100
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.EnvironmentTemplateList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: List Environment Templates
-      tags:
-        - Environment Templates
-    post:
-      description: Saves tenant-owned hosted configuration. Supports nullable name, enabled/disabled or exact-domain restricted network, initial inline/file_id files, confidential env, ordered setup_commands, npm/Python packages inline/referenced Skill ZIPs, Plugin ZIPs and workspace-contained capability directories. Omitted/null network defaults to enabled. Restricted network requires 1–100 exact ASCII hostnames; other host forms and populated unsupported installations are rejected before persistence without echoing input. Network policy rejections return invalid_request_error with a null param. System dependencies must be preinstalled in the sandbox image or template, or on the host machine; packages.system is rejected. No compute is allocated. Exact hosted error/retry semantics remain unverified.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-      responses:
-        '201':
-          description: Created
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.EnvironmentTemplate'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Create an Environment Template
-      tags:
-        - Environment Templates
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/v1.EnvironmentTemplateRequest'
-        description: Reusable configuration
-        required: true
-  /agents/environments/templates/{environment_template_id}:
-    delete:
-      description: Deletes the tenant-owned reusable configuration without changing or deleting existing Sessions and their frozen configuration.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Template ID
-          in: path
-          name: environment_template_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.EnvironmentTemplateDeleted'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Delete an Environment Template
-      tags:
-        - Environment Templates
-    get:
-      description: Returns safe tenant-owned configuration metadata without allocating compute. Missing and foreign resources return the same not-found response.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Template ID
-          in: path
-          name: environment_template_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.EnvironmentTemplate'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Retrieve an Environment Template
-      tags:
-        - Environment Templates
-    post:
-      description: Supplied fields replace atomically; omitted fields remain unchanged. Null name clears and null network resets to the pinned enabled default. Existing Session snapshots and creation retries remain unchanged. Initial files replace as a list; null/empty clears. File data is encrypted separately and excluded from response metadata. Skills replace as a list; null/empty clears. Skill archives are encrypted separately and omitted from responses. Plugins and capability directories replace as lists; null/empty clears. Plugin archives are encrypted and omitted from responses. Capability directories are snapshotted after setup. Environment MCP execution requires a qualified native transport and runtime network policy. Empty updates advance updated_at without changing saved fields or confidential contents. Network policy rejections return invalid_request_error with a null param.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Template ID
-          in: path
-          name: environment_template_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.EnvironmentTemplate'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Update an Environment Template
-      tags:
-        - Environment Templates
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/v1.EnvironmentTemplateRequest'
-        description: Configuration replacements
-        required: true
-  /agents/sessions:
-    get:
-      description: Cursor and results are scoped to the authenticated execution tenant; an unknown, malformed or foreign after cursor returns not found. Optional agent_id matches the immutable root Agent ID, including inline Agents and historical Sessions whose saved source was updated or deleted. Omission lists all Agents. Returns the same Environment and pending-input activity projection as Session retrieval, including self_hosted Sessions.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Root Agent ID whose Sessions to return
-          in: query
-          name: agent_id
-        - schema:
-            type: string
-          description: Last Session ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            minimum: 0
-          description: Page size; 0 is treated as 1 and values above 100 as 100
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SessionList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: List execution Sessions
-      tags:
-        - Sessions
-    post:
-      description: 'The optional Core model_provider bundle resolves from the Session override, saved Agent defaults, then, for openai_hosted and none, the deployment default of the resolved harness; self_hosted never uses the deployment default and none accepts only it. openai_hosted and self_hosted Sessions that resolve no bundle return 400 model_provider_required with param x_agents_core.model_provider before any write. Core encrypts and freezes the resolved bundle; later Agent or deployment default edits and same-key retries cannot change it. Keys are never returned. Supports inline configuration or a tenant-owned saved agent_id with per-Session field replacements. Execution supports model/instructions, text verbosity, non-deferred function tools, adapter-qualified multi_agent with persisted Subagent reads, implicit reasoning, service tier auto and environment type none, subject to the configured engine. Codex additionally supports HTTP MCP with service origin (omitted or null on HTTP transport is saved as service), native allowed_tools and boolean required defaulting to false. Session vault_ids attach only project-owned Vaults; credential_id selects an attached static bearer or OAuth credential for the exact HTTPS URL, while null/omission selects a unique match or remains anonymous. Session reads, lists and event snapshots show that implicitly selected credential ID in a null or omitted credential_id, also after the credential is deleted; anonymous selections stay null and the stored caller intent is unchanged. After the input requirement and before any write, a credential_id without vault_ids, one outside the attached Vaults (one message for missing, foreign and unattached IDs) or one for another server_url returns 400 invalid_request_error, and several implicit matches return 409 conflict_error. Missing decryption configuration fails dispatch without anonymous fallback. Required initialization uses native startup before the first native Turn, including cold resume, and requires a separately advertised capability; exact hosted creation timing and error parity remain unverified. Explicit environment-origin HTTP MCP is supported on managed and self-hosted workspaces through the same Runtime bindings; native OAuth login remains unsupported. The self_hosted profile uses a qualified native harness, a clean absolute workspace_directory and optional absolute local capability_directories prepared by Runtime, with optional non-deferred function tools and HTTP MCP using explicit environment origin, optionally authenticated by the attached Vault rules. Service-origin HTTP remains restricted to service-side environment:none. Remote MCP and remote Bearer authentication each require separately advertised combination support; old peers cannot receive unsupported work. Omitted/null capability_directories use the empty-list default; self_hosted requires configured execution plus executor registry. Claude SDK currently requires medium verbosity and object-root function schemas. It supports anonymous or attached static-bearer service-origin HTTP MCP on none with boolean required and separately advertised MCP/bearer/required runtime support. Required servers must be connected before the first native input is released; pending or failed startup rejects execution. The shared Vault selection and immutable binding rules apply; unsupported native labels/tool names reject before persistence. An attached Vault with no matching credential may remain anonymous; missing keys or failed credential lookup/decryption never fall back to anonymous execution. Omitted stream defaults to false; stream and agent_id cannot be null. Metadata may be null; non-string values and limit violations return invalid_request_error with a metadata or metadata.<key> param. The inline agent uses the Agent create configuration validation with agent.-prefixed params, reported before the input requirement and saved-Agent lookup; saved configurations with conflicting tools or schema roots reject admission with the same errors, and execution limits keep unsupported_or_invalid_configuration. Hosted network policy rejections return invalid_request_error with a null param. Initial input accepts a string or ordered user-message array. Codex and Claude SDK on none and qualified managed or self_hosted workspace profiles also accept inline PNG/JPEG image content; other image combinations and remote URLs are unsupported. None initial input atomically starts a Turn; self_hosted initial input is reserved while returning its Environment connection target, with execution deferred to native readiness and Session failure on initial timeout. Initial input is required for none and for streamed creation outside self_hosted. Omitted/null input remains valid for non-streaming hosted and self_hosted creation. With stream=true, returns live Session events starting with the committed creation snapshot and closes right after the first agent.session.idle recorded when a Turn ends or an input reservation stops being pending, or any agent.session.failed, without sending later events. A creation that admitted nothing closes after the snapshot; a settlement that records no event closes after events up to the cursor read with a settled Session projection. Required actions keep it open; disconnect does not cancel execution. The GET events stream remains live-only. New Sessions retain their authenticated creator; all creation retries require the same typed subject, including across key rotation. Saved-Agent retries and inline requests using Vault attachments or credential references retain caller intent independently of later resource changes; new hosted inline requests also freeze caller intent before deployment defaults resolve; unrelated non-hosted inline retries preserve resolved/default equivalences, and their resolved hash leaves out any deployment default. Provider keys enter retry hashes only as fingerprints keyed by the credential key. Unknown historical creators reject retries; known creators without recorded intent retain resolved-snapshot retry rules. These conflict policies are local and not verified hosted parity. A same-key stream=true retry of an existing creation returns 201 with no events and closes at once; retry with stream=false or use the GET events stream to recover. Claude SDK on none, Core-managed Docker openai_hosted and self_hosted supports qualified object-root json_schema output with medium verbosity, single-Agent execution and ordinary functions. Hosted execution reuses native workspace tools and Files/Artifacts; Skills, Plugins, capability directories, HTTP MCP, Subagent and tool_search combinations remain unqualified, including inherited template contents. Other non-text initial input remains unsupported. Basic Codex and Claude SDK openai_hosted creation requires an explicitly configured managed provider. The Claude workspace profile supports non-deferred function tools with text or successful inline PNG/JPEG results alongside native workspace tools; explicit environment-origin HTTP MCP uses the common Runtime path. MiniMax accepts public environment-origin HTTP MCP only with null or omitted allowed_tools and required=false; even an empty non-null allowlist rejects. Idle Sessions provision automatically; initial provisioning has no caller connection action. Network defaults to enabled; disabled and restricted policies reject before compute allocation because the current Runtime cannot enforce them. The x_agents_core.environment extension accepts common preparation fields for either hosted or self-hosted placement: environment_template_id, files, env, packages, setup_commands, skills, plugins and capability_directories. Duplicate fields in environment and the extension reject. Confidential env, npm/Python packages and ordered setup commands use the same Environment-owned initialization lifecycle; compute allocation does not own preparation. Unknown side effects are not replayed after disconnect or restart. System dependencies must be preinstalled in the sandbox image or template, or on the host machine; packages.system is rejected. Initial inline and tenant-owned file_id files freeze encrypted bytes before provisioning, then install through the common Core lifecycle before native execution or live Files access. With a template reference, omitted/null files, env, packages and setup_commands inherit. Non-null files and command lists replace; env overlays by key; each package manager inherits on omission/null and otherwise replaces its list. Empty lists clear their selected field. Tenant-owned environment_template_id references inherit omitted/null network and allow only narrowing overrides. Inline hosted network:null retains the enabled default; updating a Template with network:null resets its saved policy to enabled. Core freezes effective configuration; template updates/deletion do not alter Session snapshots or same-intent creation retries. Inline or tenant-owned skill_reference Skills share initialization. Templates preserve default/latest/explicit selectors; Session creation freezes concrete metadata and encrypted content atomically. Skill, Plugin and capability-directory list omission/null inherit; a non-null list replaces, including empty-list clearing. Omitted/null Skill version selectors resolve the default version. Source deletion/default updates cannot change committed Session Skill contents. Deferred function discovery uses type-only tool_search and per-function defer_loading in the qualified single-agent Claude function profile on none or a managed/user-owned workspace, including qualified inline image messages and text results. Explicit web_search mode disabled and programmatic_tool_calling enabled false use frozen common Runtime controls. Enabled forms, including those saved on an Agent, remain unqualified and reject before any write unless the Session replaces tools. Omitted programmatic configuration preserves native behavior, a documented difference from the official default-on behavior. Other combinations remain unqualified; see the operation coverage.'
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Creation retry key, up to 128 bytes
-          in: header
-          name: Idempotency-Key
-      responses:
-        '201':
-          description: Created
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Session'
-            text/event-stream:
-              schema:
-                $ref: '#/components/schemas/v1.Session'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-            text/event-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-            text/event-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-            text/event-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-            text/event-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-            text/event-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-            text/event-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-            text/event-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Create an execution Session
-      tags:
-        - Sessions
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/v1.CreateSessionRequest'
-        description: Session configuration
-        required: true
-  /agents/sessions/{session_id}:
-    delete:
-      description: Removes a durably idle or failed Session and its history from the public API. A Session whose root Turn is queued, in progress or waiting (including required actions) or whose input reservation is pending returns 409 conflict_error and is left unchanged; cancel it and wait until it is idle before deleting. Subagent child Turns and pending Environment file writes are not checked and do not block deletion. Repeating the deletion of the caller's own deleted Session returns the same confirmation; missing and foreign Sessions return 404. Internal records and native history are retained pending separate physical cleanup; overlapping stream timing remains unverified.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SessionDeleted'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Delete an execution Session
-      tags:
-        - Sessions
-    get:
-      description: Returns supported none, self_hosted and basic openai_hosted Session environments. Self-hosted pending input can require a caller connection before a Turn exists. Hosted initial provisioning remains idle until a Turn starts; connection observations are not native execution readiness.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Session'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Retrieve an execution Session
-      tags:
-        - Sessions
-    post:
-      description: The metadata field is required in an update body. Send null or {} to clear it, or supply an object to replace all pairs. Up to 16 string pairs, with keys at most 64 characters and values at most 512 characters; violations and non-string values return invalid_request_error with a metadata or metadata.<key> param. U+0000 is rejected as a local storage limit. Malformed, missing and foreign Session IDs share the not-found response. Execution configuration and activity are unchanged. Returns the same safe Environment and pending-input activity projection as Session retrieval.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Session'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Update execution Session metadata
-      tags:
-        - Sessions
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/v1.UpdateSessionRequest'
-        description: Session metadata
-        required: true
-  /agents/sessions/{session_id}/artifacts:
-    get:
-      description: Lists published outputs independently of Environment availability. Sorting uses publication time and ID. A later Turn publishes a path again only when it is new, its bytes changed, or no Artifact remains for it. A malformed environment_id matches nothing. An after value that is not an Artifact of this Session, including a malformed one, returns 400 invalid_request_error with the message "after is not a valid artifact ID". The local default page size is 20; exact upstream defaults remain unverified.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Producing Environment ID; an unknown or malformed ID returns an empty page
-          in: query
-          name: environment_id
-        - schema:
-            type: string
-          description: Last immutable artifact ID
-          in: query
-          name: after
-        - schema:
-            type: integer
-            maximum: 100
-            minimum: 1
-          description: Page size
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Publication order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SessionArtifactList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: List immutable Session artifacts
-      tags:
-        - Artifacts
-  /agents/sessions/{session_id}/artifacts/{artifact_id}:
-    delete:
-      description: Deletes the published copy without modifying its original workspace file. Already admitted content reads may finish; later reads reject.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Artifact ID
-          in: path
-          name: artifact_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SessionArtifactDeleted'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Delete a published artifact
-      tags:
-        - Artifacts
-    get:
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Artifact ID
-          in: path
-          name: artifact_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SessionArtifact'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Retrieve immutable artifact metadata
-      tags:
-        - Artifacts
-  /agents/sessions/{session_id}/artifacts/{artifact_id}/content:
-    get:
-      description: Streams stored bytes after tenant and Session authorization, including after Environment expiration. Exact upstream headers and Range behavior remain unverified.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Artifact ID
-          in: path
-          name: artifact_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/octet-stream:
-              schema:
-                type: string
-                format: binary
-        '400':
-          description: Bad Request
-          content:
-            application/octet-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/octet-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/octet-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/octet-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/octet-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Download immutable artifact bytes
-      tags:
-        - Artifacts
-  /agents/sessions/{session_id}/events:
-    get:
-      description: |-
-        Live-only events, including command output fragments from capable Codex peers as agent.output.command_execution_output.delta with stable Item/output indexes. Native text conversion and output quotas apply; completion snapshots remain authoritative. Reconnect through Session, Turn and Items reads; missed events are not replayed. A lagging stream closes with an error when its bounded buffer is exceeded. When a hosted Environment fails to provision, the stream sends agent.session.environment.failed, an error event (environment_error/sandbox_error with the safe step and exit-status reason, never command output) and agent.session.failed, then ends. Session activity includes immutable pending-input connection actions before Turn creation; self_hosted environments use the same safe output as Session retrieval.
-        Active streams revalidate the original Project key every second before output; revocation, Project archival or authentication unavailability closes the stream. Authentication checks use a five-second timeout.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            text/event-stream:
-              schema:
-                $ref: '#/components/schemas/v1.SessionEvent'
-        '400':
-          description: Bad Request
-          content:
-            text/event-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            text/event-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            text/event-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            text/event-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            text/event-stream:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Stream live Session events
-      tags:
-        - Events
-    post:
-      description: An empty events array is a resource-authorized no-op; it creates no execution retry identity, Turn, Item or input receipt. For environment none, atomically accepts text messages, cancellation and function results. Messages steer active work or start a queued Turn. Qualified Codex and Claude SDK workspace profiles accept text and inline PNG/JPEG messages, independently of managed or self_hosted ownership. Under the Session lock, matching retries retain their original target; new active messages append to the current Turn, while idle messages reserve work and wait up to the original five-minute connection/admission deadline. Return 202 only after durable admission, without claiming native application; active messages create no Turn or reservation. Cancellation-only prepared-environment batches use existing durable cancellation admission and return 202 without waiting for native exit; a new cancellation conflicts while a pre-Turn reservation is pending. Homogeneous tool_result-only prepared-environment batches reuse existing scoped result admission and application receipts without creating a Turn or bypassing a pending reservation. Mixed prepared-environment batches remain unsupported. HTTP expiry/cancellation use local 409 environment_input_expired/environment_input_cancelled errors. New input on a Session whose hosted Environment failed to provision returns the observed 409 conflict_error "the hosted environment failed to provision"; input already waiting when it fails and expired Environments keep the local 409 environment_unavailable. Input the Session cannot accept in its current state, such as a result after cancellation or a batch while earlier input is pending, and a result that differs from the call's saved result return 409 with type and code conflict_error; reusing an Idempotency-Key with a different batch returns the local 409 idempotency_conflict. Inside an owned Session, a result for an unknown call or for a call of another Turn returns 400 invalid_request_error and changes nothing; missing and foreign Sessions return 404. Losing execution ownership returns 503. The response write deadline accommodates the admission window for either prepared Environment, independently of new-hosted-admission and executor URL settings. Disconnecting the waiting HTTP request does not cancel retained work or restart its deadline. Retry keys identify the whole ordered batch. Function output accepts text or ordered text/image parts subject to engine support; Claude SDK accepts text results and, on none and qualified workspace profiles, successful inline PNG/JPEG results, preserving ordered content; error images and remote references reject before admission. Native image resizing may change bytes. Runtime image-result support is checked only for image-bearing delivery. Codex and Claude SDK on none and qualified managed or self_hosted workspace profiles accept ordered inline PNG/JPEG image messages. Other engines remain text-only; remote image URLs are unsupported. Image references are retained unchanged without service-side downloads.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Retry key, up to 128 bytes
-          in: header
-          name: Idempotency-Key
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-      responses:
-        '202':
-          description: Accepted
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Submit Session input events
-      tags:
-        - Sessions
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/v1.CreateEventsRequest'
-        description: Ordered input events
-        required: true
-  /agents/sessions/{session_id}/items:
-    get:
-      description: Returns supported message and tool Items in first-observation order. Native engine fields are projected explicitly; unfinished Items on terminal Turns are incomplete. Cursors are Items of the same tenant and Session. Any other after value, including a malformed one, returns 400 invalid_request_error with the message "Invalid session item ID in `after`".
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Last Item ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            minimum: 0
-          description: Page size; 0 is treated as 1 and values above 100 as 100
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ItemList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: List persisted execution Items
-      tags:
-        - Items
-  /agents/sessions/{session_id}/subagents:
-    get:
-      description: Includes nested and closed Subagents. Cursors are Subagents of the same tenant and Session. Any other after value, including a malformed one, returns 400 invalid_request_error with the message "Invalid resource ID in `after`". A limit outside 1–100 is rejected.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Last Subagent ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            maximum: 100
-            minimum: 1
-          description: Page size
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Resource order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SubagentList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: List Session Subagents
-      tags:
-        - Subagents
-  /agents/sessions/{session_id}/subagents/{subagent_id}:
-    get:
-      description: Returns this Session's persisted Subagent. Active includes idle between Turns. Resuming preserves opened_at and clears closed_at. Unknown or inaccessible parent scopes return not found.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Subagent ID
-          in: path
-          name: subagent_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Subagent'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Retrieve a Session Subagent
-      tags:
-        - Subagents
-  /agents/sessions/{session_id}/subagents/{subagent_id}/items:
-    get:
-      description: Returns only this Subagent's own Items across all its Turns, not its descendants' Items. Cursors are Items of the same tenant, Session and Subagent. Any other after value, including a malformed one, returns 400 invalid_request_error with the message "Invalid session item ID in `after`".
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Subagent ID
-          in: path
-          name: subagent_id
-          required: true
-        - schema:
-            type: string
-          description: Last Item ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            minimum: 0
-          description: Page size; 0 is treated as 1 and values above 100 as 100
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Resource order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ItemList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: List a Subagent's Items
-      tags:
-        - Subagents
-  /agents/sessions/{session_id}/subagents/{subagent_id}/turns:
-    get:
-      description: Includes this Subagent's Turns after resume, with the Session's Agent ID as agent_id. Cursors are Turns of the same tenant, Session and Subagent. Any other after value, including a malformed one, returns 400 invalid_request_error with the message "Invalid resource ID in `after`". Missing recorded usage remains null. A limit outside 1–100 is rejected.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Subagent ID
-          in: path
-          name: subagent_id
-          required: true
-        - schema:
-            type: string
-          description: Last Turn ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            maximum: 100
-            minimum: 1
-          description: Page size
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.TurnList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: List a Subagent's Turns
-      tags:
-        - Subagents
-  /agents/sessions/{session_id}/subagents/{subagent_id}/turns/{turn_id}:
-    get:
-      description: Returns a Turn owned by this Subagent. Its agent_id is the Session's Agent ID and its subagent_id identifies the Subagent. Session Turn routes do not return child Turns. Unknown or inaccessible parent scopes return not found.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Subagent ID
-          in: path
-          name: subagent_id
-          required: true
-        - schema:
-            type: string
-          description: Turn ID
-          in: path
-          name: turn_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Turn'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Retrieve a Subagent Turn
-      tags:
-        - Subagents
-  /agents/sessions/{session_id}/subagents/{subagent_id}/turns/{turn_id}/items:
-    get:
-      description: Returns Items owned by this exact Subagent Turn. Cursors are Items of the same tenant, Session, Subagent and Turn. Any other after value, including a malformed one, returns 400 invalid_request_error with the message "Invalid session item ID in `after`".
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Subagent ID
-          in: path
-          name: subagent_id
-          required: true
-        - schema:
-            type: string
-          description: Turn ID
-          in: path
-          name: turn_id
-          required: true
-        - schema:
-            type: string
-          description: Last Item ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            minimum: 0
-          description: Page size; 0 is treated as 1 and values above 100 as 100
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Resource order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ItemList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: List a Subagent Turn's Items
-      tags:
-        - Subagents
-  /agents/sessions/{session_id}/turns:
-    get:
-      description: Returns the Session's root Turns in creation order; Subagent Turns are listed through the Subagent Turn routes. The cursor belongs to the same Session and tenant; any other after value, including a malformed one or a Subagent Turn ID, returns not found. Usage contains the latest recorded complete token breakdown; missing measurements remain null.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Last Turn ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            maximum: 100
-            minimum: 1
-          description: Page size
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.TurnList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: List execution Turns
-      tags:
-        - Turns
-  /agents/sessions/{session_id}/turns/{turn_id}:
-    get:
-      description: Returns a root Turn of this Session. A Subagent Turn ID returns the same not found error as a missing Turn; read it through the Subagent Turn routes.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Session ID
-          in: path
-          name: session_id
-          required: true
-        - schema:
-            type: string
-          description: Turn ID
-          in: path
-          name: turn_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Turn'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Retrieve an execution Turn
-      tags:
-        - Turns
-  /files:
-    get:
-      description: Lists project-owned Files without reading their bodies. The limit defaults to 10000 and must be 1–10000. Equal creation times use ID ordering. Purpose validation precedes cursor lookup; current storage contains only user_data. An explicit empty purpose is treated as omitted. Repeated purpose values remain rejected. Hosted positive filtering, default order and concurrent-page behavior remain unverified. No Beta header is required.
-      parameters:
-        - schema:
-            type: string
-          description: Last File ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-            maximum: 10000
-            minimum: 1
-          description: Maximum page size, 1–10000
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-          description: Only return Files with this purpose
-          in: query
-          name: purpose
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SourceFileList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: List source files
-      tags:
-        - Files
-    post:
-      description: Accepts one multipart file and purpose=user_data in either order, with a private 512 MiB content limit and 64 KiB envelope allowance. Commits only after the entire request validates. The source is project-owned, independent of Sessions and workspace copies. No Beta header is required. Other purposes, expires_after, listing, resumable Uploads, quotas/rate-limit and complete hosted error/status parity remain unsupported or unverified.
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SourceFile'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Upload a source file
-      tags:
-        - Files
-      requestBody:
-        content:
-          application/x-www-form-urlencoded:
-            schema:
-              type: object
-              properties:
-                file:
-                  type: string
-                  description: Source bytes
-                purpose:
-                  type: string
-                  description: user_data
-              required:
-                - file
-                - purpose
-  /files/{file_id}:
-    delete:
-      description: Atomically deletes project-owned metadata and stored bytes. Already-admitted reads or copies may finish. Workspace copies remain independent. Historical WAL/backups are not erased. No Beta header is required; exact hosted concurrent deletion/error semantics remain unverified.
-      parameters:
-        - schema:
-            type: string
-          description: Source file ID
-          in: path
-          name: file_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SourceFileDeleted'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Delete a source file
-      tags:
-        - Files
-    get:
-      description: Returns immutable project-owned user_data file metadata. No Beta header is required. Other purposes, expiration and full hosted status/error semantics remain unimplemented or unverified.
-      parameters:
-        - schema:
-            type: string
-          description: Source file ID
-          in: path
-          name: file_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SourceFile'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Retrieve source file metadata
-      tags:
-        - Files
-  /files/{file_id}/content:
-    get:
-      description: Resolves project-owned File metadata before enforcing download policy. Public download of user_data Files returns 400; missing and foreign Files return the same 404. Internal initial-file and workspace copies remain available. No Beta header is required.
-      parameters:
-        - schema:
-            type: string
-          description: Source file ID
-          in: path
-          name: file_id
-          required: true
-      responses:
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Download source file bytes
-      tags:
-        - Files
-  /skills:
-    get:
-      description: Lists tenant-owned metadata in timestamp order. Default page size 20, maximum 100. Limit 0 returns an empty page whose has_more reports whether any Skill follows the cursor; exact hosted defaults remain unverified.
-      parameters:
-        - schema:
-            type: string
-          description: Skill resource cursor
-          in: query
-          name: after
-        - schema:
-            type: integer
-            maximum: 100
-            minimum: 0
-          description: Page size; 0 returns an empty page
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SkillList'
-      security:
-        - BearerAuth: []
-      summary: List Skills
-      tags:
-        - Skills
-    post:
-      description: Accepts one ZIP in files or a directory in files[]. Applies the qualified portable Skill bundle profile. No Beta header is required; full hosted upload limits and activation extensions are not qualified.
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Skill'
-      security:
-        - BearerAuth: []
-      summary: Upload a Skill
-      tags:
-        - Skills
-      requestBody:
-        content:
-          application/x-www-form-urlencoded:
-            schema:
-              type: object
-              properties:
-                files:
-                  type: string
-                  description: Skill ZIP or directory files
-              required:
-                - files
-  /skills/{skill_id}:
-    delete:
-      description: Deletes tenant-owned source bundles. Existing Session installation snapshots remain independent.
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SkillDeleted'
-      security:
-        - BearerAuth: []
-      summary: Delete a Skill and its versions
-      tags:
-        - Skills
-    get:
-      description: Returns tenant-owned metadata without decrypting contents or starting Runtime. No Beta header is required.
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Skill'
-      security:
-        - BearerAuth: []
-      summary: Retrieve Skill metadata
-      tags:
-        - Skills
-    post:
-      description: Changes only the tenant-owned default pointer; immutable versions and existing Session snapshots remain unchanged.
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Skill'
-      security:
-        - BearerAuth: []
-      summary: Update the default Skill version
-      tags:
-        - Skills
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/v1.SkillUpdateRequest'
-        description: Default version
-        required: true
-  /skills/{skill_id}/content:
-    get:
-      description: Downloads an authorized ZIP using the default pointer when no concrete version is supplied. Exact upstream unversioned selection, content headers and range semantics remain unverified.
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/octet-stream:
-              schema:
-                type: string
-                format: binary
-      security:
-        - BearerAuth: []
-      summary: Download Skill content
-      tags:
-        - Skills
-  /skills/{skill_id}/versions:
-    get:
-      description: Orders by version number; after identifies a version resource, not a version number. An after value that does not begin with skillver, or a version of another Skill, returns 400 invalid_value with param after; a missing version returns not found. No contents are decrypted. Limit 0 returns an empty page whose has_more reports whether any version follows the cursor.
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-        - schema:
-            type: string
-          description: Version resource cursor
-          in: query
-          name: after
-        - schema:
-            type: integer
-            maximum: 100
-            minimum: 0
-          description: Page size; 0 returns an empty page
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Version order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SkillVersionList'
-      security:
-        - BearerAuth: []
-      summary: List Skill versions
-      tags:
-        - Skills
-    post:
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SkillVersion'
-      security:
-        - BearerAuth: []
-      summary: Upload an immutable Skill version
-      tags:
-        - Skills
-      requestBody:
-        content:
-          application/x-www-form-urlencoded:
-            schema:
-              type: object
-              properties:
-                files:
-                  type: string
-                  description: Skill ZIP or directory files
-                default:
-                  type: boolean
-                  description: Set as default
-              required:
-                - files
-  /skills/{skill_id}/versions/{version}:
-    delete:
-      description: Deleting the only remaining version also deletes the Skill; existing Session installation snapshots remain independent. The default version cannot be deleted while other versions remain. Version numbers are never reused.
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-        - schema:
-            type: string
-          description: Concrete version number
-          in: path
-          name: version
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SkillVersionDeleted'
-      security:
-        - BearerAuth: []
-      summary: Delete a Skill version
-      tags:
-        - Skills
-    get:
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-        - schema:
-            type: string
-          description: Concrete version number
-          in: path
-          name: version
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.SkillVersion'
-      security:
-        - BearerAuth: []
-      summary: Retrieve Skill version metadata
-      tags:
-        - Skills
-  /skills/{skill_id}/versions/{version}/content:
-    get:
-      parameters:
-        - schema:
-            type: string
-          description: Skill ID
-          in: path
-          name: skill_id
-          required: true
-        - schema:
-            type: string
-          description: Concrete version number
-          in: path
-          name: version
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/octet-stream:
-              schema:
-                type: string
-                format: binary
-      security:
-        - BearerAuth: []
-      summary: Download immutable Skill version content
-      tags:
-        - Skills
-  /vaults:
-    get:
-      description: Lists project-owned Vaults independently of execution. An unknown, malformed or foreign after cursor returns not found. Includes active and archived records by default. Status accepts a scalar, the SDK's status[] array or both, filtering by their union; a repeated scalar is rejected. Limits default to 20 and clamp to 1–100. Equal creation times use ID ordering; exact hosted errors and concurrent-page behavior remain unverified. Archive/delete lifecycle is not implemented.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Last Vault ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-          description: Requested page size, clamped to 1–100
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-            enum:
-              - active
-              - archived
-          description: Scalar status filter
-          in: query
-          name: status
-        - schema:
-            type: array
-            items:
-              enum:
-                - active
-                - archived
-              type: string
-          style: form
-          explode: true
-          description: Array status filter; combined with status as a union
-          in: query
-          name: status[]
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.VaultList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: List Vaults
-      tags:
-        - Vaults
-    post:
-      description: Creates a project-owned Vault independently of execution. Omitted name stays null; a supplied string is trimmed and must contain 1–256 UTF-8 bytes. Explicit null name is invalid. Omitted/null metadata becomes an empty object; non-string values return invalid_request_error with a metadata.<key> param. Metadata has a local 64 KiB encoded storage bound. U+0000 in stored strings is rejected as a local storage limit. Credentials, Session binding and hosted error/retry parity remain incomplete.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-      responses:
-        '201':
-          description: Created
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Vault'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Create a Vault
-      tags:
-        - Vaults
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/v1.CreateVaultRequest'
-        description: Vault name and metadata
-        required: true
-  /vaults/{vault_id}:
-    delete:
-      description: Atomically removes the authenticated project's Vault and all its stored Credentials without an encryption key, decryption or external requests. Existing Session snapshots, history and recorded retries retain their frozen identities; subsequent credential lookups fail without reselection or anonymous fallback. Already-resolved tokens and running Sessions are not revoked or cancelled. Missing/repeated deletion locally returns 404. Exact hosted archive, post-delete visibility and concurrent/error semantics remain unverified; physical erasure from native history, WAL or backups is not established.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Vault ID
-          in: path
-          name: vault_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.VaultDeleted'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Delete a Vault and all its Credentials
-      tags:
-        - Vaults
-    get:
-      description: Reads a Vault owned by the authenticated project without resolving credentials, Sessions or execution devices. Missing and foreign IDs share the same not-found response; exact hosted error semantics remain unverified.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Vault ID
-          in: path
-          name: vault_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Vault'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Retrieve a Vault
-      tags:
-        - Vaults
-  /vaults/{vault_id}/credentials:
-    get:
-      description: Lists only metadata from the authenticated project's requested Vault, without decryption or execution. An unknown, malformed or foreign after cursor, including another Vault's Credential, returns not found. Includes active and archived Credentials by default, independently of Vault status. Status accepts a scalar, the SDK status[] array or both, filtering by their union; a repeated scalar is rejected. Limits default to 20 and clamp to 1–100. Equal creation times use ID ordering. Hosted errors, concurrent-page behavior and archive/delete lifecycle remain unverified or unimplemented.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Vault ID
-          in: path
-          name: vault_id
-          required: true
-        - schema:
-            type: string
-          description: Last Credential ID from the previous page
-          in: query
-          name: after
-        - schema:
-            type: integer
-          description: Requested page size, clamped to 1–100
-          in: query
-          name: limit
-        - schema:
-            type: string
-            enum:
-              - asc
-              - desc
-          description: Creation order; omit for descending, explicit empty values are invalid
-          in: query
-          name: order
-        - schema:
-            type: string
-            enum:
-              - active
-              - archived
-          description: Scalar status filter
-          in: query
-          name: status
-        - schema:
-            type: array
-            items:
-              enum:
-                - active
-                - archived
-              type: string
-          style: form
-          explode: true
-          description: Array status filter; combined with status as a union
-          in: query
-          name: status[]
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.CredentialList'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: List safe Vault Credential metadata
-      tags:
-        - Credentials
-    post:
-      description: Stores static_bearer or mcp_oauth secrets as execution-owned authenticated ciphertext without contacting any endpoint. Static bearer and OAuth access tokens must be nonempty strings; their bytes are preserved. OAuth accepts a required access token, nullable RFC3339 expiry and optional refresh configuration with none, client_secret_basic or client_secret_post authentication. Required name is trimmed to 1–256 UTF-8 bytes. Credential and token endpoints require HTTPS without userinfo or fragments. Responses contain safe metadata only, including explicit nullable OAuth expiry, refresh, resource and scope. Missing encryption configuration returns local 503. External authorization and provider revocation remain caller responsibilities; exact hosted error/default semantics remain unverified.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Vault ID
-          in: path
-          name: vault_id
-          required: true
-      responses:
-        '201':
-          description: Created
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Credential'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Create a Vault Credential
-      tags:
-        - Credentials
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/v1.CreateCredentialRequest'
-        description: Write-only credential authentication union
-        required: true
-  /vaults/{vault_id}/credentials/{credential_id}:
-    delete:
-      description: Removes one Credential and its encrypted token within the authenticated project and owning Vault, without an encryption key or secret decryption. Subsequent metadata reads, updates and dispatch lookups cannot use it. Existing Session snapshots and history retain their frozen identities; already-resolved tokens and running Sessions are not revoked or cancelled. This local policy removes the row rather than defining archived lifecycle; missing/repeated deletion returns 404. Exact hosted archive, post-delete visibility and retry/error semantics remain unverified. Provider revocation and physical erasure from native history, WAL or backups are separate concerns.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Vault ID
-          in: path
-          name: vault_id
-          required: true
-        - schema:
-            type: string
-          description: Credential ID
-          in: path
-          name: credential_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.CredentialDeleted'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Delete a Vault Credential
-      tags:
-        - Credentials
-    get:
-      description: Reads only non-secret metadata scoped to the authenticated project and owning Vault. No token decryption, network request or execution is performed. Unknown, foreign, wrong-Vault and malformed IDs use the same local not-found response; hosted error parity remains unverified.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Vault ID
-          in: path
-          name: vault_id
-          required: true
-        - schema:
-            type: string
-          description: Credential ID
-          in: path
-          name: credential_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Credential'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Retrieve safe Vault Credential metadata
-      tags:
-        - Credentials
-    post:
-      description: Explicitly empty static bearer or OAuth access tokens and OAuth patches without a mutable field are rejected before storage. Omitted OAuth access tokens preserve the existing grant when expiry or refresh fields change. Updates the existing static_bearer or mcp_oauth authentication method without network requests. OAuth access_token omission/null retains the token; a new token clears omitted expiry, explicit null clears expiry, and other omitted fields remain unchanged. OAuth refresh patches cannot add configuration or change client, endpoint, resource or authentication method; nullable token/client-secret values retain stored secrets while explicit null scope clears scope. Whole-null refresh and token_endpoint_auth retain existing configuration under local policy. Identity, destination, creation time and Session bindings remain unchanged. Responses expose safe metadata only. Already-dispatched work is not revoked; provider revocation, storage-key rotation and exact hosted concurrent-update/error semantics remain separate.
-      parameters:
-        - schema:
-            type: string
-          description: agents=v1
-          in: header
-          name: OpenAI-Beta
-          required: true
-        - schema:
-            type: string
-          description: Vault ID
-          in: path
-          name: vault_id
-          required: true
-        - schema:
-            type: string
-          description: Credential ID
-          in: path
-          name: credential_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.Credential'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '413':
-          description: Request Entity Too Large
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - BearerAuth: []
-      summary: Replace Vault Credential authentication secrets
-      tags:
-        - Credentials
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/v1.UpdateCredentialRequest'
-        description: Write-only credential authentication replacement union
-        required: true
-schemes:
-  - http
-  - https
-openapi: 3.1.0
-servers:
-  - url: https://core.example.com/v1
-    description: Documentation placeholder; substitute your Core public origin.
-components:
-  schemas:
-    v1.APIError:
-      properties:
-        code:
-          anyOf:
-            - type: string
-            - type: 'null'
-        message:
-          type: string
-        param:
-          anyOf:
-            - type: string
-            - type: 'null'
-        type:
-          type: string
-      required:
-        - message
-        - type
-      type: object
-    v1.Agent:
-      properties:
-        id:
-          type: string
-        instructions:
-          anyOf:
-            - type: string
-            - type: 'null'
-        model:
-          type: string
-        multi_agent:
-          $ref: '#/components/schemas/v1.MultiAgentConfig'
-        name:
-          anyOf:
-            - type: string
-            - type: 'null'
-        reasoning:
-          $ref: '#/components/schemas/v1.Reasoning'
-        service_tier:
-          enum:
-            - auto
-          type: string
-        text:
-          $ref: '#/components/schemas/v1.TextConfig'
-        tools:
-          items:
-            type: object
-          type: array
-        x_agents_core:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.AgentsCore'
-            - type: 'null'
-      required:
-        - id
-        - model
-        - multi_agent
-        - reasoning
-        - service_tier
-        - text
-        - tools
-      type: object
-    v1.AgentContent:
-      properties:
-        encrypted_content:
-          type: string
-        text:
-          type: string
-        type:
-          enum:
-            - output_text
-            - encrypted_content
-          type: string
-      required:
-        - type
-      type: object
-    v1.AgentDeleted:
-      properties:
-        deleted:
-          enum:
-            - true
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - agent.deleted
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.AgentsCore:
-      properties:
-        harness:
-          enum:
-            - claude_sdk
-            - codex
-            - mcode
-          type: string
-        harness_config:
-          type: object
-      type: object
-    v1.CreateAgentRequest:
-      properties:
-        instructions:
-          anyOf:
-            - type: string
-            - type: 'null'
-        metadata:
-          anyOf:
-            - additionalProperties:
-                type: string
-              type: object
-            - type: 'null'
-        model:
-          type: string
-        multi_agent:
-          anyOf:
-            - type: object
-            - type: 'null'
-        name:
-          anyOf:
-            - maxLength: 128
-              type: string
-            - type: 'null'
-        reasoning:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.Reasoning'
-            - type: 'null'
-        service_tier:
-          anyOf:
-            - enum:
-                - auto
-                - default
-                - flex
-                - priority
-                - fast
-              type: string
-            - type: 'null'
-        text:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.SavedAgentTextInput'
-            - type: 'null'
-        tools:
-          anyOf:
-            - items:
-                type: object
-              type: array
-            - type: 'null'
-        x_agents_core:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.SavedAgentCoreInput'
-            - type: 'null'
-      required:
-        - model
-      type: object
-    v1.CreateCredentialRequest:
-      properties:
-        auth:
-          $ref: '#/components/schemas/v1.CredentialAuthInput'
-        name:
-          type: string
-      required:
-        - auth
-        - name
-      type: object
-    v1.CreateEventsRequest:
-      properties:
-        events:
-          items:
-            $ref: '#/components/schemas/v1.SessionInput'
-          type: array
-      required:
-        - events
-      type: object
-    v1.CreateSessionRequest:
-      properties:
-        agent:
-          $ref: '#/components/schemas/v1.InlineAgent'
-        agent_id:
-          type: string
-        environment:
-          $ref: '#/components/schemas/v1.Environment'
-        input:
-          anyOf:
-            - {}
-            - type: 'null'
-          description: |-
-            Input accepts a string or an ordered array of user InputMessage objects.
-            Required for none and streamed creation outside self_hosted; otherwise optional.
-        metadata:
-          anyOf:
-            - additionalProperties:
-                type: string
-              type: object
-            - type: 'null'
-        stream:
-          default: false
-          type: boolean
-        vault_ids:
-          items:
-            type: string
-          type: array
-        x_agents_core:
-          $ref: '#/components/schemas/v1.SessionExecutionInput'
-      required:
-        - environment
-      type: object
-    v1.CreateVaultRequest:
-      properties:
-        metadata:
-          anyOf:
-            - additionalProperties:
-                type: string
-              type: object
-            - type: 'null'
-        name:
-          type: string
-      type: object
-    v1.Credential:
-      properties:
-        auth:
-          $ref: '#/components/schemas/v1.CredentialAuth'
-        created_at:
-          type: integer
-        id:
-          type: string
-        name:
-          type: string
-        object:
-          enum:
-            - vault.credential
-          type: string
-        updated_at:
-          type: integer
-        vault_id:
-          type: string
-      required:
-        - auth
-        - created_at
-        - id
-        - name
-        - object
-        - updated_at
-        - vault_id
-      type: object
-    v1.CredentialAuth:
-      properties:
-        expires_at:
-          anyOf:
-            - type: string
-            - type: 'null'
-        mcp_server_url:
-          type: string
-        refresh:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.OAuthCredentialRefresh'
-            - type: 'null'
-        type:
-          enum:
-            - static_bearer
-            - mcp_oauth
-          type: string
-      required:
-        - mcp_server_url
-        - type
-      type: object
-    v1.CredentialAuthInput:
-      properties:
-        access_token:
-          minLength: 1
-          type: string
-        expires_at:
-          anyOf:
-            - type: string
-            - type: 'null'
-        mcp_server_url:
-          type: string
-        refresh:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.OAuthCredentialRefreshInput'
-            - type: 'null'
-        token:
-          minLength: 1
-          type: string
-        type:
-          enum:
-            - static_bearer
-            - mcp_oauth
-          type: string
-      required:
-        - mcp_server_url
-        - type
-      type: object
-    v1.CredentialAuthReplacement:
-      properties:
-        access_token:
-          anyOf:
-            - minLength: 1
-              type: string
-            - type: 'null'
-        expires_at:
-          anyOf:
-            - type: string
-            - type: 'null'
-        refresh:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.OAuthCredentialRefreshReplacement'
-            - type: 'null'
-        token:
-          minLength: 1
-          type: string
-        type:
-          enum:
-            - static_bearer
-            - mcp_oauth
-          type: string
-      required:
-        - type
-      type: object
-    v1.CredentialDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - vault.credential.deleted
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.CredentialList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.Credential'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.Environment:
-      properties:
-        capability_directories:
-          anyOf:
-            - items:
-                type: string
-              type: array
-            - type: 'null'
-        env:
-          anyOf:
-            - additionalProperties:
-                type: string
-              type: object
-            - type: 'null'
-        environment_template_id:
-          type: string
-        files:
-          anyOf:
-            - items:
-                type: object
-              type: array
-            - type: 'null'
-        network:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.EnvironmentNetworkInput'
-            - type: 'null'
-        packages:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.EnvironmentPackages'
-            - type: 'null'
-        plugins:
-          anyOf:
-            - items:
-                type: object
-              type: array
-            - type: 'null'
-        setup_commands:
-          anyOf:
-            - items:
-                type: object
-              type: array
-            - type: 'null'
-        skills:
-          anyOf:
-            - items:
-                type: object
-              type: array
-            - type: 'null'
-        type:
-          enum:
-            - none
-            - self_hosted
-            - openai_hosted
-          type: string
-        workspace_directory:
-          type: string
-      required:
-        - type
-      type: object
-    v1.EnvironmentFile:
-      properties:
-        environment_id:
-          type: string
-        object:
-          enum:
-            - agent.environment.file
-          type: string
-        path:
-          type: string
-        size_bytes:
-          minimum: 0
-          type: integer
-      required:
-        - environment_id
-        - object
-        - path
-        - size_bytes
-      type: object
-    v1.EnvironmentFileCreateRequest:
-      properties:
-        data:
-          type: string
-        file_id:
-          type: string
-        path:
-          type: string
-        type:
-          enum:
-            - inline
-            - file_id
-          type: string
-      required:
-        - path
-        - type
-      type: object
-    v1.EnvironmentFileList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.EnvironmentFile'
-          type: array
-        has_more:
-          type: boolean
-        next:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - page
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.EnvironmentInfo:
-      properties:
-        files:
-          items:
-            type: object
-          type: array
-        id:
-          type: string
-        object:
-          enum:
-            - agent.environment
-          type: string
-        plugins:
-          items:
-            type: object
-          type: array
-        skills:
-          items:
-            type: object
-          type: array
-        status:
-          enum:
-            - pending
-            - connected
-            - disconnected
-            - expired
-            - failed
-          type: string
-        type:
-          enum:
-            - openai_hosted
-            - self_hosted
-          type: string
-      required:
-        - files
-        - id
-        - object
-        - plugins
-        - skills
-        - status
-        - type
-      type: object
-    v1.EnvironmentInstallation:
-      properties:
-        commands:
-          additionalProperties:
-            type: string
-          type: object
-        expires_at:
-          type: integer
-        message:
-          type: string
-        status:
-          enum:
-            - available
-            - unavailable
-          type: string
-        version:
-          type: string
-      type: object
-    v1.EnvironmentNetwork:
-      properties:
-        access:
-          enum:
-            - enabled
-            - disabled
-            - restricted
-          type: string
-        allowed_domains:
-          items:
-            type: string
-          type: array
-      required:
-        - access
-        - allowed_domains
-      type: object
-    v1.EnvironmentNetworkInput:
-      properties:
-        access:
-          enum:
-            - enabled
-            - disabled
-            - restricted
-          type: string
-        allowed_domains:
-          anyOf:
-            - items:
-                type: string
-              type: array
-            - type: 'null'
-      required:
-        - access
-      type: object
-    v1.EnvironmentPackages:
-      properties:
-        npm:
-          items:
-            type: string
-          type: array
-        python:
-          items:
-            type: string
-          type: array
-      required:
-        - npm
-        - python
-      type: object
-    v1.EnvironmentPackagesInput:
-      properties:
-        npm:
-          anyOf:
-            - items:
-                type: string
-              type: array
-            - type: 'null'
-        python:
-          anyOf:
-            - items:
-                type: string
-              type: array
-            - type: 'null'
-      type: object
-    v1.EnvironmentPackagesResponse:
-      properties:
-        npm:
-          items:
-            type: string
-          type: array
-        python:
-          items:
-            type: string
-          type: array
-        system:
-          items:
-            type: string
-          type: array
-      required:
-        - npm
-        - python
-        - system
-      type: object
-    v1.EnvironmentTemplate:
-      properties:
-        capability_directories:
-          items:
-            type: string
-          type: array
-        created_at:
-          type: integer
-        files:
-          items:
-            type: object
-          type: array
-        id:
-          type: string
-        name:
-          anyOf:
-            - type: string
-            - type: 'null'
-        network:
-          $ref: '#/components/schemas/v1.EnvironmentNetwork'
-        object:
-          enum:
-            - agent.environment.template
-          type: string
-        packages:
-          $ref: '#/components/schemas/v1.EnvironmentPackagesResponse'
-        plugins:
-          items:
-            type: object
-          type: array
-        skills:
-          items:
-            type: object
-          type: array
-        updated_at:
-          type: integer
-      required:
-        - capability_directories
-        - created_at
-        - files
-        - id
-        - network
-        - object
-        - packages
-        - plugins
-        - skills
-        - updated_at
-      type: object
-    v1.EnvironmentTemplateDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - agent.environment.template.deleted
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.EnvironmentTemplateList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.EnvironmentTemplate'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.EnvironmentTemplateRequest:
-      properties:
-        capability_directories:
-          anyOf:
-            - items:
-                type: string
-              type: array
-            - type: 'null'
-        env:
-          anyOf:
-            - additionalProperties:
-                type: string
-              type: object
-            - type: 'null'
-        files:
-          anyOf:
-            - items:
-                type: object
-              type: array
-            - type: 'null'
-        name:
-          anyOf:
-            - type: string
-            - type: 'null'
-        network:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.EnvironmentNetworkInput'
-            - type: 'null'
-        packages:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.EnvironmentPackagesInput'
-            - type: 'null'
-        plugins:
-          anyOf:
-            - items:
-                type: object
-              type: array
-            - type: 'null'
-        setup_commands:
-          anyOf:
-            - items:
-                type: object
-              type: array
-            - type: 'null'
-        skills:
-          anyOf:
-            - items:
-                type: object
-              type: array
-            - type: 'null'
-      type: object
-    v1.ErrorResponse:
-      properties:
-        error:
-          $ref: '#/components/schemas/v1.APIError'
-      required:
-        - error
-      type: object
-    v1.InlineAgent:
-      properties:
-        instructions:
-          anyOf:
-            - type: string
-            - type: 'null'
-        model:
-          type: string
-        multi_agent:
-          anyOf:
-            - type: object
-            - type: 'null'
-        reasoning:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.Reasoning'
-            - type: 'null'
-        service_tier:
-          anyOf:
-            - enum:
-                - auto
-                - default
-                - flex
-                - priority
-                - fast
-              type: string
-            - type: 'null'
-        text:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.SavedAgentTextInput'
-            - type: 'null'
-        tools:
-          anyOf:
-            - items:
-                type: object
-              type: array
-            - type: 'null'
-        x_agents_core:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.AgentsCore'
-            - type: 'null'
-      type: object
-    v1.InputContent:
-      properties:
-        image_url:
-          type: string
-        text:
-          type: string
-        type:
-          enum:
-            - input_text
-            - input_image
-          type: string
-      required:
-        - type
-      type: object
-    v1.InputMessage:
-      properties:
-        content:
-          items:
-            $ref: '#/components/schemas/v1.InputContent'
-          type: array
-        role:
-          enum:
-            - user
-          type: string
-        type:
-          enum:
-            - message
-          type: string
-      required:
-        - content
-        - role
-      type: object
-    v1.InputTokenDetails:
-      properties:
-        cached_tokens:
-          type: integer
-      required:
-        - cached_tokens
-      type: object
-    v1.Item:
-      properties:
-        action:
-          $ref: '#/components/schemas/v1.WebSearchAction'
-        agent_id:
-          type: string
-        arguments: {}
-        call_id:
-          type: string
-        command:
-          type: string
-        content:
-          items:
-            $ref: '#/components/schemas/v1.ItemContent'
-          type: array
-        cwd:
-          type: string
-        duration_ms:
-          type: integer
-        error: {}
-        exit_code:
-          type: integer
-        id:
-          type: string
-        model:
-          type: string
-        name:
-          type: string
-        output: {}
-        phase:
-          anyOf:
-            - enum:
-                - commentary
-                - final_answer
-              type: string
-            - type: 'null'
-        reasoning_effort:
-          type: string
-        recipient_agent_id:
-          type: string
-        recipient_agent_ids:
-          items:
-            type: string
-          type: array
-        role:
-          enum:
-            - user
-            - assistant
-          type: string
-        sender_agent_id:
-          type: string
-        server_label:
-          type: string
-        status:
-          enum:
-            - in_progress
-            - completed
-            - failed
-            - incomplete
-          type: string
-        summary:
-          items:
-            $ref: '#/components/schemas/v1.SummaryText'
-          type: array
-        turn_id:
-          type: string
-        type:
-          enum:
-            - message
-            - command_execution
-            - mcp_call
-            - function_call
-            - function_call_output
-            - web_search_call
-            - reasoning
-            - agent_message
-            - create_subagent_call
-            - send_subagent_input_call
-            - resume_subagent_call
-            - wait_for_subagents_call
-            - interrupt_subagent_call
-            - close_subagent_call
-          type: string
-      required:
-        - id
-        - turn_id
-        - type
-      type: object
-    v1.ItemContent:
-      properties:
-        encrypted_content:
-          type: string
-        image_url:
-          type: string
-        text:
-          type: string
-        type:
-          enum:
-            - input_text
-            - output_text
-            - input_image
-            - encrypted_content
-          type: string
-      required:
-        - type
-      type: object
-    v1.ItemList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.Item'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.ModelProviderInput:
-      properties:
-        api_key:
-          type: string
-        base_url:
-          type: string
-        context_window:
-          type: integer
-        max_output_tokens:
-          type: integer
-        protocol:
-          enum:
-            - anthropic
-            - responses
-            - chat_completions
-          type: string
-      required:
-        - api_key
-        - base_url
-        - protocol
-      type: object
-    v1.ModelProviderView:
-      properties:
-        api_key_configured:
-          type: boolean
-        base_url:
-          type: string
-        context_window:
-          type: integer
-        max_output_tokens:
-          type: integer
-        protocol:
-          enum:
-            - anthropic
-            - responses
-            - chat_completions
-          type: string
-      required:
-        - api_key_configured
-        - base_url
-        - protocol
-      type: object
-    v1.MultiAgentConfig:
-      properties:
-        enabled:
-          type: boolean
-        max_concurrent_subagents:
-          anyOf:
-            - type: integer
-            - type: 'null'
-      required:
-        - enabled
-      type: object
-    v1.OAuthCredentialRefresh:
-      properties:
-        client_id:
-          type: string
-        resource:
-          anyOf:
-            - type: string
-            - type: 'null'
-        scope:
-          anyOf:
-            - type: string
-            - type: 'null'
-        token_endpoint:
-          type: string
-        token_endpoint_auth:
-          $ref: '#/components/schemas/v1.OAuthEndpointAuth'
-      required:
-        - client_id
-        - token_endpoint
-        - token_endpoint_auth
-      type: object
-    v1.OAuthCredentialRefreshInput:
-      properties:
-        client_id:
-          type: string
-        refresh_token:
-          type: string
-        resource:
-          anyOf:
-            - type: string
-            - type: 'null'
-        scope:
-          anyOf:
-            - type: string
-            - type: 'null'
-        token_endpoint:
-          type: string
-        token_endpoint_auth:
-          $ref: '#/components/schemas/v1.OAuthEndpointAuthInput'
-      required:
-        - client_id
-        - refresh_token
-        - token_endpoint
-        - token_endpoint_auth
-      type: object
-    v1.OAuthCredentialRefreshReplacement:
-      properties:
-        refresh_token:
-          anyOf:
-            - type: string
-            - type: 'null'
-        scope:
-          anyOf:
-            - type: string
-            - type: 'null'
-        token_endpoint_auth:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.OAuthEndpointAuthReplacement'
-            - type: 'null'
-      type: object
-    v1.OAuthEndpointAuth:
-      properties:
-        type:
-          enum:
-            - none
-            - client_secret_basic
-            - client_secret_post
-          type: string
-      required:
-        - type
-      type: object
-    v1.OAuthEndpointAuthInput:
-      properties:
-        client_secret:
-          type: string
-        type:
-          enum:
-            - none
-            - client_secret_basic
-            - client_secret_post
-          type: string
-      required:
-        - type
-      type: object
-    v1.OAuthEndpointAuthReplacement:
-      properties:
-        client_secret:
-          anyOf:
-            - type: string
-            - type: 'null'
-        type:
-          enum:
-            - client_secret_basic
-            - client_secret_post
-          type: string
-      required:
-        - type
-      type: object
-    v1.OutputTokenDetails:
-      properties:
-        reasoning_tokens:
-          type: integer
-      required:
-        - reasoning_tokens
-      type: object
-    v1.Reasoning:
-      properties:
-        effort:
-          anyOf:
-            - type: string
-            - type: 'null'
-        summary:
-          anyOf:
-            - type: string
-            - type: 'null'
-      type: object
-    v1.RequiredAction:
-      properties:
-        arguments: {}
-        call_id:
-          type: string
-        environment_id:
-          type: string
-        name:
-          type: string
-        turn_id:
-          type: string
-        type:
-          enum:
-            - function_call
-            - environment_connection
-          type: string
-      required:
-        - type
-      type: object
-    v1.SavedAgent:
-      properties:
-        created_at:
-          type: integer
-        id:
-          type: string
-        instructions:
-          anyOf:
-            - type: string
-            - type: 'null'
-        metadata:
-          additionalProperties:
-            type: string
-          type: object
-        model:
-          type: string
-        multi_agent:
-          $ref: '#/components/schemas/v1.MultiAgentConfig'
-        name:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - agent
-          type: string
-        reasoning:
-          $ref: '#/components/schemas/v1.Reasoning'
-        service_tier:
-          enum:
-            - auto
-            - default
-            - flex
-            - priority
-            - fast
-          type: string
-        text:
-          $ref: '#/components/schemas/v1.SavedAgentText'
-        tools:
-          items:
-            type: object
-          type: array
-        updated_at:
-          type: integer
-        x_agents_core:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.SavedAgentCore'
-            - type: 'null'
-      required:
-        - created_at
-        - id
-        - metadata
-        - model
-        - multi_agent
-        - object
-        - reasoning
-        - service_tier
-        - text
-        - tools
-        - updated_at
-      type: object
-    v1.SavedAgentCore:
-      properties:
-        harness:
-          enum:
-            - claude_sdk
-            - codex
-            - mcode
-          type: string
-        harness_config:
-          type: object
-        model_provider:
-          $ref: '#/components/schemas/v1.ModelProviderView'
-      type: object
-    v1.SavedAgentCoreInput:
-      properties:
-        harness:
-          enum:
-            - claude_sdk
-            - codex
-            - mcode
-          type: string
-        harness_config:
-          type: object
-        model_provider:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.ModelProviderInput'
-            - type: 'null'
-      type: object
-    v1.SavedAgentList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.SavedAgent'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.SavedAgentText:
-      properties:
-        format:
-          $ref: '#/components/schemas/v1.SavedAgentTextFormat'
-        verbosity:
-          enum:
-            - low
-            - medium
-            - high
-          type: string
-      required:
-        - format
-        - verbosity
-      type: object
-    v1.SavedAgentTextFormat:
-      properties:
-        schema:
-          type: object
-        type:
-          enum:
-            - text
-            - json_schema
-          type: string
-      required:
-        - type
-      type: object
-    v1.SavedAgentTextInput:
-      properties:
-        format:
-          anyOf:
-            - type: object
-            - type: 'null'
-        verbosity:
-          anyOf:
-            - enum:
-                - low
-                - medium
-                - high
-              type: string
-            - type: 'null'
-      type: object
-    v1.Session:
-      properties:
-        agent:
-          $ref: '#/components/schemas/v1.Agent'
-        created_at:
-          type: integer
-        environment:
-          $ref: '#/components/schemas/v1.SessionEnvironment'
-        error:
-          anyOf:
-            - type: string
-            - type: 'null'
-        id:
-          type: string
-        last_active_at:
-          type: integer
-        metadata:
-          additionalProperties:
-            type: string
-          type: object
-        object:
-          enum:
-            - agent.session
-          type: string
-        required_actions:
-          items:
-            $ref: '#/components/schemas/v1.RequiredAction'
-          type: array
-        status:
-          enum:
-            - idle
-            - in_progress
-            - requires_action
-            - failed
-          type: string
-        usage:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.TokenUsage'
-            - type: 'null'
-        vault_ids:
-          items:
-            type: string
-          type: array
-        x_agents_core:
-          $ref: '#/components/schemas/v1.SessionCore'
-      required:
-        - agent
-        - created_at
-        - environment
-        - id
-        - last_active_at
-        - metadata
-        - object
-        - required_actions
-        - status
-        - vault_ids
-      type: object
-    v1.SessionArtifact:
-      properties:
-        created_at:
-          type: integer
-        environment_id:
-          type: string
-        id:
-          type: string
-        object:
-          enum:
-            - agent.session.artifact
-          type: string
-        path:
-          type: string
-        session_id:
-          type: string
-        size_bytes:
-          type: integer
-        turn_id:
-          type: string
-      required:
-        - created_at
-        - environment_id
-        - id
-        - object
-        - path
-        - session_id
-        - size_bytes
-        - turn_id
-      type: object
-    v1.SessionArtifactDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - agent.session.artifact.deleted
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.SessionArtifactList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.SessionArtifact'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.SessionCore:
-      properties:
-        installation:
-          $ref: '#/components/schemas/v1.EnvironmentInstallation'
-      type: object
-    v1.SessionDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - agent.session.deleted
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.SessionEnvironment:
-      properties:
-        capability_directories:
-          items:
-            type: string
-          type: array
-        files:
-          items:
-            type: object
-          type: array
-        id:
-          type: string
-        network:
-          $ref: '#/components/schemas/v1.EnvironmentNetwork'
-        packages:
-          $ref: '#/components/schemas/v1.EnvironmentPackagesResponse'
-        plugins:
-          items:
-            type: object
-          type: array
-        remote_url:
-          type: string
-        skills:
-          items:
-            type: object
-          type: array
-        type:
-          enum:
-            - none
-            - self_hosted
-            - openai_hosted
-          type: string
-        workspace_directory:
-          type: string
-      required:
-        - type
-      type: object
-    v1.SessionEnvironmentState:
-      properties:
-        error:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.StreamError'
-            - type: 'null'
-        id:
-          type: string
-        status:
-          enum:
-            - pending
-            - ready
-            - connected
-            - disconnected
-            - failed
-          type: string
-        type:
-          type: string
-      required:
-        - id
-        - status
-        - type
-      type: object
-    v1.SessionEvent:
-      properties:
-        content_index:
-          type: integer
-        delta:
-          type: string
-        environment:
-          $ref: '#/components/schemas/v1.SessionEnvironmentState'
-        error:
-          $ref: '#/components/schemas/v1.StreamError'
-        event_id:
-          type: string
-        item:
-          $ref: '#/components/schemas/v1.Item'
-        item_id:
-          type: string
-        output_index:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        part:
-          $ref: '#/components/schemas/v1.ItemContent'
-        session:
-          $ref: '#/components/schemas/v1.Session'
-        session_id:
-          type: string
-        subagent:
-          $ref: '#/components/schemas/v1.Subagent'
-        text:
-          type: string
-        turn:
-          $ref: '#/components/schemas/v1.Turn'
-        turn_id:
-          type: string
-        type:
-          type: string
-        usage:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.TokenUsage'
-            - type: 'null'
-          description: |-
-            Usage is present only on terminal Turn events, where it mirrors the Turn
-            snapshot and is null when unknown. Other events omit it.
-      required:
-        - event_id
-        - type
-      type: object
-    v1.SessionExecutionInput:
-      properties:
-        environment:
-          description: Environment supplies placement-independent preparation through the Core extension.
-          type: object
-        harness_config:
-          type: object
-        model_provider:
-          $ref: '#/components/schemas/v1.ModelProviderInput'
-      type: object
-    v1.SessionInput:
-      properties:
-        call_id:
-          type: string
-        error:
-          anyOf:
-            - type: string
-            - type: 'null'
-        input:
-          items:
-            $ref: '#/components/schemas/v1.InputMessage'
-          type: array
-        output:
-          anyOf:
-            - {}
-            - type: 'null'
-        success:
-          type: boolean
-        turn_id:
-          type: string
-        type:
-          enum:
-            - agent.session.input.message
-            - agent.session.input.cancel
-            - agent.session.input.tool_result
-          type: string
-      required:
-        - type
-      type: object
-    v1.SessionList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.Session'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.Skill:
-      properties:
-        created_at:
-          type: integer
-        default_version:
-          type: string
-        description:
-          type: string
-        id:
-          type: string
-        latest_version:
-          type: string
-        name:
-          type: string
-        object:
-          enum:
-            - skill
-          type: string
-      required:
-        - created_at
-        - default_version
-        - description
-        - id
-        - latest_version
-        - name
-        - object
-      type: object
-    v1.SkillDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - skill.deleted
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.SkillList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.Skill'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.SkillUpdateRequest:
-      properties:
-        default_version:
-          type: string
-      required:
-        - default_version
-      type: object
-    v1.SkillVersion:
-      properties:
-        created_at:
-          type: integer
-        description:
-          type: string
-        id:
-          type: string
-        name:
-          type: string
-        object:
-          enum:
-            - skill.version
-          type: string
-        skill_id:
-          type: string
-        version:
-          type: string
-      required:
-        - created_at
-        - description
-        - id
-        - name
-        - object
-        - skill_id
-        - version
-      type: object
-    v1.SkillVersionDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - skill.version.deleted
-          type: string
-        version:
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-        - version
-      type: object
-    v1.SkillVersionList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.SkillVersion'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.SourceFile:
-      properties:
-        bytes:
-          minimum: 0
-          type: integer
-        created_at:
-          type: integer
-        expires_at:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        filename:
-          type: string
-        id:
-          type: string
-        object:
-          enum:
-            - file
-          type: string
-        purpose:
-          enum:
-            - user_data
-          type: string
-        status:
-          enum:
-            - processed
-          type: string
-        status_details:
-          anyOf:
-            - type: string
-            - type: 'null'
-      required:
-        - bytes
-        - created_at
-        - filename
-        - id
-        - object
-        - purpose
-        - status
-      type: object
-    v1.SourceFileDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - file
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.SourceFileList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.SourceFile'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.StreamError:
-      properties:
-        code:
-          type: string
-        message:
-          type: string
-        param:
-          anyOf:
-            - type: string
-            - type: 'null'
-          description: |-
-            Param is the pinned SessionError field. An error SessionEvent always
-            carries it, null when unset; Environment state errors and Core's own
-            stream_interrupted frame omit it.
-        type:
-          type: string
-      type: object
-    v1.Subagent:
-      properties:
-        closed_at:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        id:
-          type: string
-        instructions:
-          anyOf:
-            - items:
-                $ref: '#/components/schemas/v1.AgentContent'
-              type: array
-            - type: 'null'
-        name:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - agent.session.subagent
-          type: string
-        opened_at:
-          type: integer
-        parent_agent_id:
-          type: string
-        session_id:
-          type: string
-        status:
-          enum:
-            - active
-            - closed
-          type: string
-      required:
-        - id
-        - object
-        - opened_at
-        - parent_agent_id
-        - session_id
-        - status
-      type: object
-    v1.SubagentList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.Subagent'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.SummaryText:
-      properties:
-        text:
-          type: string
-        type:
-          enum:
-            - summary_text
-          type: string
-      required:
-        - text
-        - type
-      type: object
-    v1.TextConfig:
-      properties:
-        format:
-          $ref: '#/components/schemas/v1.TextFormat'
-        verbosity:
-          enum:
-            - low
-            - medium
-            - high
-          type: string
-      required:
-        - format
-        - verbosity
-      type: object
-    v1.TextFormat:
-      properties:
-        schema:
-          type: object
-        type:
-          enum:
-            - text
-            - json_schema
-          type: string
-      required:
-        - type
-      type: object
-    v1.TokenUsage:
-      properties:
-        input_tokens:
-          type: integer
-        input_tokens_details:
-          $ref: '#/components/schemas/v1.InputTokenDetails'
-        output_tokens:
-          type: integer
-        output_tokens_details:
-          $ref: '#/components/schemas/v1.OutputTokenDetails'
-        total_tokens:
-          type: integer
-      required:
-        - input_tokens
-        - input_tokens_details
-        - output_tokens
-        - output_tokens_details
-        - total_tokens
-      type: object
-    v1.Turn:
-      properties:
-        agent_id:
-          type: string
-        completed_at:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        created_at:
-          type: integer
-        error:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.TurnError'
-            - type: 'null'
-        id:
-          type: string
-        object:
-          enum:
-            - agent.session.turn
-          type: string
-        session_id:
-          type: string
-        started_at:
-          anyOf:
-            - type: integer
-            - type: 'null'
-        status:
-          enum:
-            - queued
-            - in_progress
-            - waiting
-            - completed
-            - failed
-            - cancelled
-          type: string
-        subagent_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        usage:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.TokenUsage'
-            - type: 'null'
-      required:
-        - agent_id
-        - created_at
-        - id
-        - object
-        - session_id
-        - status
-      type: object
-    v1.TurnError:
-      properties:
-        code:
-          enum:
-            - context_length_exceeded
-            - session_budget_exceeded
-            - usage_limit_exceeded
-            - rate_limit_exceeded
-            - server_overloaded
-            - cyber_policy
-            - connection_failed
-            - server_error
-            - authentication_error
-            - invalid_request
-            - resource_not_found
-            - sandbox_error
-            - executor_version_incompatible
-            - active_turn_not_steerable
-            - request_timeout
-            - internal_error
-          type: string
-        message:
-          type: string
-      required:
-        - code
-        - message
-      type: object
-    v1.TurnList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.Turn'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.UpdateAgentRequest:
-      properties:
-        instructions:
-          anyOf:
-            - type: string
-            - type: 'null'
-        metadata:
-          anyOf:
-            - additionalProperties:
-                type: string
-              type: object
-            - type: 'null'
-        model:
-          type: string
-        multi_agent:
-          anyOf:
-            - type: object
-            - type: 'null'
-        name:
-          anyOf:
-            - maxLength: 128
-              type: string
-            - type: 'null'
-        reasoning:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.Reasoning'
-            - type: 'null'
-        service_tier:
-          anyOf:
-            - enum:
-                - auto
-                - default
-                - flex
-                - priority
-                - fast
-              type: string
-            - type: 'null'
-        text:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.SavedAgentTextInput'
-            - type: 'null'
-        tools:
-          anyOf:
-            - items:
-                type: object
-              type: array
-            - type: 'null'
-        x_agents_core:
-          anyOf:
-            - allOf:
-                - $ref: '#/components/schemas/v1.SavedAgentCoreInput'
-            - type: 'null'
-      type: object
-    v1.UpdateCredentialRequest:
-      properties:
-        auth:
-          $ref: '#/components/schemas/v1.CredentialAuthReplacement'
-      required:
-        - auth
-      type: object
-    v1.UpdateSessionRequest:
-      properties:
-        metadata:
-          anyOf:
-            - additionalProperties:
-                type: string
-              type: object
-            - type: 'null'
-      required:
-        - metadata
-      type: object
-    v1.Vault:
-      properties:
-        created_at:
-          type: integer
-        id:
-          type: string
-        metadata:
-          additionalProperties:
-            type: string
-          type: object
-        name:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - vault
-          type: string
-      required:
-        - created_at
-        - id
-        - metadata
-        - object
-      type: object
-    v1.VaultDeleted:
-      properties:
-        deleted:
-          type: boolean
-        id:
-          type: string
-        object:
-          enum:
-            - vault.deleted
-          type: string
-      required:
-        - deleted
-        - id
-        - object
-      type: object
-    v1.VaultList:
-      properties:
-        data:
-          items:
-            $ref: '#/components/schemas/v1.Vault'
-          type: array
-        first_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        has_more:
-          type: boolean
-        last_id:
-          anyOf:
-            - type: string
-            - type: 'null'
-        object:
-          enum:
-            - list
-          type: string
-      required:
-        - data
-        - has_more
-        - object
-      type: object
-    v1.WebSearchAction:
-      properties:
-        pattern:
-          type: string
-        queries:
-          items:
-            type: string
-          type: array
-        query:
-          type: string
-        type:
-          enum:
-            - search
-            - open_page
-            - find_in_page
-            - other
-          type: string
-        url:
-          type: string
-      required:
-        - type
-      type: object
-  securitySchemes:
-    BearerAuth:
-      type: http
-      scheme: bearer
-tags:
-  - name: Agents
-    description: 'Agents. Application API: Project API key. Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.'
-  - name: Environments
-    description: 'Environments. Application API: Project API key. Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.'
-  - name: Environment Templates
-    description: 'Environment Templates. Application API: Project API key. Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.'
-  - name: Sessions
-    description: 'Sessions. Application API: Project API key. Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.'
-  - name: Artifacts
-    description: 'Artifacts. Application API: Project API key. Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.'
-  - name: Events
-    description: 'Events. Application API: Project API key. Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.'
-  - name: Items
-    description: 'Items. Application API: Project API key. Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.'
-  - name: Subagents
-    description: 'Subagents. Application API: Project API key. Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.'
-  - name: Turns
-    description: 'Turns. Application API: Project API key. Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.'
-  - name: Files
-    description: 'Files. Application API: Project API key. Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.'
-  - name: Skills
-    description: 'Skills. Application API: Project API key. Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.'
-  - name: Vaults
-    description: 'Vaults. Application API: Project API key. Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.'
-  - name: Credentials
-    description: 'Credentials. Application API: Project API key. Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.'
diff --git a/apps/docs/openapi/runtime-api.yaml b/apps/docs/openapi/runtime-api.yaml
deleted file mode 100644
index 18835818d..000000000
--- a/apps/docs/openapi/runtime-api.yaml
+++ /dev/null
@@ -1,460 +0,0 @@
-# Generated documentation projection; do not edit.
-info:
-  contact: {}
-  description: Machine connection routes under /api/v1. Sandbox nodes authenticate with a one-use enrollment token or their node credential; Project API keys and the Core key are not accepted. See each operation's security requirements.
-  license:
-    name: Apache 2.0
-    url: https://www.apache.org/licenses/LICENSE-2.0.html
-  title: OpenAgentCore Machine Connections
-  version: '1'
-paths:
-  /api/v1/agent-daemon/installation:
-    post:
-      description: Accepts a short-lived Environment installation Bearer authorization, not a Project or Core key. Returns frozen connection constraints; it does not claim or rotate credentials.
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.NativeInstallationContext'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      summary: Resolve a native installation authorization
-      tags:
-        - Native Installation
-  /api/v1/agent-daemon/installation/claim:
-    post:
-      description: A valid installation Bearer authorization can claim one connect-only key. The client persists its generated secret before submitting it. Retries must present that same secret; a different, rotated or revoked credential is never replaced.
-      responses:
-        '204':
-          description: No Content
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/api.CoreErrorResponse'
-      summary: Claim an Environment's installation credential
-      tags:
-        - Native Installation
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/api.NativeInstallationClaim'
-        description: Locally persisted executor secret
-        required: true
-  /api/v1/sandbox-node/configuration:
-    get:
-      description: Authenticates with an unconsumed enrollment token, or a retained node credential with X-OAC-Node-ID. Does not consume the token or expose E2B credentials. Node files cannot override this specification.
-      parameters:
-        - schema:
-            type: string
-          description: Retained node UUID
-          in: header
-          name: X-OAC-Node-ID
-        - schema:
-            type: integer
-          description: Exact kept generation (registered nodes only); omitted reads the current target
-          in: query
-          name: generation
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.RuntimeNodeConfiguration'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - NodeEnrollmentAuth: []
-      summary: Read the active configuration for node installation
-      tags:
-        - Sandbox Node
-  /api/v1/sandbox-node/enroll:
-    post:
-      description: Node machine connection. Consumes a one-use enrollment token; grants no project or administrator access. Responses contain only explicit safe fields. core_url is required and must equal the installation public URL; a different address gets 409 sandbox_node_address_mismatch and leaves the token unused.
-      responses:
-        '201':
-          description: Created
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.RuntimeNodeIdentity'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - NodeEnrollmentAuth: []
-      summary: Enroll a sandbox node
-      tags:
-        - Sandbox Node
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/store.RuntimeNodeEnrollment'
-        description: Request
-        required: true
-  /api/v1/sandbox-node/identity:
-    get:
-      description: Node machine connection. Authenticates with the retained node credential; grants no project or administrator access. Responses contain only explicit safe fields.
-      parameters:
-        - schema:
-            type: string
-          description: Sandbox node UUID
-          in: query
-          name: node_id
-          required: true
-      responses:
-        '200':
-          description: OK
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/store.RuntimeNodeStatus'
-        '400':
-          description: Bad Request
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '401':
-          description: Unauthorized
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '409':
-          description: Conflict
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '500':
-          description: Internal Server Error
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-        '503':
-          description: Service Unavailable
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/v1.ErrorResponse'
-      security:
-        - NodeAuth: []
-      summary: Recover an enrolled sandbox node identity and observe its readiness
-      tags:
-        - Sandbox Node
-schemes:
-  - http
-  - https
-openapi: 3.1.0
-servers:
-  - url: https://core.example.com
-    description: Documentation placeholder; substitute your Core public origin.
-components:
-  schemas:
-    api.CoreAPIError:
-      properties:
-        code:
-          anyOf:
-            - type: string
-            - type: 'null'
-        details:
-          description: |-
-            Details contains only documented, Core-owned facts: string, finite number,
-            boolean, null or string array values. Never include request echoes, secrets
-            or native/provider error text. Empty or invalid details are omitted.
-          type: object
-        message:
-          type: string
-        param:
-          anyOf:
-            - type: string
-            - type: 'null'
-        type:
-          type: string
-      required:
-        - message
-        - type
-      type: object
-    api.CoreErrorResponse:
-      properties:
-        error:
-          $ref: '#/components/schemas/api.CoreAPIError'
-      required:
-        - error
-      type: object
-    api.NativeInstallationClaim:
-      properties:
-        executor_token:
-          type: string
-      type: object
-    sandbox.DeploymentSpec:
-      properties:
-        resources:
-          $ref: '#/components/schemas/sandbox.Resources'
-        runtime:
-          $ref: '#/components/schemas/sandbox.RuntimeRelease'
-      type: object
-    sandbox.Resources:
-      properties:
-        cpus:
-          type: integer
-        environment_disk_mib:
-          type: integer
-        memory_mib:
-          type: integer
-        root_disk_mib:
-          type: integer
-      type: object
-    sandbox.RuntimeRelease:
-      properties:
-        firmware_sha256:
-          type: string
-        image_id:
-          type: string
-        image_manifest_digest:
-          type: string
-        microsandbox_ref:
-          type: string
-        runtime_sha256:
-          type: string
-        source_commit:
-          type: string
-      type: object
-    store.RuntimeNodeConfiguration:
-      properties:
-        core_url:
-          type: string
-        generation:
-          type: integer
-        installation_id:
-          type: string
-        max_active:
-          type: integer
-        max_retained:
-          type: integer
-        provider:
-          type: string
-        specification:
-          $ref: '#/components/schemas/sandbox.DeploymentSpec'
-        specification_digest:
-          type: string
-      type: object
-    store.RuntimeNodeEnrollment:
-      properties:
-        backend_fingerprint:
-          type: string
-        core_url:
-          description: The Core origin this node stores and connects to, such as https://core.example. It must equal the installation public URL; otherwise enrollment gets 409 sandbox_node_address_mismatch and the token stays unused.
-          type: string
-        credential:
-          type: string
-        deployment_generation:
-          type: integer
-        name:
-          type: string
-        node_id:
-          type: string
-        provider:
-          type: string
-        specification_digest:
-          type: string
-      type: object
-    store.RuntimeNodeIdentity:
-      properties:
-        deployment_generation:
-          type: integer
-        installation_id:
-          type: string
-        max_active:
-          type: integer
-        max_retained:
-          type: integer
-        node_id:
-          type: string
-        provider:
-          type: string
-        specification_digest:
-          type: string
-      type: object
-    store.RuntimeNodeStatus:
-      properties:
-        connected:
-          type: boolean
-        deployment_generation:
-          type: integer
-        installation_id:
-          type: string
-        max_active:
-          type: integer
-        max_retained:
-          type: integer
-        node_id:
-          type: string
-        provider:
-          type: string
-        provider_ready:
-          type: boolean
-        specification_digest:
-          type: string
-      type: object
-    v1.APIError:
-      properties:
-        code:
-          anyOf:
-            - type: string
-            - type: 'null'
-        message:
-          type: string
-        param:
-          anyOf:
-            - type: string
-            - type: 'null'
-        type:
-          type: string
-      required:
-        - message
-        - type
-      type: object
-    v1.ErrorResponse:
-      properties:
-        error:
-          $ref: '#/components/schemas/v1.APIError'
-      required:
-        - error
-      type: object
-    v1.NativeInstallationContext:
-      properties:
-        environment_id:
-          type: string
-        harness:
-          type: string
-        protocol_version:
-          type: string
-        remote_url:
-          type: string
-        version:
-          type: string
-        workspace_directory:
-          type: string
-      type: object
-  securitySchemes:
-    NodeAuth:
-      type: http
-      scheme: bearer
-    NodeEnrollmentAuth:
-      type: http
-      scheme: bearer
-tags:
-  - name: Native Installation
-    description: 'Native Installation. Machine connection API: Route-specific node enrollment, node, daemon, or executor credential. Generated local machine contract. These connections reach Core directly, never through Web.'
-  - name: Sandbox Node
-    description: 'Sandbox Node. Machine connection API: Route-specific node enrollment, node, daemon, or executor credential. Generated local machine contract. These connections reach Core directly, never through Web.'
diff --git a/apps/docs/openapi/sources.json b/apps/docs/openapi/sources.json
deleted file mode 100644
index 05824a2cb..000000000
--- a/apps/docs/openapi/sources.json
+++ /dev/null
@@ -1,53 +0,0 @@
-{
-  "sources": {
-    "contracts/agents-api/openapi.yaml": "bdda1027eb0e7d2e8ccc5dba3ed3e2dbb6d447e9ab2c5b571fe4056fa7596eec",
-    "contracts/agents-api/core.openapi.yaml": "f1b9278c3a4b1cb55127cf9471583d00f1ab13b6ceb64f8693a01c4cf03674eb",
-    "contracts/agents-api/runtime.openapi.yaml": "505286d5eacf94a14f9527fcf4e7beb4fba4f792681be26ba966254cbf49b4aa"
-  },
-  "outputs": {
-    "content/docs/api-reference/agents.mdx": "1f7697959e9c52c9d24fbe70e116e807f49912b9a27ac638b86782e2f326af44",
-    "content/docs/api-reference/environments.mdx": "6a9e08a67479a745983c45b9711137617c13fdf7599a64533997b00a26ac7282",
-    "content/docs/api-reference/environment-templates.mdx": "68df9276e858e525e15bb88af624fc8adee8bcdcc03a788faaff56b560fd038c",
-    "content/docs/api-reference/sessions.mdx": "8ce222c8c196b18e6b4a21ed29f3fd54459be0576906d5c60239689ce990292b",
-    "content/docs/api-reference/artifacts.mdx": "8df8d008126b49b1df88f28a676c4b237ccffc45a470b35ec30eab2daf1c0f7f",
-    "content/docs/api-reference/events.mdx": "fa509794f3c208c0cdcdaa68615c26b7e400ea6c892922a4e0a6a833e42fe5dd",
-    "content/docs/api-reference/items.mdx": "fa4d248ac5623beb3f00a4ebb5a6c4ff477865ebee351e0c543a970a7ec3654d",
-    "content/docs/api-reference/subagents.mdx": "90e2a1a9129111332e36715de2078ee595590c4c25c7b355962e4185bdeb5388",
-    "content/docs/api-reference/turns.mdx": "46ee9e43aae4ec85b3ee335939dc1e0a238cfda0fb996c6af4d2831bef3377f1",
-    "content/docs/api-reference/files.mdx": "531c835c66b194ab8876c7663b79e42f0090e12420ae32fafeda24e3143740f4",
-    "content/docs/api-reference/skills.mdx": "774ea05a7a8250fe5af5164388b98dafca99d56dc2eae686e8f628acb4e7c10b",
-    "content/docs/api-reference/vaults.mdx": "d80eade1c2f8100030866abbb0fb6b7a09c94250a859c97cdf1abce32fdfdf1e",
-    "content/docs/api-reference/credentials.mdx": "f129a51f74a3c7021c016600518e2350023f8d29571666ac5d64b7584cd7c7d0",
-    "openapi/public-api.yaml": "db69b3ebaf6599ee502e5ec1d385ef0504940fa955ec2a4be271150ef1d59c41",
-    "content/docs/api-reference/meta.json": "56bf1dc145ccc8adde38c5f956f1a06f18ef18b646122250d01a294c516f8f83",
-    "content/docs/api-reference/index.mdx": "9fd6b1c54149874d2999235067c101326f9e8a2e707a70b6672c81eb3ebfe63f",
-    "content/docs/api-reference/core/core-administration.mdx": "5fc3ada51d2190a141f13738151e4d513390cc3bd66ce6f5013994bda68569b0",
-    "content/docs/api-reference/core/deployment-model-providers.mdx": "fb15ed2075e256a3fe0222641f95c48c962563325668817ac7cb2a940d9b125d",
-    "content/docs/api-reference/core/administrator-projects.mdx": "8fd687bb2a7119fa16e938d7c71710c2816afb9cf959eb6849ef5e6300c5419b",
-    "content/docs/api-reference/core/agents.mdx": "b6c089fbea4b07bc4249e7c7ca5699d47f1512a4fc2d8ee01cb26910ae541a84",
-    "content/docs/api-reference/core/environment-templates.mdx": "05907f35d7f02d66af9da8b1efaa3765badb4cdf7b94d0f6c3ab0413a2cfa1a9",
-    "content/docs/api-reference/core/executor-credentials.mdx": "352dc9cb02cceab6a7fa4fe13356e9532c329277224e7e01d18ae0c02cad1a3e",
-    "content/docs/api-reference/core/native-installation.mdx": "4399eb6c36a221c9459d6773b0bd3b49ce92df120fbca86f99377bcbb1f77811",
-    "content/docs/api-reference/core/files.mdx": "05ce1d2296dbb3fc76cf4cf98d24dff249114c73529335214cee97363229f384",
-    "content/docs/api-reference/core/write-audit.mdx": "1298590ab7037077e56f6ab8adb020277763f7a670be796d24142323b2f95411",
-    "content/docs/api-reference/core/sessions.mdx": "52db14e7c88cb0521a12a9b3d19b14dd38583b97e716b261a44b2bd6bf05140a",
-    "content/docs/api-reference/core/artifacts.mdx": "620fe72cd41d19b9694fe7080eb8935ef44292852400c7be1c03a893613ca89c",
-    "content/docs/api-reference/core/execution-configuration.mdx": "f6a9ed4cdb73e87f5f4ce16b4f6fa14b756d07c97f2741bd5cade34a3472c548",
-    "content/docs/api-reference/core/items.mdx": "7c7b006536d155d003097a504e9931e3dc4d9fd0426852573244453634729250",
-    "content/docs/api-reference/core/runtime-history.mdx": "eec6384c6fd5a2bf223ec7dc7ee19332440936e18fc67f782fe81b96e299f634",
-    "content/docs/api-reference/core/runtime-observations.mdx": "db3a238ba77d1fcb887835d51b6f3f8f2b6bdf9cc5e14ac6dd11074a1c75ed48",
-    "content/docs/api-reference/core/turns.mdx": "53f9472de3e0958c06db7e69d7e8f10119e6540b7f05683915248e08d5284b16",
-    "content/docs/api-reference/core/skills.mdx": "ed899ade7b032b1732b3097d81419a8fdbb9ead0594fca9f2107da644b97031f",
-    "content/docs/api-reference/core/vaults.mdx": "12d0aac96cd4a3472ef4eaa287f7945f78862017956e79bfc3ed0ef8e772e78a",
-    "content/docs/api-reference/core/credentials.mdx": "27d586b9a8fd738b9947802f32c80458195370252886bc26abedccf2125ee981",
-    "content/docs/api-reference/core/sandbox-manager.mdx": "45e65afffb25e5b6ee2ab0853d7a84dee164e0d44ea384675fbd7ffcbd6c1a58",
-    "openapi/core-api.yaml": "dc8e80ada4ef8bd93635cab2c5d337b9d7661991a6baa1f69dc4258ebe434ef9",
-    "content/docs/api-reference/core/meta.json": "d0aef1f54c4cfc30b4e1d974119ae1cdce1c87d5ecba723afbeb4599119482a7",
-    "content/docs/api-reference/core/index.mdx": "57cf9ea947ef45e79575c25a0a3d4e5e856dde6d14698ccc2c51b86201c249e9",
-    "content/docs/api-reference/machine/native-installation.mdx": "421a858685b79fdcf8d7eff308c5768d1b62385c3988c6089f380afe80aaed69",
-    "content/docs/api-reference/machine/sandbox-node.mdx": "5b367a08d43cea82686345d2ba1c75cc90627a7b2970fe42a0df9d77fb3e1e80",
-    "openapi/runtime-api.yaml": "00be7da2088c0660ec27e656063a0b74eafe97716426ce6aec756e9e942986e8",
-    "content/docs/api-reference/machine/meta.json": "aa7e1045fb250535d77cdf54b4d2de12a1403e12439e74ce0e16890aadcd93dc",
-    "content/docs/api-reference/machine/index.mdx": "335881803f4603a759ab88085e8c46754d6b2450da9b1d9338a87968af5871a2"
-  }
-}
diff --git a/apps/docs/package.json b/apps/docs/package.json
deleted file mode 100644
index d736c306b..000000000
--- a/apps/docs/package.json
+++ /dev/null
@@ -1,46 +0,0 @@
-{
-  "name": "@oac/docs",
-  "private": true,
-  "version": "0.1.0",
-  "type": "module",
-  "scripts": {
-    "postinstall": "fumadocs-mdx",
-    "dev": "next dev --port 4000",
-    "build": "fumadocs-mdx && next build && node scripts/verify-prerender.mjs",
-    "api:generate": "node scripts/generate-api-reference.mjs",
-    "verify": "pnpm verify:contracts && pnpm verify:routes && pnpm verify:copy && pnpm verify:docs && pnpm verify:links",
-    "verify:contracts": "node scripts/verify-contract-freshness.mjs",
-    "verify:routes": "node scripts/check-python.mjs routes",
-    "verify:copy": "node scripts/verify-api-copy.mjs",
-    "verify:docs": "node scripts/verify-docs-facts.mjs",
-    "verify:links": "node scripts/verify-links.mjs",
-    "check:prerender": "node scripts/verify-prerender.mjs",
-    "check:site": "node scripts/check-site.mjs",
-    "start": "next start",
-    "typecheck": "fumadocs-mdx && tsc --noEmit",
-    "test": "node --test && node scripts/check-python.mjs tests",
-    "guides:generate": "node scripts/generate-guides.mjs",
-    "generate": "pnpm guides:generate && pnpm api:generate",
-    "check:browser": "node scripts/check-browser.mjs"
-  },
-  "dependencies": {
-    "@scalar/openapi-upgrader": "0.1.1",
-    "fumadocs-core": "15.8.5",
-    "fumadocs-mdx": "^12.0.3",
-    "fumadocs-openapi": "9.5.1",
-    "fumadocs-ui": "15.8.5",
-    "js-yaml": "^4.1.0",
-    "next": "^15.5.16",
-    "next-themes": "^0.4.6",
-    "react": "^19.2.7",
-    "react-dom": "^19.2.7"
-  },
-  "devDependencies": {
-    "@tailwindcss/postcss": "^4.3.2",
-    "@types/react": "^19.2.17",
-    "@types/react-dom": "^19.1.0",
-    "@types/node": "^22.0.0",
-    "tailwindcss": "^4.3.2",
-    "typescript": "^5.8.3"
-  }
-}
diff --git a/apps/docs/postcss.config.mjs b/apps/docs/postcss.config.mjs
deleted file mode 100644
index 2f8795a93..000000000
--- a/apps/docs/postcss.config.mjs
+++ /dev/null
@@ -1,7 +0,0 @@
-const config = {
-  plugins: {
-    "@tailwindcss/postcss": {},
-  },
-}
-
-export default config
diff --git a/apps/docs/public/images/architecture.svg b/apps/docs/public/images/architecture.svg
deleted file mode 100644
index 9f8abb1de..000000000
--- a/apps/docs/public/images/architecture.svg
+++ /dev/null
@@ -1,10 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 900 420" role="img" aria-labelledby="title desc">
-<title id="title">OpenAgentCore API and execution boundaries</title><desc id="desc">Applications call Core with Project API keys. Administrator browsers sign into Web; Web holds the Core key. Nodes and Runtime daemons connect directly to Core using scoped machine credentials. Core owns execution and its PostgreSQL state.</desc>
-<defs><marker id="arrow" markerWidth="8" markerHeight="8" refX="7" refY="4" orient="auto-start-reverse"><path d="M0 0L8 4L0 8" fill="none" stroke="#64748b"/></marker></defs>
-<rect width="900" height="420" rx="16" fill="#f8fafc"/>
-<g fill="#fff" stroke="#94a3b8" stroke-width="1.5"><rect x="30" y="36" width="200" height="66" rx="10"/><rect x="30" y="161" width="200" height="66" rx="10"/><rect x="303" y="161" width="170" height="66" rx="10"/><rect x="582" y="101" width="190" height="126" rx="10"/><rect x="582" y="311" width="190" height="60" rx="10"/><rect x="30" y="311" width="320" height="60" rx="10"/></g>
-<g fill="#0f172a" font-family="system-ui,sans-serif" font-size="17" text-anchor="middle"><text x="130" y="76">Application / SDK</text><text x="130" y="200">Administrator browser</text><text x="388" y="200">Web server</text><text x="677" y="151">Core</text><text x="677" y="179" font-size="14">Execution owner</text><text x="677" y="348">PostgreSQL</text><text x="190" y="348">Node / Runtime / native harness</text></g>
-<g fill="none" stroke="#64748b" stroke-width="1.5" marker-end="url(#arrow)"><path d="M230 69H677V101"/><path d="M230 194H303"/><path d="M473 194H582"/><path d="M677 227V311"/><path d="M350 341H488V227H582"/></g>
-<g fill="#334155" font-family="system-ui,sans-serif" font-size="13"><text x="330" y="54">/v1 · Project API key</text><text x="242" y="170">Session</text><text x="476" y="166">/core/v1</text><text x="481" y="184">Core key</text><text x="360" y="286">/api/v1</text><text x="357" y="306">Scoped machine credentials</text></g>
-<text x="30" y="400" fill="#475569" font-family="system-ui,sans-serif" font-size="13">Application API and administration API are separate. Machine connections never pass through Web.</text>
-</svg>
diff --git a/apps/docs/public/images/source/docs/assets/console-overview-en.webp b/apps/docs/public/images/source/docs/assets/console-overview-en.webp
deleted file mode 100644
index b12e17ca69c4019393d68549fa4ceb505b19f7b9..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 171520
zcmdSBWmuJKyERNV(%m859nv7(-QAr6(%m85CDNVJ($YvvBO%h=%okK#%k`|a_w(%i
zzTa_t{+cjx-uHc7XN)n<aZLsBmoG0fK!8+51m#rZI0$ziUNfLTX8=>_LBE9Lg$D8E
z_r(VSLQG6NXme(M4|$}HCY?3XXG{rIe-C&|PW@ikWuf0xW>jVo;nrWJPj8dN(WMHI
zw`S=AxS9NN<IL(*{=R*<;_z9Lmx%ZI*<wNHwU_q|L4pov&FCm!8X)|9;-+FBa(ssG
z%64~o?cVc#0+4h&v*La2zHvi9mt}RQdK-Oidq}Y6T>)6X-ntRLvOg8N6}{0tUs?go
zdA|dg0Dy1s?h3XM?rm?{54|w&58Q+9x$pRH09OPHqiF<Jx_j+?uQve*_mX$*yQBSl
z$D><q)$KQco7e5$Zh+`rq&v{-;F~Oq<s0u4zM)$Qz$<_^!1ONq1N*n-QNS!Dpu$Rb
zh2YMUpGWt0=dS$}VSl-hua023t=l8`JbDYT<gLip2*?Cr?AfjnklfbX6kN7{^_~KJ
z1ccly+~i#n^wKZTUl2fhsa{qb0=C-K+pX_K@1LJRZY<9NdH`bgt@jnT?TgEYfGY2d
zJHz{~`<;8p25%HT(_5wcsr$j(i&^?LzHYvRherj!W4{L6*dFs)ESuiHy34u-94=3J
z>eYLnc&`D*?_0c$0nMkd+p;}?Tz~-p>8|9)_KyC9PZ)pWF7Gz!+sygF6(6-%$({EN
z<R!sT`&|2b@A_Ndd%RoKtF3d{gXKBCO79^6`}x*2-<j@i+jVPV+n0OYyI0qIv$E%a
zn|2`YFaY^|>s|A0^yTP2-);Mp7o#`UJ^3yBmG>#ZlJ|vo`DMa2<oUr7-)j31pz!_x
zFnHJg72`;DU3c2M>fwLm+%*HduMe7*FZeROxxCH2m%ME50f5sxvU}h=lG}qV@&f>%
zGVz|Uw6jBBC5VA3QD2XtL<kd0lA#h)IVS=xKUocqYOEJRVTc9-&CC##(gYn8rk2q+
zz6KUJPy@4LKt0f>vkXqpXtgcgT%9;i4559TxX@gZT?X0T;P3y`nC9QS7Q9xB3WvEL
zyiPp9wI9EgOQrfbEN(LjvQTr+K6k6#e}7Z|<&{{7iO6U)|HH@p%O~>Aj0IbM6{<TW
z`h1PJ=LzM~7Qn45h*y#G?El>x4plO(-!}p+A{w9lxYPSc>p4Cjax_7xXmod8-<tfF
zBZ{NTc-LEr7heCD-Y~|1Uv6(Eq?eS$<HQiqma6c=%pHi71Hp<bY~ixMtOgU%#wR6X
z`gU-+ro_snKcT%#;##zi7*m`rmq`J7aH@WDtSQog;w4lzrHNA+MU$TXHxcxgrTzO5
zM2#lpXfm^Q7Fr5G;n{ypg-eX(LVWp+uEllg@DPRqLz1k<{}bE|2=jT(U}<6TN@`lp
zmIQIq^x&3#mGh*+0KaqoMx0UAJQVJit=nwJF<SY3?A~Je;4mf_4uYKhyQA?tyf$;=
z5sFF@%*obfk1Et<(<9n1n#yVbxBi95s}hcdB8*J+NXln*05<R0ZH1(lbp_H<UcNi`
zf?I3GPMiz*2w4vEsBeqJ!KQDB3$Ygut>N_ktw;NnU9sZ2QwGB33JU9+(LFddyP-dG
z5zFg3pCvhVUCe4ifj@^Ef^*ps+U`I#XHY;G7^--I$B&)55S^_GNOQ-<#!X^eAAMfh
ze*Pa5_8;ykWQL^#jL?D*>)dfry6`FY>9SY<{ZjDTCnu{27EUiJ?MtHKKkj*z#o{g5
zj!z582Uk(Q!)WkTeAvzx7y+*IP=`85EC1=Q-Lf{&cs|^|a4q8nVyw$(=`#k7Q)jEU
zMjn4FL)~p_#f0asE%BT;mE(Ke!k7D>R*cn^<C3Yq3f1~{^Gp8<ZH_;39U33#7FE<t
zDfz(dl@1Ala#?1HCXY(Jdzsal#ti;vJb!bY_DXNEzTNZ!-akEQT{TI%7J0Mvt9nk#
zuHL9X*8Ey=t`!-@tj7iU@FnB&8P543^DU3*?i__F<>;SQ>Q(Qv!)PAi@Xv#>A4oJS
zwxk40R#H(RlZkOUJ<iyGDHnR|LkJR=GgwyV>|a9-sJq5psdatH%1qdQZQ70YRLo1T
zK9w$Jy8ltWjbY~DctDIX@aK-epDO%2NUx~?s_8#<1Po0FKlva$A`;r|MG!tv=5R!3
z!d_5^n3&em_Z4!G*Gh5DohRn@BOSZ8`*?ZyLOvRJ=VinpPzmOE&<&ku39x#65sy*O
zSaA{Y1vk7C5URy`g;cc-zcX$t$!Tih_2I<@AgcnngKNyPl;7Mda=FBvkt}`!TI;q_
z-5j0{mzL;FzKqzcldUBto-Gy3_nu_*McH=^uDTp2NH**R8Nr(sZ60T{II5lzLrwJi
z17VG>3=+{qXpI;SuiHe3xRFE_RUF~Lh}2spZbH13_g}J_`eSsEXm0jbVe<H!OOQId
z1i!Z}f5!JLqsuV{)=eQo3I4(7({XiR6GIW>&~Tq50PQ@>0EHvE=a~(QyhZ8tmv}RE
z8dyEO$eH5S4scw>ymIQ7`fkqT$Ccvn!vTQY0j!=Mt<=>C!T4JfmO!D@7pELY%7ys1
zsN5pJBiOv2P^|2COSaUboUxT}aKd^Ru}3J44Bd!djcSo>F}wHZC}#;Uf=1X;1K*tG
z8g9Q+`%x`0<YJy{Zb(2gaE*b+2V^~~y3O^zZFnguRggA(+o_$Fr=ckvS4JRJ7PsQ7
z(<#|+LL`CV2ATpHE@SGaEeCqDf7UMq?8lu;=Tk>&svYyQsSjjjb>ct(!;v?&TpTQ<
z+7{f2QR$Kx1AF^lHc@}571PZE{xteBd9LFJL}=FJb5ws5tNsjPp&=WsofVd;e0Ia=
zy}XN8mWxlNI2pKV`y>#aDJ%bwfo^^6*!uf~dcLjiu}Fi_Z|K)W$J)iT&|No2h2tSK
zwfY+Pz(qZ=+SfA<<ZaLn7~FCra7`ip=P@&4()obz0lecQ(})1o0YpY|WI2%Y%xP@B
zWw<e*9pwR<fVa!ni?RWOaIGBaD5Gp+4XzeC-U@t&DD=uKj>Vt<h<Ix+D*?XnP87&}
z?X^E3kJGFV5$F5aKOm2}TL-yVfnjv~bDOoL?et6xrIsBdv3Eo~3b5I)w1(=J!6o%3
zclEwh7>ps>8MXvF=Y>f#CRb=kxeS|kccgfma%zt81!1SUV4vkg3_?5Q(<R4(7TKaW
zu5T+U)>+|=ARg2L`yxbBq}M0VFxu`;E%jj`CeN;Kv>;lY7tjYH5!s;%S52S$R{n%%
z&glBYwo=lFIRJVs{XYS+x{HgT77J{fB<QJb-!UvXWJj!_sNwC>TAYs;PD;YR5Zj03
zg_bJg55|gpnGp$78b9INL(T3Qu(r4o*yKNXT(7QqEfF)mAQYuz8Q_WM`BfHE-&PQD
zzgA`myoKWtfaW;)@>EORrY=&d!fyW5&<Eew`oeYi%;qr-dawP+QA1G6gL^w%oCW{s
zUl<chk!-64)I<`Gp&Kl!lPS@T;u7dH{FPtFp0*01sg!mHl{)osYL1xEJ+KyT=b0Zy
zr)h39d!3aoZ%m4isp9hs2%cmdS&wMk?<EUd)aBzO`P-Ak<*H4-w%QwrTk||D-dj(I
znSAHjlVNx;)q7O_eSPMvHZt14Z>~Rp?6Wk)>eP#Bv&?sWI}q;OLo^jYzA`2k$<o&^
zh2pCAi#)sRS;P~HA!$VuKNd&*h@BCyw?+62-my0_%SK}oqL8k|JTyHMzD(K;slbqK
z?I4T%0@J>X<+HPG7<I1{Lf*JC2Z*|~tS>33Tyb;+x>1ywvI9TnS^B;S3)^!e3)(p+
zQNpZsOB1LI?`N0s>Rzd{*;V?O{#s0p*XM6ij&WW)>B+BEN9CaL=W~2M^rhrECj-9U
zlXgdTD{T0f$F>@H)|23oec9|SU<jl#u!`Q~OP!0ZK!-R4uOSO$A7SG=RS%ut_^E{t
zlYUc1p@T16yYE$%pLHAxCwGmVuWNvkBKQZ)9lOm|w}OcIgO@_UxRaLX50w><jkDt=
z3a3oXnX)`Ej)WucW*Jb#QuO`-9d_#YQct}Q3fh=ML6L<zq~+WcozYKvU~42Bg3bb<
zzVLZdWP@mZ22mR*=XD{Yo3x6G(CVqu$}F(tmgO5jF^KK(S`+b&5bK9<X^M7>Z*)H}
zErz_=1Q3yFMH(gRdYA>BIWYu9fZ%qje;+IT-ezXg(C4UbP<L)kl@&!rogMxp&-n?S
z^vLTM^TSo2mV6l+^YnzWbE3vl;~`gDJ92r9iF>}Uv^j^XHWMd-*yZ<9P=V^vlNb91
z?N986L|v-_Bz!(yzVXkj2i*NtP_`@a0H^O`C;h>5jA@$0F&WqUh&YIms>S|<ie$ky
zd+ap(fQG>heS~RzAJ9&UPRhU=>v#k484!o`%O`{r$2hY6an+b#<NyQM+!|S?5hZ@>
zI~a<(=zSmkQt`(Bb5UBvZ}<pJPmgv9znq*stRvE<|2LpC4+PdPZ>L!@7q@%VBOhvH
z2b@ZZH%VrD*^PNdabVyWUW*D4Y-DmduVUErmtCh$@>NK9eo$dc(AdoE^y1E4pHxy>
zm{$thG|OomiSqK`&8`9?jr^+_eN`nUO(97$k%vm4@;{`6CcrH5iFu54H(Ipm2KH4K
zUqICQyGh^L?qYlB(WS1KyJHSjXp<4gf6z!%w6K;gs$+XM`T2kUGK;GFdg#9amD;IC
zTj!Ni2{0g8-H&j!VLe!@c3rNaa<B8LVEu*YemJ?rmjHD;SwjZQbp27p{=!mT!BbRy
zZHs8ag-LpqKH03F3s>kg!5Uf=82$30v&6){=!$o$Wg*cgWHov#qhM~VA#%(JvyAI-
zZ#sfSBw&et-Yjos()AdnV*ruDKLzM-^t<K~QQ?yUvPfOD8OPS{-;imEbtQz_rq^wb
zD=qkb)z#*8wEm)kl04nIr$q=5#1OTb?UTK}Jr|=ds>S8eIPF(3ZdfL&cBB^So<Cf&
zpvO@fy<_fR=JxGNaL4-16%J%Oh|qV4N^8Bel4L;1sf!zgDuEe8!{*<Dt(99KzKW7R
z7si$SppOfr;u9jH&&4K|rKXwiZKF>~EaCHT$*sw-r)__dB{K;)Nxc25B#hbiRfB>g
zFI`al9&_Dn7*KP+(dv`l0NDhAoj(f?Nhr-m6G9;4M#?d9yL>d92ks4e%qOIA)J1tm
zL6=yoaDG^loXC){nTtF08|F`-^+}dcE`8U0pTIZG`w?lQGHHwf9QD~6+z5{?%~4?|
z>d|U#H3jL!?kr+FyBY;5f-3TaWqM)zSb-)Kx#(VvhA}}?0V$8!nbea!P|)KL*$2N`
z*m=L}sK?ryDPE}~-Z7`+Y?4E~#dy4UkWCX$Omj6y+Fsr@W^C$s8m3w|{wjU6vJ30D
z@vAki2eb$n=qkxx2hlF~af`L4B$N5kH14X_wEer^Hnx`0pRsWPhH+z+nfrQOLCr5*
zO(`L1fiv|tO7$qu2o7YZhXbc{hMsrdF~;K}6IbeY&xsb4TJ0G~eN>3U7WsJBt)V>Y
zlTu^NC8j%wPML-HBaN{V(a=XjsQ+H}fG}celXL$UwFj>p^Wv8JKpAm<rEhQ7-j5T=
zvOi>UoO0^b@wXCJI)5wauV8~C%=W<qo(%DNUT9ug8v3_+`w+4qgS6}30=DZ5eL4^L
zAQ`%ap8zDL$ARB5D6<7CRAO%aEMp<lUlC?MbyU1xvFk6%^!+~Q@~r<U4QlCUt%6RF
z)9re`sTDk4pyj+T+3;*@APE!DY(z3Kj;PG@zWp>_XB%9Ez7gdG&FcX|1hAl`ZqAj{
zX>{#>ea;7r)KDYF^CwXCo61#;O3;r-J4U+a3yoS}VoebLP~-hWMqH47`>O{n>}j{y
z+6nio_e7~v1|Aaep`x>!7oPew68(#|#^)?MJyqLv75?>tt@eXR<1YOobiO2Sl@Z>-
z792r^a83qx$NK`}Mg+6BvOYD|sogqGDH6AiF5|P0^4lii4Gl(k;HX;ZEw`;dLBogW
z$89<^JilbT@xZ)mgY#O3;QQl^?biZD^X?||fmq&^whbWuoyM90K<NH4(p+Z=q79H%
ze+`bF8!*bb@hQ3k*yzj!C5i8C5Mjz0@{h;-i)I)X?U)>iPL82l+wf9_X5j>)KE*J8
zDCQsoo{jH)R<xbaO-bA*DaNV;jm1~~rm{i9?^;av<u+@!)L$3+%zX<&k$>2lv%G&1
zAWL{>A~VE3X>ku_N41)vnhfRlc<=qQJZY81-$-QKh;X{RP#OA4AB#JmZK6H4tp*C8
z*20NZ@`>hph(TMabIN!;Xb^P6fu&q|M&b?o`1J1T_SEh3;$V(PtqR-YvNse*+5(Ze
z7Cuyy$1q%=F}Ss-(@7~S{W_=lku*SBMPAw_Na!?|@1<O7-CE0EFv!Hsf9?$7RlzjN
z#Z0){O<Gub)&G{^+4kXAoHt8F(RM)~F<#UY_S@8lINWTxIy`VM)AEYRLk66l1ef2$
zR(~e)au{Q7VFh!(hE>+^GqLVyIgtjOU{yxpHJH)0IHQgPO<E35*UhhHn{<qzXxvaP
zv4yA^K_T2GYV2PIV$1hbRR_8Q#`Y~y1WfhL!<92J!++FE&)28$XK%hUeEt&o<9==2
ztt<DD;TxVq!qUo|os-Z-p#g;O#uuF(LORa|b|Hl;i?4pK(%%(@kA2)_-iYWrN@T~Y
zW++^7@7xJINP}6>!VDt60^5fqyN<nc^(WGC*$YSvccO_dXd*xad9!mzLjPV;10xs8
zwgnty;e7k~YrUjnPKiBX@8H02H?9t#dx5^HLt8}tlofg}$%gsMl8?-Xa+nee(1f}a
zFIpF^KB6xN$_<*Z{HXaKx=p#EK2C+&SFO!GVYNT^#&YF=yScoDI&$?7-?y6{lIMd?
zw12ii059Gp`zuF3bZ<i3GJ`oc=({!UNW>O%d>ZFcmf@W*Qn)sw659A3ghUKYG+fpk
zIr0K?-WtomKG$I_IZA1hD#QkL{eCql^7zA4V4s+H2aSV+-c$x7QCIkIR+lx<uN<F0
z6K{gEPyna?-rrif2}};8@sRO6Oh#W#9cwNs^um3)HXB?2TLlav$;YHdn9gXw_^Sj{
z%6mh7#M9FQX~gP-wbhqD$_kJ9a+#K$qGvr`X<Tfy0kvl2GQ>K31Guw12EtUBNcfV!
zGhLRW28fMb#oeOuCfu5kF%Y}3M4>0;Wz1P%8A9u<(^%+A)3)UXPWZIf%%m7=H|k6&
zpNj*_Oh<BLs?w6$-E-ghqJFKW7Yyu4q#i>w-z!|hH|9OmQ<@~Qm=;X+f63Md0)Y;D
zzgqN}x6>8&@&nMorcWtUqg4jy4sebh<#Y&o%_#$;eUZ*QrSb9-h=VN4PTpHc%EkbI
zmAF0|TK(W#WlPcs8i6PdXHJhZxCM-4XkbvkNsvJt5bJ<;q>JI%ZOh?4)S^ntU4^7l
zKN+i?P=W@`TBO@38>G0zchr2BTb~yuRyg4mw3ujsN`J;d7TWZUX}gp{;=<p}JFv!h
zo4KB42oC$gk?Mo(`cuW&^XkW%cMtOfqqo08(x#o#sIbe;njI$Gq3h3yX$B{uc2BQs
zy|C)+P!#cYwL1jfX<_(QdewamJckvZ=QshUzIWNODl7kfBe`jQN?K2$<hBVh&a`<4
z%7GTn97EH+s1&9=%U1!5y_=6*-yRCDEwQ;=nwcQW74B_VBMG{&QS|tG97(OZLwme{
z?=bZn&q`XIU#R$LQ9jV@suA#)qZgk(BmR)}=({py0hOA1BYjV$IjJPl6zy|iiR^Iz
zh<}}3x7nw+^n&5s>)Ha%$7B|&(sOzIHgvI>q0Gx`6KfiDHHh0{@cEt2Z?th?n2MCQ
zQKH}7UW^M235*J_tR~`^b_78p^;hD47cx<^)|w;h8$W6q16?JYki+U!;)*c@H-a%#
zyzn4-gw6=oE@W<GHuOM&o><{Y9UliLPA3X-#pl1Y);wqe)CbvVYADWIRZl%X|J$l|
zc!X!kk)F0zwGWMkbuKl2)LI1`R=x8zY=kKnFMjz1iiYQBfH}i5e}h{J9aEfl>|{dE
z`F`*o0*^G@!n6{+F)vwPQ9jq8od@kZmVnz*A3&Nglnz`e5YHVpuM{(JXd{<w&sAcy
z`;yltlHEjwx}+~;>(D4N?o%+ZXRhEQfzHseGee*&^gK@_RkDBBTYVL;4byaWzVlzo
z#YoOq!FNKURrAhlqqV6}8@d#nEB$jvH^UI-!IGVXS*DUs2&T3;B#5o9%ScQ#k;94m
z$W`kUOj<DT_h@6=Ll<LV87SgvNTDwL$CA&?$b%TnF9GE+^3~(C2_<J{Y%uqGAyqLp
zj3m<sC0m3x7Nfdg&|3OVT0`wJLSHs+Y(t6jh>X;6o)I(NTP!Arz4Su%X7R;*P%Y&W
z-n?Qacplf!4Ec)V^)B2IsCqs-7H?GLboXK;IenSP3ma=@@LB4CA0XufF>t5<D>hXw
zq1(q=+hf5MD_`kFG~7v7oMh_Jq1M`)#*-W6wtMW<p~zmrHJy(yvJDfhCK~Rl7t*5%
zAiiy=@SxT*q9!oJi|Wm4Ms`}pz~JJf4^2UEtJG90`LoLcrxo}NkMiDTcT}Dghwibc
ze3!-NwxdS7lkrEvp1&Dr983$Qv}D)N(JKr_T_J_HnC~EknK?*W#vM6p_mx13M1h#v
zT4i)coUN&&<EJ9qf6dELSVf5X0KFKrc@5VzhBKt+oChL-#i8><L2IeQJ7a0|PV7Nj
zrz~_HWg(1Y|6O|8JeC|8v>3EGVbd2JLG+ToO+*V-P{KwLnYCVrx&<A*O)S3r3>;2~
zgJ4?d4ni|5&+sr%FbAbrOw&uT-DBL}ee&<>c}b@iv`&TMA2NgY9XKw1oI)m0X%Mat
zCD(!;aLl(0!n`fv!jRILWxnjUCI1k$SoBWbG4Wg*Sw;_BEN9O>Xy#^Ma4B3yAN63L
zmB0=nMlwJcN?|w@2$Bl0q{Fd*d&h$FQO)f-l>~>J@HB3Sp9qZJLYzXM7b&l*0(XV%
zNnq2VwE3{l+SOoFe`<c*-D`FrV%x8ru_8^-s}dY(A;bZ?pY%46Aj)ot(Z;M~aD`XO
zey}p)5hiijC@n7RADSXdJ9P8s?-Z$GiX^~Ul~IH%_aXqt<B#Ebz#$g}NbE0zjM0Ug
zIJ#m<@HG}7ZhN^>Q!1DK6u&xDXq|Cyz!1Uax+dr4u31jDfP2G7K{OP0FP+{f)Fls0
z%InEucgmGk$<14kX4chAS(+A4k3Nh=L^)`~{koCq8M^!MU=2uQaCvzlaop-TH8pP<
z-=Q&f9i-e)jA6M;sig-5rVxUVdSc|Hh|gB4I2H2tW`ENPkiZCd<{_nX9D6Q>f?+c4
zBlu#@<-!fnm;TCn?eiC(D)hA=<GgyDmpl+H3Bt(>S~Bm($G7wEM>JbKlRY!->%kiZ
z6!-je<|i-Oyy4F~!w`PVuANhqVZN?8pNt!Aa6Sqv&6Z6r0R`bM&Oaw5ifc{F%)8O@
z&vjMG1w@@!k5k1KRF%UUt(`)Eu(arsJnAz&X|}TX2Lgxo_m$CE*(^7a%w8L^cQ9l1
zBn9TLf6_A;iUCIE4IdkNyQ?hjZXJHj(x?kS*Sww;wZoFYv&l`qls~!6&A%@#OSq~q
znNFF|tXQmCJRhX1N)UFnUNfCGs=k%8P}J|3b8y&YW%-DwsaM=ng-8y@6bPs8n2r15
z4q!d1PG9*K6dr*UsQmSLRy0-6!p-YF_>9zLigD-|s1?Q+n!~qWmue~=pWj1ObJH{S
z8)?b6PwIPX-!~<NqJ0xHRW=hpSE8*xG-Vz`6}gl`@ZzKDw6`JF$V+sYVu70ck=e$E
z!M(KD+RL0QW_QA>a=d1jK;Md-=4!x)@Yhj<HZEeu9=_>CKt!)|`rHYo5hXg&?N7@#
z1v6Q|zY&&-e*%#gZhD(!DOW7?ueO3hv3!-Tc^Z%(%-E|W*vSMs6V8GF&=uf(+~TJL
z$M5G{GNhVrQuiD^M)SyY0YQyGxChj37QZ263^VM^Ifw4vWtpcm5~u$f)x%h#43g=V
z8qC^R5u<7?m>bA?z6|v38aAnnn_Mc!P80PvTY)^OqO;|!cOA@Qn~=j6v~5&CF{(UC
zH$~Ia<csS#ch=W5Q4l%c5|jc6<^km0Rh#3Zqpk#BDIMUV5@kQdnzV2qEwB~%TLipN
zf7fMo)QjE1O<|uwCP9~K;02+Tv#C=13A`LTWw@dyP1lr-J8=2!v_YEFuUXvF3fSuC
zyzAIS0z*(ZW$0;RO;id(mm8*6cJP^|P0rU$BDHAGTB1nC(xs~hQT4EIxiTMsf}^%k
z_9toJ=sg6{?QGvqY;u{XH&o<|C{%EjV4GqVn)?JbNRiO_HDZ(PE2Gl@b5*kWmj+zT
zV@oBHTxoef<Ch)7=I@iidvW>X<}dpsC>K-IH&eJNskz&o+1b=)3?g(n(r7ydkAacc
zryXzXfnE{HV=Shz>W&cZWsiquKpm|++$qBbIcydJe|=QckrO6g{zcI6jo($`c}KiE
z0B1HQ1hFg<**10ha{PKGvL(=CjUoCIm%AW|A{`W0?kn?C&9_ls&ZIii5O}Aeg6Zo3
z!dWE2%{G^Q<(0c#m$nCT*SkvaAeFn(Uv&=<+3)fd=Ts_?555n5wvpRXWrI$3BssJE
z-&+A^yWinOz_ID;?#8^JvE=M2)3K;Sv)~}#-i0X6#O!eOq`Xh&72wBqkZ{uQ!}u6Y
z!DBFk_ZGWIriDNU%pL*jfq?2E#&NwNvj;c=wXB7fitwSx-)l){T0N89CE<#HF5D|7
z!FT=7j+re-iPXY(uOTa$;_L|)FZ~)TG!k9{_5K?1KNa&IMaZX9$(~RAt;C;(Bfm=_
z&+TK~n?of+*5uhd-mL_q?mP&P?3w01kYB*5^O_&~&wnvGcL@x7r$muKOcZG1drCE5
zMLgCU>)cSB+L5n%<wQg_`f3_+T?6wIUHzG&8fr0sE`W4y|GE=5TnJlada2kFBtds$
zEFg_%SxqR`%uwtffvmE3k|46xg{S^Ak(@}jZU4?4?;835)e`F1WlVVBZGOHb)Vkb;
zsr9Lw%#u$?C^s&v_%^kSJ=QaRHTNzFpr{#-ZB>t~&h__6`M*4vqr*Qg(}Pdx8O9|l
zCUHZ^_l`$(BvJ7w()^2A=}DmZYt8(_?X=dKnIQB-?0_qx?#7aBm1_zE{i)RdFKi2{
zfc-SsojZkG<Qb;<BZ#D2o0k+=XJmV&^8PFPVPs!)d{SK1bqT%6@fa3g5~Q4bu(>m1
z`1sc5Mi%T5v(Zr>5Jg)2oksUxJ|q}1)$26-2T#yT^0%);?lAF#PrH!0^!x8H9|vy_
z^8WdFd2e7VJijlcvf#u=<#zDn-8Zms*f|L)<1{4A8Tplm@-iEiY<h<gBJ;6nOZm`v
zwWd+t&DE-qXQIJRbmJF3{yljAaE}?>GsGL@&%M>WzXg3Bc8lUSeq1?oTuFuBaoDpU
z_r)Hvp>e&Zq?Pzq%+Bwpj=SUzf)FM_w4^HsPZ$Y`G>cu=Q^Y6DTzIPBW(`EpDP`oc
zoQ*FRqr`H7*u*Dm!WQ~qA7lf8-0{Xh(f4}>2Fo?>gD&eAV>R2|S^Fdn|C;3dSsnP!
z%%6ro+V&A}RN4$F6k68YI?d)9?r8#TD~pOBJC0in>EX?IiQTrhGn8ZCEkc6G0>YF%
zvL9x<53!T4{Pq1$p!8^o`|qRdq4Xn{hcR0gRFzUQ`B2j3!nhsRwSE}e7Q#~|?)Wu{
zI8qq+`k3<n9Ij72<S#1tVB^O~gP&rEEe|jv=`g~MqZS~6K%Jb(h5yo*Z-rj_TcXbW
zXXAt&iA>_37X<z+Z&p3nX<YId^eVAo*UE9UJv*qZUvJ-GH!8U(UC()kFJ_;N31lK0
zIbGnnE_^SRHcn6mFo=E+*W)^{CF<uol1pnl>z<OD5w?H+R(|Fw@+~qs`ZvGeuf?&y
z{V=n`M#ayZl<4$YLm6K|AmrmXDJN{9Wg44YOfe+=>eE!<wb_i{$K$v7)BvV;0GZ&C
zMnnZ?3jXe3lhazTl%E0wBs(7D1*@5m)@}m;EHVVz1mMTnKkdSRS+B3_!ksAGNeg(5
z!1&dH=uC|b`L1SZ_wD!kkoJz7yL7`YYT=dt?xaIOz6k*LWrd$0i#*JCGW#!v$G2~b
z?gKyrIPT^X%S+$DmvaE&VD0X_De!T8CG(n81B?HS*`|le(~e0O42oM64X!Xd9bz@P
z!Y#glu*n4dNslHvOt$~mZ^(3_;4(EnnKM6o)S4*?cPkeOvKi1oSaOC$BB$b-1BhrX
z-GY2`jT(EAeTX?G5IBf3vu6r{psL@^!s(vrWgY%UeotfCouNPJDm2;k3|Ip#$pp;R
zua{p!MQZ`3Zvx}0_@&}*iV9=LM^i^{qp(%zgi~fz#Dr5a%p;WQS`?j~WMYlH8kq>a
z_o((WbEq&V-ea4xJ*--sEUEh25N7P^lNto%mYI<W)Jx#2j0%w#w`!DuGo^Q$A)%ho
z#FyA~0f*Knx{2e!pV&A}*<J`;3~|-R?n3dF&5UN^vw^2-=^^eu3<mItvlk;B^O)c|
zbc6dUAcq9L1t%1SF9+AMD<BEh4T2H-$3f63gv4}Sq#O_k<aTcc_bqxYu<wqE3iwFY
z&xVCf4;bmMlDcSlO<%UnteUw_RW<~s+nhL`ru5CRtv0=EY;eduF3+@Fzu6}e<wwxv
zhiIBKzH+c+k3|yo4j)9XrUOGEahg?qAxA9ceGA$Z)V|~h7WSN++?Oh(A^y19h;IiO
zG@I=j&pL0Hb@Yc}<*l`?U%3>+jpJAsV-C^m?W}d=gNa81+~Jc2>FY+O@mb_UG;upd
zm(`zsE&q_hJ6QuLz7@XY;WV`x7)jA8%31M|R$!iG92SfKI~N|FPfawLnQFnCPDDQ}
zywz)JanTJ1DV;DP1umVkK0p}vM}hC&t#rrKl_=SWfzU?4)LgyFt@fZ3i*SvFtFG^n
zM|Xwg#iuWhblNpgP+-iyN2G>Q-07#4gYO>n61W~$&Vt!b^c5oRSQ2o%@_ZO2Ai2P@
z^E103i4*``lYr*EVf^H;hBm*FEF-dFm8zLL?30{GGXFxL$1vq&b%`Ow-!idVsE=}|
z#oMg)pa3nEU~q6dg3ps2q;R5#I$jv$R?t5K+UfmWZc1VsN!lXBVOoZ7CXtQ>eD_I4
zyBX?Aqic}o?MNPCQ*MpJb7fCZd!GC_)E)co80o^4D;yTfGhdvPo5F85W^LnhAO)HJ
z4n7*IcD{yr(j{YVI&3YOkg#G^8{bgj7eWJsbE}9Og{6$zTUXq_J3l<<6Tox84mHm5
zk|Bo-h4EJi3TfF9Ae5?<fMV7HC6p#qKuM6@X?wVZz!+<GhIpS;C3`f2@b$Y|LsYMl
zCSeacm4oZaJ@_hAL3)DTJO6cr-nwtb_qwRI(_<<#|8CRxg(I6*P=86?Cve+(&x}Kn
ze$b4z5o^!%&o`WP=Z==Un=^Ai*~h>4Yd9lMCc9rPY%fo{v>NL`pwUf!$G>en_Y|g6
z!j(gg*6Zve^^)1SMRi7k2$2*?|1A|$&4jbtGVT~U4WrOi7MMrJ=nNtf$#ij#8IUpu
zaijlOa`#-F3^LYYcMkA!q;az!HcuU2*ni)T|1=eO@MB3o4d_}F_!uv=AlGFnu{cL5
zbQ!l{W!)|SnJO4uw<xf5MmmEY`ui4#5C>)IfX@K!3X4}W@RTDJn@2J6Mh5u6(&*#Z
zg32d;Ul8*w9SB0N-SPNCuSDe%3WsV59oXvi^@zfGiiOc8SZGgg&Y!{P!LVE2`F;R%
z8hml)w{Ad()ZQ*jZRZ=3#t%?eCX|Rx^~#^bu;kzd4sM|$8$E(<Y@x0WA`=@tXz<9-
z<>tXfF2daV201}U_MknBIh(_Teh&HS1i`fvP-C5?qUW7Etrn0e3<=OXM~Hg;0)-eE
zv}Xe;Cm>y_QKi@r+{fZ%&0Dv!nGMX(ZNOfB7&%=-MYkc=a@E$;`Wd4CAsY~zN9Mo@
z{N&j*8M}dCO`4m}dMDBVdj6%$Uf{Bfpbq{$_dA}b1@kf&Y)x4@sMqx?mX^HsY^fTu
zP=jdTR_Z&mRIP(^(ng?Ge5^emiL~mn3u6N8X)#u#E6yhEl}vg8r^aEEuphh=l0N?c
z6rvr>E3(V9l>~9km<xCK4%#Cw@Vx1>#v<3m?+Bw5+^;uM^VXly1j<nt595OULN7fe
zCsyz78D0e(%H$nak1s(6do1GEypJOsHYSh;8uOcM$KGlQZOnux(#mS6G+7lI_?~<|
zt^H(rZXjpd-0czjeUb@oTu|-S-kuoof&~4X&||8sX7s}yG+5#-wXbQp?KbKe;EgQ{
zHuTDhMFJ*BJhGm@<4WerW<Bn>I6%bSCD|dfV<p0@fub1yxbs>0*gqd-#xA2!Q>2<O
z0NNXzgA`}})+cPTVHXrpJwMJ+uF|$fKM-i%Iya%xR!eRAE^4?sA&9<0j`EEr0zi5K
zBy-`8y!BH+UrAQN%SmAqEm+fMKCqJ{FY5<_i-Fhx+xVSZi=94;fJ)R)z8z<hu0&*!
zro&JY+Vkos@(==mx+v{rH)FUr*wn+!{AdjPr#(RW?_WgbGM4Ob0CD4{_LmW@OY8Re
z#&|%HYDC1hzD;0C><B6AJH?(Mzt58VA!Vt>n|-2EV@I!seys&M3_95;f^!=47WSM7
zsFULWA0TIC1gG8j!wCtew?@T>C*0+&1Uw4tgVZG%^=z>NvgPs;y)E+zvit^z|CD}D
zsrQRiVQ~bX|Jb3<GK49njDL|e{sKuK2G-xti~PcW--nO*LiKhL<xii(maR*fs_8eF
zf%?BGVn0hBv6|Lc8ApsA#Y0AaKiMK1mXo^w^uyoHt$tP4Uk~|oV{k<bPlsb@uYbYw
zf9nbVSWw)TPZvP22A-Ze^Io7Bc^p4K8N~ia&iHwIZ)j0w@pI3B^35m0g-$nTK#5Ah
z^7jz-AA3zy5e+O-*pFi@@O$&j&e>3>uYz}<2qr<XF+Cg1j(rQxHs-kvL)X{0hMAro
zFN$B#*CyTQQ2+z&Jq~z&n_vGk|CaQzC#H62!k9rcN1x^UG6L!r3L)?@00m-IbrM0#
zwGyErw$2CS2!~5<jwz@gSm2PP-4BSK#zy(475IVh6XzY>?#8mrTuf|$_jfmukA<0S
zaT=+<XP;?(jmky9>0@#fUEZ@xd}~}KjOlqfnt{LGS5!nI1%>jI4Znxt9~<?D8Zab`
zyeWm$>^MXD^(&#tL^sL=RT?+(qL}v=Ii0akE>b*nKJFwd4T~d;h!HA7RS)B4NumqX
zO3|2kAw-O`eY0NUVpJb+EfY$;r>1J=J%lkU#4nUhlKPXM{Tp{d1A#iRvB?l}_o1Th
zkwP#_^;O`cl(u`mhu@w#|8rbnpZwtUk5-}oB*aHvv2;A$V#Ajb)r9CF!2@Vt(ll^D
z>Lo127N!fLYdTrU2INEZa3z>V+6nJZE<`OSg{gaO0MiHW3Vj==w7=*<1_R#x#D5va
zM}f8-jz(x})KUmsJ))XhL&xQ$D_*iciLMsNhMjoi8{PpOmvCt1&Q_Kbm(Mcsavw8a
z4S5{sQJi<~=p56YrO$bpbTg2$vfiG)lJUiszB|+YD0V2@@~cIjB|Jquj_jv-#d<kH
zpu(PwvT)TJ4K0Z06Fa`OL|9HlSmO1uSSv;Wgq??VL0mbaEDg*xp{m)XjjWpFq0+7<
z!2Nagt-(~om>?I1mL%-3`X(Ma{ST93AyVNZtyeuFH$;`Hb2vxlSg^e0#CU!FY534V
zVz}+WPl>aar-PK@Yf%?0SyZ#S<PL8rk6ct87r14HF!}PkB^iWdJPxt*L~-9U%-K1;
zN!u*lxjTdC8hH&kDctpvWBlbh^S*bm{D($%mS>K;tg*WTMtYtjiHU45`k&&5K;<Sk
z=MEj>99FC<3#RRk(^cE*#OV1bZFzi1+b&zSF8!*%<UA|OJ}}3SD^*@^nh!Hlj^ayN
z#i>HB@#s(~G}>Dsv`x#>7%aRGiB$Xeo;1DrC8$zruQAzYB*+EaA$cH*v)~nnt>>+(
z+v<UyHzl-Ir4}GW6oIhW%eY^RhuM^o<l2JdxuLpV1H%@DX`eG9)NX4G^GcT23NZ7H
z>j%42&o={fOP}%jHU~cx_0|Qy3fEqKiheC$$>SEgVs|oJ)Z`N|Hdm@j_`zO*u8}`i
z;6!;(Beeh9EcnN~@jIc$v32WQ&i*;}X9i|KLi~AV?ms(`2w#DG`&0!U3r%cgYH*o1
zk@}XN78!B&h9=trJ|d@vh9iSAEVE&>1?Bl(BzPN^+AtUR$`7}`mR7?D%>LypDIPdI
z{h`EpXhD=~U}vw`pitZ@tIoD#jE+Q=V?dDUkAn?kHISaGE(J#qGHFiu@W%q7320$j
z%>dL@f@%5nA;);gqbQxATer-f8*>CC_vBu#s)-J`{3I9%K|ctkc+wEm6<`D}wSCC~
zff59A-Wdm<(}$v6g*cBFhqpqDDHW9!zD2M?(_fFk0P>`Tc_>u}FvZ~ctnd0pp`#Zb
zE8z%;T%f7`5U+H$wW0eX@{^UX^DAk@l<j&UWQ2I&6ga=jJo(8yxgBIWolJ4AO4IfF
zs)?IWj`q3MyFQhrjIh7~{%OM8R$;X;A$Wa{9l!Km5C?0+2gxH%rR6taOAg`6s_!>P
z#BV|}@s6!BtFJ`G@mE3V%!5**{#wSj+ScFRRZ=S7YeR|GES?2$q6e{rm$fQQgHyE+
z=0LN(ZmSIb|3c&b=UdAVvSskre^dk?k<*<bWnQg$w0X?zt=Ri4X^}M(e1H5ZC`A*V
zrtt0|9ta)-#CJoloiRd_-QnE3iKLUyztN*GoMN7Z2&OUaP3n;8e`VZ33}iE$FKm(O
z8Z(?Gg0bprkatZ9&h9G}M4gMa$vt955QtU_psc}P{GWV0Gq#81;gh(?5f<HjY*VKk
zx_1FHu`v!KPLD)D9Q0P3I!^FTgr68F%2E1aGSE^`DdDH*78@vC74E?VS-qykq0;hP
z=HZyI0q0v<1*MjNMbMvT&U(zM${St`?p2luj&Q$VY~R%6ImhI8uiQbncEODL^hvg5
zWOcnj*9IS&;BrbN@$tj3+XAh7fJ85Yt?gpqKlvrs!E-&r3S>kG;rLg#h5O-!TZxFe
zeckO3bEh8%wnB=4*gp><LQjKv;fpU}tW4oXv^Xi4^CK=vq|Ha2n5tA;>f(aOKPJUP
z_#>@yLGqP3Kgy$_&TfHok0q@4d4d5<w1eAEkXJHEsXL%_zWHF6^>iG$nzA;S1JceR
zt^O3{Q~qMK;Ic4`@j%Bz%1BHbefs@Fr{!d@l&!sr{Q~8{^ewzj`1|&Yy_{{~aCGQ=
z<xkJdXWpwhs{hoG2X1x3zVP>u&!VvG|38rh8EXr|8=$CvSbcFtL~njSvHfoW4m2};
z<8!-)uRlKpu0sk8TWx_rw#MI&l?&4;&Tv1mC%j)ch@C4_8)|6i8OTr&E34X}P80MG
zF+*f95bRtD1pR?mI1q&&sqgR&>%e<4JV=cu19MJ_rTsJxKTDB)75SrhJOciKL*mR}
z&VRKMQ=t8&^HpC6@`CQzGYDT_W+dwe7c;RtMlfSq+ZwP@o~+wTk|Es};@=m#hcg^E
zvIo~`;WB0QzL)&ZaZz|{wT37L&O|Y)K9i3Bd^j`nfED&ej=MuhJ%AJKCQ&2fIvFvL
z{f8yA%9dO(8VdJ87WUa4H{_N<fK^SceCQqq0>~aJ*V_Ji2S4Dg=`rX^Ff^rV?}PmZ
zWAn;lzS>R=jx>emO;3=N8ej&V%~T34d+=})`wQ;<gQvPXaNLoojE3HAD_c0Eo2$HS
za`iC~5RZ9s?oXPBw)4&*<s>wFsGep!3dN^1+=tVN<D@&jKkTXhGk)N%*C3VtL|QN(
zB=o9-AMVHh(Sh41Zi05-()EP$A(7;71gW@uaiRL|gPB%AG4zN}!2%|^aLF+X1}vFY
zFsS_yVm&uyvxPkr;nxGo`|qfN+tmlZcV|L*$=uMji$_*z0Bz@aqm=&;1L@$!Jy$PV
zR)5en@m#9_plK8|@%S3ZAS_ne$jXR}&-hqicIs6kKxchM`J=!_VoGvbIbq;thQM7+
zw%JtSg_m}4L~WjQ8&k<@P=W#VFtEE|K+`Xqku0jylP(GUGJN4)H(F2xN;r+(cReBG
z>vxK>@Pmeoii3`Ri_H~g>kH`a*Q)1w;$DULtN}T_1@GJZ;Eh><I5AN)bm%wzq>Eh6
z!P|?Iz9xR)uVO9HFX6uKkldbq7=TmlkxJm{7=L|CzLM&7)h~-I546|w>dSfjSx)TF
zER?Rstp|{D@IQn`@ax)-z9VU-T~`6>VfY8O1nC}x<Q6apOP>ebXj@GWZUxlh#NSt-
zr7N42n&!BUcoaWqi{)vULgCwBRRbmt&-ucuk@d_}Pb0q7$cS}2^s(J4c=lrB+=|9q
zS=Mu&tPR->tp03A6XwTL-O*wsNr$2^HcM~ERQ|KWJ<Y_pbiiUyf&e|k$Q!Spnf{N%
zw5LD*of1O4mzY@lMX;>}(s10w=g%2y{`VtR?HrwvgyJuJV*F3JMDxcy@$cn_e`ZNc
zAD+JCVjSo{T&iDRjbY34-MsmL2$^aAvl$D`uSGTBU)~V1df{+Nup#6c{2wsa-&Wn<
z-(VZo{rRu6=7_&Uk^h7wJ`zM*h7M2Ici=MZI<K@rJ=2vyc|N-m#;s_5X1IelLIlYe
zemD8smH$}+Nc?L6rbBg&C`DpaD}H#*g3}{aepnfv<&rnf9%gqQRun9oC4{m%8`<8B
zRVKZHop!AGs-EQq%#L07M64@8E~R^ACboAGH&+sg->dNbPMAfaxNqq*Xo*`TvTY<^
z>NXD)SF2Pdt3K}fk;V<_XI2w7cq5ihrb5hE)@!NmJspyHDhW>z?&+-S(}e9w3;C%F
zRiHk);?ZJ5D1GQ2pz|O5{hv;335p*rCC{@_wkSs`Yfb++h5RqF+b>1xZ>P*Z#HnXR
z1BK+H_J{6RY^jra|F$Ocmkog*0|L4Syvp6H%tr)z{Kwh)CI#vZY7b?kCI4N^xDBjJ
zA+e!bwBZ5dP8N`4BLHsdv?4=W)Nwsddig?1-nnRa=8N6e>kGW;=Od@m>%OY<jfPvY
zrx7XjervDpyWZSj0;G%kBBoT5FUd}DX$bWDCxH(~lgz3%%4LJ|(~y<h(@b??8uUM;
zO;9wF3R1N8Y_3)%B*j1x$UZN}`!o+IU`w!q7S2fen1em}8FqS2)^Hvn60~`uP73WF
zt8?U|%kgv5B&Tghmj0c4qpM4I*mg~p>T2}BX}3T)yE$e+OZ}`7l;t=4i69?do#eP7
zdaDnN#=g2SfKUip#eyCY^CNnYf<R)*T?#Lt$)hd88pbf&QuB$Ietb*Bdh2zzQ-fNJ
z3MvM<Ei_kj?=dwx%(zQ0Rjtc7RB{Ka6|5C`g*J|_i#o%sPm1`r>+o}H25=4)o&3j?
z%z#!>t2^MmwQq+h-PZ`XE$~9iU=1erU%2SLijsQ+MO>e<*)3IR?MYa8b002DiJ1s0
zSsTggMBr6%4SCSyCR=C9WzUIC#TEM^-+gaVW~d`Wvsrc9Z%RsVx-26+oP_Rm@~N*B
zt(+2M$80$wi&oz*e(tSRrqAYbkRfM&%)?$n=(IYUi6xPU_sQ7W1T_1>aJM%)UG>9b
zxYtpH!db9mT<YLHU+@SeVvKzG3`Ks|`G5*VV4ZKxMk`RnudrTodEChN?uG4HpaR7g
zHn3-l6ldNAY$Q$gOy5E-!j+Cys`U>o*ZoG5DG9apzlwmbU+3yi!QOC5s-D3ksB1YP
zHiZ{6i$_yUO?a32A?qv;xp)(r5-;-{u<x3xx>zq=c2a&xTN1w0S#QuAA`%B0JDiZl
ziIw3IqiLB_pKX`Qn=l!CRxukZn$3I`L1ZEUysf&CJr{=us1Trgaq5JO6HT;Keqv}+
z)FQ-?6x6}ZWas_P@*R-_!Ho`U6RsOIzTFwf(O2tY|F|>B*r+P|k)~F46F}W^{H)+}
z$BS(vll?~L3-B`1W3resT0}?(!NTW~htd6(?!v0GS}jONZlGkOOJuIpMOkYr(_f2j
z%}zW=L12{STXh8AVm5TDZ?58A@NQ&$peC~t5^NdYBI6?A?FeNn+bN$`1NbjS6p0Fg
zHKDp)3aKVYfXnNjr&bX6WD|7d6$E%jeb5izfgrvb$AF9<-{5v<)GHc~Ar9*_?2tkG
zJS)ZjG4Y#E!5$^B0NqQ;w>~J*w5*cZT@{^Zd9;er`fnD7$Ee}HCL^)8vLI(A4GN;`
zDo~%)QQ}N@5@45r@!;_@D4}y`)AkQKNcaQHI4JR3=P*hm_Q=Enx_voullC+?gJ9iK
zi8yduW2-d#p(JOTHIvzwC_$-!vs{U6ZsN0=E48%u4I{Zzbd)*oW5f4amS&f*J1r;e
zgfPkm?k+#AX2_vk8y88YXjMb^g_wdN4%^g&NNm}7+Hc>@!I#!Vo@AaCebi;kuaV#+
zF1!X}k;*oH-<$pU_ybI&3$#w)8@MS8E4E4*`#{RNa*zXZA159YcgT)=5-0hSB*EFo
zI)uXdg2o+xF9b;o;_&fjq_5T9o^6S8kFSBKcQQY|6Y0R06VhXF9SzTO^P`5gtNh9Z
z!eX9vt9US$6HF}6MR0yNz|C9uaRUx)j?A-te}j6$-Mez^a7J_TMo<v-^i%Gq4D%_V
zoxUp4|KGi=Ch1nQllLni)DD<XSJusWwJ<2Zl!U54xZUM687o+HMq%UeHMvR}<auBD
z1rQ?zA(+!V&z%@CK*y52_;P|XlAlyZKjZl8QH?XY^)Ut*W-v94*Gl<WQDWipTC=~=
zfc(-(r^;~D7g>bSqF%!fPKsob$wO$IJ84t-fpUKRN;pOgCT}Ft{Dk35w2gX|>ELkb
z)pMb#gL4Q=C>Get3xcGpLp6`;?no#1<@tfBVw|I2f-s<bxy0;n*MQBnP(F5_F`MGf
zxUmTo2|{)OHy8>R;MxX#TSnNrxMZuCUXua6+2>{%^9;^e<vq@+h?I5!eb7dC$UgX#
zfTVie2ev5Kz&-&*I850UXYiu8i(i)qgwNqVM=%{KhdnE<Bk!SJ*%Zw7&Cu$6cE;7`
zfVNZ8L|MJD?E;^-xp`OL0$Vef3}GiJhs}hl)*XYSIEz6<ce_*5hZ>P7pGi2az?9CS
zK6x)}adc!EL}uxXL`#m}0WI1<jDnycA>{<NtmJ<uY!=pwuch(4`qg!anoj+gn(x_Z
z2y26AxmWNm&$F~CGCDe5h4oma%Lt`W;!+piR`e6oDCQ~dK$b;dnKHTs-C{XNS_xcN
z|1J)8?psVM$CJYVkmmahy<9GMV)ai<dJv1)2Ajj;JziY7nxaq!MU;tTiZIy74Mu==
z7gp^n;H1R1%&BmNfLGM8nkftGuCx9|FMyRK`zf;WPLV28aNc>Ph}~0S6fVfe>AwL5
z|NOd^t3RlcRBTL{i){T_1}2u%Hrcph_m`Z`<D$ly8xOB++Gs@ma=-ad$v$0K0EZ|m
zO#<QsW)z@@<b|dTu4&@#S$LIclV4N6bC63pkR{M_V+o$%=f0&Yqis@WP>J`4@mDeQ
z)!V6gRk3(vpqU_!)0rP?J}^Gd;vagA5-%iCGGVrdVs9e<2KY)c`b@S4tu>siOe(`Y
zXM^hs7cp1a&TxoO0I;knQ21~b=JKqEkoIfuOOLC(Y?L;U_YOg`zSe9-+VgvK1$JPy
z$7#?6)z;TKMYkMWpCj0nWzv&kwOpMXVy0h|GMb6ORlfXi4Fj6o(nk=F2(kT<DZq3E
zI4Wn#*U%slo65$9&nor^C}|e_4oCEvy$|bY>Xygk=Ru6@iT$ozLp-{EAGlUwYw~qJ
z|F{5mdD*h$EG7NgtBrUHU~^|v1-OqNkhne)-qZ-Gxetgk7I);1)WFIg3PVS_hqkCI
zUlKBK=MD-o)N0w8W*l)+O5XP}D`SHxY*~-l1!?#VLKk%3E`6H!{^+|TZ%KnFo&PC~
zQIaF{@Vo+2Qnj_zrWl;XSCBTqVIpD@J&R%H?Zzt^9qL>#A_xNAHtmP+W`u_0-X296
zIa#?QA<wRfUadiHDiB`Tfwpjh=mf56Bnt8If16esG@aIaf2w?rDO+<Ol2V>IylZ%<
zMmJr6-?~Vz;@l%x)aFsz$N(gpGaBVxNfl#S+}jmdXQP5M0<}@jG{Ar#71$2TyR|XZ
z86OE_tY)<9r2;)Hq^lydrOuOVU`upeO)HMRh*E1nn)4=ajbj~n$#J2BtueNr0cWHm
z985j9P!~?AJ76Wmd)yq_SCYm>m)tzS2Z!k_qxBPd|Il(k37P)Rn+m1s_<)v_swGMo
z$D4*q0tYbj;`1Sw)ZHsaxZD+w_kp)>G8WXkbP~0~n;a*efmoGNnSy;)eCz-WqQWoO
zy7~vZt_PH%oq^^WoR^-ty<t2zrmYAz!t#hmKd6rgSf+B47;o03rtV!A?qi<XjGoJ3
z^@mPtU^-y2mIW?Wq@V;Yd1*`IAYrZmw%q*e-PnzI4FL(?F3Be&3slo@hMh&J{k;f?
z4j()h^RZUA)|T-juC87aJdbCY?p`3y(wLQy0y><-rri^wW3CsYHJ0G$#xNC2!e8!h
zvg_F8ig#Ux7nKk0j4&3+c`I=vJ;sc39l_e#giZF9l#Gx1BAY!TLh6&*yMPa|!dzNN
zl*21Q43oPd2wdq}q;(8!+N?A=Bx3}2q|0C4igL|OJqP2E+YHUq5T(a)+Gv3x;EcPa
z>7gp92QR0cvfr=iiF?oBP6T%WE|MFIK$m95z-V)aCd(w%tY%vdE33km97L*RT~4QS
zH@CFebqqdzB4w>NiS3SY%CiYebS`>I=!BIODR#9$;j+H6UR(^KaRR{aK51DSf1bZI
zpv!tyROj@6SUZO%VVEEZk8Rtw`HpSdwr$(CZQHhO+xE<Ud)R-lx4v~pbaZt*8I_eb
zM35{1gw_*-BE}VUPhhCnC<_GUaVM_Q*x2*@v1)Henob>b@7klkrdddA30TrelMN?3
zAv@kGM?A5`;7Gj#(f0;vX8`}XY^)&78xt=}@&t^!M!=(&JZ$euZ15L9sZgD2bqmw@
zD;DAAtEolvHj%{;(xP+mS;{8ona@U@yYCXrt3kkQB@Dzk`Dy<2v0H)J8O)J(8629%
z6K5Kszgq{TtUl>((?lmVu4G1YVm7fO8Ht(%?}s*k;qG<@nxUQqiC+nI6dsb8o02-P
zxzDNYa<4N8h6?(FF9PU^>@3jgLfK|6^ESGNn7=(&b%e0=>eZ6BSJ(ecQdxK**(ul`
zj34?<dWY`cGk|g2LBv*ygv=|$;O_KhiEAX==Q35som+_Ig`sx@#a4G{c~kZVeXJLS
zj?yIo_#{?n4$K#rBa%x2Q?o797o*i#FvZ_RlTswNEC8{*2y-Wox;qBFv9N%G1sX&%
zYK}_75d4@A%&V(_5!|MNtUA_l5V_<~-Tnaxj*A5vTmB1*Un`2`NHa6?Hc)-DuH5|n
z@*!@Ks`x?pDBYN&2X7ikhd1C>N7-I3Y6#u(@?fJvvN+_5Sk-Czw;{IDCVX--zbk7U
z;pjT`@CkP_T)$)h5%)CV!u8+qhquCrnJ=!+f+8n<dK!o<pP5!)vT}8;k8iSq?h-xo
zOHln$m|hDjwKWLv_|m%ugydt8o<Dd-)mWfKVf96+H<$h|&^iLeIH6a-7B2!28t`$v
z#Xy8gSA^TimZ*Q**vw*6eM`t?LKx=Awnw{+gs}Cm>iXN}K;_4aFZBQsQXu<Y(Lnc7
zF}71O_s~kTn9IdxK7y8G{Zk4lTbWWu6@SQ{y&ZNODo+Yid=(zbpfts8NrKE+%P%Z`
z`r7_zhG>DwDO%bd6lpJp{!jl#0daitdZTM&jOKHotqL+J?fDl4MV(&}qriBmN5g3I
zx)^Q**@?FY;{2$P9wRwbir)fHI6`Ug;Vm7YuaN9ck!b(PQk=bB5wbZ;pJ(c_E;5Dt
z#`hAaQ#O%S<04fKQt@&F#qF4_@sV%8NQeM7m-a-vo>&F7ZwVewiF%&zYl9S+M_OZ*
zRT$izT#9t2hX5NX9;oIzE{gut=i$KfJCJVUIK*t8N~MP)JtOuYi?YyNe}|5qRpwZB
zp_8L(UgsNd4L1^|u9^mX24d5ColyocbwscPVJUl+*!_pp3{_(ZFBtSy6a>3`;=k=H
z8{wNyn63bW&>uQ1w%g*4^#uuxv%ymH5NXGz_g6Nl&jNAi7|}g{P#Gm=kCvM~$km^t
zX=N;Ye&2jUL8U_qOm)6PLCvA&g`<@nc!csMzWHvj8PVZZpQn(S^&lZy_|k}}bx(Fd
ze!hbDkhLdnRy`(5Y~c=O(X`@EgAL9v)w@~!7`<Hwh?6dRji)SK@|0R|cW&gI##GFi
zGr=m)=+FyMQ^;X)Sm1^)QZYP3vTkP5>^&r$6;-$Mn@hH=$pxTeDdF<|qF*E`A(*Oh
zpPxXA0`271GCAn7;xoDvwmmbd)K$nFEq17=(V`B%IXz4L0am7O8FChPqBeryxsv{8
z#T7Xid^=45%(#Wy8%Wj@pXkS(n@9op&tsZm!pkMAJ4$kZil1r@t3?6>;Fj`L6(LtH
z*w>PQsB#Uroj<X<!u)?7v{8^=DU|AbZVyY)^Hsp@Ea?TTGmkf3p6f&=4Hq4jm>`Iy
z3jR_y_YDyDn)n!_9qjoa5OI*_lSUAYv3W0Qy@e}08fT2|l<Aw3eUWg~i0a1-pO_t9
z$t34QlMq^-H%XtM5!%=76a)!*;o$)xXZb_io~qxINT}oqix;5|JRT9XgmaAsW?O}g
zPMkLKxaeirHSwW7p0`r_@SVPeJR>jS80$;Z`v%w#YYu+N&Tp2(imV$zPmU^-c?6?^
zr{FYn2fhix^!!zT1#)l|6h9^B@aqWElm6J0!~3r^(<O!(wJ?RlYog#C5h<G4Fs1Hv
zyS6pi1Ay<^q4<>mvo%|7p-29#)O5Eb=RsE|(*d2BtA!J^L^EJ6_E-ARx?WxY`MM7$
zP;+;UE(zS!_u8>9E5Eha+kpZhDt=_b3llWzL03sj&}{MbL1-^yVC%VK`h6PbetG(i
zG27hLA^ui^C?CS<B?{ANcU$yUpFU4mZxcGR-ua(`1YDg2H<%3p(t~g$REU(MEM!6G
zOV|bG4Vvm+^*(H6<C!LMO@^-p7wraj-^gwgpejX45A-W;PLnQGhqMoh_mqJh{)6hT
z4zzS;#fhdY)u#+N>xf00t@9%nHjioz2lliEv+Dc-{y1u%2cT4w-@AdtbjK5WVCXyX
z%^f2!p*v&>-q+%Xi$7{3je6zLi4RNyL7<qNPUNO+An>FkH%zy5YwKK^xHzS(U2B&?
zIbd?BcJCkF_ok=FpaC<*dKDPw-2}sk--@rhF{UEE+fEzxT6;buELdwF_*c@YDIO!`
zM<X1w3E}a7GIAo>4@Cuq6q9T9MwE8}Z0YZEPnI*J@_N<bHTFCVsow7H^h>XEAO^YH
zLEkX0)c+tf7)e}&b)x4d;`KB3;>JL^Crw}k+F8@%(wq9Ib<8G$td|U@k@mlQ7sp_q
z00s7g7O7ypRsZz@Hr~pTV?TkwdQ>(X?OeJn18QP?{##qu&0nE&kwCcGd(~XxgRzTJ
z*rCUImrn)uPP4Z6!e+w3-U)x!5Elu(b}ybrvMVO&2L})W*EYzv4B@g79=n@BV34s1
zM*^6qB}}sWYDf7Zklg^}w+|c=QTzfGi%fs8NGS!S5wIMLaMzNl^v4~>vhd7*Tq()R
z6+x*R*qwnd3O8A;_QEj-POq~TEsAU%uyk6Q$hK=*>J~pRRX0H9k;}|6=xzdhqx)o-
zU5)YzoD7-e?e{fe57zG=322gz!ic`gW~k1jSCF$AppT^8+Ge;X#xSE%|0VdF`_hru
z?FvtG0mc^}tQJ6!1aQ>=IK7EruC-G&%7{|72OizL{b7WTf_srTfRhzM685c1h$3X~
z*MFTIw8<6tPf<u{%)j>l+W93>`z#ht;bsn-Tuz?z@!Im0Vt_71btlncejvHWB7#DN
zmTNHoWA|>NB6a_H4`Eqx09k%aqOX!{<*;)1$u&sOP^xlyr7`OlohNDZTjjv05F8M?
z?+Sm>&j0*6L{+C9sx?i1`g=L<oQ?jV=HL8nM6E23qw*U3$*bUgQ(@1w#M9ETPibN%
z7#V{a7W)$qFPFiuWstR_eOJ2a8WdXqnlK(k82Pq6Mi>JWg9b1YL=>jX41ZH^s&ZR<
z3V0?B-4l~+zEBmSkphVSMWbAQD5RwkF+%PRIp(0*j7PY$Z_U!X?!g`d`HXJ}(gSMd
zJDP5*@^g836hvd-vvh(TO`z7gTgRsp-wbxVF%>$Z)WrTyW|ikr=FdB4LcpqbUNTP;
zzyuq(H!{1Z%g$z$=shNyBHAVSkuSUE_XmKF@f_^KcCJINz&)Ftx~ia%{1wLMDFgG-
zLcOl)XFs5#1oDc63E$l^?-?w*Q&kAS&-#YKPkF0ZTApW>iZLYwB}HLEl-UhQ1pol_
z_tco~il6nOu{CrwW)3S(l4T%xs>wQ9Ru*1gkM+h>?QkxYw;4&OEQR^vTFYKcZH3&A
z8tJARSOx7)b#zP`B<Fgv09r;jYT>jJ9y$~Y{z<NTVc<iKk8Tz_X)I8K<-$-5gpkV7
z(q8r{U>f*WK$M5HmxVv6aLu@j1?nut@iGxT3W9Q_VV=_UPX`U<0(Q3IHHR0~(-r`f
z!C!q)(Y5Z-M*;yjj4yD$xPb`E>uuv3R2-P`750|x%z$C2d-hn1bWO1P>M<1yy4zf#
zQ@dYC2GLnt%E5-M+((R?zg)S*YN>azlBu}$p}8KXO+eyT+!6Dl&m3;u>JBwI0JTms
zqzgMI)Z1_V-U!?vk2Kbyz%0kH`qM8w$hsi@5^g(H)#ke#fGc1i1e#sSwLa{0em;Sg
zyXKyjjY!1Aq{}$PJ_6P$^OdkmO592Hn=bmxpfv7Re|j(~TV)@(U6Xy&V-P-{aeO4C
zyz@6oaEcM=fo0wJ7xUhnxs*BEB<Y*SM45AP;PW_)wfAZHF^yy-xKk!<+mD0Fzk=5M
zr=Cg{5=-a@*i@XxfYPTr;R8YS4EXu!;*0ORI8JJkfwxL(`3e(}HqsYv#@c6|vRv|B
zE4~vg$CV^dHsC1+VxqzbP~(r5Hi-5g1q&H#*)L0{vF8T_Lxnz;gCG@yW~SGfw!}Ba
zL<`)aRX2!LN#g|4+p)dHCI-I%qTNOl>*xXf-b}~xU*o4&^BQE1pTRu-Pj|d`+93BK
zJgAhHUD?U;aWAV*@pA^hGCAaHrc&^3eiZ*x6#ijKb)1-VJ(&3jI1MK-PEd}D7C@_y
z)>8HPC``69=c9fy;1!04uekCQl(~EM!IZ0gNR+5@<`STLEaS+12fu&69?nUo6e<nz
zugKaW5O-dPUd(noGyf1E=(An1)9E$<2^sH2oAO?cDX{~Js4%P>2cB;9nGsd$r#~XG
zPp6pc_b^(>?c${if&ZE3;9r%#tnlW#*+^B*)YLcV7k4DK)RTL@qHITe=^NX_9CUAH
zl!*D(F=7z;5S+_LHe-hUZtl9tvY4xOWC!a%$a%6xAiulLb_T=49fZ<4n&c(r(5m|G
z)BVxPJ{2%xAnSn1u!3IA9g~?X72F9K`@?9j4%_F%tA=I2f7m_vo5=%YYK=^NkaYBD
zMfh^k^YYSMeC9hsO4`W367Is-L!|xx5jmh?sAoYYBf<XuEDBtk%HjPK*1lT5W*Jb0
z#u0t>9Qll#*GHZA0kLxlylXoLvw{IYbdr97l~k9u6hhDZBz@Sc&#Rq?`7<|n_NG_#
zDf%Sf7va6J)X6tQBY0QZ9+T7=1gM|q**}EWJnI5b$NBFIBi#r+2z2db6w_xKB;HVK
zm=xUqJqUpJDIDC<TTp6)Yx&2eX67@6LY>p1vENTs2lAn_v0IyYvABI))}}6Z3K>!1
zvU{R>xJc=BD;gSsq)zB3yl6|t1z2aiP2tC2Q=05dGr4s7@A@)Yc_f`RO?FVcBb>lE
zCpf_|&i~sI?CR06Bd?sO8q|PI3ag3hIv{iJQYuHEL@a^+>bz8>v%BlGb%hAuLdVBS
z>2jOV*&aaJB}_Oisi(Cl1^HR1czI7J_3MOb9=gfn?qT1b>^(j)t?JW=H>dUHzq_c_
zt_FZco<B8Vn!pva%RUyTO8j?(ul=O0^VoVP=a1ZRenU1CD7;PG3UGJ@mh_M9FJRH(
zo;d~J8C8ei1UQGVc!vjLX)VtE_RZn-`W5iBc}L?*J-q%_FImz>(>38{82Vmt<PKHV
z!_b<^^}Nd`&AUy<9uKg;VHPw~VMX?r7kk{RK3H?S`Py|9U20rvr)*Lf_^i~JY6z#F
z1Ih04rBFQlWZBe6)#5_nARmhE^~lL(8hjozU4K!UX9AFc3MmI3HzxAtK9Q}j(R%W>
z%UrJ~EeHZoLwN@Va~1pcRW}Kv>$=VJXi@DzdYx%>ZbbNz>GUQ1+pW_^`4M~pkKfHw
zmUujpt-<+tR}X1?N`5ge3o?7#X)qKKTy4qK2J!LI*Vz}dTd~r_1&gkoVAb?;hPv<_
zRkFsgiiTLn<wN-?CFWE~Ky6y-l?tC}?N%p@p#wX+u>m9~*&(>qgAR%7%46rxi;8kE
zxlcitf?-^NQdRAQ0ylgQaI<y#Tr4NIjC2{fCY;L2JjM^R@G_{jeGzL*;25jYEoRAv
zncc1kKN1%z#o>CvSa4;g3*13FciG|YIhaf9BqfD1YxRElls#q@VJX66gu^9v(yI^6
z*=PXbJwbpffxG4#GY@9VFe?cgSmdy&!XPO3*(suZZ@R8=+u!4R@_ujNcEL5GUC#V}
zU&aUknK^XKWFo9mi^TI&tHx8xQpdbplmvUwd9?%7gwc9LF$dVmH}lcsj~|qJ((s$a
zjk0h#ik}%!kZv|HKk<BeMdsLZA`twx^Vu~L&InvR29)!gt6tLl3mY#LV6-|4w}%!J
zK-quF&z3SexM*xzdfIrFJrnQ2nf*DuA;P=N-k?`Zd0FXaY3JPP8Eqx(%E|Ql?Bycd
ztbbSalbLz$jt=8GXFD!?>NYVpfU@Ow?ct@kXc!AwWfU_&vjG4QKYYW<p0IxHs>_#Z
zNackHhv{ZuyK{q9SZ4vLW00}uRao);S$U?)b`_n3lW>VCnONi1XdxpO3nRp7O#^hI
z{<57=i`CQzn7EBJ#fx@ivSu-A=~>pi$}Xy-kh*n`KS$rYSY_aD6i3mDfSpLT!exG&
zvwUYK`OG3FyEp!1gR|99xX=UP-fxwlxaVhUi9i#jkywJCa0#8S#Xg$W7Hm-~`ab#4
z(74)t(=xWm(wR2G(`82BMV?LzeDW!yHTo9u_rf2fl^VshsXf%Ag?N&dS!>hAio7;n
zXx|TpVXH6@hL0DE^t)9^{bG$ve>#m@vas%^GQ{m>2{xia>8jSiC`8QAmrBh*HxPXy
z{pVV~=lqxWWbHa?ySuB$M_85dRhpOsGK$>Ex*y^xIBaKyAaOpVeup>`K$0j-ArQYa
z9t#^~k=TUhnfxj?Ao<@Qk22b`#t2>|v?tABoC;`H_6oKl>CgV6+cw_r>K6Z>GiC}#
z7rq@!_~oveHQkkz3W5!ot^nctG!?7salQ@9Q^+hS!Bn3j!jQu??)Z|LD>MD(Lt(`f
z_N<i$1b$iw4oL)(f8OiHb|godA+or49V0b;YZ?Er=ym^0rTdWZf4#}na{CT4NtvOR
zTeARow;xBV&Id)A%Hc7Hc6(D|xkk_IAhsdE1&HjN$0=X0W4+@jAE+yA1(d)e88x-l
z9utB};re5re8R&-;U+Px-MHhTxtvKOsOO1}K61EE1vcVYZG}2gv3neY%1O^^;0udv
z(+sR$al8=ElKg_TXp{nJ;K3fFd%}est&AI~R`4b}gUvCtrSd3le|@8^1nSNk?L!c}
zgMIp8&{aN{a;B$lYYeW$Y&VD6fpf>-dK7RW=MXp%=&IlFT@9gNhGt5cJa#+UO5BZE
zc6I9853~Z0zG4l$|4P6|%&Y@}ry0q(ADH8$t0G37iZ)A`vWf_;(UzsYI$*OPgNVq;
z1$2UeY}0?m_hOza*n#5&Y~3Y?E|<ea@|lj_R%=>{w&N`$)N87MR&r)R&AOphsq)I_
zK5`Egs+y08ZUyL<B+`J1aGV~Nf(ueF-vT#kt23QgtRqTx9&7`w0L^0o*q_xNn-7(h
zlFCHkl{EB2nBP^)fSExK04_pFfTf9!l{&|J#jF8^D7={Hc|Ag?48DMaI|^1g9^%uZ
zExEP~NMwQ+kn6?e#?{k+Aa_zq91|e#;F~=hw@`w17bRfRy!rntHGo_qHN9uU%7HnF
z!rk%VASol7MEw5IMi%nxGIVY7f8+>@zsgZYVMdRWE<vf>6V3LdV+@!rq4Z2gh|VTJ
zq~*fCNdBg(K-nKqX}-e(2uzwjZU$WWwha15Sc1}$h5u~<0OC})BlHNE4r!8=nqn|D
z2+~c6nW%`YZ-_C?Z6Cd0PUffKO5Dc~>F{5vd6!*-wd?R9{I#d@I<^T5k8gq<T!W!W
zXG9^E%jo_Np+<<JwBj%cP&jtxYiI%qIAcTMSf506dpTka74WGzS}mDG@04*0)hete
zf!@H}o(@PzZtDv?Y?yI>=r8fa?hBB>Gv~tTniHwEKd61n1YtZk;HlQOtj0$JFX~%<
zA0t{m^r7F@J&BP=GW?>>P>gI5U}wo8f>v40JJwQeXDoZd<54LcepYJ-JT(6Fs8>)F
zb{}XFQGr}UGBLEv$r(PJ$I6Xor9e1@bzsQme-xas4gnd~40x>#ON~L7Z(~akXnP_i
z2-tfiniF`jy`f($TT4nd8{aPpiKNc*CLOa(y>3Eu+uJFKVVZiG<Q(sLMlz}nwc!pm
zl@Km(W!?3tMdqdr+UIXq-6Wjnjb<|E;6>X0wop!MH!2CxP@&3;u!8uSt(Y`9q;M&f
zmiSW}8hYE~gwkRC<1BF%aEKqMNkF=x0Fk$$0~OxRvXM$cbTS-KGPYtT|NBeV_a`&T
z6|leimGjFd+2#`>i(J`Gm5TYsSe`n%q_-w|)}Jh*+CMhUoL#O13a$sLmgJtRC>&z+
z^*x6cZW4_+3hPBTTi59K<erfu9%lZ;9lxU}`vd>YkCW320Q{>ePj#hdt_lA~*9<(M
zF;ifej?L@gAw6|oZ_hE|g8W{pVAJAV|KaSEP|V*cm>XZMgua|FW7)#W{-#bo#i-_=
zs^6^*pF$}SU%9+)yJ{Uf%b~s7Cn;U?0>b_;bx;f3>VR(qj!mg1-^C-5S$%V6#N=hx
z)+!7tI*+T#{N9iCK))KFlf;B1DJOX+=wNjel{uo{<i-Xu`TjuwZ>Z|d>5Vah6=a>l
zJhlVp!bw7U78BecX{I@@u`+SP2fQ~E3<o58KgwmikbH5DM2$TW!7Ae6>vPkp`2%)M
zx6ZH0tw9~Rzu@s(xh#m>kL<BjB&F3RB3;Ik&_rP=-TQ*eeKbs@zoa!KmQ=n>%c@{I
zd7(;ouIE$@dUPZ#?`<^bzZ|pim7*%Bg#S`=K5zM$dLrIVb0+q^*?Xx`|7yT8UGxrf
zp&n-fRI&A3a~4h?lL)OeK)np(ay9kzJ2-j-8A#<AEFLxxsSI70xpk3yv#DSNO9z>J
z8@ytBpngh5B!e!`HhljY1~6((FVi<HeBh?xgU3}!6;}=PRsE7jna_Bq)(}Pm>Qc;y
zGgb(Z{2#lY&%&&6^rqbKRr~){U;2rZoi>QM%4sRr3XOOHTfgjfIOHz1d26zyF}yvT
z#s3Cz>f*u?kT7ERy2i<V@mHIS%~3YV(`0Jcqd&8_ae(AI?v<)c6L5`uV-#Q}xjnPM
z!}#nywxBS~k4q77;nFw8ZP5NuUUK%-DUeAZvj{zG^!;(Rvej-D;|0RNU5g^R^SyOf
zNDn+PLH-73kitEt7VhYq#l^7SfyEKf>{gD#on8rCgTt<)z#2r~A@)EN0Q#-stqDLP
zqC;t5lW(w7Lvik}*$sDH6bMD7_)`Dj@J8!YBOB+GLM=KIl_Xj2$BPqnMwl=A$N>cN
z*sdRYWLO=coqr;*xWSe~eZGG1U&?Oon&FPn#BLd$b4xGhD0d#tmgg5bw(8~{O$?El
zBp_gSEyzKc_DcJLdp3+d;|t#boaws6Go`Ib^~qDxo#`iHF1=YFjBE)1Jb!^Z{p}#q
zU)JW?ES}<J{6Z_4j=4lKSB%E}$C2@RMRKfOlLDCd1Wb^X>A-FrfJVceUbtzjOdlog
zBMTEp6@3e8=p#F`tGOKf*<*gGk|k1h>;&;UB~$+FSHF6ozo?E=QG?|`r)V#)`j0LK
zpPckgM@z6p(9ij0Gx6$sX<)`Ox1aF^t^H_=t=pDp8g5C@=oVwSza(>@vp#n=BU*m(
zujTPD@d`7Ix#8sBz8#t)XhYhZg{z;e^!8cq=%@&cV(tfIjJ>?9p=sHnr_}MyhHEQ)
za8wmE9p_Cb77;|ok+Tiuuc&R-5Dh<~XKTM0N=*-}*z#c!%f}twm=-ZwYPiwQPRZYO
z?zZl2HcH>JY(xL~x|!Xny)gi0jCME(K9Ob9q{5CIZS3_|GYJt5c_(ua5~rTan9JkA
zr99GOk&>n@HK!(>u^%4P5GR&w1L{I0(aSm#16tQE*Gk@+%J~f$_wjC!pv7W~(s3Ys
zCkTl3i5WdYjiYwNb2PNN@GA5Fv)EXfHIrciDq^{2QK|<p{ihxQp93Sn*A)}w6*Mp$
zvQHoBmPG#>0h@nrIpN03<GVIO%$tKW-EqnqJKK7Exv$*~Kf9^{pTzR_U!>_s_{A;5
zb_{71y7h}=`llFKiv5sn2!#<|qCuV8I~Sol`H#8Ya~D29w%4o6w4x@723=Gr`E;|_
z_vG%J%W+P$<pm@j%%w;|t+%Qvbn-%DZ@z@h)x`Jc3gP_aVNPHg_6J~!i9Y%eqIj6~
zU(vploVLS-X~}qLSR_}|MmCDQv{cIr1D6%4KYfm=EVIw^Q+@&+9DU%9bgOxF|6o+C
z&IqOT;ezP|ob=R6E)=3T>9e4HkoJDe(CBh(gQEgmv4<Lnq1OYwbVX6ElM@p}AUvE^
zZFOYoVh?@snG9^#_viBdvWW)h7Li$lFOug_JA6NT{4JtOH@ZOXd*~GjwI48Fo()nv
z+@PI^Oa5cRE(v4@q&iR^LDD+UsmUfO4y_3SDw6%Dsl^ARTWGALOh83=dE!Zq>3pt;
z>gsK#ONqG?xW~-ZGhSqS^%&Jfa}RvMK~%&tYi%0d2n8(Ilpj^fy2-H8#5ENBDO(Tw
zn`3~k$@&@8Vye$Ilk2eqdD+<K<{5)#0qU(1lhjVo^iyZFHYRJ;cCfU1mbt`SXM<K6
zXS~mkh;oZNv~hZUpXawm-W;@<EV)Y~zPpNG<Z1Wgkl{X{0f(=?+6sUYp9P($@5xrT
zp^_{Z9%4Qz^}b(XqK(iJnN4C7I!B=QBoqu@*WPc##08WXa~2PvVjj%X77BnKdD&cK
zlZ&7mw)p0$#Pw0*QKn%6rq@Hb#bdxpB$jYm0Ef*34_G9LJ7`Laog%ciy~J}-7E3cF
z<9K%2_IiJbv5W`FotHfSq>f_5JhT4>oY|C4R99$gc6H{!<vn;}4@cU?jr)!tA_cdw
zzd_5UmZhoKvvft%zTw@1K@Nn0#O_Ogba%3fwr(|4t^}Nu%)HDKX0k|axD(7xcA!x`
z_OGygWK=Xnw7NR{#{Elm<_cKu!hqpqy>mn8-{#F{=h#m=y$kN{Vw%!HR?{a9g3ph*
zeC|eP5)o9XIx|!@)xZuGL@}{{6DkzFMp)<KpX<i?E#B1Od~yhvldAdI&Jcxde#}){
zfJGuY_pR)gs$zjg8j!KSiAw*LXJ}6+_IC;@9UQXB*2zvrhh%WijsEcJ&Q1u6jYdy1
zO3#e3Rs2lrbj7Z2Nio0cY%zesP1soMcgva8BFA{*#kq$#?a>gMfKt$tTURH;bJxZX
zt%nm3K^w{myW{>Vti61NL`vBwrutH}{DF*7HxFQnnU5B8S)fQ&FJQ31xBrca4st|5
zc}UOR^d6pgfdm;HmNsDSTwtYhkG<cJF;41chq#<;sx(UzpQBq+Mk9<~v*I5^GLw(d
z+>*yI8naGZ6}~S>GRGi^f2e*+|M$%vaDA}aJDBsulOaxG;jf|pl*a<Sjo0(ys(Vx^
za)wHM{aycj$v`-pYH0DIe=bbklIyoGL7tjmRboO0jYpLaUjoUdlEM=2g7*c1|CGBl
zsH%$N9<4VR@I?|Ed!XZuMK|rtHJUHXB?GcgR8TW!jPL3LX5onZAirI799Nk^2SQ&q
z56N0k+3kw5xTln&29Z&?aDGaVM(4OPrjS;LwwTfpgRt1DD(#u2!b>nJohZa}bXlzM
zphV_ab0+?8(gpFK;k%3^4?u9;jo%RyBEra3Kc7agex0mC2}Bg?+~)PTD?kNfhJ;Ma
z=$b)K4AF5iBxn|kVv7PB7f~AXaU7gyvv+!nc}{qPp?0HjUb*_;Z?ZMy9`q6dETeOa
zi4VN}m3R=e?rcFz>19Tj&+Nuded7HqW)Dk7^;u%>(2%StgoxA7PMzJ!nbJePQdzKt
zdmnY@mhSM5-a%N4Rbq8cjI~(OfVIgqP=}3TQq^9z5NKFf*4j*&Gh=-FA^Z-*j8D!C
z%{Lo59uO>C2r;Vk)!CK|Uj@l7Mlr~LzpJO`PSQvux6^z<t{96+ccf$ruegBDgcobA
z;+B}kh~0;0(@HfGts{{(r;JtN`MhBx;wS0N%3T^_RSU^RxaAM!Cj7xDdqPeyo9Ns*
zvZv>vySGH8u27Qrx&Jft8$5%v(P!Ak0Ry_8qWmlgkDgF{)o;f7k2jtc<vd#z+d^I)
z<GW3&o1^t%A=M3Bc9h}B{cPnSHk6DfsE-h5j=-%sK1`9GaOCFpkOjy^s=sUpW1Vup
z`*H}r8z|td(&5IYd_n2XQ+G>jUo_3L_6=$g4lnsK>d@mQRdvf&jgav-Q!Pt=-eM89
zKFBZ}dmwaLii|?TJdpM7dk5eJSjQl-Pt+88*V-oxP1aZXh(zu&-0e)<dUQ#i?<MWW
za<OhOBRPsmBjbMoG0s)U$_@?nJs!wD>83F8y+yHWhmz{3C+_tn&0G#*#*-Q^bv3i<
zuqv=xNZ{iU5j4evt`-+TXfbFvxkf+y;e)b2U48cxL+_O@kY0Le_+z-|RY}3^kvzKS
z+uxF+&Kg4uc*@A{lK+huz&YEp-P+ngBDV;Fh}uRqr18pOgJ&9h5<t);gLB=Kol$Zg
z^QZURyFVcbqOE*TG>*BRu1dqHWym{fv>-ZNGfzCotf5^^qH+<OavKqBfKbNqOZ<$q
z5s<x=^%(a_sQ7Ox`4dN4C#4Ww>U{R|@lldF{LY>4oZZ8?^_=nA))eECxKYJPJJo($
zW%BBD)p`~<d3V#mZCHvR=w3wv>H~4b5)0H0!aEaQx?=?vO`?IeqMy(X89&7a1|g|>
z`sY5z@pg%TOZr1G_)E0R-N%C$U{0l>EkO@A1L6cIx=-F!U?x^1!@@x9#jSOUU|sA0
zEnx&~fCcGDfn!REQ(Ll6T9i8CSJbx<<ji^U>s)J9DHxUM27-~jkQ_%otFE@=zwze$
z+luAtuj`J*U`~lRg0b`KvjST7zAu=L3-gz_k+HmkoCyu`rgdY~EEmSCKj&7``C4NR
zeYG4*7o@8fJ<i~o+w%Duw34!sn;_U={}1>Fo%+>mYQ1$=%e8hw#KkV<dzlWno0Kxq
z0CVYL6I#*b8uGbg04YJY%ivYTwlE{>FL=|7(ykrE(l-=<u25N|TYaQ3e&MBPK7lkO
z-D|9BLc#|igiS<$kw|*50~X`8EcedWf-JX4*QO&pc-_&9zH5zAJKK<CI1hM;2(T8M
zg{{!>yQA_L{<j~noN2x)CuNuvorL=IIX7d<NT|WYGzXZC0UV9bnHxMQ%xaPv+ahh{
zdhiE-o7}KBqcbmt54AnPR$fT?VP}fJUo2p;ai^r?Qe!WOvO+6OzTMu6=FEgPvHt>S
zA%U5?^7LZ~<+uQG5CJ1V?Sq<4dzJA4S@>~lka(;8%1*OC1VK!L5_y-W+bZzPyHqPh
z&&RwRgW02k*hKOI9B9MdvL`+lqL@u`2bspBX`PcEOLd2?EYY7;%hU3$iQ&sCzx0_i
zo(GgSukrBNz=wRNbGYt(dC@M6%I|pAU!L`FH1JK&a=(MkAI=?Yq8MPaw6gk-BQqJj
zqQ)i#XZhk~8K>PRuTCDqN+n`2?@5jt)m$&5W5ZM+k{lB5i;rRs0Fn;rC>ZkEd%EU8
zA%n=1w0|5%S0pSR&~@c>%X&(A&jOVJ=qUt6_znZr3^zXy2jt%BA=*0!6;!jla*Sq=
zyy$2TK4e+v+x_?5Z2P_`lkN-D@vnm!Jvg_W_`>mbZk?K3d-Lqm2a7j6;R~^O*z@kn
zX=M+E)1;@BF2~UO;!p;UM0~=muo(hE7t^y=6L5$v(I#j-Sco`ZZt%Tz)JZZg`qv8W
z&<VgnHBmv+wCFxGB&Rypx(x%;`6`~NCs=E$vL>|X^{v0Bfg-4S5muym>wiH~0B57Z
zz2TtaBtgDNE9_M<*@-xuCSIcEBKY4u7lz7!{bz6wDkai$oi#f?HJxPea`}lCciHvm
zdi}t%h7a%}s&NcrqUsHMR!uXMinX!7lc3}PqVr-XT?f3u)0s<#GAmTZH0sgH{KYD_
zOPgszBAZcdmI53~*9D9kwndpowmrK_s?gn5kO8dl5aGNeX+}_n`7pOZd9y`MT3oK~
zn%FSncyGrSFs@SV@uyc;b{?p8fLhV>RB8`LZ*Q+TS%#bC7ATKl65+@5Mxl4s+am%T
zzXXG&jWt_RDO$&nb5m6lI*a(k5Gge42SkC7<0omQ-7l7J6hWT6K4c+!GoDzV&o!o*
z$ce-%*#b6C$N;H$a;_Z?_o|ph_2OQxKWl!MS&V5fNyF(PasfppR>bIaR8B_@;`~)f
zk~kUTVc9xj-ycEZj$Rp});9M@%jWq|F#7K+6iE|?IXEWW*K5Ghj`%&&BMuTB3@pHQ
zm>VY;nI{t;*QALdi+v(m*wrz+zZy_-0)w9(r3t&LiY!<B=255Cng}yTt@c}Z?Hh=?
zNr88ker9}AfBfeq6~2LzFs0G1!3|=tZob)4pY*(@Rm@xYZDvlW_KmxdBeS*uu<Ww3
zVR1%<ZI^7-@8r%2Q6+zBxF=sgsA9EIUurUQpnGn;qa*&VCPB7DQ}$*!2N*PPYQH59
zv&8F^gdvI5aiu&tkSz{G>_Fj-McRq<ibIK_!#DjoMV<L#IcZT)uI(TM)RuQFob!7H
zu%Ia7YSBlF^ZSUONZWx3eswg5YVGsSCxdSKj09E-mfn7B$#PNY@)el;z+?@h$bFL}
z@}@$wZD=^3qr}$Dsi16J-Q_mvk8#YO@<bst?s^r<iq+OfLhpsA;Ui5#)DUxv`TTdq
zUJlxlEZa>$lp@7+hnj?Uix59xhDly6kuC8un5|PHb)$r5BlCB`{%dv#h=)0xKAq!N
zE*tvyIs$+`aq)Cmy(6D9y2#d%=*4l}ewtqV#f`CTd%e;Mn}ECjFLQwq$IJLW@cJCq
zFCRwRET;vPMa?o*iFfvQN7~Pw0sf5Q&+VFbX&9ztg(3&oTV9l?1Ko#-`h|yvNSRmH
zSDBf5)jY)~y|q4cKCQM6yWQhVZNq=m0)mGd)*j(HNh$5^|46`;4kN=`KQ)~XeL`Cm
zeU5Zcd{ZOe!!2O=&RK_J7WKk%<t{W>$xNcr*o?dh3we{&FAM2(pNF-qp4+<LRiH8g
zd5f6OR1?Vl%?kt6+2o1y5;w#Huc<9&D~VO+2u<U6OL>PpG^p@vbx0*0YVHd-3b&OA
zp`86l3Q!=Kr})uRlzF_oejxCXnzAKIuh^OAZCmQg55eRSL(FMQ8anT!;~zs8TD&b+
zm#lxup)L@9(4UPnn0^bX$%l5pmHV`GVOY1nmZPJ%>iw>_HvHf3qTOnsjOj!xlD)-f
zygD_AK~^32Vk!a7wT>aFARJ6K9ADmAy0XXX`_R^<9-9w;Nvwql0_G=IET1<mEQQJp
zAo0iVJk?*HadDZmMeIIWDHnWnR;T?nr2(S?jba}VdMDzLFHA+3pB0A|A<$y>f~-Yp
z-}P>11QX1dmXZ$t2d*CHp)t4KQ;am1!&I7<V}vn4`Ri|ox3i{p_IIfGlS-u^(gdQW
zN4q<-3STN2xKpyo1H7MC;X!^nN(JJeQy5NpaRd7Li#Rxpyhw|CkA75zU_G*>675CK
zx7x>K8ehA}3=<VHggc$359KMpi>F?u{opq+r5h#=M-f)dL(@LzWFnR6{GU0gh4MGd
zw`p>wmS}$#z9qu|qnTrx*aVU?Y(1;}GM1nA`DP(5kf5Y{&^?sZK(x8BW|+@SK0h86
zHX>Y<?+ktPi15hZeH?8+@8JFA<DZbN`y$>);pm%vf!h{!DaYaAHu6;>2$h@*H<-w8
zy8a3UO>F1-_bfU=_qccN`hx_0#B%LVndGXDZ09dBXXbF>$a5@1_~L7_>Z=#{Z(KvC
z-`0`f(}P3)73=tC?P$_9F(0CeN9ZWDKN1JNiWB%}sH708Gs)zaGr|DKv<q$_yo{9Q
zeq?I>+eCl2!C?sP?ImHD(;PcX%P5>^@qv>wnQWf<w+#y3a%mVP6PZgL$xvwJ)_fw=
z9VLQD?fuDgxb}4VhZMi|`xe;_>};xIhA}U}M2F(hmRzj5yHBG1WOp(epbf7?*Okdt
zMHNVV|HL(KPV}E?$ky#Eq-4)(+H1wG(rW)8yAkP1Y>ml;Cm1_k$F`Zu+^BOSwDOJr
zvU____#UylowZ^wj(d2)#|>&~s)fpXW<On}5ETO=o^8S{k_Z%==mJdFr16&5^OR8q
z2@j1RlW~{Q1m^<=Y{}-6e<P-*OV(scnE&d~yR4o{CfSW~yyU3tf8HS3_x|O%>X4cg
z&ogw>$QA18URQzcs(jpju*l74g*nz~rV@}Bb;X2ITKs!R^oto??eV~Tf(zQwwt()=
z1piUn5miQ`<f$7-`Kw*D{N<>3&QvE7f{$bL0skq_qVG~=@HV5Z5txjLt8+w$4~bgq
zxaa2q0>?=E8eh3i9s*qH$bE6cs#<Hc1JU<98yn1BCw=Kava}rPyVsNx9p-%mt4PC+
z>ZnbblgA}s(l#raRBlKjXK-r;P}%br=|9kN0m)MH)$Gy%)K82ve|=#SHP@ci-=5PH
zvQ`5rTy4PRMC(*mY~I=~o7);X3DCT!{lU&rBvt30m4%iM@YWm@+%ipamRfY@c<E$|
zy^WXlam8iH{EVGHCi}G&dKDqCV!mh0Xm^MGisdY7!s5~VeNebii&sUg9wgDxBdmn_
z;BsA9#}`AoH2=pqU^3I<NqNnM(QJ*YFbln5j}<RiI`XfTCmDY=W9Uz@Ne_y;^vnwR
z?<6N9tZn^&<h~0AvA#68O*6%{fM2y|lFv?QBP`_oxS@Aq#1yInbQ%^y*(tTsE90am
z`HvkW4?@r`vbt8b;I~QMD%w8}7a(#;_9s)_P6<7~18V}E-^Pgjh0<UEkVpjFu))PH
zNnmLDj8YA}N{lj)eDfQi*m|mluh$}GuycaNI5T#eJ^9o~Ll%E>sss?Z%^5PQ_!;M@
ziPF|2Jwhmv)Qg~te!&HWbA$4WPRTkCY4XA$q5DpxYBNRpNRkjGHMxh$jd3m~3)|R>
z%w@||3(EoD0j^MasQ#evBTQ8%%VI&iLkZ<7MHL{p@<hw}Sedn6s^G})a~`Djte>pd
z;)UtTs1XW)X!X3rTw(Anh@YKckS(+gs}%P<kvA#)5Zb2{&4aU9RgQe&q+0rr!Zh9{
zJ1EoU``|jg;w%HtNZcwCg4_*f2mrIDzE~>~)o^7q>xZtk9n8K_H15Yq$Zw;F@4&rq
zv6MaT@ybTb8)HR~-akP|3^tDnC1%Dfi3Q&<1VGWRQ(_lP;UEpD6eRjJN)}SOULU0#
zHr$DiZMk!(RKVhJ5eFA$R`inC04`_Ju`<a@m+LB=5VYO7=Ql2RJ2Y+S8@i(BKdnD8
zX#D5-bg<;Zx;(St8revlsejij1G2qNO=_}asI3TalE|Sx8%}J~BxcGJ#iYsNWvN$w
z`U`WsMq@Qkh>c{;-jC<SC||LrkSU+K3}tQP^iBtEJllA+$+8Lr?M`!*LHExZ?69)6
z|14h)?cX1hzbcAQRthL~^v<kQJv7xH&Q5yzVm5ML=|C=0YGtIbV*}`4o!K5abjkj)
zn4hV>SZj*|eO|10A*Tf89o0kgYd^K45>MI(GLd<}$a6E0O3q^-jqGbby209Vrd%UX
z=j=VwI@4zaNt*9fg_GVRPaaWodAJ>Ge%C!bWKki2q;yLL^AQf`64=Tka)7F9mAFe6
zF-yY_Vj`BqiUUCrb!^m5=Yfp7vS5}d8)G@e3E=iuv)aexfnX~%DI89JMF&H`hqtgh
zhn8JTi%N#BEVgp!DAh1*Y6yzfd52|h`XKw{04_Gm^`<zjI_{*Wm0S4w(MXouLLh`Y
zM#hTpojmX7@TSdPmBmcv^WWn6-1}oWjnJi&I$sztNV(R~5$jFIanA-|yQA~l^yRb*
z%rcz)S``3{sz>@<CvDWOa4d;|g*t2(5k|s91jN3Flz+Ep6Fo7sB&0%$^_!*e`soGf
zWpWRv3w{)^{|lPkDzrv?k`0B<aGLc!H-DL`CLqyFe;)&%(vOv4ZM->7`?Xa$Ra+-0
z#utSH?-f9j7$^%fP~Wy61Vy(BiWg{kHHl3NUVj?NI6FmeA3E)21)_LV$g%_3-3XVa
z<^`B$K-Pm?7WB#FSF-I_MRTPE_S?#hEwO56?7zKL%9J{by5W9P6d@t{EH)10iZPO?
z3b?+uz3C$=5Lt;73fqfis848SUGArfkbPv^o*zArI!qz_)E!~5b`}1O51|Fuf=g#J
zbXud&QH~OG=WDdHvI24k|7p>xEvBqPr>59&XPvi?jt`90Q(}%^JD{tWpZmVS>r8K2
zdyur$$nZBf@eQn&v*jBo1{c16ZfY$$H{MvN0bt$Qo$Dk0r=L(C|I(WXp3z(S$NZf)
z0Yk?T>>S*O`JIdVl@1kd3KvbF2xg>4Vo8*nw3X0BJI;)ptWNa;zb+*XL3h-Z73l|o
z0D>=J)x~?BXARTiDnaDidv*ytqkwhXeDxhCZmaKlKRp1Jnf}yOJRcd;Oab2h)X*4#
z(@2?ZmHZn$Oy0s6_N-SNn-<>geCFG{89Z^WjjJqgcy9VM6Whkqj^S%e8uCKSIj-K&
zq0*_54qsQxcJMI6s<a1jXp^7l)}u!On+l0+#^1=F#{~hs(^-_^bT&XTXc-2GH-)d1
zxc-zV;HpsAG^^4Q2ZOg_VAH>hMTlqef^jZagd+#M-Gy#9$OgISNXD=y*d^n6suWWi
z1flc9dAFrsghD-Uu+))XE|Ul^O%T|!4ELi0`HoExyG-nS$aWv3v03l^lY#Uh*pQvy
zAd>LW-Ukn7ubE%2FxW6i8Wdy`yQt^KegHoMQ(erlLHw>GZ$D%$Y^gOLP^XN+iB#Ee
zur?k`vFf9|!t7OK2`GkM9=r`eqj}pJ$#I;STELhWYC&<NVdK6MTfMR=e+S73&Ha`X
zKfr|*_c$ljc}-aa!djWB`oeAP85+LtD_f~n`1<X06?nQo#d5RFIGW$sb;k;J%tMdl
zNnQ|Hq5GOEZPE5FEH!PuN?XXpb<X&AcSz5y^_uE-<2VNQ4Q;FT#jm|1i*HgSMi;0d
zLCamgB#1zptrJerCh1<pL>I!~^ouL)!^>i&N`kSB9_Ef2ZSB?l1Q50y8<+(iam=^o
zd;G5hv*okU3W!*EW}~>B{wr9^8Ho8z+ud%@gNy<WEB&!((E>HbQoh6@8M*&S0Loa$
zyGws3S-<Mrdm=G!DP|0*0DjzoJRCb2L>5pL?LrrsVtNVqK2+EeOz=8kEUAqbmqbK{
zZ<_$g$=F{NM!Ow<&@4Dxy{l!41239PQ&PXW7~eLCc7;(JnUdAT`v%;$@)j8)Y;Ipj
zDZb+liH^fX^up+DuGtit<uc`Y->d~)Iq-`khm-y5f)9g)K^mvQ;=QuY3D&MqOPvV?
zH^{ZIq20{L@G!8CFcroW&~EK-^pv6L3lzl)8PfEia(q+s{x$l!u~Z$AEObmj!e6a0
zZ9&pKXS+qyAFJrY;U7roaWI~W(4CUx3NQHD3PeaBJ!ry^mysbo%ns(9gf-b?&ZHpJ
zC1>wXVr4e$c^(xT|AowLOjceK{5ieGT{*VM`<J!NACag{Cc8(60tq;<2?!?JoYJjY
zd);Oo1QD!Ew;azY{+?WhOTq?viwJ2v?|2NwvqiIv(|)7fvd3fgEmSc+rS_hFUcLP@
zOzZULqn9Ud{)%Q;ffI-HMJ;`1!q@tgd+eT?#{+)TVZqD(UdrLM!)O{v+=MjIHOHs`
zO8oa$&RPYo_jgg(Z+-iB#k2ek;uewM&$WJZs80vNZr{TEwmieBW?Zx%ZuE7F9%Or5
zv&hZuITk;>VNnd&IsGg<4LO;vzQ_W9<889Nb5JP`<uOrDAi(>(O0qcdObWQ)8)inG
zhyInS-u_`~GUVR=o8%7iX0j5cb*_*@M6(@(H|(Qt455Udi}R~x_)w9jr@uc?_)I3!
z;*aO)`rXoQ5w@d7%<kl0+tB<$Stzh>|0pdyqZku@i}ITmAKy9jtsFarqhqZ)dh&gS
ztg_bCX(;%NwYGm}NJnCWhucg!f^~I9M-`w2i0!JP+VXd^;Mn`#s|h{}Y>ght_bD-V
z3S9!FmI4$vwC56nA)Ye4y0IHDpjNvwRJ~u6lUlE2)oCdv%+FhU@JpBfcm3!`fzi<K
z1y1lQ-J71RH|{08)&y!I(!0aP@Y|Xs>Y3aa;~aM_S2Eap$?b|?<1Z>%KiKbSgxrrp
zbcG^?J1e)<9DfE6KWMqhjjr01$nhf#Z6@dr5c_~T3d0A?p>!kgX}U9%pwWnVX4jbp
zdzh_vBM99r9^E@s2@EVm_t>9L2{<_=my*K^17@olY##xb+Lll+FHkBr-`^%D=L+iR
zkRh@9>PR*yV`>fllgu<fD%26VK)ATRYt#N@{k0!*-_P^WWDJC6-O({sxXqIJ^OoIT
zmnR6D>LrVySag@S0Wu{&@l=(}Z8Xuue_0!(E^gQ(ohIRTOn%s+eD8L*4Z!O9C~^4C
z5>e4AP)V=y|DmTqey1k!LdeytBxAoyUT-qn%8>OV*NbQE@Ev|Aqa!A1+hFDAuj(Df
zoDoJgqtKPm5JFm2aVO#n{=$-d5}%~%Lh95(Sci<0nhvEVtGA1LZ&mzSHg4qZO^K)^
zH}cKtBlq|4&%f~6w7gwYqE6HM<@>fnmh%;5MPuwy**tb#4|R4X+%5K4s(#J^@l%Fu
zN2qBLRR=M{!CGE|e5dVMd>~3w|Fdq%qx7*LtJ#N$24TwJg&4izmtYyi1fpLZNCGD1
z*UW;At(IO})GP=)Yd^BkbB|zwfEbF%eARB`o?awt47`O5QK|rks5TGx<}?m9qn!%A
z{(483R3j-V$8g}`@P|D&v*zYm_<t{dJc~x%xNuL=)kGh8U$)d6Q3MnCg200U65=hj
z)B+s??lhMnTp937@t4h5q1b+p*V7X}iv-93_A95k<Rky2pqo2m2n1%uLgtM?h=GX;
z`07zJHdIkF8HyZ4Efe?C`q63fQ&xw$TU?){qyf2%zBvV<)~M>fKI{C-*LL_>5SvAX
z{Vh82@45T6P7*a(f>x{5Irg)|l)ZjD5;4yuULe$iQY9*x?mrYz@4xy<Y9vz_gsvpM
z^0>{qfa;+UzBm$DSFbk-zfKioD<UX}^<{*FDbE$RnB2?!>bzw}l{hXtXyFWa=#oPz
zAHKqn15N)UMGkh*+g1=ccGK5-2d{Y_>Ux3MxvQ_DXhj8^>j?E))N}r^V%XO>yECS6
zMzoX_LuLm$5=oM!A+~AZe@7j5r6H%*{m)}RMnhAI3WG|4b-GXK+yKWD{I;n#pqAkt
zo8&qKw$LqX57BRP!<qjM#LWa0DqGb3#!+SF!g_~_mM*aVjn<qtZ?4mzEE)^#F>th@
zx<|0cIWHiZ7w#uv`14udu1!_1bfAPygN|J|rf~SOIdy(8mCUv!pl`;j#N(N~cI4W(
z2^`>;mNc4i)*7khI7T@{9dD{mg&XMcue>3&{$73bIrDd~ZfY>=*rb4Habk^0nSRnP
z4Fc#u+7!~V)uk_*Pw`74XCuxsp0^X%{e_OQQNd7log7+X_&*^5k?y(#LtnR&kEElA
zPb8X4xCnng8ovNEx68!Rki`9aUJ8o&ZRK_++;@6NCBnMU{aMw1ilkOv1W1Vk@>1{`
zag>MidQ6?g)LQH+QeE6EFoOsb%{qfKY(>#zdV5S7@)8MPAQ_pgx|@a~N+sWMcLgo-
zAL&G(N(@3&()V_O1*Yc%y(VOyz?w?XH5nu9FoL~9gF-MhxDNm=X!NgU5T2o=5?Z?S
zqR*i`U@D>tM6l(%VmnE$23g7<y)#x8fV9Lmd?2CPOP_*V8B`)ZV~{1RBTO}(kJ7!t
zqWk9@AA#HWa2GFl3-+s8%M|@T07^i$zdICyH57taZ_<w`$2I>~?gW(Oi?Z)<v@y7f
zm@00c$VSHZpnNSAsFLw4b9SdSVD2Y+to{t9KuV;jte7JYa7M8dXRWiI;L0ZQMe1pP
z&UBkH&GM1fNtl{qz!T)-?K5BipIxk>%E)HNyjaQIZ8P!iwj>5z7(&@-XgM4)oO&E`
zwH9229)J6Jzj50%l{NXIlB?%K%AF>dJwoONcYDszPWP1;qY#X5G)KzUl3(1@j|$WH
zje-e3{4u=ol}Kdu7mf;cyLvDg*SW?(>s^X#juJPjYL$&s5vgh+vU5^LQ(|n%64z{K
zzH%)aawO$R<vXA5T*~$+(05~h-187^<eLStXey>`z(Ud<DGoBANPM>HB0FVgoMVX-
zSVCf!BHOo*y;X8L0;xy^Zbm1rKQ)l4ezBd+_pss>ONiGLR<VW87S6S{nlABn&I{I;
zK93*)qIQo5JAm8gd=X<_N3iX2sOl+k@BDo0_j(j1YylbGYz}@eN{gow%!oWnIz9-W
zzKH`^M%d8O=b*=n)w8Q>icXMxRdw;}>*ZP3pa--5lLiH&F8K(-%}2;`1M>OK47uJB
zHlvoD%X4c#UBMqzhx}m2gfx$Th?dC&En;p;R<L_VR@%Tb5i7C;q24k(q0A$$#(FO1
z|5i4Dy~)nb^p;KvI4Fa$CIY9sGm1V=jjZS#u8AgOe+EG433X`2+%il}l~mg;Z#Q?F
zEcwX&E5_(H(1kNJ8e3hri_4=<z@?-XFuMLftt+Z|4XkS&sIY95_<%b<Qx}AZW$qO3
z<<Tu`{<>olilYF*P?Zw=|4Y8rro(^R1ZY_(=%4v019TMbZr3XRU@b9mJG;DMuJGHQ
z6btFjIpS2+AVQ;8s>NHDM)VY#3l`=^s{Bb+Yz*RcbW*=rh}Ms^w-KU}G`&QGj$38g
z*jKB<vg0h?jq&4|Egg5Fidpinlv@$#<eYdyb^IEGvPl;XK(=kQ>K?wOl5ZDDeWq5L
zX3j~2uG3+8($nK@{qrS3iNnEi7?$WyhY8e>jD*BVNtH*z6)$xu-W&~?8dMO)eadJT
z_5}#l?yGi#-NqcFo=OjI@3P~IVs;KKFyf0PUk^&6t_TRq0L81pJ^%Hc?TV(z0g8%Q
zQhw0*n`D`3^K%7W2hg1Dl6zT3fHOpC0+Y5&1^uyiwOi4nLm;L{Kb0s!2krZMJ>kpD
zPanYz`UyVLqG%!lQBr04adw8-t1xD0YPDfZ;k9-101QzH1zcI`J8z=-(o&R0W{RV>
zNJSw!S0zp}l~Yq9Q*-(-+3|9RFYQoXW=)W0G_k(BzRe=W@jCwr#01}4<$u1@rGyhH
z0?<nKEab@Cp%}G*LNiE*!tfL}jG>yTWt@ZHwqCF$;&YLGzPr!rcAp?y+bp}0moQb;
z-Zdhwjln|+eiBw$L&Am^z1DHCll6BkF+i4BA$B-)-P*Q_7S`0iOY2=rneSVxI@#*6
z0PeUa>8r3F(aO;L(>Pe$Z?2c<O^RP!>IFwSjU8t<$>aTHIP{FwYzJK-lI?$kVk3K@
z{d|`fQ;ze_rg7xhqs*DUEJZ;0%b`d~<&*)2$pEWQs^JtTb;)Tma<JxV=Tc=LfuKbd
z)BA#(G~xq#x@#E1Y7~op(Jnt&&_Cm#xGK*EP9Fs%X=2RtT$O3;SL?}ajxF|wcB4f#
z^9=i?k8Vl(VwX1G^{oPh*j;IArg{6Uxa_s)GP*j@n19#CYKJwj7P#R>nzE%^dJyA*
zzBqtUwqhMFa=exs(Asi2bAs5e$fE4xa48M`Ri}r!(z&TR-eci*<nH-v!k|2WJE3zK
zRhLm#F8zwm=85)zkn+$;R5?uMIQHd?ylPW|ZTOIfqAnlfu^GhuBAfr8ysuabcFtes
zMn-!{_pL;zz-cKL(<L=~UVPQ9x~KCHPSJ$qk8{!M(j7MJod+A};Sa8tLg|tW5VZY~
zzV^?U^J?I7Kp{~Y04fKm5A4klSE!n@pJbE{h+YDTuaXto!I-3aIb|M~Q8`F3hvTaX
zzuQ66>)YYmMw>ACvga5w_?95(R`r(t7e(y<-Zx}H(Xb*Np=sU1{h+SwQv>_U#gT2a
zuZT!mJ#VInI51{+ihVoql*jjlIAhEFk+`s|iA$3w9wzvbbje_2yBQHUfY|pO1I?6r
z7S)kXaCmY6K5ceGpbWlP7rH948v&2#kVPk`O^)EMinKiq2c5K2CJD+&7mHIZn!tRt
z8|ntc7TpyKN^nnh<5{~Me9g*Co5i-G9>=$Y4wF$fuaY)~S?WS-2E1tYNK`yD@s$>u
zj=SSUE}fA5i8<FP`K9Z%i+P6wO;zv#e}(9*8X67t1CwN_4RK~qP3j^IA(frbPD({K
zH50>-On}jgS)BgsQ|9({$3#Vn$y+#lN3*(~PecB760O*<pHESzpv^rmw2xU^y4L{<
zdHq=8AnMP0(cyAX{AUO2A^uQ;nD|!qu(WXfG2Q`{Y{f{R%@vQx8E(^u);!J>(FZAG
z3+d3&kCKEF;qo2$j#DN8mox>%mP5XOHy`-53CB~=t6DEC6aXtGuM`Fiob|=;He1Iq
zk+W7B-XBE&I{z5f6`F&Ms@KkVNH^Ze3Lgxu3tYo~-GTLiMR1=$BUl#w(0h~A_4c@i
z3^FbYO#m<8ESc7ze>HC`clyN{?J9=RL2zIqix_rposX^^dM2Q{0F#_?xeU&92OHW)
z&o01Ew`OWgm0D?gb~zZEaTE@?1QEv~nOkfbHFmc=vkf-uS(kcjLL&7GJ9|%x*v<T>
zyo;14J8R36ZwWVMUjnQfpH!_B3}G;#DFHAu^nRs#7w+^beu&t2yFo7NYv&WRJqPR?
z_-<t>k|@0yOJ-Pz19|nsEydc;^yhP?d>rR`^)gV5<GNs=91UN>QD75bVa`(rtm*X7
zlAoG}4a^XKa#^*W0{jRE_yF*~&DIY28j`Jp`gleGy3V+<M<`s1^fUJ?dC=J+0G>Mj
z7>D2r#siy~fkv5#OihBZDrF-B)sV(4RUs@#rXTd<2U|ODdiy4lg?9f0zX9LybC)oL
zvugNUc}wy$>hcZ-_f-U3H3kv&%cdi8z}k!;l;A4RQ4jDuXCOR||M@IaXkSzBemU`Y
zz4nJvu3|%-(ZAM)M*>Qnrk$iP=h$$Rk1DzYXAgP`Zjk}lli{o*tBN?@1b8qV?LC5C
z+?)#~mquykx&5|)o{sWWq@)h0AdpNsPG*-CjHFUuR5nB^kg6kdXxIpI9t+ZvWw2FT
z02#V)>yTpdV&5`+&P>Q%gH<Dk4qmzX39-iZ&2$9AW`vAh|5P*Xh{ww1>u1Dq2P)XY
zLyC2GQx~AivJG~!1`l%6H=*T`d=!NvE?3ZXv@bD5cL66M%zQb84&kgs9ZFHbWk`%z
zv`1CH9^HL9kP*nz%G7*KdZ^3J_HBAdaPe@8;G;1)6)#*{h*zE*Ph}7Fw*Bdm%KE~o
zkK~(1NNI3=@b`6aXYfOrQ6LfYOxEs*FxqF%BysV<7@Xr$ynUZ?%!*ZQHsfv@RaL5l
zHt1&A1{wFnrs#`EafgQa?&>&2;YBfTGd&njaj_9mk&+2XgEj0rKnSwlf{P#OLrQxa
zCPk8b&a=_(S2WF{ij~*DUi^SzT&gNpa1JZJJQBnHT!6A3Z>etDc(5DLoeT!EHzIyQ
zrsSc;t`qNG8P)P)Z?y}%|F`+$va;JMfvrJNN;1sg7P7KBBm3%oyL`+_(oNIg_ltYB
zbLt*2tHwotSv8H`KLK9d&~P<@Pi{I{qmrd?t5T=Adf*?ZLs0RYE%}d|M0f_&9`CSX
zm=`&y<&sE>8B*zC;@^)mS#Rw~6qJ`t46cNL5pjSt!tO3gbs+c7*w=Z{lWDN{1*_i6
zrCaZ{#Q7by7raUfyhn4WZg%r)YarL9DS(zoC-b>AUkqu(?{vMo3KM<W3oNy8eoj-(
zM%C(-MXQy68GjbnNHfRR-|8?cA3^H>4>*H>lyGkBHSenfQIH_g@hJkg2O2wMi$<*&
ziZ+&<Z#%icMLs86ZT^u^!E33y90h#3=0mCxq9ZF;c0Yz-^ZR7CzVtt7K~`F8aPeRf
znAfDlI}o3a1<rEH1o{)GOGd&etA1S7AGq9v7SAbZYTD|IqDd^k6c>37@uPwdk;;R;
z*D}eo;B!s!I5mee9CipabMcc=VmVNscRRZdML7S=R|45SOAkXTR?&5DhWZ*f?gTSh
z_4G5PDz^S~ql1$Ze$fc3^f$PuoSBNbRlUX0mPw>&t#s14oqw2I@VkG`bPA4hJ|itX
zgl;*#+Q@JslRHFfwS!$HMW+Hs(dDs!HwBQ};|-<Lxy^*Wx^$zq*)3U$q)(l>ohw<H
zmord&HU^Tn3~!ToM}!Cfd&x9l7Yr>X?jG!a_RtS84+x>oWv7G<t;+M&wvO1_H7QVz
zU$J!u2j&?GN8iW|vPP4Y)_mGYaC*&n#C^qI?dn!h_`Xr`7G_Eb$vWAIL_|wm=L<yi
zE+e2ItwIcgw42;ySDRzDUjl()gfZaJ<)>}uoj0X=P7^Sbp&tYXz>}$zcred8nonK&
z!=x0{v{qgov6SF~D~zjMe`#+*zdO_KxBe8^adR}E^2jquuJF!g6X#Q$Q~Q`<!hnP%
zw0F!s&e)kDotJL*NnC29i!feZiQdKPPuK;s$cphT8mji4q_*S$@g=VCL1dJ9w#nK*
zT4>tMh050&eXJdAK(<99C=8Cdh%W5H`~O4{GcBo<fy4%F|MI1D?gcH2+0_Y*AY@XO
z-zP`YSH+?UD1hXUprz<y;%E@e*CwQY$g=XxkYi=1)t&xcH?ok&cO3vBIN0WjsrSDU
z2?^*qITAXw=~AXm4=Gs8FS;;HqQrp=2jnaMVS=f5BlWgZBG^b&V9A8LqN!^unCx-%
zWm7fUlUr6jN6M(7JPgqt)wpI_RnWZ)*A&R!GKMi5QK2aA=*`UdSje4IM4UzIr<ye;
z1&tj&WE-tMo%qGpdWPR(1GHc*B6>%-$i)bPF4|7Ys{B&fEbm~1<A%Q^ewFF-hABKN
zXr5GJ3%b)%D*Oj@fzWntzLaUE$4UZLiZuhIh4LLxDQtO*<hJ}Ku$|AJkl4PLoFC<9
z?0myX{^~K>ZLF<<;zd1(8&c`*%~GDsHYEcTj^LS=yffB$Hm(e+DG=-@*xDJ8gvEes
zJ_MMQ0rrLIbOcCc4!%x+mSVgFpvKx$;yr_Ru!+XFmLt)Zbj4QZyr|8k*|8TDJITO=
zj%EhnblA)N()WWdwq<Fp!{ttpyeWFyOnZBNbPkrUq3tD7sZCuYqjilo8xW??@C2iF
z13pb{k}#aWRjjlU(0fBhD=8}l)L$WoJ#p78kuE8oo>UH^{DqPD4cZPK8uE`IKk8F_
zR5H~fHK%TiS^4}|zZM%j%p_oHw?jg`aIa=oIgRW$fNOZk_M*&m`Ez%bQrDLvy|qh_
zZ2NX<zUCfk^nyk&5#A6+6vkoeL8SaW{)#n|o~@=4tAXFM!rM=%Zf7?5C|-^SixRrk
zZ{G=C9;+WP@jv0!TBSZd1gG{s{#6>qG8GZxMNygYka7ifJf;tf&8(E)iwt%M5}}`z
zup|$srIPqpDI4i*1XNf+Q|b~sv5+W+rz1>x=Chbw-SwKCL03B&siOua0job)$mLf}
zQ0MKB`UB%b_j~wX4>$wF6SlTo4+}4^KrPJgX_>wKWLmS|Pv(=RTt+|}X&hfxE`jwY
z6dFxQkD~Hrg5r-B>Q8dsNJR?a_Z0GK$)PV_G2^}UH8KGB#oeP&M+Z;>xZpVq>Zx0>
ze5g?s1f&2Iz*=GYYjU~l=rcro24^XFp=WX;cAP2M^w!l?$Qz~Xa`6OA7Ni9o8QXf>
zHouI)q9&9`(uQEQ+E9m>YNmcKV$OTDgm=sY#xbWUEN|qtO<$1uH)Zv@OjVMZz`?#e
zA%sRtApZxYLBe!}XuW@LbZc4%f}sr}vSbL=jYid<YZA?6q0gR9XXGl*&ff8tmsy_g
z;G9V9bJkrI=g@Ht*)09d2fRHt2MS?2rM2^_cj054YjK6tb=N12%80n=5(WWJiLUp%
zb}-!3C;p69a#CgcgLY(8^l!>9x6>lC?>U~of}Hd~zZpNP4Ce8M6Bb;C2vIUwiiJ>j
z=F3Xg9B$433z>Z~o|Z##NU8=mT5n`1N7u2p!kJL!<3w4{^TIy1YkOV=SiBP6hpgpV
z1rY9vpgST>xX)gzN#*b~mZz}9=b#xJ0MP+*ARDfgUX%*wyj-RPTru1#pS_JS*GTd1
zcS>i7<Ef&lY#({G2RE}vUtERd3QnP!l+^D>vYY>3H~-p6&3)z0gT61qvE8}Nd1~*h
z_1DWjmxGk<$A#2SyFHe4T_#_et;P#JTa1YA6;sIyA<#mBy|JKa{e=U2wu8F0jciB9
z5UyT$bH5p&(@!6bbDU=d@mow619kp@cj|qoraD2rB3h)Lv%0vo+9;&8&iWMR*Ag}O
zSIVlbVR60oQb5!JMj&;tagMNrNky;voIed7HKRb?8J*e$|NPXXq5q<ZC<S?hbGqBd
zNrZ2IvhRB8OCUk~3<tP5(ERKRv_kB?_!g&-eLS$_B?A;w1Yr?LKid&m{6Z?|wB`7i
zi3IaXg!^V$uJKrEN?Jlq(s!-Z?`!5<1h4OkD=>mhD)SZT<K5&E>y=@!$?{k2-au(Y
ze`8?TiniW4cRYCklA2$8OkS2Fz$P(zL$koX(RjiN-8MK9%FT=HWX?pyA$+GuH@<{=
z1#hbic2yMBD0T-&(0T5y8zRPVH2gez=E`Y1`O}D&<yMO#bMx-`W8^QXts4b*{eqR(
zDqR!%)ym=4c2!^{qnBe);cZ)E`+}Xxm4vceAk>*U$Xh{^91$<N?lo|_(gT<QQCbYe
z${RcRaXfU{@(nmO^B~dOfey%mdVdGVqDN!@5?7;sNo_Cg6DM7^NL1m{jGaZKNLWxW
zhZ1?wW^6tDovX~GYoowDESt{^^ykz1DfK(|V8RXpzR~3lBm2I9`q)Ic*q!toYMi&F
z+=1MfobR1uQLPMGeZIa|>?P=*lBSERR6Az4F7W$zFKsZ}V-ul0pQ612)S#r@F2~!-
zix&(Dmua@07WjB1Pxe2}PVK~8;v~Q;BqS~+3XX_unl2YqYnk3;-(u}eiFK`yw90Mw
zWg|_TO`x;Ydc7a$%IpJxza30tB=chMo<x;HsuwMh6C>o%1qMlrh2lF8@Td5SAoZ%I
zSG<}-(?cxy{P|>+w>I#e&UGZr%|4S2nN1r;9eM5p8hpvHsm*s6moTSy7F0dbeyDdb
z$vq|xWCGWraU#7PV&P|=3X(k3yzje0Z(KY->by4w!YM<80JoOpdtx*TFHHv&kiKz$
z&-ACu0L)55uQ(?+)p1F?el8Yl;dU^p>$qbvr^xY_S7B50Tq}ap!fJN=Zhr+nwRM){
zZ;Yq{TZSsPkPz|F9s_}(fozl=6sJ-8`*$m)V@SorM;7PRC5$q#^uDtGggV>BZQRNl
z6l+J2Ct#g>I~%rz<?J~_RhDPpX>*-%p>vlV=skwc0C^mrrD(KA8hk*Y_1S#?OFyOy
z=M-Jc4{S0R8B|f+TR8)q+OzumuGBa{b;~lM+j`4F9g{HTJ@^|6M&hF$W`Frd7Gd=S
z=a!B|CF>I)IN`CTWsljC)>D~0n=CS}bm`K_tr;1<G_VX#(Y<=B%<~{8RyIaUclv#a
zN~KhBy>SSd9RVmd6>+%xkMA!<zv%?RZl^5Vfl{g3dbD`<pMXf~r`$y1BsFH`Rhl|~
z?x)`khB0sog|}_oj?Im2#4qrRm^z8vy&(3J{$<y1Uibati0*eg-uG!K!QShTE2$R~
z0;Sl+bgmIZu=<^&rA%*p;K41<>KJ8?P+UgDfS+qDrUW?X0}wd1j>+-aG~hUUTvd}i
zs`_^WzTo*pkIN|uCyG5*5u#*puOEFoLha)N>8b*QDZ-Yg;{O7$2HCysxeI3Jern;r
z#pc96_o|5QxN-mTLL!Uj3wPnAl<aVb#X^{wR4#u3@E?-^9M`xL;L%plu-UMQW<TNj
zZP|-&c!iKs2-_~x<GqN3ig%|%uW0qBe_U|<Xh*=yM7$1wfO||QwZG2z-w=Q9x_-m6
z#@b9nuYP9*;!qNMjPZ7Iy<Xf~F_RxnAgnJSnbp^eBKlVOH2$X1ZQuH+4HCHb(fh#K
zMCro3msdQgn!93)IDH<S<0^@kR9=G22OGE+oJGU<FSssEM#GQ+2>rA*QMW!F_pOz>
z8-v;023Y<UG~tpeUVx$hrDReV?mad~UN0gJ16tlEu^}k|s@`oUuDm7w>A4a|D^_EV
zHttks1F}M`IyLm}D^z`VOj~tGhZ+wluKf+bW>=GXO|PohyF12L4~r;%wj;KcNr@+g
z17f4k`1hp6w-k^FbXUs~990K~l;xX>yC@Ry@XooGEt@la;pw?p;xiGVitz5rrt!By
zUcIRMfh~67?RtCtl6LCBZ@XRO8kU>UALt~+V_HF=W%+z9c^uC(L(h<kE<JSPtLnU~
z;ImL$I`v9>`<d9XEp2{@MDV6f#4B`bsof_f5l=ZdcxcL47k6w=$bhImt|k&mQXP#z
zcLx%|{b#(32}@pSOFB(@M~<YwnqLq6wot(GD-e;XjBf#E{r`4<tvla`AcKD>))&!+
z-{L$7b_9nDJ`fQNt=w?18Gh_Ak%Qgb2efH@chlKTr4}re47}l<r+Xm>d>EBn62j?-
zaV2zvXaG8c*CBk?3GgFdXhn?_A$nTPz9=oNALGgW_w3$2Z;4l*2}zfIROMgCH`#zF
ziC$qacYCP{5G!8-HAUd#pI+{sGIN*Rn=X@V7dX_5cKZVvMp26|7ns@XE5iKFrIELF
zJ{uqTbJXgvyzm{8kN^$3Hwpzu<dl<?^-NnX`?9g~K->|CO{oD#NEbb9VxgszgF=47
z7*BCQH$nkRaX?)^4t$lXHiC7f*nY{?fX0YwO+(;X2P-_FLK$>MMveS}z|cjT4PgSH
zODLB-JMMSNd+WU`k?9TN3F?+fX->h%jga3U<VTwAD9VF8U_nnqGc!Q-<URhaFW*Qs
zIsZdOsvQEz=>%E$RW#P;)MeavFk5+uZ9=woed+U<!|<C3%hu>+g!E#f6H-ze;Dfbl
zYqqBPmaS!;P_y&HVvScU*|>$sTdp{up(L^yb=)=r)Ma7cg1wdU&-6ikX(Zhj0n_9o
zAy|(~n+$TjVAeOQ!$l?Y+UuKdQXv9OdEnE@>#c3M1<N1kFi==dH=%G`mLYZ)wLvA0
zflcR};`O54Y2|4{af+$szKUPSCy=Fxw#<B}ETN(PGT$@ctk@I_2r$!BBKAq=BjF;;
zZ2?4mdBWSz)xDA8HeqDs4xf)Db`rJBS%(-SzVuF<*fQODJf0mF#^tC;t<ou=e=m$6
zVrKVNxThwlM%j<rUekF&FCNFSOOy=D`_k9pS)c0fEdhX>2iJ8ZG*(h_65}lnC_B09
z4W-O8FEn24eUZ=2wjQAx3+s!4)eE4p;GL7Ya@502ZuaKr_+_&rBkI3!On3I%;-Iqv
z(D%TC;0k1_)qhI!{bPcRs^O6M6D<sCo!(J7zjy$O)XCyFZ;dul4?qU%73Z49sUCA+
zxW_Vah``r2D)M=ibTyBgo{pc}Zx^Za7iy6g#~>d~1a0F#6c`0*9}hJ>0L%UzYqzK&
zP+~hJhSoo&URb-I4>(~55%5eUHbZQ7q$ruG+fZLiHbVuZ$Af$lIRz0x8FIB16$lAs
zx&_cM{e_{}!FyNSVeHq@p8^{~1{>8-$t3Z7S!VKT-Mf-pV9*!qsX5WYL;2p|zG<DV
zEG>UiCActtt!DlkvR1>W-(Zw+22(~v7dh;OTfn7F8qV~)A3En{JP5~$Q@Y}~WlE>q
z)j)@bX!IwLCZ(#m$rLv}8;eAxItdV@Gf%=1EgjbxgQ~K!?8d##8)w3q5LV7~*<r7B
zuU%8!u6`>k6#xK3>NwaS3vtx!(E?fhjQjE{oESHhaMQ*MDvOOc3(@av*>+}kD4Kyg
zaHU8fKa5DGU$0a>!f1W0FcpMx7LG$?kfUc{8(Vs(FWzk(X-iYwf2E5y0U+Bz3*kJN
zm$hY=0&B86X_vSg?LxkPfD7Yu-=zo+xa8q(<W(DguOnY+@~5;P4-y(FS;9gZDHkx9
zX;L;3n}wWdyiX^qIc0i9$IBkXyQ8GG3w`DoqyJVAj&#ctxoIbq{ji;cK(eDLWaLgq
z*Aqqr%e)|-Tk|o|rVQXH(+v8dG#6GMoo6W9Ztc+y35IKFfOL6k&mlU-+>BvImhe7+
z^^Uw}Ks@&5D*7TOkHd((;%1&Vg0{+w^G7m<%3KI^94UkB`^`45L50RsJd`TmhEEC3
zB+6G_hWDUs{3|Cvvx!Vj;4TCfs$RHeUeJk($4_w<XlHh1GzcYN4x;kJdU~Uda50oZ
z03%+gFo}m!F_h^zUb;iyy~!tj7Dno^({7Oe*uS;iKZ*Q<0H4tI@DnoTSmzwlJbtYz
zGv%<Re;;^YcdK=Q5eSAN9dn<WE<zafZpGbHuen}nDjgG1yP(o$Pg!W;!nYNWh39U*
zpMCk7MO7<9-2ml=TTe3q=95k9G>s?Ue$2MND9XxCa<)`o#@=O)o>jdR?>Sz`9pi9}
zp6$6z7ojPVWZR>{+JU9m(6gstz)O-6YH&!$I4RvqJH3mis(0*7+lAd|m|rx&LHE@6
zXf%0R|6l4zlE@Q|>4kh|4DLv3)!fj`gF-(*G#e9x1t?vSG|)bAQ^e}f)YoYSOPLz}
zUo%0xdJB{;T~_$xEC=Xwu^YO={lQs;J7!_9O#2K2Vfuwv|H;2jR04PC8f#5r1l_ks
z?C%zTGY2*n(PZ0MPA#c|1Tai}_}Ni}h(c5FWuFY7s!3^t_aWD!09q*ey3YclD%W3h
z#PoxFkxtgFfVTqo34?$L9I3-5n;=bY6hm(mZszJ`Cg8@!_rPxJF29A!>US2tcj4vg
za#@6~Y&ro-Lif%z^Mwd~0Zq-Ah1I>Fzo3k%H4~eNNf4jc!oz^8BS}<&&TJ&H)Y+pW
z@=4sFGzAa5d*UkUPk8x-NE>l|d%6L?k?a$7F|5FRf6Ji|#`Nw94lBVk&<z33jx(G!
zNqEnA?7p9zQW_vm+i7K8$~za103KSFPG^uhCRvK&&lUPx$IWDhCoYAvlD#EzBFSg8
zI)Q*ETh8S@jd=%D2g|_=tPkexR)RE;7`XV@w0)McqN+=uYT90kLpJSQ2lg>I{kbhz
z56I+B!Bm4yj`lEa{xkDNrSVByM2JICrff)*AsT1$Zpd*<rMFIX+0T+{S1rtgM{^wg
zoC;jqL2*TknmQZRul(icGX!+Oof&`Lem*1MDX51Jl}H3T*p%kv%vRUdswd85L^AA7
z^8=K}YjQuMX@YLhIF#Q{0tu8QW{L!bUqBlB(8*aWveeJ}4!395&SwPxo9Z92<$YUz
zyk{bmJ^Sl?r-jU}>D3uSsY>!o$m+gxR>`NemHryvph<=9C6eiOTzBoZ=M}tTba=wp
zc_cR=Y$kVlZsHj7JSQP>-WsOLKtZsoC}~>T)L+nJ)#&HXsTzoh-Hhkel;u($pKHnh
zRr9Gw7>W{kl0wK-SQZD>4bPah&2PBgKvt)hX9j8FwE>KvKX+n1w!0MGQ>oizsDxu8
zvA>JOBCJ1qyNw}}DQ=N{M}oFiFA$#!^ecORueYu8$;K$4zhr&LWb_F*7<eL@cbXIS
z53V&K^2zQbV<nG4f^ARB@>w-ss-H#dh7|u*s#;MpX#pVC^$E*7zM(8!*CqEZqX<%X
zpSStZO$<3b3i6fuQfahXzE1(8?|7JcD--Y_cr+ZN;tntu=6FOO-)c%{N(n_tyt=TI
zej@XwjR<QDCrWnH*{A5pb)!<vh<{c$Igv8Ua?xG70cxz;egoxb*DkRYh>CdWB!kOb
znW5cW_!p?NgIa{Z=3Dg)q!CfN;ZG*8vWOjqa15+uGZJvZ_U<B#YY_;rx<Gru-lPbI
zriDR}oIYFKM);7$w}dv!sEDmh#Wkl1+qy+C_Ylw0?K<~mPjCzmbI5mg&jIEaK0xpS
zIJJGyaiwjXcq3YOSR|}UDA-OiQHQY90FnTMf4z5dIE4e${MEIFB0<0C09I~nE*({~
zY`|)rpR94b<3kwZHj}u1x+9(R?7{ovrK=P;9j$ykWd{OgGBeLlbPePIhCm`lyx07f
zPa3}=-fZx$8FM+`OysHOeBoq2P*o$@acT)LmUu2Xqo9L-J=r4{9Mj0guu;VMUv@xT
zS>T{5>cw}AGQa-;a*Bbc(F6Z8_#H*igG=*AE?0;2Ii4PIC{37&|6Kk-ocQn&t%C(s
zxLKqzfkqfG8jYLc<)~O(j0cEj3Az{QeQO5v$RYEfJv3pg?(jmQI750}i|Br332`cZ
zyQ1qc94tVpQmkT?L>=T)SQr4-e7DC#e|f9j5gMqxb8wMkjjK59c)IZA@KW(zT*Hyf
zmoa#`%})Q5P9A#h4h+n}pfqAw@a0$n({j+y`hE>{U)fbmS9Cx5dDb?@p%Y#-cI3@B
zt*MOWNsvw+J+z9Jj;;V!hnE6Uz~h@Fo5K|d)B5`o(rwo39hCy#onhzzs{Wzr^>WrM
z^PLA3b%RHdX}H0QIz6~7AcnqyU}qbxYR=$_n7`%p6zzfkRb6T7DhW0`h6m2Gjd~)u
z1=Cj>E^D2Uvmk&EqSR+Q7(fu9YE>s|R8Hm3FhWTgC$2Zl5Zs(Wb(ma@WUFT3^y}W*
z0R0JR$-F2>KP!H}mL-j#`V$Qz73sNjqr8fMod4O@^s^b_3*L{PK4L)Q=1g5Kwli-;
zN!7==ASZ|+kcLB}2^Bes3eww7OPuU(WWpXQ4zxV&VDV{|?~)Ty+(Sck2$}L{^q#q5
zDh|?>dw*d)-C|LEj3!+sYA9q8usyoeRUT%IpmV~sb0k+A{RvI*VY(o62p(~kHh@0@
zs0>@!^>vN}n!1n0ya(u)e}=OTvY?z4R>{or(BF>Rd3XDzbj;%vNA(*y#LY81b$INE
ziZz2=n@=BHfAT72>VXngr(DAZl!Kw3w#?&mC}3r?C5Z}rebP1kf&*H4Vz?C7uIJsz
zHsNIAVP^6wIIIJ6zb=?sR@?F#>%6YM;)!(9%Nm5uJa|oQwSW~=oaJ(dwYqv~D(8_b
z{ANVVa)e3(LJ=MRz5!!8EO?f;EO#rNQB56YLiE?MYO*&Ol&ZEYzla9JO(pu@NGr(X
z1!kZX<<iiJ5VmuB%0E$^XlY-+VE{dqd<0Z{?(OrSn{S*!8*Gx5PgU`drL_OE1CcZi
zGU9*Kw)nv%_U_2@pH$3zA!hU59#6|%fP|I8@Wh3iNg1p?SyMxV4;(G*peOzuptU?&
zpkx61F$2Krl8e5QQ@(L&g3`!w`W}|J*P@w9P&gKNjF_)W1RASs`Xy?s?fBI|Ltt*b
zD{VhHA&W~wAhv?NQuzPIfU-%-`)Z*~Oq??SvA)7|y&V&2&Xm=32C9@0VJNAgbv0I=
zaxCMG@yh@f>*c~s-t4AVTyT4@T=>E!1Y&QLgfiX<!a}%j{SB?>U`e%j;&SUJ%M}xI
z&X=?f`_%saj~Ai#QGiC8gAMrz>v(P9Zf0m5b0XatgI~eHWcmWW+|_N+OpZG5SWf3O
z6Yi<9hx3bOLEiI@VcEt>J6RiC=QUXvGehxe#~hUb$l?#B(!B2EM+$|u>wM^JMd{Ee
zl(x{vHQ`PPhCkRcPCi7U%1)h6W&r?>uj60RvcHFLD~E!WmNqU(>#dq~DW`$sprI_;
zuWP-MtW%X^5tbhJh9JUJYwiGYfF%%P4u*b0$69m2H;}X~IE)y|l8luB6|?b#!h6U-
zx;G&1bJK1si;(^(x!_D9Ytfr=IpsHN;5?3T+MVsZ4>d@z?q&Oi6A27fm&KWytsTfc
zzIe`*@8mo&z;6ZSPDP_li#bxK(2^<t#cZ$7G}f#%lMa%`zvrByVIo{*MRF@`AsK)U
zq~eIj>ofgWVlk8OnsSUM=hhF$A$dyTg!o%@*Wq=LGlrY<cF9eSoiO0Ri4#ERMwx`r
zHGqmnVGvphWQwWC83PHEG0_X6#3dlFkhtxPc9O$;OgzWXfY_tMR)IvsieVYnpfc6t
zAnG)rUtV~n+hH(ZKLR+8?GV?2+uL*`?P`ydHiFL7eOUQzLLN-CKnekHNIGhpF1`p2
z5xcX$9gFs7?DeG~W(wIygHehkpNy9KaZ*LE4%zAuKskH=+cgDGz8Ci)zvzwze6Xan
z6r%D6RB;O$>PLb%@^f>X$RH<%gY3gDOti&l@X5AEJQ!Wl#1DhCp0tK~yqXm+QDtSI
z6sf?yt9x24XpE^b-ffsvewtIqg8VSaQ*TE5MdSRLE~QYdvZ}nePsd2vCUHtGNHM(;
zU>zGcX+lTsS9_MK&ms}ZN_w*yZc<r`{evTO%;=oWQ`pXSiIC#XivTtEw?0UCo)_F>
zPX#!^Nz$g;L4kuVe>F&|mswHYx2g!3X)3{)tR1h|cGOG}bg=&ONEvEsM~1}hSsJkv
z-$Ur<e~GB@k_rya6KeOuQbgtmX4yU%xSFs_<n;Akh2h=({14phk;?2h{$ON|h>;UL
zG2S>cXg&s1WyM>kOkHtj+DWH;fK+Nk`oPZS^A6i4z0`jA@!^H&k&NyWwyVU@`B=}u
z6dPl_GJ?_f{efO*p92vLW&M}M*=FvN)=1-<AnfysN(d)7DY<g1f+*&KdhZc7Yk-~5
zl5;V%<nNqb{3ynO&*nr=FN`FwL#9jAbf2wEcj7>JfBTc`^Sr5yD1km0&C_}9K!Wzv
zJQHA*L00jQX;SX(Y1Pm8sjvV@>tK^aeIpPmC2OjAIv3^?Sl~IWjKL?B%l~;Xj1+^p
zh@apV?A2ok26Dzw7*@8&|LH+bzFT;q=EE@2b!c3S9GSWklaZeql8G-T7vMn*0ZTr5
z6Yt|k?lt<o)O>)Cwc+EHP?H|b@d<OS=^#8`I0e^-Bz!fW!)e3qmW&@~!}nP&t1aGV
zMh9`5LO?TxjD2#xA-;n>9Sd|h8m~;8;EQ=^Xg^CaQbw=nbVkvhmA!nG0Ok^KA<(D%
zOjho{^gGw0fKTzF7_?Ay1B)0v%PxJS6yrfTD$^+pf8U%_%EjzLw_nl#RYaA;O>k=d
zb&#!HTCiXTdjY;5`D)c|zC(rB$-_Fx>RQ4_D02cf@S57Ql(;SerI9F&G^0v2_-uJ>
z-l?q+L!bbWm=8@+6doO3w0=ui&Tw!xvRZN>1^t&>@@R$G0Cq@@&(suLNx`ja%v6nl
zCaqUWWmc*pID<uC5Swvgyzp3HT3)WQcu%;@weuUNPl0gVD<!9?b4`m8PNu?9B8x3^
z9V;4ng~Q`d#{x9pGB*7A1~FW{rRbrjM+LhA1b=5&f4d8<91L0NDx(%HVAD+9$9nEa
zI;W8Ej~c$NH@<Yx=c};`RZz78n6mE~dCG;n8lXjj`BJ8qfOvA<^7^sb!?m7gC9d9j
z5|y*O@~X6Hw~daf>;mKT!B51M8LlQ2B$zb~d6oh7KH4L6iX2;1M+G~^MgrwqtzHd!
zbGkclW|oTL3SGtsKD`^qO{ol#iOOp7D*8%z)`D#KvGoH46f`fFciH9vXw+ouDi`iK
zq#@bNfJH}E5a`}5G@`_64IK@BmHE;>sEv;h!WjtkjWu~z%IP=bErjgs6ZC*G9U<sI
zBT8QHPPxsEV|@iRysp*13uNz<Y0ZcX66AUYA%6fRh5F&TvDR>D+XFXb<_xKr*L)v#
zqWx!C{Rlbm63c0q1a{QTl;&T@Ae`C{tg>a-n2FfY%)>7Bxoo>Su0^%SC=|P0VR<7#
zw%P{wGM{y%l$=M3>HnovlDxn%-QW$dSuC`!4L)(rrU%<oWoq-lAHf|&XZ}&70w4GK
zy|jsc$EW-1knMLR+g(3cR(-jbQgJ))@jd*X!yK>?CNr(+9Ed_9IW(2c8*M=H_an{O
zxRU^#^B*PvX}`|mY`=$NQS!$YWe<Gqb0e`$f-elVS3$Uwe@`yxjutMIhCnFlqMZ%1
z<H~n%kKu(*_=gY4tR9ftwD7uq8XzRsX5xYq_-M`oWfuiQT*laSU<>e*e{}pVMjx8M
zKXY?rvFcsstzqVSk}CJp$$_8+SmIZ6&BTITY#YSo=v`p}&Vh1F)13AC-sQ{0qe&-G
zWsnBZ>vNpZY5`(9j{#%b(?iL&+SQ|rF@XT7(>h<*N$#sQf-Vji*%rT9ZSlzVmikmG
zre)S<zZx!;qk#vDnNovZv{f>qnTHW*t&=oHq;dyi`kH7>>QxiK53WrK@`E@C!xI27
zV%Qpa9UU<l{&u2-<q5%L(uNv!H7Xy~b!KMsnBvt0D1u@q`m%k0k53_|)-`Kg7_+G4
zuRs71bvU_hpxbvceXZ-~?8S8aBsfKnB_1G;`H*QIODn!KU_+B;m*WGr+I4JD-Cz37
z$DZJRS&AUNnJ@%SVPbpFTXP3f>I{P;oJT7xXlti*Le+Nrm{$f`gW>$F(n%F`whsE%
zX&4&vc;{Pv>s?k|>;W5Ab|kTHr%D3^-d$2n=zDQvo;Xbp%01H*TYYHG7kZ7%12(kM
zq%kRx(DeV#DK4285Q-l#X~;@ZpVf$^`zVIx8`hN8_fEn9N2eEP{2X!&5H#}UT_`Of
z`60yIRduJU|0`WIu8|N0YW&?#^PeUR{vb>VaOF+mf9m}!`oW_e;4#J#tOy9T%Ifgs
z07~q%-TkC?VG~MmgZ<-EN3^KR>LFA6@OzJKI8PQLNo4>4Ccmae9*~U3P(pC;D24rO
z`N4!x{dV(@{Wl-*1!zW(t)!WhRY`ZCSgH?aO~VL6iMAep<c$;(dI7_J$NEh$GSio_
zw+X5h&xVR?6AFPOl1(v`0}>WqQ=nCa$jLMB-^`H#X6d5`wmZ#^s~VbuOqVSNXcMh<
zkVB`M&wl_46j&hT<8Wd~^Fu}GyyJ%<{Zt^{7n3#8D7Ts<4G$j~03r45I7mhPvqhSG
zuWU(IE}OflYmMHFK&fKvDj~ojI!JZ_qs#RaN6xlW-71exy<WS|c7a7XPg`$mE{sE9
z8MLVSr=EBCwg!bNcZ#|4ro^b+|53r<R%{d#zrHoFYc9h?M0>?ALvh%un~F5Ud}t0|
z(G$qfOQ)Jynt5@Dk%4$%PhT?RUUj*M9UGeIbE7QqR@gL`LK5{QoX3bKUyeMEU$BFK
zwbEBLGmL3g&n>5E!V0RY8V~L$`Ug@?Y3^cgmu?s=nMEOSAB!wXZnz6$(T><EWZEjL
z%R_@c!@!Jdx+abru5sy?kCc#pp!vM8U{QNzZU9b_#pc!1tU(ZM$jh0(;bTU?Wdyl6
ztTj>B`7vEv$`#)aagsNG@ky(ws{(mn>jq*7<xGY1pwK(x&2Xys8Q6N9gSMNpcG`mQ
zqz<=>W?9+Y)|1cEXQN^uk4FO;LV&AbPxql}L(6&W*Y)B>&@bOOvywU0Nawkbb38Fe
zs1NiM0{}Db2A=7+HW@xvU`;+iCK!lBO9$hObc*wNWV>V6xr#^Qe1@nkb6zdfe;$+0
ziHFq!kyw{kVz8S2vY@TtI@A$jpu>*=0rwGDZ|owHUMX%eRoeoXhHD=qTH9IVGYgs0
zpwTx@rk`JFaibo$*$XUxefzg|$wo>*Q}q)s*~0$IieRx6{WKoHY|~wG(9<X>RtAir
zO@0+EG6Z3U&VyH(3$5_owPl^|@*U74JRVq35X@l_u+KOG=Vnlo8oUzj>+K>uFV~Wy
zr^wYONIyva2Fy@_0C*}_{GyrIYT+#K6#KhnXyBHF=KS0RU&}CI2N=J;&IDGOzg?S!
z2(@w$1#;Dh2vFL}XBmpYfdp2p7^j5E<u8u4ClYkdv}svS4P)-*>G4x&U9{yi$Go3P
z{PkNHtdtHQiSyB7LrCB8oZI0kr5&L1C<mK7Czj65Z_Jm@ojL<fJ9sgQpgD@k_<B*;
zQDeuJTYnEzc$?x0@o5x=Aawqag$6;5PV4;*l-b0G7}{MVgHZe|coKKn8V~OaU^}?)
zO=)hq&U@81ZyOLH4y7TAe}pFGOfUth%(LSA*P=L6{+u;{B?02HC*r(4$*ioR+ViTQ
zU1f9~`~PfKNH}P4`>IpeLcitWjuAkHwdVp$jOBoIHUnNfm01ej=kz>g_4@>)6a`-0
z)rKB!yH|)aNP=rW-yCb0L~@At>tM^Fc-rf;@f$8afH<yg*fOXl@uS^l{k3_&F&;-6
z`n`m?el;(bSDRn&{+rrWBdJ3R-oZJrn$c?Y^<mSq7@o|~q+2%KmmA{@UAk)es;+~l
zY6Bv_t^f@>W^(EiedB;DZMx8r{wyeQY6m+lOT!Q@Q%nUq>D{R9nV)<jP{3^F<jIM6
zn*^5aZbpyXrkM;ia+pnteo}5Na?VBS-|~7#fZP0IQnaaCN>3sH*p?{<Rkn}A4ZN<M
z-ZRzU(>+sq;;%U$xs4tq+=@f?s)3XMcTyE?E&E-1WINF_?xHxe(H=F?D}*>Ri>ZXw
zvp+cu<#Dm_JdUeAQ`O~)wr15-k{uAiDkplU0P+cff_E#E9a6-3X?A1cZEgeqSNrbt
zpffF2;owF(6-yHUawi!ig*!A<3Elb*?h&r1G;kMBUCI-KAH$xemXBr+G|X>?kHJ}f
zfHzEJh{KY}ZF>@B52-&d3<WO-?%n}}?|%WJRbS0^H3XA0Q+^saYPR2AiA_I~K=DoS
z!6@`7tL;fv9w+#4s2_F0SzzM}m1w;ZmYHEm3b-wqu)wcoG2*I8o7yK-ie4F!;7_dR
zOgAr$51KfLL@>`$r*HMeQ490M#;$>%wz1GfXo{xTKgwrp|4)lGK5CV%+|XMSl94|E
ztntuheHK-$W@~rR7aa!#0hBGYr>|~M2FIlb`(!|T8xci(k}d99FlDQMBTQ=!NJNuN
z6uZ;azq?vZyorkOdh$Jw4(1BTE2!9ge<-18k{~<Dwtu7m%E@tN{v+hhS&Zz&gZ28R
z>E9shW5SvLENZY$Z|f>U;140A0tV3^jbb4t1)_h8GzL~4xUyyfMq~Lf_S=BSx(xTa
z!h+5u-D)yT+WdB>+$a^=1VKZ`bF_{vJdrOS@4pr?!;Zv;>kM@q<as!I<}|*qsP{Im
z-i-BWiAwD8l0Yec00B$%i4XM*J?a(BWG}S6;vz9Z2&PJ0unRF*q0S!;q}Z{L!2xWO
zy;~idb8Cgc>%mPR5Oaf{nrrhizGr1mS$X=1PnhZyY(xM6005v(D&RXu52K6LY$<{6
zW*02M!T=lY5Q_>hydzQ~GNB#n)2&@=a$6HLZ<`S_AS#B(c>v9#^=^=m_|ErFF$`b;
zrPUwdOtfQK4Irs#$fwH;-QqW|Zn}Twflh-TggTa;^NKy7wdKB6L<(9iYQYL0m64Jo
zhq!*R%>_)x;B<xHUg+xUc2RMX31Gd-DjpZ)PD<MkfLQ=*d=0<tW>W50vkCLc_nKb_
zZcSrbziUX`n&)pE>AD)*VJrDZ5YZw!$$0sWabim$P94*NvYGV@o6Um#Zn<1ptiX>2
z?HM5Q*lavv!v#_4YmFqlFr--R842uC-EGY)L@G;9vM=7NKzPHz000000000000001
z@>pTcTXH5x>0UVOlkStK{OQmH*MTr$COCYpxG(?%jsmDkX=z8cCg#s|SWXa$2$E5{
zhck~tQna3P$RM8)8tLwwC5=bXo;c|QkfdrL@dhr`6~V$Um?u<b)`}o!c3rT$Jg;)(
zPaNoy1sUvnSVco`fugcF{%3tS(vi+JKtRf<Gv#2w0006O;N)T{1QlVG7+FF8f)vus
z#ryHiFo>)j>$xJM;cE5@AE<JA=d(=EI34CfR^R&LqK>cph8D9ew{(jWEU9|#i@{V*
zo@ix<u+8|4Xoy5P&gX6IXiLTL00%=r5brl?uHIMEh5SXuz_R`2Vr{VBTc`69V}`r;
z-JOh3Sp{+9w1atEru8-#zk9AlToxH2qMHE+2bT(mPtf+=1=+VXx-}Y{_z<1uT!W@l
z+4DU<;vuzMj`FtNdkKUVLNrj$;3|`u#YaD>;#^i;EZXdTT%w&%f-4AKHkpknKJ{}5
zkLxN<0ZKOO>v*d5o(-m=F%v1pHR8al_Q6s(MD8^Cc#Dz5vXHe!p;L4D$!fJ31ZI#4
zgH11s<77!s)ln9+4%k6UAlL}*r1gf(oW~t{eJmemNDgv9#NkT<l^nljGxT`8`Zt%W
zu<7#AY#>bb>4TsZk_G-n)gUwHkGZ3CXX>y0Ntx16wTBvuEf`0wlmfw<+6u4?J4bf8
zZWa&1QL}Jt$C+*aJ%R29;SF~>v$W}C0w&Y63p;h1FSkxi+X?s1zKUT_xOB(v{Ve0N
z=k~(-!Nj0LyN2t<DcU@**tBW;699lMQfX%#yOOx5TtPBoid~^Fzt7-M*OBAJv`To$
z05c$4o+J)-yJBR(b#byxbw<ef47*x=)f0bg7JTB1YWE^5f{9Ive%RH*mggwJ_y=j4
zSrtz&S+3&a{C<qr@OL4EpK-=-9QD@(wyRjzx(Xuj)L~|AFOx*6PR4ip=`QHW^+Q)@
zrSJgUtt{!6G5>CYhB!4`@%uJrL~V5i?l@N&n#2VyKY)tx_Ouu9zdN{UU43VRrFIn@
z<U9jtGJn5t8GW(R`J`|B9KBLPGKl|U45coM&OuOOUWWP*|KxCJ(V2)?ESqp>&#Vcq
z5=lZi-5eKCr>TpX=~bvP6B>!|$fRrnKVkqt0C|wJ*Y_aw;0;<i;9hF-E#^KHrgp|Y
zUtO2i(2ors=zIY7O@kH{a||({8{F5)A??ScO0Cv;2ZuMxPi63VXgSXHZ2FhNd=DYa
z{NUVN+%2*|)P(#YTs&{^5LCN%f=$706!8%B1R%DM2jzv^qIaxIYR4dS>D6|(J2s6z
z;EVFKa%?=*Elt1QDy`DRR+2)}mzp+wrNpYo%&jgmesi4Ha(;pf_4QZV8mSD_Tsq2g
zCeG*yH+U$-RC~BgC}y!P>fzh5+P*mb<{uEwHXBz`&I|w`5*U;2&7zZO*MF#(aZQw-
zzjS!CdXZ*rJm*+fSiOEfdAh+sm)OpxEdjaL4+E#8#BGjPnc-Dzb8p`p7wvHs%dj4H
zpz;WM1nOq_(FuSOj!)w+#Z?xzJ(K2O>|gncX!LlL>z~Av`QtuW#qpDAP0~j>f_$ur
zr$9AvRej+^$*leie%~7(uYeHb5=DFG;9yynetgDpNu#I7R+(}m{PFcBr3_k`I;l2p
zz=1BA71X|5oq8w6wj(K)K@g(R224OE!CJ7@ZHhI?6FR5Fnt_WyNR3r43kk4`RBI{#
z&i2ApzcjBFj-z_~>E~*71sPJIOc@bvFPZ%IrB~PbFx{t}FoXW5#quTE=&gkz#R<T|
z)l}h{S4fJ|9&7CQCCqWy=ZNKTP~^A;B@K8?oaj%NArtirP6E)*TTupD3lKCP8bNv?
zh^kf&bNV=}N#6!A(ahaa`Y~1wGW)d=jRHj+1n!lTw%IT2<}*3@#E7wwp0q-@@-9)0
z>9>z*H4OlvqDNpF#K(0|=F;Ntv7Q50!}=1|b*(!$>t1t-q5Ge2-ok)IbC@gFPT<!a
zBl3KsJdXeQy9}Hf;)z>7XfN_}{=lQ{r0D(JO@{_|5C8&9;tZ_wh-Y)=Y0-!KCwbfe
zPe8E0)F5c{WkXG!>>Vc5(G8KL_nGbt(d}}x#~xqa@wfgAkr>z}qC@u9MWCNEKe#J0
zf90~t<)6Ys!^xl&4J!SUBel92FLx1_C8B(&%DJ3hq%u#Q2TWbJVwdcsFe5BjeyJJ$
zS^LZ|p~Jl9F@(Mq&Y4hc;+O2VH(Q4d%OfM4&W@6aD!^rrSwsEh$K8P0-t&&nl^$x^
z*GwfTsOO{L5MPWway^sr$@3NlJI>x5jhcU+YY#vqt?Prbl72*uW@=2##`0rzpA`s0
zKKh}(G`#6ji+VM0r;^d9@gy!LhJX6Pfi`3)R7!tlM{Q1o$iry=A+=!$mF=w?LVLSB
zuh>x#pq}SJGOJ>TdL0I^)PFCjIf?Vjt1p+p05D&lCftQOm<RnTeGFMbN+O9pyGrp~
zIAZeiap&dwl~pw=jXnt{@)j!0upkG}dMtijZog&`#y|w!%#@1q($BW(Ev*?Nt~E#y
zKFAScHFQ9rUq1-vxesn*VQ}K{@FY8`?&tzXk_=1fGEbTe#2sT^vx8t6<xzi=3V?@*
zs0hloHj>J7N0D@^l3jZfkT~d6a(|;5{Jss#W&{ImUp`LP#z@G(K&r`N;^Rop%a_Z7
zZ<$Jwf2YYmdbUV5_s>Y%DZAfVbF{!MD5Gx5Gf7bkNujKgt0<SBWh-=&9Oj}vT5nL^
z>kAp^MMa*g!u2ZiZ;p&l@M;`wIEhQ!qCoHjCo$NN1D4}XL~T3<nGz{S*NB87w`xJc
znsiO#MN#o?T;~q`wTEtO=12Gait;<d1!7vtB!JTJ0Jd!Sqk~Zb^Ea9g*m~iI+s9>p
z-ujk9HbwGtqkZ!dQJwtN(y&>Zm%f`f2l-9@!JxxpLvz;(s(RtNEK@)1@SM2I-Km(d
z<-WIKV)c^y^EU7xM3+EKP!r*(w*MFCe#rD758`T@+W{!H>|Ji9hA}Ljs_FsB?1vD?
z{q0VQ5)=^&myLa)m-m2lN}pywUt6|!Skn<hJCFr<TE(Z@LB8$3sD`p#Ok`S7dN#3&
zRqoW-XC2NK(C%0M$r1J4uX{N1?^+I(TIg|Aun`B;rXuRYVUy&q*FSABF2G5zYjfi}
z$`SDSflNLmYw4^>Gvt)o=fG5!2RU-aG)lEWS^V&HpsZ`qU}~wU-0tMpNU4n}zTu~F
zRijSa)ONvBb~#atTJiy~S`a^NbYVUNS@R8%BJDF*<YLUhitptZif?*s@ed`&LbW5z
zFehtue6F$uyLp#;kz;*t0sW;A%;Hy>*!-|S5&F3U*|a0SYFRmf$RvNdwBqtuU@IBX
zf-EV7XK4-<xF{SbD8CR&{2Gx``o$kxG{5bf7}Ye(Fg}t(1r?S4dN7B@!t&EjFJv|)
zOUZpR76j>7xq_N-YwAs;W#O-OuAG;NIO#}bFEoX7_9Il=QHbWa<f__w&_wSBwF@BW
z>Y8_R?1bS`wcIPIYc)@I3&;dCATC#VIHKdQijYAI8R!nO84L$|Qj&}K;zsVX;s7yt
zvG^tZ3!~7>7r_W>b@kY^e`;0)yIZUKMU_Z}nl>xVl{l~~xZ9A<VN21V1?8FScd;)#
zfE$61P9o@b9!BIQxl{#8AdJy3)H>QFKCcV^@2QAVww^D|*Vr}E2VoSO+uMA~7;|D;
z1ahig^|)!q9k_eP6UTefftzQO_A(BDLa+8us<n@U&f*B*a)t+Vk=o&-VOhs7Rvd41
zJyo-0NCF=7$zST%xJ)x?<$hO6=4Kh?6@C&NZ~DvYA&G(DAH-odLs)kwx^qJ2L_2zn
zsuqvw63Qf3x<rtU&oeE-z_S+pAu=l?_WOMH*F=HsC46nhL;Ywb$rO7SXNvWZuYk50
z6TB5xikzrCo8j>fL!nmV9-SZUQ73PG4v`k69rNav@7_I3!-H1%{Q&(0)wr)dwdE#A
zD~AXEIlUqk=Y@4eTa!SSj^#_&KLF(ouz-iu>@Uh`u|zf3J_Ge}SpJ{R($++j<)ZMi
zcAehgMBb}&@osZ3CAtvg8#Cqys!L+5i(Qxf^nw{;o@3btWCDtB3ILT|I!_{LlX6QJ
zFqD4pKAq}IDm_5;4dLLw=nG!UQL6Ua$~7qZ#M1>V2zV$P+D?5dhKTcM>m#4XT{Q$t
zAJDv#1C%x>nqW&tv&Cm41b;TIt!nVB>1V+ktlvChPSG>+x>mO)AP5)XWvPv16(aBg
zle&io;iZ)vN#v@J13a&|R_rf!XVxDc$J$*lZNk0lJs)2tthb?~v1;9I!Ss9GF<M0|
z)e_`3qm40}uI6bcJuvX~Cv5tb`i<D*05^KDBtonlt$<r?D_#7+GogL)3>MPE-_a*0
z!AK2@?d!5g#(h3+hX($Q+O)rZY{?&Wb*QMoM?w(3if`ANK2*PK8`T-SaY^w6oo0*{
z<2i9YW0ETT;l;I9Qytp!^-`X2CMnrx)9m|aKGlv3)o_6z7)atj2oLJiez(;_;(z&N
zz7B2r3+ZI95rw|lfX2Z<P4segtewB~HN-u`a=OIv0_KK;9p6J@&nk<7_A)xu;6mNZ
znb~YM+2$LiMhTXGXyx@BTy~%p8G~*MQdnx}C2KkUZ%`~oPOIqqoqlFXqmyE*{4iR8
zM*T<<gk}-&-m04MYzGrO>x<W#Q4KV7cy8@rXbTsQOB{&0h?bGTld3P%0;k=9eWl5g
zo)+FV^g+<H0yzFL7ZnHN4WzUh3LhGf6Tens?n<!9r4=<x42)cU^a_p&>ynvTr-$z}
zVFWEiZ>*!xrX`eaeU;BiE2OU`&r=Kg_qaV@4@}Shk=z+3O(K@k)r@uxy1HwWrQ|86
zhoQER#t~->a~~b8=3Fd*DdJf&(Sy{#)*^8-eh#2iJ!Tau)`p*(dqHMVZyIc&Y~jBi
z7taS}pmc$tfSRr)5g!)$H86fxIC_fjQ*}oA6UKyf{dJJ{pt6brSZY_q#^Y`M3P)@d
zn((yo%`dc?$d&`%B@*N3{DG)^rU=L$8lWw9uG&67!{s6^QSyf>O~+n7NWPF-(LSqG
z6_ymPHHT|bg5lc_BW!!TlcJ?z8sg_}C1AA(A>_}_&o}^q9uPyNbpNqQP1K8c0Q;_7
z)n#=1!;w9<U5CtBQr})kzf|_3eF%EXsmzdt8nDF{rn|M_@~h0mA3%Y}&0rTA5OYRr
zpEfQRXrB-3)d%&myoXJ;<sz&xC+9nG;~wJjYhJTV9vRl5VM0rQq+X6aw`-)+D(t+q
zljB3Tw_nG(vTkUODww=B14C-qhgWC2+0S-#RO$*0@l$b}**RSyG5Lkm52hrn$dX69
zLDnEfcat<~<R0w~csGcy3sawRNL%Rl92A3lj|r|2%EKb4g=-rGz?BfosZ*jzu`UhS
z`NGLLY5CJS1awEuhA`T4LJ0Me)92FRs+Qzq&8&+ta>Kg<Cw$ANa~EHpc=ov_$c2<U
zr%Gvz_Zdxg^}O&3;xII{466@+&PbU2c%P#(gwIFw_xmRt5<sYV1k@|TH-uJd7#;)A
z5x5G3r;*FdtH>eQ6hw=d#-C602ePNT*-~IK5+ZuUd@s#@TMC_8rgL=o#P%LXXL2rB
zIV3AlRUbPKiPoh?yH*{YYP>R?0u|2$7K3CJ8KLsBCck+U-0_D`_KBHO$px-JR!xr$
ztUXDW-S;e=ScGY2QwEQgPbXO=Ni73s07joMeT$M#U^*XT<k4)dx5aUvKZ%Z0{p3j2
zuQ(2<f=3Lb$QGGPFEuSQ1I^dGy7)itmSy<?@$yX>ZT`U(vV{YRw(c1M+GGG4d-St#
zW?jUJuMtf*mwZ^OedK8sH_*G5(LbGOe7Ffy5c@mHCubm&8>2#JjzURNF+w)XngB|6
z*w=u^;?G>9w>LqU5vXzUGcNw4oj0LuxK$n{iGDMrxyR!X%F1c*@dBm5D*&&QxSnH1
zsK5b;mq+LlMA+hyM)!bj)muU9b&5c?H6e{Z>uW}k*Psn>4miMY9Yk-tg#tBVQ2Q)h
z;H9H9K||jCwo|o(fPO=POi$Wq-Q|6q40g|9Ek94PZ9^PHoezy3M9Gl6iIqhO|LShZ
zhw@&9GF&$WnkVp)W&+rF{obnr#=>}SHP;b>a&3L~J<-)e40P|Sa?4SR3mGFOznafx
zwG41KJSdES$(7YhUR3EQEWKrrz8K)WB{@KH%c^S0vU2yprzoSyD~+f01ifsz)|M@<
zIuq>5lS#%_ssaqqH8<cY2q+QPN_I!>8W;$p-W|Er0&X_^tkoQxbX4IrMD37oJjnvO
zm-2}`Fa?`uV<dE$YRIc}ib1G_+_<Xq`##oBnH=k%HhY}FqtArFY6x$mFBeNexf`j9
zuATy5BdqKW(IMEa^{ik@_fWy=mm$lx1;pJSDy+Ua{Zft$-PZZsI9$1r3VG8caB46u
z**dog#aNU6OesoU`zH7GiJ4w}a}^<CZjem`N#rM1BDS_pY6fuBg!_#b5(4eN_3)ll
z5VgD_?3WKZF|B{eL$ob>>4L+?+pHPW)-A~%h0I%<;JclR(0b)(EKtAx*^sz`bjeQh
z3T}VHwj>G$B^8U3$B<U&?Vajn<C;4H7pkV056AwViHzwtiPrt7#2hC`h!^#IpUbH%
zI5qTYNs!f?czc1krGwGWVd&Mevp%>t@EE+>nFmOKp>?2FscTchADdVR>F~CpNl|w%
zNF3%V&%>*qU0Dd<Y);CWn)?%<G@rl+c)YW4C+m8fBQ`?3(%`C>HZxB%VizzUt1fh*
z4pL*t0E1w~to3cXF~Y&E`(pr)+_oT870iJhJj#P$Ftxabemp&Q@Z`=~2uJJkwt?~t
z{ROi{Cmw<$oo|vz-D;jSp4rfY@eGa@lBQc26JlC_)^(^T3#|qmt-;Krq^LpMP=&#c
z!h9PDD!1kUO>5FL4grNVg~Q=udM$UM_5)dtxa?Vd?SMJ(8UGWCyJ`rF9Xia2AosO{
zy0B?W|8|R$e7*(!X%Wwxmkvd3_&(mBhK}fWZ9O^>xf}a)ly73D^T}nfEz|!__!%<V
zYO0%DD|CiR=DgEyuz=><n!Z?1h`HwFST_><?2601RC5*hH93iO9K_cxI$X)a?%*7k
zKc$3d=#|rnQYE0TRBIWsKY9Fz*^UY5r*MjL8efGEHB`y-XZ%UYmf~%4@O(6nDYdFA
z&M6fQBt)cEC^myF#0WNuY@X7BkYJ0==24r0;b1O3%ot8T?bka5!UZo-G?7?d6-Aan
zlW&ak!Ta($5O3*I$3yinj;v_1IVm`V)z6*?mi`s<@9C%5&Oip_ntLG?s(Y&)JHug@
zRD=)fBc);#>i*16WF^oM>nhq)#KYB{gH>WmI0+*7nf*@`JTNE<8VPM^@!Dd^9~m)K
zBA6??dC5yuf25=sqSKsCZh8i$aJEpbi^J>2qSwq>S_C(yG;?z)qd>kR2As@&At~oz
zZ<3M`*Q^Ohc9w7ClG3brQZK?iksAv&a2(T#O!Lj*slfu6-iYRL=>@g^+Dq%x1UT^z
z#qx1M0S3n_UKh?qWSG0k&ubdcnmHn=`aAsxY3cDA_#SpgZ;AlB1g$3Su@rd0zMW%5
zfdm%L1Ra68>F1OhT;mxgaCaem>^K5>lUX-K;cGJ|rsGTaS+B~!l7%SqJL6fb7jG@3
z+F}CVPI5fhE9&VTP6G96Pl1s5J{rYIYE#O5nZCGepiDG+ixXS4k2mFjp#KG3giEI;
zYkDV)E);kZ`2=id2qvtE$CaGD7fqdsLJo(N#@j$?kqPW~$p;GmO0z23`hR=YWlb{)
zyTB(#$=3oDdx{(tZziSvqatJe#T8h)_Cf*O$t%($Miq4bB7nkH!N^ocrTAbZ+JTT@
zDq;1d=HDd?{zd*vL063qin+Ag$o((<^+Y2_<^0ka+FeSR;_2+_c_3HD`*HcW)1+80
zQqT7pjfUr*xG+ZADTj)p-!2)jTAw=(=Fa5XJLb4|z`Tjk7hWWoiF&JhCNjT_N>zhV
ziqh-VeV{*V_$y@eB3UBCS5$_e!~m9-|HfXVLECtFE#jRU(%De4u8pOtXR}JcO*bRQ
zK8$odL7GJu8Jc!@ZSJ4AwW#?{u;q>7V*aHXDWkH3=DZk}5uk;?`w(E#%A<Y|G<p(d
zwTpol8R<5f-V!M{HfOscX%dxavgDIeXT~wg)bhUi*&4J9v+HB2Q0LayO>XZG(|k=3
z&RiTy={yClpO$R48Qg^UprY2+1J9YKt&G*W*t?k#>Jfc3<hJXp7yqz!cvIDPcuF1B
z1vbl`H*&1h(rmfD;!MP*!0^H`b^5@6GgnU))$T;msAObes+y@aEK^d`s9Hc25JUwe
z01&ugklha5+^Nh+qG=4#jYfD<)sKa>#b9v5+1-7%EeQ`+1-fJ&L>mR@D8M;$Z!!D#
zdB=wB!4Mz=@jX)cKx55o@LuQ-5?Z9wVFJof%7=}W@K58*DwTY$uBq=~8L)=4@TR)|
zg2sbsk$X2nHLh8TU7-YB={)*E4^*2S7|<dc@R9#LdOU`P3PNIMXalM%Pk7-f$iFTf
z*e2JFTj$zN`ZyDRn^tNQ^sTJFTAxo5LZJ@osGzL!91kfvoFmXkuDc4WkXK@o6(U^T
z4~0eKcio{EIO;c`Ke$v0tQ7dyJ}yyssMz2<*@##}JB86c5r8XzV@+py>u+3}yuWZV
zYFxW|7;^OVz@`?N3k(CiK$r6eE;6Ru2lp5b3KOqsv(?dA!IQ9<Z1tU4r+L(0B_W$o
z4M(+r7=-qMrZ0UMuDw~i@}_mR^=z$k%bYhn3rYha@y=^~G9<i7(tOPjfc2d7CAKlT
zKd0Ch;FJF|HLt}@z2`8f?;jGh8xG~P-q@3uWhHLTVOZ-l(4ctNS2-Y3@*9-cV3}Q1
zFZdxYM6%kw>8@mP(DRub_pripRJJ;PO!!rQdp9kOr5Cg*o)d-IWeE4o@!;^CXIPx@
zGza*f!m~$O)bWkSExJvdy$7}=aWFvk@q=}enc^<tNI5s*FluJ41+CoOPnT(3=|qWs
z6y+q)!eGaVRx}Tl_`XISIbu2Ux1gX;{#?NmnV(6XE-Mf@ufwW2DH^(VDJ`uy2*vU)
znw?e)A+Qc%%30XN%___zIZ11MmiY&nh~IY;w1j99sNHx{Ju}V3x6NbVg}~s3O&G0d
zO6=iSF@my22zu$k338QDEu{{u@?=I^fN?#(b+t}Ik1*03I13J^ph_t&?Pmda=K<yl
z7qwf~;w9PY<B{Jkt-Am0NPxC<U@=Wmj)R0N2b|$10i0wqrqm(x*QTvlTR-EMrRV1+
zGtmsds~}L#eV#2xRRi>Y;8$w$XM7dSW0H=S&%iV&0)XPWM77&twv?}Pe2+79Trb{D
z;#8K^5A{y%2p|^xKK`At0BiU?r*OCaO^l6FPe@C?jIgN1Q{`N1zt`oP>~s;jhTj+{
zkwOJRS%rlp@>nako>+?t(Cs(LuB7XNN5JdRnk9a%;u)2bcTwW;w+GN0+wa{OPU|Dl
zU<nneg_uMG&(du|J@1lYQvB*BU>K+g)cA;Bc`y2@Ed?2qQAdXU-2M;~p?f%w7IW2n
zZy}!^`)&r?<Js0`G$(55n>AHeFCxH8Nq+>JGyrS0B^}G--A$W?eAGy&-cGQayqxDH
zQLO**Zk0~XrNO<;<FwIyPmAn5nte*uEdK1D&!?UBg8;B9z{GL0ZV48duAG*0K%qc*
zh#i9#oL|1;YE#kmz}Gy6BEh9aGXYxc+~8a#xj6ukPB&)Z&<zq>6-SskuLt7wfVxwo
zo2=WS56W4txiW!~qO%QClIi*QSjX9KifZ+W^Z4SW*zj%^AWtm<omnRvf}pvee6+>?
z+i^@1P3Y7`N6<+uCiCnvT$ETU^$*xfM>djqsSq<m#Rc-j?V#85kSy%;@!$mN&O*gb
z&=iGIt>*TNCyOxDl~F(kwTDccDXq3~EIXAahmTg3Y&Lbjc3>~y{WFd2ZegUK`v^1*
z_MSk?(o|RAD6}YRk<~4;E|Rm`;5e~ql;OxoLle>f*fPY_Q~aKpv8~@*r|1>ZG#59i
zbsWmAy%gzS$Y_MqtgCe9=W%)UpbhC~unV{bHTpi4-%Oujj*{YtiJ<}Htd1(8|GM>L
zt?V*N^h(RPqyTX59~za#D-;;I43azCqbS_$oHT<HU<-rZ&ucbhHp?z^DU7%zKY%s^
z+l0Phj}h~EQ2f8<rP*@UBYsvtc<Ao5cg7UnLO3}f=}vchETHX=^-skR^C&!0(Qjn$
zH@;IupF=;xVRU6I;bW|{eHyCvjom5+AYt}srV8xOwQ>RS`|H33neAgvvyBbxzv~Nm
zbw?0K?afT8_5H9^=G6KBEfVn=Wa)_KVZz?7F7U?j?RxEgU?0Yft(fbus}xbg?BUnE
zK>&@<HymHqddZUaXO%L}Ko>J?9_E^TPB4<CM3&~n?hp~C+qI~n&l*Na^@o||+ugZz
zGZo}!NhMs-Cv`4J-gz*f1F;ji(e#7-d})h|w7Rj%+MTz?RR3R&%Ne#s#1;a|-5cUz
zPA$i_%u9VW@2CjNR|?wxJ4_x$31~V2<IMKz+>&;=+aoe)&@QrLpb0e1EZK{xn^-Wk
z5YBh$dTMF$m1o30*zGfoWJaBYcSng#YY5s8n^|us0Sz`+0001(_t*n*0ro#cReSFA
z2vda9J42}D7Gy@L{F8f${fFDM<i*WRqZgeRW;#0n07UgxZRa6rP!u<`m0y_lxi*o^
zs<6G`sht{t84Cf4H_sT#>u+OeTLKCviVxL5Q@xj2{H8nH#d8p6V##%K>-IcH^)oX+
zm??WH+|c*It^!{t{r)N%CbRN=dYqb}Em77?WqUDYn<_4@Jc5s6N2*cb)PpTel?oi5
zUL2UL?P0ubAyR(-rgp%G(z+0*Xj!U`2HH7CdRW6SW!mO1sqMGaUaKglUXcEu%|tck
zQ~{fkcQfK2fZmNIDFy{O*@6FyKP0DnIioo^VyM<dUoSPTa)|vo!ac|WOhZ1{b<d|p
zMQz?hH{*;8o|9M8_Q9X0*d<p^7a@kS&z-Y5FH8527s`5}!4$r=#I={BY;;hqLTA^B
zTQWLvf>va>E1T;Gvd<=0kA>`tOPr}!0S8lL(&sODJ3JWB$l6a;HYU=~)^rKQQJ%gZ
z(V+DdUx%D}+uR=6LyQ2pA<D>N(r-#s3VT4s&P9Y~#mX#(pMuhf{e;gXn3Bg304Kcd
zfOY(#4JebVrhNJpkma>UR#Qp;>Yt)P3{XtCuTB(8Vza&(xPKeZSGqSw&PY$VeV0`i
z%w0}8zSk2;)}Pxn<u7Z?yi{1>R(H$@utg&pZ^xa_mCs3;I+x~h2Sb2RI700(s}%TE
zF~=61F7gSzVfDkW3#ZU<cflqr<Zh+kp+|l5Nw&QluM`{}?_OfyCL>8~|03|HQe#y#
z!<LSCFeBN=saRXoB#yt;_UJ=n3+}{y`2L<2XqB(qJT=P6TO1c-Bs-lBm)@oZ;tvTi
zxo)a)gV!A~eO$2w5pordrN2P=DgknVT4CbaW}>Ne2d;TmJPLA#VCPZ!68`na5aUs)
zu03mCoeNHJPySYxcLeifYk6gq{1uv9H%aR%Har~0ZQ?>)#mZJgoPTkDbkOHA(VqeD
z>u}%Xb!WzNNm0uoZB<W1<s-&bJCmGL(G-Wzu~7W)I|nYmfSjiXmPQg>=rV$ExlX;Z
zwv0=JuhACHdD9`?%{b&0O@ZD3!Ya@5P%(%}gF0Fmlw;Vjw8>fnTStp0OR)y}KX}Gw
zdcjuwP553_NreuPz_Tm;gjWImiPm{{8(?ndy*-wf9>O!+5YNo;EWZ(esgD}xT8RT#
zHwN*4_Ql8ZVehs67Aj0o(fok$m<i(ozj=A_JistLK^kl4WALD0Z{GbOa#h-=5NweZ
zB?6J46^V|m?({=zFV@%P?b3072rsKvrdw9a;O^d?L0}(Oc7p<y3h0U`Of~IscIn@3
zn!nHXZ>?KSV?)^N*WvgiO3RPnq1EIYA|@B)lgzSuf;SeO$N_v#ey5E&_wgQ(E|)^u
zKP#(aoLkwv1o%sFsvc|0#xRiz#6^PR+Z1FV=uQZCbjqXNTCahzlJ>1gJMpx;#*H#f
z1bHO-MJD5uNTn1NW`&iIz;(u{sU4QXbS$K<b@X6BnzNg1L{}>h%{IuBTL(RX14HCk
zP0}kTec)g}B92Zr$(h6VbEz~rtgWGde-S1xl?ZF-aeyX==fm=`k#wUe_5#oUj6_XR
zb~4CD&u(5jVB}rQMgo6v0s)W8zf`z0YT`A~>^ADYDWB>ZYe@h6HXXaHQ73M^X=BXp
zEplrUKb2A={k2TjV_uJpN5p}EXr$x1WUq*@uT9@7Aq=IneX^do&~e_?l|UA<X#fG|
zj-V`-BEetU#M%O)chiHIT-tB|Pi|drXba4U^*uGH?~13*B?YI=K5ZBB<wckEB>k3o
zVkRsN#YN~3)Xq*)y)DO`Cq*8~Uiy{O9WO;qnNed?Lds3VdD`Q|dPj=Ph4jP+cE(*q
z$7hI&b8>hgL%EUUidwp%{qHsELh60wmatS3rK3Y`5=Sa@sn@5B#T<HvC;m$2rh56v
z_km({QKeT^cW>kV_EuJ!bE2rs)8CYGRv9H_+-19U9AK+1eS|qYWX}v)@t_lsdG_|9
z%7wOvNT>MJc&EC={d?uF$R63trp?uH33+~cV!dtkI)~yL1d#_4KOF)0_0pT};p=Ib
zRB-OEh=5)Q%k!b<us6QA8VD_W6uqp-cWFn~d&<tpK0f|j!f&eih}QM{*&vRzz4h8l
z9Fb5w`tz35p+cF?v*F0&DuN|t&VYVn`PLkCze(*ixCA3+XHT@3@9aFpu~x}frk_Pu
zy9nsWqh?AL*3Ld-<NUiSKCRDt1JU!R;Y=~@coe^al9g?aSBMIY!51mgLORn}d&C8N
zaxDs3J235UN?>#w7WcZj6XaCEIw<^9EvG4bE#6PfLd_qNxX6RkfDeu%$<9U5gB8A3
zy38ZZZCqbW?L!i0>+J##j=^a&rn6FuC3_c8zjC0LzpX~6KpGO-A5RN3dEPkbAjSYn
zYUouu&=1KY!__>?a3i<{(Cs{PnC3iVG4-BH?efCUtJ6V|$cP(Z)r2_Im=o9}5~(lD
zPfU+&lrR--y?@V?F87)Luz2r_#@i%vx?}7Ffg-~jBGn@pfkq{7f9y^AyFjdCdlhK>
zunm%8b~wRaFZ*6p?uy7dL_<}@wCNkFVrM$<5G99K|AX2tI*$g#+!@!b3Jb!mMxC?P
zeOsl5l#qfFb(Lrf-xebQ934z-j)y3R5Dx%R=mma2>_r^L=>M28!4z|-?q}AdNvc(N
z315eR0w(i-02n~<r!w^yfkQ*}2+e>5uFpx)rK{%>QioY}%r?xX?v#Ud0oFk^w^YK0
z>hQXZ#7|iYoLGg<DgWFf%1E$<YKEXKbyXsy9CjY=|Lg8SE^ryy_Y#X#3~W#2yR>Tx
zubxUVKXnpbV^GegV!53u?lSKOtz*?6s(Uf9hrjo31CS9(q^ZXM0yd5;Pm8mr4O5(K
ze0{<2tkt4jq_)Wn1^dY75HN|O^7u;CC}|sB>_9PS&aLNUy{Zj?no38P{J=t53IcXE
zHC~@^JFFyPU)@1uOnm4}@ywRzcGw+$lx}b`+jcIUC82WMlgdya1b{h1nSU3ICrcZY
z7YFXD9ufwtn@W3=@Df@VB9Q0kzm@d&9v7zdmo#WKLB|E<8cpb-S5Px6>8E;re_fm?
z|G#vUnOm#oia5pRC&hWZNU;wmk0jRV%O9ztlI|;GA$E9VK~+H!S|qUKuQIRb6e3fr
zXdL8{*9mJYz5s#zN?aT_GQ{{%NA<O$U*_f|Lp!XE!^N0Tkmnu+9hv5aaB7)Kpn|cg
z&C^9`&C(G!7d;1JWtz@eMy1cPGT$~Bpi}-dK|JUxVfU<8g(}qH1$CKim)W4XUgJ=H
zdO+sPK+~A!VfyIqUo3A>9u|9YaBg`}ib}vR%ULv)fCm<{#bR7?^c3Vm_Vd%LSkH_W
zB>Icjyk8i;jb2t8Ta0}FaHrw|hQ=NjBRTa(;xI(?hbuFIW^I3(#w*QOo6e323;)q&
z5VlQ@(Pe7xJo2as72D4Ce{tSZ_M*SluUHLs*)nl~>K0p`0M#k?m^V=%9W*`_>Z{`E
zbYuAjJ_WE%Bzax^+`N@5@*7*@qpAPZ^Xk*>mj+RVzFdl~^x|#wfH0R+in!=|;2?Sx
z0NB0%6TRUT+`b)qeS#%|AWPR%b!iHcHoIKsbS#9+Xa`5&ef6=`1Rh@PefX;_KB=7`
z70sS9@1460nAa|<3!QjmO21~M2Xn6_hAHx-kpeQH0|{#=0ZGBeCJ0$SnE3fpSu6L=
z#qZ<nAcbL%E-NyfU2EWx=sK0vL9Y7j=|36^a~eX7@>itsIwYBmK|^e_gExxAR^Z~@
z2dSVdK(FbFpj7*Qk{ZqDMN<O|Hrv2(^ubepE$-LxL+a*E(K)++PO2*N#|f}qS{e0i
zsr(|~_~cj<eKdRMZdR%TA|K*S6Ju(lry2Z1Qi19-$esL;<^>_LYV%NgS4E5HKxIte
z0<{4Z*a=U0$KK)^)Ja`l4^JNgep>%nq$cH}F=okI-^o)L6(xy+xwtcrs40aOo}MDx
zG9rS@OxnP_5~W5x%pS~SJ>aDB8A%!rVEx{U89%jYX15034<=6QXL{72b8E^FqjxEA
zbI(8~0Yxr{DSqLHd&In}a4x5tx_vF|W@I7P6s=v{_B<Kfzqj;P`s7!8MofAyu&8B;
zsz7t~au9cL|382qaP?p{uplOvqsw24_c5ZkRo?W({(A)HT#=yqGEE1ST{Y$hjVsX9
zXGvM5M8}-8++iw4ic>7m0^7!Yi8xaHtp`i}al#fq0eTt48D@~puXZl-{=&`d%~MA#
z+C7XyWxQ2IAT2fp8Y7%)JC*fw!Fd1`ImaaSo@u4?7tan$^Fmj%RC5wC*`52uPfUD+
ztcUy6P#krO+v-kd6&hr-a*CS(C#k2hKgvCLtk&!C#X<>Evm97~t2x0X4fA}Gs)33)
zkQM>3E9e&?0d8XCv))7BVC?}Z@A=9f1H$`yA0y7e1e^dJDJoSrlujbSBSC;MqDdoR
zWbX;ksnnwY1sA5}ZIw@HX_x!LbSiZyzyU?+xm#sZ+FE7)@SO^sN-zLXdTv(PRQ8sc
zf4nC`r&5dn6keN^wpBf)reE)%`LqX+=%^Xx^RY#dnPnD;2WlJ6u)O45L;6Yh<C3am
z`8SRO2u0{Xjwlod5Pg_yzRd!5;%yAC;tSv67%?TDG_VQ?DO@5CxG~qmW2<;vK;0wf
zQLeN3jUip#1pKk9eQyV)tQl#`L~@aISrYzFhTD*Nzqn}Xf9xiZ_6l8Pu=N;#L-bD>
zh}tKSJZtYN5q(_`IQ{9eB!B=INtx>6oiGalibN4LGe}Dj>Vsd|C4q2~wSuvy-|yjh
zx0k>G>VM0B!j)2A2Aczebs24@R)0_-kYtC9&t{ka0000000010LqD^+r0$6(@h}py
z>F9%ht(1=Y&A4srtuT&e;s1ifJ@@VQaBAAwd9e{M<3a$d)K5r;HIOV6aXF{EHtK+g
z`{*Fbo=Sveez^o7pfltiiY+XShB17D3&2mm5I>f*ZQ6hX3|i}HHSd7B*R4Cg;Y{v{
z#<gm*kGZb-ERowD*f{Ku6q)|ft4zAXKxaLGbaV`U$2tD<pb>Dz_Tc~^l7%u0eXqQA
z)nM8G2y1IM?aeEc`VG@@R=h2Dm<x{Dn`vP0*85YF6))o?Pe*Yvbmb;Q(u7arcev?#
zxA9OF*xmY^@b%Kw!(FHS5-YaAgVlxYRB|&}B<i=HsfIq3-lpS{>a{;0=UumR@k!)!
zkZfy!_};g4(6Mk0<f0iTDRT-L5Xqf;l2`PQK+7+q_H_FOOWIVU9tcTr=mBA2I}lEX
zbeVKMmL-ND@&ajkEvJ+TbTnHnJJ8B5Opquo8%uUJ5D2+Jktz<_Es>MxSF}jv0Ie$h
z>lpg-5{R=PiF_H|VT}dHr)@V%#Ii$-sfmwn2g0Qb#BRuatCxatsBpc)hR=jw;Be5<
z$A-$_;-~V0>fLV&&CV*CA3D|N*#erjh+c0b+JVc%ohe5WiX3$egrMDj(%Aug>k}Bp
zZ{AbZ9ZcSp%9<N299<H?t-xeA<jw6qW<ppSoV>$ImS&fRZS+C@Zt}I2d56c*J)w+E
zKatr~zg0dnk&iWf`Qh8M`ZmQw6a!GzEmq9yP2TgC+~2#2)I%f~Wm@bcoNzO2#K=y{
zqK7`2Ns%EOOxcsXmZ+e`IK`GfY={Vj3z8}WMfY)IQD3B(=H>(3zsvxHtlz(`QGRA(
z)pOFS#c7jUzR)|F`y<?y))i-47s6^!v7Io$sK#A@Dw^uvC?sC+Ot7Od@aL4<p&qC{
z(R%!a^qiqC3)D<j^~O|!IcaY8z(Q#^!2nHx*7yJXnMG;4+KHV`Z{31b>BhtfgR07q
zgP8leO0{+*=P$}zXv-w|yO|zhsQHRkz>vll%V57xkL?nrlkB1g^uQ{aae>dp6_1%r
z&3GT?ge9p!<<)}ko)7M;+Idj$9Ykc{d;LA&Q!~#bZtedmWZ~-X?uki=?(emDdLqgc
zM<!U%MZ)Dma6gpqTvi!jw1y`M{&=E{u_3jbI!ojY`$1`CBB(12p@ToRnl3<=CTPp=
zPsP9&k^6o8340>U3_!tTWD(g?1&*y0GOw&8|4QHH7FJBmrBLY>BXAv{829N9g~GE^
z8pVB_&-YW|TO4~Gi?~MY7<snoR@|d(c!6I%j<K4>=03kF>35TeEq<Vz5d%^bzF`=8
zc6&iJPEXm1ef$UdvOrtimXxl5`X@HigXp;AXpFw)LRX355QE1*t_eIjCHcnU{&H(+
zro2)=6>JETuVJoR0B8>}%Py(2s}xN@yij_+3R#;;2Wct)KqXJ~|2n{dqE-}hqxPNe
zJH7-PP*&gMr7Uy7)}zC!BZIrmFLD83|JOF@dvDGRGid}7uKJXUYQmwiH-?7KjUPpy
z4q90cV*2cSS)9vMtq?EX`yIty&X)eCsI~ohvS33g(@iO{dr22vApnf<uIx_<f+Rm(
z@GrW;qZmH_ukKI%5pAqvaeB)=^uk6h-hI#WobUj|sHh3Swc<<n3$76_>5-P^8UOe9
zy{*-aSWJH%I#OWgxVm5lAU7gfh5~2@I7g8w_$7-VF)ap(pgO<}8hVDhH$|Gv5z*Ye
zKnv2?NEWoal|=>`s)aBao36OwjI3YqLkns^9U%?4mbRV40E@NH;>FOuT+!mF6C{^R
z1a8Z6;b1jDd43fBKh;bXd2#j-kKYZMxftWHk}-L62^7^8rO&Q4*wBz4|F)Y09vcWU
zl*(O)4bh!hxmF`}0WHFOzgEk>Fr2UYgF`-y)!ic`P)+Px(K0gMr4TyD$XMso#tUb>
zR~ATWOjpbJn1}#E>()hbrtgb9DZeM}=2v55)o*OY`!`d@$6i77Jpw2^#!)Tk4Zj2G
z@uALcECCSzUYjwVbm16hj}IkW2A3m4LN5Ef!jHEdJSAfmrQvOKdU@6yp~l-C;pvfk
zh87{PUqsJ5K3i<*NIL|*Wwju&hhwHK73A?GC7i#f{=^}Kp3R2twA=(aEvQkiVc=j4
zs%gp`f^I$$ERxLT41~RG3Yd9}zw}HIMdfDL_FklP8CZU_-$BpwcK99&V*ncajDOaH
z#fpimI%U<L6g-NeT*l<sg7tUEBUSDe0tALnJn8L0whfoS+*c-MT;|}Ne~vIz{A$5R
z_n<o~1zI@OHKiB(6HGCVh+gUe;FccHh`0x@T4>}|#ZE<GV3C?f^OWsv(d*&bt11ZG
zbV`3Ayr0G6&5<1QgG%^|BU@cRFP?C|x=ry2ptT0GY-r2i3Y|hDp#%9R(3R9IzCBSi
z9uj33%no7xe?6cczanykY9a)FQWjFBYbXCVnqeF>!k3dIpVxma4L6lg0x|+X_Oy7P
z=*VlKzP1fV$3}m?p9b%xB=@a8!uPfzgHELHVVnE(>0N50aEhgRKG!mS{`l=e{}HRE
z^P}bc)CFx&3V%%IoM3+Qca8S|5zeCP<&mnYCukY+CW=}XC&}J7gf)Rc-sz^r*&Tw_
z3b3!YG+LB=*qelx&r~D2v*<0&Jk0D}?v#?=yfJx`Dpq-+1*18nb9u+#XAB~%Sc46X
zqX1@?{6x1mN+b<nbNakM8Z52~av&BUE{-JubNx*=>454HWZ|l>uxa>+O@F^7V>Ru)
zqWq|YcwErO045m`h#PD6sBgRD@B)VE$G?A*uG|5rs{_^{yIdgS!#8{Z37$9#ng#j&
zmY;^Hk@eJcH=%+KYyMg?V91;DAc!Ui4`$&?iDon3zGpOX&i%$;RAVqeOR}=C+<rs>
zveC{^((umHz}kodBIw#YbLzM#<2-S>zxROS&((kY=@_feu*G_#(ZtM+c*TR^!!bYM
z0MZ)K<=IGS2NC_Jm$fFk3?@Mv3b?x*eb3qf`<D8q>EzW1QM|vD>If{fS(LN>^JCp#
z>`d<PXDy{Mq+Nh6fNA4+d9+=P`6iD{9lN()dy)phi*|rZ9fO<lc2MWvDU>20!L!?=
z&MvW493q_(x-D8)=5O)W^bBCL(?D;9<y*nqrr!R(v<*q6=5;rZxwd44&*8ZBdgv&9
zh%uS><DF`BMrV#85-FdYztAMuyNv5gNrvkFUgv1Mk#{{`oPF?j5-KK&i56icl8|3I
zdY#d(R9bxt_&6Mnq?GG59Bt00#}d!5V>P*5+&94=0pNXMPGkz%zxDHu?|^Z-s3w{N
znSx}pa6|hLui4AlmB#e;vkJjaoNY*lRMqZ`UhRg0xrzLAin{iMpvz|ib!?26zW<0(
z8k%UrZb~B9{!sUcA~3Kc0-T??UzI<~*N0n^I@NF}lsz&55B9Ng1NA{#Ro(o97jO{%
zytj{g0Cr+#d1P;Q%gT@OErBwwvrmOc3rh@pn(AZy0K0(D&0ux+)Tzyhfvnm$=EQme
zGxtjZlDdOT!E#p+?DmcS#*^`cd2CruC<>6a!H5Hz?8jbqR+OEFg2%Kd1A;v>5QI<U
zV_Vi>3P%Yk6E!3bBajOb!8agPKGro>lBDNaRktLt=8C_s9F#{0KMC*E0}pf~JbD;3
z>LGr9--ufzoN&JiQbQ<F8+z8!Q_msS!_a9j0^kyKo?G4)#XkCp@mprM+!b=;9|TdW
zw2sz{cMKxCPKnxFcB8&UPY{-wRDrW%#VcB#%m!%PnDz$<+%@Wf`~C%Z0R&p|ykEal
z+M~Dnt@XOTUT9lTxW=RXngVui#;wfH*n??10eH8WD#ea;SGvu)ZVaKvHl4RmPPx9P
zcx!@HD1HG@raRZ2T4~=$#LIGF@z9Fr_u+X+;Ay-eoup(iw%alPWK)>lDH0#1tPtT9
z65B6Bx`&97o4w<tS1=Z?6^9`x{bIvtBUz=I1~fkw<UTCCx1s3yMCo>I$G@?9MdzyE
zIwWj6J3O%Y)zve#r%?(CK>}cw9P0TC3jt$9HlqEkDB3}hE&6sD7l7Ilw-vIDZEdh!
z@S^4rv;8Z%ErMMz50ZBiiayzhZB<UEeXs`B)J<Rojy#qewrp`4vv<uo(OUpiyDyz*
zOR!Pnsa_mrab2jqH5z~abOwDfaT?Nnd3zh10#g0{ht2^=(Sgf7eY&60zkO^%vN+7>
z>1&Ew=7YE{_&UO9B+_zO_b6Eu1c8-mkeQie)>(FbRV4z*F0s@I%R4|+?~ebc6SZJh
zir@&}I-x@*k;YyG>NOeaAX!=#JP+>m8P9Gsq-0Tf9gHbVTEp<?`4YV#l5zTr(RE?G
zEN7G0v+!ry8aXOUP^dxOo0BYYq{9|&3ldo=7gGOh%`jR%>g0*IBk4lfw8T!|b_m}7
zzgY?LzaK1JVjsenw3m~dvQh?}DeA74yb}mm0cD?Y(6*n<{O~%KyJCsigR)xUK%gu$
zw!UHRzwz4sxYIC;V+Hc!g2@n23SI>d_>?s&0d*}HV+3NciA84l*beWP2sv-X-<XbF
zc_`0Nxk7v|j}u$t8O4yLnYDEM(+vpr>kxPa2_=Jr73ncyPIum4mP{S9<$Zl{$i3pV
zng;IU2Rsqf-$=x*nu)j8TI+1h%-D1ZQ0>+Kh=hmR{yN8y{*h&00BNYUge9=B&CzxE
z1tWzWN^0F4Ki>^11#vaxpTtqVpDeJ>FA&$qCsu+hEPb4V;elZP34dB9`0Hy2ZV{`O
z&NvwCuJ{+rq$gyP7kSInXIWt}oq6w=D1G^?$7Osy^W_NfuTMO@9^{e^7IFBniA>=f
zDrJg*%=CY2OOZ(Ss5OS+{f+aJg({Z~4;Du0j0<C8VCbjTs?G#)sQq_=OK}^I)xe8-
zJJIVZ^$Ss#%}Pr#S{a3E;f%MC`1o-TsnvC9uRU>lJ(c{$Kf1ln!ptE7bi3<#;QW=>
z{Q*krR>r*N0zlHb3)!yYOuUCN5U6s8y73Y!H=DW#ri+|-%(+5kI)kDQRbu%>#V<Cs
z=vRcGYQ)oaE%W8S+$XjUb~_<__<slujTj48#Z4DyTLI4LiEtYe3cElgeLh-88p>G@
z@7eSQ;)Dx><1K6ATiYG!74+5U*zS#4o}yx1RAm}_Sq8cbDD*6Hyt-Yip*jAz6$M`F
zB{mRz_35s6Bk*hMFTWXQpxjXidR261ai+pDy644o!D#u>ywf}Qz?eiq{~X~Ba3$aG
zh#%J&3^Y#sQkQXpNgjLHbi<}Xj36Dd_uipU4i<dUhR*0?2t%^qzI91F4gr=<Ufm}|
zF59j85&J*fp?4W3`?ro1k=5fwMm9H!7+FYnPTi6}hH<T4dk|y^hzCbh*Z`rO!&FSG
zl5IhhHjQ*yL=vFvK&h-Q!qA}c#1ip&*K5kk?HOsmpmo|No%j5#8{mgcR)5oEQzHwg
zjZh(!hM&C_MT(S9tj$U@`wb8;qfv8B<aKvhVlz323kmPD6$vtI_baO2Z69~vr5mML
zs($2|z&;6`mfdRaS1M$T{=RvmY1D?YgW81~y*rJT(Vk~)f<=P<=fequvA}6RfDNMW
zuu=y0sf%#D^8}^|_b7w9ye<(DG5TD)@~7D8r=m4nvK=d&>J!Ad<PYWc9CR&bgyvB*
zqRKWu_^UA5iole%k;hvS0H<vRSu4*{1d2#%1h{O~o&u-Fjub}n*o<U5b~!NF4%l=t
zfkkM_0LCFQ_)6XB8_^_jR6i5ISXC9VsFq@uVFf~jTA=kJ`Ax;_sl(rGNFeV=5D6=Y
z4gfVZ>qH{+V(6xwq95CqY{UQT#^(PDb_%GrjxS!~x2}@)1{iLv$6C|gAhc>uM({G_
zrQ=*GtEDg)3SPiFv5^3sLhnTTmPeV3nN5oYnp)!peRw~B6qp@kR&3+BC_G=VtA>8?
zd_`IsI*L7jHpKTk6IwJY!JZ$*Z(gGx0GdBVSzjd6@IdnY=o~YkJ->!qdmiu=`;@XW
zRsG<;q9dq#sVvoNHlvO2AQ+Ue3D>9lrrcJc^VBjN;YIx1>NI$JD~r2Mc&g&4;pq?L
zj!N$4G_g#lXB^4{v@?FGWP0O`mDW;iy=|q0<<%D}O!2%X`q);*_Lh6{bw1^3w0;HL
zaUb&7LVR!x;Nwc1;djS{#uTTF;)K*qykd|Pw4$9`@XMG@%c-o;qKVEGv*V_k@N?oR
zMmvh#C6R57edK|4<>98Q)3f|PYR(jC2-<?YDj8|*E6d9d2$R3mFm~9z8Oc8d!ckpG
ztL<QpwJc*snV=f#X)#A6Iyb1msrMX&grj0@9+zC}i1yF=wVeJ}ub-cYg?8Wb7Vy2N
z)=G6MfDzMEFVE9L^Gy&uhmrYwhl<e>Zz8*Q|1MubC=>_I02ekk5e=bj&o${zO)&f|
zKL?B%qH?e1LP;bLTI%W<CUPi=v9x88<ZlKUmth`qMtQMJyu!cRd0u+C`m4IQnsO(K
zutd!84jJVA!rW!8zqgLm>&92H$7WO7!-Tc(l0MH>3wr=sLecq_Vu@<)CE93za~491
zcSa^3t@0oa(7;#~g<vLM!T2Qw)?7h8DhGQq+Huqpy_OW2NUEalw02TutA;a~w7Xki
zW$<hQiUxsfX|}f-M`9nNA#vp=wyBeiTR1x}&H-s%NI)hc{J4BIpS4Wc#CG$v%3Ol{
zxH|6|Pj0o&cy5A|g?|P*$_yK^pkc_6L#sWmo@x_!8e+$>{keoG1I4wH@l>G>jTAjL
zf*+=yHrNvxX4j|zJ91Ox!1QA!@Y;#XqOr~MJlw3Yw~z~mruh>gDxZ5d?dMxBM>en7
z^+oceE=dsr>%G_m8X3WtNt+tdqT{roTjG$kSsoazYr*Iv^Gd0j=Z0F83Y$7Yhs~2w
zj0R?WDJEdG1w3>3TYZx03-j~5xfJY-GLgIJb{t@cA7R8!EAoBI6IW{jo(;i0=+@<1
zwq#O;`aS^0^XXqW4a(2FQ$0+Tnm$MO(7R9i%pR`WZskQ|_G6SKWzabbvrO$IuM)05
zB|YK*>LSb<&KDM^U}HYqup-&%>LD6zL~CL4{L|F2zN^3A$*k<J`O=|G&1pNyn?J<+
z4|LrJHpUNi-SO(No}h0g<gzl!!lD$`aE=o2UM~i2bP~sebs{k{KX06>A`>})p}SK1
zLgAS?-myyaDYv?Gtf;j0Nj&E#DK#1JaoiI2`+d8Vmlx@Jx47m0Da-)4VROLT{wS2j
zP#Ka5JF)iv^{_kJvsbL}<5FALWt_fT4t^iR8NNPSUI^*HHk+>dT0X{cJDJ-fbi|K_
zCiXfD@W?qBx(``n<m;t1IG|F?ECG{?Urt!x6A-VAr&@-h+BR>H<Z9IkhmHV$EcZYt
z_h&5DiBLcQ)}<+nj5%!^eNu8gZ_lv8|MG<S@xDeghCtDN!q7#atI3ePwVYXG!+57W
zo>o3L3OKN-GJbJ?3ji8)n!SF+hejZRtbhbXnR@+uasyq_g(tt-^HdGS8`qOr7q^9c
z7QUs2i0lecgDJo#`(fSv=)d_l&kv+_dGLSsXMk;#89#92iUhjL@wt|YwKg8d!t>!;
zv#5lG*PPJ){?eblz3$+qUgzm{&>oZL#H>;4+U5u%Ld8SuLy!Q?1Ph>nKLIjH4DUI)
z{}&X#(Tas+Q2#J_BVct)3fqTauRY-(J1|1Li7mB`yN$Wp=I}7?112=a=+xAY<Q-FD
zjjXoiRHg8Of_>h+-xa~?so*bc@Im|*kgr>rT%kgOB1se)wLl4VAWqyOi7|;17n-EV
z|B4`RBP#A1b%b7P4LmZeeW$#c>`Gn^8TY}cCEfdf>N>h09tIPL5H$W-NyugaHJ>Ko
z>m%MhZ&vx&1KlfCk_N;Of$xPe1T-UtXbcR;R%*B~)f2tv93Y)s^JGnWQ12f}l{Y?o
zFD+>;?a^Q}?mJRGLm$TkAdL&Zn_b$c!0_do;$hwpUK9L1@Za;t>3TiEP-EjS{6<or
zo<wM-i0sKJlVkxlGoTamtig*!f<;obOb$cRxy8_PtVoNy0W0<$7;CJP9+8_*XSvjC
zRbiLkV#)SBFC2+`1%dFLF^oY53GSYY%6ggeKax<v79u8EWpjgz(S)1#ESnCKLQI0T
z#}Q6dqa;!;fbEJRMot&UKG*|7Nux=8ukM!IL3cpB35lJ@Bj%D(hm@_lqL=W-#i5T4
zj5l=@z=gXMCHp@U33hl+pYIhy;k(<dzJnrHLZpILQH0F^IY7q0<SmBo8A`YcAtucv
zlFXd4b1Bg$drkWsMBeB7W6aV{m^rCXS0)*s=-H?cX{bd+<XU}$?j#|;Xv`)Jjy9_<
zzj9_Hlg-e07uuP=F2%i9^30HY%PF7WwKo?5;xJ%=>m?)3$*;ISY33d^PR^$M-i6O7
zpr}hl`&3&AwCM}QqvBP)1@a;M3EAmrY!IpVHqJ^_4k|`flbol?jD==nSI>oc5!pIX
zEKf4X&EL^|hb<jAGZsl1!yoX0*^a?2E)x_TE0l65k$@(*>(f~MLtlmgvyA@);X-Mp
zVM&!VdD<G4$Pet`fe71QV{^8khbDI*3<Cy~+SeMJ?_r!Rlut2kM;ua9VK(KuoIh4_
zoZ3us&56H#ccyV%o$pF6Gm*hP#PtOR0U?gp&SZ46jS%gVsl(0s8+unJu}H$1%75#=
z2rpzxDLK4rGsxv>BKqPh?gOqY_6WJ@zf2@lvccEFM4Fp<4-3@qQJ`NjO9eOx3O7c?
z;&PUqk)&WbTb3ozNG%dzwLWU$LMItq066ZAd5zS94ofUBxE3E~P~*{?^)95qkk>}}
zZAR<K&t{E8#ICNAN5RJ6J7k^rSJLlQFjOlAA97g>T=rXF<6tu5TEC!EpRCw{#^GAg
zCFwVn1R&%vwHH%^=DE%|)}EW5YoDYZ&*DnG*G(Ejy4nha!BS#z5jY(e)!S5RPD=lk
zCSoF;%zZwR#U#}b-uL#D^LAmEI-7Zp!e_Qu+7uOL`|zE0+{Lwq4;SW@h!t)~9W{Ew
ztjTTQwFA)$Kk=K&?aWUjf%Y~<foGwA_h=Yt^YAOm<;<m3Q&!L@VAVb@{CLq&yrn!A
zH47#wdE1)Z^!;)-KU<Q7>P{q*^O;2B2!d~#EsQ|G`wIv*0)d&rj7-lXpl%c0XCSB5
z;!5h4Va^!c-%Xk(X8CRFM`$|NXgsd#R=6{(#XI1&`@Gh=Y1v7Ne2>J`YF$`v0#shu
zqWHWa;QotX`X#oZG6KhawOjsma@B5QW;=@+zK|euGZ52s2tY^y3}n}kJP2|9EFPEl
zenfM+^)|zF@z|044+d5GF!FIZi=71Oz*t-DUciky=@HkO4+W=iP+P2-Cw&`#3%J1_
zQ=anxs>o`%O)Z^KjP|L)v_cr(r5^sdyF6(I;YkT<zDJ>EZ>sPhqi9XRcdz0I5tx7-
zRO@fbrKpxHpD0OnztkkG3Bbn?*e#F<gP@ZqKNzQ{(a>m7mfN=`x&B($kN^;`-Opl8
z+agluO44p*8=O!9Mvik|H+R>}fM3%MF=&22KjOy)%~xUWEURn)Z#v4an7tH;EC@RU
zo71!t^$MY}l3E&o^nuFc>XrV_KYR&7pkN)Q1f=hBq-PD2GBKFg!pYvXJ&Ujt)=4+#
zVvp&Os53w#;Y6U;`Z((9$X%tJR&H+T3ROY?K*2<B#aLL6Qhf1vKr98Im;%Vs`%l!N
zfRixOqrha#IdSb~iwgU+%-II&mQLGelOpzSuc=$OY|u10iC2Vc&(OdH*hDD#OZMC7
zwW#dG+{oXohgy>f%6(IEq;3+d{4#QE3qn1a2NWBv#Hxw}bJ`_J-t$Ji=$=^LPZ$e9
z2yOfk7@v6s@DWioLJ!%LERx+sz=gN4mRajjjzMpAk3)XOKA{zO{Isv&Y}){)%0m&v
zn~m6?_y8}t8{(%{CqarA>B>}+XR?X?OFjp=nNK@^b`#y?9ho;W`O?$7%zyp;UEsYi
zKaHvnOEUh_;2318Yah+mTRA-~xfqt&?XB_CqY56iWwKj(*w@k_=RHVr{|)P!da~B`
z(h8HmRY**^3}b*Nqg{}>uCu^@|LhfjJ-E?j*YmtbVsM3_X`uElMm2`SY<*w2#r`@}
ziIzLPI!h$t!5V84&Jko`EU3#^V~yvIxI6`|@(|}LcQ?*$>&#Tu%_Ub(RUN7oRRIMo
z_xvFC&PUPS!3SPU+|Y(V2iUFttAGvbXG04(2!(~D?nn#4`?OlNcwHLN7H6>Yy9A`2
zx~(-8ZWw^NCPK8GN}oFurBzrz0dprnB4v@A8+w?id4g6CA_uIRPV3PLS6-yH$5M<f
zrj*Gey`1ULX>EWTS;@lA%r0GF8*XVD>_z@ukV^{vuItqNxG>+WIzUo-*NNsaX+D?0
zuHp!rMiM5{aJNFeh^NSt>hiT$2(H$0pZmeS&K~H+T&iky+#m|6+nn)&4M+$7xG%5N
z&>XJ%I+MSxHzFm=sdJw2&lfi(!`{$q))}ssY@tQaF7F1nrV(q;M|zeBM3~`A)9n@S
zeU=hF>U<{GH1g3g`z~lVzg7YHPQh7Q<}Fqzd}}VZHda6@ZMtGZ78QXf1{(xhleS9x
zwVG$DoHJ-~5(#{SK?n-7e*pc~cghwBvln#XwiSV~m1<uZ9TEg<R&ihGt8<sIy{q1+
z*x!*34mW;tVmIDe2l6`q?Lhi-Bh1|**?JU}bB(xf;DI5#XFwS$oX}^JibyYiM`Im`
z)fkHECVmBrT`s9BufljTk!m(QXBBT>n0+kFSX_*qZ7H;8-yd)lSc}!croQB4Zc7MZ
zU?_&n$K&B8fZXl4Cacdcusm`1JVO@+sx>e40+D)y-H8hcm1)CiC7lMiYRNiF`C!p8
z1>qX})I^w&FF@?{?O2v)oP5v4@dxUn4}*sb3)SEfcgLE|TlG%K!iMYzLJYoIg7I3k
z7zVn?N;z$xkW+E^%S@h&eRx5(h=|Uh&Smb|I<#<72ti|~`PfILAz967s3$@AH~3$2
zYz;|P3{EL}=`=8`3+zH#tZzwwHk_!Ttit+CevSE=h*C0WHmNP^%oW<kdt@rKwn97Q
z+9mmbYYqoosJ<2xxa~w|{#dD^xPklYBncO#vy)1m@gtOd_-rFx<7)}#?V!lDM`JHW
zw`+?2fJgCN;0)FU`c89hk*;(6y~ea^EBRvum00Q7HscE+qf5D1|N5;S!xc}7!c#5Z
z+hlV*E|Q;XQW2*JWBB9f_MfH^KB0app@mmv&>rcE&KV2zAQ8rekqUB#mPIf~7%5)1
zv4e=o`j5O{2&$dN{uHJqSR70f&(|@71N&ObTrAK_HrLow4rLo->)^5<zj+AH-*$;B
z62iKXoilDrY4o0i68{y7g(T33PV#^aFw|Zg@KXKQt*E-vcM{KH=C|kdr4bGR&5aH5
z#nGrP$aY3*(3n|`7t*GVF63<cr^xh4>$P{anbZ(6*_m@K-)ObsgOS8VrtI{tmzQiR
zh33-y=SU3r=?sUGN$4~ou4z7aV0)qeUTC$fq4KwEc^9x{AOyStzbmnO*S~r;nt{oM
zr$356VeZ`)o0z*-Ed+aIwr=&<u*o1tuBU-^9a`}()^Bl5g<3azxPDVD;A3t}0(pms
z-u~C?#~HikSQ=0U!svhigcW16sJuCWXVr^0R78wQ@B{OsP~+LdfLY1>Q>W&g3N`uM
zV9~A$1Dp2f^yEqfpCWSlOvVo#!kYs1dLL|xrR>}%cuKO6oKsYoaZ~_!fO9B%d=93W
zxMF9`uAx2EKA=OuAQET~@TWC0MxoK!T_<$9@@Rq$!=zaJIFJG~eK)-1Z&4vnMdp{1
zpB~!gqc6t@pXu4?j7-j8p{K066!l;J<REiRJOhwwFq>AK%RYwv%&F8)5}O_vHnym9
zO2xHC`4yO!LU<$<RrTaRU)~Hl9nE+yqyJ8F+&WG>EDWGz+(z;~UcZ*n>vjWEjby;M
z2W}>DLjwCkmwj4Zwb4JOEs{#3nm>DWMYPH{PRIUBdm}(wAx)!dzr2sj1|vbr?8?L<
z2Y*m>3q$;PATSqyJw*tE3p<|?mL(nD)|cYT6R-8~pvup!$BlQzIxFg_W~!AUJ>q?X
z5JJ+mY)C!~A<c5(kqVxpDeZfnr|u_$+M~)B3#`QNpi5sd1NpG_TF`ic0V%CXnoz|2
zh^iKde8Ag+It506G*j}Diba$*Kdw{(+lTNDz=s)e8spm}D6StnEN-UEE16mZOR8%>
zQMiTxo3J?NhRGI|c&zQNXROf^6yFx?I3^VNF&ov#j!fcIaE6sFll_ex{!;FnBAh3-
zfYO=hF?Wn$5?D^@Ph6XBjyyR1MCYIPl(WX19Z0z{XSk%Y0LC3mLrWgFo4E!XNfG{t
zu-e2H(z{eeV`#3X$KfX!NEkrZGV`0RwD8ykZj+-BQINE9QFINt?RdU$Ap^lbzy`(N
z_6W-cG;?`i(V%e#iV4c}iS$|*f7=osfIrmCQ-DKI6}aeXK(GI4(0fyT8N(=vnuc`X
zvq`!PA&^2{r{HHImkq70wnd4)0lOp$pVj=Jpfy5Dy_Y&UNOEyK;}N#&y^OI&@aWj1
z6}#)S8s@37okoAWykBWq_L#j<;owf)%vX&?#owrQC{@dn3cEyYKru3W%nlo*3f1*n
ziuTe;Gv+V25(2r_9Ccf*Q<DqLao?*;$B}PrD)ZFD3#iR7_(`>9>Q$?f)%49_biTFs
zTK$QCoG_lyG1!4*CD-ZgH&XAt+stbZy*5kb8Q|K{)X$We2p|&{mDRH(I|anB>8|eT
z;*+MH!N(fMsIOgDKTsqW@exd8Qj*Ka#5qZP3J5U*=wp19?WaSwl~j3*D6*>OpOI^&
zo8L3_YE!%;LtQI|%=tIp+Mu}Vhn&a<4_i(uPs}T{&1@O%qi}$-Af}%$pf}+Wp>#-L
zhyp&Gbxw)}g_7La19;ns3qf=Sf%q*6uLJ}3Mom3vBl~5$DA&2)oUbi6bW*C=smW#q
z&qc6zc(H<4qV`=C!IIo?#_7D^=At(9eoP<yZC`xc*nj5Ae-8LG;m*|aWJRT%UZ|qX
zlK$;&EQ%?K+i}OIcE_^Q=$-%Z>+^tL+k4<+18|Yk>2<DfebMW^a)k7C;|f>RW2NjB
z*&jDpY&r&5r#1@JP*-DTOfC*%iA}_<jGXVG?Ii`221)W0N6Lc{g6o^E=3f$0yf4Z_
zHB)>RV#hPi_yc8f0(90-!fITL)=p#epQVa#l>;w3c*TO5fFBo9sPphY@)D)DI4G*>
zJAu-%Rzt;`zkauON1S)HP58Zqu>cAKxsVcdr4yb87^vN%Fx|0yL27mb1`J_?xgx8f
z4CN1pdTGp_QeX!8<$ZsB8_P~qb|U0~AOKgUdVFEz>QEr`1q+MHsWKxTGhBIz<N3O9
zQMpYXOd^IUSJhFRCFg$EHLnk?Tze<#2I7rLf6fgQfd-K!XUAQB1I#0QI>iica=IE%
z|6_3usF>58yS#=(158JbEjJwkRFy=^g;I12-O$#Sz$y?>Qkj^GF?OZ@fMJEAIOK%g
z*@@wVVyEN9aK$-oZ8Cm;#A-5C6Ns|*@Tw(>btrJ2q_03GVG9A2u(>zN7oJw}G3{XC
zqP?UF513!ZpSC`Mn^J8SfnzkjHHU|~ZHM}Cbq~3PYFXI*zSw$X8Fo&HvA21GCMDEg
z$>_Gohq0M3xM=}Kw^HnWU{Lh`mQMavQFD$h<QrlAE)<y1HRg1kLy{qZJiNgs_91_U
zMQJ0tEa?c;q6r>`iA!lVPbSFQY6MDzH{C>1YwP=W*@2>L*bw^*B)w}kXO2O4XXnY_
z4WpM8ZASXXU}P^Xb=YKvB(Yqth;BPw5t7R1V!Z<rVI-AZDvM|@F9$J9koHNPcR6kw
z(NmOZbM15yco3w5oDGZiV+pRcUSnkR0qNFUL;53NR&7*Abt`3vj1+9asC~l3lzk%7
z1LlC#EMka%+qw0ZfjDX|55Cgni9o`^p7vARiPZ@a#3cMHa?JPI-;Azhe2%1`9y%!T
zwTDrg#6T(Oo_1BbYT-9WwErN9I9DrhCTy%XmoY^((0ob3u{L+LKVGL!77nowZ9OXU
zgFdl0kB*Ed<3OWg4{FASh97!$AMw=ab5YSXIAF+x5LuXo&c%rbrl&V@zFQ-r-F8Vw
z149*aYLoQjhO&$`LOAD6;Hw2PsM=2!=(nX3{Xk<kh2(#4Pv|*-{hx6X5RcPkrqqh*
z$CkMBP>M%3sb~*scDM3B{-r&Psqmyic_&veq;=1LR2Uuji`IlUKi2r=556ifMXVV3
z|2|&2)9w}WN>EH|gTf)KzmxB5$#1!lznoBA)I)vhT^?6%nu@S0qnXlB%G{bf!LE@W
zoMu^ckaB5>12M)+K5iivgkH>jiCT#nAboy2yQvQE)`xSjf4a|rXM$e$mYlR8v<Q;w
zHAr!vmNlC(haPQcNmOq#pow+-oPjm2Dv&3}W{)-YmIASc{eN}EW~(HWuC8WFM?uC_
zKz^mmxMY^D;Ajjkdqh}<lb^G`T#Z-)J*!6pNruJ`_zIG7@iH}#G8ULcFz?TNb>m_4
zd>q^<oZ-GDIM{m<eH|*Lms+7#fqH_yYe3cpabZc5p5rrHJ{=8;K*K0A8T!=>EQDPv
z=9{XbdJDGlJvkkLZuGh?Jb%z1`E9{ty0r?Lv&>WsyQeXL>yY?NQP(I4gY5RGUF~|!
zVlB-V1H9KwheHl2w4qT+oM~@9fghx&!<{eH+C85|!wPt@%y^e3Obo&1zpO~uJBHe9
znC6fRGr8<af%jAsT)Neo24ya8V?)r5C<7b2rJHjuZn63Bv`1&~{`FCmIu9K#;nQPD
zI}Y|2sF=qZ&9FQ=J!=3L4?>bRq%XS|iDDk!4>(O{apC^ONly^>WpOAF-eEAOYbkSb
zx+V0neOc0uZQ*O-jkmIuF8!iq7Jh~KQWPZ0)v(#VkpbrL?k4&dbT*&MvV6_`JX<r*
z`T@+JUa*<@lvx-RHfn2;klqYU-!m}c!<Fm@LnGdqmK<Qa5a+GV*DY@@Y&2;!{_fVZ
zg7wQAPd@dtOks?rQzGoWiD84(-n{%KY%+iPzM5h^WL|&{wpc}eyXB*H_-!DM<}jUb
z(kCdJH|6ut!+8{gXH6hXOn^O70_Igf{p*kP5HcFn%Z+gZi?kx-iID@nmP$%dI$VMi
zp%7o*OBI*VQ*3$zLA_T~O?4PK*af1!J1e_p7rGZCHD!Ij<8Nnt3h}<Nb$OshQ~Z$s
zz5Cv>hC}YKv@q6UTpvg@D80r|uVL23FqFs6?Xs_e|9wcX<k<!5jmmqr!Cfi334Atm
zij<jHLrN6hbS|SLup~gdVT(}hj@$+vMGY!sTBjw6Q9-%&X#2>aaW14@;W%xio7>6&
z>{`rM_yQXbFhzKp3*$Ta<Q~z$#Yk{&h=&U_dbbw_^1U?AA>mdnLSFw{M30rOO;1wE
zCSQKZCR52BZ`^S*S^*9opB)i64qk~Ebl2Wc)CkozokC}u8*xNf@V{a`OWU{cwnD@}
zM&tisx1i=>oV1V9d3+H)M=U1gN_mA#o81w!!jPH%j|<enWf&Zw6T8TP7*^lYF{l!C
zIc{Qy6TC^33r;EcWqx`KuGX`>Sq6ygt>`XnMaepod9Mkg2FFsysMABCaV@0kQqgkn
z?S+ZIob^hn@?>Pi-A6(9yq*>6<muVB(-{vWQOY=|-03lAr>B@*Rp52L=20TG6_BMr
zJq0MQ19-=RLCKb#z{4bx!aM+mX1(8`{@4j~WycpGpjvUg?b%rGnKXGDS;6;56y&rM
z>=P0N)^hSv_fHigc}!{kZJ}$nJTG&vsv0icinoM&!Cs_C-6n*%<pL+I1}y0qe|pm<
z7-Ftkx{Wwr;;Qe7v-E2*w-EJW+N14}-6Eg>DxETzKP*193^^EhBn>a3G=L8ecD2S&
z2b<rXB!fLCTsLM#EFRx|K&}wH6@pD!x2qiEq(ut>XcK}_@{r_lUf)F~+a4*o$xc9}
z*lvIeRWr|ab%?Y+?%u#T9#pX6za3Xta&E-bge+ppuHqLZKMK`$+xGFfr%z7Wl0v*3
z<QHM*PN8FaexCNh()tUpe8V%>&^(s!s0!^(S-FzWcypyqf9|*aJBzLm^rG@Xk->iQ
z=02^DfK(mKKyRqnT{1AUE771Ns$l)p#d;k0+-=IBb+jeBk>sTn`ZCXob_1T};pdZW
zkO0znrpO~!f?n;+OcTt#Ug?={j9T1<e&#O&gds5v5pt<g>h0Hsr*st|VxCrr6eGQU
zO3q_%dPq@Qa1amKs|ekxI;}qvPS#JHMop54z&rqwgdjLg606ELO7!4q;~0h7pD&n*
z7X%El_lh^4Si-Aj`cxYM$5sG*_Sdgc|07wBhucaGiR5>Xl6t}?Q^`DUUupSSo~JTV
zQ1q>Xf+;=ad<5SGzszp2!Y%+W4>cv1R_)M&o$J}fv{=?p3liYhoKD@HV+aU9CFdUo
z!MR!yJClf*d45mRW%9Rs-UQ5#1MV+y!Dy$VI>K8hqC*3}aUk#UR+UdKSn{Eqsg9Jg
zJY=D4;Mbk;#`NlT3z}!cnf`tM6N;o+QZmSR{$`sHBr8Kz=xHa<&nzs~J?n%-t>&E6
zvg#y)YhPIbkVyJYgZ6qj*Yg(Acf^ymljjkWWTG~9sTKCBERR$gTy(FSdhqI^hGNn&
zQZ+*+mZ*ns(WwYz&OE0ol)aS~fxmWvl<#S*3LKIa9jGILSNVBT%Lo6gYLaBO;+JG-
z3?2`EAO?Sn=+fq@o$4W5D#|3jO?}LJxv-4Aq71lifT*iHy)90lp47jL1^`=49%Ogx
zZl?m7YBxp#A(emT>4Z%Du}Y(;6Y%Q&Ox(v)Yte#}jFG~9)OY<Ln6yGg>g`4y#>1VJ
z4K_c3(sV{m#Vj>t#u<<qrt@yPD@a8e-Xdg{5J1@~1JGg<2t>`t?vP#Yz6cWU`*PXF
zX+rm)5DQcO<dh^DQfo#wpeZC{B2}|uS}ZBD4HDwjb^5zQ8C*_lLLuCH2Q64#sFk*R
zYC%Sxd}^1yA#qTmesTm1s$;ZUpT$!h*Z?#-mWPj*rFFa=WnTt)l`GKhpe>JG+qx3B
zejm;BtMrXUMdT3=7_MAg{(<HafHLb&+x!g>4u!jorGWqd00Gek4FCA^F+Ua)&_JUO
zj7hOTao93TNQ6Fl=Q?A8UR#;P_E7iu8fx0eR9;e|49A$x%3GZK09`>T#ETs&VrrhD
zSw}@ZA-u7nD^r)V{kF!|hhwS0C`OYEqIeFc<pvlai7l}!nu{GFB2Ivm%|xdU;r(pl
zq<xk9n;kwRT?h(df)3`$6*QE&!<1Hn;Gdzm6KVfU?Yt?gm0)RO?jDvw#c?M?3>Rf7
zrZUaZ4L54S+6kN!#`=X6Y{PSu4aK0cJ3<<!_g|c?(-r^~h`rk7-3S5pYLoNrx$w`L
zJ1(8mv@pmn#{sU9n)mE6@Gn^AD-F?lDTC852RH_Mw$7|~^{LT?J?P=cBq5ZB0kXI^
z7!zn%rfaZ7`bek%QgY6Re^0BMtS8axgCYFlatYdI-m_MaPq9m;y~_iElVkDsiuO0u
zqZ4jtWeE}_yD=3g)7(!C9Si$Tmhxnc#{wzMdTxHFSjc9sn6l5e;wy@#$S(kNEATG+
za5<6@(P@>tp+Z7niWuan-bK2uu?UlPruh5nL9Fm623ZZDxCTxYUZ5GivwvLje3gGH
zOq4O?dA;tPVthQA=*2oOX`Z85=LG&d=X7`;4j=pIErYtByx0Rt%#Eh4+n>B|a+d=1
zT<movHR0PZJ1EY~X#=cP2d_gUmt$KdD@0I;tv+j!LK9LQA)Iz26N%jyR+j)zwBPy&
z2hn5Q)0~Q1bW^d2N+-+OD$!HPxfLm-0w+U+Ey5X;dH=P+TXU9CDb@$t979^P5ZiY5
z3;we$uFWgXLKJ)tL)Ad#c6FPE7rpyCVz#5UF%K>ofnOeiX9c8+TEmNhk3GLyL@e?A
zjpjG~JZM!g1X7KtU+T*Sk|BFQH=_tfWzXOL?|<CLyO{DwHjw?s3mo7WI0JnM6CCrX
znkMGz!)LpdJ6v~l4V*PI52N%yy7;{rJy6vs-u0XYy!!Lm=C=bYQD?(Y-sy(uNxy#m
z^R8E>ffm<d9pLRNtf0AsB|dAEy&Iu~u-no|F&ho9$i?QU{AhEAd>SsYtNJ2nDQj9C
z>}<jeui;kRdEzuUMpkUGvZ&Oc3+0r#@0knw2;x+A2)5R@hND6JS}-sDj#Nd6S$6~_
znzT&dAj>uhUiW%w#Q1Y=G!k$qJdtj;`qz&5?GDz#uBr}`%u<3}B{3EESFktZ`hj$$
z71S}K_~U{Pc5*-)NKH18gY(59vckle&j#7p&sjzo+kC)ltai{_{9@=7Tl1ZTK;Tvk
zA-`FJh%6hZi?;2zk(G+Ywsom7yh-iBT7pG*Ww>I4fNA&h=6m`-C}i6;8Nj@D!g%lA
zcH3TK7E>7D7uR9eLpDFW;A~A(a#>;n#m6^ay=}9*xxc)vZy4x6r)GG<O`=fiU?{<x
zx+#RASJ})DYmspT_DyK})EAbnBdycdZOxb60@rV?v(l`e>!(8UzJZzT_Vsaf?i7$I
zkcKZbfFu|X#h>?{Y4DrfwJUrMLxNMrg3_)yHd$28QQ(xt$@F_@ji8+cCiw{rk`_2c
z*j?|PxuH9mB=F%NXOP>lqK*HH<1ZlsI7@@H{z0|rh(akXqoT15;6VAwifJa<-#X^1
zMZ@Mw)oc(F%yjCG0uBpzwYUQy6hrij=~?wDb?T8eSPa4zy}YHS?2spL#U5ppD<%kh
zNvR0zdFGx4$)~P8-@}-HB<PH3C*ipS7y6f4J#a}$EFvLZmc<i0bDYR?7DcvH&Z)^b
zZw>G;SC=gpG&Ia@YJZ#ollmt=3YS=%MqVN-<>yjf1*07bWtKtpsK+{zE&%%pn+qt~
zy%yLO*g@Qd-+#4u;?!xJ|2t#{A~@c_8dm#;M#8!g$DyNuu#zQ;OZqE@m*NoF=f%=v
zDGQ@A>DUIWSxeaKu=w&(>}cXRD-22D)CuPHZf7;q--Z=7G4o7bT~;*=E&p_dRV3<X
z!-^na(Q<%952mz`E#tqKD}HRakS!Q38w4PwaJbIcC^4&LnI!6I6IHtxQrg<HXf2o(
zZtiVeHakWc?L+E_hj%6Q71bo+i-ERhk`FGcnUi68lBw0NC~uAEq^5K2i$tjklY43N
zA9q3IveufD+qmywG2Q^}*7cYXzjt&u;;kfdzHRoY;>=0_QUr$E7LN?UyYDF$BS8i6
z7C0iyCX0GnmhF?b05yDS5|2tJDrlT1pv#d3_)=`k)uE&3t6Lyaj+>YOj$fN;67y%=
z_4luf1X<QO)N^&N8;s77^?}7nsP#ulqr>_z%>f_l@r`9<8yoxCtVKPUvf~o=`563D
z;6Vrv48p}gtNc9!s>N+i=-jHqv(jdPYyS$2;E(+wm<fzI{2$Wqw9zhWYY5at=F3A{
zqW0uI@baGHBWpr~8z33f4HbGW0(|c^o7uv5J2i8&TWb{rvl2B!hg>P<wh}V5$FKX%
z&?9ww$!|Mypt)m;!dY?xfkqout?`tc3s#jQi*slz?%4~o$P<5r9?!zhp!R+ieFwAY
z<(V_VjH-ij!zeh-$w{qQ1l+<E29NJZah#Fgv%&ulrAg8$zuBxiN>snkah!XX(QmU#
zIUa6oK@A*!hQTh}t(_XWUi2Kzt#4a>L|AP;9D-{J9kRqk0ytB}3B~9#zW2Z$?~*i*
zBS+d$Q&E@tvJ?V4%j5ttVwC`^D|tw=PAD!VFW(vfm?yaIaINJ(mPLzqrQY-<5Bjic
zl*7R^lU%Q>LsJ_=@gxuq6Xc|Ml^$Dz|1+q+rqTiV&9#sb$D7#Y{py*Zd@KW^pb2AZ
zna48_hVG>zidHfliW2SuFSsBO5C14iyTD|joKW`0*f^J%>lhg|=rh*Rpj{%R=1=(I
zL6YsS%NIWOw!VxE^QGQ8WNCosZN#h}s-giv{a%3FW*1l!aQ-B#KU#KzCU6pRf#4q&
zFfc;oH)lJJ*ST;ee39}>Ge%55HSxXi*P@VWtmCE#lY5xGRY^&Bc2D++ICu$SQaFWx
zj%#qMc?J<j^fv`A$*<B8{~h(DyrWn!4rn@Gm1?4=SvgB(GNZev@H~plzHu^a!bt0r
zZsBNWB4elh7jl2Hm{Ryd$BCI0W?-MT;IU+y>T#KlK9q$#M-H7%U3)mWW9T3%)GAk3
zzCt%AHJ%AN$edD~2^#jX6Dov$)<${b2Oxn3phK|$QR5owy>E|fT*%PY#9#rpcIIRo
zmVY|bf2tnZKcsBHFO~FVaAfkE+E+=Mt5K3hruZY%-y`6SX+Db1c+>?-(_o|EiWP?I
zoMlrxorZRtiibJOY*b%q3Ne$#sW-{%@t6D&UKBT=wcisGVDhAf<X6m(t?d{xj*(|h
zD9Q^JmjnI0&97=GbOsVr3VEULk_nA+L4ujeeAolG%m4S$N-}__7mblhy@8Tak2;@N
z{3KK4qSxX68S;u^5UkvRM=&rBpV*W|ex6fn8&bkpe?fz&xdP2hWPMLNjvJdXeUCG`
zrNaTW?1ELabp3^IhbsC1w_(kI12NlL>cQaaPt1556L&5flJrA6<<08g)`HB4=7kG9
zA-fc3g1@~~_~cWV5I=2i?Q%FkTwl^0ltoCc(-!_a8gj255u2Hp;jp)vUA;Pm9=Fs)
z9&0gTu{~I0Cl&}0kYT89BFfLv)0Tz49B_}7y|0@on57u4PYD3vmqII*58x-eP@lFO
zZ3unlb7%SH8ESrHms(TU@FC>Ri&KX2ntP_-x0n(8p_QBxCRW1Uj%OE0e8|PiZHKM=
zFr?>sw<sMXiWjb|8@i#>?65a>vj_5;Ysnrt<cWZ7BtMc<h2T?))*Beh#{maW6%fs@
zb>Xu-Q$HZFcZ{zfAe^!#Xol;%!x8gugIaYs447z|-{e{Vbvb%##kWKUk6kcoe;T`b
zgakaE?3Ea9ejTy*L8BRn;67G);4)fSpo$+R(X$(+&?s`=^7gIeVp-Q+1IyZ}9up42
zT@eXEAIZQ7XTSd~A{U1fQ)e@F19<i^q=hSZJi2!&42~Cz{&LQeJ<|Qvk*F9-1V+gv
za5MlwudKPPiDT?P+8U)g^~ci5*sXlZk3tll20bAP$Qxh16TSE7-i&_AAx?`NLAUOr
zoD(AHU1EJOjmzX^vd@Jr#{y-8z2f?%sUZUNUXC~2lKiJ3le-PX8AtL@8IjGSKC?X~
zm?+$FCSZ*$xw;|wnFUrraCMVnBx7_&N|_-yKk0!<&AXV@)mqKyK|hDOyc1hS{L>!s
zQ1o6q%2)8iIW!?M@wVi`X(gLx)q3Oso{8U(H@o2u-2n6`WPTN{|1t)EY9zt<-2}u8
z<SaV%(cjO0Ijx#3rrhu`+n@uMcC5mi=Z<Hab#{eCi<m{AQ6P-uCsOOaO`C>6H8ElT
zJ7&hMZ3ujj*4{lt)Zh^=Dmg_Ug#s&RTmAL%9GF}2Tc9^e8r#;2K|znIZ!KGKKwTT-
zYvO>~WNCngj9!M;lAlE^W5ic4pU`^{dIS497}0@|at7q+><mt(5ZPqFgG=|nNT&SU
zS98aN0q*!L7E`zj%Mi=hLZmx@%Tj&?s*L%;P$DRX@SFg$#1v2hoJ6mBXTOHJIUP<&
z!z2NmOAY018AN}@L+tp@p2YO>!$(sc#ACXXM%)&bQ*8mew`=%Gk@qz2f+rKB7+Io9
zmbx8dRn0gpVJ}T_q*>yDC(&k)XKnHmrjzb{07uW$)M-~fM_q2*0++8IK@{Qk{K&Y|
z%O{m&D{Y>O&U5kNgu!7!5IFD|4!F<=lr(k2$1HC-kPHBi!~5*31WHOr8|}Uz?ota0
z;!s~}6U8``7i9E`#qh-_Cdv(qddWQUFQKy=@ri<YTjLFukw!8|Yh2jnPv0MQIKLko
z%#(zXnj-l&qz|Qi0zO)aB3m6k``W3R8~F9>P@<KSn8#w^c_uW#J+L@z_xBd7ejkC{
zT_E{!8j8bgPs>9g818KZr|h{yHsOdP?J;RwcQPU4-R0K;bc+E*ETbvfGE9&w_vZ>u
zu?h{7Txw|5ls+tQ2gHq4jLx|l=c2i3Q%6?GE**14)qZS%8=bfF$7{s^8aIJ#8Cy@=
zs_tD%cYTF44hBr%zphSnE(1McOI#D<q1S^DQs%K}@JImg0yF@X?-Ekg3>MRT6IFnv
ztGRrou_5#ZEBvPdxioMb>syP=i-B%kP6jl(-W)$PYc3w)N$-a~Pq}AB>V3{6;_I&X
zQUgORf7Og}*i5U7?^NC^36;HSVw#rDDLB&VSPXN66>$=vsA74rZu#W<JbrGDC0+ZW
zftxiT)v)IP+_(X^mIZoMVEV6otY>Y3<@Z4IbSp<y3#*O^f$p^rgkvm;8hA?F04KjM
zdCfyoBhJY{MPdW@-sxK%z9I(9LK@jm5}3J9rh7O5(flEdV8e7cBmx}=*~D384roZG
zJ9Dh8_E3UtXv*Ys+vx5yilQfLuaC};sTlA!K@RuXb!zgTV<mPMyy3jFvc|<ijxg40
z;=<AK*Xj+$SJmG3p4aCT+c!9z;~X;xF?nn_ZQS<4!lU*3;u&HgDXv_pxKCx64)&0U
zl{ujq-4UqILr?{0C|^6zY_36!i|%(PX3>T>X5G_U9KE!K;Fo2bg^WJe&a^4DAC+BE
zNxhX#?1*4ep9F>_nWrH3U4Y%%za8gawSdJDPYQD?{!7-z7wqkta14=a4ApEjhz{99
zH|$16W6SrL6O;sSMUwy^nDVzv`T#|a3L0Hc;%=S_S46NPld-5~q(N!#1!2;*3*#r&
zEv2JtR(=C>Zg7fs-C$}LvTi32{{*v=T;Em+**;8u@y^I-i2r^cAp~DK_t<`G*fhF6
z?Rs?B^pIJ{0NHukuGd8$(P{-5)u6G7abG@hLe6;iI@-$W^QuxD=z4Jz1bb^Tp!BIH
zy%lo{skvN3kLD4Q6_xID_1U$S%tSdW{>;+M#0DKAm8dNK!?dbe0VO<w1AF)++T*f(
zGo15}l%=Rsrzg3L2^SAGPBRftzkC&u>9;gC6{oS7t}2s?rwyZNM&hn%3t=eT{<>T#
zY#6H(6P-erhpUB@!7s&UH14C+VVH{L1V)&~MSlk3dVu$rB6rRd<+@97{M-5?XqARb
zFlt*Xb~cyZ)(PD098_Y@-kOVr6YV{VQE>4Azxqih;<F~ix54lW{~FkIBEOmFAW_*l
zE-PrL6bZWROF8TdGFRyt9XZ6Wt&u)eakW0feM9wcexviYM7XqojT@@bbi{N|{^llh
zokDHwp#Eu1VFID+&t;hxx9&x;^4&botL**4m`{&LK52sflx0g~REZgljFS^O^oJb;
z;YnuP<p0h1JvrK4ae`&?6Y-A5B6CXt+@USYJVg$s8%P&huNAT^uy^LHT@AY?CrwV_
zm%Ooj=f+)=NM0xbt`pB2Wk9W@`}y;}ppr@7>dlPg`eAluE4CdPXUW?TbOeer@(Z^`
z91g0jn^2;*3Da_A*+7F5qR2CdoCbMiM$>wkMce}to3cE%sI8l_@07SpucXD}jej-3
z+7wfd(vu<}$DxvN1_9D&61Q%g5p1-@&C&7(pd~hVJNW*6ZP<yE`&kj$W|}A1sUBrL
zGEwh-85Fq@vZ*>*u@!scQ!It*MhdME13zw~dY7i$?D$-xfYnq>XPD`**KH0_rDXg<
z<}?Q-hBmzot=2t>cG_?7jwgz)<*em1PAtVi>iL~p82YV3^vo(tzhh_=Y`7ssiQWmK
zW*3)e{_`mllh5;P^1K7aB9a_tt?$0AhDqAGaKz}Jc)K@$AK8kKL89;5pWuPQ+r+;n
zW_Mo&m}=GhT7M5pX)>{*%HH;kj((Bt;X%#Y(e{&Nj@6}AgF!7(*8KN3gZ9Tt$nZ@F
z<$9}La<Im7GJ=t^-iL_~Qku&Ap+Rp&%gdGD5OAymqn7HbCW2RJ;xhT26=k$A=33V}
zkSpjpP5N9%wgm_J54#!zPV+DEHi17;ztg9*n2=}YBTi%f-pla<T|gy@-o})i<A&Z$
zSq5jlQqc{M53B4VH4+c4E4I`4V{m8ZAv-imb4JECbgH|txX*8GEjzIm7>;uwjG~kd
zkb+dj-L%}(D2%H>)5-yAupnzMZOJiS{QH#i^;(r-y0VkU`<q}nm3C5OOzUAoe^40L
zIyQxHqY;s;S~@U=NSS15OW{cOoqcp{4X|((WrkN7wZl^EgFhV(yCsv^t)YLUm=|{_
zmIJ}x6*9{O?AMRPGA)qT(|VVbD-#Z}cYG-bm_~xjL$g);Z2+*;uR32o%`L>2f_y2$
z6Z$`uzb83m)H{7gu>M0IYso>(tKdNf;r;-da=cnU9cPE4i+haMkZ881R76Bl=|*07
zWl^<q_mP=v3t^C(46?4<UBA%e#AZ~&|0XRz0df`CNx`U*1TGk0<|@s5NX?Vtocq~3
z<kyS4QpG=Jb!ZJX*>Z9uBtLcaRLP1gUuuUvwx+OZ_{d>`ns)_-S8}>M;@Mi?)h+g>
zUH@E?Ea-ULTq18<x6N})=ED+nxzUI4Qf!?h4rYt1_5RRfaE@@?19$(EMzTF9JJT|Y
z!-CXp?<2X4-#b7sXEjF%a~|Gv#Pg8IP}c=o?k~W3Idw(Pa|vTw769{+LYV85xf53V
zd%L!OW%cdUb|FzHwaW=W>vQ9Uxsfp&BZo1@jV$W*EW$rej`~6zHbXuWvC-jAGybE2
zVkaO05yuDy;JW<g1O~nNWH0<#dROV8_Z^-Sr_fe@%2duq!$m<DZpSlCYMpg!{Ut~J
zph|eH!<?HKT7z<`1beCqR#ax{IC|XmcVowUHZA%w`;NFi$J{9scNi#xAeKc}JuKCt
zJ*gtd*1Hm-X8h`qk84IM_n36#*vS1~>2O}%{MnL-QQdXF(vu$I1sWHt^ozFDItd|p
z4kHYuXf?6Y{Q<@)gHgvHb12@pi|i0nTe1P*X36}6G+pe&`x80Q(T404^{iC1xqLOq
zLa_X{F4|ZAsn-sgLu2!UYsx%dwi3J@IJ<Tb>XQD+@M<t-hUR$rHq&*1)qn+p756P1
zxR-K-B?q?EgRHeLcn(Q~jI7WNRE<wLSjb`$u%1CkrL9VMOD&{fD&i?4Z*|mBXdB^k
zD<|q-31cLaxlO%?G|$)8@yD7R!2M}MOhMH_+FGcEs=H=x5*wNB8|vNaCF2kTH1Leo
z7SndM^ho9Z2Q$~X#Q(mkpDDw$NT^!R6dPjN=GhLm4Ux$fd@Q8|HB$<$;OkPVZ25_<
z$;4JuoG)Wq^@jGI?1oT$mfgTHg3rSJ&2fM+%CT~a5lZY&l)Za~Ea3pG1o46{aofcH
z>i3_ftB4H#Hcp(=H7+WZP-#HCE3^a!&oU1VGan@!pu~E{RjOu#PHW<YRdl^Q6Iaag
zs<=!R8~0hcDhI8<i`Kti;Z$m1TjPGw)8lXD)j8jDaceQapK*KxbB%nT=v!e5fg+`w
zKx-{;Xbe-=h!8`%Tqb>ux?Q^Eu|H4G-t<NLqKTYos{k}P7{$JUr_FtY=iyq7!3_RT
zkN~Z|LiJF9>R?Es5yHpM*?faHV|)o>Cykwl@OEXLYBUkug@3+a8@an(OE9t(@;3wg
zIy$!}kk=LDdk4apNMri>S8ru@KnB7f0LO@HQ5;0*ZTn<eQXBf)%hipy*@S;CzUVF&
zSIL157@i>f6&6D}&Xb?N&xf8LFDScFGh6nh9`(68i(ynld(PzTB)t6(;^N3__=WUf
ziXfv$7U28(DpI4hhF2vi>NZe)dNQOkwP47_D{UEwIR(RlZRthiLsemtS-Un(`}+&j
zO834>>ilnoHYL%Xw?%nHCL=QL76&*+O21`LxI|7MR4XXoHFY67{1zDFs$WWw_+O_L
z+Z}VCh}cqh45sB*C5|67C5IGYI2$~kL==?kxL9noED2o@E_{|HnMd-?ojD39Y%Dq3
zvIky&cwA5>Z3kmG^X*?35n-aj2vx(t>Th*;zGr;{P=bNX2G!pAe=5a!_86R#rE9pX
z`3cUP@%LXwgM6EfYAB8Y`yuG_-1a`V4C?dxK`mZpwCu{ZPl|ccvZbOq`v<~I53mdu
z3{=|en_w*~1AIUSIoc^@-UN{6hWE`*H@#;x=-LNo11`z**U&{J9wIR^ed!nJb&H`{
z?yw5qs-r8pY@H5Y_P@ddIiJb_^ysG1MPKOJM<r$~H!)n{*ZEhv&({ZpJ^k-7slwqh
zs$}uY#)qN&bI(qvBTkurnfgJqtol@&7ZYQAC!d4-Yw{VN#SC(`qZVXCGz>zdC_|V3
zqgAaZ{BC%z?oG+Q@SkmZK(+B+QkO)4NF8hlqQ#J02Lf|-V_y)w<kN96nNoyY*``P7
zy-u{X0+F2aRI=vzo(;&TgM*cmwq%a;6p@}yMEOq~O8$RWh0ELKk2iIhghJ7m7kUh7
zd~eZs;EO)}3!)yHbmm~MuDpCnNPI~s&qA4X*A}_?{D)5N)kY%<sL-2$08j81zgfa~
zGXv2~H#r=f(-voI$!K?Bah8Tjh{Pu*05O5;I>8F8!R;MuX#5P45mhp2lIR{^>#Rv}
zuHyY!E)NVc+rYS7LOTMzlFB{;BZreC`CuYZd;TeJo(lz-{=>%?w@=p+fSvm@h)2uJ
z>D0<QHbP($m}+$;wh5RW0Chrsz}o0%L7y76J5Y#&na#AtpGvH+CN9Gx#*qY7!>!T!
z`>sY=_j4U0M#3=l@Df8a?ts;^A|oIi^=$H5KYh)GlnzXK>jWWicLjB~yF<-hBa$L_
zInADzFU7YIO1HucD_8AS3W8iWJJ&IDWQ4I)N$ai`y=?qONo2qlJ5`PBds93K*H$19
z#RM?pB$kC)pqF6cWQ56~Dh7aLKfe`$FhV`F6pKSN=_CoO4nyFc#;!^8t14HdELCip
z<9E~hE){4Ze4S}loEbb20by?C3`@#Gqgf^5!9SXx$E`?><4m5RFc<G5oDZ7|$zU$%
zm7-P3U4WjocxCKNTtEIS8ae1Q!v-H1n08QS1Lkk3W;s?Kqnfl>`}kYxzMF;UX)5XV
zlj<j#t*22IN^vBh`CNrJApQ!=_^x|09coVih%>D_?5n7}`N1lPh3Umo0S_#7979M#
z96(<N?dck3b`2T@eRToSfGRJ|dkw^Hrhjag!L(=)9BH2hoKYiKw>9j74Z;K{4n>r=
z_?nV|iH#c)HhWiBI6`5FYbE^raq3mN4*;Ha?ZcBpZ8a5S7~QkOEW0gahiADVN8=lS
z(FJg$FSuQv*Z!`V8B*kgIO)Ie{((b43pO3J6)enPhvIvQqLFluh3Dx)u`mEmk%jX}
zM)9)px$WyE@|z&v+J_EqL(O!*VZRO;l)fT3I)`*k3r)E$+yTVe&zO;PLUySX#x$bn
zx$lh=;B9gwC<D17DM(h-B|HC~ft<zU@xDp6UH!d@h8dGD?^4KZm|9J02yOrLD2AGT
zh_n}NYrhFA`WXDom~-0yMtl?U@>*a%ow*H{zH$bdBTQ-m%Yo`m<C`cq>13*dR#3R+
zz1|$O(o^^Pwe;oQ62^aN2+!=ztEu*9GWrzfz_4I=buS<a>?T%^VxF>c8vImP2b~<$
zKEb&YOjDUPCUU8NODUWk!WNear+yt}QAWZk)_G4p!Dp$-gQve~-x^5pBJW5!BaGR<
zOk&#ow*y#uzD9r1y8zhcBX#Ig6~H+^?q2w0T<n<p<X6j|oC3et4)$LX-A5lP&{vAt
zmvxZqx1cnjYVvx1QY1Pa;khG`7?wD+sn2Q$6PTmGx`Jj{6UGur*Ll!j+|J?1DyP&j
z2^0qS!!Bak$OyNGL@)gV5IIRY8u$TNm>|)PmG?IORt2pFT@RUN8;0$MU?aFw5mJ-;
zLDu__=)RYd)KopY2u%db>Mk~jlGD&y-pVHUea}+>W(YstHcY_$7)cAhC*tX=F-<Nm
zUR?nX0<pk4eR)+-j5bUr@8!0{bz;RMqvolidvTu_q|h0}xgnaBhXS5PRCd)j4Qsko
zNCfdK|B}H$ES_jAX~x@<xm0VM^)c27ozMd2<ckT+C}*$XmnjZ2a&#uSCj+*jX$9ii
zp8Av3$&*^uuFTfK&;GGBlXL$6Hk}h}jgTxM?wST0q9VT!<pJarlT<iBlwgCE$mgKr
zV$1IO-46(s)-v3FnO+0VE7#0{rBA94#lw~+$oElE!yw_NO|9F8jT*`qZw=-9g<lOL
z36I=0sMY3)`Ir5D7YuR7edFVqE*J$eH`))3(M1j~AUV=|fa93`Cu3_1!rF5i>$g6x
zu0WM)JBvI;8i^E%`%^2{LN!6Wu?B^pnx6L;oX$uphy)n&CrB!UiS-Tn)|)SVuoC2s
zQ8Dd_7!Jo&9~L_%;<GD-EzdDpt;D;w?yM*cKIq4c4s8*rI>(`#$}9$Rth!=gktIL9
zM$GsL(Se0)U!F79qGF2P-Qy-~YM>L{Cvib%i>~a$J;f)qewrvpuDWZ#`V>U|y3EiW
zl1~pMH(aOJ{U-}uAz;k$Yu$&Z=)%%1MsKF!rKG2j60rX1%~azF`?nA(>G>irQoy;z
z5|#Z)agQPy@K2gSaM2cKe|K`eVOv3S0=bR4F<V+l?Z$%PP-QzV9w^YPnnTTH$dcHk
zj!nI4{8$>K-4Rx$vX0CpM0ebwE~Gri<@BLEmV_5!Kr8FDuC_?(>U!g~)fO_c5Rr}}
zHaVw#eD`d1mQn)}4#U_^SBK{^0n~zU<(!;?1kR&WvqO*_qW@)P^wWN)j<9%IsSvw7
zE0#9V==H&7c0i$51lWKko#2(sbn{I;j!WntVR#;9{_G7x@QR|SQU?}igo1cHurFl3
zNPlITbtD_yzmiSd5$uLiuP75%(CPXfqCKnm+HYtBG|33QerHfX4Nsok?RDT)i8UAF
z)$;l-0G6M=gvR%W0(p%I%HoUJ$JkHoiA;6#O*$oq&D*2pTodCEz0As3mK9$^QN6he
z(qmV}#-TW$y!Tj3*P?$xpWk}z`{ek_sV2Mb@EvoxON)gOjk!)6sztNp7KbN0e5p12
z`1*GbToWyWO{9ldF;8%tp%9hpLJ>R}Q~QYE!vYzS`jisi>1YBfUAxYKF`5Uv&=lMk
zJ4&cjJ&rha>g-7|zjJ@IuVkaF5a2*8Ho3`F-yYMTH~x0w^ncIhdf5D!WU~=eJ`j6U
z*}$j|?I9S&&uc52Jn@CjF(GS-)tgxDPCCF<i4bu+4nlR1`YNeE?FXr-$vjNHMl)E4
zb#eZaw?1o1WcfFa0}{2ldIvsOWxWt7E28nC56<b<?{+}VA%adQC;&UuzS!by#Jux6
zL@?N&@@~<ng87q&DK3(pq0}E_RM`n5iFjrm9=prg!?bSmgD<3~f9m-Vb!^7=B`Zd4
zvuqCDJqa_f^kiAQ%w%<8<62>Km`FmD%PJt^s`mcjOX`n;w{bE<Q}*Eo1Ul>nCq3la
z6p+Np!`q9wS#93#CQUYU=?)>s_5I}d4=8<TZ-yTxlz5F_4e{(3Qwz3Emi-H}A4<BB
zt&B-?XEMZF`F)>wBERT5X}JM)K#3ru4e2Q_l!Q7oMJw+&?~&lGmM%&5tUchr`)`)t
zBP(&prb_7s+=*qyWV%fQ<dp;oGqH|z>LSBAc6GU3iV}^Gelz3pF2k`+vM!WVCD608
zeo-=GFT1_|+LaNSsPv_oM&eHp#KsqJVSH_RLyzyR(MlPEW;Ps<cC{M_hg?*vX(&l@
zjGRYJgn!K~!`m>%;t+nt+YpyDscHD|^;@cMT(ms@p9g-?pTaU-cs586{*+wyOH4xX
z%A`F*D=f|FIQ&5)D>_{2Jcb<uw~KDk|67vXmwrMoyp)RHN479)YU+gh>)(e|ivW2*
zhQEA_4t_Q;a389`33$r^Eg5lKoaU7IngKMIbNgyFksF9(YE_DS2~R>F+?F`=$AEF^
zWpKXi2W-tB0^7ulouEP(0(<y4c#?fJr&9LQ<%4dOKfR;~5ui00L*POF&qjcFi86J`
zss1s(aXL*p=!Znr82}Ch7@LHx{nnw3#`G=yPVu^=(FZl@pK>|Bor36e5grv!y6e@i
zGQa8rucl&@KnFrQ?!<5ind`(R77lWzw{LA=d$m{hs;Nx0CBE6F36wau$Z{%Nc~ZVx
z#C#FGE@<d3a|P6m)zl{?oR%-4ubYQMyNh!Gqv+lLC6{(XpXS7mf;oTt>59%)tIt{>
zwYvrUx2IyPIz1)jJ@~w(^dM-~L$1v&@V=jJ)41Y5!k2+`T8Xc;t=-Qs2t~1|jsH+E
zRYB#tS=BgQpuw<aBc2%c^$31r592rz&mcy%V*II}q?SWoPXZ_OunzT};|H^u7~tIN
z_55#Y1V1)`UbbAalZ`f(rj$v*71bA-OIe;;nqcv1Zg0vsElru*<0-1CLIMc+4F@yO
zu^@zYV9oz64Ut1FKz3>J$%N*2F<u7wr@Kx0b3An+{Uwb=<E8vRS)5V}Tlf+eP{6XB
zuK>INzx$)-Ls25T%`NhUtbj*V_5Dgn5Qzw_(A-QycD=oOwS`X#m}jz?eLn)M{|4sp
zq_ylPy*!q7szIA#oL69S*xS@qoqxnY3oBk%?t_x3Pg*vF2H_fb-|rr6)}qJyMB$c{
z#}?U0g%cXOP~5{t&@FRJb#<E3GJuSFK;JyO8|>=9X|<3J2d1Gt9lnID2TDb|A}R%b
znEdRw9Atxv2|7Dv+YN>cgGfWqc8(i_WOiSla`#WY<*;8neHlk27!`OplirM|D!HhX
z0hT${vM;CLhqDU-;lXmhhI@z54yijxDym{px1xplD+;X!iDnWSB3Qwta?T4)FeA}!
z933Kx?|zta(tIqi>*69IhI0Oqo->sp&BjhA8T*n}N1hu{hj!2AYwoPM?#gE2)Fzv%
z*212RFQ*Ljz%NRP<7a0%3e~(WrL9UXMyUOPx(v9VP#1wgJaC0yT7Ja2(g!Px4>G&M
zhsisQ#YN#OA$h4sf+YQ|r3xJ<w6<d;ZS+}&T7=%U0!$qSvFhyCEXGxp_4>YCOlW<y
z|MQH2scBB)+yWYDiJeJ<^QCG0w-i&a2fq3Yl@I()g`fB{%AqRY{!2N=NuBUCCYaES
zHc9rFn$IRb==VeUYewB(S{h|tmyFrn9R2kvE7{HHm-LbCb4b2i?s5Nc#yKNc3f+80
z%Yi*mK3dYw$aIIUmaZD@Kj{<dWcwEw+jUW{jX5;4Zu_%{i@50344*z$qp)a%Du%p@
zhU6O>+uYUB>H?o0Mg`pIQ?ld5Ywkmja154|@Z5<W-ot0d0)I*Nax+76!D>k;j*Tr(
z$BULLKpx*31U&1ylZ%$7{Y=hY?2J`CH=*l&Fy#C>H1y0hHgyW0<Br+vi1T!O|Hm6s
z-a!?oriJk2k(`!})&XjIHqN_-xj8<xTzbwW6gdki#(>sghVNw^5`X+<{qZ8iy&b};
z@F2=Q1ppEr;I?v0B7ra)p(rQi-oV3E_^L7_eFO;JMf_q(Q?q1sey<0|5PK48_A!nw
zQdV*=VL7T0s5Mwzt^yw7YMH6&o_KprxhA-}rENL5dA{M^XR5lb;8nZ;rNO6K)vzrV
zt^j>co;9m&je#pt9VvfzOCq(!EcSh72oFF_<oVx<vx6jE7<0uDo15i0p24P5YciVI
z)jiAAi&WWb6VMxG2RRcUaCwIRbt|r|!D;2MxpJ;b|CuO|J?YB_rJ-STB8<(u#g@RP
zoKpHVw_MGlZF<8DW_`v}fF8Ss7!(M&u_np+*Ri@I=D*by2FHk;VG~>BjA3t#aImK)
zK7!jQ-$Q%{iP%LoSqa5EJ1_#HHuHXdC5~#ngC6zl2AD`d=;qQOvK$D}4GUFaxC(xr
zHiFuvsCKi6iOiFZVTp9`3|YCFczX=pIUE^V%l>OYT(!MQc8xE`;XYX7fUip}Y<rne
zhYa8Wm@RA+jk0TL90{cnw@mpRm6KccZOp4g{@L*WQDH{X0gkVpl4ora)Fba{RAq(q
zS9^R~*hd2?V}p-ZC%=&?*|NSHPi5a-x6AemS@?JwtDmut#}=E*m1jB4WrJc|7tZJh
z(4`9st9=(pKcFr)u!YZ$hz0q38QA5j8E{pZ5cv0frZsn=Y`E2R#}yL6o&)wc`Gl2e
z*?L-D8AsE_4+ni!Rcpo=n1(wGcPl)R(>3Wo|1mIxBOjZgIsP^JMWX5*y5(ui1{r$9
zcj|CJKq6oO08V4t`Q$M$bj~HfKCD6}zQV-r^q}l;KS9ga(*}9mF`i_+bE$&MO_+x2
zJVZ(3TFPrnK#sD*P=&Tr1=0uLc6Yp*nY;OGt>mogmyB`QTPCQOECC7wRIpbd-arw3
zUzhe9v!EcI144b-5BqHm9!o!F+O38WeWDa}WkY?)TZVD>2~|B}BJo%1)_T2cMdN9H
z<K<&r3%)dsTh(Cm?wLrYN!3;T=7hSW6t~lQE_ig(idc55$Pcu?IV@}#wwM3|2UMxx
zt%^l5x@q^%zGLiLp{_}3mauy%3Q=2)7&ti-0~y(#Vgz&$7Hc^~mwV{Md5X5x0mtk=
zH}&T~2obetJIB(ALZH?hW<yB7_u@iVM&4`_dM0SuYXK@uou(|-zIa%?rn6eU2R;m&
z>JFR}T3_aVg>GJ6@&zZt0d#;2B0UKau|8$`$_qR+(%QN;*fC<a61UCh-mvV(vFu`{
zXfs0pjy&d$Gf6neYw`fmZAb3mYG)Ooqn1iEmO=qS=q)lahtsJ>017Wn%G)ZQ($g>Z
zgy>Z2QGf!A({i@Tr?iwB$|;af6$99+RFI~xjjCLBSwPECVWco4hAtUa7beGEe}Q57
z3qIbb&kGDYLxN`W&ei{G_r>v!EeKtFxJA^A?jF8TYBSNON$yuYCnsVd!r{aIZ|M4V
zIfA9}ZU9O?oJPGUIKQ$Rbbs|vPd3>{AgEK0+rb-CEB+O<KAS$|Cs#3i<Y#DJZE%Hg
zn>$Ldd+;56HnF2S9h<=y%ElNKc<vWD?)}9zRGBh{3vPFR3<<|)f3gt-!6x>esix-^
zV7O67^R<T9O7azG)=88ZcgT+U*Sw&!JFijh+|w!7{HJ6s)Pmfk*mmsv>pLi+GaFQn
z@rOg89t;UU{BaN(&%Z_Ee?liSrP`@yYt$S$9`&qQ$jI&XIC|B|Hj&6oGMnT4EAuCV
z7J-M)9}2q}^1&k@>Lj&Rp9ayZ;(<zoE0Jb&rQ{A_M6Kb2wHDBTnVAxJ?H{Ilb&%FV
zqbcFy{B8Pqyic*k`L7SRH&-OjfS++lwB%G?JoWO-`ySA6&A5utP%Oc}yA2Su)|QS6
zq426LI@^)5u7#3M8Npu3z}v>MUoVtfqX0Rh+m-S6CTJbqBf15G2dqBNans8QYbq(0
zZ3D^>k5xl>cYND2VVFu=QORTyKLYP!y#BdT{X$QUL9L>UWx|SRNrg6>9k87-pfUHn
zjYrDyl2XB%I&Y_rZ;|<8mK_#WJ*7aI<~h=Z#_#y>enH@2huhbS&KHqg;$317A;yj_
z{9a0XLtK~g+2l$uW8NOHAGtGrE*JcIc?)rF7j3CNqbU9VS79b<mfYqQW1(cz45JQ4
zZ2|E7#@_NI^o6@ftU2%`(c7QxUInWx{8%G3D~tNY8V9hYR?XaVhhUjv1dD_0)fc5l
z$(Bcv8@a+6G>Gct+fr6M8r+w+;+6`v1;L|`l1+2%<`BQ3S4N(6FR<O+%P4z<&%*^3
zXq7a~{Blaz(PkMx2X4!%Hs%o4<`PI|IxgMen0W3YFLWFYmANRDP%6%w2F8XCETPXq
zyg#qXJ*tT*J)Qt;2hU!gnU^vUnvz<+w8}@K{HdN%ze>3*D`E6;ryaFlD)J)b1|~xM
z0Y^%SZRvrnO+>*dY$e`C_h!peAMFvN^GcvCt9wA3P~6kD49lgf5!6?48w$u8h-|n-
z399Z}3iA7P6s%<OJK8Q8a0EUwTHL+n+1|A1EB2o>P#<yLur&6lE78ICc-ykGz)~Yu
zB6*Io+@XD|1`{bP^BKuR5r(D)qCjMna}>M$3~Tp6@uwZ){kV31$9#eW1Lrq@P2Oq*
zyDo+L7`T|%>l1Q_R&DYk5k6{<-Ee+1*dVy&5NXAMZ0ztH|B!#i;r9>sKuOz~oA=Y_
z3v>J7d`Xk}8KiG)RcAY%BcYq8zeo6j*)OYT<NUj=oHU`9-T0{rfB7KWiU_1N;kqP%
zJVHm|rdTx#E}Kdza!{>vD5Y1};{U=<sjg*?3nixlEH$%DX=R_Q3cOx-zkvT%NCY@^
zvhQzU*SN2xosH!V$rK+=PhR%QPPb<@HsKxOPg~7Q0XtC23D>|~ayW|&y7XJPNapt0
zvW30N50ktik{fL<#(?#{B5Z*YU5bNcXyr=MtJRl3r$L+(##w)TXDjl*2>7o&#oEmR
z4&>kCSqJu3xF{>l_oUm(C9#d308|`aUY451H{ZZ4QYiL$Hn5W|S5z8=nP7JqY|r-0
z)41XQTVH!t6*ljrmMPTFM!C>chxPwOa7i-3PF$8?;5)QA^1h;Q(38ld^^6hpmi7UW
zlyFs}%{d(cX(EBV1WKbU9Vf2n-U}fqJKMHwL2rw_d~4r<h_&j^&yLA*vYe|R&YW?I
ztArFAL=G}Vbz!Qy1oZ)wPU~`hM?woA;SNWUKrn;!;z(#udd_&eSWGGq6=U5Z&P4o)
zdUyH+xoPAa5J06cx*s=|=uSWecv69&{srsn^eU?SNue7ggIDFjv}Ph8c(CMP2AH|m
z9qm`f6{WQKv)jN>1A%nAQiS@_^PprsD8K<l>A72FQ`%m`Gi7nRn$WMa!fJpwpy;-F
z-sw2Tuqmcwb9#wEz9La*#Jas$z)tpvoMMR5Hvn0AiWpGHEE8%t`+GAytjnlDJogp8
zLRBNzF4%=rvax0y$1nf~`68pS%MgVF*s5KW_`Lzah)FD<V}9t)Ime|QO=@%@Kt(i^
z1FGeMBtU5)Lc3}g^*m!*iKF{TmuSYYZ}RQ=a_$s6ti#UC-r)kk_r0QxI4qaWqz7?e
zwXb6{Vtw;WyS``r`ISVlEdr#Zq|~q0uQi_ME*uv|Kfg>%rC2|v6T;6$zyO_EKA)>s
zrkS@4O16^)y!7_Dcm&&ouIKTJNbb__wg9}e#Xfl*IG;UPS|okMVK-^Pg;rtrQAL(p
zC%&|-&Cf>mE=`W&w>ST81<B%Jy#SMC=2qQvM!ZEILMQRi66f>rMV@d9`d+|kIAL!{
z79leHjuMAI%5X$)n8EI6-Ha!91LqRj6%5(vv#W(9{@e=6Tq^)91Z|WW=CF9sGzF3s
z@%*v+tuQTT8oNDYfmmeGe_6%~0RmzxZ$vXBjNf&ba0bRXe2zjid+u5w)0gIYY-Cyq
z{uqV60sW%Sgf7|mI#@kT`$9&f-iI^z9)s%dPLF8HAg?kF#5Y=Pa@;^3P^@hZ%*+mV
zUjA<tvF|N6f36>>U{L`iNLYU>2lEd%#=n_B%CXa(8J|F_t2AUkyt>NSo|(v7<e<_+
zfL87Kp)p8OVs)PoHN#Uwn5e7xoKjQ7HF1;#5A+%7JC<@kTYk;ngh%BYLB^c%2)%dN
zs*0b~iZ4y9`C(&I9!P!zot$0VvxOUT?gv>dX79OuZmXVp?DRgOnt9jdAGG!}ttgyc
z$Vg2pNZiur>Ae(<o>7W<`mI@r=)fU^27j!5k10a4i3<&q_hcIsrf@-Ivh=N3ltE>b
zT|zkbnaF;!P}^D;Z94L$tA#S_3M7x9Xz9H`jtQ|ak?o&_YICsHSqLHrrsw|=zD7l*
z0Osl?r}giieMCt0uz^rw>rrZ|9<UCg00P`&)!9xb1ZqLF?t)?UCZ#;GNd`OM=vFJ+
z?D&Ur<f0oEN#XsU7mkIy$bC{KyFOfisltjn&IRzDK!p+>aZ@ZtVO}E6Ho7r9gW!{M
zH2uTO=rv`MFtByK2}TFktA@wWy~@Yc)sgToQ5U-16B{|mqEk1XK19srjpR=mA%igf
z^OtV>xBti;?+}pLA78&L-M*R&?f+`QVL!`FbjEk+y2=be%ba9-8Xhmw&|Ef4t5R@p
zD#IBWwrp9-Ksvp@9@+C-xJ$Kig+vt2^jM{}m>m+s^ws-QSQ8(^lX2vDS_EgiZlLy-
zV2e#>M+mH9t>y|-2f)by()VWWV|xzH4LCdTu-M@-$P*0GYU$)N(Mzphka9HDM#+MJ
z1ISFCs(Vb{<+c!LwCEm9B+gH9)wy;zSbw?79VKhjXHSg%bc#)Ww(CndGr!i2q;GY<
zqoh5~R)X5u(+|?{E}&gXF|(R!UY$zJ<I>f5;_Pzo1d*1*tat%%NNE5GU#Kv{b!Ix&
zp78~#Aagf-Bzd9j5L#v*hRX761Ic69#$!7cO$fDJJGkUo(O>!$u;r^X5sn2WKQqQv
z;w7G*X?NIyzwy@!`qJ8LKB@H48bwgnp#w`oDdAR0F9yB;P~kqxY;YHF7Su1l1(w2C
zLG7&zrYPcAi97)!kHWl(tB(Fccre#K%fY0#jXuj%aC#sI>-H|d;wLy$!Pa*2sikPx
z8l)0_${37UjpDR=N`aIhoG$2Hbi!h;ZL4V%Txb6+wR5LQ)qOVu4&CXhM!r(<=OBIp
zH^<e(`v*KDJA!}ki5}Bcx40OTHi%mU&6l&Mgitg;FCqs&a)<ZZjJi0+;E-hdQrH!6
zej8<W-+U*3zQ+5N3g!Ut5U%=6c+h!b<fp$If6jRIlqmRq&Gc~u`I~hUDMuH3_W%KM
zQlF6s>ar0LyXbZtbyz`UBe*%VRxnjqQ7nkUGBl=NUwp0WmDKFTx0eagiB|Ygvt$)%
znAr*ifx_H?g4fc_hJCqUMYGe)1K>#7tgcgnnHt{?mQirxAAPk!w*wG8_l3siyuE_4
z)=@&Hn*Z%QKez#KFaQ7n#wnbj9zrsKh0{a<N==h2Y&S?!2U42_drzmat4pE!E|O)H
z_})idl+3HMt45DX*k=UHV_tY_ElAvePLI|R5R=OQ=amu(qd<%#5LvFquInq-j6a?x
zUbXZr)KCICF5r9?%VLn;CPbIs+bqp*qKT{ZKY(nGEY+j9Gnq<PN|<eZ(RZE7<eZrS
zHM`!H-Tmwp6(9VP1TjG#gZy#KL(i$4bC%h=ohvduQ(%n=p@b9G5uMt3uUMT~?cMTn
zAn8w=za^-yKolUjVJ&SSP4FnMb=kyGz$`-Yq`?QWSV{v-+~L`GX0~^P+-}YIWmN?y
zGeOiz!1Xn6)d*lka38i(8@I?e&G$IttPkwX9{(@nh4G5pmFkr94^I;g%saW?>Trk~
zCNADjV?Ncu-Y>cknwP{xzUlctG8h>%cT&%NPV9Yxd7UaRqCn3BQks-yI_8Y;MAF_V
zp@z8Pt;sXzTe9}-2ArOP6cI~v0|@g@Recv9^d35@MGKwfDFfL?+$K@*{X#D<0#Rcc
z3|9tt$5MYkr+bZT5u)W|xB*P1h4mRUFg^&DXf3x-kP4fvx72dF7+k6~qc+(=<i%$n
zo;aghe4Iw`?^nb{X`QV82uW8iF9N~lo-G;*h}0Vd^?W`Xh?(o~`ll{*9KFCRUvT-1
zZNFet`FM1Jq{yFU!J;TGQG&z7O^J=D9Rj^JRG*Ncb%ElS?6ycqw@iTCe!K#e(V2Go
z@SLvqx1r0wIhUvwoJ2V<VPoQI>jqU}C9OZ>C)PD+);4rc6$99+U6p~<aAFcmC>c?@
z9$^XkqF+6J*&s;Kf>&_b6qdc0kK)vwq14a><j%-qzIy?w8+|bh5i{2qC=6(H-Ni*{
zZMgNqXg!v7e*o#tPiQ9aDiu4fFH<cO!=9#S_zD=abio`&8lHAy|4ygr%H80MD9c`+
zB0}!$hxBZdB^Ddrn<L{HW1`o|T4p!`yNf>NY6#{vov`X>zKvXpnF1gEY!j93fn2>P
zzN41Y+}xUc=!SpLCyqtPLn_8#IIY(epHF{pMgpsi5`7&M37xHCdWk#hpX0nO!pNeS
zgk^TP;mE|ssDuyK#dwdJU%n|!WjNVB!aO2msk0!cnxb`C(3~qj6S@l~Ql#h0Z(UJK
zfL?0#<B;A<09Y$f-;YMgf`AYL4jCUrxI#qQes(>3!+ZQIS;ig`1uJR;GGROQZ(iA#
zz=+8nf;?k)?1pt1D15ssJoOm(1q0ncepIgcxquE?Qf(2jtP21`u*r7>jHQ)P5XEhY
zS$C^u7Xp7zk$Dp~!;O|X3?0WV<-mHHu_yIuop%(Tv@E;2U;z#T*Q2_|z6WhzD>wpp
zHC*rD5)_=TR9x&Z&~@vP40)|b%rv<7j4Kz%@Y6iDo4XWg0-EGan#E+~G=#xB+FPEE
zUag+c1t)SWr*iH2s;PpVRe&kj#MT$Wn+7^>|LjX;?&h9{pud}mN35Q_Xq5h*u|&E(
z2k}eJ@k;7^I;ba2;f#zEQ|@|InW|Fr!dBJ+N$R0eibkstMs%lE(GViMH=($|+YMhv
zK4|5pK*)fn%Y+jGG;Is3b16TQe#4;IVY82|ML7M;yETJqsgqTi;tQ?u>n5@M&NZYz
zoK$Cnc<*vYStgf#tUC)$EyLgPTC;B_Q+o-YnBFVI_`60O+@dd}czSNAQ?3XR6R;^h
zZ|Ik&-}tyOs?>{6HS&6Gp^{ggPDGCZx<d%b@EFlO1r_!D&Ybgx+n#@iQ~H7ji)$s~
zsX`n?mgrd3!GLTD3(+2iSb{=L9u=xT@2-(a-xC$tHlijm2IsptI>jn;vHs98NK834
z$Z>T%Q59k*3*L^nqoh=qLatTT)T@pafEw)_G-K!vuI?1w0Y+_*pzgUf=|jAIDv>20
zpm&u<i=6gTAuKh0`dEi0RFLB8tz!<lbn=#iCHSqS@|^~e^p?>&_(g?vrmvL@rWS4%
z42iookcMIRr0)7kr814xv$LEwc%N^TSd$aBiAOSve~ouu9N{mX97ZmXau`V~ReQUo
zGgOy=4p9yRj+03GK@a|&5($rd8h?YSb?5BC00_)W`k&9JsL^0mP%D9$S97^5qM;iD
zPa0n~H6p7j&ICtP6ZXhW#B;fC2D|GiNWNX#sh1-E5Y%4nf~iM<1QPDpE?C@<&y{Z0
zi=VUK$!T|PZLWq=5S}bXPB5B&XII*dnMCcw_v{iGX6k3<>NAS(UUnUEBw=3{M>&%o
z#mufKhR2H`lyUG5ZWo-$VwV<AtZm@a<wErK!>Zw?*1MYLgSD&lzsm0fK_I*b=a`VB
z_s-P{Mim}bVs}4Lrm|(s0Q{W_@bDTVUa9!m{SZ|#+ed~o5j4FBnaF-7ItO`No&ItT
zer0h2p9*HUkM$a!7ofJ}xYiHdAZF~wD@EE8O|8N{#V*;pEEWNz(4>0G(7xA{yj1V8
zACizee&wP-@m3bh1KN+Ve7Z$T-z#7lpUmHE6t45zCKX9qFhf!I`ug?umtk#i_31<5
za<PKY1U<Uz`Yxe@H|p3%3e`kP8h;Lj%3J`V?8C4%*E-ONi+o2+*bMG9wB;-3W4JL(
zJ1i=5BfAG3_%MD+2Qz;j*mmoR%GoqLS7kPns>Wq|S37V5X6y41?<Hnox8&CSkR+x@
z!Id+(t?&^9D}q~H2zXKZP`cUpgFw5#d0gf#+PoSKRh}qo?Ti26u)%RIgw71<k@7C?
z@PHu@4J@{1%qZ7|_0c?{*CgP!BO~^<57yx;fA&7V{`&(2oxnY(G_gvLOe-Tf#P=G7
z#lhO|U8}w!gZ%2-CyEDfPoDDQ1PdfJw8|=e1YFEPxFK9fAxPM*33>mi<W4KB`a?AE
z^a!e2_vs*A52%+9mELO0A)~sl5WI8Cx*E<u(&}W%kir(E>Cr@$x1N-kZw6Gt*-3l#
zaq5I64qcaoGf`p>5;}#y>Doq2IGFhOFQxq2+$MyGvX@VAjl7mJJtv@*j5Y$B1!hbl
zhB-UY6Eap@YReRnZ`rv?zc2FKvmFh-Sg0qubQt%|EdN(&U^GbL>8DkNFL^MT0?CL6
zZy$@dk9jc9ho(D`qrS`Y+B-;Lni>UiBw??;PH<eH3LKINUDMwvuJ5@HI4#pgBr?uI
zgUh3c%ySAAbr0Em-3vz77*KNhxR7npVf<aH>Y{anrbtFew*06Y@-sb*{~9hu0Ng1q
zZFO}E0j@~8?{RTwaPtL7f<SPu!lfne3mTU8xbI9-S6bA#*c}11l&)S`rm&PHHR?J6
zsVWkqB2UV50vtzAw{$>9CC1-LlmYg`uBbJq4-=HJICo42kbhxcW<%T<zR$^}pC~1S
z0JXcycSmAQ0ixjD14gEcC%$s@{9bA+{Pwhf$7E;`;>>+d#zGG!>uIy0Jp4yB(2oq<
z8+q5n2Ysm>Uv+JZq}YULtwK+uc#^zpP9l2P8A~H9mC^3WZy9)ARY=Y|#m?!0god;b
z$^qN+Crj|erL;B?jInb1`(ObdS-59H-IlUsI5h3#pnxi`Y2A(FU-)LmVC>;Rm25Fd
z;DGVb+6n(G^b+Rm(XW{bcT<TldN~8%85+AdTz$trG)tc7wDY5#utAb7Sc8uKsBJMj
z@abs+rzBp?zOy1I*4HIsetl!?N?wGcy_a}c!TBTZVeO4#E@HZZU0ZIsHUh`Qs2)6c
z?Kh}7w|L{LFr~0p8&%gb1!y}Vx~GhLG|pBGtwdzRrzxinPC}nO<Z=696x)MRGG^^|
zuRXTz__`%v*s*3&hB0wPQeRS~9vMh9;|?_Saa7_B6M-e#i9Qp<JEO63d-?U*@A@y4
zVTuj%*1Vk(dwim*v>W4pVtfKMU8w5*FR|@!BB9Fji7+GSLJ_8n<J?)|W)T|Os)d>G
z3G${w!oIOOfPQz>#gHfGeN0&bIt1|5-cqR)YAy&SPE@%rwdN%QZuXm_;K4r>X)VE@
z^`~8B-UXS3CwNXk1GpL%5+J+Zh@9xu`8G62z}aPzk@gfPk}(FDUioAI#Gn68A4jlT
zANG4n_ZD=vqdOilR5kz$h3=HB_i#j{y<5)P!>JaspooeVy=be3ru=qPM@G<_LnJPs
zWZW$BN2#`|P&`h73HNkXsu<s`gfc9vi}D)D0dMmI2b>Ah00o3p!S2>0s!=+ZX%L~u
z7|YOTJe9~{(oka=wf;{xB^Bcd3FfZTk!F5%WG=u@StQ?`ia(}Cpv^I7ns@*TBHfQa
zz>rEUNrFB-Vx<}-7bSNBL_8HR@b%q{L?hmJ=^^Y<^(}UgZ+TUzf#3p4C(a#k*BY~z
z26k3p>RXCQC|E72DK^hzx0;tz{1N~LBKZWceOPCl6aLwvcOhL_hc8X%nEQ^vxDk)D
zHP6=&gy%K~K|yg<AdG2b$>cfo-#^EY=|v+SmKwMjpoCx2URlMIK<}jtm&e$Zi*CV!
zAT-t<drJLvbD9WfKnvGSkE9w^=%dUZ8gFsVgBKLhiW0~XE%pmG2!KQU4d(ME2cxW5
zS$KTfc^7lFj|DpV-^_rO8I*1ChdcKHlYsR=mgvDHFD*y(N)ON+zG)W<BeC?K(F~=&
zqCXbJ8!7ZY3gWzxsJlEV+YsAh>V&FYHxCgBJz6F~Hr+ZDhSnE0PSL)ZPpg1Yb{#0;
zY8qY<u>r%<BW9e&QYi&$SOLAL4Gm%KYxo_~k+iOSb)Vp6yOdNNIR|Vx*(>4~L-APp
zL+ske=<Kmbx#c|KI<(@V_Qcx0yK8?BY#(xe&UpnEe7_7Du!)0;$FEUCg~I#k5Yp%S
z333-W>_MO^gsxGFm=f12xT?)*$VQYbLJ>MxB}@;3MN&7hQ`jR9gtQAKcN5#clFmO6
zH`_r_IHYJQ^TTub+QaaTib0_5gkEkQ0IxgcZx2cd8UjWKaK`4EMk}nS=K#F27|fmF
z5C%82Hg!nWiT9AiJy(v0s1Ivvo<0C1doeO-Ag!geobzN&AzUPUEF3sQ5J390yG_~y
z1+OTLHp@RK5TU0(Q&ZJ?BJxw4#}@AKxsNGq<+5psPgyGd9<5n(G&D&K2R9vb_rTSN
zp9FeV{QZTG1;+9;H|*ZDv8FwzFVx3wJ?WsA8wOC+8FYY(s{wR-l!5AgzvHXPY)aq6
zO!vj@XeMT0?PobyWtK@Y<XA5Ia9o?rHe|B&H-(~aVFz+u{;0F~wbEPEGcm}-hrf}|
zwT68pwMJCq-GhvY#YTyx=fZx`v(i!&dEBiXU^A=L`)g8NlId1sG;1Y9K33dZ#D2cq
z)sFk>&TL2)UO7|fie@g_fzL}*g8z<}yW3l43@uyf*AUmwkg!Rdz{`v1OAUtmQmiu9
zz{BL(*)33Jytf<J;(VglXT$=?8)uwrJv~Xl#A7%UMgr_a%!@|<*WEpkxfzyMNC<x@
zF2#sLvY$Q6w=!m4_9aA@iSFe`=bVUq5A#4r3=nn4M4*dMH9tFnu)AgpzL7&Vc0qnH
zZsqg&wJo4qVU|i<?F}7#J_s#v_S)`$M;n;g!*z_}neK>Pq$<#q!66awhr{hNq--re
z?CtiT2&sgJ|9WIo*zM&cauVoVPtS5$E(3<Lx5)j~_kII1!EE{~NCa|ll&{JnT_%>R
z|1(SD`bQa^zw2gP>k|2}1hC&O9+)(TBW&H-i&@wNr&P^FwK-9V`u%1!_8hyIXkknu
z{b((bkr*}z#HZx&v`5fViArKef%zpFbydprtaw{BD?RyY(mGbFThwg3h+WX`sEY_P
zh%(nf9@x=Kyz8*mnbqp-u&&@P%}a*~LiQz;6l1;xdI*MYyOzIfQCovRdq&8r9`uPK
zkLTy+B`FFw?coKM;=*jG^ZO#F>7f>ykBxO-5z@u&LeZJ=iB9Vue3zXzz(x<pzJFhe
zJV-Yd1X^T-<*riDnq}{bvs#(gsZF4||BRdQh8`FO${#K+2>?-j1@kuUt+?9rGxXwr
zd}<_Ijo$8m#zSiGeBV>Pbd9_%I0%hLDV?+qeL~x6{q1lBnl`4g6n#W=LJ$R3<rtq2
zwsQe$Y$1hai@&NuN!c23o~=`bk{sTBcz-#hdHbbA@3%kLd{jD>&q6lgMIu#9DD;Cx
z2_nyOh7g!&y<6)x%m0ijoZ_{xh~SE1VX3^549|ehbF}4!cGE*AWHYt8puTdu_K72C
z`gzmB4%I84RTT@Sd_iUVNd|LWJ{PKgLxlW`1KDb9g04)=5~F4EzTDVs6mrD)&7HO8
zyd#xhQnV#7NJ4eP<9`rE!aejbcbg&2#4D@WH(~_Q{Vkb>3!{T1y<M|*d>24$We5!P
zdHk0Ext72+6MoM6A{5++{iw${u=0Q@``%IS)vsvRd2mkS`lAy`IxLVKMfwUWIuKmp
zF{O7&R;;gU8Y>HO_PGBBsv&4=i4}mVXRg7_^Lg1BrDl2db_ML07=^Vc2Z(dZNXgPF
zbFc}))%*tAGehE>^6pUKI~AL(dS9Jfi2*{?0?NOq<l0YRv3}0k_?2iAWsRDBA)p1x
zj<W@Ci7%K5hGA2Esgl{?*JyBSk=r-&7*ys9==y|OzCd9_pk8xxe3agaM|hn@_2<*J
z#I`+RTUgX-c}&$80%6TT2gF&5(XDbpP$FRru>XEP7qkcJba)vdVqQOos)D<nb`X2?
zS5>LNtvRJ5>9shP?W7>@Ct?!qN<~^}D?XIS(fc=>&8N+4NGXU5FfcEAr0+zl7??J1
zv4~|(N~lfkV_CK0iqKo`jB6-R9(NOP)5!ELItj0c9Roy$4fR{AC*rZil=W08Dd<G`
zm4~kiRk|UN5Cx=_=K6<v+u1>iY)oY35#rg&y>~Ki@yGdJifSEMf&qNGdL=G{>|>`2
zx1Fn!B!CD9^{v6so~m~RRs5*p(H`n?nl#*2c}Zcx6{R(N9cN<;2<rP(9~;6dQl!{Z
z%`iA8g<I(VBU&rN{u)b_Pb+9z4l6P?PeVcIcr%r}3m`xS!n*g^001QeZD~1^81U`|
zoWE=u5jq|WsdP{Sz5Z&i?{{>r37UFC2Wq5EeUJzfnvvMBUA1+xMVW}RLx<l+$nXzl
z^tBG@pfS3urYj54a!SB_V&0D1#mF+Qi*qG1&)abg6t+F0-XgpHDyYlfM(U;dofiQP
zPBCcc?tKKE?*^5w;<S~CFcpFM>WDk5TA^~@DgY9e7tl^W7;gMsos!Wn1BWvuMgN^-
z2EAvg1OzQfWzgB|rAJV@iR?B}xwX~ar{NSwQJyhvo_LPB*j;Ima<BHFTkJq}iV3ja
z-j3MubC$-G^EycZXBWJQ?I*CU*lITX7OMaO((YnXWo%mBLc`laJ4%@CLKjO~yG@-X
zp$Itz{yW7EjxIe6Vy}g_hlv$yNs^|N*idg<pI9_x&o;){eX(dhWh^6q1XoR++9!K|
zg#7;bodR-YJBf>j*MPJr={YK11^5&G3(HrEc6<ip&8F~SbIZ}1j@~Up6pF@7dI#;4
z@wW2j2QCjd_V8$$p&^v(eu%f*KHzYANYQ4R)marz2D?rWeJv{?nF6G!)^A+FLTR{u
z_&#ElQSFB0!LiG{)4H1Zp1Dbw4@u>h7E);WT>ffxn_z2Z7@%<69pOnH)p;eV%o-xh
zuc01L50Frb`u?WHxF|gdyf`aj8V~YiU~Z{+8!nndsel8NxE2q?#mO>icyo1-PL*p3
zDE^q}^g9-CX)I%R#8s&_(?+d21=#g8tNz^|)Q0EP3qYqD%WEBeZh>UPk0P^<n5`VF
zLMg{kR@*lxu7lP#U2_pYPZl`xEjz0+c|VzRb%mP9z2e}H=&irrm)8$i35b7dT!2Vz
znp20Aa9?a(@tO3?t=d~2i-L#N;s)NVmse~aRM7jN8euee%)|sx0nKa3zeL;9O^pC-
znfCbrYt|UC6Jg&Yz+h}eRpFiKF7+cO$ipUXRWTfo+6k6s)PwsZS1po{9}@byWNQc9
z)}<TMVvVHSw|&6PE0v$fnU0rZI$fc+tt;@KenT)mGC{k3+zA+!sV|Mh%8;dL7<*bA
zafUb6a0hz^mjYMXLlio_Jwq5MT@vMYDwsQzB|MJAm3LS*w+)5WQGIsu%a<s5?>nVU
z7SbRV&V?dP9gEq!1e#+zB7^oDQl%6Qvu7qlV*Dg(b*JX}#)*LSZ`sTh&~Jgzt+(z#
z-j{7UrONvWAk$rS!qV(dD2{S!xfRMlolcL7V(N><4RRQmL{q_O*@y_Ad?bi<)DdLz
zyX$B6WA(WyCQmpp<R*x;1ZTs!DanC<a>O7PMq6|(utqHkdBRTuc=MDw0v!8g>l^s!
zZ?o`1Wk<M=;leB;&t6jyj!F1CED3x0H>mlsVIfWH$mzLn{h!$&=)i{%)JOa|N#A=U
zpO)*2uU4M?!%^=W5#Il`LnirhuXgNgQK4J1VKuhgn>T{(oL?uCsXIyijIB9(`ZeH!
zq2RZMx|xV0DUw`~>2M2(r4uxMc0&M0zOVfw9GY+VTtW>**yqJN?zU^|wS<gfshnrk
z`-Ov&rPdpCO{p=to>^ngqG$Bd&|uT?bW<S#1>BzPvZ+ZYijJ0Yxb#V<kaFDY*(J~X
zWAQ;8VAZPHvoi1uCJO5Sbw25bN4$AJpIKVy!H-7FiN1$oCE3-cb480pVOoPY;&8=$
z@u^}by#jTSqtNSu5u|e`Hg-f==xag&=AslWvSb;pKhK_x|2)%a*x@}JW~oW-Ebc1F
zrb^$*xmHs%i=7%kqKJB!Zv&a5YY+f<rNAt4!KvwW6K1=i_Nwh32BV-=m2x`hLdA>>
zXqBO@nal4+GL&8(pR}j<Is>wkRcko!Wigck8dq)<*GtA+!`9&ALjXKI48m7xASbZ8
z*H^VA>AQugIK)+S$=E=VC1YCMk{))Ap$p7kR7h~6JaoYe2i)L*BK9ow`=Lg<ETcnj
znj)iF53+UNI!+=-shFSU)^S8CJ+KK+bF)}_Za4EtZap|FhbWFp02!e{b}as$0km}S
z73N}N0K)s>L$yaA5l=Om6b{FqZ~c;KiM4LJP{V3%xB%LEKlYfbM(vqOXUP&D!>5AH
z&A^1XQsx)|(*@P2Vd<i&OB&6E*;Cs}+Ml6oPQgLd6c_*rsvA<P!q##(Lq<_#p~pfp
zl(V`7Re;xp|Fqe@;cNSX`GtMXZT;&oRcIka$Z%Di^QjNUegz083Gf$`EM^_-IJ5kj
zUJ)<peTT+|a(m@j;e0eR)vYRSsFnxbOCc}zE#M53B}bTx%b~%g`RYcrT5{wdUxW=3
zyx9x>+^9*zg=t|?>PlAU!a68`%u`g_P@24R@a9=V+UF&@sY5Iv+RWW`f73r;i2z;!
zFFo)ejSV(f37q3IfRvEJt1WD7llXG{PT^Z>O|~Uqg{lD;&KNE@FC2qPm<u#>(KVJt
z{~fPrT}H27k=o?21kP7&&N+ft`l%fnCIdDi`bFL^T+~(i`9T`Ej4Pxi$C!N|OujH{
z8QlL=FmUfzo8$zA#}uv5$Rivf{(U*7PYua$U|BT@3@WBtCQxbJ(#Ct1e#{7NUt3_9
zdbJhOc9ihLvmDpYRl&LD+82Jg*Id+`jd#X?;k9^hWW$U^k3Vw4)qnwn4yJ|EAt9F7
zElATF$f*|;k)0V2O)mm|EQnX}(_X#Q0Q^7qK1y(Le|x;{0!2t`^$^Zn@OdMn!RR~O
z5AC(dB>}diJut|G-g04lV0@rr6uYTJqc1WLhE=}f%xUStd-u-D{^b$gpcrQc$ges~
zoNTmPbu)GFw^dlVP)CN|SNWss`n`JtO~N5&{+mM=ntirv#kh3(;A<aW<@XuG<Xr^n
zxzmYn$-p}wNd*KPd-3p*@!QGvbnTc2ne@1Q*uFX}C!aLB)6ezwfp|$bRdU1zXw+S_
zb1D1L^kGsM0RRA6^0_-|23p`;>lO=_0xWfVuD7GgvVr1BOOYOZLAhTQCEYZ*7X;)x
zv6ln8Ep0QqVcEsu7xghL>khs(ms$%)RsE-UG+|@YmM!>a$#v`jA!3tv7=6!>PfjsY
zl>w*@&-Mz?hvT82Md;SJB#=ME{-#!}-CV?LG|69HQ?qQyjc2U<?wPOYcrM^3_(gbE
zhe+dIS+x8>1@|b|Cep=xdkJb!vFKu`Y+BOlL#Cck6JC7cff7y&*<FRC3>+Fy>M=Rj
z1SN_=A!bPnUA}$+Mb?o^Q`we@UOqXq?P6n0_@kx>>Cw>hsUeqcNoba9+uYy`i~s-(
ztoR46_q;|}9M!O-%TWyzlnB^;n|#%03|UV2B|9xf$KwVh?{FnQHr2WX7N?6;P`b3?
zae77{7A(fa{VGqN(iM3<BlBL|ZuMXsfyzGWLE{cM6%gTA;^j_IZIQTMKfo0qpMUjn
z1JEu_!?{EXpN5#9sO^9zx&vUQcy&#xr?+r*vyFBE^O<U(Opqmb=5(rCC?8UUXz*Jv
zU8Ds<Y_6FV(K&XD0DwDS>5<=npO#;QO>w`TA&;?&fuR05_(p<WqG2&yS3C7d3N3Pg
z)U>2uA~gp$tzKrYsKo^$MQ2NRY!eKLMB@Fxbs|ylNhW-3vmr*qU$0H$x~coxI|R#7
zsr1oi#f}X!vcTvrZp$bI?y22YL}aEM?G>&?u3GNt$Tf*E1^JRU9Vc@fCVLz-176EN
zwP2`?)84E&c{|E^O)JdRuaDZ=cyQ^2Gzcb$Z|O4e>V6nDR9QBN+9{?XAP`{%7tSIX
zsxZUg=nDh=+?~I>htHDW!jr?5{ELYLB_VQc-gpDEb-gYq?+-Q|8U7`Gp*20{&OFdT
zlDw$kebz_t=8Ve&p2PVUP8n>t!JVNDFiQsuXTJjGU@|pZU|);OeJya)!2+-f%OE&0
zNxCspMrt6QrexM#8a`(S+)I;+=<BX^VB~rL0uyvoD9AbAoJ!j_C#OVJ0s{~X7A_?R
z7DcV3KhU1g=q-!h?FkJDbgoauaacd$@4+}2&%algsf<J(8?V4)id%t76e_d3J87N_
zH1lTm3qrw*`Dj`bE!O97tpztt8nNBe%Y91G4L$c&u%5L9z3~GSfqs>X*}@Y2b&7p|
z{QF>-5(}xxG%Sk^ip&aCzVc)L>eI9VulUk}hZc~LqnqD6Wu$HhKk<uGF6-mdW95aT
z9&VdOfB_@cbkeabI)S@@0akMv8ZkTJ=|oW)F8{UyA(gBYD}n~NxVSY4ZR@$$8i+}v
z;H#EhP#l-_0HZ9GFXAj(fT&Y?e7!U77N8W$fA`qGl<=20nLM<ifm+ajhEfn_3A^3L
z#bB8Z-(1jQ!4?oy#K^CLjJ9BW^*e3F{W9VWZ3<Frh|Z!-fB*mj;TQVo%pUO9C0kEm
zYr)4m75cc$A)l#X*85S+ua`qXqqG~YNOv11<QMCix>-~J0XASG&>d1&#)ili733%r
zA8M^cyW6c+aX>&vR%>hE2ZH}s!J2cstxp~bc`ax>Ct1U9*e*tdpE9ec(swP?+}!>%
z^V0*N134ehGAO~oPY;ZgNrjpmdz>VF#Gl+PhC*V+G3_+~WuTz_#M}~i(vk2;#}6ck
zK?v8E3W|5SU%+z4FQ<h=?n=ne^@u>hR9w8iVX6wq`K6FnuIAlG`)|z-OsWM_Jevb)
z=>nSQuT9s%my6u_M!i0}N!yMfdBBH=Uj6vkZ+<A!28NuA?mH!>{86M04LKLwc1un8
zqevPWaxb{-mYeZLkT9|_JL?RUup+PF`+LYP5SA!G>d%>mcL{p_U|7C7G?*PL82z+a
zXa5KY`u=Gde-bi4Iu{o(bmW|>W#x~Hr_A=2px|IlEzQQ_J=fn&4SQ6i!7#)^CaGR}
z0VL5uICePaQ$|Uj000000000000000769v4S#jz&(5Y1(TfT<c3L+9^I5%trg(Aq3
zIS9u<gVs<k*w9*-txY>F<*((E#4;A207~>HOgMqLPwXGV%HyVpenQH>(ageJpmd(u
z=jZc-Rx*wP`%OzjQq8Re1})tZ1!*dsg?r;Q71Id&9IMRvJah^jVUop=3j95Y``*+O
z%F7w5Y&fjM@=Caug^ddV#N<l<U7oIGV|FDvvfPHJk(m-JPwG8+e01Doz~*Ezp{>pV
zh+4D`X7NuACo#c5p-4B-vV}R`;CbFChTX17Z{<}3?Q#v^77l<5kPhcH_0~PaGF&Zz
zB&pp0xTO+cHnDhs_E6`|zq`}Q&l!bC*3<VMd*PSu-Ck(N6*tQ;oS14tDC(b7sE-dU
zpP-u+X#Y0cxUh(HrBr20|1>KH*Y4S~M-gbP0AGKJ73^m_rH05%g$KwQSrb0L?$ctX
z^kXjc3wR%W!w+_QLWK|@kO&}efZ$4~t7)w>nkg{R@H@79kibr6+q3OKDhJ|0#tvad
z0@uW!9tj@hTcGXGU0A9#G@*bLj$e?T2^Yrx?Lh0cF){B;qyaEP-juW3{XLZ#HG611
zCM{l<XFPml&t7t3`ntKPF%*th7yoJTx;?W6@+cQ!mwDzyH7=>548m7m4m5?Ytz0*B
z<&V_0!tJcsCSyNQ>_t*<+KeeTU<_Fcym)t@MeDo8cPkh>zh>)qgaihYEFN|3b-QY!
zpsR25O9U+*c^f^8oOlVV00m?4HhC!<9VxUD`~kCm-%u56-*Tu;dwlHKvpOG%0Ohvd
zk5M}Iwu!+A<eUV@=eOv-o<D`~JJHj`ay+D&Vb%0NArl&aU8+L%3Vz7#%?vj=Q`9M{
zpbk=CJ!tWuQihka?|?ZrRycj{nA-StLi$WWpW)g>G=cGU4?l58B1lqk&;deZvOT&+
za5?4cZpxJ;6*%xC{>rAUt3k5qEsTDNsa=!CvJUi`Mbde<7)`gnq?66TDK15|l(04)
z8tcAOlQvXAZ?ZJ#e!q255*-q&_hvn|7<y|z1**&oPB3z!l0FSl1N8#7o-0(P+ssAj
z<benmgoGY_&R}eA1f+`~Z-Q4jX<a=M0eN2>-qS#0DoFtPuXGxavPdJolt3*XSH=!N
z=K56BV*3E5DW55Wv{|jR0hbBiK-7$%_A1Row8q*%B}AIj#RG12qUsyk?t2-a00000
z000000001qfApg!YPt)SaE1#`pBU?crzOhxz!xQ5t9yCE+Vd-9(^&aG=@whtfXly9
zK*i>V9pdPd3{-<IV575jL1;jE00001Y9*kHUX|OmHX!<FPINfKc>BQ9QMVsB#*Nz9
z;E7?R>ec!tafA+3ki00WcnM4t-<dDFMa1EI>Cz`b0z!~^-Z}DS`)9KXZaJ73ACjPb
z2jv=*4oXy?cG46a8b=9JE)^>=XvDd!a*O{TXOYW4f)XBXU$JB74DT+ad-y6?h+t-O
zHXGQ`nSOntEJgqT000q{_C#M(64>Cc5yOhdsgkAx@gTD@guX@8aN}R;zV!pp)(#q6
z1ra@CSB~t>VeQp#=saeg0tGariLu3%Ry>JYM<<;Sj7Wq#?-yZ^(sB3MW8a@1Jdc_`
z+zxBm%ES(QQ1lej9Kt5?(xHuM7<~EaosQhVz(q~(e4|$W&{St#>rgWv;a#n%zW*G9
zFo7!v;sy)&N#ZB(VF658$M;X=cyPVkS1@l4Sh;&kZR|fmo{Wdrr`<w5(^I4z8pK>-
zrkhlvWt}^mDcy$YT0!d9y%wjx5p}yq&Ukl~8<zNrbd<L-zApR0Z2=XoG@nda42{i;
zcywXmkt{$&q$w*&T`atV@l#PW0>vSq^+1kDol)j_`gG3;_+ym9T~idQ_7lh%(()%f
zOh(9N5f+VP>NuL#GZ&5k8<BV8b!sQ<URpC(ladED|1B41yH%+mlQQz|x{cD#Nf?4M
z5SoeUj}BvuO@uWs1UdWmNS)slWBR7bfw6K20k9nK`c9d}y!=c%Xc0&G(pI+~2ns5(
z!{<K9E9R^98+H5D-0HL9iXMD7r`2s6I!zYf7~n@4#0{)|jFpBq5*SDOm8i>N$g7^C
z1&fH3r+S@X>5`S3&l7he-Yoy=R-!YD2W!UU0VqN3$oYcC*c7>of861qiB(32DZdJh
zF!`Gway1m(c?Gi@0;L1}n0HbUPj-t{1BlGpIQ{sNSwd&_Ls;FUQszk0iCQHmbPsNv
zXpyal$N^_ac5>P&{#0$1Xl1#uiCl|Sdgm&CnRxc)mGMUY8aMG0CqzJN8-CP((VuID
zZ3NN;a<(p!`^~L~mGfjjtct?b+m_EKhUdM3b1=0*{=2G%!$=nZ!n4dLQbg$Gh02gu
zb*mgy<!K?qBYPt9&o5}!Dgn24F4ReI0~?uyaQ~rdAX(tB`*l;&j{%EIQ~S|g*hymd
zB7(@)N5jT0HyiWFDBvvFFpLim1q<N$+k-hm=<jN)ra&62Vo&|t0o_pDiRDc8g1`c5
z9}GZ0gst&LQ%nyLTl-Z|2-AnnI$FH0kuu(|h@nW?D<;aF3OJBS74S(zh4aw{a~sOr
z#DNH(QT>#uS+>T6;y-LE&_g;w@I~3~=bmCaP^v+3WnE@z+fO?^C8$(9q%GOVP6Y&^
z3v1K-s8^r8zF<Z3XRDqkP;LMlE;<L_$B<=kQx`r<bc0})kAflr&Vzs!q#bx8ZTDsT
z;O@O5@wChqk>&6u6Eh|4vtRZ2g356Z|M&z~QE2{z7FTyPbF(LxsCwI?sh^22(AfqH
z+pf!MzF-V&P3Oy{!>UgTLgkRvFIMqdD|Eh+%A5}zk^?q9Q9nAOYE`}GtuQ8oV3*Jl
z)Cxd~SrwMI{qy2lzx*1yYd`=10asK7Gt~f*OT7>Z^jD)=W3>}16SH`{CG;GJq#K<e
z`aXqtL3<A<VA1eepfds_F@$w@alNDfVL+b0mxO;3|5$mVdf{p_dsL9EHmE-X5x7nn
zSw9wO;j41jQ?9Gb7}p4AK7blJ<}67N;5LupsL?XVay}O`xJ@cgs&X{lg7;(w8Khr#
zlXL(vDu~Is%;xmT*8rXM_80KGRQj0nq{GtpR<{qZ=u(A0_f21{bepMWoQr$Zk_ZRa
zk}AONN!`Q39Sq73tS_|b#$mvqTtX`LGiC5w=(}F5?hy8qD0fs`1M>_IO7z36riWE%
zMtHTP2l#(oRI^WHPuWXyr8##D#B2abmxg($A`yngvqaJ@Tvt5$hy=lq49o}jzRYO(
zS~kTI=|;H0En#PH#CEE@tDETs1%mM0Yc%{{IUy2qjTlwI@ywVZ9w{g)#l!}NGJJ=u
zKgX+Tw7m(Q5@o?z6&hASV@?oo4uWg<zE)CEK_i2qds<26?x&}$4`hvloe*6?XssM%
z$-N+27HOGO|FqzDj0SMFP_FYzl}UDr2Y`V=^?9?}iF$bL)>{b^rPdpn6&?A7O0^RB
zm%pJL(+;sp!ZgS1)S0PbBhrbGX)Y9{jq~Dzc=+xijhT6)`Dli;w2r)w%_xq!D|k4R
zn}jng{{x%j{|@>|2SZB)SLK}i5Z)!1Cp?ms%<TT7U22t$uTLtjC8L-hDIV7c?3753
zOnNN=V^!ZRl^B0Ws#jJBAOi7Ous|QW(xdWME*@O35r&o|=$JWi4kiKH01HT-Nug_s
zceA+Xk}C8gdmK!U!6dH_jcsG<S+6s&uT#SCr5YgN`!w%tE>b*`8XkxrGc1oPU0*v;
z_yW?ded}41x{y9z_9(N~aiGBPz&Yb~+*G|2!bQ@WjT8ZxQjTW*eP9+L8s=HkYXV<Q
z8|(5H>gPe7HBWdFeYa0v9vACh7rKJu^VQcYtZFtc3_4DcuCowFZj(Rn1Hh2L1owMu
zxToOh4;o2PYX11t7<8KMMFsZoS1x_O%uLU6bfWC5p?m*Q+d7C8?Awa=NwE9qRi#}<
zmo~&Yw>)HSikW($v;JL^fT+c`-KY=ib!DB=-olQ3LorsRRnfkyC@4elX-wrsi9E7s
zeMZ$$Wk(J$lBi<s+Ra_+56T@9{qdwWBz8YN4`YoxZeAZ&y$dfxE{a+lB0DS(RQ|nW
zH%GOocR8_xkY2J~HLP{q(_>XcZy#yC=(eCwz#<|J$b9TY^gUQmA#-X;1^@s7X{y5W
zwZQ|9iB(fwlH#VfpVo$>=P6>~0Rzg4cB<Jf!FhaGj&XtG+#=aWMjeU;4{-Lb<Ke~N
zurjp2wQOVzZd|-|P93OBs*HMBz-7peHVo9jOwCGJ&O-n<)z1|1QJ=Elm(hYh$+%*t
zRF6$N2k}s5Ew9`-iH{Rc%*Z0F{7{eWSNZLF1W2p@eHZK4LVIHy8*@_)d-`bxGt*R*
z|4Y1CxXT-Mh(pj(=BvTq9lz-I;eJe21G43W3Hj)W*|=_6DSHp=7yg!4M35fu5=;6=
zl6eK5GMQJGV`%7+Rm_pxRI|JotOj&N(k2phS~+5JSyCuZ1BE%46E@exE6q=(d9NEN
z?ua<(u82wY_c0SY;^57C=B1{W7&p8x2~3|FmTO#W>upei>}TYK-^>~oC03GUR1bMm
zxU|g^yxdGs8BNNJc4_fr)>7;%*b&$g+F$>0-0jxH{O4;v3zaGjhau_ix?1u|;Ima_
z$W04d!P3Q-erBo&7X?f73m)%IcPccK!z-J32DOR*Wq?VA(a7&=voC4$BKvC-66A87
zl|=fxC{{dvu}xnNu070eV{h&TRUMJUt)S%-J1_DpO!<da#=)gxQ2rk6?<>TR_aMMI
z;!`%n6$=zAo!GHYms}~j?mA^Zo-4j8Kgxu2zTSweaE-_vG1<zr$}5~Pg?2o3Xmc_F
z6fVyw9jV50@dtE!m}w(VxmT2;NQ$j;!v6gJ-f7n_en{u^_Txp}O2Eh`iq}65#QbbE
zc~l+J2gRpxrud#bhwBkD;|wz;hG`lc%|RN9AR?N$3fx5itJ=!JnPUnVG_g$!EZ3k!
z7%Pty^fWkV`m}{$I*Qs&-DB3d{!Riwa?=d47xgCr1Ja!GqIBF0I*~E@XMPrLX>)IF
z)LmcShsiK*k$sIp_<Z&$qiY1b*FQLBgL$@k;hv;tp`{4g-r(u;dWp18Z%?0}<bwx9
zN!^`w<cTo2Lm=(+uZUGTTw>2k(~^e$|G%}oulk}s{ZIGK)9;Nwrg;gU!BA9*0j5kr
zaaoBPNuL5ZmSY`9(Q@tiPFk=}VW=aMUQwl9l4asIrsRd2X>5W3p6HIGUSqrU6Vrx?
z>zn*6mn2f6%j*ya-F9=~d=Y5-zmH%I-r`J|HXq*E;l$Ij+nRn`7-yTc&#2wc4s|bx
zhUOm4bKvoS*l-4b043=7j0O~ATwC5k$S6cVpU<9q`U#sFdTi&D-*#<v1}NFxcZk%4
zW=Xg^`ap#<w;Fow!$Z@2e;`$fo&?vPL%8>-6mOC9XX~?!H3GGDW4tbx>od6CT(v+{
zHi%7dPKe;edA=0jkfrHH<{yr5Tfk?<wjkyI#Uu)q6m?wf<@ainy7{M|k0bq3<5sEQ
zDV>jjtJGzbv;@H$5`d!n&zcVWXj$OJ&R}5zRjwT2&k~*h`(xbzpJ?^k<vAcA`ma|8
zzI}?I+tgH4iNDfRwOdCN^=mHWLg<ulj`<w*Eyv8Vo{xHl(gh(L-jY$i=;cK?G%+gx
zh}WLG@~YY+iXR^cVHyO|Fh*9W*{kSUDo)FXJL(VL*=fic(~1G`v9!rgBMhfmU=h)4
zuI^69y>5Zrl<{t<Or;t^2zrz23Kz>yP2&%yMPz#$ceu6wo(q!nIEZaCChqIc?nk5K
zh1Apw003J<y(02GaZ@GaX%o^1fW=;>`|L!KBr0*njy!oX_adA_!})#~4^!~Y);%RQ
zU6D?H91LRgKgPa556qIf|8cqj&cHgxZWM)b!OawRr`OKAuTk=6t%D__zn7JeK9JL>
zQKR4@jsZB8Jjy4}NUh$zvjqc35*99FAOO19QP;|*;K+*ZpJz^8tNF)QpBEA^joJyZ
zZ^-J<2bM;hDPuROE*2NtD8uG@`8=^gJ=Evuv-;~6=nIolh-23a0ielcK;*wL?{%t+
zx!(R?0snXz4qR{iddkO`-RDugIEB8W&<4Ch<tmmVROGCS(H%}%#H>pz%%LiDYAnkV
z7X=Es5)oJ&&stnxo$Vdqa`&Ke8rwQ>a7mv5@R9B@`}OGdGdxDTtSON$yx3~Bz_7{A
z8zoo-Z?G?&<LA^MJx>pxvS{woMPMD=o8URT;nKZ#zi6E4`T@G;Pu+QD;4@O?V<B-B
zP1e}peY`x7NELZ$)aBO;_<z$MO}LQqWy&}SRmf<}sG%VwC97<cDFt>i5ImzO4kQ}r
z342VbYd0Q%j~AItrs*@CYzJZI*4S7_8LaMuWN`wQiwM2^`VL86x+$(1SS3o0Xp_C6
zbVP;_vA-vy<#c_El0A)b3XNlJ<SpJ}=PT~INVWBcuJX=^`ji}jqSg0uM?l)y$tm{r
z?Ir+@2k3{3|K-<fpbU`n3p#!<C&PxYtI5!fu=8g(i&doJtbosb>bAJ{DPoM$-mF1~
zG}oMqB1-XECe$I%4n}E`n=n~Gwp*7*yqgkLQ^@ZRPS#A7+$-$M4Q1En`&K6;;6bY+
zxL@z0r;BcYGNqL4V=f#300VrCFa#g2gFAo~R6KUa7NhSFQcW2FaW0rGGW~#*2LOm%
z#=JE-z|kQkN%iz?I4?0`Yn7&jvq))N(I|~W`4Pl5p(Z_%iN8<)l8M8L2Ch6Z#>w4-
zNbY2+;3sUd^@UaEJ;RrE{N%7iL}hj3f<rBhfmL%P?N<oZ6%2{$^N@(>xi#A5VCRSe
z@k?{-_uM(JZ?~*%MD1_GsQf7e@}b9i)d)y4n!aC`a5={H?lddqKN_92u<NTOZY)Am
zFhR9C!Ze3C9o>y=165`j1PH_g7(R{#zVl9#xz0yyo^PSZ;LQT5C#8#LQtp+lfuQLS
z^u00Ql!?(hAOGvr6E5i)Crwlw(|s{Is~@thGI^3{++M*buOAC2>pIZ2<m)Y327erO
z+>0j$Ph9vPecD$t4C@YJM7+g_Z~9Jayj5!b7;{&%#Y(REY-}G0mro>0-yo4ADL#QQ
zDp3a+CLNXM&j~gsKceU1)Cm#?Zja9T;_=#leRVJ6FEM83lYf+J2xS&!^TYL_(uz{^
z3=jC{JpRZNrRX^GV?EA@nm+(Le$=0Vg+CIA=Q%t|6EBEyg^QXJ9v`5|`qh4R)Q2Wq
z-vY099sb~s*JOAkO6<@tb+z?R`IfKvl>6-kUn31db5MKoh~SCpnI#p4;U;ux=_%pm
z+Yt>uFKXB((@v@<oWvOEcTNZ`Yv%7&{Of}>I_k<5xKzC@=a1*KA!bD<EEj&)Di;#4
zTA}EzOu$>%e&nG9NX8fPWBF+ZiOOAAccV8j<yieRGvb^@<i~<nznuDtpa%|rY9qE}
z1ZcvxuhyJ}yF3Y)M1b3+x<c4T{wZ2D4ejc|L!GPH!N<7R)S<koW|-rVr{Tu34)-Zx
zG^dv$hJNn?H-S3$<BPaoE1YgdHfkuNvJ5a@n6Q1%`eLS@H5JZ(6==#NyL|ps>1gfe
z9qZp(TIL`z2}8KfMXy_yWG&M82hiy#Po)ER<viU3AbJjGI_kjRgBn1r&A<Qv00J~$
zI%E=Kw^JiAr}lbIB(a{dshm=M?;r8!w~-nEhK{rxK-#8Vf?*8d6a$w}M3PW--pLug
z@x*Z)N-{YFx3>**k@~kRv@&B9zUY0cqTQ*M@Z|ovShSN*Vw4disRvy8AX=<ht|mh-
zHC{z73sa!LaW64o0000000D|S(H%1A4o9`h|3r61w>GRS5NAUlSQS#<#N4zbSxiTV
z?aI1`*uj}|o_7p*w%8;<xJ3&`K!=Tn+Oj}iQg)-JU@$I-yj*g}U3L>p{m|#y!QNdk
zoSK+JF>3e76tl*;-QM(FG9!n;cz2yPs43XNp3!PjMUQhHpz=w$G)<p9&R(wemB1*K
zZw>@rQkjwKc)^i$m!tkPO6C^*y*AOWhp59z*Co-{fjtM50g!yh1|v_Pnw)kl!hMTM
z#eya58e;xV1*07(6u9K(HS{9?BxppVD2^tli?|QB@wiqA_dH}kC^?kj-eUN%Fykyf
zo&8MMe^|0ocd-|NNyVT9o8ix2(|yLJpikTUVH;6KdUC4~AJ0AQ^s*L_I}xz@Af_E1
z_598hlCyLpW-r%;eX=usiz4|zyx~q5UJGVWz{Pt5`$RFv*5b3Z9%Cy4J}*-x6zE)F
zHAFgkswb0^++SWNRrO3=c`X#$OAaF95voY1cQ6kmX(h}vPj_1>)>P;JwxMoqq-|wA
z1DEGWPs%4#h%7}wx8k|3YrU0cP4Bmwm30fV`qx@n+q8c^++!srkI%Oq>!hp39C=M6
zAl;z5N*^ai6cfc)=^rB@xt-ux>a3|&)hM+`BPC-}wccSQoIXeclzb$TIW^GN5aj`T
zh#Y@w`Y&G&yw!slt;L#Ed3?>oR5xfAsZ<{8w74p50um7k^yNbCl8`h^d?z_1<3B6*
zTZR95s*BLSJv@%fbE-J<U+(N<#+|W_&8R+|?l2(fO`n3B$en^iWEiRZ?qYnh?2@%J
z;|j-$E}{v}26?i+^}7YBxUrN-U^t6UHHP?-BY7Lg+b!W(4@$8}43qM;##;W1`CBYP
zj=X?2*`?U5_M2T^+!Y|q)I!!9Z!A1WCuK_76YW5L`c>1DD0&@ev1y7n!7EA@P$MLN
zc=WNrZ)PMOWx#)`R>098io91{{A<T!jqOn<h|YVkMN@Pd@k3s}sE9bcfzROt5_br3
zZI^JJcNHa%&x4WE*Y<reI8r-VGIQ47?1K5Ws$@WL&Xz3E``T8AW4DiabgCd#m4zEV
z269w>%&Ts0DDbOmJ<p*o`g0P3!-LQ0tSH$M=|~U7Y3Z5o1EL*>r#k*y2d{oY)~)^p
zR_CSIYNG&4=~wYO{5h>p)f=g12=BqY%i^X+$9fC&Lt~~y@f{j`|8sTqYzp>&37_mw
zu$Snb2l=0M@AT^-)t>(MiQR1+?7X&8Ex;mEIAd(ecK0QoEid^^jh>m{tc7fXL%_X}
z`${vWV!QCekIELMy8<CAw?1Fk&7@*${>p9s7WvK1J`(tKzBvlsjYv{jVGW@D@ine`
zHjq}}wJYtHFyDlh#HI}dQc?X*&Aq?ewmk7Yxtxx-U6zp)b2o7-F+YASn;vBpAh^5w
ziLfx9)hztLl-9VXu(ISl46Y3%7A*TTo_>`Q_oqSVIp-MIBkO#Dg8gK5$I;6qQ*^+i
zl`9N{u>?R}4yV%)`YS^1i7$~0gzgTmor#Tfds;E>b;Q>5B?0|kzwXPDmZU0;NKe}t
zXbO#7=ZO&)CUoX${CQX|oX1O)W~q)Jd98J8ohgQJt^&V3IGB^lSE6zS0&e5ENs1|p
zFX6yK`~J7HIq?OAr-69M<g|~xFN%nZBTd%0in7P+zm?5o<<-%*8~e6&Kiv{{q>T6w
zChg0Od$s8d;C2cN5>IP|5nP-Bq0mc)2CHZjz2r&fl=lkL&~W+>LiVYNb4cYjt0lXj
zNbI`sMs4satC}FoUNhlHMBz=1uWR76nB>1u74@zZ?Hy8+wV;;z`t(RUmkFNmn=mdI
zrj1I{sh+yAF|Jx*(#hVA=T3=1oQT&%DgHpwNY5a(0FHS47O*h}ubBaU6v#&mReVYI
zzDdgu?9c)O{i)IqtnZfZ9+;R8_A}Xb_1`u0wU%{;YSk|JR9sM$CgC2VswJ&VyI;Mg
zH>vRaHxKeD8Z3v>iN@ldFfJg#Stv#-o7#Bc37p!bhdL|Y;n1fg+Kb~{>eTpEZFh@#
zKh!it>UZu?mG!&X<c0j0dY=q7$@of8P2QRUu<8LgA9ZS(eO-%)M*MkOb&C3k)!~;6
zrTQ6qT~ZB|3rnJ)aAi=Qyh8jYSYOih(T;$zezs$Z$C5#1Qy0Pur3#?3E$Z(*gL`tS
zWuw~Cy3^}5p1-ReV2SnynTU_j1gAzMIb=^vN7|Z*bEB4XHU<J%lK{p0?+g0{`pzbd
z?EN4i5QHnA*8YjwDJw6<(g98;Qn73-ZyiAvJ+b~AYzBkS`_?er4-JO&Bwmpi2Vhl*
zC7=L6^4!>9?(A&D7n6lu$?ZYK<RAL)3t2;EJrGM(BY3Yb6RHPw;=LOC?A=|jqqvhb
zbj#{zx_@5}O>OKiHz1_QnFVJ)J&wj{0pg#+@?Zr&Cq6PKJW-Zh={&5jM)2u!R1&91
z!;ba_gr_RyEf{@vsw%&A1l+QYF)n~awwTu^t^s}>iT|Y{L+A$NeSPpf?+d3l*aq}H
zaP;7S(l6eaZ3r#94${U9*hX&yW8xYRgi`oeUR5ha)P%6v%_V4}V;|{|`>(YCjuW?r
z&I&!)s}pEkc+||@I{#{yP4-z<<Jr~1=W%Z|-)3ukZOCvd#bStVsLYOl;aK!cSe@&=
zyEi{&MINTi3E}UM9?Wn!biAVayN~$Jm@z$UW@<QjvpRNYOmQXMbVr`cY1W4cnF&kw
z#fIeKAzoE3qc1P^VG$o9Nr8-owZMIUz6ZNZDVvYlO-*kg47JWZ(3>_Fci{d7s;}N<
z^D(wxaj0a$>fi^n&66}-N9m-<s(-DP6eI^fUGDtYj2ua~FsEC~Pe%+zM0xioypc2t
z?<1jSeF|ZEh>9$>+iSp#37=_0!=<uXk1ZqbA*1N>T-a?@e2hEq806GU`_sI`)?Whg
zBULw3iAWq}zH<4CP7{wBOohaPa#c<p5QOi$!)41!<u86@A+S-2$J=lE@#(Cq9PGNz
z`pWp=7gZZ0hwBP~Xy)QdH#-Pie2%5d?Q1~vd!+TdqORk~Ih8dI+I$I0hUtrX`(KwS
z?K<4v7jWkwfPglNQu%yD9AX3qbP7P#$0NWo>b|XDJn&kWJlAe`amr=X3&_v*m2$R*
zaBPxxjr!kg<}dQRm}3j|u(Zho_BvA2vMAYCj+V?)&};4}tR>TOYCP{P3lfeW3wqfT
zbGGf!$q*xU0>;Kogx9#-t8r=XK5n2|9%yxU$6{Zk^PU|M{ID@9L)4?V;5CsH0{Q^f
zTI$u6ikpNuVXJ@$Pbi!`4304?llf(4Kl_$A2#|${3amGpm)UV^<H}8KJya_;O;x5*
zko-prE-zYGDFKc&Be7w3X;7;?yNFf=5l%x!`UOsn+Bt)+Po1W_VzQhfdEG0n;&^xT
z&wiI9<i%1hiO?^nMCHohK`cC1&?zf{0z(!iR2LtT1B!D&4sOzQBfKK>`M-r_h>8Za
zhe!#GkeksW(r1`I>6LB(y);ut5nY83(?etE64}Ol!K9f&WYmChNJYW>KN0&+VLP0Y
z<5YjMG}NNI4bVT6{QRZUX(R-1aFJSTTF3o-bT*+=F6>rE(3o2|hJ=*XO_(JtMh4hC
z%_C&QbOd>kA7TgATZ8Rob%AQvhfx&)@_iex)ZF}bq6qM6La2?ef>_+DV5$7+Sc;K%
z>jyt0p)e6q&eK(!PHrtD=wsX2@MbH}^3?8kzxX(PmqGo95Evd(o1PuLs?!+w1d^?K
z&B6D6M%0nBU}<f%{{e5At+uC|@fBv(JpDNO4+1y=LNykW2rvd~c&(MO@~2`kkH^t_
zK#?MR8tEkdKH^q=&}A}7PK;2Y{M3=-q;KKHvnSR5u(4aD%&w8eX%z-*scr0Y<*~?l
zs;5s5#U>*zNL9b0BSY*at4M5Z@U*oM{&bUGzp@YE*WB^|<#J7{DO!JqBkm<QE6`MG
zyQzbCah*UXw-mhz{hL%o+gT=B7BTHr<~X4gKafs@L{jh|fLi_=tADo$m;{)zCV&VF
zHh;835>-}0y5KgC?r)f!2=(%>R?I*((5gF6qw9;!&3DtYC4?fpU`@SV{KTK5m=$qs
z2npp#A?PCeqwjS@pj0-ft5;wLjlZ+;n3gdPvP+&pn%%GK5`^W4qr+Bn7_i~kBn{3F
z;GDY30c`l0#=E3kwi>6kxybPZ0}1a;2s$@}jd31joq?oQ%LD3tDWZ0g_YT<Um1K2W
z(Cwl@6SCPP7ibf)euX01?=BI2ovuq7h)tujWA-Wd+*KG?&Z|PGEQr0|Tg4aVza}M4
zRqYk0Lz~xfw!Z~BQ4&9|nJ^zZl97BeY$*M$im=|hEN@p=>T};1zITvP#uiCkMm$;U
zYTH8PBTsT%HA(=3E&v_~x$hna5N$Uo1PWswz_HV3Et0D7R{oE2c!|n#r_B2RQ7PHz
zLW~0~K*L#Vi70en5UHH_J$*-~GoE=@rPEU|gSOE?GJE6AOKBx#`<t&FME`0V$x#8@
zi*L(8`f9^&n1uOlRf+thPhk$2(pz?f{e(miDX$vQWZ>s*O*V|z@kVP%*0}Fx$7Vn`
z1pKn%>peB7eg{m2L4o-Bi<iYZQb3xtu8@|p-VBU4vohWe6m|`e6fDksbWvsvj-6^c
zGFYTeRyFsR>Q*P5%YP!}uUCh*rkiF`CIP$#<jp6_yl~FS0frQ|f66;|G*>do4cc%L
z4(Q-qGPdXG8iAy37p#alp6Ut>%aS2>ucJ-nr%YRXz4PWbcDX)zN}l|iOUm9eFKC4q
zGV==DY^*G7<j3fV_%5orR3Urad3(6ab;f`bH=kXwvDjz|b>BPLMwz%z-mhxZ>6}nH
z*hchRLDmb5@dobR*MZ8G0d{nty@jt78JC@qmeDKd06#N|A6skr8C`r8I27puN3Z|@
z0017r>&O1^_6PulQ~0$%@`mxc!9c}sC7!Af!nCDKWT?v7qc2no{&?s<00093P53|L
zi#aQFuiw_V(=rYMGC)#rIs|kEqQl`c#BG|%*|X5h<0L1ReNkU(uzfMV2FphM86H)d
zuW+jr$y?iysVh<rV9Y~+XXNp}SBIq7zZl1{_l@n16fo6J+K}SQve<j7<!H9LH|p$b
z=Q3WOGHxLF6`X+N81F@bjXATfVVhxOk;JZRU}TSa6oQgdLx)e<-BQpkP|ekiI*vM9
zT?Oqdxh-l=QdEz|gb9mAr598sKXGenk@WM&nunA|o>!D&r&y`=n-HK7mfFK0VS_QH
zm^77aSS?a%PeI%D^k59|@Y!W3^B{_mXk(r~2&d)u#gC3N^5VF9p~mp_02ex(@qll4
z<+IajvFg@C{}>fahk%v>jrdZ!U_DGnBPb@mv#Hp}MPHqMxopLbSUtM*>-e{-Ux>K6
z=o`yy;^}#1xRW*-H0EWTo4v;0eKb^9yJPreM5YnJeGd^w!Dop*Lt`~KUGh}W3bVF(
z-FPRDEhnG%3iR8S^qs3dGfjf6+d;L;Dt1;aLYUXAN^uJfM`oFa{iNp|3idj2RSvhR
zK%nCP<%L$us|?GS)zk>v!iKD<ikGL|PzbgW0ofMyWji>NhtB$c-y+mu9c?FJT-uIr
zz1v$fY&@M$(LOidSiY*#8Yu_!jA&=IO)$v0Bk!%uPn#&Rw_3t@QNAKks!rR3NZfXh
zOPssI4w)YHB*?hTggzr+06)$M_vN0-tF417YDsk{<hrDs(?r_G5F4Vw+}s&IEmb7>
zVrDBAQ|Sb~ZcZdMP;hKo+n-*vB4QvNeg84u1^~PFzZT`@x*bUra2prOD=uK!J$#8$
z({&SPbY~XzZQk2Ju@OK4HzXV@%LwGoG#tRV=SuPch2c7s@sZL5Ij3n);Xfm)z{yL|
z8_xaOMfa*fFOZ!n$!$sMnI%dc+Aq(yBlr3Ba}UYhF=ie#5;lpq4#s^in_4r(F8qJk
zk6G}EB==ouzn6lZ^WoW3k8C`Q9QyHeBk&_4mmQO*4;CguJ6gq3hgIk*)@E-+v@p<&
z8YL3CQsCdW0~+x%ErdjbsdD^_oY4~}fbj#nJfHvo07IWD0=;rH@rpiqum})#xmpmU
z^l_%Nint%M(6SC{qvDKRP7qmWTU)>$2Oa;FG=T8jX1Vg^PB&@emt?R?LHi+NPKj51
z-{MsKAj#S(axI3AniZjtzJbi>cIBhFuY<j@rnXT}V2^5hPY2*-4~fx=f7|Rn+Bg{V
z+XI^>G~FO$u{Ifg%m->7$rmy19uG*QRSLC7cA+1m@V5-E$Y+bOzvKJ^^pE1BhCv^_
zo+%mBVFDrl2z%VhrsYlhlQ4gY=O>mS$+^5Z7;%`OA)89SY7n-s-{NqP`XP9CJV};!
z=A9BizOXD9mCar}`ZrC(iTSNHP}%fTr)F4!877}&@#0(jRLZ}G6K$>yW?gMmiNYV(
z_bn_5@*>D$RV*ePf=S54oV<-rpLPS2eQhr2292SW`SFu^wG-P?r@{`R41B1CfE=8W
zv<nswBsuQ6O|N9wgmYXHXNwE0vYVa%T^ny(pzSp6Wz0vJV8crk-H}Uqce(Yf(H8Vn
z6)n59J!BxxLVvS*Q5{r}$<Rx*x#`1pfKx)M>9F()<ZDLf9SsCd$eo94=rxRR06*nA
z6gQi$!XfT2W5X|A7bi9>=^Y0#IYljIzoZ&kq_Q7ie$~$B8k}vB<#J!G`ILJYI>9MI
z2a@pBXl{=%urB3E{_QE)Gvdw3T9`F(Zk*KZWF+8&N`{QbCEo9@=a!(0SStFk$D%|~
zSAPP*Iv<B@4Ch*;W&0P4nXQHr`H@JmDRYD|2xw|7gV3Zm6530uX)5P+O@;S(%1)Bu
zusMjGbkZ1RxcVRB1a7>r8v)d0t5ELki+s)=&EvpHhe<RWW4-5d2fs{Z5Q=WlFZ!JP
zHg1Qiq7BwQISGv*rZ5YJ+ntefjQve45QjU4^Kl&-PV%1S>mY=f(0X8v(F%T7FRk(v
z+h7Ux8mQ|Ys?9r#>#vd!On*o1@wZ1xKf!$Et4&^g402!Fa)j+cL|2;<;)TG<&LrU~
zNMDC9Ejek=^2Ed|899(=g;KB1jCYOsSOr7PS9>onWJO*<DfiM9SHka1t1-CnxQ4*`
z(fKx2hA~EI+d|WJOMsP)mMeU%u%d^NWL_sY*vy=9X4=O8dvvz*llsaa*?X6Zxg_=6
z>kreuQuc30f`54U23VX{)HcnnfA?o3GPn!l!~&$k2a$Ad7e{Qz<WlBFC22hEc*hwP
zGP<EX7bc51ApbbG++i6Dl?xz;)_Q$eETEI|wY0hTz)o~(2u@xhcbu{Oup^gnbr@p*
z@NT8;w}PTA-+f5M8?NXZ#1c3|Fz?{Wg`-A~yo>*BelAibOP@siqakI*S>Q!g0(F@l
z5EkB*V45}+<MZD#iwu@8BLjLz!i1<C*%Gzi*Oa?JLi||n|E3x7O=KMgE{2HzMdTdm
zD3kmah>!^xLsBir*rwgSlkI4fsS2ZPFw^gJ`y|N)K8TR}WPRR&IB7#O6!M0VqtFF#
zF*>l&`x&@oM0fR%-MgUPcMzA_zIv#ZS^9M1%GfW1F~yjl0T<+5Adi@m{D^7KY2*A5
z)EL{WDM6N6Zyil2X;8{r{4Cy|X4ZeM%NCiu8~%|)pcZmSRhEYWt1YoD>A9^5K^-s~
zdLce!+dizXo6*Eb3X{oS<5aSIK8NSnf=;-S$BGa>s2`3JN@hcFH+Yj)IMBLX$?UiN
zwTcfuXd|=q8V)F-(W|yje3K(empJg0z*>M~#MgVA-H>B%PdW6A2^Udsd?gqy_B~q;
zQh~MaYH7v=V5UG;2H9h*q<=-%5N=WrRm!}{YlYoxv)Zc;kp#6%LTELRQoj)FIY}E<
zPcb(A6A`unCTJYy>>RM3XrCqH<@PC=^yG#;VWZ{ERQ)5jO($%rn|ySXaSlxnhujx(
z@E~|<PzZzbnN~LB7c2ZU{^hOi<v{~qp5vE)<Ao+Zkv3Ge$U7QCPp8~Mb6o@A``E;0
zSUy<4rDfkj`<bUG;wD6aJ|!B3OM0_!mCgB(+<!Wmxj;VfLbos;cPizms|+voxQCa0
zdhlf`k@BCG)~FjGUrH&x2wP<Wp#nV+PjS7Y3rVLSxDKHwqZjz^BnFhnA0fSy7`Hb;
zR9mGAv@jU#?Bn#34uo@7ayJ48Cc%{Lkfyg-#2Hoj&zkPDscz#w<J5>2RH-8~rrxNG
zx+iDV0yBTGd<inHlwCV|&<X}*5igK-%Y_#C)oF(yMi#W2DH~SrvKq1j;boYJyf4iY
z3D%=jW{F0YtOsBSoc?56YLN`<x$G`>7;J}v<9~r1cB<qZeVwUuh6<zg6ZT6xWF>+e
ztFiubN1`^eU8-yO;xZo~h`S@GUDSyO`|~gO)Kcp9`IsBQn+pIGFs{V7#E^+=TvW*g
zQj#?ZVtUU12wsn@uje8RUu-=d9a7FeMidJ&(*nllAw7O{ETohXuisbFDCRcoKsY%T
z<V45Su(v*vuM9^?;wA<85X{R@`bKd23ow}(NrS`CsE&r^l3>VL@%t>8A0m%#L*q5%
z5CaIclbK{<v$UgNGg$jJ(@B(fk!v~f0sZy<^VH0F(KH*2Fh_qd@@Zm$ioIp%Yv9*X
zs3-_VM9rRu=2NC)eyRJj=)=oj<J$8d$%(|mgRkqb1yBzpn*1S7-y3s(l~t^E@u^MS
zUKR;lOl>pO)$9&u2VuN4n2KCFty<A6ypEfJXjIk6cF>LC9x#(c_E@X{NndtDP)hOY
zO|V&P?z9g*wL5I(=WFbC=n>)lnOU}5+tR~_gEyOTy}v9)6tjVAzbWr#*g08}2m4+@
zq9<vs86vkAkkJjQ!hg#Q%|5!pm3`b;3jIq?=tBRuvK&L~E@9`W=_*yYQi}@Y@SHEm
zpADrP7+%Q#b{*<cy&PSRKP$cVB)5c&t~$mzKDwJb2cdp@>SK5EYPeRl0vIh2c2^v~
zqjQ@Ib=G8s$X9pd;DUrfO&=fK<9<68MBdna(NA2!#!52C+D%~Ot<7*fZC$r=nBRr+
zjX$Spcr_R?w~-E7=u<+)2VHp~V$Lv(f4FBCf9)*%7Jz*fU&KYU-YP8-!I12kbOv8U
zO2tYBQ$+8!Ue^$kW=h1Et*TbIS=cIuInZ^EC;d-=0r&$;^W}cSIxC3rXS~6n`cSRH
zZaj+ekLi(&6?^5M2-O$R(=r*5dEERn2nM|5$`1Uj7jDP3u<5YJ9gzSlZ~Wx}w99Ch
zDQOxUA}MB~?V1R4OK;^^vD&_fT{w2dfEVD1c6XGviXNu#<*QHOJg{<hNQQK5AgQ5`
zLh|fN3-LMAihAywc;^=;9MA2p3rhnc>OObHD@2H8J^RgKpku>xkfJdyRJD>O-R>N+
zLOokYpPiQW1AuBZLXm@W(<H%P;{laYg(bH@8&@3%9=89SA8WmXkTC_hO^sjFd>?|*
zeNC1)@j%Kq4J>g=V8531XerOjo_BvCnUi9@v}P$oaX?PE;2g^*ID9E-j^PBuy|zTV
z6p(WvZoxO{fnEl~6P#m>RnTW?H!7gUd@Z3v*ic9jqTeq*_E*%)Eo|#Gq!5&amMFec
zrx-gnw~sabxK?IKZbn*$5ug1Jy+3YwwfQBA2~U8l<<fOX%|3D)+B;IjdNg}Sggv7c
zS>oCiVTy}}6Ak@1$u}ee@h)<}(%5@e&{GB&Jmccnq9jVeX#WVi2xH=Z9amkBKc&7H
z)n@VtNyUXFQ~@cI9@@7R<K8?@a{!<lw671oO#Udf2Iix+WYrzlC4oWEnn2Bj5ukBr
zh$MVvBUh7Y)y_y{le`Xiv!5pdPYE*Oq{X+1Hs|I)aYSBORsx2E42sJ{;_OGNT)=on
zs$Sw86x7V-01V!UDx|*sD#Mii3%THqqfC11p&nsx7iw@v&7y9|a=h>VFD~jCf;M@T
zFxn9Zp;LR6ZIDo9l=YU^#VC$ial8J3i{Zkhq`NX=t>UzU-5+AS8ZPV<2oe|(1WZDg
z=Z$WcJp`1{<}oZqixUOQzK~I-<{W*zwipSiXuqS2j;$mbfIa~ZO1$qp0Fe;`I@|HZ
zHaSFG-oQ9q7>M8LULXynZE6v>29=ynyg@r--|rgr6GcL2^`=DVG~lIj%jQ2~JP-j=
z$=AAhT``XO<!@fInV3e+y#``2NGqod4mqEz(WQHLoK8E-(-TN5ChAG_nbn<qabRkP
zC;XTuC6x2@6~t*T<rE(Ou*|-^Uov3q3(Yd*{`#h<lr||QRq})9CUM3?=hzzYNVS=s
zY*0?W(|x$m&LjNeiDj)UdIC^0)y<p&nIP^hB+HnD!i(OU&(gvMRV0jcPnwY%#O)8V
zrBo!LQ$FUFCB)0G;Dy79gXeOm2(j3zV!tAXm}W=QsbT?4OvaYZ>lloC-Hhig^zDl|
z4O{pY4Oq7BA}KtRhnFs{(&>Hu-DcC?Ss%B6GiHRv;97?hRTI4*b_b~}6;qK4;zi5^
z(f5J3fu8yI_0mCwN${oWkht{>LGfGgq&De(S5jVGVih(2V<H4r9^aQ5<Z85~9}=Tb
zP1013-!15@KxmSAnh}A)k9e~<(HQ-VoF15wSav%oYWc&+Xt6<uCI#2=E)#anp~u*i
zh!#gN;|Ydu2m-j$g<-1Tfge+qys5XsxC9tT;Iw?`4KYT~Un1$D(86>V&x^MY1CoBA
z)wo~=oe|WpqZ@R#u)p`h(`Y)D>l7NNiVGiN%^YR(1kn)U<8p)*ry(wJCy7|pB%7W2
za7Y^fUUBKLPcb;pK+f8Qy>dL8Vhj7dfv`~&-EdOp(O01uiN7d~?5G_7(Nb_aOQpCZ
zp&^A71~NXozPO&SS)|<>6?34FdI7Dg*qc8FYN)c^Rcdp&Q;^GXo4SQl<*thiJNaC%
zZM?UJM>H3M$WLhl8%(9DoSFw0R17I^4&&zF8syi6brm>Ieq)yd1R1>&D4Kh6=Pn6C
zg06>ur7?=q?~qM}qUX^)Y0CVDsFx{A{VE>2ngPG%TUvJ!X(9${X>2+bNPHwfE8?QX
z5!GhJQkDA4cgnA^3;&KZcPWEStFda8sdKR)M7LPp3y^RbVq+;WT7DOy)}+E}xM7dp
z7CuMYsqZ8d{}PGGPRt`sJlnbkoJR}O79>fY{%anAgQl`LhB4-h^~<;S{}d~#B-p#6
zP};$<P&AsHZ-fu?=i*bWl%A2$94l?RxCzi|mL&p$(Cre;8z{^3=90}mY1pZrD>4LL
z(0e~TM1xPO{pMHrj!%cf-G$%9lrJwNfhq_>v-7EX2X){ad&5b0CSj+{!ED%LiQN%j
z2VP?^Sl8wjjOavW^rV;(w*^&$X(2#pu;c+l(>Y|?0#{V98@J(vB-(+gxIj}7nitWd
zO>W$eBD<SN{^_#59-Bq7rd6GD*vt5yK=KtFIi2hq4H9r?&@}T+S1+NO;WFfdNZJ8!
zim2}3<&U9|BE?aK@;k$jm`R)*0MCii;7M#@cnh|S2kLHBGUcn3VE-1*!o1u$lJtla
z`?9}4+y}}T;rpSZ@P0j8?2dZNrrSjlWY%PyIa!2Is_USU#_%f#h?$f)10AK|NJgt5
z2H8x1WUOTpXRmGETXU(rJoIl$w=AV_?8{)bmnh;y`cMooHCd3CxZBB6QaNo)KLq`P
zzydw2v0gLxpG2P%Bo(KYOsa^R2c)M%{fm{I&&rh-*#%aa{W8taAAJKR%(NX9I27B&
z1*c5DgO*|)Ns-tvHWDp}w{?^r5#qU%3=bgTX9z#@vSUI`?Qb%II3tS7Bi-4zZekIV
zR=3%MlhQK~SU*jcm8NiL%)8bVuM?*<L+{7PLal!Hegjwk);w8MsJh%=uHl1ADq58K
zO`yJOs}s>B8{M12{B9UyH}s6(IZLFqVG~npU`1*@8pBJq3J@&QR7&38msz=f5oeiH
zRPhkNg37PS%0BCyTEYXZ7=sFy>#O!|Een)vp5ilg%3;|pH~f-B4_KZ45x|7%BWY2L
zQ!;C0%tm3PaU&vdTHql?0lT6-#Gu;h$oh7#{^P-FN7&!k{(Cil5}TtWq&cFS=TQEo
zWV}^aleND<ZA!X&Fu;~^Y2=SrH((d8@wQF68AIAn^08*xpm_eqG_RypCM_+OLkD|2
zE)3>%++znb*G%^0CK+b0Y|U<NX`F+X5<rmzd-d<nC!I)zI3MT$_gbyb91#9`s-1{J
z{)?s}Yx>NxyC?{8^`n;G-(MS#ui5!&-aGOXQpX3%Y%<xCS%*E<tB)iP*mL-h<c62x
z#rl>#z=Vrda8vvqFu&jk<HP}J4o4rHjL3NfPBQ?H7ralCW&iPHcmHzi_L(prk6?<*
zdE&qU^d@!$g#!siv_pS7nM243Khn2>nN6IZy|26?kA2enPIGN)nT1lHZBctyW>5$N
zUx?03*G8ZN(<k9T8Yxb;o#hJ+i#WOP36cqtO)x-0>h6Si(Ts@!`VAP4Y8Q!LYr6YD
zia-wAd1iZj#y;TZh~zismm8f8k*C#Hp)t}eWtLoiGm=!5QHdpX=Q2eu9*7kBfd*A5
zKLY;0Q^fqOgVp*^Xxy4m-H2h3+j+(`yI`vpA=Z5Irfo8eR1z(_yDJ$Q*JVvu%2nHz
z7JS%edK#<6nw5oDSJCyzmH?|nAcOD5V%5Pc{)0&=20)CARLyk6Ec~*R=tQIdi72WM
z%3F$|$yeNm%a2{<zSvoS6E^_g%JIkk`uXHN|Ni{>q-h+G()PW1a+&iU$CAdbc9NQv
z?X>T;E=_K^RzMt>hjeMRX(_9x`HnjEM4pCYQ*!d0hO$9drQkPlBA_;|Naz*1{9_hO
z7)mel2@f<=dYqw-g2%lC#3B`$-FcY5IoN*pxght48luTrroW~4N8lsy9GSECn7yRQ
zVJ-~i7$SvfNebV$ahu*MTOE9N8@zzVq=XwAGsX(Btm=Bm<$2?^hs6QdaQ%%i-3e`g
zJcbHCGNC)x{YUs%J48Dx^do^Y;xb<#H<DtkpX*EjzANADS0tUiv;Y(Kiu)!X;-LIt
zET52;eo18`=a4I^cm`C+yF+VFKTPF)FA(c~A_-VWj&VWcxEG=i&H15Wzd{AvQQmjh
zO+)0sBW((nd~~Sy^z;Mz7j2^w9&e24taT>69zNfIKvX?Ww!e=3G&YEsKSH7b$1wmL
zc$a7x9{;5b(?=l9vLUCV!oS~h3o+iRmxs>s1aYI*oI#+y7dMO5Iea>So+KC{c8^x^
zzoOoG5>agBUK;0~FrJrWz62QkxQe%Rh4`vF5&Cc*dY~NHF1Zd(2E^-sgP0QHd;_gt
zRRPV_R^}LY>l-tWkE=*;mW_oyN>%D;hMqn3!!jl-iyQ&2kfjG}nv|DnznzWS*jDkB
zZV|_U`gyd+3i4W!riw?*ZNM(qV%!g9I@Z$2aFe}}^6Hg!gj(5CAr=<L_mBJt%lL!H
z-8HR7uh!T~2b>bZ{STnM0?wXks8P5~bs_2Q+4Ba4;2n8O+x%sl#7f4QeTlL07SSg|
zx$KD+DC^J=XtJevx5t4uNjinBe@@7LO43Qe^X{B^s0iaS6~jJW+@pQM5pFeh+7vHb
zv;{F>@ksV$%rorRPY;VeWw;KV!Qa}pGJ~r4CR7EINAQjB8Xv>{n^KH=v9vZ}<4YW}
zJAbRBCi~wrH`Bx$%qw$Ls}b0Ft0kOLQs6Y$76tuXoMn@~YkSX7HCn&N;JMSRB%l1!
z>4R^7T~c)M%L1}e!o;bY<EBWK=GcH*srd+M<_qwb5QLb7Oi70_-y-!7r6r$-9)Z5u
zoC?qMeyb-s4XO;JIU*iwImP~#SVUD|+c1zcH^0hW6y_}u65HMOP*n`2N0=Ou9XA?X
zOT$UQ;g=?Gsj_<M2jJyttTBLTP`^%YU{<05|3vE^B7Ssaf5`z&l&!#6397MZq}E=x
zLl^f#w21WI8IpNI-8jUGjbo$GFEldtaX4+Xv9UO(MG`#Y&?^bZO2fQNrz1j>GNu_3
zk@WeaDg)+nusbtRo6T)f`*r3MnWVOR+$`XxbxJohTDWX1(d*)IP&VC93>1xh3dwr^
z*C*j5wbcxfthL^J818FDQDv1%)b%_yeAzx^fhBoECsv5(QWPr!SyqQeRh98yu0Z4z
zTkWv(PQ!la;i}4JNixNO+{d>DeE2+>fLo8D^RiT<errjT$HeR=RDk-2Rcd0|MydWe
z9Z%OtJkXo?34zxKa3^`pZ@dt1xgF~#cYWBV_h|?=8{_#@Cps>@XGk+L^WT({c!&ib
zjOSGG+$$$)1j87XGJ{By93xQW3HoUF#0<-YOQ?LkP6KSYZ3sHF7$x0Pw2~E^)qo0i
zDIVTtSn4SDgwM;FB|j~X^D%e024F{Jlo)*KwB|)g+65wIWDbADzw<}$RxNPy-yJPt
z?BmO#_*mHR-c|Dt;3H1a6rY@{Lv;MSpRFnsi7P0zmh?NHC9gU;;>Xy#Xv$tCaqZZ`
z-el{(*h9SWUU9Dq^f6sZQiSq6e%-weRv^S&7q=HrHOHCCFjz4``0z?a)pfVI{Gx_;
z#Ixd(%r-h>BYopyTemv2m4+9PG~Rp0wMi0u_`qdnV6j_H!%=aXpgYbIwp2Lw6h~ok
z(JuZRan%<6P_qXtBlG9tQ>>Jpk$5d0Sq;R!*x&7S`|++l0oKUzj{#WM>Uy?cy(U-&
zMCKlNY?Su~bzAEb=dtJMFH*o;xI`vN-c~~S`9dEshjQ!s{=`SAHxV?gKh<BewR4eB
zkp--{5=)G0bi;ZI$d4J+Y#0srJ#G9*j0>i9;Ku8~7bx{Pg=24SLF(5{%|p4a8CO3&
zs4SBQ2W^`aY@M6t6geM2#`a(0hh9F3SPZk@8J&!Q9GO3-QuKT8H%1?Ed}PygB9XIj
zc}65SvQt{rZH6y47&Ji9*X?_tOH)!|i+4}<DroIVoGj|~;ugFl1$p<?g)%n&&Qzk8
z^LP2O*NVk}G<+Ii0*5QmV3k<C#+&tGS9l6@z^k||O~~VfJf1zqkt;r(5)sfNVzs2~
zQkx|(it(FV`G&b)Cx`u9ol$FED{wUj6CEn85J1*~!=6)BrVcN-)^B)3u*2r(NKfwP
z|Bk!m3DHyu11j>>PB9dTIN)8>0Pz_)xw+wB;7H>~-v(TZ4Ec;rJC6--^}4*wTys4$
zl8Pse9or5AJh`L{si^J|cSm)(KCpQ<E}&nDABmcup|L&42IHR?0ud}7!qh7CE8vk#
zqL--NEkERkoP&vyyZgwTEDtQLMP(YMpd6s6J(6deI42$oX|Y3K^i$GJ?=W7y5;|{$
z;z8x5^{S{Iigf&g=$Dn9*Fq()I}WK+aRU@j%Z%r<cY%1Fa_PaUVe3U<>dIgtjvr{}
zQ!{0zEY@|bTTBLwlyp8dku(#7;ckb*8FVe35vWl%8%rLm?u6iFPU8Ntng~w^GOsCL
z>E7}8NQsgk+>&-21R)wBx%E37co#04N(%A<%feY^W3KJ5kilwD`&`G-dLPX7)BgY}
zl;Xf%coANI7Ttma31@G!yl4+I|C<Ch@gTJSb;FUHq7Yps{$rL#wtg`e_r^?>YDSuc
zVKzVsc;kTtOgB!z<AaSqm39FWpI>^WCQ0y0{3mQOl1oW(d71;7Sf4@&O=7m6buj|*
zQy^qQ0x=Lr!b#QZP?zlkjw?z{q>bbN&&`Nr_06Z0qtXUb+d#SBpcj;xm}q1c$%Za#
zd3kv^=D?GVJk^P3T{E-yj7R@`D}h}IY~%sW(^wOBvyv`6-agB(6@v{Tx|<dkdTGWN
zvw?xq>Ee~($3qeW9x%R3pI+$p*Q*TgYQrZ>FwKDYb*~ZKR%3d&PqROjLl0!EMOemx
z;1N6HL*XfBoyM2xu5&2Dy7Hw*I;zS4qlZB^hM&22H-%@%m^xT{3-A3MghvdjM(j?k
z8ctc3IldvAHRS#S7!Rmbl&_DmZ7daZO#Kl1S1WpmBdpcMU+Fx_*^=V+$Cx2@Te{R)
zb(v@-<OX?+M`*0aww1CkXGu>`EB|{DgJe{5&1MA)Pwp)Fz3O~4G;3Mq#7|A0y(~?v
z4$c#<jYQvtDYnUf02QgO-}Pas5&iw4u@DWom1Tc^Sj`cZ;~OnDQ1oali!ioN?@6`<
zB(o@p>d^%4?p1YxDm+{OKe=nQ4eM6*OH5QMXrP?5A|^B!wy^VoRz@2;t=Diqy+7@{
zOuY+T;Ckte2VI6X!~RYe<m6Z)ix(zDXj?Z7e`T;i<grh4|2S;YXu0zY@T>Nv)RZMY
zFI*qrDc#&!#vPc|zSa9C)2_P24)-w$8tlP?^aGHBRf}BIQvi1nptIV)#ENhMY(9(h
zd(Bw&9I$UuOzu`>js!Pf`q=ro(|6e?v%tj3{ur|Cs$Dk?e+jBp)EKX>QlTu$C}?b?
z)`2ag`5fY_V3tt)eckd#7J40F2~%aC8|1r>Y1v{RH4Y>HkqqXq%gb05HQcIaVD;l_
z9Z0z!rY%t;mZI`y-6&??0pOPO?qQk`TDisJcgWEyEGtVKJG?j@n!~ryrfzG>Q2jXs
zr_|5>E4sG%yos!c0dp(Q`!OJn#b{<l-L>RryvyczU|DBHto%c$hR!T3m3Gw*IM-1I
zp?+?8`QygOX=i6|l${x1{#HR$D78yk7C}K!vMmvobsZ=;DKh8=lIM@con%S0zpxtl
z!ZZsB;nrhTgnT4ak0AA;*a*X8@gAn$tC|U~yeW-=b4I^k<1^r%9lQawuTrN24`6{{
zFeWqD;N>pP2YPUI|4Tx}UMWrAfq=P^#sf^*Lv$HeV7=4dIUd)Q&X5}Ws9b7zqlGGS
zD^RfrChFG~E*f3NGppThywBM`Zbcl|Nsx_9*&gf5d6N7O#m5~}!Uze($PB&7;K}`}
z?4k)HqrP@0#`cBY!NO-)oA73Qu;ek{%cPxCf+)(CM9a2q+qP}nwr$(C?NhdG+qPZr
z_89svrw}_M*7_O$4CbD0GyQ8Db3$cZFFTb$5OfN>uX<yy0u)c}zZ{qHsb(q2C;Ic!
zMsedM#QIw;MnHx?7?%C7@cpE<g}6$sGd_&1vPCK~5BrPQ7?DQBdt{pWW7gi85Z0~b
ztB_ZA1<|a&eZFr--Z^632C&AW%(8eWNh2i7lH9yk8PThL?Pr%Gs1AwqdtDA@1HMV5
zG4_WC?#6p}r}mC3a8nz9vj;s4tgl+(GRuJOj~B;vJdc5O+D}XwrDivut2T17rIZSL
zSG1m(*2)jst3f(K(na^1hvjZ!NRd<p|E`_SQirR#eyzAVd{F?7<Kq=Sc3Z6Zp>nAF
z0<?}@(g0r;gfO(~?wH+l$PhdnhXZAq6LF)BY(j*NRsi-3Zfx?G#+oBQMAOd0+m^D~
z!|o!IyhA?{3)pK~YW(<5N}<1n3@E(}RiwtajZscBRR%l_$Nb!#4X4#4=)<Lrxrfe;
z&n@9hc*=zA+i{;rja*NE{TUAATiWKSYE!#<uhY14sSi3lkdg|Vn-&xz_jvZG%<>1O
z`(t1Y(;Q+c*)uzRm0G4=&S+wQ3u$O`NNk{yxbrXFoA4sz(QYbgd39@W^GNWeG4l!r
zI+R!#$`|m+QDTqM7}@vbFs{H6P8VjKXCxEz$foMD*I)&;ZZfE^eb6!v|3e|$f$^5$
zCX?8n*ZB<b$ZtP-{|tnooa7%CC4lH<^Gac17ZOb#nDeZ^&(yo99X!db8>6j<0d{vd
zB1$Ou<UZ*)KfmRhcqbAQ1ABDHM|>)J$b#e61};C+vt)CqPR<vRPr=tw(mkq9bSsG;
z4AuCjPr3QXUUvbKgJE25tQ9Gyj7Ijs>kjuq%rwX>x&B4Ld<qJT0snwOgd<tb!~Mz@
zH45=h-~KL#vvh}+)D*3JgN-!0CjggiRmk}_615h}zxf2!(xu%8e#7kvql*gvh3#Zq
zX6_Tq{K^n{h?a(^ZFXp3owips7Ko(Cf$7}>g_VW*qYlfhWueBog)C93@w_crev&R_
z6&xg%LJ!>Tb9bDuVLaPcgax7>7{1#O0zv-v;cX*;90w{JSza5Fep{6NM=+H>vm<?S
zA}`{ycOU2NV`_v>K0B8vfvSUR@sSQWw1R5HhMZg{;m3y0Z-zmNf&#JdPF0rT)tI?g
z0@usOax;gf1s^cTnY0glAK1uXsObeooF6xydYfON94Q^KocrhX_<sAENn@iL204LD
z6xVq9DR8pXauX-Ma}BX9XyzN1e{_{8SfUsUe-6P-iJCkW_{8ebSe&oG)^U9iMO{c|
z;4tX<3w-kE<QdG+Q5gjItEvGwawoz_Ok2L;v45GJr@_${o?3$?^8#;@&|$;Eq<(8e
zi#|Q(dUB30^-5BGoeb-XO*ezb2PJp_cIOGgh^-Z-@t5$ieGDE-J!*GdT8k|GnA+$+
zJr!GTfJs`ZgK2dQSFTEil=g)hV>e~|fCxVGU^qZ8_l@86|3X`$R9)H}rTze+x0uc0
zf+qgn%iKaZ^e!NP<4NLh1hA1ZcH($NDQEn5du*KDYYpJvjq)Ti`<~S~2=;XQkO1yS
zO%=0@T8pGnV*);dNMd+5g4<W9*PLmF?Pb3dY>3txX#(g<jpRJR0aoC(>=TQQl2;f1
zG~UwgkZs&gI*sA5tKR1z+Q9wg1;#<im+iWU@kdlb&Nwhz9au->B1FRlN*eOj&!lQx
zjIo=wDmDku^mb(0l51pTwdqPa{8>_j+j3%ZjgBM5v?x*`PfRXJJWZij=vBvoIl^5;
z#6U!7o8iWTQlIjA^&<gD@+WH<1r5ZCk`teIG)SWN6IHlZQpq*tBBBZ$l-YvBh^~2?
z(Iw|&l=S%Xh(Ab;e6+;RypP({lP;9*t>S11F;OFfaqliBGrXrayz*CG;QR*WY238d
zU%aT=N`FAX3^N7m8rWK`;e*cAh&Tq?KDVF0AwD#rTLEo)6vo6NkbQcR9t6D{7!`0$
z#bt~7F4asSLN!2Qs7f{Q<||DXgDP$h;Mf~0*B8Fz;=902ATWSPfTN8ZDrVeGTz;hP
z|APRrc3mo7_b_X`$2lPB>yzb39MI8W?0%k{d;nhGFaBp8pAT)dz;|hXwufbAqRq0K
zk|8-1dXY3Uw0(LZ*4MGjs82bU)H{q$7kE*<-8!uiDy-jR#3wbhCDx-g+##}gpg(2D
zsqjYc^P6Jh80kG@tzV4tP_~v>cxhP4b{Qq`h@-<>zJQY2p)Z+iI7Jj5!Vbb2!$eV1
zd<By2G6~gzBi(ls|Esfuy-j+ZTyb|2rOtWldEwW?+Kq5+_eX3o%L_XRf@>Y?=J{Q;
zJ`5bHR9!(p<3%Y}URu0D+xy547NTPc?BcD1{!EKzTK8?GbsseR<x3)Be&1|w)@Av!
z$ZxTT@WN(+1#|eY);_k2W~n4;O4iXmJY-pn5YwApRPDB|QvW=*FMKlrPjf7^oJdu+
zb1G1&>-Gxml9CY5h(wStalnEA3-y=FaFGb~H8BBgOm)<sX<LW|{iZuheazlbycjpk
z*^E0Il7lfv7X`jZzl-k)S7NubPoTZkdh6xH-CjU$SGolKIN4$;R6qvQb6V0p>Z?Rm
z_e#!?qoum41ZIT8wuSZ8dg+*3@zye9GLz1{n6Fr=Dm_{EsA7%R2-*u?cZUUj0r!TY
z6_Vksq{b4-UXMx*k!F%Abpb~y^LHS2hhKCzOZ-i$AmuD>Iv^K9(JAmpF&CJ`9!i`4
zj^>`M6-L!^rA&+0fD|24*am`evAv}{nt&sSrgw@@6ss7d4iYmoWCUv~n=i7<&aHX#
zZ6fA3hP*te82z;2!Na;w27pfj2SpyYTX(i)b~0({#>#RnTyw)^U&|mCJy`zavZ9YY
z1cXHRSE#_7U*=>#1D}ubfiW3x=lCkK^C_YX8ev8JpB}Vg_3Jhdm(<+`@MacLVxA}c
z*tH4ONujH4<0{FqH$%k}s4{Mqkz!!ot54e?kvedXJ<Lf5>3Z&xWJM}06)sQQ$YhB?
zyP{e!ypXLz@=5=+d2fu#Zcm{|2AKsm4>c_WT5ReXURW%Q4KpIiaH@(mRA{*fS`Pbn
z{(-pG!;5YJjl;vXyHdE!xAOhylv*t;PZvi}gg-){Y1iK@OYWl}ePnoY<Am3rIM8>n
zDCZW!*y>;+upTe)p1ndq0T8nySV~p*Qp-%N(skpN--Nc-R_qvFkAP}|1tzS1HiG0h
zN2O>wE9B+^;$qJz{abm2ga1xm$TC)^Jg5C>mSbCN8qt-)D;2ymojjCK3285CPduZd
z>kJe*YlK^97jj)W*@SrD)F(CNM*_~);_i8{5`J8E7p|Br2SGk`?>6$ZJn^;3ctizj
zex61Px4>i|BB`&2xBABmM>~D&3^OHs-?%%sn%XtW&odU4;z87)uy~)(iGDo&7Kwd0
zGaoaRg?@!&4@NR^V`&#0b#gcCmYS8$EN|QS6}Gy4Fl_-N)c`juj`It8J1o})gBjWR
z(%K)hh84TW6Fu0aAH`&FyL-)8l?2i?W`)5gMUp=TN;rDc>>a|t9~*wiiTqihlC$<b
z+)T|+H*nK`7>om^x8E-Cl*Fp<%jh6=)kl4QcJl@lzpGpse%NYQL#Y}h2-0YJ(r9oW
zHqE%zrQ4<}NfnR2oI3Ur{vN=FZ1bN7%_(4x5o10Eo3t>sbT(bTDx8YxM23CiS~%;H
zH~r%3E@peC_o?bftIBg_UA6?>mZK711|k@yYTz{&6k?6_2U6{Afk0CK)q{T9lc(n3
zP<lhVgfcevSBEA`my!c&^Ix4=5!Xj06_`KPG2P}3SXinL58EP^W@gEa6+vRAOqhtH
zq4Q!+O}05RYs?PW$|1L|s%B8xFt|UJFa;{K$r@N@W}7$;c(b2!K9uV_td_tUXRx_k
z!8h*RTU(+W)V0_c_zw*@w<HnE%@i>m;y1ChDqh}KH&#o~t7rxG)D7gTyHF7N2ovaI
zB>SN2hiTrMK*1VIa@ZD3`=g8EX;Sc$Jw=bzkICw19yGbrr*TI%Ur8?u35`ErFO&Od
z*mfDEC5$&;4|BE_Krd+);yf7q>&y4?4j2Ufq^kFKSg7{0{nB8JAI=$5Lno&uGFIBV
z;=b6k@SM}{ais^z#x86zncjtwRSqNU4nv_fe%B`#TI-F=TLX34VB+Wm8Py+o>3&*J
z#sqjsUN|tv-(C&0449%jG5T+!8WBs&#Y8g~pW;eIwudF-93Z4QENQUhd;Fzs#KOG-
zT{r5!LlqCNx;D-*{5V`aXm)D4-;nl9e;CW<Tw3wGnbJ%9n{7{fB%`WoO(ARnb2BCj
z4rF*w00*ao=LBe1TiXV@(bz-?bBgT{!4zdBFc78F-)QJ-tcnSQ1YfxC)Qe08k$2Al
z`&uP*5K}_PO}UHd482&<s^&057A&AyFs)2qygUK>Nruo7Tn4@_@7ryrWA)e|ooyo0
z_>a%c;d3pF)EO^@kM*~;aXogs9HDa$&wg^r$xy|VU=>!+L%ENHm6WGJ-F6$-e0gEh
z;=h&JW`q|r#ISL^7v*g5wVQPL5Lb<=fi_pP!^ow*5-wvEZ;qCWYdrJD6Lt>6ySKS*
zJ0UE@p$zNNHZl%#glh3rq9fOxQ-|r%)q>9;a~>uX(e_&d;r#Z%G);lxRV@Ov@d(Uk
zC(cvSog`mhVr9aapr3I%yC9uNEUx*g4FG~Ky_51N*g2~0rQ}R7SCwB1g|ReYgnD+}
z#@>EHBU0EZluo+s=};>W%d~k6lZ)}o`i-pTR0hur3~t|_N2|0nx}DniOQr%g)#_d*
z)YgiQeEhtY>tUI08NMZJK;s*tXa85*yMJT<YOKNK;9qNLO9Y_)`_DCaN)=d*RgS!!
z*lKkFrmwH!{PDotncK6*5wF4G18MKJ!=nBs520Zc(clu3RZ5+<3RK!$57M@1fLS5@
zN_*VOv~p-!m@HeE|4y8WM@QfHBlPLS)w=?wV0ikLcd?JZx_|{Ll-44zUUODNla4oc
z>{$T9msO0dxsPyJ?ga`Jiw-@J8*T{|x|{NcM2L%_iJO=){ONR#DSZ8hPU`}<Ub0SW
z@o`-6?{GF|ic3FEBmBTBxi4;o<Y<B#^WjEfvZ_<s>ozS78T$1jJCa79IRQ!xww#(3
z)qS!=sC>H8kMLuLqhb8wwC@)1Uyx<$A=;uj6q6$Op#;k(05V<|y|!GvU8&O}V@YjO
z?G$Gh-rq6+O-eNi3t%E53`6~))$N%|z}MFJe=OPdQp&q!e4O9O;L(o&t&Dgj=Ra4O
zIR4c-5=O}@7C9i3eIIe2@X^togQYAJI9PTPYohF1sZI#U#HxRKQUd&_QG-+X#NzUR
z+!W=6RC%~DltHx%Iy&c@M$BV|eYqvIt7nxc&`#5gp8LRq$TPK`j!;$k^7oD2rTk3M
zut3nBfYWwCyDD^izfrFsV8Ky?V%ozs4O^vz^mIC2xEua~Cu#>RalH(&hs5E*Np$E4
za;U-)r9~)pisEIYh)T#^hE98bqCkli-ubuV0d$l?GG*}1oPvqFUFz@#QM@oOAp$v4
zp}?v87+CA{lyow&KJIcQwtU-^MiXZ&3x<xSdC>6EVdX@csGRAZ#8F3zOCASz%yWK(
zELg1aYE_rk-UK&j*sinZ@w=8RWxY6sA0=t@>#3X`rebp!;5AALg97Ky2+g~`u65$c
z$N)jsf(9eKirB?}ZRpf}g;S_OnV7br0J#e}=<m~L+jrRDU?QL!egC<1UT8)~??jiX
zQJC|y-zZhh)<xo8=~Ffp3DVrv+k#NHj8-Dlk{4;~eyMMQdIW3-_b`h0AI2(P+m2Jn
zCdift?q>We&ZiMRMJh`xC&M$PHpkHe%}hUhCgWe$fCuv9mB_9kP`|Rg{pq1}D|<CT
zuvvKA6Wfc2o8h}r@p3hljuP0eQWP{Y)Hcqn`-Q^oOJvYZKZ&pdnXtO7_lh(-+-J=p
zbbDl>wItxKyA4^jHtG`AJv-Z|4aYc&Fh`c-9{WX)v?5t)s>?{(%mS-p9Q*$pcmSY^
z)Iq&MYzB}Wz!Q~5>;;635M{s#)?f{cbAl5b;{+!-!3qAqpZeuMNUmYMCrANik-E60
zU3hhA7wvt25A$bH6?(ZgTLUg^XO1)rT89)Z_Z<Eq*b>0cn1ijJTjRxg$c8P|S$}&B
ze5Bb)ezuQL^AU8V8?+*R<`sl%SYb?xp&~C_(8c0PtKev>{4?$W{Hp#uyPtIKD7*z$
z2+{Y(d3{MII%Z194&aZ&jzWO|Kt3Lo`TPICv&`>oxoQD*h@nC_@{zoHm4ohV0w9#A
z+XO(s;SdRDt_G%h;M%&CW)T%oz_=gaL;SVt&uYAQw}iDO2BY?ZTL~kZHH}k<ZgMRZ
z5G4t-d3Y3OpUgU!6cjBI+pliq<-whuyVp*xwiSrV$6!^v`h-*CS|d|T_K=^n;{MoD
zjH;7WIz|b&V@P4a=3Y4al-A(o$Afp?JE7K6XX>FOj&?aauN30H#Yj>y_8_C;h-z!q
zB4&tEdvwssXN&=13q{xouAU+d@=KQ|lI~T`ESYROnF|TEvBf=1xN(IPFwIet7E&wn
zzIw;2mMCN425easbomH^E&~7+3S#9&6bca+KQ|EmD<7QVapc`%v4M_KigWG;J>=}>
zE~x5hhkQVPMX-Owy9o-Mo@|QLy^<NDw1nZ2wVX5NXBBJ(b2AJC0Br&ikWoszAe`qY
zxgYd<krd=zu-6?X){&Y$a@XcYXOlh!Y_V-I+(!U+j%8m#rkFf6#5T(7MI*fEr5x#9
zgnn~3Nfuy4IQ*cMoMkEIN(s$dRPYyN$vqH*)MTTLzpjL7k4=#Jfo%i;#P0YN6KkVz
zpz8lig)YNb+4S*fSKT$|pii%lk^ZlS$ILWnN?nI9%B=Grmz~VovC6$6ah!^gxu{Ue
z!3Okc!7G>`9eH%!?;L%mXop$d&3a<8MGUp_^`BcRF4vm?08+u7Kf3Sd`2EyX7+s}<
zc443?k7@q6E2%%?br>W@GMGz6FYHQ<3F@BTs8JqF!YB$<?(Vf9xNO*h+iZcZUZZFj
z1$wkIpYJ7M6(?}iG-N&c$NV#XSZG`Y%fqjDOS3`Q=_8N)!82?U#uDFmqeuik-GHn@
z^=j3*(m<-R0pl@O|3OyU6h4`h+k)W27$cy$9#YtVJ51TAPk^G_x0i0S3c*svm1`Ad
zk^Y0d7xVXkc7#jY>c;DKoxk=V@!CH?Rxpc$Z&BYlysoZ#>GzQCK$2dLNupE?33=q<
zP^AM(ajid8Kg^Sy#yBE=cpI8<St|4$Ekctx%VuF8lNs@mHO!6ueMc1v7FX>yKpfv6
zsFy;vFn_x;zoGh7P_rj#{`{cjv+dCA$T37aS9V#8<AdBu`OZvVNn@3@D_&&~G2MJ9
zy`yUr{B7CG)mBr*czJmB4UC&?k|s6^#q~i}p`KLVs!DDWpGZb@00x{g-L?Q~w#rvm
z+R<I)yR1z4w-<O>nZr6?Vp+GQ91&|roM?bOpKBqlW6JqKBv3v}9vS!W5OyRV4K^eS
z&B0{u48U^1Ubw%vv;>Fsuv~nW{wp8s=lSUUwRhT)dTXPLe*$V|BV@b(q0U9EI$!br
zp%S8E7sTul{H209@`Qy?nUh%5wn3W(u)N(yBS?@aokoL;36-M;UJV#MsJs8Ux%p>l
zIq{0qWp3%<`WGT5I}Q8?txmteZx2&Ql1zcLIt;5coYNpiTm&|N#mW7EGE7Dw9>a@6
z2;jjVl{sz^_I(_enOPBKd*(D$E}6!uYLC}B$eYyP)s+62fJWnCQc)_&(h_*>_i2h8
z#9LVgM#1z}Vo(>j_Ya^hh_xT`5}KdWs1?h#260?if>Ueqrr20Y-Ri@>>V~8gq^g`E
z_-Kb=T!6y3B0*VHy;Jnv(+=#{D}@CtJjH$sl6qT^)CI2xVO=dLZ4vpZqpI}MX8{7)
zC%!G70c-?>WB>v>P$%%rv62qC=eo2-DNF%`9g(Jamq{)ub8|*uj41fW`C!}U@^>)h
z?FL9yenM*ST5FU-cX2h;Y~OtzcC3KS8W+f`CzG5Y>4L6A^zw?w3EOO58#A;TYH-3P
z{6e#RrGSTPla(LhR^WI_z-@#1zVI#>Ax$;KUaF#=NLL$+h!449mZVIdlx6FU^~_i!
zT$mNGr@S$0wst(%;*n7(YRjeu@8GRL5$6qIKY|z2S$ZvbAuN^>-`sl%gRcXnWZ_h-
zz+c(#0|0<-9Qe{kD!GTzr<Gc+#q#Xs+6(G&L>2Dhj&Fz2KO`~cB|7Kd>=79X+}GOR
zPOXu=(YUAZh8YzW(UlZ7XX-d%m(UNNkgNVw<><7FnOU?x4FaB4cuQXu+Jn$Ps#Bfn
z-PR*)S8Qm9WYdGN@UKFz@t&ZK<kT}OO$3dqsA6d4ILVR#IeJNHJb&6j-F%$mHo0)=
zSm_oawej#Uc#q&5l5e3j3kevk62uw<TJ4Iv*p+mgNtou}NFre=d9H9@n$Yw;gy^Ph
zGG;mC+qlckuYT;kxpAOgu^*1QC)(y=-hK&ZRAp`k*yT11@@t!~*YMAZWPO=V+jr%E
z+pWYMukb)f;^w$Q`d)he7M?XF%5<ugJX;3wlIBS|ZbGl(>j*`+lCLi|l#>y7B388h
z7P9~DX<_E0ZaZW3xGo#tL_<a1XO|%=F;K(U_ruGuQH{{BAV!qw(xwzhWp6w`lIrAy
zicn$@0Ht4DR7Zu*-Ts`&EQ-8rdYy)Y4C&z$s#47|!S|Z>cbGChwhAG176UW|ByXEQ
z>(XEsz%OUBld7`Yx17o}mrv5VQhE@QA(;iQrnn}2Ft#2DH~sl&>noowlyDpB&5ROm
zRlZK`Dx;xDhf+N6%ui!8-QQBzjcsfFh5D;)5VscG5=YzkDdYS_u9vT1LV5-7)GWY7
z1HVG_@Q%`%p~>5{=lr!!L?}X#n+-+lfuf8N_B^*z-Pz8QMdY3iR3Gn?BpqzzZe^su
zo}uTxNlZWZWBC_E7Ol%5y_i%13n;})U}P;!I#F0BhGxRmOqfS@ro?}J2=zTezT_U?
z#g~@RbY!hZh%A>mf=GyprvYJ8$|v^dr49qJt%-q1)(X~})*&M|lI{R#l!-?jh;s^H
z2g5U~X<#$RmH_L|0SuW!J-d=rpN|^EiDmRIxt=s5WT#*XZ$|S-EzD48EmBs<0s1<}
zE6#!#$rpV}vMG$kGai;F;HK!FfOHC{g<p6dvm)y~I1owOc&Q0pilPkA>L)&3>`twJ
zrRFj~M2Qs+__a|(Ka`*XuwnGy-XpuNSh#c!aVB=LJt^lc)Vmor&44~Q<T1>wofGi1
zYel9+QI^U9!UU6@qe0Z2TlrL48QkL=P1o%;zPIw&L<T49z!j0Io&0W;E`DqFSqL{k
zbTg@0nb(&U!S&-!9}HH5g4-V)^zs~?@fwF$9F%jTn@fpla%&s6Yoc0Jm-l?K>pKOd
zwMIS;E>LF<!3uKhY#y9e8AXf9NqqIsRCRh+7CimN;E9)>9I}g05@S_TL7EG)cJ)pb
z=e;m60te7-|Iw$#OBJiH^d$2W6R5FvM(hD8u^))?ifWWXT|(lq$;hGEsrB}kX16fd
zk`R|uR$kFLllQgNmdJZ{Qp_uuqA<hg#n?k`uwOCa`%!qGn^%3YdHOE1y5@Q_`2(xc
zJbk&8EeX$>UFc{^O_IiG#kWS`=!;vi+9&5*0mH)X3mo)`oWL-BZ>t-;VCtnUO4rg%
zPvI5WV-N2jK&SU>5-avIW0*UETW~=*eY@&-exW6r3Xb#?8Slf)I(-^3bK!;04C8NY
zs?D{|*{hDjnZVz&oJY3$%5N)xkzNrXAhT2|BlJ_rH1)<PP+C7fk7>1hy;<n5#7J3O
z%-tAzV%AUkuu4ZUtemtvwZlf6u5E%P`31f?_7G^KWD<ynpED=g%A-0?S0>LuxvZT(
zkDwt4ewZdy6m9>|b7#+6i6Z)P`nOZme8CY%O+>09w{kaxkNEIb7LepZi&u-a_Z$_N
zGw_q#31kKqv+D!}^`+w7KoiEZw`s@O@UJ%OUntS)EmyT@qwjKMAQWMJpTeF`;>hW<
z{I<U0Sv=hk-2A+_b-=(k;s2gd?Wlq-o@36qst`bM#NxKx?jbHCoJ3=<)u^Uk9Bpl3
zo@UCQDVTZy2N1ZYfq3(1Zr5%f299FODaKU$&0CTpz#xvzZMQe1Hgo7fX3ZczIVzb}
z4{(Ah`VYmp+okQw2EifPTZ@&VAHLLkv-``bg^S~F^Tu~lF7=0r+iV{xPTYn+I(1^t
zIsqH?_8vmh@J@yi1@}wkgov#$aY(Q?3ruQDMRw9@3WK8EAD$BtpvDYx94IW%T`PB7
zI{gRduSX*At^FE(oF5R&$@6gb)>$Uk5PIdpStt>OaoUd*&IJgor3z&nj&VpVku_GC
zBL5_dkhi4{PBCn{&+!|Lwdu)Jl5M9^hv8oz6cbM04Q5#DTwDEb+i9;1lMP|CJ%`$c
zt19c660VYbI>p1>IA)|_&eObzb9YYJ(q^``a8o~1Wg2tSX5@j}C>F1%2%*R{cYad}
z*Z&(!2XaK1gE6{J{NUJK%>XiM_KwC_a0%C1UUF4s`){E>U|CpSfx-Hy(^-ACDhKTb
zt+RB7grINF1YRSsRxguv<nz7YTAx}8ytn1%*^e-H52ze|eH-&faZPgMi~$`QOU07h
z#?7QXP5u$@F-C#t?0<+aFxfFS|6g3<i)hxMrMGB;y6&sGSwt~YDMtW~Kb~Py3XkiT
zwgQgV>Ce;0%t2$d5HzK6?^9}k&x=Gs=Y1WIm~)r9?xStdHJJvM22K>WV9w0C2caSK
zOKdLM;5+^dbuVbW!t=aNtcg;td(a_*GTqoOTA0=M+vsrjFH+^6y|{chMJ@idmzW+m
zj9yOKzFwXj<8=K}9pOTnA2qWC=S@xl*3;uAZPMWB;X_RC{9OZDWbDbgB6EdP8kl3|
zJPBK$M=e@nWyt*lH-OrjIYAk^4|3{{*)=z0f=n93<-8#FA5i7$X)aK}kRL7{E`bk1
zSIN;bLyy&$Kp}{0*0#4~kMjez-R>086(Kds-+{-<zc{t<pu4SDSIrUF3}+a<(05B_
z8J*hPMSXaZ@7l)+&x7*#X>eXm9YMFX|23!hXfh1+5@wL{8D7-&zg%oeg-lbqTXJkX
zIs!9ZS>tI6f1$*RO3?a`qsB$CsDd>7tTDyWUX5igCsPQMqtmDV4eEff&X%v?<qgW&
zOhK=8Pqz!e`|)y>5d|BfevCUY&7P;G{lf#Dr=ow_Hk9pXj3wO)0ZkImGaP!{V<qVM
z)M*DbwSj#%6u+9e*UDr(uTsL0!_+Qkh6ktok#C?<lO0m;<;!hUbLPEmXk;+^9JfQN
z+fY(2V2&*;3?AWm+%{;Y80h+H3^eR!-CKDXR8?y?e}G`AWPqB?%Z)iwQ}wuf9&7oy
z#di%NJ-LX>2TyX=Iy`oOBO@vf?2Lp_lh!lgZlQ)Md*D_BdVY72K$%cP6&_iP^k`X@
zKw<-gqZT2xdmgbTqmr5NlDinyBT1I(mf54CA}xIy-~ePOkhZ|UF2NaBMlnpa`@|`W
z1dR>qM^>+grQ`dUs|wRSSli)a_ziI07XX`$B6it;7x`TsM*C`Y_l`U@Tj{+9Xul>P
zVHu}C=Wfk*Jn9js$xu(cDMp%uf~bn2Wi@e2u^|L?Dac~UR0j6yt*aW^nJk`0>ezdG
zbyg2&lC!CU>Sz%Zm~$FZEhRzAt-}3y?ffDNZ%#EiEFSGyj=(=q)6F-0o=SZg+0Tj?
z0t$|0EJjvI2;Z$1QzV(?BNSDIdOqKX!3JPff~5YucfCd%2aGbFEa1RhV=X|W8PH5*
zCaP|<1*&z4?CxV;6w^gAH;GC;L_2i@*CshL_2V={lIvVdzw8!`l?qFVf<<7B)Q$oG
ztxHMsS#opxJ!}NuAui#2f1Eq@lW4NytnT9|IC}pr<HH*|itFhUS-A>}FFwt><GFNI
zr-EXi$CzitMtK-cJ{2{?tMzouz|R*kKkv$ZPKEB1`^`=-*%oK%bdNn!kVh8HTGvs<
zdYESM(@F0kTWf8ZH=tI#HdPIqx_azoJKnFpR}U+YF#q;?R75N-OvMHpl`u%Xze@3r
z4qiT7t}&v&YUOZv^-lcl1q+7p!b%yL_{J=cC_wWx{zy&kSIvb*zC^SX@f<<WLt*6%
zRXQi@wc_=iVNK{=UPDx}tfl^`sd7)#K-oezRisgeZ8S&Z9WbG~HjWDjE}jycNX$C|
zL*dq8_T;^#XnZj$neg}@K$D*xW*yQWk~~jpc2me<Tw{pjZ)o1wf$~1b0ku@6*Ebaz
z382o7eyNwE9Dzt#^~JDpH>8Z{Dx`<?;Z()$Drbs}L0ussEbXNx=14(j6t5EqK038i
zknna1aULkJf-4z02oEIIldtmct5TY`ZC2D?bqio&<*#JhY?lnzPhG^ij*4vp&8*wT
z;zzmR$(M>LfF;-~KU1eYl0p@qY0hQHz~Z`L%h}O^6D%`$S`K_Yq&}Ho=yUvCGrveL
z%&^=QP!F?O=NU9qxEm`vAW06;T%8n5e*^6dR#;QF9KhgPv)9A|qCXHSUz}K^(Q?l{
z(ktodP6|9&L*_GG6@3At21pES89Z$FibRa!Xirf-Znh~4qk^A6Im!IhzE5upOpm13
zV;C9-pb63lTlc3z8A8%?X+3V`Bc$euu5(av5n`iM72Qs*>^4cck}_N2dOCsFB>WU3
ziPZg#D(z%bLGx6~gP^Q*yzp~WZE}D1<pB+<vzQ)P2{O`zA_;%x-b?>E*JECL&5slI
zKQ&$FKVj)}RE0ExpXQx6Xj0VCxCN!4A4U{)DkX5b$szily_v8c*(5`UXz$@pY=yFy
z!w<vdlkhpl(|>uFzl3^qS~mEy%xo@aXzti4zIMH4Jr%Swfn#<T=1edf$U(~#Hs;to
z)-9I5;22emm%&F3ZlL_LRl34-sx}quDp-kuOgv2)o8K>vZEmoAa?Q-)b&#1p*w<I%
zXuQNzeJQO3%R9}C=THTwqxZ+xT*-U|2O0c-BQ;KzNw$#T6s`1e79jm&3O}>PgWdAp
z(46kGBX>(a6+n#QrE_v%x;AHE$I@s6S2+e`n~T-gJWfPct{a+4k}Qc5VJVgq*JN@X
zU$5{`seYM{br`ipq0wEz>N7AZ4i7Bc)r3lu5d<K_8#4<GUkf?*bhaanqTd{7Uop1;
z*8!CNJ@qMmfiQG1&xJE}Sd)bwGw*WD42uD51&JXJTkX{igtR9c!Y54O!ijy`a}B`=
z59*|8hOe#ns9TBPwY!cPn^s_R>uPDmTzF^qJgVVX_IMJ!LD@)w;nk^cuxKia%jvTd
zc_9<&$-yzJ#4|MsZmn310$a*XH9SAf*|u?40{Hr*m6oMdpQNwSuvrCGv(O^F+{wP2
zT4OvMqf_<8=d9Y%*{MXK<mc%|Hqqu|OMS{zn{_{?PcOd~VgrVrBezGq48t&P7n}tg
zG8AERXWzxVgku!eR4Y1~yK;a|?$;|0RyN54cY)H+=|IB2jtOOOEEuRe_l6+5FyEA2
zd^&M_zis4+$I|;6SAiB$lh45`wX&+O>AnQEof*!a8B72}&gc6naM}5}!xG52eAa$y
z?0V1))xS2;crRVsE(2CP9YsMxeqW9g-C*$?$Lb2HCf%08?e3mj-9OOR4aC+ZDlwWN
zNsSPyxoTjDdiBXpPrg}YA$ADS+0fv&ei^I9$;8Q@dU_TeYN^i7x?FXn<XTPMoGr<U
zmvq#U7Rh{u2nZ@@s!&7NTkg+tnC-XL!f6%7RH<jf+S5eAg1IdI^nUe>Jl@iP_DBp0
zS%5iJe~mLT<R@zCd+3e2J#6L2GUq%*ri74HufLU5?MQ~a^J2^32}y6*zv~%3YCW%z
z<VCUZ>+rt3Vur?|(f_vC`ur-5IAO<;9tqn?sef19C&N$Dz&PI-H=~W5bfy`EKn^~A
zL^EZ7BK9*y7<X?v!4{DKdjAs`I>DnEK`KJ{P)0a6lq1kbUxA5~8k*U<4KB|^ymlQ~
z&I?`DpU)moIHE4^ze2&PGPDOm(YKL|FtMrYii>oR6wy*pA*>N!?{S2rlx%goYpXZk
zK9`jzCyPfhH-Z433=?V-6WCfV4prY}9Q(eZJ}W?LMmfOAe?dNg^u;X7ezKr2(T4wR
zp&-cIUJE{d(_9RZy@vW0Kkv7SKROi7h8o3|o%DpaSC%Hh`1ULtHi!0K6H{Twk6pL0
zj4WHHS5TKR@#fX0%Gn{Zb@>&^!7Vc(InCF=MfdXogi8(X>}559@DZ;<gLin|GLrQM
znm_e=q=;RWVP)jzfko3OYsqe#o}rcM^40B4#Z<q^J|R1wYEs4+2%18Q{ZQ-yy-`HI
z)-#kMH+m9!Q5L&k!x?VIYZUh33VJI}P#tj4%Crr*_M14QJDJop)$t|V0m(|HmhCPc
zw|(JYGML%6S>h{#*mJA9Jt&HX{FfFj`$db5VMxL>K(2PehD)v=*HDKTv+N-qiyTXI
z;onAkA?7jopxP2sxGcUNUgj&@V7lmkxWD%2F8I(fqOk|;p516<jFuM@y0GQlZP)Ha
z(8qz4g-ewpnh)Evl4Q}?#V=uhz>-{GCdk|;q32Hs4Q!<rp&l-&R1@6?XNa!hgvyH$
zPjR8WE-(75pVmQIR&}pyJBG3Kc4Q4eA_di-`>3Y%=h~;jjaLW;NKg(6B_I5S-uqTi
znpnRlWgi*_K$9w1Jtnuv&3A`Apo*Rn3yM%fe}uiX5O>I#^wz<HsY4~k#UxRm+(}kv
zNJh`O6B6N|PMd=u63>F+L=g%L)RXj;pACkv@O*Rvm$ZF1k)zdmu;yth)>b5a%cXn2
zN4l6aNIUoBMp{(BBwyhMLMNM;vn+A+zs2wMbSMAAkyKwqo_n318rRiiYenfD72!44
zvR#WKc-E{rXolWfa7f?()$92V$<I7NTgXFl{%5V&Y=hO{uqh2>G|X=Q91JaHdrqq1
zJu-q4Ps~U~-f<EM>d7VYcZ}XTRB?p7W$NnJw2Oi~lPl~N#{<9DJr6c^e(|r&jWw)L
zDO4h%3mR*Stf_g(XN@BBqVPfBanN(z+Zg9iC~BT_lNPoj1xA~^^%Do5@VKTq<T@x-
zf7O;|t9^3m&Ju;z74YV$F+g7k81%r3))PmrwupVVIpQ8na?r|vUb3ec@=Z2hLvjgO
z{frJaUp^BCK$l3@{lU*eqhFK$^EmIesm$VyYl7OW#<h3Hy(gaq<$N<t9UO=p0aN3P
zhi9r{ydUrU`0UlEEM_ObQ}K<uAM-+=X5%b$c>U2qe0)Sggcu;zRDi!__6V;8o&Fl`
zjSjf_t)PMM3!uJY#^*v>Papg~UWl<}RaSMETH&wIZalJGz_u{0_9Ajh0ke)AMXlj!
zE~&G_U9XN(cQPk!v6S}8?GqN3jL!m${Nw>&`!=lCa-dETu5n$T;#NysT%I^#F0=H*
zztilhrXzU8)CtHoqltQmkO5U{OKItqrG-GCjD^J>uXhGF7Y0M2QfJM7N1XP&_fok8
zFs+KONu8~5^$Z@GaI?F_-OdlK#^UxcdfF@fH7&^=s6dY-iVT1puD1cjWcX}O(f=%n
zG+@7~DWi|Z&#tna?}v-!OwVPScJsk=hs}6@2$cvHHd#6}A{JH6smv)Q>(Gs9#jnoL
ziEEa+ySpli{Nf{+e+)sONuPP&)qLfrf-$9ebUsch!KTr5q1oO}|MV*SHP{n%;anO1
zIo%$t)i-|B^P+-vJH(}}^1KII&4mmmjegmy7BPY~n2}NQK_rutOxK`oE{MPFkELY$
zTeOD^t4(13<`4hHr&tG=-tBc*Aknec3=FA(c}6iu?|Sl!gyVKw5m+=m%S<i{7`9>S
zcn}u_eu=Pp)hZ43TU;@F%C`78crz=Xqi*5gQ%giwk`O@e_=mkrb*g>B?mv=XDOpBJ
zl2Ln-N!yK<U)73uZT3X)S(Hk$67?55gntZ9Y8M1r1QwKF>`V7Ev^*gz2<7ldo#<;j
zFAV&kKc9<$1n-NDwZ5*6{Iynn(y+cXnCf%9UBB)|p7Fss3YkXI?8c|_paSYa5D+g*
zdr(`ltf{-b9yod3`$*KWV@GDZKN6UjM^s!G_oCD2r-eaSvnSw0i`qG%zj-dz0DDc?
z!o!ROM-(p$wvKBbsZ%LK+{6`6T?)ozX?^&CCl8jlO#--wZZY3Mu`!%j^cyd^N_wA4
zzgN!2XtJ}I$fOU#1Q7R*tABw>kBc8hFJSdtK2Kj`l1iO!^q+rAhsvNUcDhV4Qmg%U
zNW5JFY5_9GtNB8gy{)3`rU}_-=9hhllngQJTo!jh!)^BKRlpP@(mDd3rT4VE%=o1B
z<G&%(DCd2GxP3f1Ww)Y#>=1M*%d6Z@PKSt$(97Wbvz#Y<?{t+dQjhYOqQ}lK1vQ}K
zGWiN>RuaIG<JPG<p$`3w?N%>Aerv2R)-PmMmg{(B5~93JtAEcQXmJr57qY<X?1RdQ
zJPE@7aoytXsb6SD4KS4iTgEM~P~N{%kskaHo;T+^t=4T5+X>+xn;3Ic#fVAq)tj~|
zxd_Pvr;Ql9eiyyh6GKuRdFr~K#1fPRFr|8P+N{@V2d$j<)|9gw*8$$`eX>6IqnYG2
zZJ<VTCiuXr^N=1KN+l*AQ?iKgF@_p=MjCeR$GhY0^jU$gxZ3DD=Zjk*)b=Pzi9c1t
z_v5&v0}l;wb`-vzMIFG09C23<kYG^Wf{POvrIyOI%@s!(457!OeJuz-HIbgpZl}Hi
zR)Lv;!Y>AKk$VQw#w77n+nyCHQp8Vn82;7aHv8sEPwp}&D7rZW#lL3lCoQOCoR^}1
z^%x`G%rysKRf>G;+D9{C@{O#a<^Lg!-q2%<bVZR6vNj0lN={mSy053@sex+?YsdlV
z{TjwW!+^3Y+$M}*&G>)<rUNQ_pW6+RqzIabzj$kt_YDN>vcg$*58vnhw7>6s4Pa4w
z5o=I2UE5L7heV^x@a_3_LwVZ5>t705l0YA`?s}pCOBE1-ey#0MHcq<5RURW4X>vox
z>cSTr@^#6cf>92T*ED?{{a)(fGyFGF7V~@lV=horOeT=oGl3TV1&9|Z-R7*9hl8C#
z+yw8sXeY*77hP6H?$X$lA%w$?XqtjL16sXoy$E$?sBoUmDw^iv$YWEl(ZRIaHTON5
zBLrr@hW>NVJ|FaxNq;YL2a@-zt<t$g<c`5Ri}Mo?avCmI!8f3iwT?$usmCn_xJw6C
zI`scbfRKikTRDJ55`{y48O0@nDTxmI1-7ho-<Vk9S2fxkC3TrRSOUNGjD_uYikNYK
z!GB!VSyzG|Wts!)ORjnX!w)4H&St)N>CTsdx=HLEr0=0WwRhKq@z`UtYW^S<uJfE$
z2|{myXHj}^o_Eb!>NXx&H=91)!0XZqD6;%`DriWVYnK{QOgY|-z$TWzTZ>hm2UmQv
zp0#l5)UmzJDTNEXAM#~yDGN-!fz5!7P+Dv5X^0JBZ)y@;xJ9}6Pcs%9rA~H6)x`wF
z3{^dXh?Ly$xf~;(2BrnIFBY(QXP`NY$<1@kYFbu!Ms2TcQ93}toXM0!rP<o}Kp}87
zeLFO&)IypMB`zdTS?3`N41eTJ>sxlHAAOvqs1_qUN!Wb2q<JF`4gv+_ZHcbA)-XRn
z0gGyCu{tL1+I!!d*a>qT5E5>#<$bK(<gM04QN5gH`FtU`<dG{7_j6V)l@)Wr1Q5mw
zbH>Xhcf%O;OVpX%wWQTnwozpDp$($>+vrL*q7aC|?2WVkhReLNRtf&CF?3_CS|9c&
zNQWyo=9g3ys}QEEi-ji_kz}E7dOa0vw1((h2f*beL%W+-E9K-P^WOAan}m^_k0MMm
zLfdq3t?f;>0Mx-ARU)&^l<#fSpk8fNtobyE`A2%dYH(P57P#q%&mfR(siAi1EUf4=
z%_SqK{^MEFZZ(4+5Y?rNlLxcRb+cHT$(~Dwflo~<+i_XH{-IopAYP5?`<O`lMglB&
zOA?NSK)Iy$)qM(!E$cqgxL)7jy5@Qq*-m{icXEHnQ|q{xV>)U*nRjUm8HTY8^9A}q
zYs7Rq`;{ggXCX%1Rah*sdevHLDl}q-xnvTCZ+{hZ7D~7)U`HE<_T#}VQ!-^r!k+>{
zf&RieAj<=`U&-KE^WB&6sD-`@nt*`+l|vus)ZhrWV$_2bV{v8nS5z&{4vei|*VKa!
z3IzDbqQ|NHXQXYS;2tw^;!au*ZI*ferj7+iOOs8q=7ccOV_ad!TEPJd{vDMg2w?f6
zG))$iG{DL&kc^kjchMK6P^j5uC6b&{D<EHX%v+-gX2yOi{3}bnb@Z4J1T|esqTcjh
zWkn8})5>uqBT&1zE^k;?T`XI9uR+3@3%CJPG@{n{u1|GqbLffG>cbIGyRR$%gMBpT
zOJCT2l^C7><P<a&4Qk;=*{(P|9Ad2~8xt~x^hu}S0fkBYb|G-b82{rsOfnlVCF29l
zexeY^s13)2QMQkD%?{66&*2efdabntSPnT9yI|ui#o3Ktof@^EofO<~Mow5Nuw&!x
zUR1-Tb{#rvRP4VX!X^O4+D>_|!SyY?xeKVno=c3P)r5J}?5DTQ3?pT~lcWoS_iqg;
zwy$^18i)YsC3}*Yh#FcE>Rel^=%sDXWqydNzvNu^{QaUFh84%Z4IC|D1Mg;f%n&Gd
z;z@R+d%tG}SG`5U;<0U@Bjy8J2^7*m<!BKxuU@-qtDqQ4L3J?t2E1oRwK3}*tzKf;
zJsMag#aJ-6XLlDMJelBWc95e|2oP8~jfc8MAl3_*(M7gnl#lkQDjO4aRE4s;bW2Uj
z<w8<0x0&`3T_EC5PEoZZ`u^0Kz#q}f4<!jj9isOt?=-D;gF_q`hO5G$t*>IAMkXB#
zU<N{+G6n#yol6AtRKk|_KXul0whbPIaJ+A*zu7)sjmGvL%fOslI(6D*w2J1(9ar(f
zQ?T9_G}IjJ^N-c)MTn@;>Q2V0Cph!w&Q$%(q@^~+0t)v0xahn8<$XuS%6l@QHHrtx
zOL%jf(zP!k)V~6Xf82!AZ={X|?{;BAHWJS2UhlUZumw!XctQc&pod9jk~8+9_lx%H
z_LJB)#*qRjvra(KUEF0=fNOG8Ix9eT!8I}{-u&FWHN<}P@77kbuW)ls4tipmi1Fn9
zo+}*8KBI4f*iAm)g49)<fGu!;yw}226squwq;2&jbM4wOy2Wl1OlG7pb&gMcYP!0J
zFvj6rbnIqBWy;saI1kyFENeWX%CNyR(0fCxV0>vT1C3lmgj_Q{*h`nK{BP*z*2$@^
z6(=J?BqY`dL-XQJgsx>+t$%CW%F)0GWRQr#JosJMdPk1CPda8uHsF5AWvpYUHOI7o
zDV=PYT{Z(-;!#rADcwEmMtNClx3mfWX(bIDymhkJKyY&i*35%(m{?7E2tBG%eoszN
z&IC3nDVA7trn~&v8xdt*iScDKEs8&tq<-O$gExClqZegW+|X13zYd5QV|sQZ@x`P#
z8My~M-!icgUZ%ob(^s=v;LOlKo}DqF2)gd;-O&W_m*E516?^TpCp42k2Oze8;oW3E
zr#UV~4bS^#zQo(?Z&Q)?w&PAZs#9CrD6qFc>zIy`QN^yxH%gLsl_pN8h`j|&f0D7i
z?N-m3YV-9Om?Q-q86qv|6&~Ho2O<dMc0||wWAwN_zVxbR{+;}rBGuT)DbOIffavcY
z--Op;*gdYFz>*a&Q|P2LxKlh;$n+!;mbr$s>d&z4$^avvdAef5{NjN7NI~=IA~sRY
zW)ep-o&(FweV8648EleKqETy53P*D?c@iZ~m<mG<VgrozS1AS<@B1Lp(s>s(gy8Ek
zt<yh5E3F&S33orKevsSY7Pf06pB=%mJThzr<Mn4?Pj<RxT~6;DOj3F>m-%L!`v<bv
z^I1^KMLNbyz22#X$7FL3@e=#WMg_Ja3_QxU=oF+-9O4WVP;99mP*+`NW+URiU~iip
zc6bL~E?D%UN5B_s0eBdOrt_l~-RhpKOfc7#&bX`y_TN>muW9fb_HoMMvG=x8+ON;@
z9kGAUCHGdEv4^c+c&$)61iHE+t!>QjLP20~tn9t5Q+6nn5SZ~)+?X(w+;@-sBw!uG
z=-c9~{ESr=7A%y55X{sbZxXxj_m;E@6NUjDa;A^Q7P!Wdj^T{qteQ+YZI^kCo`MME
zVz1+l*9GN~MB$i}UMeLl4n)i9BV&3>0do#UfY%7yNfC+m6UvV^zKQ>0m)1`wS9e#~
z;GP^(=F#od+ag`x_;<+-35(~NYA#<^zs!%OY$phZtCBZI4Wd`GghxZy5YE(XNkSV9
zY%nF;UDk|VaXubrXp<DyL)DtBiq8K(C@@|QQ9rpFW}-r2rmcU&DmoDmm^PTQ*Yp^J
zf+a=(4ZNL%hAR^U(eCOi!eNbVmKQIbappal4^!<jab{r!;vtXxi9N;4BC|zp?!QFe
zNHyD%@i;_65_o>Ag^Sud)sqq)zw#=~W;SxHITaJ8^;hSGmEfpa4wlb`_XQlgJ*P@Y
z{&v+Znpbw}G(OHRLcpOv1^k|84M4}t;;f$#eT@UN%ysk=)ZBaUHs3PAb1={-hb$<!
zk^QVN-qcNu$9=nO5|@RXE^vF8e#FUb@;<k~h8}DMKeEM?i^c>hp}#>?yKM)zJm+dx
z>Cf=LRawMZs?4|9AypVuM<`#VXJRV@2ZMOdAjjelVe9VX8CtHfh6(6E>ew|sT`N`7
zOnAnFo%_91`VWh*M14(=Em*hP;E1FlDi7;q2uK+_23p;1P7l>go>k;=lWb1tR5DA9
z!>ryC%A&JL1P=J?Mo#`~9LJ|TRp4le`bWyWEs*!FgBK$9#D2NBc7N>v<1_Y|WNyxg
zx9-G9kS_8}zfi(4=H&uESgAv)%}eC@P~rTDXeJrnIb#k2)%k3f;M0Ywm23&g29ATt
zylQ%$QdhRhK{3a9iH~W2=gU}at{W~HR?H4i*HAhC7gG#L;DTcKBoBlZ(<gWnjP<9_
zK$(u-D#2I+-s~$NZvO8-LHXrw;~<Mhg+Eb(ZQ4Y#!`djP+FZBUAW>jWB1%ZrO$M7w
zVX&4DHY%Ctn4P3OP=P6BTcSj`Zx1)}8oKAwC}!?6gAyODJaRQOJ<vcM1eUv(;y*R`
zn)288Y%sB(f%{*!%$qE#R`0($*W(fpT2l9{GcZ7hotK<34j%WKyWWw=Y69d#?vFDW
z_~@THk3j->9jN^xbE-^OlWhO^s*>{o5cuI2ebf7(r+AI`a-{$;Cyhk+BjH&WDO?Xu
z&v$UgZZ^a02P5d7Q&Qxx5%I<ZG^AE}Ojjdc&e?{Tl0tx2zIrVrC@DRA)KT_fX<<Q;
zbOh&}9bj}-b_^tM`TjLt(_oHejhHKm_mzTbd!^{gNd~pxi13P0lY)9LLo$T0En4@W
zmTly)^I7=Pn&%I2b(JbcI`xX#rs4dLt*cc67w*D(dOn3V5|jC*NnM{(HMu@Rx@H;D
z2S_2nL|D5E`xn(~$4E^46tE(_S8m{++0}z6H+~#taE!n?ZP|kOjlmCaU1kExmC*&H
zTH&kYWU0Y#7NiN0?DtSK;ZZ)cPg%OrXC0S2n@=&_L9KFQu}injX%Pfe$gWoowX)ZC
z7l>|sJ;b8ZE0#e$CHa*@k)4`K<{sqI-G(81FC4}IlV`CRI(q0zcZ`4k1ARb(zxEQM
zt1w@o3NBTAO9z1~WHFu5iNf7Jk-Yz;@Ro(OzXC?oaxgEA5_V;k<U+^7fNaR_j)nId
zIKL5+?6J+;t{+3LxC1?vD@6WI^6w#AL&+}^aMbjlYZPXoRP@kg79ikl@GEHCG_sgm
zxkjiwX0?_puz1{Y89A4ihdZkr`a<n!1T+GiXCJ}zY$Lko17fd64BNcXI0G&S3I6_K
zEHv=ZtcosZDbc*i1-#K`$vcA~;l;&U%2;O44?#rIcmP(UJZ6|2<p0u!7JoV1-V@Jk
z-6rWn>%T#gT;9RK1GInbOtJLzHM7<RlYLvtamLk$(a(SlEx{H7bS)Tz>s|xn$wjkz
zyPfg_ERj@_x)DUVCx~cBl4SY|2v9SOq_1|f;w6Qv>+Y}fZATUv^6ZbYU!j_pj7$Be
z@vxP>0xCE@Z3;xzjB(@Lcn{0-VCwTa_d)sv8LS4q*%JN#f5aKupxGiU+~k&YT`}V5
zD(NaI=G9oGxcbUta>#<HCe@<@hV<@W26*XCqF8cpxqrq&5E@<7XGVT_XjdM>C~PUc
zkZ~%*2*PBn?SvRF*PFm4p9R1P*7{&8f%bFnU*=O6i*HzAmwufME5H4N6nq~k9Ac$<
z5=gbOe@Hs~5Dv%;OJ@7Dy9V!JV1(rn&T%Oe^_sKrI9&o!&AUKFv4V7?WI9DGEsJPD
z?y%YFS<&7_hlL`iT@x1IEovYa#4+2NBgky$s8zCZR5aG0T~^d{j2<5{gmt-HWzCc}
zvL^L^SiZT@OfZX%;D{}1P;73B-E;D=?*WTVU%k_X%OF6Ul0n75`E(9FjJm8z@0SM_
z{$>aTpC4Dd?V`JID1<vq0{XagG$8QN-s=$TNj&%ekUhBvoL>Z?Eod&kxxHXx(v(tA
zsP4z5u9ea?k8`*EW9=0x=e%u;T<_Yjiue<A`QA>X`t+?pGPZryb|$*EITH9|pCK*_
zdn~4sc{tJ-)HIiOxb|k9Mv=+lX<7?M(ksq+Lwu~8&`iy8`8$4Mk6KzZ5Z5~}?BP=$
z=8GNSMz$@aC0xO|NUXIWw(^%$DEyhLt#+hDH0;x`XLvaY)~s}kAUc91c1F;6H?7M{
z3i3crd)FE2L6?(?g_eGTVHYq|^^TGbkjzkn%jMkqgpx(i6c9OZ-y|`@WC|-l8kj61
zhi(KovbgTf`Ega~9mbmKQ{l$nE${_4WIhD0w-{eMsF?uCgsrJ$KVK^p&)5G*HfM#^
z6ZkhvYc_fDp4H31zL|agS-^aO-44bLh@wo-Ii!JaPKhvZ$4O%S1S`{eIQ6WTFO5^U
zdyx5vVX(0eA`0v8DoWJL;Z4g~GNRh7AZCJX#fhyut%4Q1RJyUQ4Pep87E!j}A*FOd
zj3%20J{r|?&%m+q^0d+^siM#~5b>G+(`KkaC$GZZAp%7)@LoaX8+K(9LRtOSH2c#z
zAmzJB8HuM4zUE@b6vpES(s~ODpg;BK6^ajQZK{00i!C6JOUd}3e`hUh-kbKwl%y3s
zz0?+$G&+rG$+su&;pk>z4p;dL?&Dg%$r)Cq*d&gN)AHD@n?q!MZu84XUWa@*-8TeX
z+^<?gOxh=khr0{QCOsiSuZFBFdZ2lQe1bJpcMb`=4`}%F^Ss`Q3wZ!T5{=Z!Sq}KP
zj+rFhmCg~XB|5`|W+R3r)|RYA25IAEw1La%fJXOA{;YH#!O~=@T;7b=ZIS&IEox)W
z^2-qZn7CbO({ck_m~eMCz~)U27UOAHUrG8wI+&{By994hNB`AmSB+B<FrfDst0&-w
zuWS(+asv;P<K3px0qKVkE{f^si%^tcxP{<-*c`yy${#{Ul@tHx9tD#K0<ioi0MoBb
z%U00O1E80Et2KSNxsnk^EspLUe(}lajN)TUVC^>A@DDIQzq{}h+<s)T`oO&rEPS~X
zQR;k=M+&&JGf~-|^}Rrimualgj@u)*_RJwG0P}aZ;%3MbgH_a)U(Wkyv5~M$%T}_;
zUmKWWlD!sHc>6gd>xH~}WCRBJnoTJnaP27&9?)g=pXpp-97-`sa*PM=Xf}#_poGF5
zcgIlVGkPi>71J<Fn~|oROgLZWMRO*AspOhcX?I4vU~!l*u^Yn@CPNpA#X6f=+96+E
zk{{)}SWDdYW~<y1n}d|Zvq6-BM+FI^sV9{4rK8rf89|hnUddCZ1Ol{bK?JLw&@RPM
zyp>W3krqy|g($uH_u0xm&DO&U;lVHzlH}KOsXyEKou`SdbVh&X^>X&rJEwuP)9C1z
zONdK~E>+L9iDdF?QOTe?pa(^&>yGh9(D*6pW)%22U|JOF@<9H@Jnzsb+5?3s*aMDE
zKh1-<%qtIrm8qFI)?$5BTkV{gu6h6^c#1`y;Gfoq3XL&G9A4<^?V7FWRBV^?oX)Hv
zNc|ujzyKd;wa6O@%^U|NTmHz~<zLKa<e5rG9O@_$AI4#k-n)szw`?VhnOz)>8Y?Ec
z0Eah%D*o~SHWI8{J+?L?@?WX5$Ll7~QjfmfgsG-Ks(PlaXUP2}DR73MDcv9TMm`VN
zGQyco)FnAZJ*7Jf7L3HFn76L*hME^tEP5=mgu^zgE@*np=sb;acP^=#0HyKT;cO?Y
zZSuR=YN+*8JRoyY;+vO{YkVxc4CK}S)WjaQrp65O>h9896puPQ1NA0Lq1a6Bi=z-U
z(I+Y@Jtqbt0EFR=XCA*kwo%-T;;p7kg+($|pK?}pf~CvcWb?=2sHzAB9VSwlrIg0Z
zfN)<&Plv&|A^-pY0000GIP)OiVveuliGTnA002G|-HqMlfkY=wL@oyp@?-{m4OU4i
zw0})(RQh7juVV*-RiW>a%eu;#O?m4*lkj)%bgHsTP!j(^A+DpW$k%E^^vCip9UuSz
z00#7xeoku<^Dh_!#ZkJL&tny@V6D|#>j6Jp84}`;9~7If{ugg)$E6%V(Q5trDA9)h
z2;$y_ZtG9U4wf<V#DHiX%`gA}001+0`GEUHt$+Xk00gqtmul$()lYX@oVKVpSC=zm
zJF7sL*0h(aJ;4IhA6|7FXsbX~hU5e(#AAJOxf{LaflWsJcyKQNbaYw89;yp^EaHz<
z1-%w=N2-F}i#VgzL2pHzQR<+#qRuGwP+QSw6ndyF=(CDFR2KAE#U82)dMx6PRRz5k
zaYw3x-itV+)j@AXoKfnauf+Ss%-<7LkKTTfBEHijZa;^F$_C0Tm(AyxA!U6)5ZecZ
z%eX_~L#Zl~8J-75zy@0SA`F}6^69uwZd(+dGcZ2AeX~}e00000000000000000004
z(e<Cua`p4TvO7EQe>`yn5_An$7SX8`Bu1xdIlSNjjA8axNtoX+4cj|f4J2n+kfy|U
zU304aYU>z+EFzM@{^R6l#%o=Lbw=KoXLkRmaYi>&#vBGU!XQJ~6xK2t#F{|ZYYf#m
z7`hO}P^D!6YSE{%Am`{&lU46n9Y_usrYn(jwtSA4n;ws4pCx?TnXM_Jm=J#&9wvq~
z?fe7-DUEZnt>i*<LYZV$WM2V7q#{No==j9D$l^ZY^42-vgL)@vpTCV<eK=0LxLU86
z^bzvA_cZb-0c=+y!XQJkcke^*xw`dLsY${y3kAC{T*`bNQ9v5cuRX^L>qFH0qcUw1
zSq!JRKzOUGcdJSMpYM{H@Vkk7&Ebarb7T@0;xuO{7(VLXA32K#n_lM`;KihK)BJ&=
zLau-6k3_9bgbhb{0Z!`G`zw<F<xhYMttUdUE`5vaDrn^P>eOGs?|JL~^#9|eO6-+T
zth4!pLXNZUG59tv`Z#n)3oBU=xXXeqta#zAF+qK5U+uhq{WVhfTMVA_Go2b$E&}-&
zWWF_cfIXSw5uX31njghcY2IK4_|bl++@dn-ye6HoO*M>7Kre@Y^*N5si;cH$9@Qgq
zJ-8{ToC7$e+M0Zo-<<wgo=CN;AL)f#Fgh^W)pt~dXevf$N``gjjylNzq%F39F%`8J
zOKo3?=4zr90wwm=RNVogn^#LNi=9+_YX{_X3s0bwn_S!Q8Se^~ANy`e5CI^lJ4v#Y
zACZqej!)nK00A^L!UyU<^Ek9BD$q(W-1}Vo1D=rqrC?Eg!@niK7YPK+hQo;KpMw$7
ztxlVQy)#KdjzE2Ez<tI9uTHG@jO#e;?it{}Y0S#C7zpOWQFb@`ZyM;qtpF^a(%+`~
z>cKJrrRh|mnG}gSs0K*m!LNorlU5e0)=7g_CR;9dTSd5O$GKEV{7*L6%<*{Fk`zho
z_K$=7_ElqH!JO|EG84z}0Tm%xp!Z8cU&WSJ9u}{ge7s0DO6{2C;3z+R2kyyoNPWSp
zhYDc3Z1!t0sv|lLwOmz8!dRQkwr&&*I6nOl-DJ<B2|C$DU~IM_7x(nyy%e5_o(shP
z?>u8v@oSsX=R6wlSYdpucjtnQpshK9#E$5F!e6u*SUfFWtur7VU^;5zUb>^QZg`!`
zIIL%@MTHHgzK@r%j6~?{w=0I*yk@S;LPTX=Z$rDxBkw#zmfV*jZ%U&4xDM9{iC6u7
z*xnm2{x-M8D{Vo~-hTX5VFAbzCUbx!fB;A42_0I1$fWCw&JI@rSOI$Z<VwRMcOgEz
zLfrrYK&Qw0qB_`N&aHB4kY)1<fSUCu?5q?4714vcBoTKViFs(8Q5mB?Ek9(EI-{Xr
zJd@j5OL7{i?0S$rb>DR*i4&lrbj7qB7xfd>3fGhNj&K%9^?S@D^Jj+=Im<Qlt@{ZT
zliLZoKs*)|a=VxHL{MY8$n?v?ps&p!z>viWwZ+FIyHz{k{^K$@tl-surP;dlmXqb7
zC;i}iU|@HXUkU}j#fBMM_DsJZTL}s&_DiJEw74NSsJixVih|FWi}nw;s!jZZ2I8Xb
z)k@XHL^CR6qjF-{Odt7D#RM=oKtG?&Y+v>Adjuv>ioZFAy(G+N=&h#LRKPwU;9_{Y
zV4Hf5tXkT$LIoV<+Az3dVVG@4bwKrAkK%632`M%1#3%1iK+^5t$Be)$5SERvc}PA4
zcEK3MkM0#^oQE{OV2Zj^RTB?Iqb!3W@9{Uz;rH=uTAu^bYh`fkP^>`6Plo1I88$Wi
zNP|e9a0MHM@Pf0rBab=}<M`WnKwaSf9C`sxhS}B%Qy@!Ds|f;HR@PGts1JxZfa+&~
z|JF{ZuZ^j^%y7I`zW3cF#b*$4DGWaX5@+Fnt?|qQ+A|H4Pmu-TfcMWAK5Dg@ve%7}
zg&poLNFk=CX<of0dI=bx2bbjV=@V1`&NeL3r$z}gnw58`6l0dy73B}C+Dc8LsnK5P
z&n@7DM|?%c<%J-yd>PZAb!k;IC!rowC;A15?enn7T5Dj$b@6yis>#}>)yCetp&>dS
z0N-D1?hi-de41rh1F0_&`rJA|tGAzz9$oMuYA#QAe6GB+;&=cm<bar{rQi~AXXfm*
z36#>eKX=lqL!v6Mt(L~M-#Y0@1G8RYA&oAS&zzsD7WGjpwVw#tEj~{!$j1XbUiQ#N
zuCaEO`HYcgqN<EU2}1df_Dwx`jZ0(44u~wgJI3764S3TAfUqFBIcUKaj{0<4Q-O-u
zXqArxvHWdF6wYe`?de`Gb90%t1Pvun6(U40og;|P&Buow4~8W9FP{iB4;}P9M1*-+
zgqqe*tE+De)%7H<2zAhLkZX3|n4)7ZA*Ks-y;9+0L;m+^;BOv@O*`kAFnKei`(Tl<
zCu8+L%y#Cv)Op1dap9;+#$YB+G2QdW&Kd}2n<jV*j{Ap|p0cpuv8j3#(HA19?e~f~
zEXLV_m=LM|iNVweQux$ac9GG3rK}i-=cD^G40bb2LH(g&HxYmibbEBXe=Jya4+N|>
zPJWn(;Sr5{6H7hxD&3GU^&0L>85~*k;h0|u*MMr(u(Ok!qj-KQwMdtAHiZal=<lO`
zipHFS$&`wO#Q2{S4U}5k-8I_U{?4M3$Ugbr_?m}YsI+8VIcfTQW^GX9B^rJt_$&Cj
zG!a-+b-4~4iS<F<v!TwB(}1pcbm3MSN4aG{&FdvR)bFzehBTviaI+>1hmbQCfeoZS
zufrkZ|G;k?jF}t%M-aDJA-#gx<#s>_2^p*P>-x8LEyGZ!8*`YA>M2P|$!ENes~E}O
z<xX#FTE$8(nV&%zLgv!K!0Iz1fw-v><N5*gi%dVx_yDC}d{;&aQDZMU<_N4^`xcXm
zpUNo!rKoSrtyFI_#8_q|v%cw<m;{t<vd1m}yP9~VkyNihkcsyI6(0?9EH>q%8QZ2L
zRLMouo0V*XKB)uteTyISN*+`Z-~a#um@P%M^Z&7doHjHR)ddiP(u&(@XhDAuOD<oj
z;BqPC!p#Sq3^;;RY!W?Q&ta(nV(>`n>;j>1#D@~pQk^dPa$YtgtitalYt)$RQy21v
zqG;+4+W4a%U-JiCw=257{xnm=BChK4);`tzQgXH^2I&al+-g%<9P~wTPL3V~?3^5k
z%g~&`eyEEnZ3ZW&sosktW{mz)TCIW$0U+(b{9R<&BwXuf&lblI7KEbI5;V|rubDA&
z!I>$Y5?ZfX+l6!!RZY!ImQ5F;Pwf|nvP|Z?_R4oM!kSoSaBLeP=YXv2R+6DhMU#iW
znh}ebY~X&lj2<j~)fC*yahg%I70=s&2TEb>dqVM}RGZnOX8z-*eL<6VSSa;k9u|U=
z7R?CB;iZSYDeLhz`#;%-n|u<HUnieczOnm+%Y5$NOf?`zftIRW?lja|`9nGDePdSw
zCO7SDOTyU}kx<VB85+m{0brVIRQ)dv3m(^f3-KKaK`>j~mNzuCB?_K~6Qi6=$<sOa
zO7c`YA#(c=MG~4i`MdG9Z+QVWx?xsFjK4KJErjpI|3WqAuC>;&GB8tp=r-nPt)g~!
zQ0JbjJgn!d={^KoPHbSzJp{=H(E6@&+JohC2%PPluB>2#lRv(G^!h^NK=>5OO`z^J
zhE;<4$LDK4njo)}c#ODoCk2@jeS7-{YOqt^sOLzZ<=#bQ8OU#>WTt9sUWIEDYg25e
zmg}yHkl-}ddkbqyX}^~MmHLH8J&doE|0X}d?do`|li^b*(tXg##n%n{F4Xc?v8saL
zyS73O*S0FCh#T^QcC8}Ifh?z-K0$M`R+Dki90?|(`Of#Ae)O8yCZZr!#2qx1Xdv#6
z_(=`W$-i|Rrb5K}7ht@yx3%M45yS2;2miESF0u01tqbaMX9C$=rD^<B@>w;FSY-vj
zM5*Rh;8L`Dr##qNnH3yBptBR<j$`r+*?}qrvjrS}59ql-Eu5BGHrBCwIszQI7UsSG
zeD^7Wl4+HfScJCb;t;kwVJlxz4+O&n$GKwsC#hN1NU)sp?YzFmQCYD<AlhgmjRpPs
zdaqg&8n4kIa-?dVJ|4vr#uFX+0raQv;^f;+wzh{(xe2!%gJPWIxLE14bhfz7(UF%1
zR|tjv__@)kNrlEg2Bd`{HF$@Ho<NDgdsQs^p$1E~=u*l*?}Bz&cUyl}Z$oRf#>OQ6
z+n730>N?TC@)p|6`D#}J5F2@F6-e~oHE=h7%t-2d8$MIl&*BxT=FU5$+AE6XzEyTn
zfsj<gD@tJ=&^Ml`p^*d-{fo(Nqu(-BuKKBgLIWAJLmD1}nM3d7#DH6i5U6DIIz!y=
zPYPSBx)Oxy94dSrJfX?^aNRd&P!AU5JG(e)N>q8EwI*C3#K>v0cvnz&p~su=cc9<=
zG|b3=V?1&hYGh6<BoVPR^9s+f@-4vfVW(mdBbY6>Yku=a%KiLdg^YL&X55vZxa#^4
z#sb(p50{8!y3-=b*$EiAo*}oM*6_sr`ywqcXTPc@G8L9kTIAhSPlb>do`dCOlnpDz
za_cMaqZxqpl+__4AQCEtX?M0s$S~anVI$7EHYt4=>fHYN!v;5?G5PCA|NIt>fq6UV
z7*Rdts9d|~Ytl1ADEcRREp!<yoE8^7J~oS*LW#bE8|p=-b3Bo?7U_lgt2=f8!R_dr
zKCX2sS2ropZEc5}q|FU2%x`LcdGv8TiT!z7{|BRqAzc`(x415%wk!28Z+FRddumwq
znrE-GzMMKnq~|A-eS2MBy>fKhLLa%P=#{3;lc<?oXVRgc1z5Gt8rI$5&F}w%Zxs);
zHa&4vS#81Fa8Ad{td}NlcMu^{bkH^@ATkG_=5wyB4frvn3h^hzK#Ts20<YHAKmY&(
z-TRJmvTYvKFEPQ`=O`x&`I`lxDYBU*=(@^ryUALjRKvV<X>2_9-_prXGQ)XQN4AWm
zXMj)u$AW*`hPlZ7Tb5cGF^XSwKE|>z47|Qn6dBr>S6m82lB6AT=z(gnX1JLQyw!OW
zxGheD169Kt1aJlj;ci3{4~_r;E|6D=n}dEwI|;%8ZYdbXZ;>GxF_xD4qgcuE`EgN7
z7<a-Ds+pw$HElAa)pCI2`u>bX)uAJHftP4_Sn*mOP=wA?^_yuD>3fZpS^?68H37{=
zBwZSML6rF$2A4X=bDtJs7yr)cQFxy5Ysk!Mt_hLacNMwq)n&Fz14SnWsq#_j%9%B*
zK|B9zdpI@h16z9Z_0C(xy^l*$z))LY)vZt{25W}hTHLMiKyS{=(*c&LAX;ksDZ0hk
zvImHqLze<e==E2#+0L)C?{3p_RSX4rp8@Kv@DLVLPvg=?!Z6+PP0D|{16P`E{~0_z
zwR`uAy}q`3sSNnWF9;E_wxcwPE&CsUHdg3elqc96iDr1pl?)wj$CCA@-@f=w<A2jv
zCX9^v|L~w~b?S_eE!ssCx!$O*r1NVE6xwh<s_@K}=D&s;wOf=&&V7ESGx=k>Z-BVu
zlRXBfg6NU2A4q+!@OzDOl1;WOOi=<8hBA!qR7yn*I;HO~scOh0nRSW)NVM~xCL~&~
zbCs&Dmx{ZJ;x(e$vdsircQHi<QKc_Na=K<|W<7coq&rdcM%QVPLkoZjgo5=KmvvM2
z*aZ1tLcrO>YZ+TXE54ItxXjf==c)5SfXmpiBdmn7=WeF|l5u+$XE)`Ty%Bd5(T^eI
z%*&Q+zDNx_%XBYx4gibkhvzjrANF6=HR&jk;wq(39R3}_^Vl~JJYV_u&rQm2PyF;R
z%Bo4tD)Gxo>^y|DLW2&4yY{_g(V|_`FdOA?mF^)^xTj;3LgGNXiN?|>u1LDj64ZZz
zOqC9LY_=wis0$+`KMEa|7yS}<2Gb&o#UpOj*ma32fz?;?ep};lT13uSO3SUm1deU5
zrp9=%K!C0j(h0O#Wyoj-Q&p<s5|!91vp3t^3zI|6Q$`)52En?j!eoOSkPrg^&V3;B
zh8<bz$<u<y_j;XN3lLmiL71{b5#Q@GqR!WyAXS|M+F_{x)M0h7BD2pRV*g89=1~lT
z!4(0OQZgGu9R;W%yj#K%KM!`@;C%`oD8xva1kXYNL!5?Zm+@Z?9c5j}$;g*DaunJq
zjs=0+XO)sNe1vT%H_*VD|A}kDT}{G7&fyT!J9p92ZZK(i->n!cmm%TJ0QD@!=n-Lq
zqOGAbf>^jWScjb{<=6o>Y{3eA4;gmr*W+MDUjHJo*Xm+b8oX*~a+KTIO42d<XL*Gg
z=3LNMK0k6cN)?z#NX!1s-%_El=YN4*S-{*RdOgO^dGBVQLvEHhs|ECr7WGi&9pD9y
z-;a2!foRQIJx8|N2hg!O_hU%MGNY9FK7vbdq|VpS<Y#2C6C{Gkeq)E%X9J_1g_s^D
zIrhnfc8*odAiJZ6(=$%^>5x?!M_KA@noj=wn_1+IF|6E5)%)px7b%0xR*|ASec4sx
zPn9xwuy4gSE7vI~((RKj(MI|2-e2Q-5Y#b(6?t|0mFP)LvD>vu0E#V|D;Yh{@r4Sa
zFBZ0>tCJk<8Fuj<##UM1Nf`Hk6VT+UV70sQqLd}O+XlwvR#%l|LLZ5j^Q8}%`{6VS
z+*4l901Ik`L%0xM0aPcc?XR6q|MjGD_Zk>qigP^eANcT<49{9wO5jT7yQ*})dycFT
z2k({fv8xJ3OSCfLvJ7o<7}sV3hws`}G=+BP3}DgZSxbOu_xecs9yM=(bxgA^U}Hs6
zum}wrtE4D@*jKqI<398v<1;J01`$;^#Ih_@IWKowvXJU4=8kP$2Nkov6XcBSNE6g%
zl8jRfb0B#-{LL)t?W@PsH?f0>E3e|g<^94zJ3-Uw3Z5;g#kv<M;%ZsFlr!`g;us$z
zvMw^BA4H}f{IEvbtpC87$E<JlN8e6zn7Vpc8rl0Wi>;?cAx_SWt63?g1D*L7<d<jY
zT>J7NzRC}dH@6GoUQ^&9M|l{IW81*RcBi*ReETFwAT`4R$wM^M$%`r<eC2-*i0_>Z
zBA=^;2cMKlbA(}BF981)mb@+<+O22u(hER1^kjb#kgc(u(iOLn6fHz}DI|j#-05<+
zl4_UN>|A$qdD!tnwo>bocMPwgsuK8l-e5lJ=I$jlhV;9Bjd!Vj@-9g?Jvol|l5AyO
zp9{}{0!#vhrpIjAxy@f_FZI%QHo89wpMgP4s=|vMp1e<io%no@Z+G&d=&;miJZ7}~
z<vmT6Z8~tKh^AC7Nu78Qgr`E|oC(~M*c|2pnt-(cu|RwGge_@6&r`X(=miWwy;@O#
zwIQATkNUI<9L%dC28EH)dYq6USm6GyV}=y4vvBI*5qJG^ikvCbt7GakIFc<W?}G_`
z+P87a<AQuKMJ&@0{|#^W|ADoT<f=N^yB5n2hGw*#OSc4!{_2~Na2VJuQf;1EMxst3
zU^Lf#r+wy$Tb727tVeY|bQpgZ{-l{LHkTP_bhf%AaFg#mkKu<7WoS^^(a+hKOJ}jw
zF&)B(A@8<?p$2Op_wI-F{I#(F2th@EIyEhEv787d>Su?*LxeA{&JvN2q?MmCh=?+g
zp&j(lH%z+_TQe2p;da8IT+KfzJ2>BMc64V?Hr*5eYLV#xOS@@-kMaeG@^WwM5l$sM
zDuh=d)`T1UK62NB#jX|au&73H$Y1QHuSs-uOiVOFbE+cy-L1=+rx|&#S@TWU_O;1P
zE70FE>is40^WTu~_H9)|cL^i5QxinV+nIE<D8;S+RYnFDMf^hcbv;O7DMhVGNuf6C
z=WQ~n5hbsupgG9icePD=!0?w?g|49KBwv}c;_j?0<R-pUew2e&CCgNjH*1UZ_;V7e
zA)dcPKUiBV6v17t^srlS<_OIW4F0sI%&W?$Yetw2uwvVSTW=|FtP<slQlnsYJt{_e
zJFxzz7kN3nK7vhHa}56aKxl$`nItawIMmR3+(wpfCZlm2nUzi{V}z?c_IDk{z?<7k
zLflSPB}~~0{FhBx5(ImYw8f}_#I3Q;O4T^uAv{6}BZBVhJwei%(jl=x?gnq0GliT;
zDh<;zF<!V9rqsmksnqk{)Q5$DQ$q;58PQY1Q4%Uy^^bi^!`CuJRAT&j7Weix<^tHh
zmP{0ubc|}Rwrxo%sfy<!I3nM0E|ftVm7wm-f!Ix6P4M}ko-2PV$wFVXNM1B0oxAW%
z_*-lN(`3%y6+JPEicK@Pig~pd@#J%OuPv0TlWr3R!Wn_D{1GbX5LrnXZAs!OY5<Pe
zD#7eT0}QQ2;)iJzg};nPd(Y)rZ84-$g#VCRT@*(}6bHc~Co=<IFW*!ME;>l}o7ZK6
zmq_I<QHkO_KO2zksBb`52y`>*9`<GK)aCnSEvyP42V_p)h&h_hl9$)`_$x;5p2+cn
zKv#&|E1Vf$V6HG=&?IDX%IU7Z%}s3@(rHY<{$?PYN5&aWOlTA+tf!?=j9&Vu-v|Gz
zu5%<r7Jz_Zjg^5ZH?a`P*Tb`zFZ8#rrW}xz;`<J1u@S0WlQ>=2zaf53=5wC_wM=<C
zSoIUcb`1fEO`sQCw;+WWpyz}J|NBy;L*iX`x&VrxIoLYNZ{!`jV9W}O;41UZrXbHA
zJH%J5el0ao1ZGWAmWv=0em+6v;e%r8O;Z~F*LFa_dqUk`Gzz1QO1lD3RUE}k>G3?6
zj6%=l+%^DXA7p<>oK0?w6Ej+1ia$LMnZ)1gJ7!_mMBcdl6bDa5(>^Sh-+`_kKc-E(
z<+CYNgf;natJLKy@$OIyMM-yL1NV8VJ3ONN6HGGL4y=0OMnq>3#!P6&DZyPxz!ew$
z3G6^BCxM>)I@gy(x04GKL1Qpw#F$W#L}6^kuiCR3_rwDZ1uo1^a?V;|M(ETLJ%DSy
z|MQ)5X}AAR=Q|=V)cdn>%Kc^ALf`ojFVOf-t)~<DB+n4?f6HC%27R`|uO`xJ7#nTw
zw%Xg}bTD5KOdPPms}%1y$**`JX}~oW1E&LLC##L=%82A(52XpMB`74Erk}m|@$pzQ
z2sZ9^+(;s~5ed?=&ncMZm=}O?i^{nMXT3WE-eJ2^L9;|MJ2>Uoz1R0+8+_fZ%oZ*>
zBLax6N;awHu==>>aEE+D1%JK|i1X6HE9CUtUOgM_e}R~3(Rn82&py0N4qf{?iRv^K
z#G(5dSO)Bv$EZN+ugO+7KNSLE>cFO)XA0dEKP|?NTK3Ck?oQPpCLKCix<-2tr6LNe
zKg%aixr*A7XocWZE73em@42Pbd>0uBc|d)7F$WhP7>-2GuWgpD_>YTS){VbG{@W11
z7P!`@)aZ_*ubhNs34f!37jW8_%W=V_G?d|?$W0f!OkZ(vn!Y=E-h^U)YIE;a<tupH
z^+U*_xLARLxq!B!P|C|xzKE8iZ7RG1AMoy8xpK>&>qKoFw(d^W2<@+x`XJ`8G@m52
zoU~8}7mcy4iAgUh7OSuW{IPVQ^dxKACk3}i-J<=yZp8-Wvg3)y>3eoCbev$(nroRu
zkBWVw&9KAGzE@FdlG=uWi@~3Wm=AgByIdsLA8M>o75nZUTsbyq2LA}FV&S_A9NdI3
zJ}SW}3hP>-14*_Ff2WL1{rK=8(x($zu5MF4VJS<?F$5%>;N0a2;($wRR=vUkpcqO)
zWAXIZxEq9Z%EQofU-Q79-%HKkH*0UC%%Z89Gz7R$n^vD2IB4?MAkeH>%L@uU;~XZ`
zs^E^E$&5-DIM+Hm50I`@AN4QO8`ep*k?11bU5@yYLOU5pXH1Y$QZ>eE*$sx(B|d9x
z4W&BVRHs6#hjE4L*oFIBiK~qNfTis7bk>+`{SNTQXibt7<)}lM9#<lN^u`-l%sjt@
z?Qow`{pPzXSFhU>X13eaf|k08GOiVr*fp57u8TU{_6u)7qf#S`4c2&Zj)CTL)NKyH
z7>bF))_(mAE~+k}_jmbZ%LPa>v`*pgkrctCc%&T0BaXpWxw8a5`JWUvx0QGUB?<g}
zV?R&joI9_iP^j6d$%^li_%n0+w{Bjgw$5DcH8!q?E%06tlBi_>CXY6=K`nzZ%rYR*
zxw3Yirv?(~pQSpXK*9ecoT>$Tw6B2+>b>E!b+IgL)DK?D7H6f8a4XdDO)S4pgc;*#
zdCAzXovW)Yl!_}Q*1+EWGv7vsuFOUg2HT(nzi2@f7M%w*`=(Ea1*l!yWpFU?1`w{g
zimQ-D)_T$HvPgm2^Gno3m}o+5yaj0m3m1$dP6{2G;8tGZ%o`b40^ORQTKu~$OR+9S
zV+*PcGA2F(DwXR&l(mnWIJ;F0Xv7R!$f6nOGsD|Kih<298P~v^6T#^Im@%y(BO!9Q
z<8~p`JTU7A5rN?Jw&ZR6o*e#{jt}D>bW7PYLN;LauPC{Am-=$||Bof}1F5p1%It(Y
z%U47{6h!^+pzx*H=Mpx_8h~n?EotG@pO%|iFdN?*ycNBLg1U9=Oy90*$}X_wZp9RI
zU^OaKb5PD$#8JCM=CYk)%n>DuFFA<fuEOxu4BM5lscE9(7=Fen=g4;lJZkS)*oP4T
zexCi+dmc2Ps=krZ^C?)>EQ+Xt4pJGu9M1YtcYp5pyp{)H;oG)Rl25S>5rKjIhb>q4
zaIj+0(*EJ;n^@hk(c&$H$lus^?2z`cljmaz*0y?3xX(jZwv!pBHS2!+!o$1fC+L7s
z9=%e#bxbUfTNNxub_wZKyUI2{K&y$_XEN^;4FPrvA2QEFk8OQMc3sLHUXW9@J6ckn
z#x^CHBH{?L&FMd05pIwhC(ro0TFC+%LfKo%#TY&+kib)lX0B5!&rJU^HANI}7Y$y!
zCOdh(ZDY!b(lg$>tMh2UBbCEP&!IyDP&{lDhDv>mUI;9;8f*8t*eC~q9vg-qJM63B
zp6hgXz%*NF{W+*_`lsDSr~iYd4bQX~SLu0;VFz7Za$ohUd$0)V+L4|g=a&hW@WW&+
z=70u>zD08~rC=N(1XpE+TT!aq%|A@(^GsA`PyVqk)`c7LlTQ+TL~U4Ph!#9>O&wt5
z6mZZUbamT{?lEjjix4pm2VT$cs(6hVBw@X}M7f<P)WlsQnPr5CUhCVIe8ih5zfqSY
zv8#$ic}$V_B}j5Z(gepA$01%q3mhYhlZJ`NhuyDnXxCwc!jZXStVrT|w^;azOB62D
z&PoPiV#1Bvp&Q;L{p^`|$9VMr7eEps6@${up`5jwuQ%+SC2?j4@%?-0{yla%Guz8z
z%l5$ZXLU7~y&3t}$^$wAXxzb_o@ht0;o2$Lum4+-*Z;!f18g3r)|H8hy{=hpoKnp&
z=FDEJz%v1RfsOoN7{P3R_r4TWxsVqfo4(ZAJ$a23pBB^OZSGI}h8_C_w-CvoLyJr`
zX}9l=J8=`fHeiXk1^FGdV$N2O{Y>m!V4KJAaFU#?(W|4<yUf0yw7S)CAuTp!wT$Y3
zF;9W&Gm~rM<nfhf)*AyQ<@-}s5~_4E-8I**i2&ln<A!Rjh-O4ECWd6#P*mf>e%}at
zG;tfowmPvxda+UJkV9}Oxi*xYi7R!CNl7|BAEUDGQ@t*1701KGc)2O7zP%q?W+flt
zsBh<cu^HPP;qz0K{9*VWyy6-3A~nqgD-`rI<$xXT^cDu9HK1|=Ik+*;il8_vacTT#
zppMQhx<SpZT_0YZ0;h&c&!fjI-V_M>XIA-UDXDlCu{4SGe?BW^x}e3Phqd5iJSKoR
z2o&zpx-m%SCqBOK(D`}n(LMit*n!?=0s6~)Pj;Ue@{B*q#r3=%)T|cik>G{!*i%e@
z`$X$UV{@;$U#IRvwZZaM`=+o+L(1A=mvs29^)PvErJN4X)n{m+AlAjJpJU!6+3Jf$
zdkcLD-{OD`Ofj4K^2zASU<u?gY_ERNaM<NDU~}6xjm9_3F7+H5+P-Q6Z~;}eA2(|}
zmHILcuewiW;|An6=QVgV?U}GCF8&o1h_&nEpwiDZUs{4sPycPX%iO)PGjZ>bIxFWz
zvP-NrYn?t~)GT|;k2gF9yix+Epm||AzgdVW13xp&T&gBIB3377T_tep5iEJGl|Mum
zH1=oU*)UfKKrT(EXP1l;p)rB`n=!XsJn!4js8jO~7DR=*)7DVri0&i+A4EP4A$m>0
z651R(sJ?!X&MD8c{m9!L!k-<WRwbR(I5$i1Ut0TrxnvXp3lr^!J-JcX3L|5k31M=R
z`Dg)LYc2Qw%Q*?bb?;Q>)P*;oumK?(&Gr@Njm>}tKbGfwptSgC^)3SzuToYI3kamm
z+o6YWXR05uIJo`tTJHW+8hGQ0=1%}#z<dKeTf&@H%2@bG4%Gaq7?~`!-Ns)2T{Umr
zbO0I_GiJg|Lr4v~cTTEWU$mP<mQ$*vDm>C^i8~!1C0Dd8vtR!dXC}dva*a^9u#`8@
zulbl=UM#FxqvAtNS?Hk1L;YkQxF7xpTozvejOJDSkePk4(4gNmWz;e7h{hoL#jjq|
zbn07?Q5jU$1`mMXRW7Q^t_mTm0gbuZEe&l+L_x1GV%p&Yjmk4@*Bpnx@}&3}-h$ZA
z*2ze&XVBJh4avaJF3a{e=4s;WgFHeKAMsIav<(46mig;7YQW~P3GC$dCHOOwagxLJ
z!tdBmxjA?b^C$`n+fQkKe|^+!Xf!Yc--7`f2!2SgFOY3C+>=HVJ!@S9<zk+Jg4+GP
z%@hpLMY310_%dWyGJ!4Xc0fz=#T!cSMY{ezZn!;gs^_~iw5Rn)!#UYYb+m!*ccHz4
ztco!msYfEnOUwhj|N1g5b7q4FoyLTiz4LcsRU&HEa6dkQn^n;2-@+#zgc&8|IROBl
zO6ucV<znC&9`nDAfHA_Wm$VG=S~HaAwo|7BD{Onk@brJc%tS}zh7qc}{W4TxJE+yV
zSNI%NeP>gbtpkjBTuei)DP~hIm-|Kd*?+e_HoEbCa!59CJ4Zdu;Be=5%9c`K-9Uoi
zck-kJneJta?{XH118N|(mqK@71^*nyVZSZ>mx(7?sSXvvK?ihi#(PtCB4ib@(juC}
z5$QRJn(|dUHUH~!I{r>V12oV-E5ieFl#+KLfVF7@yge}o2SQ*!$ol<l<43UhWYVYO
zuCqjrz(lVZSe<*#@hmjS^yS>*gr&O?_ENLdvz%-)ExCoKE41a9HF4#O|8JSxldk(+
zF`ll9F7XXQYmXB61~U2tgF$v@h6!9MN@+6m8jr!h?YLNxJT-HjS;iNd3GPY`v^_Fo
zc8u%VZItqLjwFE((J(y0<!U{`3hG`4w>KOciQZEU$fJ_{!~q#-@kXw*5C;~rjOAbr
zhRjc9jPxLK<8dV<Pf~;ddt3?^pr_kLAvk?y%v8enx}v*0DXrD&)h!dmJX4W$`tL?t
zS6bMvpds+=u<g}W9#~Y3(b2FJA~>PdEd^x0p^uF@)Ze^d;T!<ORaurU`PyHSV2|!N
z$4u$EKjR_@)qb##J-RXTZkW4>L|2ng+7{P7642b2@rePu!())(>Pk=1V6ug<MJ#8W
z@flP&5aXu!N3Rb3zfcuhq-wm^wcEr?!PqN>wtZJKPCk&g^Ef5v;6QY4hMK)x*M2zG
zE~kBD@76?Tt&urY(l2Y9_W$?QCvE;>oLAH8cv$Zz^nZ-)j87odjpuK87!U}cN@3z{
zQ1gE6;VLFSQ-*E+NeZzB&Jt?!iO?+C7k?=%fEKpFk>1SP%psDCA*Gh==SSM?o^>*{
zwU|=@Hrh{ymEC^P_|y8O$lr4W=QM?JI;J$2X`0(9E}Kk-l7!P6_ZA9EDV(bpfcr}~
z(s@g57G;_K{VMtMJEW{^`tWoL3HDc69PeKkMK2PkC|Mj7NRPBDgW|)|*Dd<(#v&=E
zbMvaDl%dQD!5^GOFpPtI|A1#awduPW$j2WmCgiJnY&f#a?K4*rwkelrPqvk(WIj-{
zb3jIS3nICmcAnmcaB1FUvgr)eY|wNUZe@HK#qgD33|l~799drH^dzEynZJJom(!Z5
zldOy){HJXQHlE<s32~fXHPa6V?y7OC);217Idt*{HbcK&HK#g4q?a!0_A%#2SeMk`
z*CkYLha8|6a`<UX3|nddyQ(1s!_JI2Rt-cxv|))Cr2@VR87S}J8ViJK&ygcMlY|9+
zr)aqDl(M*i=jC<$JG_ANG%GtgkaH|2*D7z&!N?zBQNp7FmM&slIJ*T~IAWq-8_A#A
zQ^fQJVfDh+F4z3dViw3X@!9;vU{<8kc?r+dYgEo~IKgjf;!4&uW|ETE5<JI`2|>BH
zDrSa|x#}(MHVBLOI3@R+(Lna*;GDo<YA^<BVJ5c#zT#8r!@<FQhBRE|K!Fx7_a=*Q
z#Cy8(_R~)B$v8#_PU~AqbUDdsU~_VF(0RgQJ>&Ek*ar&-S$9m$zfh~#L1UVV>5cvk
z7_%(x7kkiZ#psM=m#C}pAf`CqJOgVPsvC?A@nz{-h}oh#*fa>7=;!_xp=R?zLZa^L
zO|qW^SNk{QW`4{BU59(GK<tF@u}+%>(Rf0Vco>P+LpAAom<W%4RlCIeiSN*(i8xZ~
zO1wVW9tg%0oil`^O%mOU;>Rdfb!iMPQ(2Di8b8pD4LoCoiG=uT4QlkgiQ~Su_DDSy
z<s7}@L;^jzwQw+y062iWS2Ot6XnAm%u2q~p;qwW92%VGd(Lr#rVr}`Gmq0Uz8PyC4
zXcxm9GeWmy?NPtTPN>uK!VsM_*v-6#My?=m?O}`FG%50hs8jMRJSc83H|8hmgt6_>
z5jVl9!x@$*T}#W?TdA*p%Fy4Vq>cw?m442G#{R^=;0;t7?!QvmhfIqhp;lVwy<S2L
z=&@N$j&^{pMZmDA-zK>%;`Y)d<l1v~w<|1q4?GF$H1q0$kt+*+ID_meLyqentxX-@
z+?&wUo2^R3&jC4+9Y(B^^xly%&`Qxlu?g+Mh~#)K)kmlYpycf|!dXYJq24+FYnM`2
zuF<!_W*1^Tv}6Q2g#7NlK#kXBn8f5IRk#eN?#J7E-6U;CCYrN_y>^F&zt2&XY-KSF
zu@K_FepMuQAQvZ6p{SyeP~;^&5lG{fIuMar6*;?&0y%3KTR<KT3$?;A*aC;D1Fx26
z9-s_8ssA}=H(c4P?0H9~)(gp~rf&gP1M|I#xLfllT9y)7>~%WlcDa!H+Ar#PB-1Mc
zCw|U!HC*qGM5PXEPH-9{{BgHIwc8EFrk+(bc`8o}{V>o$uVd<=Z3@94o)iAfl8$=*
z2<bzG?Q<M<uWKK+5<lflc$CbL+>uH}rG3QLk&R?PR-dMO%n%F@2m`|SrXK+a+UE}#
zu&p!l0yadpC)k=QkO$P*?xxbWz^dO4zt!gyF6>8R&7ga91~yFvNF@qGGT)`vf&Qlg
z;8W8lb*maz%x#^*L0Sn!v6qqqlE!#BK=nn1bbrFfxWL1Rb8>5&zmY?%mjqZ<uCr9`
zoy$7)?bSWeG%`*)Q)}t_`qtrQnFy$9yyoz<<6;nkDdyQn0AEu&;@_eO$j!7a>c4WV
zeJyi{n>rOJk=PLN;6>YSVE19TfnU?tE(!Q+B39$=LK#)5RaRFSF}%$!E1?D<q>_if
zCFR0Di=DRS+P~d(f$L|9pQ6D3knqxJ$pv!zsTOkJLp>O<oRkcb>m8^>O6dXhrtTMV
zxCl|V{3dXnr+sBWKm)Ql9-Vs0Oe9+1QZkBpP1KE-F)~Xem?<jEp9NLcPp(c5E!}LW
zEABr<2EMH6NkE;VLW`B>mmMdop|b(lTdnVhHi#By>mr?07e}wLnc6w{9!GXLnK<gZ
zx3c4gxl@?LuQV8&UNYALV|MA}GqQpm%m|q=V5RC+$w$~d;dooo2`mZDNi`R9W?{@+
z6~*hpJ0EeKwLB12Vjc2}xOX24rDeO-TZC-YJ)8F$u8K;uU1YWlU8_tWqu9W@*;nkA
z?b{&P>XpP-A_3Zh$n!Y4h!AFp{X%weZ<xpbo2F=60Lp@8h_0)eS8Z`G?P~dCgHHNM
zFzN|T!#s*z#_xe*w3DRE%Rq1ohJ0HqV=n6BI7XQ#r_|hArqr`<Xa`+@xsT|5O}!<c
z8i}P=9O)eZH;I0gNUzS)G+)ii^kvM`51y!@>5!zGcWDJ>qeY=|^&DjojaH5xo?lk+
zQ;*y;z$o6%MN8+*<Lf|+-VOwlc8va>75eY!^N*SN&BFQP(;V%~9ym=5TRReBeMUdY
z(!zdcw-pJ;WWnoq;DcG)Zz@M4X!Y9`tu3+2v0p_R0bO{XMI*P7m+uOY&MZWg{9}E!
z3NZ?ikUsM3>hc)|8Xr6D#k0LQ$PmqhH31wq)fGylVW~L6il_o%C|Em7@Nl3J)85D>
zcmi;n<)8kGzm4NgRPRhC9V0{vKX9G3d|={1X<_@b*vOk{4<nSz*A-L$Cijv_qC_fF
zT-r58#X~HR6Q+Kqp5b{i_2TA3Fd*i1G10&X)^q)Amhs6YwFok>^`8pUujEI68legU
zjZvb*JKXE_x>@9AFfJBOM=f`wQ88QBS8Vo9??vOkabRMDx-@CYUdZf)^<}13oi|s}
z&UeP<1KrvUbQT=lVq`{Ts<@+~C(7b!o>F2GZ#hGx!5{)src14MbLqot)e18~L0L1y
zsjH*+*^maqshOUYM53M#qNf6#AV~HA000000Dj6<&1*#<1%lhm0005bH~^Bae#m^O
zm@r54&svt=l-Ls9d3v0a3nCBrQed^*YgFCJV=PvbC^+N3H==YO-YwNzE`OQke}6f;
zN&JPKz-HITZEF5Gu+Ds}8`)Wa(X`A*oxMJH8o?+^*?!pOUsNGnqY8P`wRt+H_@7ie
zvBeTWC>NFp@N)2XA7ug<i94h<rWh|yqSC@VpC-mC$@2WB4~|S<GbNSE!&H`7AN0I|
zmp{DmT3c|-lL1N#k$v@Ykx=rDSQ4f%WIjc3n^(BqRdX+Tb@Lo6U8FXuDNLxtx3eQ<
z51}2)$mJg}U3Ba2VWj^EE@m<a>y1S>HB0vkE0xHrR^G-~@AMG2J2Dv^N3Ggtau`rf
zc0)*8tUqzLSMy}XFQ0F5C>SZ(gL0b$BqV<JnQ1uHw<lZ}IJW1NZ>P;RtW0YXw`y>r
zN>Qu%C_B;nH+32hL+A-i5~6vUicj(`g>o{f;2!D`(k~v?e`APMuCk647y}UC<_H4r
zm)eeoP8tug5{Xd<-*IOPzhfM40y!b*wFI*M#@{80Hr77&zme^%^O%0|K1%++Pjb?*
z(f0UT<*<p<UqTaQ6M{^Tf^WWnK2xBi*=$)zt9VFMlNE5D1SVh^#~|#ruC5Lo3>Vw*
z;r*um25|S~A_)i+9!$|#cR`21ox{xvEb>=atHPZg^J~jN@40U_HiOM?oqQEddK=+C
zHRbV-Op<$dJoi#qmR<!YBzu%Pm{y$E;=E?edqR~uwGqfpmu56bW{YnE58qsk!cAua
zQi0k4q>+ra1#xCp4^{RHQk4ak!*r+-wY3A`;Rf*amxv${g~jjA6RB9h7IsL@YoSL6
zv4sZ$m5PrhdGL>XrkT?7j>m$b#WN_tifE(o_548M7hQ2|W+ULxPH>h_-{!EPpo#5x
z<N?cr3`%Q`haTv-h??I;*sdjZJRlAJ^3FX&4TEw~G^BSZUwwt5S&Mi_WhFgGG~j1$
zk(LZpERykALAHPx8}>8oTdW@Av9U&RmcpcQDd@2aO=N-j`eN*WgLyn+GgW7M5Ln`4
ziPKGMLfdx{6~thOO;UdF96>DP$G~sCvqMs1?=zILuL?vPC~95SATR=UFr08yeM{CO
zPV_Qr5JMLrbb7?Y&{yI-|1~;(sUI1&XBzOK;DXH{OhZoo5)S<Ki7GPxHG!;TE#-`}
zd0|#Lj`${(`1T1^KaGk|2*K)hUS)z`J1=#hCzH(o(8RrB4=z5MILE93sL`}WH&TU@
zS7D2SoJ7^ou`|<-8NCypUzvwP)T$vo=DTmlnW1LYQcg@bgIoE%yRX81N#$TWT)*6;
ze*O`b^f>#9JmA^Sgj5@%anMg$_OiaAcP`1_I6S3qaIuJ7Qt#PaO_=%kE8(K{V_9fr
zues$=h~^5E(OD^05M5$ef>O1360vI732S0a?yFzMDo(bGGpDs3R!2I6ZFLo%!W0w9
z(g!cylS7q8BD$ZFOGJf1?OXb7k|VJ3XPmgWmOpRof#CiGw&1E>7p~7LWM2Db-%MqJ
zonN1QDvl@_A{X7=k$m_6pv!kxlH@$3NVzifPYplNb@I!I(pCF_O{dq1dpSZ;Byc9n
zj?UD)N}?Ygh}<qM`6l2m&YgneD8Wex8%qObJk6IRs@$*vqOpP#h^ykflE*Khv#B=#
z0po12yi}-jNv!CO9uo%>_UUP5>ujE$Yd3hWHW;{D(5yoy;8%0qa|kS=#8qC}E0`NG
zEYH_<;Yv09bSArTM)3TKseN9~ch93KQ%DJT=AaeEGSDB~+%LTH%SU1Hyh*CU8D{xA
zuiS<4-zt?xyMh1bWNfp3Pw-+znXcT4wngY(8eaM4w4LHF;HB>;iBX*TMWan~<wYzr
zfEvO+*`+LVgRqwFg2S*lElN8hA#7}YQ_LtZm+kp%+qP}nwr$(C&u81VZQHhO-}BGp
zK1^o%(5Br<+oWmI?zQ(?ZvML`XNrji$?Co{>M?Ax)m>>kZP{VJiy%#7z$~8)yiL0Q
z4yaoeNBn1u)sf013O5;s9tY01Ssz92XbilG1tvrz51@`S_l<fm&6l@lj0NIbr8dNh
zknsje6lBlXJ9SwgdNxR?6L$m$m<3C78{ATE`xW^1$787aWS!VHK#kSjp=VFmK6aNS
z!(^p|&v_Ytynf&_US!=3s<F{>Tdv|@K--cvesabzeC|hzBbWt99CqCo^MI;E>Fwmq
ztiZ$c{bNl(z%mQRl$LQKQ8*8LkG!T8Gp;41YEmdA<a7At${DV?1abtTg^orrKu`Og
zD=y}1H!h0&YR5b{wN)yXxIzZ<Ne%!Wc4!F|*Q~KrTw65UK=G;AEr!f#z6uP>J8h)7
zc%ZQE7+XtWaoP9<_I>MvHSt=D#=f4F+4hYgY&Cg8F)PnyphA`$ab%;Z{(Ui-UR|P!
za!F~J#mDVkbFKT*352vmvl@ISd*%@^@l2bBq5g$NGno`Ut3ly*Eds{*k9sQlFhpB}
zN_L3*`FfnD6jGYG!APnZI<DK6TQi`AT5^HCpz+7GyT)pFxL=?zO;G=X+qibRLsfM8
zz@cgLM+n8AQmlc*;+SSM>g6hAD`A-!(+;`<U?&HGE;RO7W`o3K`{Km2?DTg7!$R+(
za?V#}HHk;`+q;U-q5cBv!@A<!dRZw0TIEyg6+E%>1)zsG{Tvs9h#52pXMcY4ru(0T
zeej@?g=KXYBvs=K(Z)VVlfL56tI6dDM01#5>F$I^3P2_?wk7<xOo9t8N2dk*A%IfP
zCKu1hm5!v1G270|#IbbZt+axdl%u~4cPjW*!~fi)=Nnht0@%+xl1Bw3;1ojN>PyEk
z@dq9|LjAuGxYRa)8sirLw0MyiO-{&i6dOA*IIQ2Oe$C!drP;Xo4tatB``aHOJJ2A`
z9y1dmma503>Z7KB-QOT^>(9J+@BZ~}P3GXOZ93%bIvsV!cf9RP0HXeoy)%~p$rgad
z`>wCAJt_hZy!Ms|n>acyFeGH6K!JaDd>Lh60We!(Yi`{5o(&}45P2#xuV@Kw-iVUf
zB{9<$7U=M&DUc1cA;zQ9Wg~o|^;jHind3l4TMT7b;WY?&M&pR%^*I<AChu}$#RH3k
zM&r&j)qYe3e<?0Qup;NoYkN$N>r0VW6zJC+zg)W<tlZ9a5KMKIX8~`SfyJ%{?0n=q
zraU;mNw71-mv<ROVe&s;<##fR&_vkTRQ`62{A_4bu7A(l#f~A*t>i&`cyQwtJ$+c>
zPuEdzQe2L&n<A732vKy$m{K-8*Y?-B*owAK&*ip(JVGu|Vru>EV%355!Cc`s6T^&-
z;%OMmqnPKJ4Y_Wry<SUTh&{i+Y}U6992axur87DOK1NSb%7B|yaYXeUb6*1|@}8MM
zC~M5AkGX6%XQ+UmP!m-lM%~}cj*!7xFmE%e_&yas{_gbFqJ=U=)!5SR43Pf)LOWBO
zC%TE;i<;2XVD&d=C7pP#lsSGVy?zXr??Szw1_+-s^yJeM{P?7^d`NU9%~m}L4w15D
zupBcm>nqm2ok?{CXGDrq5t_a3pFr?&Z{XKRq{lDi^---H_lwWnC>&B8dj4yQ?QkJD
z%cWNs@fb1Hf!;~Ezj}>q2t6XTH50@mb481c=qOrC$~^%^$Q)LUTHw?_QNH-x5kfp$
z-Vpg<A#Z6OI;esVWo~_`<7ZB`{&0WgXpAZ6E7OfKVs+qF<`9;7N#*NMU2-fCF-}C>
z%KJsdr6<h7{MMh&`1Nh3c<LcT;Q~#K#-eoT#roZnMl#*eO$_{+l$Go^RWun&Jdg(M
zbf(5)r(8dA{DA=6Zh#blK-dFm{9FH3$m+^#hujz*CU3Sun>i1l8-uf=R$ZJ?Tk}c~
zllw4qx-#KMWAuuGTi%Re!Jsd$V;im41{8#PFR1pzPGJnGkE;qMUyHd@J9_@$t+^ex
zsjmGJzJ1#%Qo9%8X3uv&;0J9mRJI7G(0)u3Apmb#nB@aWPtm{)YiH4);wU-8J`C)J
zD#hQIoQKaY=(FR6VOmn#9XCtyJY$mlr(&t)nP(hkQL(5BAV31R=Y7H~CNFOGlkBUC
z0?lp7(Gq{9e9&8fx#<i_=tvs1<fwTrA}r__#WqV?87%GN`|QKa<_@ihG;!Ru??Bfm
z8a1<1Kt??HDig-s*{g)}pG3OQjFpNz$%x=I-$_eFxHV5p7xv_^g7G1kU<&WO3*gZ~
zvF2RgcSo_)mk8L*#~5EgzN77Xd6rfE!HnFAJ71lv4j_n5Hi+b^5;sIqIOh4*zNDAL
z2xveFW&mCAushK`8`=<wp3@Cpq;kM$nVkus@G26RCYrMA<RzM9UVCz!AdmFiJv)+l
zFZK+6#W(aNLfL6zB+&i%cp8rLmr&4boq#x+NFjqipLy0K6m32+J~932w6Gm$<i*Tn
z(xNy!W}SGFb-v6DsLWASgAg1u7BNAEAfgif9m+-PkG=&hkbP-b9s6|jt|PuBQ3do(
ziPPy?8X>@A*PP@UNE?CF$_H3KD65@`gv>=`&ZwVZoO+m(4|LNX4)O*n2$*arXwS~Y
zS3=b_d4tF-qwNVwH#g|c1vKNm@hmYghwncnwv{^nV%-($g}>97J<Ry>3-JR=26Y_A
zEBW<(5mS-_P{MT9Dc@+VJWG-FmZQ+PxSkeq1LpVbsqlswWHlu&?)o69b3@~6hv_HA
z$6#1#7xfG!7?W<hEP`4obJ{>Fqc+^!42*qp0Qi(@sQ#F$z5W%gjeJ-r1~^*u54*eu
z*F}2UBiih{5@ia)(Xp?Zyi{&#a0#^{%}J~Gcv=Rgz#Ne7<<pPkmdhuq!Qth6T0T)L
z5Dr(<u;<T-$?f_&{+fLiqg}|Sg^s_mi&S)!(j;&s=PeeqVk3lD3(y*+@E4&Ch%dhk
zm-V^<zo!z}wwj+kPm||JMM@!!@|K6)^83j&!QJ!VgtRf=3NW|_U^ZNzSQZY1>yAm+
zI5uNawU%Bq!QcHe+@Gaqpv%_Xwy^ZUGbjJltgU)`D=}_Z@>V&P`de<+)(pgTiMK(&
zqZ1{`kro--_v$bh%v+XMs50s(ZNN@!HV4Zpw*6TNv9XPoTb6H!Kg%3*t1qVT2|`{c
z#Rj6uB7Ug6qK>d7R<H&M$dM3*ZuZi?zgN52*<>i3mYc63*3lgSid1NVMrW&DJ2P8^
z#zueLV+6*`;Ynn|&gy90)E#G^9$hUBoxdIF8I8SPC26fI!{Yzn|LOmu#%|6(26-}@
zgXE@@|3A$Ce+c5Gdn*)f!$zRp1(jpNmdj5?i^i=jTft*Nke_1g{dZ*F{>mihT-Qqi
z=vWXiUb=emoc<3=S~!;|01-zc5Hu`KCVZ<`j1e&l4#*kBv|ksTB(qDH89ZR=?erQU
zY{0u&%yoEcc0%C~YT3MQ6KBO+2GexyVa~UT#O9Lp+_RrrKuQZ;3va^2on~g_70B)n
z(P2kJsgShvKM^PX?4R-{wd$XASn*HR#it;S%m9YMx(HD1LSP`rWgzXEZrhi*dJ{j{
zl!lhVF^9;pC&OFQ6Orq~*0YS0C#q;89|&3xV`EztjXRd}f`GPU^aJ&{x*v6<b;Ldb
z3YvQ`GrlUJ<eKr<H8G7YQ)=Wmo1AF%a!b2}MwPU_{(1(C(F5UxV*-)aquG*7hrlHx
zc?_4cRfZFo>^p%6nfg4j$lEhFWO3h|6MrdvwB*gR@)i0j^mDtx@5`xsfuAXR`-u<1
z_Fuf)3Nw6kdSGNTIEExkpHpI?#apiQM{HU~&0O2@w+RNEP8fkWV1@$52j)@3IJR&A
zOxF@$9D>nm7=y$=9hS+AHPWMV<%_-mmyXHc(2ut?)!N86>stgyymvx@!RE!GSn$*M
zTWwOO2=;=d9gqf;kR`3fr_L;{+d%q9xRlYjv@Q}<9p|G0{?urSMrADL70J3LGYUXF
z)}Qh226^GRs{A_gv#Qs0ebQ=?W0R&h7uaCScUV+xl2Xgc<BM(a@9b=XeDEeHTtS8@
z0?G<;vejYd+gL5V$%d6`i-rn}4*bN;%Nq6WHQk39K$~{nJ|Qo8YYT~O0ttyv-pPk-
zzDDYt{OE_aN_SUifGGQp7_AV|ZE*7$q@);LwfdgVc5*#4Cv~Mw7KQW?P_(fE1eo{v
zE(OsgA|prMzCoa!@-#zwKv5uN#BWz^CN@3z23=kz<1qB~B6wkHxmOV3l4LZXI-;(+
zV?KcXJqrJ5i+#i`hA#L3rGD_0UcsG3=$MXSbAQJ^C)sZQ3AQ=m!K9(~R9Ilx0|>iC
zWg+;*zNrt0+PNeA-e81<7~3}1U*$4-8o`|p^TAguHd<3o2^$HrrhNoM7ZN8at?nfB
zdQJ@;zc8E0U1$!IKv$$ujE4}=7QG;PgKB3i{uXsw@lh{q?AFhV1Y!>npxM`XU<Ps0
zXf%ibJ`a*Rmd}b$5M_WJf(ciqp(T#|rCru<TF_4vreeID%1t+FAM_<O22giE3{6I!
zk&d9AAZr-OUZ?BtiZD+V2GnDFq9!h7Rv!fliB`kx_SM25n>ADg#XQ%Z>JC<0zvz4>
z6trajVQh5@KG#d4EA>!^Kc7HU1&r&I#Uq`&!vR5wSwFth!IS!i91SSkabF~RlS}Go
z57X0kGQ16q@P!F(x>_g0cDaegB2*_mN2{ICp~!L)#=~*dDzMsk)ukQuD(A<)%)f6e
zWJ^vC<$v2UwW!vnCm#bkH5t|TsL^Nv6>VIJr<8RWAE5j5sr2)ydOcR6&$pb1BaG%>
z1j!0+6c@s_Nj>n7va^U1YV4Y!=#Ti9>k1tI5ey)4;+SIQB02UK>HrJz$kMfhvQsNN
zaD@4fmPsnA-6)*u!61IZd$qWiep|k*k}`Ju^C3%g8o-*(u{>pJV)WMtF5ze*7Vjl~
z!US?`6OeVR6{?VHz}{u`<qiG`kJklM+AQj%D^8HfWGn5iehgoSiu%Q}Gwp$hxdI92
zCf0~#<Rkk9tpOWLC`ohP{J?Ph-lt0{iO4!cChfeh<wgXkj1lnL4(bm4{bPD&(mhFX
zA*bkTLSaU7nOy{Dpkbr0VO1YWtlij~WDAjg&a)9syC?F?K~sFqP%LI?8~4er(6brt
z`IW4Cch}!>iFgwisBf6cDR@6u85YZ>4oUo@ASSRdWb$LT(*%DYRo;0M4?=Ot&H4wQ
z8fntH%2XP{G)U2D?tz7Jxs0?j8Zj9qmb@HnQb^=h3VU*NVIcJ8bpBd2k=YmcU$GF6
zFLb#E*s%djFN%HFvD62w05wvv)M4yf>n<CQ1=f+RXF#KIPdoUdjlU<c?`i3`;y%Mn
zj2j%twEdO<7;&E+kWCCOZft6y^1q5KN}AivHiST-M~|?d^B<@C?s6(-7vHKk47%;*
z-q+mZT1OU1>CPx{r=#8%^I{APAS__#F+~1UUSNhI$6)%eeYlEDACx%B_H*Y{_+wMe
zJb<??J-JNsb)iN@Hl(JCr8DdY&NtztWAqg+rLo~1^rg`387|DK#4M1|a&-h^Ay_5P
zTAX%(WH;RzjjbVZh(E<`rNykrs}FpzZ3|%vA|G(M-$vMcQt!iV%!lf#iBeU(ppcVB
zvUk7)9KXrr`RViyO{@#!h204)*(5lmM8zMzd<Hb@(_bDGg*DbP$~?OcZ!HJDpo{f;
z@TN%jflvN$X3Iz;1k<EhzSb8TXp+`T_U3eRXsovjvWu7f7soUMkReW=4?h>C$q61l
zPJ~vQ+T8C@C}mgkSV@?5HyXi?sy~00Ek;W1q-f{m=oHq`FcgsZGnknO!p=#lCiV&v
zXJ51W#T>2~I2DvG(PD-ltA&v`teML-i4<QmEQ=3?u5w-@$MyCACDZX(r>S;_k1B_q
zo@9-)k^%M%7Bb0rq7hg&+b@UDvRew4nEnYJaj9c&c!6G@=R3vV+l3x_+?H^~`=k{d
zPTYJV>J2G|xk+pAtHo$dURsv#U_EESsvR&~$x9WHnQ@x8WeHwkW*3ZVb8l!kGmI~3
zZ5KLTL{~+Y99m~Y^DHaHJZa&I6c-mR-r2IH=*Dzx)+NgArZ2Lf=$@E?jHC_fmXUU4
zGM;DeLFu>s1h65j&bm{<3qMnGOs>@aQB%JIDMQGG;dc;u|2cy}YNDXV=#Xs52+49r
zz*_u)e;%k@b+zmULP|SDunEcv?d^|6%hV{aaE5byWGuKY4C4Up>f-=oSfm;wzvkU>
zg+Q&FQkWD7Bse+?XtdBg^j|P1TZQe-==@H2yn(s0`jN**Kh?oG0z8;(KSU@&tQb}J
z9XP|EKGhWnHBs!hm{EeMaGb6>ul*v9fBEuhy7e&UzlC+?e-I9o{{?ev)cF0y7<8Nq
zo*aa-&D8n!_*;sUO`>mAv?}qD1I7`v$|CgEhfh~ptMEc6%^mxIdDzS<f=4{L4qpcn
z&TPX{LtidYO1=vm<ON6%noi%)LG1O?EH}8oDVfyu0D<S^9EC~_T4Q<xi!b-$={c|D
zao|zf{&^GUh1C4j;a{}s6UVwZN)Kk+phdwrcM#qy9Qqi=0=|0b;`C|^h2--xJm2hT
zee$8OIb~${IMLvosY($5xUT>(VJ>rkH9KDvR!3lL5#BNWkKVbRr-JLJ7=Ilmo(nXU
zHv^3`@DA$?wTf1n6p1-fZBXWlsD`QWo;hs8xL7gL94TrCTywPPt1@9e3(pnd6739U
zK7v8xMi!-80BSPE<58uEA4B?L1KTgeGo+f60quhM_okJR2<y<214P0$0+@wU01g2E
z!9Cc$9~jsY(w(7WU>tpAY2qyI`#~%qJl%ygB2++x)^R|lMncEsU{KA7;+hYBbIJp&
z2+49J3TFsBopK>u0yum@4Q0V3#SnU^Yc6s!?eCSqBfo_;v>4Gd1P}-K-cNGF+zj19
z9zs;3w4f~5L~lGY8rh#mT4(j71k86?^&4a&5O|13x7qmM0h;2|?M+CI-ayeiqAE2%
z?I)wK8}yZmvd?tUgawQl<OD*w`h*goAI4d}01u26fCIoelrzKU0fB=hCP}pb9X7#!
zPc9rU_r_$t!A_R79)9T~-l=JE7>=kfwXdsP)FJVd9zlpd36m>l&v!`gvtM4H)q6!|
z)6m!Z>}{5hGzP9R8nk3w26~*P&-YzKU>lR6m||=c!F}Y(pNgjPUxX@i_&y96`L)OC
zfO{6;YB(^IK(Ar#iUGA8C&==Ygz@C|n<k(4k<46(>n1epP=%nX9QP35DrdC<ccQ(g
z2UulcL7sElWjf>i3|(Yr;tTOQ%*~)RG3HwOqX!(b2%ZU2qv=1<@Gm>-F;97kT8W}H
z+7$K^aUct=UN$Hve9_lQg-Ge<{=n6g_5EB-<<$~JRb9zm!<rwMiM`HbP@NEjRK!ts
z>Da<HgiFhIy22E6^xRyVX`7gy&58V!YvG!Kth?i0!q)~$3<i8qz|=ZiGf|ZY&x6QD
z(-%L=$*GoA)Q6B-oR8$Y1C>j9o+`&r7u$7Vi%a$~G-c8^DJv8Hlgjl>C1sQH1YCPG
z!mM^R#)0ahTH{qWr;%w>r;+2vF@UMOWrj2o>NxOo(~ZETD)82C-6y^+&UNWKZAEtA
zm>*hKbLqzqUJ$o%%_0bGhM*paxfndEVh$JEswZwOad4Woaq6I1uWmKuXu@<j{NVnL
z1>AP*tLHjkdbwW-35TLY@1`fH0-t2?_`wn{VTU+a13YKnbAOq-4wCGce_2<P6E@b(
ze~7%%-oU^qrsK+FAnsMa7!_p7#35A}o~m~DM;Cdovir@Y5G3o?FBvn;1uUU2=EM`e
z3Tw29^?@Zv`1gcZpzpEA;3Aya-J(c;pvr!6<SbNPvktJzZ?7(zjt&&ZJPVH8t>cQs
z9;VBxD-{lDNxBh}w6j?p@&96M=P`^r7cdy13dmhL|LFq~BklY5dkcZB@$I3daq|}|
zM)UvI{{zT+ck!vW$J#mwK$d1s5fTF=UDWS|$L8Hyw#k=WOBHGj82|g10W(~Mrwn8O
zX4~+N<q5@+jCJ+`VdsD+$5M8Nnv!1j(*;?43+zD0%5)w41-^#AxE?TB;t+S5bj|ie
zN-x6GGR74K5w5eU2sDcJG~@v1ki-RY_!}YMr$JYOp93MTsWeW;?U-<2_J&8bVhc5&
zrqbD>BYTEVY}SS@^E)c@N#2cyaQibTDUZbua7^%!j3i9xt6oeieo>UaJwkoPiVq2J
zGTeVH?Gh|D(X0NL2t7#C%oubs62)0o;13dgNa|hn@0gJSbo{z<)(lpW;$SwsSpNr>
zE>59z8{Rpa$ooYB?0{faG%}cez;8tWx<?Cl+_3#Tt6>*cgOxmM548=PX3?tLGHzfS
zYFIpv5HW%w?@*oW?uxqLKlX`R{F#xdENZW?>p1@L*4LX1W0Ka<Lv!^!^|&e5U%<av
ze6<k_Z8SnA$?JAMIMx&iX65gY#AbT8!G##*)mI*kQzP{mj;LX;2HeEOaym?ci9qAS
zo=S5yK%)+TUQ-=^MMI^Q(C1+w>KaV8(;Iy`r`K-8LZUm>csUE04eEHtGFlEPaI?<n
z{P;vD{nBVFEp2~?mM`D>5Gv7HJ8PhJyhznX@Srb|>CD2n)tx|kR+HYjWxX{e_x(IX
zZVCwLY<aOZ$i@xrytf^$y<>&-EpZY`p+2~zs2%0}5au-l(AnlA88rVTY{3w`Ev*;!
zbrElT815oTL9or==<;LmdkWyhS-Yr%O|wET3Z$KD26Ya0j-NDK`hTPD5n9vn+>6@I
z9Nr-yDteDK35zEa-1BVD9K<_75<tShKNsu|pgH!*;Au%Gxggs<{k77I)pn<Dy?~%W
zyweO?Mt_G`NW9zy4+4`8k`>eN^0{aN^Xe;0WfGZesaYqwmQ#2f{ram=M2cw#l>IO>
zS&>r6tBy@2^Jx!kCY>ayjUvwKMa#v?TiFR%;?UVz0FrI3roYKn+SkEusUY_0KKDY{
z`|yjrx*W3@lv+KuqpP8Kv&HXQXM$b$6L5?ww0>BCfM*%Rjtuy?=eKs7Bp%hzT(AS4
zZYxb8LUT3RpB5#GjoK*&F{w~uYc;+F(uURDSP`mU_`M`LG5Sp?^Jy-c_G;AYy7c+b
zUH+<QEY>+0a<r9nZIJ~*>MXYh5^<<dQ*dvE0$CN<y$BDWg+0^Uw&H_9!Uz14-0M|G
zv}QSHQ6hA;nL`UZb!xzsT2QC--4wHU?P=pgF5E8~ot@wEOLycmN>{PUHgIKxl*6NR
zA(c`MZtZnn%gt7H6<Xrue%!mb`oKe;&Ys6$csy0mrd*MDmbJy}?r1vLFB-)6u22)v
zR`M$+2BL=3Hu#%i;f0?yb!rJR2^Ha(uDS3gD|1AVgJlf-j$5WrhYAa>2lj(JF{ure
z!%yREE3-_wyL`d<b&EKwPe7a3MsrLfoI8hqs^KM(abKUrlPxx4H+CxZ<|tksvHrGr
zAw&ps@~u2GDuJf)Pt>`65WQQkCZhWR<kmHnztW1!DHV+QXzrm*&D5AWox-|7Nw|>3
zNq}c*7(Lhhy`|+nKiuuFR;n@oLY3W-GEYnhZLT+qS-q)hHsl|uL=2w0ht8z8KZu#X
z(*Q?yeI%)KbSy5V%-yS?buR^k@RY8Lz)oV$x*M*CwN0GoG;}rOd_|cUv4<(s!y&l~
zx)}iG{+0*)*!#KfbAopr&!4G?fx1h?&LRR#lO{)=<*Ea_k48tz{9-7gd8({?^-~AX
z!CCj5S&>^{*$6Bq@Xxivd!piAe4C3kYf%fWBtJ^dRy%(;%QVyN2Thvm5A-ZpAp8E2
z1cVZJ@a5a$iwg}#F3-V4N$>1w2NAfv;CHXs2w7{MB}RjaCqI@Zj)u_^M(t_vTDkwi
zUH0jB&-4o#>R29OQMT5ITsw|@rByRMz9hyslO*D_?QL>icxuOQ){ITa9E^YG<wYmq
z+G_ySIp}!T`13{7!ffw8a~}j+G)P~!);|3_`_*ee@$Y2i8~PropMc{j*mQC;S$hEo
zrh4Fn8|*&-mxAqg+NZ1={8A<LzGYKFiB|pdJ5U`{)RC4laS<W6$fSjU!|Uci$*{h{
z^E~4v^c)pmZPp*x?r$4N1lC!YObI(HLN6{3)-_JtURcHFzy)9NF#&vE!(Myv9uCC?
zHv((Q<y)!6+qRpg_IOO4&6VR=CK*+1(`i=UH9X3Q&-0?WdY_|Su(vIvp2{FMw1hfV
ziaD8NYjj6!v>QFz)f%=BNMpIv_FaTUv5Pgj2dl6s9mUXu*n;><9?SSzt=v2s9QxD>
z$WEkmN5p<46q(^%-YAT7dkNt$R*<NkW_te(mN7i8A9Nz<U&%ZQRjKWKN+M=a!+seV
z?8p9s8pmUREzH1Ep0=A!ehH)+96Qyz{<>6(kzSO<v5cM-_zA`R=0ZM-$gSx3azc){
zz=JSywv3zTd@CE=houuFUM&KeJGvoCNCw1Lnpzj5&kD)42<J1Lq>$lN??afqU=Qlr
zkX4#}Zgcw%&3l)c6(9*&?fUc~DuJy4x*)$l)hq|S3M+EX4IA0%sb*$>%!^U`s`Ae#
zY$~X?@{bN&0nUuNG*dDu?alY1Pc?KX#0ypHkMUcPqb|mm0lu9bMdWZ}6FlT2F?oqK
zYP`oil`sL1+0~OE0r<cSXNrDQnl{K>ESKeO<=Z>6!H?S?>zjD66D#alhaRNY43s(O
zc|l*>WamQIFJ!fK{-(m%)%)6HzbGoGdURaF*>Z%iwM=oxQ$z_PIuc2>G^*!)V2C+0
zW{6y{Jy*)_e=Reiq2JMtPu@SZ{gcuTEe!5+&l~LbKnNr;&p+Ua$Jv>0ev2~x`6iDW
zn=6eW(%KNU)(nSUy}t@KmIfI|Y?nc0vz=E`<Ubl#tG%Uls2nXI8FOL?)`f1&ry~H4
z*NB`DmSgGNfz=X6q_&wz;?$h+>g?3sbn``AlO|N(yCEEZSFR}GMm<BMt#%zP{<$Pt
zoI$WN=<pmTb*+cDm%UOJH56*~)~zGWC|=k{T{6g>2>l%gjJl6S4wdcvcN#mN^{h*N
z-CbYKANC{(Y~pTml;IdCI~1og6GfUO^!&PhmZx3-m-jT{i^v1?pHP;?z1s5bdST}_
zg(TkqFwg{MlN9w+jNzuOi$Z8Eba&SD!pqojVeir7p^<_(7xA_dn-*1ioCmv#1y<8u
zz=nXm=cyFf{hB$*m+lo0%%4g$kTH7+f(x0zclPDJ&P7&&2ku05URb7zH_!Dtm3EDu
z$OCN`RcS4=pcTvJwACe&C_=i{zsznNct3}UNZ@l~y%o%@^W@e;rldbV5#S!)CD5MM
z^o4Mlp2lYGuZI`{P$;qi`9pE-Ew8{tqX@D+!aNw@1H~+fPX`tf+L==(He0we)g4Md
zD=(rju{F;@yrFO=RhrzwIT}!%&dTT;_vJfuI%>Or)P#g6<>LH#U%wWl9_iMzh1orz
zuQj0(Vo&&ll_1rZ88`+z$mSh$FKts88Xr`t;(EUn<UF1mk!jsVc#4rXSz3Z>XYm<P
zNVcFwx9Xec{w$gha1L}^DjlqloDAEEMcOd*5EnDp{8)(BK-3rA!@och6&+r@9y%uk
z-X3B{OccQa=+97YbXobCvy6H@8U&Z)sQaeeCkYFub`$1;d-YH!18-7=Fb7X&W<llA
zgx8xAun4z}Y>>D@l3bapqu=<`tf(K$g$k42{zHS*_)30%j$}f`vQ%-@J1VEyjjXMf
zH|X*T5cl${nz;H!mT=xzJV>1533(u`E9Q6L3xHt6GgrivmJ^-(FV?l>-APK8c5_c!
z+Sr7dBu?WKdO=6rr|&X6qp1a~_j^XAy|}N}Y;K)}2{1cK4YQG>0NQ<Wq?q+q*>LA2
zcOL38j^n#QGTd3rLE7%u`o*=)akz|rg+Z6CcL7@0Spek1xE4;wiPCk~kuD#y9OSAT
z5b8!iG}w3-eq#ROFS}4uaB&0rmfDw*-ADl-Ul0kxDdo*(_|X6sX^x<HL}$rbXhWmM
zt0t_j%kxLMy?v$d03x&W#5NzXP3UaCzyq)bR%~pYD&4BpW)+#fS;Ok5A8QQfavl5b
zz>Ta>9#5^n=ffNR?5vq((K#@0TpHl@^?2dVDfEB0p<6)r<8FIh`2Oe)kA8q0Y&;tA
zWu1ZQJ=Y;*eK6;3AMz{vQ5jq#Jl2a<2{nN37q8x58mRTHQp~dqH2icrgQy`F*ioWy
zRCA>uaYBSBH|Fnj=2@9_X}&Bnt0_)(JsPCp_oBZAUAH;ZO?ArJA;w4uB)?9V8HP|d
z(Deks<!VBjrMv?qpg<JHz;fmd+OHod`sI}fDF`@6jK9<%D@KF>gO&SYWZ-0=hMqvy
zwTUn91!7I&0gW<T`8-)nEZxrtU6kfW)SHxB=5g%TM^OMfXEOcKh;5Pq8_b_X+r)kn
z`%CqY8KSFR43@}bY4&+A%V(uZZM%C?dtz75&{B1^ZMC8vIJG0WQU&PaPj`G$=y5um
zBB8fGLtj3f1y{^@FQa!Zic)3<Qi=(!QA(emUGrcZ?=os$02CtP$P}7P+iyqfk6$ZQ
z3yh4*NIXqQtzAK;C6c57#yWe<v40e~RX-Y7jZhR-2!zg^qAJegYB}Feq~XnM?~dj)
zeRoxXK#pMl7S>`jocc_wgG@P{*uZ|EQvOd^XCF}mGvgt4C}lH?Yh!)j?R!L-M;{)q
zmh(x-u(+^Gimf|?j(=Wq{+I7wdCH^rtXpt2RO3uc2Wgc=+~Vwo<PtbgW-}YEmTo`Z
z<)<$&+03emw2ae!MQ5W^{MjdU3GV*u*7k8<k=q}YXKupU?ZM&8eKw)gPLuwpxV3cL
z9E(O{z5sp&h;(72?OWfIXUc~rh}8iddL;M4_jfY0l-_?am(n(${nb-n%rXW%{lr7&
z=ZLZ<=gDdpaSu`g*s>%%sG4@Dp`1d;K9=UI_f19BsIdO0RDK~X_%?`TqB_LvCr32+
z1nGL0=}rvS5!t=X)mEbk8;ZZpkCH@SmDp+Wt@8QWxbMe3&?=%;g`pTx(6o`Pp+LUE
zV>Y?eFm4EtkaA6i7U22aCV~L&ErgNh4xD29j7j{xz2Cia+*iwE(G9@E;UEV#i!}~c
z9jWC@AP7Wpe>1n@bo$EW3Z0%4I^T~YK52_DTmXc{506S-iB|0?mCm-ljctEC41Fid
zJ+t{05ZT`;^1f3QpE>;th#el3yb><kP$-^keH+;Pxa;{$mbzv0$Rn`5lXi|gZ$Kn{
zuyU(nc4w*O)?Mh7${-2F@JQI&aXSMPb45=tiQFD1kzRD9mM#FpqYN$dtN+&y2uS|R
zm@qmnb0b!>r(8PU{xP=w^)U3`I}kXKk5n(WbLNNlGO<S<`;RN&e-vo<iV0*555X8l
z=Kd0=@~fO;&d)71mNGPDK9}`ykV@Pef`t5iRhyrd(FjHd8u|&<{=IMC7mAV2R4u%a
zs|VP~JbJY*x!&-YrR(Z<$k9jO^Lj7I)C-2ObGI{i<~YD6k2CsYf2XHNUhY`Cnpa$r
zG{zglnh`Nf8i-u_aMHEro0$P3y1dv2e(8%YhxcXIaG2v3aKy*rh7jLU3|cTJFF}B4
zEOq-nTf5B$i(8ObxNXU#TrAXR8b7(o#d=@s!GABF+2l>1y3a4EqO~p}SS+nZV^{%T
zh~>Zbzg?wAx&0@+h*`g&_Cki$*eu|077PsbJ^%{_FL_C{-G6!)CAYa)OsvfN{QkYG
zviWKZ9O5|icUrRenN{6P#MbAV$Wi&>&H@b2zHktqd2l1Rx|xc^Lbnz08@mj)$AFnO
zxhO_W;{JlE%|+!<o_()1yM{{1>!gkf{K8#DrtKDbbOY*|$|jIpsbI4&Etl)fnfu9M
zG^lT!hIPqnx+OmvXgu-rbSU(+<ezg)j;12=qW92@#UUaB3@q!~>aM4jgu+>l!21rb
z9udRQ-h3m!y2yd=bPyQ~U%XOMqB;NkA^S|pR>ZJI$bwT%ob^x%@(IaZcU=WjZ*BoX
zJ_1Hd_}qliazZwSe+-m;8p%ybakp>TGzHu0G}9bkfM3VeI>z%MiSA_u=I;P$8IouO
zysaF81@3^Lq=uC&agVKfnwT|nABFo+;zMi2zBw?5Tv1XXAq?%I^N1b*00+YOF(?Ij
znJb(do?2LQEbY-mA>9R6w=Bs#(gdx=eXIr>-5#M(0ioqjQz>U^1v?9@x)Z1an&AFU
zRDMgZXMv%Q$o!D59^#rr4gjaYeKfUc<|#)<7b5cSGE%v}5;>untzh9y`iy}0BYQa6
ztM>wfDMWvHZqK5p?b|n8EC@<=8ScKNPnN6t7x_RX+g35sN6lNTysC}8m~ysy+O*Tp
zT~l_PnSR>h-3Tg>(;p;FD|2%PNVAV;wWc4mwSR{KufII}^re9~Cus?g%3ncv1*%p%
z;Z<Yy$kJS2!veL8B-D(^B|kD~^M*~3ZGoo)-W36<$c)A8zi=x#G*#}j2HiRHSN7Me
zi-<I;LZN*BRMfv`JTq(wJu!c9(qaUwu^>aZz+heUp<1IoY0$*D&5RS*Z-#6>_n-J`
z2<wvbW>GN4^y!JU==O<Bt;bkZg+)7NRUEgI^rtc>0S87~UwiLhC@Y}O7y+1!|9<O@
zb8hbd2N6GA{_UkiHkfl#b;+xtR+Dnti-K8P9Q8Kk#$-P1iW)z`hzQMar~m<e3e%Gj
zzqt145Gr0yU;Y3Sv;uUl1SAhv4E-z)+@yg`u9_@=BL*544)3L8?t*Is9OXr)O$mP!
zZK{pMVBG~=_#BXE1K;<kn4FH!i|?r2o0>-`!J`$HbR{fX=QLne5sF`_!U{2B*hk3=
zG>W)!Wk%+~Ac}4svO%!hFc~a_sh~eAZLgB>+>n7cUqUW~)P$(1LrmwjkCH|?p*5y}
zg^H>{?4L60(XgQFmZX8jiBbZpN{54QpqZW31AP#eT0I0R<ahDw1sZlE4YJY5SCr`K
zyEuXEM>3ij5FPkn>%VeSydW%#2!l|D$^9W4+;48p2=|Q1woh1ys?s`A!%R=4r_Cfi
zJbib<#_8<@cdkmNxANV6*}k+IsoC?znik9+I-Mn<pPiuCLPXIq)h@#2tv0=s2@`ps
zJV=0X`@;7JCgzF<aTh%SX@ZpCTH?vHabdBBepBx6=(w6$@-O*c`l;j*xcG-B1w`=`
zuZ0i}>&!<}xSu4J!uFOHF|Ca$65ofB+UCE&mw2DCN+_d3K4;eJD9|RpnrA1-<w^4d
zT*buiAC#n-Ib|0}up_g>eDxKP`b$Jnc`e#YR5#`|g{Mwc`piSX8hsA#BYw3!3_*Hn
zN^zV7M6Ab)UHyhM(n^ezj3~fk4;zL^E_O8~A!-<fD6Rhzg$-0)awZ8wj|k)p%{k2m
z`koW^x^DT?ky$G=)g#uNH<&hOK*itnXJq+F6G~i{0}p$_NF}pFh?z9$Zaa;%PI{tt
zL*E8Q?c#n2WA4^)BG~(P-J5ag77txe1R&=GKHJCIHQw`#JsXP*KnY;qctVvWt^vd&
zQ8aSuGU%dJgiU7UsS%kh*0T<oJ<HoF;aCx_FgInk<BM(#7-~i$?7(~f8Wrg@{v*B%
zT6O-%w-LYk7l^RZ73y&;97oHg-%_8PC!ermNym90f*g&&1GO<#vI6Wq8}&!)WY0=*
zhy)VB=&g`C?L|-H%{x^4*8|I3vqkC00ihsIks5;Go`U0(+#r->#ujY}7gvxGDp?kv
zov6%LGKkr`Mu5p~rX5AF@kyaE7hhuTuaiqJ*f>>)qI7@}1%|IFl)DoGB0W7&u32m9
zF57F#v9?qR!?nDtns5eE)C1)<+plZx+}cMl-<Rr)P!L<H&8Frr7*svNHnuHlUn9>Y
zUS^>M6ay8m=BkE{s^X+hk?pFwO$p=a-{j9B6Sl>r$G9b}Z=1`17fZX17(z$(&dYK6
zV(DvPzBL!4O&RaDh+XAcnSnwFc+;_;&S}Ocjg3e#{SKLAVK=u91T{4hmZk0w*jv&l
z_hm~GCoPeMFz++wV%>M3YOgUJ*yO$=id0(7Ri4W`j^cO!j5sI6bj05--;stxD%^+q
zg-W|hI&H==&wE+Sekr2T6W_z}Autjc`jLjRugDs~t-hn8-)bYgNv2)goY8m6g#F}l
zd5oq9<0c>6N=xIm93WJKdq2aOgQ)Jg*UT$H6r?>SOX7RAef}smDmp~k930G_%S3x2
z6v(Ur0{y*(=z!or2@~q8fe&BjCK*;9a9%TOi6)8g!gbjIs2jLD?Biqq!^XtB7iWcv
z6{<u5GXe<W`+c$ye29Zb_@r%bd9h6iR!ZKrDH`^&9%D1E(B1R$7~hE;?*KXw-2lo@
zFw;4P^?4iP^%J&r7;;Ja^5kb)Pts_T)?3)eF=k=~dPKmwMN5GyCGDQ-_EhaYW>K-l
z<&ycONktsN6q1d35~6~Ol#foLAlW}wn0FbZ;-m_v1&!wCZ;#LVVU=0QJ0zspt>^kI
z{_(A1iSIgpCK|f~=OFJ-neDH#MYZQFj-!S7>f=oOkGumxKHO$+qyp^#mo3Gns>|ay
zfyXjDm&GM>1t46XB_o!_N>6gk9DsA4a}k+bM6sJC5U|GpGFcivYFYWLnrIz;y8!Nn
zYM$ut%TI<o*k9(J%p*$?QOsG{x$L$k==ZTgRxP#HX>NZM^!a$w53vj9brV_<bfH`<
zotW4}7dhtqGeQ<A2dEr<j!Ec4RQtk$17c|9>$J(H|4O7rv?K*}n~U)5i}RiMIA=8a
zLDqW*V&o^&__&}($80`?`%jpYyInr;*G(OeJ+G#g-)mQcVh0w_!SgWcE|Y#1(Jupp
zC>yI0C9F3vhiJ8&t?q=DtO4iM^)(ffIzHfq3usdP(IhrxulIajro!EFOQpbt>K>1)
zH(=+w|3^0&#m@=?I{Ai4W!}`OzM2&0&l2e;7VoK5*5z|-ChtnKSn8YvHNOXcaI-WU
zuDWz_r@f}rVfe%FdhZ>d6`_5B_OYe#$Y2|y-+V4>I>z9c*_Jr6uoFh^nuh96t>L5W
zMY}rihkYc_5$ooir5$*G0on<^z%|8l6>v9#<~<nXsx{ZI?qn;FTQ%5`Nd15ev>)wT
zZM7ws@$U%~iPv~2Yhg;`+k3=K9WZ!B-xBJyIk4bhWV*HA!H<q!I-J-U3YvESQ2z}K
zFU9Cq<}0=usl23U8(c+4Ik{lpI}en-vP6rKS{4!+cr$d9OjQtaLq}6_*b!xp3bepp
zw&%nuku<!#yuHEKew3Wd6A7tK>lnfGb3?OoUFUeIVoBZW9f(L&*?l&W+^b;z$7g`C
zdgaXMZeF%|xz?K71{XPtOS}eEnFQ!$KryPRU%OO*pMOI&nS(s1$HpU$(q6p8bNnmP
zYj8N8YyY%&tktSp0WvY!f*?-o9xfW6hpBY+VBQsBOTdYUL&)NwN_byr67@dLrAVz$
zo~ZujC^gZ}t)ybFDBLBZM2CM>HCym*8LAuSht{O8%{UVW%FOhe7}FBw8eu?@J^A^>
zW6T)epL4P)YqlY58Jl&Akc+K8hd%^WP<7js&{SL{l~n#8!lAa-<sY#Jj$%1SF<@1M
zTRZc!zU#`Ap(`xqh>XV{_JWeUX>eKu>8Riz432K4brM~WAd@^?s9kqN&h&m_gRi-7
zxM%=}H#c(pSgPm-&9b{l*5KNPvU)X9o3{6Y4<j5yPQ^7n1jVZ@rc?2bOq@Rve|;4m
zN`2B|s1-HuFI3l76<z4%YV^Y?`^h=@QXr}KvL_qQqem0{La%5V&ZE-rjBZ8L>CwLJ
ze|bE$G+}Hbq)q7VLZQ@tSh&>*M_PPI6+06LE^g!6Q3HpN#0l4bR%7%(aCF$n_I-w0
z_f!nDE>Ds*(+U3}{6s0eurcYTYf@@8sKI?qj2PAu#gYL?C%f#4mkt$)q1wFKsG_`f
zq}__|Z?gj=xAak4vGG%Y<~7V`NZOzh=dT6GQ>xiJ9&NKIu`__;ThdFgd*KTJVqvg%
z#~QN=v8-<I?Uy)aO}0VwD5^Q*Jbg@m9<hSGi?N0x8PclNNgoC?&r{eHfs^fx#2Did
z$*uQdw5EaJ3D%Llis+dd`5pbw!~i(aI$0b9^J`nK&UPIq_e6<Lj;jF^Hi6cl+%<r7
znyImi)<=~8-m}?>voU0Hz4(dt$EhL4Il;nD32eczsp&Bk>Qc3}OYb-rF~2eLS?xz~
zR)pjHx&9{r*mgx*`P2meN(8zy&9`+JPHZsIYB5u#Nc;`QFd*_;?IWi1K=J4XWZO*o
zcjpPE^y;{a8P1qfqF!nsWHKnR=_D4IKSMJ7d}*2djY(J^ap^Z{_gEx`9@clGoJ&a~
z7=U_~x%CawA~IPX2pZr`_>Yt-cb?CFV9qVhs6)#7>9Yc`wUkk<fGzBqQanr7WQb3c
zP8j`4-$EbwYX6dPv&upC8^5_{`^X%Z%mIEs7{_Zb#*fgRUPOms`zs6OqPh;@M?|^X
zKMC2=>9hm^na6d^qe64u7ho8O)MYryN=DULVoGVDpadWwFgOoPR=6A{wWXe0HKo5e
zY4d}VeE(o4rAO?|u(O@(tZ_gjZehR)u-U5QKCT>R1D~UX2`pX720C5}pov6*Q()2P
zv5cKIPERKD!PjAGm8X|G6iL=-a=!`<DoSx+k=LC|uu7UzInAF>`5vl)hzpL-7kcrT
z+rC)I(mTW7EDrm<oOrnd>*z5ylOg8447e^_<8wF}nO~1)|79$dwJShzE=Rv2_Uhf)
z{NH?1++&xMJBjJ3`sK|5EC{gmCF|c>|M}QK$avplM`@o=1xBt>P9+<)9V3|oxzaER
z;QW1@8snB+3ZxTsR~J?w_gs08>ko*rB#AL>Y??e$9#piYREgx>$pVj5i;2QiNp!Hc
z-Gvhk!DvdR{@@tv=}j_#`R#3e(oH(;;1$Abqwpo`9SQ&MS!aECQP9SrX#7}#OL|>J
zTA@wEK~v6ukbG5g(f(wxUb+GG`8Q2(ifWA}SZ#M8ekhj9r#OKP#mp-y6tB*NZG`Lv
zOh6@PHkPuzi9g}@opqY4?L_M17JaIwn$t9_(M~f~alix;cD2KkDUiYgw=~&0VX76g
z5KF5v|4#1a4vE_)ayOpdi~%Qkf!(_D;Ie5CbJ^wo!A%|mA#3!2L|*NZQuASylGvw6
zM;u47*DRPZb}jz8l=0a8EaF(m;T{#vD0-v73|V#jG0hH<W6#og4Axk&Ful8)V{%IY
z*r1$$y0m$eY3<GQhSR|Hb4`M#4uxhK`SMvH()9cm?qt{nFC=@uDtC>G^*8Q-jZ$eb
z*2LWjCc{1a4yfnlNCaOi79X&7-)_&*-d(sdA_XiR^PwTC2yQ}`sI8!>n7;!ouL(aZ
zj#Se1y+4vX0)vGQ%ehglflwV&*tlSh1jECYZf=Tp>ywMdDd_cod3l8ITE-SKSs7g$
z0m|fk#(y4w_w)pU|Cs;=oN|F5DB<jyTVU6#P&Q*v<OO(Fm&#Cfhf)=lAcprX-LQ3H
zW>$Jm6KX%wYZ~Dk+Upi&JM=jHyXIGk@WHKM{Qu1YygU#G$Czd!Fbl2Ag;e@LxE^cL
z(AQ`oHU|u{XN?}+{ubE>Z9L>mWA2eBSpJ3opM|NL;{VeStndD(5zqQp|3O#yPZ9!f
z`dxa0N|3*t0HNyde}*kTBicnFk9-*(zVd~K&Zm%dyc{9ubY6k+C=gB5?J9SCa9`HL
zM5@2YO?WfVPua8B-T);e#@+yE^dn`#(r9)>gdJ0}8^RQLIdcHsfi|jdl6P8;*cWnc
z!lRFkfZ_|QVBz?xEH(4MH8!JP6^S&<jH<}B7g0^XA&bwF<O9IhXIt$Ww^7@^h2Mn0
z>Kfr7d&~``*_Of~28A6^t(cd8`LvoSr@2IQ-rnSVN);W_8!?c;1d?ox!%%`aAhllO
z`wLd?B{LUz=USxM^SwA#bzkI%-?;BG@#M84AjLEH+NnBd{bDDYpv`dDe!I*kWX;qD
z5)V!O00M%X1NMGGk$LxtAWztxmHq|r10SiDFeo_V8TdjSybrj(*2LF%r$9F35Zdf?
z+=hwQIKIMDK-O+(KXo_Ms2EU2pbCASm>^}?LL|hy%sT4sO@DWgCQz4p__SSml(>s*
zNvnY+|MC5T`kl-pzLkr0!V$xNyiaLIT@PFtsDGgHnG4?DsT?n;%7RxHr_1_F!vuVL
z*kgI`riZ>>ES2udl|_pA0@JR`hbcZ}#M0vWSFIQzeUNLl4`k+5^cS&Bg8knKLNEqw
ztfSni-0|YTJf&Y~9p$FIy)8r=>Im|}MBV?~8LS(VUs$v*ka{M)(DJ!Ski~-yQ{Jxy
z@=DAUEsd#OoO<yJ{^cU)qO?AleHD#frV9c9?Y@Yqv>_CV@CN=CSG4*}2h0DNS2m}`
zpwdDEUJFEkjoKj}lqF?{*?VJ}4zMPGX`)>E>Xk}Df%j}cYeAx;x}J3bO5f5+HBrt}
zczAL0@VT}FA9};c&zQ>&wz)-!SL@rDr<rcCxa~laOpNqrH#V|OUUpBPpiK7#G2@|D
z8iRNrRzER4&z{4^WppOtTVA_T1^>cn*@hWC+2$-HvR6DwR;V6McA@;P*Gh}Cnos$4
z-kaH4Jk)K;9*dr_Up0|ZC$G`AqvFvck6&;{vT8)MV!W=aVXoUvN?>Ily>u^oMb-y{
z;`Ae=)q?8{AE}jV`(sdkL_z$1AJ4(-%*SXPD-8xo3ioJ*QiZ+cg$9sUE?qA;6gr&V
zWDsW2VLK09%>O(ndAG$-f}_{l0;iBi@R+ct*Ida%pi_a;Cmw*`8BJF4oC|0x672|*
zrL9kM`THP}$DUbzErCkpa4*3i_mzq?)5F#ja#w6Og{j}}HZ17OsC%hS#d3dAfbt6f
zACA=t*k{^Y#!j&ZKS>~<o-M$lDa(LVr9`k!id%{YS&tvI_ZKijgGkWn?vL(9W?Aa$
zY+XCIo&{?I2<F%4-Xw#Qq(Ky!m2ylLfw#+Exsz0Y&4g;NrmkI#d2d`B)@rF0q_l{!
z=X=Y&{nLy=2feSQR`S3&uD4g(c`jwIJKc4_I$WYX1odwnjAes$0f(djp<fG&1xoM;
znP>|7A~L#=<T$q~7S=RPA=Z`-c$zUbbN*w=s(}bsynK6Dlo+1u%c`!CQPTuhp_=Z4
z!P0N2LK>@!>@)nnrAFyhTT|-K@vF$6tVuSlxvs}f8CY+TCt<w5Y>h7PyjlH#GL54D
zAUc|g2nY<c!MAJ)qx*tQ%lW~TrGhEIR}JO;2VpznwTWoyxK$L;*b3E@>{wcaDFZ5-
zkOm!!9#o_Ko3P~ux<H3Iaxm4q`a;x;u_=&0Ru-upPf}3$B~0FF#62<|`U(^J4%ex7
zK0%j)Ic3nOpLxR<QSW59o#2@AFY4S3RoXDdfvKVScOjm!alv~>*)Fetg*vq%x7^(^
zUFE~!Q-6Emq-R;ir+6KVl<YX&jyHt$q?S5Y5rsQO{4r1R0&K!@mX;z#5R%xiE^F2T
z?fSJjxj1zo6IYJWL8w>m49OD&kB_<ieYkxJA}yq1B=bhE3Y&kglW~tZLyxgl5I0Dt
zZ1nDL_ItWre^o3Ma58IoE+DO*n3glAbiVLx$=}SaI6TrOwXHINoI#@ikV|J3_9uQG
zX?I}e4=(AsXKi8qc33$T_0B-wsOa7<hFIJ+4S0}%#S)I`6i3}HSjlh-eFGbzf1j9s
zDb*6`>ZTy%<St@7YlE0b@M`dbk9;`9I$MmyIa{H}ulqBy<C73^HtzhJpNMcq_;FVW
zdj#Mw?R(qU!IeN98I=nx)4N53Sr_r7_RxdlkWv3%04oL5`ZHb>YCO5}q#}mmPuX=e
zGMn8@D;?948ZZ$v>ez|xhNk1N+`m%e87N|6x^p}#(>-Th02vH~vvc!%xjb|RW)ix^
zcK;_@hc&OfjJRs~IiVx!F?7X*gFUq=IR@6WvbJSn1P=L1#U1SZ?|Tlncep}QpNA|=
zewY`s%r(~kW$;wu8!HpiN*c9gfW>ikYekakmdox*#x_=ylS4+cnq%c}fKLPBQ@3Qx
zneg9i(iJ8`abEjoBlQ8#G)A(hZevood(Q~#bx*p)42&@0JWUz5c1swb4!35In$~-y
zAcqyE9}2Z&O%umPcaZpurQ<weF>OS?wNSE-vC`&xFjhbwP}C^7V(MPhEzSyMKU(q_
zYWLdlT_AH~6ggH{<bF)iYTEtoA_>qZZlPwVYSwyK1_1+ouurrfw*>>}Fr0pl))nWu
zFRq&ALblx71W|)5;GC=)3y_Fzgk6X`0Qt`SerwHyEW{$J0!at7w^ct})X2GrCwcp<
zQ=5x>T4pcCsZtSyOtE*05ao%M3WbtYMlw1#bQR$!FfV!-1LS5S?B=v1G8wz_7dv$~
zHk}&wyq4tKP3FspvatY!$Y*5abOzXA)e+pwDs#2)-dQD9uxg6`7Un|iP5`;W-%lcw
z8mSV#piyN;PmQM;(Ei>3url;za=GzXVrG)BNKh_Q0IJ$;CiynV!8$RFA!JsdKt{}+
zYj2RIg8=@lgED01A&Rmes>58B=+RDeW{Wy6(G`^`h;^dP2h1=xsw!1#P1^a#r2UK%
z$c>obJ~8oV@Ct(3-LYxTi1C#LVKoXW@(+Sm16DD<uja~T-8O;^a6J>dazh8`vPugL
z!$PwhjnA@(M{HkUF0yli;hI@xRN?WSc0_tAMK`7vyY^_2v6}U|@6`xNz36JrbRP{Y
zP>5$)i}!!&>;@Ti0iJuGE2sYWF_n_3mKyD94;AJ{hX*9MC*jEg+9gz)q+krN)1m5+
z!J8!CV(`XpTa?J|Q688r9W{?B!s|R3Edje1&z{DXeN8xhDoPtEw2#5Pu~WD0cc?m)
z!%>y&9&O^T4M=lm+54=!t49H4y8?j1PJQJ|Rc^8lC0qOn3^nNO9fWR)X~vp`X>Olc
z3_U#<I<)(N30)g<T|K}SV!-r!8T0<wRm+QK;9P+G3=ceV5Db@uD!eaZr5wcJq&J2N
z(%34aBTd`v&_Wpafy#RTaWbO8z&hk(Lrmut?d@P0xs)o)V*iMHouc<tXry(A2V-5J
z;(KB#5IZTeyUZ9OXA{P{3@aHdg=jabeqF_^6pzTL+%%$**FaklrctMR>V!5jq^cNk
zN<N>(TR`)B2r{klbF~(%!mSG5c$MCvrBXwOFR^=Glq8swej$J6X#j#FhJM#Ue?dL}
z9hy#L<<-N0Hgn$3I~wfb9%)D?oA>|YL`M$r?2q8s_)J9A(ZAvx*g&kn0000ZXZ1O6
z*3p5{q~86oyv;}wP(JGRkWNV9weBjO!~(jT=MMo_lWFn{M-HLyjck4HKBBPYoF!zk
zbtEc14^SSxX#(r^0fT9!+MdwfTJD#yqO1@c4$r~-Se&{_2^4_RG+bi&CvvXD9EF>$
zb-;w|E3dd-XnhZ_({>W`&DpMS38f6eQv!?nU;qFB01^irw1bbqrtAdl0Cd3{8#c^|
z$I3ScAOHXW2^sE+?k&x2yTlN{93tj_U<OKtCB&-<G(Qxp&Is2CyVb|DMU?BkNQzO%
LZ~y=R00000rX8Zt

diff --git a/apps/docs/public/images/source/docs/assets/development-architecture.png b/apps/docs/public/images/source/docs/assets/development-architecture.png
deleted file mode 100644
index c5442401b7b6139fb84b738be5d5f420b891a553..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 262477
zcmeFZbyQVt_cppg5yb!r5lK-RL_z6LK&7M`B&0+dq*EjWq`Rf1yHf$_E<w5*q?<Fh
z@jmbK`~ErOoNt`-&$q_df_rb)y4SpCTyxHAE>8)u=T|XqVIUBQt3rYTQV7HqX9NPh
z>mn+=<7X^IjzC}`gan?*SVymnqKD)357+(-TBVl_z2?&6O-_CBUIQP#BHndE+VA(|
zBqSvSXcDB(@2KJtPT(b9bjkO+NZ!<w{Mi}xhV69)ui(|As=MRF9uar%4h0Kso^f+=
z1qBIN2DWjgRx#tqD=2)1YyQ_U<}LYO|ASxS{GHMM^$rg?%H@B(VK0Ds<6m#=e>hM7
zuQxWXUsCwj8xwc1bN}^5?en|pDF6MAv!7rsQXKyrqyhhDA^%4r|L6k(@qcvW|5(lc
zPkux)+T}8xe6~u_oBlYb(=xlgHEv5Pv1p0Mr8JTW0{!W-8L}CaXM>rF1#U53xb-yT
z=S(paNa3ZX)tII@l&{UL!pzLP6}`M+RH=M_JWD8u5?|F?WBQwqcD&(_Vj3D641}|D
ze9bw;m{;-XBLw2~6&*djOqb1aR>@pvT#Zh9WM(Eknn1#<2CqlPW0mIf9S%pkvXh={
zPwVf9p)4a`-p*_<YaCAkDMSwU){Py#`bftZM8_FeSxexLhU>z^!;1}n>@IXCDwh~h
zh=j@@5c`)-h!Go!7Z=pdA+XNhRX>?7=;R?}G5DVSvH};2I9)!6$9{jKu<#)s&j)D%
z!YSNb9(YxoeC*Y34fP@Bv}_KfFf}!W^D#)LeAGaba<VSD?@+S(qeRViF?nuts=*uc
z)<eM*^H-XhcnHMP$4=-7R4SsQK?LIbi;pf+aH)l^_&SHZ(dRi=B(>)|VyZy0BV`4y
z&iPzZxZTayQ(u<9y)A~)n!tmW$ymA6`yL&0%yv0zwA?~DU(1uLt+h3Z+pZXuyy5iZ
zC?+(H%f_t9|8|ygiE4#q7Am5aYTF7y*7Y^R=_=x}zbP91BfXv^syO=|m9bAx-iyU>
zytL?-ooxxBlTHzZJqij8#Kkho&(CLKX7(fDro~}ra@*P&R69Fd&YA01wOcK!SSuG%
z#5473dKQg3@El(F1g0DoOMSX=4!hs;G!MUqGAKLl^vh#>z-7`cuvi{|y>&R44QmZ!
zWX-v6yZt(XQyzh^et&umu`i;vor8k7Sp8bO_7<~FTPtIY0d?ixm>sFzO5Ro{uNq2#
z;Dw50MJ}67E&c=l+x#R>$EMoc^)v}se^u*ygWlQc$=T8P*^-EsW$tr763_|5@44})
z<lS@aQB<Pg_qAJa`44)<dAVPAk)a`+br;qVj~~0eJiCQ(_WwZ4@%FQqT%89dDW_#-
z^-Ow3b|j18uwlulT=`o)Gy&?NDo%@~;Ly<BAI3GS-}CtC&Q6ck&CSh!6dPt_))S@5
ztJ=(NFZOy$3$QSVl^Fh@j8V?wQke=q#O)@lT$0w?sySTBIK+mHB&(cyTkDMCp0}cG
zTxGGlGQ>J&t$DCHi-#4jwYS!j+{#cgl5e+Xq<8pcwl$QYKs_22k?Hx9A91m8<5tcE
z1er_%E6Vb;AFt!28-AfjUS8gv=e|VDI-<hDUZ@GqSIk>Kils><-(XbDe0j;Z!3z&*
zT#3(of*-N@NE3+P7Q0SyS4=zeKG8ICad%Xfq#dH-*q#<%@@88duc_fVqP=}vqwlk1
zC-)xFUgMKsYEX#1wNd3_gNWGJdt0nh<RN_@uHR|mIgg0Onf5?nJ=A!h3OaT1=_12L
zu=?I)kuVn*)JA?iI?))89WT0UiO1Uk?q+d34!*>kbJjQU@ma0bMs6@DeU?zJvfU{f
zR27LvZBdMN{Mmrd^dy<j=Mc9`A`W#xcj$1tYHy5?&E(Ur#MIk?OvSL5mJz54ov@!3
z7Rz##)~0FC^!q-?BM>Iuphd2(+DL11m3v63e)6-Cbal9>HxjLfPPy>4WP9WzJgh9o
zvlFXJUek?!oFt(%(sLE-)t6V*Sxqr+Vx>CoDDsMF2i>@*A{b2`sd!)P?0BoQudi=q
z#h|gyY__F2*W%=G2YHU8RiqD*%~Fy@K}_73#ztWA-B>|74YLQdhg`=Sb%#kS;=Cup
zsssrtSxQAI;&CK6TW9F5iO>CZmj}h&`tJB~CHVCcFzaBYelWvM?M-=6AQLSWhkD^g
zrZ}m?wj_fX4i3(ITLgbJd5dBe4+A}Y<$SDN;Y!B$@81;*bOIdQsO2jx4fAslh*<Sw
zECgSZ%XB~7w@M#{I)h5733%Y)x{@*544bVvj1RU9N`*Ih9V>S?j@E0`s_n}#u6y=|
z(8<5Sq!44QIW|KRr~*UvC1e$|ySd4h%!AgJDHoTmkjH1oW;WCG&4-YVY)LVlr)bCk
zllM3`RDToXqGtcI0g2$}zwX~gxJD-*g4h+F^o_dY%4W#b9B+DSmT5Nn!i`BIPE)}Y
zy>Bp>(Ied;lYcy4Jh*}=R%1(goK)v`Pmva4Qs=UxSD@1l&fU0R2p7TWU7yA;CpVy<
zQ&ns_{f$OCg&Hnq?F=@Mdr@Qu=_#@n%0WTm98%hEv>x|*Ggf~_EL<VwQBhVcF?wlh
zTaLluDQ&pz%7)fPkDc0=>P#q?A>Oc@QzN#E_lecu`+Y;jscrBwGVwvd!4JV7AccwG
zs)yTA@WA`_1%b%@upnG}xKW2$H2cG-BFl1h7{ght&i$%!^?}an<V<srY}fTvXS;eD
zbq6``UikRY>#oNrU3z_=19-%!UPLCr`LHN&h9MBkxnJ3CA`myOKP@3^>*&Z<Dthze
z$-C)E2nd9%Mwy6cLr_$3KPL24ckixz&%5*Bfh5{xQw(btHnhx6DN_yzabPUe2;Iwu
z;0h46tRF=X&i!3A7ZA0#y|SHmPWHz2tMa|@=z8eRMVGJSx3+{bEGu+0H!J47a>F2>
z!reFzUNX*Ns?c_4NlOhy%#B41@{I|?Zxo2yH^_K5f%Wu~!nng;Oz}vOzC2p3+j4e=
znDPL+7#0|Y#|P=!Ly)53aG@kZ<)X$vYe4IUH9USQi#h-nSu`ucSS5pE60g^rGMvw2
z;^NGP#w7q@K{tR6JbxDI1mDGJTxWS-B6jiuHuJeQNrdy~#?tc$1*{W&1VSL%>lQfQ
zfzS+@v;;)yCrm7diSsBRg%3z6kee#ysB*)?u)fhCFi#HV;|5<^jaEAx1y@N`Ou7@|
zBFM@g+(SX!5CCtEz>~eC5D^hE%tXvw>jQA)P3sdQYS6a7cLD)h_V=A^NO)pX5Dm#s
zO?-Kefxy~9?$_l6h>*@+>E|=~J+A4sf;CAaRJ#0B7M?%+?|aIUh<EvOPaeV{w8;!-
zun+(1IYvfQ4B6S)6+tkf5lq9I%|TSMSfDw7*K+C7B@E}ww?9fFNQ6a2`$Bi{h!A9N
z{(Uc?N=W;9_RPI_q})RPZ%TSm_fOu4C8MXOH_T+E`|FF48<^lH{`vLK51!lq-{h@R
zxW6x`E|iv*hV&3{<g)z5sp^u8i;MsD?nIRfYDie(rkU)Mcv^Z1H@6mY0~T#>$p<WW
z_&K#G<sbgm0;aHKu2_8+!2OHv{``cG1psfw@H(9W(A!-fcdEZfM<?Q@Bqh~jV;Mp#
zTfW&s2Vq+Vd;$o~c>=Qcv8HA@c17I_rCCDm!<V;03|^|nN~LyQF`=SN+ZR9+!21L2
zkl+qpu>L0xZ8m3+G5TnCwZ#??(e9ApSfx#O!c)e|jjw3<DqT5hH4sXa!KTO**wAod
zn_Fe6eA6<e2Z%>mf?jYtEVb#hemmFwIK>i7Y3j51Z-@#vfxH24d`6?O$^#s6E{*mT
zx>PM`Qm5meVDI)2XOOab@&zx~<er<G?zbXybD8i!jWua18G9FDVIFhLi)2zl(Q{fE
z_h&!!y4EwBVhGSKfw6v&J}>#^O}Y!_2WdFLc}X#`4uE)+;<1@udja+uRUgcaRoVFw
zFjKOy$RStlFIelMtSi>T9lyCHTN;F7dqCgd6<4-?4ogGphOmz5=9WxpYcr2|q0qfA
zD!AlWJK*)|X<X>IxnF)!uBU;ExKIP4FaBYqT%hBFVID*!ehRRScYor2zIH1uauHYF
zJD9xqRwRB(d@1qAwF8^$JEjQqh%$ClF6{gqqM7$ijh7OYn-Q^}0Nnb4$-@hQc#LH@
zTE4TCk>l&ULgxWEy{Rz(GZ{{Yb^osV7dK`rOSUwOJ9Jn1c*F+Mm`SgGxS4wAq1d|*
zPaJ+H9FTOtwv)BAw>zxlHG-2)CjVd`{pCG+>vN=JE?&XTo#5MDY~mtd<y~)kevbUT
z=y!p(qMYqbv*s^+Gyh{PSBcn6c9!~Sr;uB-*^Sf<)c5D<*@D6{%<^TE0{uc8g-9+s
zAw$AHFZhzn>&dTfAQHLj!aR}okCB>)AVaxKscW=`wKy0%ImPh-5kQ)%as{E`d-yx8
z_@jBjadEs_O;~u{s@9Wezy9unwDS|yY+7oGfEPUKM!sI+5|6_JiP<)%9|DB4PW+GX
z+@uHy2!_p;2eKg7cw8$A;0v%MZNkZBD<eeO^2L-W<ob`j&eMm_Xr;X-BMm|^a%KFt
z@(U*?C+oF>Cj}{zsZ&BwOQ?0dg!8L7wZUoh<U;`-?&o8BysI;s&yGF&KFGMaN#dq%
zYP>TM`1b}3*EpRG7wOC5`umj`kMqEtAZoxCbz56yyYHm)(31<nt&m9WXj~WiAJ(Df
zuoL2SYiq6@xnCP}*tsUf$6R=C(VqLZ@Z#B{b(`LML@rJ}^-$}Bv@6X&tA{T?*{;Ln
z{rvg5EGZP|$k?WEKgr*8sUVp-Eq>Whe^*uR85%)}_2Y2bk0~$1*q(-y|4JOM|0A|&
zcn4{pPA5BI^2@17NpB%GLja}ivs@cFfJ}&#-K>5q%=$<JzGfnJSAEg|&5d@!>}*7j
zGswAL0gd3?$VKV+554|?xKofZ)P*orksw1%G$y9PA&kCJ&BW1Dl{+x|b&88STTv`z
zmWJ%i%+g<ImVQ}n_q%iGTx#r;lsW(pl7&O02276ke?~sizhOO+zP(h3L;^U-tH$5l
zYCqES@VeSCdY@q8S$KYJwzBnR-{RBOS9BpF24ga4xTaqBXMbiZn`|o#c#&@Ik;=$n
zE2r5@z1a%yiS@aSoqAFF$%sWkXihWHvDfZ>-RaP_CwE$XZSSScYSXfTWYa#am;2f(
z-l+VHezIHQ3F~vl`cb4GHcwabroV+_NS==+<*D}#I=RdZ6NelgWC4`x3F?h2d?xOu
z9XT~aQ~ddK&w3a8K2XPxTVV1$yl;GDr1-&Dq2yTqj?60;4BRPPjh4ihCHHyHYF9Dw
zV!4tt8|ApldPdHMUukkHAomAjEZc5sT2Tyx_wb?hC53vLud)(WFCD5@UT`mz)F9Ct
zmQ<r3>7M;8;42#MH06@)`AZ6_4#?W8H92k=G3r~4t<BBi^_CNd=eOsNP&KBuj~jef
z=mIKimKQ(DVmOPNu^8m*?1tp4E!^9iSHnX%`4?vgeI>TTMbLE*w)VY;Ga--4uXwpw
zugaoI(!TPA#Ko2D`0XDS;UQW%s|<D&{R~;qYN-zFc4;oR{wSl07rKM?sR=_|m!0PL
z$Q4zc!reB)77I>dgnJ{_0<HI8Yu@;K?h`cmAj%hzJ0n4(`qjJYx9jr<Pxj9)FS7<Z
zqn#g0%c=IEQRGT{A(EpSQgxUa?^@q_YnfEXp(cM~rg`Sx>Yu2K5Fr0Cq?_z`vNK5P
zxF3&^4PHJ7SvXcF{(a8VZ8)dXJ<}goF&>*}%@f_)e$`PPr~M#aC^1<6!VfRJtpy8S
z18Ob@CA)AF$&>J&WTIBLR54N#HuCvYHLZhfmvw1Xl1ywIT!dA}t#py{1V#HQCEB-U
zCC9NvQ|L&${(aOE!Ucmd^7GAEj7;fubB@yPQw@e<<si;0X=u!S_=%KzfktoIfr!_5
z*HBQHj&^1@uc)wL3ParCoA^6N!b9eCv*N+TKOeGEpC92^ezhZ%)*jT$k>16=(_sG>
zPav;l9N_FG(Gs9I=HhbZ<R2Bb)tgeU^8(iy!Fk&8Tv0@RNyH#8kEEJK-|aR^#sM$p
zR7bk>j5v{#zEqmW`mb{TL`Gkq%%7zz5MENanB3diS>E<+AfFUG9qMWy{+76COctZi
zYZ=xuWpr`XsJ+IH;}i5EkGznU#+M2&?G%pP@1@Q$c8pfa(y>3#G&1OKk;+Ccu9oV*
z08jBvG*`hdi<!ONVT&SS4h5z6p{{W;d?iHR&)4p`8n$v7Uke>Sm%Yt^S>0^TJ=RPK
zqdx!d=^;B5jjDFyr=S0;{!PXQckSP-R4Ow&vm}Bc9^Ix|{0!yd#}S4aQb)%^TKYa=
z0}8Lyj}Bkt(p^2){fq32PBo-5blmY~vRZryZ%LQ;@ji8P+k8GNPKR9QpMxA)6&HQJ
zu0&4<rAD;+RUJucJb8yYVSI3O#&O(d5)!i|E~#SB^7*!Df4cSlHMHk`^9G0WyDr5^
z_4O(EQS#ndGPkwcwrC$r#wDx}9rWg-K;W=uq|@w=_ds7=w)Hp;a?8ZyMJ98<4s{C9
zl80iBhflx6i<;Y<W>=-oGe{wh(>L}#`Ngj=uvx08S&uRMQK-mtZm~8inGT>WVJoYo
zztW7!CQ!?fYuQK*X-^4hiVMB!-!1{-CRA)4)Vk(K0UqotPU=h?z1Fo`5e=&jb!zFp
zf5qp@j-88zYIAgrD2{8izo2m}Qf6aM2(4Dl%pCJ7Q9zAuTy>^aoU&JuaYki8(Nt#H
zSW=&kk(`);jba4VArzO+X)$YQg2ioo_w+;B^@6n9{jlu+0B#N6^YrJHHJ*G4h}V=g
zifzRci{{|iWk9QC#JJ4t;nNCAq88ehqTM`JLYp%)r<0>(H4s&3Fn5aAtVirUKC+s*
z_q|e<<r#|*#FfsO)9N~*NndUd<nKe_0_;(74R3hl(X#Q{V6#%?ao-3U#^V5DCp)u&
zo{+;pSCLzx4wIK=lUGPt@pQD$wkYxY{b;0@qH}0Znz)7JRpS{0eArJ1?t;#9Nn3NY
z3QdlW^yB}%z-34kp2#RzuZ)vMhcopCS@=~S?lz0pNFcl>`tZl2!yV;_8f0@qH+u?b
zc~os^=rny!<ByIomqLg)t?lc|4+C+S=UUv6pz!ZOjtXlIJZ?+$AaOdKX?rWKCIRQ?
z4f4H0DnGH3<b;?Ht}<KgHpSVdcrYJA!@7p1>^aq9m)cqVQLYECJ;Y;by4B|vwsKK^
zwJ3`yi#Q18?}2qHSj%@mI{Kvl3(tw!fU%4!$H{8X`#m00TS<4+37`MAhz9QvJB!z%
z2WBmHHcl(_Y{6;VA8F)SvUMyv)r{z56GlqoA0%6p(9_cgw+H#i{JjMHbS+~;J1?ps
zH;~3y!~I}-3#>mRXLE0blWC>DhBsC=e}1Qd<7F};TIBS!<{IxK747+BX<YoM&7O%;
zrANWy`Jr(ZXJ1|!=18b|{k9QwQit8Rtd@=dANsSkn>NBI2&`-QOmZ>d9Gq51_Y{3=
zCXTVIZ129DT;#SvLGZLT?awD=4rD3+G1ppKK<sC*ySir^ngi(;srcHsv21C_x7SNn
zpR3xQ?4y(7SEN`-wYFkMsw5%Uq^*zZ<Eh+l5OHQRav7VPxl;NB=j4ax4DgCVkx|PW
zyf{r=91qv)B+Hlgh6IQDFmRsz5Do#GQcxb)d=&9st(#=dU?h<Jwbqbir%<m9N^YP_
zVq?C1R_BijHJfG=2RYBf<GP3z5mQ+@isI7kOz)b6rk<Xj!r3;_9H&3=iR>b*dc28V
zX7?}-0$g;#nl9eW1N3Wf*UwLfyzoT~Y)z-MeQ+4dn&!O^5!V+tm>K8Rhf*17`uEme
z4emQeT7T)DW{)a<gK5~@fF1Qnl1B*4a`AMJl<;ir45LG3N{pp+B<ie9_Z&j~1r<;1
zY|=)exKJ%Beeyrh!i!$N0drH_rt?1t10XW;aQ+OK#a_l_+j=b4;h<t~c5Ni6;AdF0
zT5*g;O#y<A%Z7tav*<WTTe%tA(}(cx!%RZuWGR&pFK~z7g>mH{%Wyne{}Jt@yiL(i
zVZ{JZHvMA0Ty{UNXk}#@t;-ba+vf3#v-)kuLhPZ5-pe(N1J%g7{8uxl@yR5UMiR7I
zVSpf;BD=DZO&4ZPkM$+*J^s^eCR?eeuB9set`PNNmn@3m-oOofWA96&LsbU{ZbM~m
zWj5)bCfc&vG4Qae3{nzpH6;1T^$%{H)Fsi`mz{lz%~E)PhJf}AR}2Vb9S6fX<U2M_
zFkZcRG2!o9$9j1a$JNh(!n=_*lj^K6a73*{JLgAu)o$ua94q?a8wGIjuHUZWFjm~n
z6H5GrcPeH&<l`cbUUYm@D+&xMsPW2DsHVpM(xO`R<m~>U7y0Px#Ti|-Q*N8`>bsLu
z7gSEcg$YD`{CLH%%tC*B{l?YzuHH+H{h6_QjbeBlKP~QwzLxoG*&iq&y)&L#9t?1z
zFshM^*$hwtqQGxnK=XHnu#mjD?WtL`Mqj!!PZ~SbybP%zDMk?k)ugCTDA(y{XTLb@
zIB+<1@?_2IyJBk6h0<C2Fyhz^=?~z?@?>#~mVQ<hU6g8(AEFy1v70{UAOr!MhLJl1
zWRW1Mq!d{k9TAZ>!HY*(6<hRHd(HSqNZ22Qv#J69Xll7%N>%u^1XZ4PK*!(SK9(;y
zqQ`et9n+5KPU>sK93Gsli}SRO?}gDumfq?Y9<k&%3$w&<RxXyJfDmlE@h)|H(eL@Q
z>Kn?tl}K|8%MU&I<P;t}ta2bsS$K_?SIJ4F9uSz8wDx<Xf==)X87j5#&QdH^#fCVC
z40Ew(CH{?RnDx|T{(-$5veCO@5h$1q!8BR+fbfrP_+vkBj5`H6pjlHFOSuI<=**~h
zb@JNW#N_2<GHx`QP3{GRL`wN`QWI6~x9d92j0&QpY<kv`Li<}ae*OEE06e(+j1h5*
z)4uIj3RN`+s<fTiS*j}4Ob0@=TEd?@Z<4P#DGeDY2~9Tldc@vTGTHE-Hx2}(<idY8
zf<=|0GE^GbAF_wx7ss}hy2E<6Xh>_zzBKude*e0N96#y}m%GKHi@`tZ0+rO(4nzWT
z)@3Ybm>)DZ;3C#3iYqhQa2$3h&^)e@+P+el^b8`Y<_GU|=+Q8&8gK6(W%qjG!!h^K
zwsyWozRiCkCK&bxeyX#2Uc<Lg;)AxycX#sTvpMHmnnyWqnmtEY)3Il1j%ANh>9q9=
zZ(6SL9IuGXsuHJ9O?Mt_X5#5ms8b}fNRPD=J>aq0l5-I9j2+dg`wO^TQ@?)YJE`l4
z;gnC85&8w=ksr}RS>XH+8^$YaeS3?Q#1*5NK_)_pJ$`2*DAf5<m^;lstnTYC3TNG&
zZ)}gK`xfG0`soP&1`&5`fvNXyS7>m!^<qPdNaHE<1N~+U2O+7b(0rl4_wzNhU8k3K
zMJpAqgVg{^m)md`pYCYtQ;qGO^ud9cd~S%~J<eC37@)L6%@LKga#@_neue!+`*VJ1
z_OV@0VW5MN#TExZOeB=5{MaI`W^caPTXq<@?{1;3**Bz#^H`=J#)5evb5?&7Q+G*Z
zDqSvc!JFn~%gK*u)zXK?gCw$AWy+4c%MZH$E(%$lKTq%aSY;=j!l-JpzOf*hNBJ<o
z?v-$u4C0uAr+Vb`?Y}m;vfkV~-H{`e>7Xpn*rJptch>de2va9V#qRCM`Cqn}PY^qD
zi1k59k<QWI$(>KRc`BqgwbWK<@+Xc*96?0EPkDeYSn*QQ(qI_Q4aZQ^XnDnAJeG+R
z2?r8W3Xcp;&){!eKI74#_N&OX{bhP;L&71{tVRo8&|_%<TGDZCZW88&&{6`rY`$z}
zULc><i+{Ihn;eDCs&(BXjx-D7a#0}C0s-;iBC5W+m_y8Oj=ma&9r=)nH>5;=eKOU3
zex36ZssMfiTsl55HWmr{>2;uH3>^+5=sxDVLyO!7x=%<+#e;(L-APf9YUVWJ;F;v-
zw^^*VqC=oyDW~zZgwJF09A>t39GoRo9@m|F9_*z1R;7s6J*0rufWEC|fCSdbm?BDp
zc_#74QsZjKv2kX^TQ5Lsz&k^+E~tOga`h3F`mDis>-{o$j5D4zRLbno=TYczZIFzc
zQi+knDzw|6dqdj?V4_6*3o1y`*&k{#x1}?;WE;m%1o4i|fBJ<7Z(%DvltrN4saDMj
zo)jk~c_>wp{sK(S1N}<I##)BEzO*(2=Q8DM$jd@>kygE3FL7c~9NbRnBy(DbsvZdW
zBUt>_>G!nCw@b@UpR1jgU?lBx;8Q+KN2)Fy6JO;mkz#>b*lk=p)rk7J7uzN5B5U?O
z?K;v3RLZ<r?POA?iSMOWg@MNoPQ;EnT4k(i138u)njxq0kllNr`!tOgh^tAJpPg(z
z$3x)LirRAPFSd+~7cXBnN9Lq_VdyrySqQ(Hy`P>m%vaa%nBGz=N!bi?y<qV{<<}yR
z|J3p$v(-SUs70LIKqZ^V8I)SxhMe{28mlu;y*Paec0woaM^;bFO0M~O{6db_3U(~T
zQU|4%Gwe1ysOIfs3iL9nlLR`A8jKg9c@ff=l6>477Jc~YRPmC+nRIxRo!0l#%w)Q&
zvlQ!<Wit*Xbco0Mf-hdk{#k;vARrGu8k(Ymyr1hFp@t1X(}V*c{T!L`3iFcn7S#js
zLro3U?BeJmdmqQyq`uY=kIl^vTaBpDWRj&s#J<p%aVo%_Tzg@Lx*^}b#j=*F<yjg+
zS0pnjHT4f>L_ALVAo+NqUXB`HIV)e29f~_6PFNSQ!A0bz;zX*>SO<3{Nt%V}7g80-
zMaMYzr$=mxZWgU#-(rQ<l<Gj~iuXCZCs+3upbj<!n#OH?hTz`~$+9+U(XVT+{u_%B
z2tIE*s9<16slI))$8+?x0poG*_dx8{Dwe4}`SEYT^w~9gieI`l*$GRI3zW?AAYJEj
z=$v^qdwL=@08u?voXScs6|ujvGSjdU$3kj1U-z{}eCe_#oxC6c_uXvUN1(HR4zeV0
zfFCGWs`eoX(!CM+G68X3ezWM?!?YDr$G%^{Yg4L6HVxzPb-Wu3q%o&Dd6NhG7c8W{
zagj>ryZ&CYb5Zhts(Y$cZ-9BB21UPsJI|4>{3{AXzC72%qL33x;k*z!YQ$}Mh0jhh
znX=|+wXXt)3%S<as0@Do#CVJ~BpgZ&Ri3i0mK?N+kkZSYk(gkX{K#zO=?xs50;oSr
zB@5H66GJx^I4o#rXh`i3#ZPqh_sUWl3Jv$~`W%a@jv^%g&^t%DH;+iZz&6iUo(3T&
zwb>EXTFvIaLPxegr7yFU+r@#rgsV59;JNR4L~8S2UA-5Q;cjX%q53teyc^<=U;Mh8
z4=zncWP(QTstSqOrJXk!Sh+L^-GUHm)zd2Z0{QHA-f+dtm-=|Nz@!LlxA8i*>D;9o
zSftfvhd1~<Im>l<wgU4uI-;_Um58B_DCj1XqsySI>Fxc(z%&g5HZ=JUprd;W0PV4s
zu%KX5bF<{BT>T!<QKV5O%*CMfiBN%@Qa6ZT{HwZJ8%w<7YUwRm*^P$#wLTlT`)n@^
zY$Eb6LIp7WgXtUFEYPPR`3qDmMxW_FK;3VXNi0YzD$L<v2uE6H&S;z>#|LtwK&xFr
zgGEWNXP;G%FyT*WaZh@aBu3vyu~{%MFuYLiXls*!>%NnW=W`pau%dHP2C@<~DG6D&
zwPoh#<D68HeG0@uE^-GPpQ7IApwz5Bpl!ll8uZMPQALaMQ8ppxaw8YxcZW65Dn)+_
z7VqZ$n5A-Cd*w2~eQJGjDC$=F^(OVrZHgb<mB~4Qy8l<)RaH3Oc}XB$oC|PHUXlM<
zxjU@SSiS!$N43akv>fg7jnB2<?qH+V1#7<!b$mRyVCTviFZoj0EFYu#=7rMhv3%E4
zZ$sx_6pukHDEoD2*LFhm4xu)Cyy^SkfX-pa$wHsPr;@;r0L~5U?+4V#pzV;D{EyH8
zriH8T<6Tl<Q#OchX_ftgCtV$l;i<6e<eDl`uh)bHh2E#Wy=FN+Y&)}G!=)%dePwPu
z|M%%4S&ey&$GGr_q12oL=bMnfvN363`jhsk&<h(`+sBQ=dTL5bdgJ2r)6e2T6~*!z
z?+$S_yet{{Xz$$NSBBdxa*_Vs6#A?`m<^N~`R;h2GW|!?Hwf+K)Esd~W}om-B1`ar
zFIjD;`gEipvmu#Her!(#|I>F6yN-+%7Zad1s$w~$4X2Y05QD!WI}i02&I|kMf&NJe
zPlD}51!(^%{{QXU^`(lF;-MYxt|Ec`gfXNPckl6RidThTHaWCo4QQeJddfl@h0N3|
z_u0Su73H&`%C{cA{zR?>oDbvjMM|W{ak>LN8<r?xVYvW?DPFRKCsGgahR9FPkx%{E
zjK3QK1TUaKDdKgzW0E5A02Tr+9Z|Y3$b-Uq`)3>a`LCl9Y%gR2yx5*<{f`!t1=RZG
zb5v>hcGgBKfWU;58OmeS8!Cdra(MyP@0kxIJXPe-0}{gP^`gDFHsedLAjmKLZpR_J
zPVjY?g?@RpD!@dt^?C!DL!TuRk!}pxs47)2NP9&gBdWD}d((7=zZv>n&&=+AOS7jY
zdxhlNAURxrbZTmPI#o16DnpI|@5!5iOm^s@9=t{_<{bno70#dwl1ygVId@0}c*I<<
z4xMAtkgk*wXh^ds(uv2?_#Z7C;FLu{hc-lBHI1Avip3DRk5R$FxJcmP>{)Lo|HY3e
zETNer+00x<!CRcoycZ*%11q3oMm>ZJCzXAOHnV{$wk(YtE8w5=Cdxv46O{jAIkXo$
zqS?37Qez{zZ1OR5flqXc*U{cUV5|>P+gf3;va;y1LH?i2=jxf-UP^rW>ie;~wabzy
ztp90}`O5s{t<=2T)l^|Vfq!~uKEl7Nwq&@llZ`%vgGKs-KsB)hsu%4@Uyj;Ya+qrQ
zQhLTOx%#z^)-f|ZR!P{7@a}c(X22%m|B*lR(ddq_t7&v7`4L99%fEYieZVIKmW&T6
z@2Sh>dlDLaEEXfBra+3LIsyTcy$;`SXPv_7Jf@?TuwkcVl*hwO|B5QB@R|Orj&$)&
zJWWpK1mZ9(G0mUOq(CFs`R4_@b1|V}wb*Es!|C)Gnx!k_HD@1Q%E^Ud6eT4kZLQGC
zroWvHk+)pxO9LZC?&cTpe3ew^8ZQayo}%Q^|F0$_Gq~3MoD>ODYKQ)C(#bym#@+B9
zELZ9eL;kTu^1p$`uaE!p&;J%8y(H4#A<Ed#y++y;az+6DOHcFH=^#IZBh%wA0bfDp
zZ!Z7)6U6f54c9-v{{HcQhl>A)(r_{1ccfb$Knf0dV0HXQBEJh=ZK8jH$wl1}7i5>`
zpX2|lIe~^hb=TU!e|AaT@b7#<Z9-3PFS3{bhq~eagEju%0%)!VM@FXqJ`VyB;POY}
zF0?=h_*<MMNBiZa|9%O6{%;v#_`8Dtw;P`geX&U`aPQD3$D@-2Osg5eqzxvWTj}EB
z;&vI|Xt;1O!Ta7Du=-c85-`vUIsV?t2G%8o?y0^sX<)Wl>=?iS>`l#ArR28~o@!`J
z0-Fvx#5O?YjgF39>dzPi7YwNEb{y6t*YtLs43)C{U6ZML&vO^9bdhw#@z(sJ>B-sH
z*w_IX6gW-5lAM~Fq8;i_lcwU~QN5islX?KuwQY*c-mbO}f=7GnjMUT{OBAx{GLpAL
zpgkWFlFUu7mx?N+M7%d@H6G1wPK24<oM$rm75uC=3h-8f+IvY_<n#=0D-oNl15FhO
zqupV5@7@ijlkaF3X)Agkp9P@A`98&T1XFq%BMp!}rKAFFUM%_&7*VgJ2U&xBfWfdN
z(h^J)6dj#;To}-^mnT?5Kiu@X@?*0;<|0VWS&$D^uFx8~kBuJ*rX6E|JIMN`Z=r=Q
zXJxFaqD_mA410C7Vy~Tb{CK-pd}oyF1@Hn7ca{g^`8~dWSHQzib3B->Io)A&Xij+%
zMf9@k`1lw;T8gs;7IEr}s1)ag0+5wt;<NS`&cS0Dpl+>IAFXk&R~8`s+3mo9fZK+b
z9Gb1h9juxu!l(sq5R@Tv@Xf%!n)vo_03Jp`w1plJBW$OASY^mgfXb)@Sh?n2{~nM9
zGWiTUW4ZCw?DML%zPeuGw%e5{<Z$7;7V?WnAzOL?j9=r5RTlpE0TYWQ_yhZ;wA5`1
zDg84b1tWP}pdgbg;4ecYUpO>_Lamq0lWaxC*>8HDielyg<Oel~7+m>LvVMH9wL<|s
z)UXGnvvhjZzzGz#`wm+Vq)_VfF;^Bwoz6}U1FsUY$mFOZEy|TQ&>+F>w9iuBF+U2x
zQ1}B)knUj03qmvje<0fq<pH~rf^}Jt>KN7%#&h<Z)Ip}k(Lo!9>D-b6o5SI@Cl1xN
z_~N{u#v|yGpUp)XZ&LtgonAIQn6Fz)N9P*Aow>G%Y&rk?HoZpmAFgBa?32mA+>CJA
zn*<6Qo{AaQI5hlsH$Y^@-3e}}e0i*q=GDLp&Y&k_WbEvh22qhAp*M@lIWl^|WU@xt
zlPjV5;+{Sv+{259`Oo2I+9cTQ_f39LEy-&E59kTjDghz2_k8Ah^-+gJzQGWaIcn&(
zT+)a{IQSQ@$AsEXUjykA;e7EK>W%1qAlT*9oE{Dp=!!H7p<JH?69i7`2Eh5X<`!&J
zrsRh}KbOl=qG_duK?LBtz>q>($lIkpp)cuL<tOjZNxH%+fw%3hkNQQqtgH;gqFDYm
zjfxJFfJtD^7X2F0=ZPSbaSu2r|4F~?o4(I^jwiNgu3sVG(}tAt#5Erp8YmI7QAM@0
zz>U=T-hR~Z9+Sr!c-WDHPU}^BR}>w9Ahg_{5eC8N@jmmOY4zEu-PRkhZIMv=2e|iC
zEBCW2)|haOhVmP_Y%?JpjN!0A;s|vOl^dw{My;oPoK6o?QOUo8`f#^ZoB5MCmKco!
zX)7gDV6Kpe^@7x{G9~xPb}z;U%1*AWj~+wv*MQr-`Njcp(UnQNr7irybfkW^<ZgWm
zB(Rn%-z61EvaUr-1A_+1T;-3Ksh)cT(-)uw#?-+I6W{jW;sNnM|9|wRuPcm*<L!bU
z@9F)_UEr7B>PfHv>UOz3OhBp1wkTe}2~82cTpM|F?W5}6xKmBr1sc1AW>}kCwu;``
zF)-}EEFw6tRKbeF2376a7o~yzT)y%3venA>$%i7E6SeOE7f0lO1Rx?Pa|%@b;vs`J
z`P;)QkfMP@bmt=&t=Q_|oIP7vSpjwVwN-ekPA3*?pD&+(0rMf91g27MX$!r8`XZQh
zV|g6P74lxuigqnIQ^ne?l>zHoMvY1H+egs;LU0p@d_w_OV%m3Ce{kkwgB4*Bl)qgh
z=f3FB47m-!+BC-Irl$Kf61ThnmIkgRRhvNK=H8!OefS0$$rT9iEOswP=*F7fRc9yS
zu~!h*(h;obuv@QUwceP3y<>Mkk60ZmF;){56)iKH4Ganj*_-hr0lxa1{&Zl$TNe4Y
z$pELG_rZfapo{}kzeV%l;9zr3QBg79CY#5_u4nH@m0d}t+*};)S2+!h_+EXMkHnn2
zpd&q$xR@kdY&vZ>`FFnoRd~KL&Z)z0ttr+XTro^(*l}jqZq5h|Rn5AoK9#VyuiSk0
z<jEH(Tu?ZPy!!GY^FaFt*W_0G9Y#iDC};rVwV$-2lA_TSyjs(qe_-I0GPbkvIF%Q8
zP78Nzg5e`1)tS2bWcLTD&CK<PF7CGr{>2>$PrYZ<RTBg*;i*Hg3#t3C5|^(}v);VM
zV3*RT(w`x}$I|^}p5OnJIO$vPNg2pQRko;_-SN2em_1E3S!Zv_&5SF|Sm=fprx1Ex
zN=A118;Fav0$Spbp>wTQZr#OB4wZazyCPX8%q%+KCf9uYw;yB-Edfu`mC{To6aoVS
zWv-u3?T=r1VWnr?8kZpvkBUO_tb_OL80Fjr!3rg{{V8uo&|X<P>WZHbB#o>mHzw;|
zR_S&x7m;r!g)IqpbH=wgZoR#vv4|?4A@{<jGXp652<I9V^Y%yX=QAPpkC?SG9Aa;s
zpc6yr))A}?lvJ$a0RCzVnjUwHf&>J22P0=8I<Z^oK;-SY7_1Y%i9U2!Z&1j)!{b!1
zJF33gqCJU%CQ%ujcFD)@`(1%oR79#5cprcdFu7mob4G>p&A9UCHwbm`4J(HOFqwN5
zD@+c}z)en~qlh6txl;155$tm=%BZ|~<a#8h)fzG$F%FfP>ppw-4al2N-Cm&%IM^&1
zcT|ol3>`|@-rk0}DI}fmum+i@4TbYK92P>&rz{upMq~&Cjw+|+N>`ZG>aZ+}_$jOC
z9ih&a4Ws-oJyZl-*146Qi2~(LU@UrLm1TT4BiYSUR<hl{0wamgQDU(M+_ut?acLrB
z*l4XDIOV5EGA9^irgDkc50PYkJBZ1x*Nks6-S@Ble9SOJ%Wz(6+z|qz7QU=ebA9pY
z@F)_C01I?ofrP~%+`w<QFUD$&9cBuU)wS`n(-KG2OpQ8sSnVo!bUr?pUf$brPm2vf
z-iL-kHjjpiLBGaf!09kVo4VeFB#Lm1gySK&Z4gw-vDW4_U+ja}*@9N|fJ?(5+GY9B
z1Kw3fAzSRh%Qxu#NkxuS5?(~HoE;9<a9FOqj$L4A*`rY#{7AsuHi#Q+xCWyx^bg<k
z3367}nuEiCA3p<@{@~aWE=u~~RXzCi&y2xKwWh?r$e4qS9lS-Bt4f{@4xYzro6E~0
zNhEKtR7GSI0LmFQU>V9Aw_E2nYz*a~U|?AF<y^aud5M5eVayP`9t_LbgHJ5--Vl-y
z6lg+#H8O<g^ANd2%Qa#L=3iA(X^N%!LHfyIAD|h)tWcA&3agw%f#NN9LZbzUCI)3u
z_@{uGdQ-*2&UQ*@0a1SQ0ZKAZ&Ra`k9ko5B8{0>({9vqjw?g8p&EDbBaCL$_ibyQk
zG?~%#u)=<`nX2biUzlK}puHZZHr8&U9}i47MV@YCuLM{JjoQq|q<XEC&Bq?CJDp{4
zSIz{A-2HUd<(bc|<Q!aZnLVQ&{uBB}hAmI{^<VD)Y%-asMQIFp;-shS$(Yt)ySL_W
zdN5CCd_KPawwC^^^Bo7QtWbOigh2~y-HGU$%Nmmb&q)I6DyrX6wX+OeDjG#*yzXI5
zYg(_r9!TUIR4MW5GWPo<Sn<trRsv;Pw>^@g@mZG0y^xsmE=1e+N+(e3)aa*7FCpt@
zZSU>e-)2asibeFM7e3l~&yEb3)i!A>R|~*RE{o(B6d>cbo~5ucpZ<HH!NqbIW`I$$
ztIW5InqI$uTb+cK5wcylwQ82tlNrNin($CRSufq;yxvV#y&eIM%ARJkGbQ7w`qQOI
zA?8g`S+GjuZFBxjZQ;b1k%^mpth#kKwEai8olfc@NPK|-@Y8_c;Jca??&bktYsp30
zenjkMFrN@%t{ChPX&yKlB+f&_Jat&Wq4l-@{w3P!VRz+Xk#jFOG5JG}wih*TmRatP
zic#tzdD%aw8ws;xg5u)NRth>>Ttm&~L^v1Io3~>f?@>`vHRjrE2F%)ZrFeu?5q?Xn
zn-t+?o+PXIobi@p=u8`1zD9&zrL?P3$=3FeACp_FL(E@nF4fXVM?a~T+EnYNfIqQv
z`4^^vu3|&w*~m)av*$a;X8Ri&C(-~1)Cyk*Z2MnbC)*P8<K7Lw^QGIKwg+m80I`j>
zikmMsflnFCQf94t9{Nd|WMj2!G8cx_B3$~#TWF8aouIIw(;3Uao2?O)q-$jD(bm=m
z9=a`px$$@~Y`D2?0DjensOXeVJ)SyQ<ldRlaXL9sc5<{wD6BQelrvXKAL=OHHTP=P
z>f!N2DSiUgQ@|L612pvXeR3>Z6g5R34GDU9<c1uMe>R#?-=Dcaz{ggaG3EZZ7C=X*
z56MaX<;B4OJf1>AZrj2(aXMXl&hrr^Y6((P!^fxZzI$kg%U)Qy()ccJWu`7tv+Fi1
z>mJyVe>eY@bdQ*IyI8dsBph$jtf4l)#yXbw03+TK442T6hG3nAN?mBWJvXvaLOGOH
z*%FbuzWzaAh(9U+vvjI2?X9|Q{%g3rr~8RzO3}K=#@dka&h+ryz+9eYW8o|r5y7_~
z+&g{JQvI}kXyyF@VPRCt6w<^gHJQbLdTZA}MHXS!)1^pgd<mvoSXT;rKA!^dJ(zn^
z$P#fP-IK?p5<5_0+rHjkex#aCce>;%>}l_DXv3tPv!d#-BO7rg=w9yav-}T@6rhzg
zL3y@%y9*vt$qx#EaBXN%Z?6*rdR!ea=RcqVLu5W0X#B>Khqo}fHk>scKO3qL>s`@u
z&~uJ47d(S7io^j|-I!OBnmJ4+9_QqLPe!3XS2?G%DqL|1hY}F=BJbIOU+;Cz@yPn8
z>ygdWUfVb^#X7SwPPuk4#it#f0j~FS*g$-Lnd$=6rSi!}qs~o!wa?+!tLMDoOTvvz
zz&KvScLkwLp_AH6=!lMH-s$Ca$6lOgOA$+!r%W6ZE6CYST6F|ey(E&9u`v@QUVdwT
zKoE0dSU=}c=hSkuKn@S^L>argKRr3;cK>d{ihGQlt+u=Q><*v?+uapKzULg-`CC9D
zS*(Rw)z<#=HSbsS2GyJ#baYbURXBd+qnEe5^e4cNpp`o%OC*GGTg#oyD{q=o@8iP!
zTLR>Z*~Kru5x2=RZU{(TBi<Yao+vcDp6Tdb9b~v4q*^X2$KGDu(}a>L5_WIyv@#ZR
zoa(s4e)YzXt`_Tk+?JJ;HlE$CG?){@xI$26Rx~eY<8h7nN|EQgl^^blZ@38-nMb;t
z<EcH!wv^M<10+S{8&N#JWaLy2A4|8Wm;r2y(NSBh+8I!WGR4+?Qrv;=N*i<j0&|!O
zR(j=Hx7eF{bx<jYG9vWFBZtGc@<Z~sJikDbsVx1uJs|%)*zO_Oo5DWGx#`17@k2{3
z|4nlef^Q!Q?gUU9>dYGR^abXpG3`w}JQ5Z^ya;0fQn_41^Dv0~nK9tmx(nK6E#w@i
zdx*AGzuJD6-;UDtvc=@`sYbB{IJI6A+<Mp@Mk|Z5iyqD-FgS(a(&9;b7WXzJAYgK?
zXn8PaFtk0UlrE=IN;#I@TnA<mMlolFSOt`xyFYpP9%jNK3UVI8RAlJ2;LY$tGrOIo
z*=j{js9gdI5_016eP0t<&-1qZ*~gov9RryL;m3OBrz#Ulo2Q4K0Ono%&eKOD$E4i@
zZ#{a$c0(1$3*#IQg={8Z#MdHjO+8j?70M2p8eN~BtVONdTFh<|h}qqMQNjCa3r#e7
zr8N*~TB6!}#}_Y5&O#2!5-i9#c;dOjlvB24aHvn;D%w-;i4%gZB_1U9$uUxTE(9Hu
zWaU(LZnTpXInYQd%=Bdo{_YK?HfNmO8vAUhBT>EiQ}(x&r-#dHylzp<^T8+lJL}`)
zK_WX%900uE2C*-#?s-1GuU2ZbK2{~KV)_*3GPIOTA&sV87}34aGFK*^7Tl~i8|vye
zX^uCGr8Spx&X;QBjKMPp>Jr@&Y(^t&n3$Z{&U0aPQ?FjVGJ<l1gC~&}tKo1G;{(64
zae%VEXr7F9?ay8YRAm^CSD(J%gjCYws73qdR0GttTc~)52$BMsMjj905h$F2Sq0Y|
zNQn57@{ZLZY9Kk*Ru%X%4E3kBgM1iwgz>6T<d`KR<f>k$v__{{gI-N982j;fE%`ca
z%D*yqa!t=k+~}GP#7kNNVz0WayqW{#isN4npb)Vm{>X4x=1d|k7CEH292ZD{u__aN
z4*eR}&w8Aeb3KU<N4m!*qN(1A@ajW)*K+PM{=My7Y0A2!JI_9Lh3)4Ftr!l9a%eLh
zrgLpAB>F9hM`EamjQRb7)*HZqb`o5+-<)Z7{|W$*?x<h?>dT9ZyOm%uJsSIK73*y{
z>e*sr{d7<bfE}ATgYgaaHMH2Uu+*9#<^HMFhf8!3nnB$gXUFrr?pEP2JztzzGgS6|
zTPx`Y<@-|r#}BwD5@!JRFR3KqEHv>lk9eVK)N^5)Lds987Q^E(Y*L47+Ak~rBJ$xP
zU|rTYzPm9BC)y?2?%%iuzeAo1+a@`u8Lj%Q?8DvawbE%{4-(s^>#r_=s-_il>2^dv
zHc$rV!gTQ!395gXNR5(?;nm(<vG(u>b^h@b<8^=tXM<YezuixyY$T{VA0Oc{t_y?i
zvpM0+#&FZDqef7w!WaW*71LYMC$zn@`a|9^*!y0&Ao*LMow$21oR3`b$ro>lO-rWN
z*E+Lux=yb>o&kyY5RBF~zYac7bQqPd=l7?}*A)4P%oVCt8!dQHOE8fz9j17RnY2Fi
zt-GgIA8(2{Z2I&a&E2Wx-Wy?t2~L>wjL@yuhML`>$PLJ4=Ds&U^<`0>T0VPZ`z(O*
z#qIlJP|+yQ7V>`+CWps5V)A}+)_u~tjz3vH5E;kaQ?>T|s}{o490N+3&nL=I&k-u%
z#?*Ic`f*c|4(ZW`_r*SK#{GHR<R22U1FCvU&i_ten?h4+=%cGvTGo()BsXWF)^5o)
zLP|B0t7n~Mkp3~2@nv}*m-9Wfe3#jmHnSm6Vd)8L67XhkLrx$kCEaZ_b6zSUXWEk*
z-LRvQp=D&Z6}&uRQujnVhk)41;%&{(cbxa!<jRqZaXE@}m)+OC!*n6hWk`Vg{kVlI
zv>}5%d{lJp)AkxNojZ|+$1-$>!tAP1(}Sh%#KuaSt(o@Z8spbB&EF?rm@j@La1vE7
zxaDROjI3%q%5g}5GD+)Hho&2NzFp8dUuW+&4b{0fRQ=}@gjQ?@+w2E=&0+W+DljBm
z))L>uuD09h`3n1SnnY#&JQBYGfJf96BRA+-P2tC@TlGB(IZ8$8`K&qGH*G;Nh7B9E
zGY@)17-e@OIsm~7)hV3~o5$WFCw7LpH+(ud(UfMea^vUm@w&+?=6b&Ix&$dT5bm|l
z5rvh0h72Cc;Dt1nHXh;OHwnnc3v~T7x3sj>=B9}|$Ds7Vglg1uDd^GY-6=uiCzS7q
ztiA<w#Gj%HUSynGCX8af%SF{&<u09AZn;Y9Ft@*Nt!M;e;NVEKQ~Ptsw!DWMO4_OT
zAU6;xpYr{PJ|wA~z7suYzZ)%34{k=T%uHLcqq8&YgB>J~J9G<o)}nvtIF?a)nJxH}
z6itpMz30{+$b_o4A{2frINvU)?-%cASq|ODBEwNC(CxIeCm*^B9c<NjJ~RgsPf_8W
zm7!jp0(J-f&YDh<du0NrtX8MUe*BOQnp(rRZ!M+$&@EkE(&8Bk8!HJKm$y_O;_l#F
z=fYFRE?^yf8>Fd7{xtMzn0?TY9INiMkh9><%x7)Lco+%>{kS$iIHC=;&ooJ-%h1Tq
z@cT<k$+vW<z+(v<G@N%e9Qy5%`B_uSq>=FE4?T8*IXb0gMD*@#lTK57tx0XLMm3Ch
zwOGx57jy_M_U{x#T<|y&$rX%hH@%53b-8JwvYP1-p0;tcvz*HPur0q;W2E~Yo>W28
zHOA>pUtX%ZpTj-}<yPzW>c-tAhN~Sa*rVd9lLF|cYc{V#{r_-bAS>#0;qIe}o@9}o
zlI9JS>wZ_Hl=T$dH?M+IFNf;Ea6$ei_$Skj<wNV%3^@;?tJ~tuVKmdHzJs(!zPEX^
z9XI)T5(P>MiEuOFQ5qWVy?R$<i&uVN(+t-=?$dudQy8}7HO?82O!Q%xp8hI{qT|Fn
z^jPaDPng+Xkhcclv90#$$zwkeKnEn{z=arhJThFJ1SW<bF(*7(V-d<P3-Zf=e7C!k
zP!b=>Ln)D_Rq9psM3tpR7GOw%VR>=D&B!pL5IRYww<KsT$;)(yfjYIs)XJYEXxon{
z=KA7$!NDGrj?^nJ*M^Ihp+YU6Efm$>m1#I$eFBsEaD<!`e`IP^zj>>rsi_pggDfJl
zUKOe~Rq0N`)%J^loRNu4CWio!h1Gg~Cdy<gNM0DynrSzk|5;l!b8?Dv4p<!o^0i*7
z5SOe6*76!jf>@9dtL9*iu#SVtex>QD|Amt2yYFM5bn~M`oKl;Z2KQRN?_~PjwfV7`
z&gS~`kNTXd%i-ME&?s<!lx+9OSQN5_X{O%Lh=?-N>1T_{O)?pYm0Hb#J@|pD(FU=Z
z8}Ou&X6K?)hc<Rr=+{WzgJzAG?PVC9da^64z-hCY6ffYYHcPj)!wf`&wFLzZaAH^8
z4_-z{^kIK=JpTC{(grJHcC(~Aq=G|1BFGuiI&E67SAgk;RZ=RE&r!KzoLw_jcw0|u
zAox;Jf-y1@VK=pGdlu^1X`dDEP}LGNr82i2_z*BZI}*62v_AUfBulySkmovCeqGa-
zv*<9bpg1WP5gnUO8>$>~Xe<YXI#6hx1)tRC`c8(vxq$upP-zZ;0IOQGPz9&Sb<8I^
zQpBzJ+D+9MSb93I&3jrL{U7-GF4oYk5-Fmm1@GW*`6qfD_+}%Y9dVJ>y@IQiBtu(F
zBt+w8Csc`2i;p2EYUx%7EC~)bv@U1z8#)whSdVX?gp?ffJ?ku@N7oitemGA4Wu9;z
zZ?>tc%Fe2;Wz+Cx2d|~mIkj<XS&>^tMU);)t3}r!MSlsPcbftbuS9NTxyAAl=8lfk
z;sW#NiE0jBKn60;T6N{PhdLR)Cbe6^(Gp*a^?XhQcL8l1o?C#JxV`oA;$Zemx-*D4
zGHT!B`O)?EE!IX9)k<x5-pppUCyu`VZgS#CF!$)KrIzCt6AgwvR@=}E>DA2S(_C}j
zYjFi=+C~Gy89f0Gvt1eTjQka1govMZLEkg7BTg}Cjuvrx1_#`Gp;|;oY`&NzVlH1S
zP3bpWVods}ePI9OS7ybO?TlAdxI!Thokrd2cuzr5QFzD%JOyKvhjZ~Ay;5P5{ZCp}
z@K~#bDi!JPo{h=P`D+aq!816*RBiP%Ir%Z%-f_{zctP*&>8<U2n;%fl)=TBGgs0H>
zzr}k1rFt#up&F-}&5+vx3BX&Jlm5P5zI?Clv{--e-jIhMDX&ozdO4Vs_V6<`a_%iC
z!#Aq!4e3FT=u`tBCu8{n`AM-}>JB_tr!CizX;6P5x>cnQp6jAteJ6arlKX8_Vfm>B
zbPBG-2@YXWLZia`&}^&04!Tj(OG|RM4)R*U7}vLHI%~ww%Rt~DwrY!hq(1;9{+XpW
z3N5jnRzPWm2fN&Mqe%E$3)tHfNvpjtubUrtGkZZ(jH2(M!S`H1D|34fRq%zsl@XC5
zv#!}!N1X(?r{w5Z{6YYgeiZ5@lD>oPr5f>NCSJpRZEfiyc0Ke6{4hz$ItLLL9vxxD
zR(}MKT3`~+U<?Si7%324x>(opvcmEaWR`VO5yE!jmKJGKR)FoHun7-WkwOcX33kUG
zx_vdSp`>2L*zbxv?i=>GaONjh=OfXlE?kWr3<Oy5D2cPx&k>4hb%eLv=dKP}=h83o
zibXIr=&g<v=!!d#S7SV`k`u_bO^c<rr79GU<2h91&=zkFJm)=W=7)T0Mx6gA{L)`_
z?fF72ns(5IoU*w{pqnjRCZ6|syU?Wp;#AUrCrD({oGlL;j8|7#&V}E`r-iBsvKGg?
z2YK-#DYT`MKYb#j{MH<D5qb=u+noH9Py*8{MGdmt^`@KCfq8t39g3c|Be27ykk28n
z*`*wfvF#o?FP27!jL}&#shAIGhcyd`!ayssZl{f18d~Y(^a?8O6Pmsl9nG)TVS*eR
z2WQ6(pd~WOYm2p-I8hiwv%68xhL7*7v^e)8WY?qY<EzeGbFLMLUOB2&ZSvItdh&|8
zhue$pTY8nU(A#tq)TmbW+1?Ho*FyhMX;V<0q*`S=*WXt4Vli1{aBxJP^=$+36?xaq
zh>v79r{vj1o}1qnf5S0a43p?|ar-6<)b#WZGglsZq(Emjd+f>Kn0sJ%;`0pifVk%S
zj}|8SAyX?DG6);4f)*B(6zeu;Tf^uTr<UH9K&MtX8SB%-JE?Y`Rx%FH(+}ZkJ6V>a
z9Jb25ZbL_D{J&WH@^~)S?%gk?GDI1Q%2Z}TQkf~rRK`LfDncnTlc^LbnKFh%N|}kI
zjHNP<A*GO6l2B&O^(cGq-#LGr^T+vq-uK<_F22w6+|Rn#y4JO>weH3TH(*`?slyT*
zV%a(fC0S;U`K!h0pFL>g7PCl~lwFL<H#xNXbLVE#6&_{vDW>Rd1A+bTbFFk2STe-;
zAPy8Wip~Sc395KcVa)2{_ael2mKdWNg<z)~$>Sv`C(VAc;G6TH3!l2_Vm4i=QP9`o
z&v0)nB|<!2PR^oko1^f?Xm9g-cW;s~P%SW3C??)*v|wP8Zk0A%n@vk%iBy8dc`5rC
zcO;)03|ZuEM!>scMs{{~crm|NU;IEa2qg60SuttrpafZyt$i<Ayoq$yc0JdE$2U~@
zHY32)?TYt0?L^q_9%t611uKa*b;+&6mpWN??K>Ywn|jjBxvp&!^0@D$ehkyvi)jY-
zGdj}mawZQoH#IH(%Je$+Sc_93CVikY9!gP;X>^D&fN9JR2->>FX|u4A3y|=%xo5TQ
z1;Zi`iq@D1fjrB3;oP4343rLFW=$GiA^mel_I>V+oZ;FR<Ck^jp8u39?=F*={okC1
zqm%tullKj2+S%E<?JiI3;MA^nSJd2BqfcS)wozh2dE%OlUmz;+Th(GU_Q2F#t0+3p
zo-_V@wITHf!~Pv5>M3#WS+OE>h+>^CJ?j<wuh3AY8)R=+xYL0W-`>r4MG|@Do;L4^
z`_kIH%`(tO6G2Xc;%TwH+XKakjhb?2F^j7PZT~@}{>bXafYoUYF9>pNid=%1WvqoR
zvmU)8<dPU$l0vs|PS$O*K_31)qUue{!40cwTly>n^wJ(@{(v&%L7{&64j<n6d)|G=
zcDmLzzl*c8=c6`3PA@?JYp8huH@_>ld=2e3O9>H-=s2-)Mr-G6Hp98+^Wi=-mOTQ)
ztNy%VHIPt~lm;kDgl*iqK!r+e`kDPFyl3t0%v9dlCI~q?g+|y+>0;VlR`bX<I%$*9
zPw{Mf&)*t9QNOS96WL+cfz0ArwK>Vy&}XAAFHtT2a7oQw!Ek(W;SViSZTEF)&&3V{
zo>Cx=>#!Ns%O6F(1;1PG<7b2lH%0q_@Az7lU-u*~ef4Aa{E&8h_tg2S+*s@MGczdY
zJAZbJOub?geSc49C585@j)gnLiK$#${oqiIFTG((UmCz@HoHlIT1izXU-~17u%h)<
zqP9YY|LbI*2KB1i`JIxV127v;KxD>!kPiZfgz_QlJ2CN1`3~9W)}c@jjqeY7+Sk{I
zL=~wU%->uo)1v;KZ=0KA%c0EQWcG!E7B3%mpM7u_wV1oqVDnFdJ$GRGxq;D6M>mGr
z*u%j7Vjo<EtZTvH-GbM)zP?TIuqwFBd1BA^NnY7o$g^Hn7N3KUrQ%91OFeun+@`1G
zpp2M7d`z#El5csr(nQfbs0edDN{ymT4Ugiyq!W@g<6%lA4Ep=3X$O}J9fE<MsE3PC
z-kkMoGqS(^%zBW1OKVt&;)1!Fao+U~K|Vg)6Qd4EuVfaxiWjUdwz|n(J$F6f9!i+R
zI2lM)obLuca(>6^EHNsyv7z?&kLAqK-H1%kt#Tx9z<#ey(XR;3>xszN^FKSq)Y!DZ
z+e=Eif;bc@nhYIZ8&lg_t1&Bpp$^j+re@A|5z)MVj|CJ45Jo_+6MbcOO{ThEH#UZ*
zy88Ks`&SN62$>Ymqu!!>LoNq%civkq&d<!g+Slo>Tm5Bs@WMP|Yg?p>eCMtQCdiVa
zl^c`wR5nC+mbn|ReJ6UwukGvj+(CYsQ(yMJZn?)=v+tKQZ#*6A_-i0M&85xzE_PTJ
z2gStPNvwHd{L=Y{-oUHy3?cQDRj*IELjwvvaZei0o>!=CrF_n5Evwb^njY&$B>bjc
z_`>NUL;$t<f*)TvrY^#i)}J{YJMdEa^Of4EHFic%i*ESc51xZx$$b8mN-?2(Ys1BO
zGdVuVBJ<FhcVeARn_BgenX<&S<xgTVkC}?uNaF)Pxe)EEZiH-MssIzHE@Gq#R7+J`
z`v(Rtd)8&snN4iVuYSL|>Swu8AO8=gpB17A!$?{+3z+V|%yFyO*3}eRg4g@GL_j#u
z^Ss0^6Sb;&>NSZc1yARV?p$&@5a;P`-&WevPE96@$yOwnH<zj&7IQzc`K5YiC{$gz
zk?kZZ*t1E3igUG>D!GpU!FWw~ul;@s&Z^c!@hOOo<UX-QD>mz}ZtB<PHXGSqv8(M!
zbCkN8?fm1U$GJ!v6P4=P?TWIPlN72N0kwz}&*^fkS6raBh(T5t1QnEnXXmDtQKlT^
zazSZODJ^Az5p1IJ`s&ZSW#7e-=lTaYMptv5X%%ykHLD1&mz%SOgbJafxcjVP;CU{-
z=9VKVN1trx&MX{PgJ!pfYwkwjc}khd4`+f{)Cg(EL|<C?f)Pu5>iX*_Xg+vm9hGhH
z+%{pR-@~_t?)$NRLvxSGMrB`ybOfeHhocj(*10=oAa`ZaFh*H7$~tRY2T2RyY>Rx@
z&qzW?lvM|WVN}#1y6|Wu-$-?@D#mKb(+tiFN45!2*`KaOAu2AzsyIK;=@{39Z4J=C
zFS@5WIT1p~6J>r^^2Rf(Vd!U;>%>_P|CmPZC$DG(1?NJ_v=WcxZR*?5yZK<dUv2z(
zcn#mnHPFmdWScG))SAEnC$DGMqZP`q`)qp2_Y<|Jd9p|WrtD18ftxjR@q2S?b9Iz8
z5Y@wtd=Cct8^)w3I4ib!h}otsyLETT{;G_qxWxo2R(o%o&o5dEYwgNg<+&84wlig)
zoVfhQBpz-Kj>9C1kh^so=EMw#`nP9-sv>Noy4Lvn#pm5?JO+$s$NRN)Yr$%ydkso#
zJoprH;359lr~A6krFAtVDE9Y%&9!Q#;T~nk3VU+=rDfyxcj1ZRO*P-Z5}%J-mhGJP
zk$?Z74L=2I{Q<R}5t1aJ!CL+71<(<37roi{eS)S1>V~mK;j)6tYpJK$9-{;@tE;#O
zX6ZGPuloda3F=cl&`+kEEP4?jr2klJe~faZe<Eb<Q{UR^$LQb1ZK2WsRsaru{pP7z
zh&UJ%TbT5XP8C1s!~Dzbb1`!727yV7a1XT;n`Rl(X{O}qLC7{*aH+ISqW;jB$+3G^
z;O<6lGa6@3$xC0a6&jg{fgYdASEh-@=uT!eHkYm|i0sl4+;5>V_%^I@HG}bILxMa@
zT{jZ=<_v#s8##<2osdlt?>}#a>46<uIfzeydDV@FXr=AO3P9wqpKw|v5QpG&3jWTQ
zK00|D^yL~FfyG)WKFVya<yrkuhYcHunm8T&P4!(!)-@Hw8tYQk&D~KH7fX92i=m}S
zGsA8WkvmP$*2^yy%5Bu8<><fPkVARPZr%8;#F5wZ7iSalJ32Zz6@8go8;b>>Os?N2
z6#OB6&-sXDDWb1W=$y1{rO4LM%Z0BPd=qBC9$O*H`1qQhTP<p8?SdjpS|sOX5C6S<
z+a$2nZZ0~UlnkxdSeaEP={IEjbGX9vahW_+W1u6oO+w@2MSA*y3dci1#Hbs~pv1={
zMc?J?+m5-ONviinP$isyq_ZF8Ui~e0Ieyo;6j`t6l`j_`^XETNhJXHI%N+77BjHi1
zNl9^x^SZwg3(X7mzrwmBe(u_}3q*)ho?WV5`Xn9ZZzg#0?R-q^+LPn0hBm6a+ArkA
z)Hq@gL+SP@-fd!OG>KAsD_mpaQnx9r;P@QOp}()siVjgR<43Q+XRTxF{M?eB2z3TI
z&_Ddt7j>(V?wo2jEOxy}V{v8ag=d}183sp>9<9W_m|7lPlUcnH>~lcO(C?eGBq7%V
zrF?eq!1SRtY3ql!0JKa)Lm^x^cEGCG=F_w981=imuzc62VTsoUPfg3NLXak{ky#HQ
zc4?r%en3De8`!f0S`^<`yPTS)FyJ_%=9om>y%0+Eq3h@9(A~20v)uw!)2f=Ps^RA3
zAP3#uVq(PPVVAYhiY*cButcKFxio^>s<77-wozoZ@8qOIwD>X3@p1-DA%Z~2!DftR
zccifwGJIC!SCh4!O{(`(tH~9kc9GVdPqUg{M~=?Ienu7}ZrB+FPkEt)nj4BNa~v=o
z!oA1abRci#Q4|=zW%*;|1O03B{F|?29*JK1s?^?TCh-6&sgL2FT?q)?GeuuKri?uj
z%6q^udEk2h0)7E}fd~<$8I`bXcj<rmyJC@l4w<r<$pYMf`}4Jr1IA@$dhdX&pCM#s
z^4UEv0^EqI)`T5p?$(RX_y7Klt&@q#q0*~#mh9U1zOw@q{xUu%*O712NmyQgvbpU9
zXzjh*?8{l5I}&!vk5}yQeM#2|9v#}}kR1x1o{Jb8UDMe@L~$=m%dP8X9`?EjuJ<v#
zSa6V2RBmbBeqvz@4bR~yQ>3K1q?e$Xm93J$b-GW~`uqFO(!UN8+!HpEKJ3l0!UgO+
z5gLI`Ao+z{D$$t-Vi!2p2f*d4dvK*6Q9Q_B)`WqIeGHj_G?0j7o-!yzcmupmsX3)`
zeGV^6t+y^_pJscI%K=&kU&^4a-QqR9sdpM8erWM<a+UTe?7}Qj<s$bAjZHQDF*isD
z)7r?j(=WgI5!V3QUIK2Se+4apokZMji@;OYF(vR*ZS@Kc2d`r++X5|yqQAr1*n5{a
zFKm6smw3pR5s@{mWW!MDl~oUG?UDDX{!m@xVs11Dg^uphx5bL*=b=~3{c<OorU&Aj
zgKq`R%v2-rTFhTlH8smvkVl9&(bS$`=?TwP9!gVPb$HgH|IUFtvH=ddUxSs(5tN%3
zD!#*m^4AX0vPxC7d19^@6j)nNCdMr>Jg@!zr^aB0rllQVU|Tf9s&az^giL@ou&;gR
z)-t_853#h%n5l<<;f#5tF*sXEtKyjYGnOqW;SVktV^XI_K~Iuv``MvxU<QGsk&IUz
zRrZ~fdZF>s^+f;e=#hhvtfD3(q>d5Y1PJixJ}RC3gX7G4u?uOkgjn3+$a=4ffpJuO
zhB~TRGmHv!O!%^Q*vqG^BMJedvk=5#+%l75K{L(PWFm<~<8GMjTB5|CW8oJjbX;e~
zf97qV-G)1wT+~o9cU6S!U@GKlv`{J4`CUW|6}F#9!R%`tb*|936r|bx)Rj>pB0s`W
zyliRF6&vgA-*k;u{zHLVYj(W^<IfGf=?WvSZ9YkQsCjN#m>xlNy}*2lLGgQR@%&J7
z{N4_|N|^(*1#vm?{@?o7tmV7O>NMIG!f9-uFp`=PSU-E2Ogied+PM!XREt|R^&+l0
z#^3v<Y&YMi{J1RZ)a#peZ8G&iG$6ynX4SnkPf{LxLKc1=TECZ6{L#uGtuGfNL(TV1
z@r8tcuIc1(2O^->${Q_Ea5!M`QPLv?yLaF)2l58~T(d2jhCH`XBl@PUp%L-ZV1nab
zz`$1FEh(|aQNY>J+>kDtmU<JjyG;fqD)kC%QKJydPue{`-4pcEt@V!X{v_jb64XcA
z*NPh7KBX3;H+w0tk1(7!Z{DDoVh_MOdw``v=XXSM^BtDl-h$E#P8^;DzhnA!)3vb*
zg4h!_f|iK=X=d00*V$x#F|k1Fy5i6$%|w+o(0t;}?XZP;rs&EYb5yiM4JFm;a<bXi
zUI-q=jS>}Q=0=`^QTsJ^<ZU2pYDv#YclUWo-A%neQZ|Hmi<zh>WP&iOQa>o;AT!yZ
zD3<xi{c{q)$;;v2F_qWaK^{GvSN3#!O;IoItF+HW#j`<EZl*jnvO+8F)Ru97-g~x7
z^!2NZ+J6M}ds0k!jmC;Z8dn4#JQ}7LoIn4P?xlR;x_2|TW=n*BUar%Ztf;sj;JAe<
z^W~_N{<p2;FH9*iGAg;g%i8zX_C=apthlW8yCV}WS;n$mf3znbi3L&Pq$-sbv{3d%
z8n|_|Y0&rRl%2#eP9_G13AlsHANoT?dXcL0S2fb;5izx-<pmK_Wi3YNw(dR5Q|a#M
zm$)r5jpK+i83wtUYQ*dOzLQyVosbjX^>KvE>Mr%er$pUepnei)9k?swp6o!BA`mI-
zRHp>*P?+n7@i6&w72H()T0vK=pEXZ3$DTDon}w#Aas^@~`yVzA-HdEQC=t<2zi`v*
zFYPe#F1LpoYpVBLZqu%5hz;}PLTfr}VkMhvZ#<1T|AoV?VsakHS|+-V9TSs@L?MHP
zot+qi9&i8qz@ha-#UXk?G>oVlV~ll3s=g|3>yi5uCy<$J-g&~Ic2ApxhZB5_25)qS
z;MWAjt0#(u?N44;ga+bJ5L<dj=qXlBVNo6*eiZWdc4npBAf~+A-}KI@uQ4|_=Xc4(
zp#O0nHwg<ba6%Qa9@f@r#lY$PL?VkftkJjFFSiCMyOSd)x1_h3nc30w6D_sXeJa}@
z=x5vuFXOSFCbsfU`O())i&G^~qxDVl&(IFk##j_5pF*2rb8|D$?H5QDN?d-Per-&-
zO=Mq3<dHMQx?Be|JohK()c~5F){wa2?~g#J*)h_sW042REk(e#>%C)NhmS{}jgofG
z=<e!~WDleP;*S(5zmsj_Umk3-ShfEID^?~i_4U<5C&<Um_ktneJV0Q3n?KkdtV~LL
zgIJWfRcK6V`4bX5p{Q~1niSfozbdG|T!=;glH-w|FsjR9J{;-$hqk`3B3I3CtS!h9
zOG}Dd^w4NZTj=tkt7}gS-&pZPH~F0YxweyAYZBOGS*RCK*{W+7VF2A4-+kJY?6dV>
z@uD&sc0}uqT^*;$VrqXwVNrEIU6T7C&t)^ILNu$)9#{~~&EMID0|gM*6VaKf(QIP2
zU2jc0l5rRG*bG)boOtFwV>c0%H+c@@yF0<=D7vC`=uFvyRrw83zyl(C0MBFjg*(i{
zCM4q*f-iwyCya`DcI~<ZcLHU`3jpofdbKv=NAn<J2sNp+N5QokI6y(e(^2Ux61H8?
zL41xc5SBIUV@W>0MR?GBF`(&NgjEs-9TFm?CNE6RzcrZw=TLOv)86Rfs``5UlLA!<
zulH|1`se|gA_a8S2%dxHUB{(&tT3Ps2o{!wb3Xb5O^^=|AOuL>&P^r6$JhNkG{m;?
z9(|vtjwAd)Y)w#ATEgrT2+CA)A?yy|!F4uPDBNrA<>e<D6})DLc>T*kR>$ZQ1xE9D
zahmU{ePX9xt#<V<(6QA$g1%2fS_<E^jnQP`J8)Knx(ti48)PJ3P!UyBi{5s~EI+J_
zC)w*G<n(l_bmV@#?%$bdR4|T^#O=rUdak<67RNGV*qOuK-wg@bh0_cs_>*(i>-?%d
zr4*<SYjd8po8bfpan|z!6mD1Lr=7l}r$!AUoE9{=FYWiE7Ae&7^{;)xM1Mp~Nx09q
z=#{&w`fZziy`chj5R3a7>j!e7TbuALG>$j((~rQ2n{pPQ2^Q4upL|A3FM^h}4`ABg
zCsgfRh*|rhh4TW5(pK`m<PoWm6PHm(fDj}#p*E;OxBO9Feaj1zek=FUYj;&+)dIF=
zbnssvZ%q39ZL)gT*f3E(+hB<@j(EVEN)82|HS1$DtTk%v;yr|SuM_ib&oq%wR(#T=
zWQ6vdfNfjuy7#~Bh9aBq46UzjNzzW<p5Ue^hh~@EcQPJ|pErNsW~HHn3Q|%e?~Y(N
zx_$D7<viJM{W97yota}H2gJhbA<KdslhbOb^U7JX`TlA<D`;`szH>Qn1wUolv?*m!
z>zVcO3(@}hi4p)rn2v(>3xi^J*XRW`RaI@WJK^DZuQlA1TShvP-bk2PK!h{*1I6Aj
zSLfrMcYe#(9AFYDn}3N;ALN>7>X^cy?}v0oMQ)DlQr0=QMgg#p{5MgAFC6h@lJUBO
zY!7PsinB+N89N>A<ni_y!UKwSB-sEK+HD&f>$@W1VEr+-($?QD+SAFgGaGGQGY>K3
zTBPLp{NeG-l^xGw_+8~g<vl>Yw__p?q#GFP|GRonLA-oO5~>%q;dL|S=30k6n_=oz
zgF$|ovQXb+CTO^9HM+aS28_I*1q6xS5~;GTIze%hMyv#945y7jvPK+)zc1YUAS0^y
zxtZ0BM*Yz9Fb}$r*CFqX&{!O%Enk0!?Ix1fo9t7k-f21wHgK}sbo9C|x=PZwf;ark
zjd`n?d*-`kywc~jXWVdn$O$MUB)?QmrCq%)u|9Wx-o1Snwj9ru9hZsewyQQ$5Rzk>
zs`HR7e0YB8!I>E}aS*z0>qFq`JU->kdzuBChV<Wl?_727#Ll&AqX)94ch2{&+rh3E
zNMk2{XE5Tz-dIL9tx1OT2YkQo=C{1?az&n+(h$rpbL!Q#d$O0S4j^ZDUp0Qb*GDC$
z{n*%=$>(PK(J-$N<VLo|%2##k2xR`DfhD=_N!&cFR5tZjLL|k86jZ5?ybVJEr|a04
za9y$Ae6=TrB2}O2`T7&Zt$Jk+pS|yU!W?R!*>nn@5y@$9dKA7SJEFek;?sq3h8>m?
za;r!RyD3iI8QP#fpg0{j=``H#x=267vnN;A+ptMfx>JMc%1C0~NZ6DaPaZ;9)fTf?
zXHfzbYvAx0L6WM-lVx)G`yLPZ<Bx1<rpE6C<_@&$SIsH<(dZD37|)cSsr3gZZCygs
zAxqP<{<^sHF2_(3F)B)!Tsr^Z$^AR>#_bwqo#;&3`hovPoJI0{f|5Udzx1H1#_!-1
zC*UZ_)vj-X=CXQtb-&y>bEDoQXI?vbAZk0g$}z_)aa19U(o7^db`~y!R~fsE8Z{0^
z|I-D1Ftu&oAbqYhD6Zk!wQJk;M*mPz2Dimu4}W;FJ*(Y%k@dOY$wC)n>As@->wih~
z*|!PV#(a-luJc$Dz0;2orU<3+$JZz<GchvKY?ElX<QR`5a|mrF_Ca$=FL8Xx6`&D$
zOhhm=X#zAr>!UbSg}w)o?e4`HHb}I-5t6gm?t2h}lUi{|%cGt4XGQV<iO)4@VqEMn
zIuIIpP5CdYMc7V+qGeQ<LI>JWB)reT^raJxz__gb@6`2Z33xRh3YDG;h_#i^2BTfX
zXnz6yjCsgQE*CFuwJF><C}{eoyu1*j7Bu4R?s~M~-aHp(|2z2d>Me9em$Cp>0pqx#
zMXV!}M-UBO&xjchV;^&^o`O??$G&G@yB2H}(kc`jSNh9wZSO8%YLfR7(IJaU;E`xC
zZdq9m-0N(zS{Pp=C=BH9MTmLmThlGm!M=qJ9f_A)fEs5WF`uR$ROT4b00B-);OOJ~
z-XwK3HL)<4m<fH5sqj)STop;JM{~?n7ZjITeYUZ9^MwTmn?6r=0=ODK^hdZuEP}f!
zaRgIif^~b&M>|9p@~#t)zh0Nf3q+6e;g{3X({M37yu7Je)%ErAZj*!Eul-OkC#c`u
ztpYFp9a4aS1tKJp>@Wo>izl!igR?1wNZt(4#DtH8nU}wP`{=`e*H382q5r%D;x;gQ
znYbMYO|}2;Ck$NNzm7y&<M;tXS^k+9@aMNlr2mJL{P;AMFYe8u_P<SPTK<mx;eV!m
zE&of%Rl^M^pZ@##|8qRs-#fsNps<jTgq;v|ocOyQtr#Wt=W0R%{~36LKl1)%OMT$q
z8^Qnke>s7W7?h9CYVH5?kO}QD@9@}I_u=>a?}*bYa9%+MNdkEw<%Q$q$`l*_J)%Q^
zdjH}#1!l@qv0orV26yKq1dcLBg2ISs2z+J)E2ALYa3fAHp}3w!9J1l4)VOmUMqgy^
zTtaCG=U~i|mgVxqnI*)@PVoo7ien@?nJwqFOLs#<6L;bekF6lvTK=38LedUGsVwXM
zhTk|6CM%Fnt+c6a%Atm|k9M2H{hj(yasBu9+|cQ=e1eD-a8zC&4)@?E36HctRW{_o
zM4tP^(I4tmr-<`IzTHS%orW`itg4AGL&(kCxpw9-#lJV@0N?cI)Q$zFER1$vkADD`
zVIso+aYrvu;>qg+C=nzH53W*Tm)NfmOU_12n}4bjD{NA1wES=%(Zg`Tb*SkfzBN@p
zvo)dsuUCOM1tfy;6>$Vw>qeZ=f>7BUf##@(r01fSe_LNT{`cGNf?Rrb7}HzKLS`NC
zaKx>pX@bT&cR>=<G01Fr(B}dUyN&J7P^d&UNJUKdbB^HX7gJWe-xiQ=K%`O;(ElO~
zouw%4g|Ph#q5V95;1PIRfg4;9VF~mZ@Mw_fb7?@~^4%aJn9`FtwrIdCZgvvAI+3@v
zNrw*@#uEcbI62F*iF4Udm*FSz0O3o4pg&UpwhCpsW5mHP#7R3xEQ#})43rtUP1~)X
z0XChd!#Q2|Nl}GFP_TnL<FY-vp)$TXe(U~Na*d&$T<DR@f^>&<yJCfo#S<OGddrvO
z;o))m)_UYJkedrdDKvE4AIDL+*tT^mM*nCB5$6WoZTQDX=m~wnGsutGiN<{@Z%n9P
zl)CUy{QD`G>;E{`2cYeIWDj{4v_m`|v0w0e0)uRqM|NG9frIUUte)KV83dF+kuhS7
zdx8+w1>O3l%ct7>=NKVkh6I>!%u>I89ffH<lEWGr=KDKMaNru8n7|+`NS2trlKRF9
z1Sn1d;cQGH&DSH<$TRnE#-)rXKEK&)lD6~`TF5Y56UWz~kYZtGh6A?p5E!s|rHR9Q
zq|!ub*O0sqmV?(jdhiYg1pwx~$)115?sfEuP9Lg<+N7{qWQjZ)v5#fl(Obi%aFmbv
zYc7nvoWIMoojCtVJmPjUI?2V)w;m?T(us}W)BZ{*E`-!$_3#i7jZ=B6!b~tmL@I!t
z+?&ZDnb^uq9}>roPUEgbP8MP$8Q2amB+KU3cmXB}%FBZ|_2?8{>LZP~lmqWJBty9n
zJ4$09qwz$O%)ChAJG9g2H{Mo_XaERw{$uVF^2C^yueqQ&aA7+klp~yxr4yctZTZ}*
z>T|@&K?j7lFk}%EHz31jm34dnGYbz5o$2@Mn@>LWw)}+<={VRxR0{%$AZiRZg!zoe
z2640z&KEL>|J8GJuT|Mq3XD99F1G@Dho)`R#qzquXOwJElDY)X7cCN&FpT6*5Z89`
zhSOQcNge2eq0PjZU&M@tw|PBZze08E=LDJ~?PSpjGHt@m%<AP_1IFHc;EP&>!~&66
zT}m<DO1iN(;x?>Ufnn1xtFvc$e&NbHH1b9SZ<P<B`D+QqGosrTXJ0V2>*I>|&Jd@3
zy}8?C3OHjlf-2sz$tNKFZg1Ixc`mGUPoF+Dr#gOO4LVWv6vSu1<e?5aiZc?^d(-p3
z5JH3;l6|a3%--7)2N|g{@sbZZ5Tmy0t1h`AiO)UXMnt+&b>e`)>9h_U>co+oC{CtM
zw8ysF=d#jKQ&WQ_0l&3oC<Y38K8_}AP#Zeg$p){*3HAjKm3Y_wXdoDc<7+P6<Xb)q
zQ23I7&*_i;U4g_ojI#Js&P%hIUJKu_EpzQ+$+bt(i1XN}zz(xjFauc~K|!J6+8g4a
zEKalLwh-+>bi}##hA7iq$CQSlwoDU9|Cl!TqpxWf{!6G%w1n^I5E*?A+gC<y;*==j
z*cg$KuZ%bLVv+-Rl%_C#-QT01iO%*Q=3N+u*Tpa^P1>ME95pzml*?=C4`G3N4?zz5
zjzcO>SP8@>0C`5xzyrG^dW)jf?a2ctH2y%={SzHg=)<-);N|8%_^}p+kb)eH9Sga=
za&57%@7G7~w?3`^Cd1|DSE_aU!0CKEjl%$+fk!ttGaHP@T6o~CVd8@valYju{ZGPz
z$*-+W+fB<ZCxi5iV5W%4fH%O7>;gdZ?2ooc^E!AD&v<L)Isq6y6A%!96GJpx-N6Xf
zxlZ{dgH(YV(l6Zl<7~F`H|U_DkW51GXTq_T>#o}VAWo>0*hTeQ{5#S2af6s<#k66M
znIDdXo59|AoftlHgE+d6KKX_~H#5#myRjGNrv19EA1eipYdeKf28KvUqk{#6w;qYa
zNJe~b?w{i_B`#4d>4M9bwC^W|vBL2$poCWw*}QtYB0=>xHDRK`i#6-FJht8O>2U1!
zE!P|oIku}2Q^z*9UOG1h0XhHbsG98+UlL_u6y{)8n8-(7fw2H^g;eGkaR?*HTfU)l
z|8vOpa@(yl*vKR3RhL%}1D_tOaYBV>60=s(u4!@+&sM(_D{<)nS@$F4JIF55L7L2)
z;M6>;?ZDo~*CoF)ZuDJQ&+R=&i89MhsDZF&=@UlVCe7-2c-}VOI;Gt55=XPCnCO57
zN-X>&*+$v&^12>=>f3@QZnAF)0$H>@k$V%TSPJDVpXM2uo|UCV#%YJfBsfl!%hRaO
zb)Z0nvD+0<Va4{pP*20rql%cJ4qT9r-FNx9Wn&`F*Wn}S5#uW$FFZ$wSQ3XxJ0ycj
zbfK+9ypWY~pBB~UfIm>^61@jS`i4`ldKgueQi!%^<y>UhDI|l#7>YA_$ql;%6D$hN
zEC)k9C=42a#`F5%<3l|DPN*ui$HdceoD-M2^Uen{16`u$!<?9O#Xcz5Kn!Oqb(_rR
z5byNbfXfk|4q`|vaTMl-XhBo5)}$a^BC8s^QcT`rv3FG#?Q5niVvGs#aS_rW<9w(I
z9TDQAsVp&jN=s>$>ZnOJc@`}(c4_%jYGH(LbSk6RY*|gT&Hnq7>P0y8#Ndt`*)7BC
ze=+qK6)}Vp3uIXh;SW##s;v89JFKc#BUzB^qB8J)134Grl0LqMv8-eeW6Z>FA-x)A
z$ILZ7vMgre>IxfimbL-G{y|Za>$j3cjCqZGb~a+ve?In8aWmt{p5MYcLXSUOzFnkW
zPXDse;B=b*+b>5FwMUASvu_pM=hHiCo&6x{!+s^kF<IxSvtJ5cW?j8GB3$x=eJ*;U
zroH_nwrw4pD&--vO`*pj0eoKzVJ%r{g%)n1)Ivvdf0VGX6#jjitlQD!D9z@<iT_y{
zlK1KdB<jkVva$q)E97bu7{NmB9g;wzCVAJFuQTut!BmH+9HS>X+<$WclK*~OB;IY)
zD>PHSEiYe3ddsDGPo`=d3F-D7JFws?S)%J7MoT+iBrA<lI(U#`%^HCt{p{f2h)=Kq
zqbcVM_Q;Xro-^YQ-G<ka-j>$Z9{DU|-yeX#r+hTgJTy8gOk%zR`1M3{wSY-+;qq@H
z*(kq{Tg}9*mA!lSs@Ve;lY8&tH+r5`R8-U?<F!cq9Oa{X=F*r|HB9-OjCs|sc^@Yy
zCvLT{70U`{CN3{2C8dXbX*K#G+voT?vInQFtcHe%Q^Z@8L&!*_%1{$%92bU`k7Q~F
zg`))K5z^7o6^slGSzWlW^Y6`Y?BXlEs%_bt7M(MXN;CjICF!k_EOo*xpBUz1@;QDN
zo1h~<#D{=_`u^0!gfxoI2&R86lEg(%VIWGiev7zP{ekB=Ulfb=IA~L6iI=>P&|y65
zY8OI<sT>r>Lt)^(3u%kVbt<O6i}?4K0|Ns=Y976d5=a|x{A$vJ1p8bGQBf`8*Kz1!
zzzbEfzj+&p)bB?w#7u2tV`Dx8?g9OD8%Y7aFoV3jyr!d?5An@35?I2VSooL&*QqG~
zJ|@ZZB%U)HZRZ-8DihWZ`(Rm3Ey@-V5s{IRp{DC0#6lu5-(PHWu(!V>|Ky*vG-`9s
zlIV6&tvV4qwr_{>gO|j-{#TePBQ|KT0(kdh5uZCcR-T6>D$QtGb^|C-2=P$O9smi)
z+-)KS_{>IKva}pTodrKC%E!gki;*E}y2iCAI{x|8tid{N$L*le^XT1Er%p`_)NdvQ
zD8e<puLT!EjqJSvg^ZRXaqPrVSIZw$Hayg&A-oRYrSN{tFhi3#7m1lnU!Ra73DhEl
zVg*ctX9vV^AZ=Y;-M<gUN|j}5WPRZR(J3X4XM2ByR9R6~l>+Ul+61CIs9NHHsGlzM
zA0@x9Z~^en7`71pXr3i6D{BKOfaFu~_Zz2ka4U^N;FaL?!}{So0Y5}Y%vYeT6sX1&
zpW<R-+Hv_AaFfH2UIelzh=tBYVVt(G;j<BR@~tePJ0(_d@WZE1O8|Al6{zzvTdoyd
zbMM|gOhM7QTXSF?$(syw!u2Bh=pOs|`H_M<?#X+7K_f`P81g9`Q`+$9li}a>DYbx8
zc>5T3fW4qctSSl?MI_VJ?;kj?Ub6;jUDy~&7Ez<fw)<+6b@QX!_)9>i2XaLNVD(p4
zOKvM(jt+?W^DyS{NAdBUfVC9fy^nT#(C@}T<PE%W@kAFVC8_cPSS7nQ9jmjIp?v^c
zD;svK9m^A<c8BM-hJZV|!meDoLavZwXK#-k5#NL=0C5zK8wm7dA+#H&A+q7G(WmwW
z;-dE<ppPY_r2eoC*p${-B9~(j_yd`%?Us^yfnA%BkbvJfhdHu2?%=w*x?rHBqnMrL
z^5cu_!zYWH)Evh_6}h>(7P(Fw@+Z3Nm;{dgb9>xyu@ClQlS6pLR|^^fohqX+J935b
z#%LvUfgHhFJRY2vNI4%##&rulcqd;ts9NFlGHVo)R@SL_1B~iD*ex(<!BURrxak=g
zi4*14kt%u7qJHt>MKyb@Pe@1ze#5d5bHb3Cs5QTS-2-LCMp9@!N~KuFhvMHyMj}K^
zF8=GLx~SpH-)3kf9KcMlY(RzWXlXo-ia9CR{RE^^LKv1B8^lE--NY0^-|N@;kNgVa
z@y@it_v2`6E#+R?v)GI)PRm^qE4UiPrOT6pjl&g$&IMyR$T*^1TwR~|J&M_FLF<F{
z;}CysQW<~n;ZRps19ZOl`-;zR@#rZ#;6~D+;`(c5-Xb^2g`(C(i`&4BHU-?i{cC(Y
zaSgSKFxHLG0fq4p-**4u?)hV##U21CtG#<SY}nBC{rf`q>$TiXSZ?Hi*x}2c=_Z&;
z<up(b5Lk-%nbW5qmyw4ydXueUUX7pGv(TN1@w|d0t~>Z8oDq1^3T06jl!#Z}LMRE=
z%JS?PUSY<su`#XfAGf3}dk_<2u%~$B1abI25-AQ}^y}NZF?|Iw{JAd7KCc@4OioVj
zpKl_Z5;p=dv{xk^pFfAAQR*=8IdMa8u-oc6aFU1R5RF$~Z!a-8n2ckFap#Hm_4Oi{
zg@{HPqY}@e^z`(VWlBQGJ$(4CxRtwyM_gQ7cm<|1qIIeS+y`0LH#O*Upo0xxUMw9k
z+#MRQYH@ctf?D@W0Y<=)3=a+hI4*xUDq*tCJLt^Ou!!CJN{tH}0bM?5Fq|9f_5p@R
z+eQ5TEE1`KeKEzP#FN~6V+9-sj?!K6HC)^<*HA2f31T#+3#R%Y_+P}tL);XFcP2Lu
z@5R_dox3zwDM%{O4!$LXO6`RLBE_Fi)IR)v3ex^uh=ZM-ogEwM>odV-FT2jMyh*4B
zJOW&?t^gJrNu(rZY*NA+?`mjhpn~*wrYMQT@dki^M+hJmKrI84QKXOwy@6Q3q`>YV
zX<DG^(UDItooybnu(8!8fe2)L2sm!@rBM4WzQuf6aOHk<7;!(uxOB{1`iRL^k9}}K
zD9S@Fk#(g`qx6Pw`9ypQar12L7BZ3oRTh|OJUai88J`a&US9Yq6q3#;D0u(<M(<uA
zvBUSSUw?xx9Ad!G<}g!81YpFlqKz9ja+0{RkurkGe!K(j(ra=s1SxUabzk4WEql~h
zL*#G3cIZi=AF%FNhGz6-iHL~wBUfJj1dqVdqX#<*CVba#9r^yfr3~>3XN2#OkT4*r
zoQ5qTxzN7b-Q6vv*bIuu(}9Pb5RuRCXT*0R4;4I?k_+Q0n8$a6y(uSP+@Ft%9Co<-
z`?TZs@a?D}=&Z$9hn>0;09y?BUBK)XhK&f84q!E4?Yr~LD(T}Y*LtBphm6C&GUz1S
z6n-;R2_kuP?H`6SUH()8enc^C-W&;yEWnB;uN=<7wz2s!HfBr4Q7MWQ;pl^KvJA5(
z-*4n$Umf}pBRzmUCD6kY=YskoW~{70ZH^gOuzk<q;B)j+!Bw<>{Fu^%EKCqk(JhRe
zWD=X4Ow>Qa&nhXcX4pths?kBd66L;O`fhJV?0gvbBz4v>X%9FfV;ty<j@`dE>D{YH
zwy8!J%r}OCVkAmBEhM{yk`(5$o|+m9@D`<x#N8Xaf%xDP&ziy9z%l9EJuJ75i@#uw
z$N4L+P}h)x$_QrKX+b8l;ySqqn}3EvEDA}jFqXJ!XcMZ#_@8>rIgxQt4r(e%oO{p5
zvwbxw>NXgFiuk>b*DBXuNwOd7+E1WQhGYgC42cDbxWy#M^Y?~J*AXkxkClKy!fzz0
zM{2NoVNxHeO~it1UhOS%#B2L2T=USOLx_WiW9PNu-HeYO4WmCbzMsRt(0xY7v-rd_
z>zT<RT}K&gC3W#_+qSLjbmq0V>qUq&9ASpYc81Cq=I1f_Xg7Az;GiX0*R7`L8)E>4
zFgX9)x3M#$gk}_5F@^|%l>1e$k3tg*&;rsThpRXmo`BK_i7RWu%s`bDyxpuS%nGU<
zQ2ljLyB<ifZQ8UKE1{{W=|$|U>c;pRa1S=U6-4a2vj;}9LpkvA4r0Yw3z8o#x>p((
zz@$Zto{K8_(yVyk02&GdmHn8!=rlWN<@$u71j`I^03_vPSJ^7EF6y6?lkcBAKapix
z1}++p%R`K!L<zn?Y8(+{_Y6m{114m}5K7XQ9XaOe1%mpZQ&!CRkUzOlk`QG0Xf62(
zhqK$FF6}9Cm;;bS9Cr4yBNRCWgC+`n%D%L$z$7Q3u~Kcv+7Lz_f@6H>m_-#xDr!Kk
zY0zH49z5LLVLyLgF6qocvQ0XP2sQB-mj}<Kr>8gUa`Y$~_nOrrg^SRYxBLp8)<*A6
z#w${rfGfd!z>G3vLZwO|k+LB$9ae$8qmc$aN7lro6OG3!cu4djlA-H%4h|qM5=%<F
zkYG6I!3QDb$#S0=$L}sI2LzV1v^2;rhek%yl)e;ud_p#hHc)&^z!wnAKoLI|7cO&u
z?e8b1OR1~>PFi_@(xtCiWIDMpj~|5NNI8bHts9SnrcWnQ<jj)`0N~`M7AkR4zmOr=
z_f{k*0h0>To%OqZ9q>Eg13(^vn}FA|FctWdzM#9v^hjeY<mBY2l4Gnf<;wdwdxcy`
zq2hgs3`rEWvv%#;xMTbG?}x=%e#q*^^v>1Zn&ErS>$yJv*x0D;PrycO>0z>iNGb%z
zl~Zs_&Z8aL+u=;Wvz$j#K;f<Fh<+l%!8n)U-*>F+I3et~c{*w7m-~IzRQixXJ(&0G
zS?lr3&=$eCaBS~SyfE@oUVfdV3Yg#fc#)Y(kfI*gad;^eN{0?Xi=bzG)#l8Zr;zX=
zdQy|(x%l`V;~tRBft9<l*A6q6U=%ApS=0kr(~=3AY5{oIn3*x@MSUR;YUC8ax=3N;
z-jG#f96!;zCxN3B9F^GY2#BYobPd<DyyoYJvB)YGY{P^?j9>Q<Nu{u>tBauQQ}r%j
zgojir(ObE)j*o({j{5gxT;1K>b03@>N}GiRWM*c{*frpy#D?Su>9w%H$lhTU1qB7<
zBql{}+*n2O`gnPyY>UvZzb`}4yuw5fKZ=3Vop{wau^!Wr481NODT})P7dv~qB6#00
zY)m`|sy!dO172<+53Y{@#&`=;Bkem#TyHn5ckBh{1VWa2{d)Kpu2hVVg9npFtYh5<
zyo|yHg?IVb!~~kc_QQ|#35PG9K%jw7s4fzi@n`t^=1gb#O37(3Dk4C}E(;?m2qG(U
zJq-=olRXf$pfO`+V89h?kU2o|eLs)@Vc<&O!|@edcYwKY**R?6;Vx9L5P5k>TsQ>v
zW7a93j)O$i1@Yh054&<FGBYHCpxZXDTw55|mdn7mp?q$fckUR9Z@=2mL7az77)i?f
z_x#SNL+e%ULoZVu6oASNz3cQ?g3O4=_m6u(N$79hw#^80H)qZyDfI@u$A*F!NQlH`
z;Nmik=kF5^T}%OAJUcy&evv{@uEX+IRxZ5;m!?-@<FstJUk0uZU=Y6I*a9slCnwbW
zx1K(o=qmGpJLf04A4WG9@^7#l=}MS)djgpfW+cH3ixUCxs@OSZb|)zz^=(T#-kf-l
znv7!?(z!N(nmALCl#v)k4gwo_tB%`W4__*z?M=a@fu=9G1`Pk}wkcWA^SWSW){9@P
zM$b1!jLFNF(6P&{BmKntE5n>=-G^!qm0rDiwPmlh3nCfu^p`;Ifif@hTsYw`At8ab
zT;hBaa)qxzswRf!=2lkx@<yQHKRmUddjK!H{1LUmu8DtDTYCYy41zS?P<nWHxThby
zWc4vNHa6gOKrwO!85C28zkT~QIQUoz%Cu&@T<mK2pU@9@9q1?d`TM&e_t)NDE-xP$
zSy_07P+m=<_0bawN4R`L=(bP<TnTDX(o|XAn&?4F00=M!-wiRJim6)4^%X84UarW~
z5ATndOAgW?oE5u7gjD_zg`{yUXDB7YDgb8-3k!)6hoIB8u*<ne?Y(dU#i9of9)#bY
z-!(olVQ+8GK>A9*Wy{^*i%<_niJ7axX{_8s5)JX}g75=ikZ5UX@1bT3uE*2w#*G{3
zE64jIv>?a`De34olNK|v7m!f=Kr*Sl9h3u70q9kk*jY%Wn>TOT)QTZP06|Z91M2X~
zAkTzR2$AMZ#+RZxLPB2dh7c^mt7!!?bS)*4sHep+RhjUI^V63Qbl?&V4GadSh?*=0
zf!y4*^CJ?l(ozL71#Vz`Pft(KI{Itrwn=aVO;D^|izKUf!^~41pkN}{`yevm7vxv{
zCP~5f6Iq<|soubVjyPBNXk>FM&;94xuTWGe1X#gsPL6*51dm^$Xl9l)qLqKq*tOTD
z`_*+28sy%Gz)1kjI2;On>9ypELJ9h~xCoX2&B|Dyvnnb#qy~qF1-!h)Eb4@ic0;BM
z`@s6yz)}&d`-B5>)I4wej|W$w2WY-4dg>M2&p=JIE($vmbF0^`h1@z#C1g8Vt}&H7
z%WcgzjyF}ooUi{FSORVF<tYu%!)xf+gf`>r;<*F_)E4j303HZG?m_tegaiPoCPnbq
zO5;#O1_%5Zs15*{7oH0*JmV3}WIgARQ~voJ#g-2Z_VH1K*+Wp^h1i7sg27@#Qz3pN
zv<SY(zH@e-0)2!V&?oU5V&9_ueHztE==#)HO~Ae566^#iMp8)%4h}{r8xBb3^Rh%>
zAe3J=HX`0(M?4RKCg*Zig-0QVd`$i5{5F-Ho13PaTn9}bvoP)78*(rZ9i$y=LGZ)S
zhl6a{m=T|Q<sx_#Ot(^mgp5F(!B_F(FT1*aF7_~FJsc_g8Mutl`H<!Z5G0q0P6P)b
z?Zj)Ov3Ts^%a<>ItC=%;ZrhDFvYB5;iNud{mTHlvp1!Y$|LrZw0qm`!AlyNhI!8Qe
z7^Y{L$*8B@kTDV2Gh8n+fM0`+JBp((LXFsnVI-~+Szb$vWMpLIDo<kL;`*{n;gM2(
zL`;gU8x!B4X^Ed>4axnewe<)RJ0xcrx*jc<y9ORf+k?Uq0<ChE{AbTDzJJ_^_#kZj
zViFBVIxBS$(ob+PDr;cOcfl5cS;JZmx2A8kh{v{sz3hXFMga*o6&^<sJf5Tx=LWZm
zF}(U~<=v+_<o82$iZm!1i7y)x_6z8|M%$U=SNP_LrLrie4O+xVX5OzOBQg+`f)R$|
zqY$*vrcIkxVDSd|M;xm|JAteA!Q~_625@B_<O#Y;6yVvEYe1@zbfN$dppO6-ZNgdu
zBgIrB&=UOKVYfNIk$FJH#tcXgxc<HjFNSErT1=)V9qnCI!Ont*LS2t{>3F5Q@q8fh
z`c-ec!wkHm@$9185ljtVI;G2;beS48UiI0?$Oxl>1?X<~!i|#n54pIw0Ft1F`G^6r
zXSSoj{;7F2k9XM3YpnNwL#0WKiGamO{lr_T?!1NfLCx{zx$DHEjyI2wrM4<xM%g(X
zpvX={k+}4<K*a$55ye84MLOev3<e@tqAeV+Q@o+JrRA73&!%t#6-jjCik&XM0oL$|
z4@h+)EavC$o9N*%-+pSXWu@`fncYMk7{qL959$dp*id-}aupV0eNk_PHGw9P1xWya
z&?Aq5-y~D(f3N)D*_n5=t|Lk(5q(<~_E}gA*z7?bxY~5Ich?(;MF9hj@t#DW0CoZl
z#&)Eklva2FVhuVzxI2fhVA@e@<ZY(i&Mko|0^UvEs85~C3sA%Gy~`AT0Oia!TzB^w
zeiCywY!6VN1A!Sh1H%Hd^YeqA8rs^9A#=c%>K`4IJ6*oc%WDZ!*T|yy0hSOZFemk6
zYpWisyz96bOcX<IrqH}cMpD_;+j$S#6jUHiCeK#Y)oCmmR50#s(HA|Vt*s4x6sx$U
z7V==El?(76L-l8iA?jHHlqzZg-V{-x=*fd9`CVIE8#pd8u_lFj8Wyqlsro<g8|hd8
zxXIO~fpAhS2z{{0!E$3GqfNp_21zO#$&zSdcln12Nk}{gdK%Z^9R;z`)AKs(hNwQF
zi^eYR)hI(td17KB&7^~^?cj&(9@y-1P&jiyZY^+d4N!Yj5^TQW^-kn9;gP-;yt(=L
znc#fDRACdw>@?g<7PWas@EIs1q-ckflpgmW;X<YMGic6UM1PXK@+(??T?2y;*!zIp
zDZ9rkz{w#wXvU;ss20eg9-t;&AusPcS5cw>eFV+}IR)xsIY9I%{(B?Oh#O&j3J-wT
zH3j$OEB*4ti`Ev*k6`rUI;FuT=l%if0IK9$`EIicQB>*yI}J~W^$FLoP)a9>qgoH0
z3NcT5F+LvYCm}6DSK@6_O&e%dcw?r46u1Vjx$pUiYbltf3FHIwAepB9YnQt@gOo5A
z<1|1YE=Eg9xvN7G#SZXZPYm-jWK^Pgj%*=|x(>g78-j)<Q}>YV2Onw1pUgge5Jp4q
zq@q2)u&{Rh76+(6<6N-2cr{`_;E)iqD16-)Je8*G4p+ojI1I33Jyc8rwu!_$F{S^{
zJvhK};<g~U-P6(h@#71W<L&lk!e<E!3zLgp0ybd5ArZ)!CiT(&ZV9p$;g#OIo%56*
z<5w&m&_M^zG*~2bt=RiJ!C&Cl0Bs3zfMq^b4fK`qZ?xE-!mjN#aU<-qG%2_q{}kN~
zkkmgyG`Wc5Nji%zTRgXiE5N{sgq?4}s-}|;x5BK5R-=V7ZKCA!`@1xJG~sqi1A?=B
z+Hc*s0c7@(Py!$Yjyp!UcF_08bSX@8Pz?p`<c1K3Xw~`rlA>qoK;@lxW5;k;o40QL
z*4@oXypkxMaY_8+tS`9`$H8E~oqgT0P-4u^%q-0PDDjmBZbFM;&Ldx$$7g_ZNxBR;
z+z~bkapbppl_=yIxOxFz(&2_xPxrr~J$raG9q6SW8mN|~Rd>K<62m{SIbqD?qWb~w
zCGT(Cu;IS2a4hb0g`j$R=pXA$5*pv(g|~uk8XT3OFYKP{1?Yh$WS*&2_?kGR(PU9!
zn?+6@Mw$rR3tN;*1;>pubKXARC`!jQVwypml7{jH-sVBxi{|DnNbol9I3yt{Nm-hN
z(ASHc1#GyKU9XD!z(Fjh1@b*2M0p?I@h46Lz~~6OR#;@dMM10+__J{l^@)rWZOAp0
zm6ge&ZeVxKLwf{|&|=b(bxP57zL+Tfh??X2o>zT*pzR|@hA$jLF*thHnL}5|DOQ_q
z#|Oh_Jq>z*NZG&JoIigVRUT<+>1DHU5BbL|Hh{yVUbik-+68Gv1H0LQ_=gY8@vwc}
z^>CmOg8G3zilUUjt$<*&cu&9d_t<=KM_LRVyV=_cVZ+`IvN8ay+1c6QOaY9zfYbQ)
z{>cu~opJp95`^9C-_M>u|7~dK_=7|1XTni%y0m;3Y5(5Ev^=sfH*{PSJatCbL&1FG
zBErwOLWq-@5NLCCb#*f4)WN|)WD!U1$w;DbY!UAM4H=#r>>bOz(fbMKskIZfbH6Xl
zFrj>Pc0raAgWYGC79fE+ZfHnd`W`(ms*A@0Z7u*vpFejr!>Iks7vfk+k_yYeyR`g>
zr=(G_`*Fhn!Z`rtc})t8cUj`>1Q5wwL2L!jpKAqB^h_d+z`$-alnd?Mt7ie1a|~}8
z+vgod)UPXbz>axBO-Tv)M-^Bo3>0?It1Myo^5qM5@nK{|q{Di^*Db#~S;Wj5?v-j`
zZBdzBW~=z={)9L1v))0M|Ew%A*c&M&uncdn04f83lMS2BFo~RuJuSo>1B9muUJJbS
zY>5x_0w+(N1X)!Vu``Brn2b_7Dg!ivCdefuhmDPmQmH~hLcq9h8M8$XjMo!GU{;Zn
z_saL8^2{dhIsbs-DohleHqLlxl$TC`Y}eP<pP^mO@O4E0*}^3M34kIzkmapx_@~I=
z)TARZdWHeq+5r>~?0~6Z5|AAzdWEBqBcnHqU1C-frA>N!`x@)vMqKS|O;k3>TzJr-
zOpL+o1{;BNNr3cVBQrBIYF|HofZweIZO&bM`VG}g;2!tS4Gj%Y79(c@;`z@yX>O*c
zw}bcDu?5v3^@?Mth8Uv8Otr<%tLfv%6Qs(W5)v+;!eGU-sX*Wm(l?@*@u>Lft{tb=
zHjm?NA`9AivQR=yOvj6u#fHs>0;7<3?{7d5;L`Z_>u6{KCRhb4OQ>+`%RnTUxz`>y
zQUm^#R80CVBeb}<hzN5ha=i51fedp{{@vZgL8)NSK^W}C?j%={6YJXr#0nHWl&OY*
ziKH5A3kFi?kukH=JBc!(979ZvMe8km!Gn@#AOo<(aEnQ#&|{{i1X|UMlj7b?--KSu
zujBG4Ucs4^{{{VUCS%vFZe{msKSoHMo0}_fpAqA1%X#)J;$<XmqpkG}awAF($qL1E
z1dxz-M!)ncovlDqBD#gidwG&EGvF>f5w&5D{lI8Ixxd=<QjS_-$;_+5HhOPl2Jhnj
zk|!y7UR?_*6y#5NR?UZq+fX?DZ?sW4Fut`vi?I_0&_6u_cp})LJisOF0yrqVR8UG<
zI<k!rD}wK%7;}Wk)B*V$7CX@X0t(cAG%T-}cZ#yX&DHeI*<(Kfg59=H_w##)AWQHQ
zrsBQ%mazLCBXb-O_w{R{tOX%p!lqhg-o{k_-PrEj$o7X%r)6bjtv<O6u>lYBv%%Kh
z9<mT7@Gc<TL7u+d_as<m8ngLJk@Qk?6oh2?T>6Nl1B>x>o30k%MHPDFdmoaDBVZKr
zE@SuMkbGYrR8p!~iXT=%#6~wr*OTtQHOQ`~|9Uu;HMoJYvNB{`;8emQ@uDdU6H)q%
ziHUi}rhXD@pi5Fc{OADU`!ghL5^Y!>(B}8Stq=iCg$L_!H1WX$B(;;kk|1t&*3m*$
z!z|+>+OzJfV6d0is#U9yEwMi4-0}POZ%|G1gG@2vR@=SW1?QEC7gQSgZ}8)ofmlZq
z+x2sy>+Wv-n!9^apV6y_UQQmraTnDeXmrok#m*qMVw~@AW-ZV+goqdoR1veG^6E9#
z03}dcux#j8vH229TA>TUouV$mfAn!Mz5vJw2mX;SF<7KCnS>Ho4<P%;vypm;J;%VS
zVfif^0tC>JcS;4TUcUeqGT%d3N|%8O6(Tmu>~%;wzZ%70gbTpL)NqR+k`MCfn<^hT
z+ZRy20JSy#O?xr$U3=N5PnU5h3{s0trI9?Ho?rx;^o)#=HRC~j=K!z@u&bBT!%(LG
z+zAs4i|c5Iq^r_*lnBSi;SVWGE&|L|FTSg-t$q9U5Xqzhn`sFl7$pxv8sU|mm*<G$
z4tDMjuqNJ_SdY+<`P;vL{`~pt*X^fgK?l7@d4iDF0%ffZ7RMt+KIS}%O$O~R9})aW
zl{f!M7QHK<gWJIBBUb3W%CtnR#Me5TsGnox*C}sm(jmnU;I<G8CVu|(&lGQX{Tf*e
z8`7PGMLJcu)8b-8DjQ_b5HO5?-)!Lr@(Du)o&s!w=VwyT83yGAi(c<g5i9xBsc9H%
z8X<5D`lq9R)?@3x>v4yOZMsV#ms61QP?lu)`1rs=J7U6>yL!z5Ef76ckEsG(Y!W#s
zgUlN3z5D8DkLQ>n0aHg-7#+Dm)epDy2)-J8Z<;|i0pKn<5hVif&wctP*vJ%PPY4-O
zNk?y{1#Wx&lo41{>@0_?NB|M1np=$tR86dtcL?V{K*^L=1Ln=l?9yMuQoun+!#n(9
ze9RUX&U<4p4(ckFT%{1h9%^Ft{Xp9M)6o*&4J(p&V`Q0L%{4OSi0DjoF(6_FWhx?v
zCwfY88YCIl7sOV?4#AQJSeY~a2EMA=6ijzteQLMhnzd{7(P@d40c7g9^D~0KWRD{%
zG{k4ezniMGgAkKKmu47>zPm{fh)Tw?ARn<1LJzfJ5qL3_9A)5a#?c4@<ol+rthP2C
zU=xJL*HY194kQ~oNc!+6grMGi&m&M8s0e&RS_*D?b+9Rj+<`rHNT!L~pZf7_ivL9J
zAY7{4izj$29A{=i+>`gvzY)Q-AE|Y&@~>XnbQuX=dVV;+(a}*niQSKUtOjTR@@XQG
zK_U$}&4U+QM+=YvX~PgWGX${JW9`^({^0gddbEY%;~p+K1$Ul>gm>`s%Y8k{+phq=
zy?{|cq70R_G4gz_QegY(RYV=XbpAhaVgIYwulvYKCYI2Su+jhMeT6HbOP8FTEjH|6
z-oS!`B|pD_OJ$KL1qz!1t%M3AG)ad@@gPQu(;h#5jQT%Ob%1sM{B_C6X%vDeyrvm`
zr9@OQj2C}%7ZM;IH7@>6n`Ps!q5j9Xy~Dl%wZcvsBg`tR;bggohoPrCc$2X)Fo3(@
z#fy(0KT;{wqw)-jkS~b+-P^Zs+u?a=z<Ut;2bhf_*ae345R8MNrwPFRC^qILr>yL3
zE7WpeYqAJS!7k&;qPPkYvfG(Hh@dZDUIxFLyOfDaJ9uua$hLn2L+O$mil+rjgc2Tw
z6#o}5;9XEFQn##F<p+ld985l~327kq7hc^A=3<n$C8N*;4?`RV(f3Iea@be2@%&O!
zZdi(O>8j37`C>VU;l_Ud22~D+8BKA2998d`cf=+gA4mNcmB_sAMWWNeHQCkjc|k#?
zmlkS6%O#{>@_*l#!nR)L9whj=JI<(r7x4s{mH5om-27qsyCw}i71>R>2uV1IFdLQx
zFZr&G7ndXK0v7@VTOCZoa#fC^SsqZ2sQP)#iWkel@esC!Am67ML%Q}HHL>8g+_xJV
zw9LcjZ{sw&tKF$VTlbA3d-_P0foJU-8L2TOaGwH|(m(kdiG4FGt4CiIQ-QjB_bUol
zR|wi!RNrsv4LSJT{dy?eR%&W0cBulD6B73ejf(CQ?vzIwee(0CFaqKHnKL`Qr$e$7
zPZxm{hbMpw06Z~p_aGb@7%YI=-O}f%c$X$%Squ2XkBO=H8B}cFv=M<3MnT9Q(LG7?
zkA;!AK4K^Jo~oGG0uu^W=00=g3_~7;x_UJ#SubC{JU<}l;OMw8=q@X&4)Xxg{Dv<^
z-0t~y2em}FBj=%}>s!{9!-dk1;tt?Aj-&nw4D$7xE;3r6N>pm01EET?#?bUAV76Ct
z`PS`C@7^tkc#@p&pSY5}iR7&mx;9Duyk!j3bf^&{ku8LVvGA~pY{ZD|kuzBR9II2O
zw6je2KV+*$tV8*LgF*#v#_%?HQTQzDj_12%WQ>yQae2?S$2b%ccopgBVb#^%<u5=+
z&R-`E8bv|f-2;+7urVzNOoXOZVMn)@N>h?5x_3a*3N0@a{zt_Xv^1$W3nUpK4rCjU
zLk0gCn;;L*Aub){WqIKSqg$Xg*sMZ^y*7bGCiXf^_~$QGWH9(oVNns<-ULYN>!Ot0
zd-JOZ8ZrHZxoMQF>S6=D>q7{x4+q5@fFIUc)X&b#OUGQ)?t94atq^@;Q*+EJ6XT8@
z52YT@ytRB+T+IJ@dFjNBA^nq<iy#UQnvdUAL2;lHz`Yp}lgG5RcaG4(U<GKXsc&Tl
zL0lRcNyKGVu=+ZC>75!jGc!L2BF0@SDJhk=@d9MSvk&75Kq;-RiR|cki5Rb?)qswW
ztKzu~T2LFbgDV_!jF)juER>~U<h!4q*K`ut>-h5R$pNY;m^e60LRJudh7Y(7D~$9b
zY8{x~uGE`1Z#K1_u~N^;I9Vhx#iz6#srx}$Iecru>Kbi8G!*X$nWX6;_`4=h-zZpU
z!1a^!Gf_(OArsGr4h&01pvhvn*49=a7c5j!VOTYJzsh3mIx4EB#lGhbL!tBg8-Lt^
zLq?GCa?piY!udKmIv#-^S-w$sPGmzK;G5sGoSB1{h3{p6n2*Gjj06w$4wL7$`wc_6
zBh8h#LS?*DXac#XnkM?HEl!={G(AK}_n^ao`>S54pPmKmNrLDMgfq@-d7wb0_=<L1
zWC6|ENJsM!Vt{tuwbj0P^AOb_gsD?!4WCZJ5by(Q5PS;kxUcAk$iilYm+#Dkb!Hnw
z4tAUT(!8!!)i!ISI~0Th5+a+o{69#+u^_zEEiGflAI|{x=KeAm*J0aq`{vEr!9%@r
zl^fSzXhz-)4xPVJ022I%4<CB-3nJ(ysoudXrI)x%fMYgkr^6-ncmM#iopa!OGqKPh
z^0IPr=t(u7@zRKU2LX%9PI=qA%E~8*mhj;GCkvl@&)C`8et;Sy*2nnG0Q>>iI^xbv
zqiR}E5jC*VL(47xeUNBY2)J?k_U+U|K(}VQd3gH4?tCoE&SjuP$$0j`R#Z9V6A~_b
z{Pd}My}$$$rmBWfCLaz<Prsl}Xss|0kFaZSGC>;gpi@}403o3O8t%S>NytD8;`AS#
zB{-0{4b%@Un~bHYl410Qu+CKkv;OocgQz*;YGtHIr}E26_E~Rl(kj+%tgPx`e8|1F
zFELk?to^Tk+<k9g*(&d!IXO9Yt(KtE_7Xf1iYY_^0NxNDX$?=3E-GdBTD7*14_bp>
zHeP(a;W!U3!W=dZ3yxTTjvCmx&m3*@8u7qnOBtMW+0|2;c!klIXhiA8{S>5mhnBtL
z9c((#r;soA!6%f8L*8>w-xb>xJh57Ykk#~waSP*Qk|12cM=9%cY{_LFfmrCVhbZ2Y
z9wh}ILNb|G8yvjB++E1^i9DN5teK{(D|BhxI^gZ`X5hjvySOldt}kUYIDWjP4Tbwk
z(9*bL*MU0Lg^T;Q;8kZ}M<Ej9z+#K@=LJboI638uH9`2K9D}O+=dTbGYV5Ni(1Cav
z(bwMhLYp=YL<96Dj}-?02PP)1nb6*`?<}=*blho>b>GQB@OxL}N^VPXhajWK>HA$H
z=r5Fko@tUdz`<>0V0a)7Zv+r`?W~#~jPWzdo_qTipL7JO1l+i>&XwJamJ4oR{32n#
z3Ks20SQw4I#1_)o5owYaN+F<dp+COK$RCPMnvL~7;ZqZk#OLMbM@rWrxeBx&8H43K
ze$1C3S$Ui_GJpGz6sO}C%Swl8?Wn~p1b=7(ZuIRCbHABpXMbW`*lHjr*lOuheioI3
z-wGFCQ*Bs-jHu?z`S^3JNQ=k2D|(1Fh=}~eBFUfEE9SiLez7`U6Se!0S?qF`%Aa+_
z&uM>A0XD_}nFhH5B%9$P*(x+M|BJmh52w0)-$qw+nxhgWm6<|PN~T1{kRek-8A2s<
zSfY|LWhNq&At7Z*N~k1L$dD!}nI%&)B=&i)RZsoickg5GzxH46I=;vAJl|ri&$@?e
zIIr_MFN)KVd9I#qU-??ShkvDsMvNikG(LCn9G?n>lG1_Pqw?H)@8)AY!H-Bw?^ZOs
z6gt}3DScHF34MjQ83yt`+K}gX;3Qu|fC3`|)NbL`#S>4m^m9_`B_PNLGSA#<d7v-Y
z5Kt!hne?!SzE44NaY9Gfy|)6K9MQXV=06B6Zh>hM`!EAR!fPVte&lRXuFm7A=z{p3
zJDfd2P7g3(#ffu6gi+?QSpz;3d2)D4wY(+Rfe7jWEO`E!%wvQ|kv*RGeV$F~R!+ZK
z*cg~N7Ze{*)k*t;8#(mjN94L!S>q(^!IcV6xpwV6Fl6&1-_b&OP&yb6oCtbYNu8ZK
zLr6tywxD#8Rx{sR%+(M9*ue#$`8K19VH!+r1b?iKp$KJvB))(rNQ;vAbpTJeJGfIj
zYu;s}QdASYUBRldS-yx1s8n*z7yt?&%!fU;Ml(g`=OKuS%fx!80-;CozZ{lZkuWDG
z>cFzwXv{on!@m@81~42_znRW6Qy+cv9zP4$lS$PFrhXrNuuioIA}Zt*a4($h4`R6i
zF{X3iT0}+REbA19*W<2zslHH=sv>3WBv-@*xQ7dIg&S&blui!Bo=&2<FYyfkO6D@^
z1#yjqEVDj-4Ts3CsZPy^)5YeC#IyNj3Fm!O9m?ZWqm_e|*8h^ip%M^X#4Pv$qecqy
zg<5yc_8JOl{VXESC0&K98;}*GYP|D!T}f3{IxIMK_qAB?*)owUef|Z9M~`mCWx?dx
ze`P)2_T_eWeyQAqxksRaUbuSwb!=>zr@%_B6#ar#bbQFx@CGIpY4(@(7kPK?bS7E*
zsml+>t;-$9Km~BTb4U82x9S-zn+DG<K}LvclXOsC;=Xmc!VsVz7D48Q#0?CpDk-lq
z+%MVq3zukw44HZZSd0`i!BptZh^X~>IMMce@!KxAh~5OZ!vfJ2Q4B|Zr5g3&EFy_B
zga%YlkUGwv+)<LwNX?Dw-S&L_(uos9Scr!`d8F*JpC6zM(C0E8l^-PiVg>T~nlI8%
z9ZsVmN$KXt8XOOdP04E2Dr#+fiO<mj0btyk#CV#1u-1e!iVb{sbW6XSw{HZhFekS~
z+Vh!Yz~6I^EJL}h?mFixo_=q0wmr__QL1_t57*ABiY=FG!XujhaDYLZ<dcxcZFyW+
zh$s1OWx4I?+VWNRs~?`tH3ao9Px=8t3#7Nvnj}qbgo?#GAPGZNxHrIUHBW)qLyQ25
zTX_vg$Ex+~Gepg;U)9#u4(>OLtVgiRMxB}VKyV$t{oGPx@XzvkC+0epDS`AGcJ_%D
zYCgaMQZrW=0M<imh1~3N)gG|AQjFBf7wVz+3UbnU^|2`Oz*5Q2MlB$N(9z0~pG~3e
zA@FkcyhYth7`R0%ym4_CADEwp$OXy48iv#G8Jp$(E_;UvnZr#m)#o5YLh_{BY|>LG
zD3Z9T^_bo38+`2oxalq9_cu<jo29}EI|Tm|aRyQQXw?F&O#1e*8-;#nGuMH5;5~Z_
zMX>;OM9}(hy+&=o_0#q|mCv8cBaW4jSl?RRrzj{AvT5uYLS-%o7IB_~Y32wpzv)&@
z$&&nDb?H34PBJ|TeMNfU0-nna4-9-sWa36_U@1(?1vpkE*-Z?aPq0iK&lcIZ5m3$i
zNxNv1rs*VQU<o3=^gCd|<2te%>xfo_EHw>7^JHnggGezOb3QRVo}J-6j(#mC<pdPF
zcR}7Y?iA`aAuJZZ0+I5V!`&-u6|24|*@`-MF(7~@eSxteI3mPm0KAiPdJzDF*vTBz
zGKKB+dvKj8c{8|#XSGtw8e9*owtIbv;icXIGz9eS$q+25=dt~cg#F!<5|m`g44}AW
z@2F1^o;l6W3eCT<T~M0}90HZ)Oi$Y{?h6rZ99%9D8Qd&CBgKxsWF-d{-jd<5G26yl
zA#OULN7d9FA9iR2G4z=Stc|!T6ma;W?pqU$Q`zlBLvWC6Nt<1q7_(QNwCv|pwii=!
zf1_vLtPvmSZDxAxScBddBBunb0yTI5Oy3_#;>)`PBC7x(e$Zm6qngc}U^%lzwg{1i
zb68p*d@~q+pBJ_t=6+tl1yyB|luR!qIn$BK^|wUo&!XQ@%D{`uQ=lU`F3yNFEcyvB
zGc(tpCoac}GY`{g<9gGPihw7Yj@}o<kw{FGfpIl$Z)F2yym6z95&x=GT(qiEc~~Ix
zNjn$?{7)+@4w)!4Ia0rlRGw&uh{x@38mVe*Zx!}feF71vy$Niun;D2CdzMR21#h=h
zdp4E`1BJZN&)2u$^k-Svi`*wj0s0(qy03jrF#<0yvOvShDMa;#^}w|chG4`M9S(M}
zK!T`z3E>MuO+CwNB2VrZtM7yWOMx8^Pb%U>h}`x9COeb`Kif;Rk(Y$BY?`nKgXSmT
zJrUD%iF2^@+AirB+YL@=__=xj5uZCck~1QNT2TVSx95`DU$oS5QD%EOk!J<`hj4QP
z;z~G^Ui(}i{*_Q`3sv6X+CoBsE&9U<f`%U_jcl<R;eW^JYdXw!OKSndHSH$u9~^t-
zdaO!L%xVp#q*)G`%_mPi1A{fMHPluB$~x$GuU)VXv6J+}l?9&D`99gLye_^iEiHLS
zCqzIhnq49Ht$SHLrgM0Ict18e8u7DwvPI2i3A<DwYESkH@_>)bmZ=Y}$bzS@Tz<2f
zzpPn-+ZUR}TciU>AD-eVlnmZ&<H)<9fHCGmMc3{774o@_4^Ldo@LWdEbd-3I5fD)l
z1yH1cDZ3@B$y?Y#e5MIHI8IAnqZ)ha0Yyc!L<hIt%$bxyaB?5lf5yc?ObAHk(f!>}
zY;j_%#m#zzs+;**PFKtJ`KX08HcY(4?xR36|J#N5_;}>L&IP!q${&!+Aol>PxUQxf
zfFfh^q_VxU^M)PP;cjbF@hg6%@3YPQYbxODGqox&pqUDMD^FMTvly$8{ES2_K6@={
zzPwMVZX)as(hn3fd&lT)Sj6;e=r=rgJ1YrSo+PSL^)RaC%(50e&z?RleE~v*3j&tj
z%hUrAH@3OE|Acq$e{=69VhH60{Z+T6*F?#3C!7D+msS@#rm*2caI~dUJQ7%*BuZ6f
zrE*Gn<Jf7Gzk5^VH(U?SIzP$Zn~%iHcotGauLm8C8Wsv}Lv0t4{tI;+IWEh6Z|SQy
z1rDkAqcL^YN%9aJ#N48Xi&)={q=VrPSo&5g&*sfXBYZxve*<+3h*Hy@L5kE1cug}4
z<+GDS#D7i;!~q1P-LRCFyTp%e97z=EnLy+}_lM`;r*l&+Q{AV{wT)@nUr{z%4|-!Y
zNW~!T;Q99HuVCjiCaW-WWg~_nEGcZ6-Kp)EVTUxhi2;Vh4zQs}ScV)Zeu=A0da5sr
zVSX{TV;jys;$=Q315~LQht{Ejr|FTrkMEA(l`D}}(fIs6$2u0hsuBj>`Q(nYWB@c#
zs|auJ=orOuI^I{3Yj%aVXm$pG?}}7;LyzRzcat;gKcjTyfXK3`_A}^K?M?DWV?m{E
z3FqVcb*{+lka5xF;Rv10$oO_@cySps#|_;B|JVSe8nElRZm?Nw*#t`5ZNZXvXi})Q
zH`Ld+x;FeWWdpm4)VX0FP>GCJl8u-f;@+aOBljf&F~YJy#R_ObF_z%wx{#mwKX>FF
zDCkR8J;ckrXw8=6;EfFGl>f363M7<8oCCN^(rb4%pRg!EMIarz2*fc(MLWmhfcd30
zGB-eF9G{q|2)YK)W5_8itr|R+@>&bPQS$=!14v;!;z5QfP260wa^({$+Sl+pcGE%X
zYEF&=LWA#*b{wyhv3!^h-(IHcH44H(PvaabOs-Hcig5ry(SN>rE414beL>v>mfZ=<
zIB5v%WgIenxmBnU1tFssI+qcvc*3hNthYBEHA>{_<*UY^aMRcVd{w>;LGpnXZRMAZ
zNbJz_h@l`WxQ?3SZjBDwA)IH7ZExBao{3JAkLPerBEVmhiXRT?WzO{ouZhC|bcfi~
zd2a6R>5EA_09X9IU9A*Z2cN{VcOhTYJ39lm7Qx6wBrX^4>Jv!B2rQ?0hR5MlZw*k+
zAkxnhEI0mn7KOTK!GcR7tnVyTRRcb>YNc#J=4vlnCK~B+#fJAi@~T&_k45kvl>Nr5
z**CI!6~FdzK*R8^+ca1=yCk|;moJgW5d`Dg5hI06ysA5peVu@d0wSSK^)QoCOlfNG
zO2>Dgj(Y46QRivM5P8g7{Cde4*qMat+W6M=BIpFwhpLt&r29;5%E`~CcOI<e8XZ*8
zq~6^B_RX7eqZU|y{*}?KmvgjLU<&nO?Fx!BPVvvvBfT##%#Rje7QyCOX4dkaQ~a6U
zs`pQSDO>94IfI)z-{!Iq>FX9BSxyREHP^-MT%+V9%-jx_5}jo55PQpAm-c6)?+y;n
zEK(`uEz|Ym^=X^@Z4G38?fC)j%Xs~ByP_jQI>TJv)z<-?t67oJm9ESCBsPgNvCT%?
zDJXiB@!9Q1VsrMxL*|9x<N%60Xc)xB+{mNy95q$3RGe#9MZ<4b9?mFyD|-*TmviaF
zqSwttD}mq*nFg!7+K<B{5OM-YKe&b+YDHgb_2p!!A2C-D&x%UedeG}+#JDG?V%md3
zrj#^&Y_&y-Q9;>pS~D$Db&vJpyND@Mx8~O$S;Mb=Ifk&aC|+qA%dc^IAoU&^ZRAVa
zCaiuK8U2?4O9&;lkj8ObXxMODlQ%ri+ON1$=jr(@poRvyfw3lXkR!AVX4`4Ac#skC
z>rPryo1^z;-@Er}fUn`p=Cc4m`dW);RGS_Gtfun<;FC6Vy`u!;GIUmibpi4P7bH>9
z3rM^F_`q%1l)a8Mn&8s-W>Excnmd^GcWDB~R5kJfyVY|kyVT+1i{>`TJI!0P>ay)A
zyld#P1qWtPls0GW2MsRwB}xh>xgvjD&HuplvwIDAlQmYyuh|Rb0?SsGjP&>S|7@f|
zjlo4bo3+X16&xZVn3b0+#z`S!+I1@gML*ED95H>e==JOp&r`rg;i!?mv0lxsfs_d9
ztH@m-WV}jI1W|m1w7Bwf9qNVPIBCx#(Z|F<O8X9+Cv0l80)PiuUP_5*Pjwb^Yrt7q
zEz6syD#H^LIe(=e7qCSn#v@gMlAe593k)I<q0M|fwFYaA14GVEF<sZo#3X`ba6Z5l
z5;;9Qg6bNs5hj#MVg6CjN%gUw9fKe1($@ZLzck2z1cMX{%#T(gg{Y7_3|od|KlK}T
z&g<C}udFLb7fPCgjc&pkyz9h%3R;(6XdBkF{M5IrqD8v@^9W*)MK7m40a_~`e*n<y
z;lmWL<v&#oHC{!+gG`~r;ZA^YCihr>*KzIJ+DhLl;Qy~4tPBpV_?noNHGsfY?Ye|j
zf*}xj^tQf%02%P-g`9zi7{IUDac<<ZpZ98$3L$Ztuk-S)irbU_Fm1yN#TU4`jR)rB
z%q4k%UD>{U`<f0!Gbn)rdbn<Po>Gcy@y~C2LMRN;mKq9<Xz0t^g=f8k?L=)F^dW0g
z)1hb-mcH0O7ZZrDao9Xi!o#E8(SmR41kU{IIdg!}2#p+6)(^dcP7fT&bX2Z<#CQh+
zCV#DHb?4Z*^9OdKR}qLxscs|Skx>pw406E=B92P_)_^v6(x{_=0B|Eql6rhmjL-dv
z$x)k=T(5!KAq6}2;lZY{wk5Wkpq{6947N?yLHx>xgJ7|NeN#|S@b>-t#nhdk_Sps^
zY9``H=q&>Wynev>@G-F2kUv3YD*eNk)iTNiF(pNGw40$G4$z5ZfAp%bc<$(CCdH%h
z9MTv<^7JP{F*=l~Nr_|Sjt&aUF?4jyt>K?DPY(zBU`?S;Lv+2Gl5h7a6McRCihvu6
ztofp7`TkNym^+duZxqh7jp!K~R`DD%igbh}*|qqtS)@*jqqFmxc+@~s&imBGKHH+z
z2No|GK~Qs7Pvqq2tJzy77%?VJ)v7Wz8QVJ9;&{E5lxxLWk20bf`U**6cqb^!W;Olj
zyHZYq_pW|}>}d^ww?pGUC<$aGo&+pno$4RDX97Mbd`~hcmOl9_)~$2bIff0B)e6#i
zaN5*KG7>C=63gHTavjURm!eFDTI9EZfvnap<b)%lAOoS!2d>Lg(GX!<5EqD04Ei$K
z_7rRQZ)z(_I30+%X6-lb;;E$>xTEh9nL4sA6m9|dPP>yE&FlC|#Iq8OV{%C1v}nVe
zo9kc3OBaLeKIytVnnzn~@oN4gqq?+a2IMj@MmdLxjtN3lWiZ#N+b2E3tGB0LgO`qQ
z(Mb(bJJ_i3+;#Xa)e+7W`$sg&i{B$fX?$5Lp+10U8xUKFdWiEv!FB7dwXs6~J9vWE
zDY+5OR{G(NxEo|Wm$Hb+NoNU$J?rgku1yDZ?jFuC!k(s`nDKlc6i25^2vpFr7K(kQ
zP;MTxwKYDp?>(72i5ro7;aEi#st}czKW{Df_+-P1CUfSPS64|xQ_zbl?em4<3Lm1g
z1{>bIeVf<#0Pl<C0;0myMfoy|6`EgK07g)3i}<j}WT#nu<%<`DxjNtCK@|`xgth==
zc6EGnfa;MEJXhy=j9cUpA{=#KCbcm;ss{5wlx=!R+OKRf+mjEEGBD9da}<*eX6JJu
zz|>nG3kD^T^z+!9tm=ZuQohSzzS?PGFcGkjnQKm`0q%e@)q6QRA3`7a{64fb@TLQ0
zOVfJILFAU^*i`)7;?m{x%~BS@opf&}hT`39z}2$=MzwjHBe!LvbwkQa5HTV;ajnU8
zZ18HG;^6~(BzW-lOuqT}?nrofg^nV=0HjM`s^kmQNHSCe$tc&2xT#lnLCTuO2PltV
z?>s^CL<RlUH-}%7PH_*#`#%{PM^o=d%-&*E9=xeHZ}=W=BYjhj0slAD#HOIv15P`S
zYznLuHFrZFVvOb;s5ODxMfeA&a?lThYX1_IFg*fo@0k$UzIp72xqUnC&al$!o)Lhd
z(mN2$5bO}?(7QKp7M6rp48((kKzI@xH*PGF0$BtQ_ID@*LwaQD{z^rOiP5w0-q6S@
z*eK-mx>w<Qg^+W!sAE%bkI`r@jUPctG856?2Fe>2NnmC4TNtGlY#Uq%hZYq<H>lD1
zH6O>ImbTRP2Yjvv`f{pgbyh_U;1@)eVqmtJ(<R*da>Ii$B%6FlvBCL(S&J5Ty6wz-
zWY4Ul2>HU75#Su;V4fxUSz2~^$StFDD}WIb<Jkw-##QrVx+#3x0N}xGSPGC&k>Z8#
zo=f6(>?{eOdtN6gF|o79L+}p0k>%?`gLG5XZu$5qN<?4NiK?qu$ChqtYnv4aqDs}C
zv?4!|pWd?&px5&Sgb5u*TO2hXv-I{B@eccff)qB%KWwg3990yvOM$r|lx25ZGnBxx
zz)h!k`J&cf*HE{!;|i&T2_7%sHwt@m#m`Tq@FFxqO#-o(i(j(n+Dn5djN~voU?Hbh
zb+c&WLIwtX6vU}gz{N9KUmA0OGDM)w=v4(gLKH31e@e*RAgv<_7#gj(F8Qc>2?BFZ
z$MX`mDn5L}`eg>#acwX3DK5kC>s9O4*<dd6nH-c`SJDiXj5<JN;JZnJtHse>SM3iK
z+5N|@Lmem4O0;v+oE<M4F5C8_>mJpNh?MFl5b`c<Zr1e$wtNQg2H5I1J;iXtI2dbD
z&}=D0;0Y)IeE_K7F>cs^nuK#)^qMc>pcTX^0xZf~EOH<*b0}2558V15cw}9dKFDhn
zhP%GnW!rJn{Nxbdp^U548;uvNw$|T*7$DUV`z#J(WQ`6$*YM!2eXGip97NmP7b3V;
zD}Q5Pd>D(5qDH=RzrimkdE}vqh?8lV@EnTjH7IoX?+1nUV#)*M)D3;GhHwUKY-~x1
zY@MWI=UZe|z&;q=c5~E8wt|SZ1m*cI6u`{=h{o)&)dxhr(_VV^%pUjm<E;sw4#?GY
zy|u+}-n;?LzkF__s$5y~3vlX+(n(`+Yts_fQ3jA?!fp-y=!p7(jV0j_eXZL-ZzW0x
z5IxO&IA5hy$Bj$0;e8;`@wG|YQ%z&p9QUg+##CNMF0No1ZrAUcGigXPRGd;qR5rRc
z42M*{Kozx7aeP0Pf-`<WT&jvnN<zfm`)23GIXTU+4&okdTZ~w@TLe@~_^a=L{t<q#
zd+u_ZZkI@PCv1$|>|J~I5D8oarQ$=o*w3q8&O=W<XBY~*rTSi6OpXZW%#QM*#e)Ne
zWcU^pR}Hob!!pNk))0yllMJ_nvX{1O3M+9AV3J{M477OSVNuYgk&0S|z2_N}n(&uQ
zm*c6!>qL*=1)>9Vbm<0(T?A!teh<V34gu=u+fYA+uU=Tfi}gGK+cF%;?_fEkV~pb3
zN!UM>b%FC7d-_B@5`s&>1;7-h?nbEE-t10=+!uLm++<dR%(#EJ{<K)Mxg>%ZWHn1&
z!t|x)bR9y`yc@iq$(#k^y8%Y!@@?u6A;k^ok!+S~f)hnG^;E(I)p?6AWMpQV+dqIa
znM^n1)^C|odiJSo+EQlAL<xEsc%?2Nyr<5~yAa9p0~VxDx0po(o#oLzliiW%nb`Qq
z!_j*<2~F6mf9>IGy$8om7W3&sI8z4;bMuajO)ihUEk1;U3j?&D@E49$nzL*xyokUn
zzOHU3GOsK)7L_BBsFM;>svDY@64_ReS`C&iFy~AM8g9^Fd`-gD9=IwYex#_f%vyU1
zpfR}SZ<?FOpt&?Ong*~1O?dLUKH$ym5Eibhs_MHbiK;qC$t&X$s-IPw-8jr81QEG*
zu>#uqQH)7=+J5ShYAX~m6fBgR(h1k*^XFH{3Sb>M&9uPk16zg^o>Av*v@6)tdheJ*
z^rXM-Mk+FRShe|c=VGetVav`vTV2_Kn<Y!nNl<H1M^m=kRD0%@!w>43nw)Sk#5s1O
zntc-O2O=*8Y!w+Q1H7mAqr=IOjK^@rCiW&iMHknth7lk|7{u9v9s15=wnZaBhUBFC
z%|i8OxE-@q!CZNofEWYJMQ0GrL}sN+i$_sc;!qKSb<peDo^<rm5{^1%-9Sz!&Qg{8
ztodeigCsI2HJ0i=PuAivPcW;LVY>=`9Ow`5$LdaZ5h!8T+K(kl?*r$XuavN_t|#4J
ztAci6H%L+4xIYMK-0;`Id??~7QysH*nG?Dlif<st{sQtfK8gIM%25W9Hj{`li(|Qq
zEn@bFPV8OBqk|hmkTROxseAE)@G=m9_Y@)>EH5;LC7t)(`{Kp8-45Iu`vl8VmXIX>
ztP*Qc8>(=mpPlKv2utse`2TnY)!_#_958|>9@w*_$7CZ2)4=6Lx>$@W!VkgHG&0S@
zI_iBZUwpv11FjX><N@^Ffxy7DW6dk1!yQiWDqBRkG(^Ti(NAF0CnOPE3abk04=aS0
zY&V0ATlw`I15Z%8kB?8~BYyTcRr9sG_KJy!h;VYsN!=T^0{7LQdNl0RY3_;38;+N+
zi&(DAtz)*PYS91c3UFM8pAfw}ZdV*8Ef9Bisk{iSf-KB7%#BaxW6!1<o*f#493cZq
zeke1<KI68FjM)+T^aRAdcxZG=d*;Sx&-NLH>Yzurw)OcA9++mp9PhE_sN}3Rjz_i)
zpNH=kH}RaYpL$K{4;FB7c1A5HlM-Uo!>DNB(tYXs($n)65f1SF_Xv1yfr%#xdhOYh
zl|lEbO?q9R22hDoh2<Fzky-(`O?6#bFJwvVRYxhFqS;$Mr6ZU+K$MzV9;M1*awK8+
zLDy<HanV`~fB=MZI~!=$nKKW7@?P}zUR&gbj_1{ZIERa04wj2pwSE4a7?&}~<m0w;
zJM_}F?l5z<0NjSC1Z;}Bo)MfN76^7-mo#)<Cu|~vznT{uj!DtG5yt{+6exN%(7u3R
z3MedewcHAB4Fm^Z=~OL3^Ce?Z9;o5SzeE9>ycl^w-~?RO+bfWUD@TkGWN|1II|oO{
zj2nq30m@CG)$yI%7FR2iosyX_L+s6UJ8^sNWR`}u%fg??D}yMB;=O9YCDQVY+z1(r
zQR+Tb)oQmuT=HMgY$jbCAjnIXBQ_Zt8S&5BhqZo)Ylt%QgwDnUGFu5jmiL$^R7>ek
zMv<z8D~a3jt+iOFVW3wB<P|$RJ47U$0$`z06oW~N>#Mq*>=I`ZGGB<pL*SD+I5?IX
zONxp*rurPdfA=mgU^oP01pXGnT@%pUprG*L8!IjYLd7%)ubhpSWJUQ702Aaf&QXfI
z;kJH3OdbsrU~=O~;xdG{sdNtx4hkRkia-#A>?`6`aH~BqhTqaBC0!xWX0B=1r!~m{
zN$j&d)Ey~a>LDsOQDl+bezbu^;iGz?ho_<Ta;~p3?+Ghxbp#n+Y$I^5-5f>&1xI;h
zf=<IlV>?k2tz+N9BlGO-Th|h=S%Bv9LFtldtElaPqb23`T@Ip}2&s?}p|2?9D9;kq
z_RPqMvS4K=N-rj`)wvyqhU*b={a#OFZR&-$KgY+>@2Cl-*biHlux|ow#g`@ygoxu6
zX?{i>Ic%^Gl;lbe`IC~7KpcIRu*fMhf+dZ;MF5FTOOBdlSk&I;toW#?C;+1+o{-ou
z2C|(D*3uJLyoFN=MOj$-Z9qODZm??))c0~>`rufVtOnAFD?@P&!98h88Mpz0HK<wZ
z)~-_pE%XW4kk*$9_|rqsn@7WGD2&xfBfD{HG~+)zWA1~PnAj}NWQ4>(t9q&>^uXo@
zd78|(1$%8Sx{)Xwt#GSiCEd{&=7gXP@5nv%(0)O7p-*aR>W9ax_<U4%|AJA3!@lfr
z5>;TLw+IagH1Ew?bhizf9NevnFbLG?Dc4vwYxo!38~~vHtM*B)MyR+4`U>EmYG?$X
zy#%bwBR8fO=l~Xn4hw(MiguJz`1l@OWc}HJfd`O7vgB@1I<Vmt(L1ZYhlaN|7+!Bt
z19praA^{tl6!+PbwTsEI9>0ww8cF7LaVP$wp)+ma$Py7U0aAI}(6Iet^`H~ZF(Q*=
zNF(j;9EjkL$j^5{qNnxM+iuaKyWc@T17pS##%Cx(0z&!)pdgAI;L!AfkDC1XvuYp~
z5yT6z!q}sDD)zYFYC+V$O|r-$U*Zrjtypmy=L=B-sP*y+3Os{;pywmpYFc&$VI7~L
zp`mFJ2xAi1V*DwZk-D>>)C9C(6cCK&@EHltuZ_ecAxOdTeKBzkBBKXL=h<jq6gtmB
zM9Q-+<C(Y%XV3uyhs;kqr81hE|7*OUl<*?cCtcj(WppX9kP-o$Of-=w?>Ugzj((@=
zSJ)VYrJ}G>Fmcb{CW0dXEKd-vYl^OlZ>%c1OktsrYzI1=M3ez}hY6HQl5?X45UAkh
z90Zwg{d$luIEwe7i)te?bX92m<k0#1+h|8wdlSkChK9aeLek>qSHZb~?oB4_3JxU^
zP@Y(Q>@kuU;ClG6pZNT?uNtViLrFO~S7ZyL^DxWWJ<cbn=KDcqgE{lW5z?}-dW9ef
zw>gE0G-u*qI<JzPICYOuH_7Xhz`rZ;<}nUCn(lc-0rsJ_lhJ-F+Eb(R(vY=cui>b1
zqpVE@+qd7vZXnuTuwcQ9w~4s2U<L{r<la(b(X@Z6R<r;<t*fhxxyt}L2_Vw!w0T_}
zyC?u;7mnf;q~jBSI;^tOz{i%;o)c%$%aTmv`c2HN5;&wvdoY@c9}s(@I6<Lk!7{jF
ziP2U?SSc`Rq=Tm*63wab`{-ZQhN-|x?cTL(Va}(nE-}~`FE6iM&G_UK=zk-Zrc=<I
z`ztvsnC=B)>+=Fa%O$F9Am|D+zYs-B@tw2JAfbC2U)3jTEmB7KafEe<c#LSzMEN2^
zoYtRb8bu_7T0~qU5yaEe(?etAv15o-4<bDy{l$Vt@0RSJzi7!4wAc}ZW>i<-zyO3i
z3k00_lU1Dp$y{H-gBQa@D%4WSCZz9UCDD?x?Sd6AgiqTSOrgL;52?PRv^)9}U8tmK
z^FJw&tB}0JlhN8VDOWEb5roCJT2Q{5W~I-_-s$M>27D}ka@!%m-QIkQmo1w{ZQ;w7
zXK0)JF+9vFVx|awrT1>--3*WLL0~*PA+ohoE47-hrCzxlCLszD9lvzd@P#R089_%n
zQ2hlfhK{cM&yT+bTbYoM0CMxh&!0SZefGg08WIrN%Isx~&Q<Q{hm-hhfchE5(4V-2
zTmnRoO28z-LVTM{$8hWrZGdV7P{w7_#-{NWiOpbzP1|Jm?L+2zJ^1?YFVakfz$VwW
z^?CtK6ow+an?@<7$%9aYErGHk#M*TS-SI0{t_%sbSq(y~VSo<K2SMqzIM{mtArP>j
zxDquETxS3i9%!q%SRg#$-Ga}-7!WZ82`H5O%7fF!_t^@$F=1xV+KU{z)MC?-nn_AX
z;3>3WRVRW$AfVr6;RF9Xi6S5F4*<h1wE80OfrUeRUFS_*+&q3nCtH`I@fd0ors8HF
zt)F@`h(sqB^TTlgIvaqF1=Z{6_h_4^g5u)ufKKAzL+fbL2AeAhg%h}l#UsP$IVMSt
zRps(H5O;}*fc1um6|N-RpQ*AF?35-+K%r>f0I{{Cqy*i$YzTxAxdR7cf2@oo7b|^G
zivuy;Q#nHA#KQoWoJ>a^B#K}N`?rY6GLnIaG%VR5F^=OmneN9dB!!F+Q5OT#O598^
zMJMd~>Jmv-`nd+a3P684O2`Oe+OOq6Obtf;_mN@#=foyC;%kxfO@&O_zDsS_eyYBF
z`t$}0w<7z%%-dREf|_^0wW)mQ$3(&^As}g;v;p;43`0OcGhGyBZo%*f9|viRql8eG
z4x-}}2EXk9G{iao*dvqyV138{L}~qZ<(Pej1k!BW099Z##SlyVd*h7%*|?G!G=18m
z+Y(#Bjz%L~0rq|%;ghJiBf?VW4hW#eUdLGnUJGQGq%-2_Cr+ForE8R{K$u(1WVVyx
z5!~{`?1}MlIR%BjjLI;cT8McY0PAg^=LsVE*w|PrqFbytiQaQwH#9gPxBd-Up84l-
zWY!-&cFdf$+p7%bR$5#k5e@kWmtgmycVdYC7SjyWL}$PyLjT||K)B+h4@3kF=rFL+
zrQOQb7QuJJW)v~nY8wn6ppo7Th(%)f`*9RzaFj3JBWgq-qa%Ao{+BfKTC+T;0(bC0
zZq0I<*`x0L=XpvLkQr92ufw{wo1=3};b#}R84Z0w({)|9Zk;I=)DaO>#emgzXYqpx
z0K8Q~Lc+U8c+}fSMy3Sz1MJ@$O!;^35={*-3S&{?H4R7GbRH^z0A64%xi|ev*G>}w
z2orXFfbOWMEB|>2na#jKZ7w|*2h$8y#icIJNF(3}jRN827jrlu8pC<Q7dqsr1MufX
z;5yQ!Zn{WS%ybL_L?~~7;HcwC1pJ`u+X04ufF6{6;h&azu7DfSL8O4~*1=Sld-Ogi
zuQmT%ra?ZU3W7?7=gc%52rko$)0XI(!Ef$>NC{3IG4Ew&07!@m(RBF{05GU+_5xl+
zi-qv1l&g3B0|QCS0jt-sPRUXS_<XxSJxF+_i(rdrm6`-}Hb9ER+KN!}>HcTxe;m{<
zqL7X-(Rtt_8>}4w)dxB0={EQvG9eMSj^WE7%9)7MV28vYMrIk|?@w6A2&ONt++N__
z0+R+AHg~We<IbQ702UtVRe;k~OX2n~G~t#Jkx++60CH`RC_4{oU3A;BV);MU_>(`w
z;>9B)BM?>?BgZ29a}7$?$8Vu2)XH@31`zUKEAW`zrI{HSBu_>D0<{j)a8+JYW)_y+
zaDOn3J<Pp3pyUnnLpapJvjN0?A00)0d<v#}$ru$d8Vom4Wx+i}QbyO+^qLF(Nfe%m
zG!W$GK+5h$j6m!d5MF?O+doV|56=n$35W|xf);wMxOfJ!BLaamrdnJ}B4&uXi78c;
z%ak<x0VnqH_U<kv6UdNlLcuoV1A0;)9oY9XrT=y2d%%8ltAUR5f1&}-OkipFk`SW&
zg|-eK_s;T=eQBlH7!*(eZSKhhi{eZFU;(JGAi4LO4)6xd0N{fPzM=QFZPVT@h_Emf
zI2ER)yA*x}CGd}^gdzqDq2hXHW<ILtTUHgb1169T29UP*e;$I$g$ghXA<?%49$`Mt
zu83trLjM6zZI(g$+ALto@O9FeYQy<JbPj{K>ZSmn5T38E@j=)p^l9{!!o5M&47G59
zP+uxL#7{6D2eY;mhDP7!+s22ehA`01V>JW)QgH8H0H!X5kBAonHG2ftj{gB_Qi(fO
zzmk>pAt)(0TaO+*Sh8;CS6IllbOG&Kb=V}H12OHNJ|$d{hWkNdfeqx@V0Py%0gkm7
zw+9h*rj`e)R=uP+nkuG$I}6Jo2}~cSyF%;@&hk=iV_0Y*wDQrf2>IvyZDi7+;!b!M
zgiSQznVSmeR$ThMI$qjy52=@4&gz5V2Dxl>Y^>QAGNjcg(xYg;xqzjMB@7o6O4|yk
ztEd$s69)+1h2k4W=ssXQ5F1=Fh9)jWl-$WZ1N1|$P<wHf5PTI5cO`-{nQS|I`(9W$
zkUO1__=8O0>gHC~JOT&G#I1VT$%!bxAu#`5<rb=jg~NkN!Qi2I?lgr|2FL-6#F^6&
zob~df%7RaL3H7_4Le=38$UxQratckKR7O@nrKUsT4z3E4vZP@Lm{v%yz<+DOxq^c<
zTyZcmGG+s*!5f3P{z^s+EL8Mb0xP`(%14_G!_uX{fTlybF@Z@4bvQJ%lOkED@4>ij
zX#R<VV>k?&77@1?MJ$a5V0})3iTTj4)KX}#BGWby>!EI@PXA!)YSObnSL(xHkr0^l
zAAQXOu>JT=mTgDn5RJBdMHov$aCou^h>qf*A`)O!5<=*X6B{e-Sp-dQ@w2c#2(@sn
zjFQd_E8Rk9tu`7#eFz2<B7jb_tRlu3v8(rwXW@(?xPcVx_p!04#lMM$<Z(WQ(T;<#
zHR@bMTM%oGj&4?Cc35m!Hmv(J8V@i`he-*zNa_3cKVi_thmd0)xGMYvr5UPG+37Mf
zNH)WDz>lObf$soqdeF>w%QLzUwV`{)1c9^EyX_k{mOOc~*K$3bGVYb-OHKm9bJ`x<
z>}+cjLEr*A0p}<R?lzjgi)*oUW|6mX(orhKjt|0I%W0C@58M}wb2<|?%ntDs;shSe
ztMGO}IE;!XQ3WN9y(-|;A@{;4!%PS#4G$B8(m&ACqcjSY-QTaGjl@`cG2Fd>|Bh}J
z$!P9?24`Nm3gVHw9zmuSM2%ch9Tw0%g0Cf8X(u%?J%ynMXkt(VIYs<zPd%4w1JdX<
zd}XjKfQ@c#?>B*;f?kK{sSmp*<b0EcfEL2*g`-}JqYmbqD;f~cCyJ9wH<#pL2AxPV
z8bwtJ1`p%r9$~}c&|D8U3J5DO=RKYPV-7XYT7hN~0KI-m2jO{u&qW~_X9GdYiPV5p
zqc>}M!O0>z<=ebjmhJoC;4UOQVB^a%BDEs4+eeN)nh1C%+CCOID4><>T^>EOA`dbC
zkbpN7?lhbj1ow~OwPBo)s9W3Eq|-<j02Az-ocf{659~;e5k<Hc*o>l?Y4^Bs42VNQ
zzY-$D)s5H;EDE``aYVqEpuPw*Lgu1HRUdf@eDBZ6$^D4`Ty{YuOHc1A`FQ%PXfu6J
za-g$m^ymkO2jJEKgjqsRH7UgAFkC2(nIeJ?J$ghIvKgo&%X^AHMRgx^Y7yAGt8pMx
z0xBe0h`lDj&oEcwMF7h&b91huTR7|3(LA8=AYhQmM6n()69B?cCNm-c)Sm~TP~~ZX
zmBS|tu>b=XLcVaIXWZRk6T8Pi3E3cQ;stqOWTN|IWlNcX-e%&!t>M*>VS~)IA`U*F
zectMF{Gs*h3>JuzEn5Q}PpK(*L4P5B35h94=K>*pgHQ*)=XUERBu+S{tynq$YQV(y
z{(DxXXzQZShbB~H`QXN&oE0o&EcI&{+L2<x$OnvxiW{Wfo=1hj5+eQz7tmE>BjZ%y
zak9{TQ~ea@=(cXwo$X6>uzoPOQQ+$hB`2%J8JyaUILI>s?PQ1)Z9hB!2<wS0rD^=o
zm!yI;oKQ@BVq;?w(t995LQsv^+^~2b;B$mqAWtAeNd^Uxn&!&T(GTC4iCyXa1XRWl
z#Tz)V#Y`?JAx+327QV5pa={~{FGxNwb0VL?G^piHWNI-M5}HlJ6JOEG!Pr7C%aSJu
zK26(?9LWA0L>P(>kKf~R2iiAwHR=$MmH=T3^Nmoq?T0aM%K;~J3K%1@GwlU12`$Li
z5W6o9%frzIhXy?Xw=aOC8nPTJHp-mQxSp6URCN(npAZa-jsP44>b&B=<KSgS3#hIZ
z!@2?ynTCbLDuXWddSDP&9H;O(#F%0FkVLJCKM5oj-Zvlpi<^;oL!OJ<-~v8+8G8Al
zJIQs_(vpWAxzrqaMj-v`QU8Ry#HQjJ#~|$gdkV=A0XR)%kQ@g3`#pdUA(q0L$$5TA
zK}bS^ZIDQiF-=d2WS~V4&T}`;k#eb=&E4<mSwPodXt>!E#wCUs)D`m)T8M#3`QNvq
z5UGExZJYKj4O2w@fC##gq9PEkc}L!Uomfpviw8JD@%lbG*j$92;^N}`E5p*C)Mpii
zE?1b3ArBl<&tQrm-2~He4~QU5(~R~JCE+x?rg_V@Xu<+`CSupGz^(B`Yu@3%i7f?a
zf_0pV70Cd95ZYlJNcNRWy{*a9lNl`V#DKIftB;av0<AwV_rQ#R5&iXFz)3#Jq>^U5
z_zb{!0LX^+qGX78K$EX0!vp0sP;^mCMe?^2;Ifo&dU_vGdN3<bkW;-eU!{1GKo2-|
zq}eFG9SJ3J1$%e_NbjK8e!ho?2l67WzpEBTE7FwAEcq%5+<{bnS+;ZIG>O|F@BofB
z7rzV4)YE|F5XuR}{-FZOb+mnl-ei+5SV}Nr#^5f>wMlwTQvrTM0SCCU`_CVlZcXre
z=-&T(?kRshjAW;~PMbhT0MLEYb4?;(9ts(iG58e^S(ZcK4j@**-B;r}noIj6;GI84
zMykSif)taG006hXiRA+{*TnZYlq6+{I$&G>DDfj*Fr)3)peODEbeH;27r^F_5U}PQ
z+$$PT({RPH#iW#?7y$IMA48vw%2qKkHQ>X%yeOuk?QyTtiYnu!XAo{TCLd#H9~gk&
z-Ho+J<{zhnB<3ZGfw(9QP~ow$vH5$}uWlh{ozi9kv=C<<76t_2UUlVhgtG`rVQYTE
zCT!k@X#5@kr_n(J)GuK%J%N%4&qh*%vl3TReF4^?5}HSf0btYvc}PS8j9})qK9|@o
z6vA*<oO|l!r7He<K4CkWX(_FOMkfLe0+WBf#Et+rIp<IrxLdI2<*1tQoC%xJx`2-2
zH3&wzh5-U1`;*_l-_MMTT^{K)h6N<c!92p><d{`#X8eLvhvPk|C4e!#Za|ZUmEhY4
zP;7#)|NSyqLp!(Q3sD(EWF0T*ejhb3M1Z|Iup0=liB=M{K0*hVqKEDb9Cq(eJX$G#
z07vI?R(mF-_z_C4W4M>$mkZs|03iq|F2y92NC~*e22`yV+)|ut=ujmYzaY{)^w(8U
z+F~<uBCN!TkVK6XNwwo4C~ZGLZi%hNhN{iZ=N8LGi?EX!Rv&feH5KikgGqwxQ=fbH
zuHO9<`nYKFZExScJrKL=pcRl8f>)x(Q5(GJ!k>>qq_>Qg5cz)k`n3@D7ha)aUYrha
zcmd<0DNOf5!JRQX4GcF})+21uu+Ipmp6li#GRI|1=g8JCKI<`*hUmK!laAZkva!>M
z(NVwA`1>Ii7`KIRPL8yOAxuIz+u7cpbOmiAr%+>ptHD=0BYPhY7ms&O=Rm`<M(v#O
z)o6r$gfdMpLOLU4RGd;o1QTF<Z%+?MHh*3@w0yE86|qG(vRy=@7%P*O(+kc3Flr?8
zr_Y=jSIFNE$Qz+bG7Ad}nT3LL=a;papZ_*8s^R?+iZG!?<*Juecl~$gyjGp3J+?Z=
zS8xMfg?Vp>mVspxxCfXa;DU<VGec+%=>rG)aD|bS0U?@LsyhVj?T?UMwL-e$gksXL
zAWP9}+|0j0C1ojXhoy9}uTX;mgEAUmsM8dJ3wTH<;%9yKOGYdKGlH^?fiHoW(fP-y
zRNdT6hC?fBeLM#*o38TYI}vNew}i-X>Yw$XP!fpL2Q>6eY;5*mZVk!`hyc1X3@{lM
zpNL%A=2I{38w4@^#OndY;Z*r@5(*G7!&{_n+s?sZ`{~uv($W($*mptZo%wEEgMYAq
zQy+N$eiRMF7@XHp6Gyt3;aF=!I4+5AU}YsX5a*Qj!6|GWX-gJG2^!>cz_ErQb8)QN
zPgY#h*o-T661L&oG%4L7S4FmaCvXXy_;-M(f6aj65dAJb#rIgXVnrQj-%i4ymBK*d
zel0^<G~h?fA(_obO6@r5@{DT%B4BC4Er6{p{ZNOM1$n9fQ+}N^r2K$n{dI;LpOeBg
z<x`bP823vAwg`ixP&INQL{Y%hixw^N8!-Ui0P=Q`kux*w?~t<Eq0fIvzGA7M-d!0h
z13kSh2D#<$-ig=L0FNiFPNz@b6^CVifQ}ptzx-=Tlju+>X9T=I%1XIF5PMA&70Iw1
zr}^QUBpX3cq`ZCS&ija<(Dtyxm<(~lYPMTMl%vP<6O<KOM-VZQd|TY{R*mRokeX3q
zGJ|XU=Zw*gSg1D2-G~5RgE8hb2!a#wG*MB_;2)1>L3@1RsGK+4eL$8$AJZ1_L2<N|
za}a`qavXLxA0as~mR3*}*>ZDp*Nd24j*mA6?)T59&`)yc2L#*j#n^+4We62+qS{E4
zHL?8VyAW7rYHL4}gxhzbqpZBWsDjM)!Zea5a7xlIz>Hu@>AG!4y?<*((+}4mJM9Y;
z`5-8dhu}1F?%q$pO|XZAL=sm6B=FGknAIy+Zo|N<p|?ngQm?C@#w?b}u;rwnyJrFe
zml9pNR3iBQi4T6`kyI{JZayGjgu_00@?^v(k_$B7=?96u0TWO@BeOjiL&kue{^T{j
z1m|)O_?`9OVGRNkcbqIYBm!e#6^KJG+ZKZ+5b^vyP82u#X}yhS20`#Xgpl|`V4YwO
zK%3TSdHMRaGrVjs_<8$Kaw+8@F%xZWBnmr5p2JTNZ&{$f$Ag_za1pcoJv|#Y(EK6w
zBr%$ZtMN7wifFum4}e;TOWY}Bm<MCva1HaUBgQ!iI0qI){S-Pm5f0vL-HHeeT~jD-
z*zd+lA{_)x={JpytosUS`mx!IV?+9YZ^$t?4Faj(fU+A@Ul>`?tcdixJ{Ey4vLU(6
zq`Zr?TDhUV-X2iokQ2OI9qteLWYk#D1pW8nOK4d=B~$_VFcMs(6I-25qZkSVeF{;_
zeSOphFmBGgA8Coep38CuP>Y0T3%7s;8AgYHf+t)W%IbUr*Z&%z!ELk^;k<_M2eyE~
zc)g$S00??-h$;lE{S2^96nYk@LK=n;y*}V6nla$NA^-R@%o*=SCSl@Vp<&6%9muoD
zkkw_lir?W=n*<Sz6(HlUyp5{@JkFT&4NeZ4z|%w#$Hc-n{r!%#xtHKnPQdcqLB!Hq
zj%q@<Y&wim8qeJDbVxNaX1~Q@fNkV|iJWG%|2^m#e_rGEw4)=u2-P<XrPNf|AFvi;
zZj1$(&e@CRtRuc?FCl%o3~xJ;+YnNAC)5!BE6$Vm@e;z!JN*0DHtaC`emVyVv~P2*
z!VY6{Uk*Am7-3}30;c<%S+NYsltv8T>{n~fpax6|G=HsbNff<!jPad!uZr0cB&zWV
z@)YF67-vNagv!EzT><3y<lhInf%;=|+SbqFK#Y(-L3EmF)hf<E-weWRJ84TCa2W-K
zprD|K^C2{rf;WMl$Uswi)Wa?u`z5x@El*HTLtu_>I(S?R=R}qukGd<Y823MKwt@a;
z{xBMNGpq_DDl26E96}}|#3Wp2P=mxl+EWyG7!V);GUXhEn?#3ic-ReOs-2{93V|IR
z3Z=bsJbmGA0+1l$P^gvht@QMqL1zSxghI<nIFg~0rpOz5Ex@8f+~)Y>t3H{~lWX0?
z|IZm1p?O7<0El2>9t=Pl8!i#-1yp))AGoqX$!2*~{0$*tJAX2!n@zz`#qljRhxLs8
zXZ5>iJc1I%2tF+fe3xEDTyj{VbkS$ep3O}53H=f{1wJk`lC6N;WW#CnE+d^Hu&aOV
zvsW!0Y#$o_@q={B)k7-nJ*Z_UorISo8yn3^UPeM-g4TU}thE_;68&|z{;u;N88nL|
zt`Wwoqq8$b6zaQLfcKJJ;d`NA<TOJ_OA@Y{RtWh>?M8V!EDA}m$-LqJUPW{1+Z6*P
z3q<F{<dy^S2=4#^z{`u`<cSwcqagBy&v>dzesqr`!X)a*|Gfppcp)uREfYk$4w|&I
zV&Fycva>Z~z_8G8`7t)88wmklL>Un%WN?tyn!mqG2FPNAu6iL`VMc6f1&m9e3jIJR
z?qjepe-%RdN-}>MLakbVe{K8*{W{Kq78@E(6k^j6xO~3`uUyx&)3Rp$=mWYg9PKxX
zhzJ~@!hOgKaLe+lkSnnFXMJmcN<3;Z|C|pMTDVbSMp~eej5Z7Q1=%GtRa_IxaxNDz
zG<**X?;mfX<VCyAVIc^<k!M%PEHG~rC=f>X1P%<wX+o&|9I4*@ee6)Li_>q&$_X1l
zY!Fj?QCSL`X#?$Ta<Kt|Y{V=H^q=+$*^N9GC=`ui3zqXH{J9B6L*pC@I|COo2JuYc
zQQG3Wj(+!6ky59qRVe*eWi*vdq<A*bM4i{t-9|tQ2vS-%<a}|`pS6HZX>Msr<Xd3^
ze}5m&<hh*=QgpFhrMu*jg-?k*@9ghC`9Phz??_rjU~nb|=HNBHh%vNQX(3JEockON
zl~yfLP>*TkE2+<V(dMW``zf!io{<Gl=!77CqI5$knakOmRIy9o>u#gpd?B03sl9jU
z+S7~n)4teJAN3gR<*v^Me_P(NPY&~czlkjUO+=|RN@1~r^wT#uO4A2b+(iF7v$ead
z>QOlP^Vh+LrB1HcLVM7Zi}VNGPvtpat<o!fygRGEDV_PPIQ?PGhO91_(6vUl(#s9X
zZ4y?RKZDfv^hUVpL!JnsW@yxJ8&I+7-k+b|{rji0EndEZe99cQ#<1m!UiO5V_0is#
z68cJEWVbl|JFcgH$89JjVdsZ6eY*qPxURi3SBs*X1>yOV6S3oTO;LIJ`yMr$tu~XS
z6n8Ewch~P#D_L6_UF*w4Q)ARBrB#Vi6uOcs0FkLw%^2%tvCZ;t;G&=D00r4U%Xfpm
zMBlq(MbkD+D@S_<|3Ci_XBu|F@6Oz3bcF@VT7hSOzONDexk4Lx4)jJfIy|I%5wCmO
zBo?lrJyOGS`Xedtw$ikmn}P7l{?8As^s`;D#iy7YU@Q9D+|K1Wa6A2<@3!l?*zflV
zE2F&+k=fk>svJ;k<<iPZ;s!at(w8<Mth#Fzdd~sd`(iTEB*IY||4o&dRwB779DNnZ
zV3c?$d}_86{de}Oq?{r{uCJ7H)1EerZiKC17ULi4C&<kDZ3{S3w7f9JNrn7ht=~U`
zacNp&Cr_OCZNmffAQcJvOM+44;%q+roJr-D@M0JIhwwrA4%=_y<-I)A`+F<cX&>lt
zlnC3Jw3&sXd~)O+opyw-L<O2!YpgISHhS$wnLMIUmCPHVy}bD7D#bf#x1auJ<ey&Z
zX5@qadBv9+BrSp6N5iZ4KYt9g@;kVK8kn6EGCL`Jb_QU15O97o0e=6Wq8qH1>ZW;m
zM78JNSNvs~nfv=k<8m~c{r3+_c(Q@h@4J+n{8jU}*IxVhUM-mjN?uoIgPjyIoK!bE
zL(@6UaF03t{!@hAz8sPG@4rb##mA_%;;*B{ua@v&b{y?Z{`^CVs9pT~8ub0&mW9a9
z{QIKPDkT5>$tNZnX!p;b{D1qB|NH_fQ1XxWxDOqOIms|!YgpML?zzGA{QvSOgBKsa
z%^T<#8etfSKh<c$w6)~uBH91(CjU2U`M-VRki7r#D_%mCpWlo3+&&~$x2gBAM*AI)
zr{8H`M@>4y^A8sA_cuN*&e_`0S$8AkvsC9nuji}&=fU{@VfCij-N$CN%1ub0o>Gc&
z9MClQF@JC5lD+1B2`FroYoxTv`Yc{8AA8v=;nt_w^W;~p-aB`e{K~nr_OeI^r!7g;
zc<2(!J(Jq#S#Ws2kd>D5PuJqf`j25eQR`}rx?9GIXhPnUPh7K!kN^8BQJG5ui@z_g
zsD;GG{PPl8Ng}9!UPm_nFNdvAj`BZG(ivaMKfw!rb&zq^|2&TW=Ry9@iu}Kykv~B1
zX)6R4y#RLrM-uWR5~2qW9-zGd^Trz+8!=@pDJco?>&$SK5Go*awmxNW>Fm4wdyMps
z=dl;9aSL)tj9$K8t+4OxEbUXwLkoxfvsm-nv=SS9k<gwfaD839#m3EN2Uk<ByYXw?
zR)bpZMax-wo6{yIE*ZFW#;Zs*xO>qqLAVUEm`g-LDzEua`k@25A6k7tb;>r#L@9C-
zy@8}sh*W-&_93L}&<=?DIHJM=FudT~!#=r+ukZ7PpimtiP#7A5HVfo`F)?mnqY!pG
zoGy~2rw&kI0zYKy{c93bV8PK>yN8-+4nU@3FXfOqvs*Le^MH_q<%!pF%#0_hD%Z$x
zIj;=b=ppw&m{s1YjwSG{Y2w+Yw)TNpZ0|1yZm_N@ul{+=rR=AFwfmS&ysz-_Nwp#W
z-{?Ws+_`h%L;Gv?41^b-`M&@05#y1<Yo{Le01*RtF^yb(9)J7-c4}S26RmDPfjbKq
zFRm(wU=UhqPi_fJXTh8rd(*ZrUpfX*m}bRDgd;~jqKwd48$a`$+4y+8It1^^Iv^#?
zL$?~Ad|m{JC!S|0x|ce5MU7d!dl~j)_2|O-ix=lR7l=E*`oKR>TdyEb^R6Y&Eri#S
z1P{m?_=RrFGFk{?#DQOu|BI4`)H!8~5{gimW}o9jB*Xs0${SYc9&zmezyXM+iHubv
zn<n#iGbLTKLBacH(=G18)zp!tvu~C1KU>+}`ps{gJyKp``ZQmoI4x#5V}r~PDcOU8
zqMrfD;fwX5Ll=$a^VpNM*FQ=f_EtHdt*wo(>YYz|BP$;RD<zFksM3T92+$4)uR!?5
zj7HgkBCT*Q<9^nMbt?=lB4y;YJ1)GPK51yv<NEEoT?*SHxehJ;D;pn6nGLc%@o?u^
z=3Z{!P6t|f4cV!KPoPIANaaA^5Fn-?iQ#h8&9`X0LOpPQxD4n`$f6q>8srO_QLaEq
zUgF1_W5^llS=9Ijmb?6U2~v`B72Y44j1$h+>-xTWr=zP>%Nfy&m7e?Jtcb2LmjUf@
zE0q-$%RwfhGJEJKrZym%>U(P$zxq};AW0tO&T|VktcY58;mO7YKR|n+x7-d&;${hX
zXnPyyojEA-M9hw1PJ}j>#CgYa=X9b3>*md)B_3V_pbpv~FGtB|rTJ0t3<n;MU6*;j
z8dQ!25xmi0F8ZllQcL}bfxd?MufyBe$n$uGZlt6SFJjxN7=G0_(0cOn=~>!R5hDxh
z74~Zzi5quMe4{;etH|0V(o=)`Ft3|;AC|)qo$@mCMzItAjOhJT13vV?v3qn9ygghg
zL)!0rQu!d4Re1hR@u6^^6}MO1(7c_i5RA{*W~;WE_5;R~s2hW}CLi4gDhkR+bNO%7
z-!`B4bYZ!liZZygSQ5G~ERv%f;!4h9>}NLC3HSN5&V5lrXj;31MoE)yFGtn)O()3v
z-O|2(rp*`U)z{w)EoYe5vf`E=H0;6J;8T7E+^aO18$?CT!?d3+;qs<rDBsq;ow|BB
zeT_QreEw^dXXo}feh!k@NP9Y|I@EoTTl@JdWHk%vXUioV<%^iSa1jj6)og5A1$V#-
z(c{GNfV~Ntiv*K<tuD%5`WQXk=|20GsNg-0a_g7BoYJ%RrZzBh4*8|uUcPwseCf{x
zpVql0skt7gp@RX+O#qvm#N!4d-=3(cs0eXbxOC~Ln-reDyD<$#l52DM{pxQ^>m9GY
zx=pBX@cdvh2zNUK1XSLlWkerj6->tj9P)Yh#7AWO(A%d25})SGHPP8WdHdevo3#hs
z&bt{aP}cAVsSGU4)(d?h)zK^Op)J=wqCVfbNcl|Z@g;2Ac8xq!r`^be?~XV`SVo#*
zoM`hG`iSY0P)WK`23~?wcim?Y>1<zTL=V=X{)?$Xyc(OdvyMngNgWBl4&ZV^oMHp}
zVXwW%gKy(T6NnBH4Y9Qnj~++@Ztlw}rVVbR&>ztBnM$Uc!KUKz+mqeAHuiqJT$B8-
zo_M&iS~m^)2Q?@tyvxphd1+>6e~ay;gZgyZTpruOvF1y2t)g>wY&X36@~OaN`DHH~
z@wL{aKcDN2rn9C8`Q6puGBI=g{`x(em}{q+H+5B|TvSU9TGCwqDkiiu*T{Is>*5LX
zGVZ{DQR|;N{y80;23O)l*(Hunwi<WNx#Z1dd^{m&A@k(opt9b8{fU9bj!7R_Z|}D`
zbVWGY+u~tDg4dOkzYKRoxgTcVaA*0_*Yg&<SGBNFzP;XHqAPTyHg-q<Tg%;!+J{ec
z%q$$fyk5KFSiHzitF@AST*cNK4hJq}tBaz$VqT-H$3J2QHSFz&LF$ULNEdhf$P-Vk
zNAV8;4Jb5=UP3|g1LPldR|*>dLMOWVVAf@zS`GFpWP+X_RXT9sfRYk^yc#A2)fco9
z@)X`^=n*~iL`7LyGY_e53Ls9>ume?**r3DLQDGpuZKxqUWwM`j=h3%^z>4AI_uV-L
zUAVU=pg27af>}ofSl3%UnLD1rGs&lgKGIp1T3RY+x2@cC<mqCe!lANt>>zFCHM<2T
z6{0L>AN2mjPP*~8;-I99Eb4uGApCxv>6`}3m#evME@rrbQ))7%Ho10mwdl+bUGG)X
z7Wd3N9*dkTdtbThb~(?Bd9BVjBZJD%jNJ@yWoJ-dMg7huwjj4ymYuDmz2nf!2(A0y
z17hRF%mv4*hl3VGy$J|hS1LFmqf*-tH~A(zJ7Vi5myc_lYg;Dyml<ZXtez=W-PthU
znNqlmW2UtDRA)vO>$+l#v_a*@+^+TOUM^V9^U+m(+dyN_dE0`$cg`msIca2)P$zq&
zN@7_3n~-64RMxOmTc%lM|4MB}9E;iy;<@i?tDN@69A%N;+nb?C`>wo_0G&^u<yFCU
z0!#zK?K_bV4*}^8GE)ha=@l`O<DV`BNlo4wl!M_1(mn9t%N1-E<`O+3Y>KrLt+-n#
zH-gXX1mx{0le*++<FO#glw`tQ@jH4K<<Oar?gP6!*J9p?f2^UhGFTA~Xxi#O>x07N
zhMgy_PGvQC-3N!2mq$xW3;J@SW$SFw0ik$U0`=<E$^CdXP_?ojoT;y`hf#&h$3qkp
zt*QQMsgJ&9S4jls(qJ^1#gApUzUWGR+@|+pb^k%RCt_y?bECCP$ChXP81egbHh<TC
z<G0(^%Fh2_@T*zJba^17)S5RrhEqXRw+qDtx+iVo6pVM*UA#1}wf<3W_C>q&$ioZI
z4F}eJzHs~Ggj8FF-Se*+aW%!iR@(_kWe&eG^qCY)Upu}#=`R1KxF<%lw|dB(sgAX3
z%Kx=uxA~2GR>v}5>E1{fjvLC}Z+i1mnMZz7<t5w7p)Hk%3M9`fpQ{L;DqXdFa$TTo
zZ4@nh36DXU?o8uMYW&%HMh_i1XEnvaPx>h+Qy(8#kC9HV4Q<JGfxm=*IkJ1`aDu$&
zv+fjVh|l01Nqm#2pYTI~VP@cFkdy%!o7WZvp%1TCVkF?&?(ZnQ2zCLE2BF?Lu%{F)
z5~$}C0(i#p#}!gKyaZsnpTB>@8-4eLs~;BLSRZ`zUAxkvAGohH4^5$ZxpzgVbqi-U
zHJkvW$+j^4UQUs9hSYt(K|d*R{<AI3rejN)=fC888&G!F{o9qZUsiu!H?5m{*)WfD
zGLMh-%boQTI{sP1(;08L*v~xH|KLwOdvyH4Psi(rPky&;D(sD7pEueIC89XNwxLU3
zJoVPprCksn_hlTkZ4f!tVY$u0vYSI?w_A0f{h7HDHwq6JzWllD_<-#RZF;_{ywCL1
zhW=kb%w1owxhzzFbK-vAokukp<$T|cU<kIH+>obT6<0j`43OLH5Z8a4zq}WQ3eEzp
zj*mg%VU`-~P0#vhU$ynQvqQw?bXY9XYI4`)oPzoK2$jLhGJmiDxKRiR`Jod4olpnD
zGf@$;`WhV(u>-u_z&O~zBR~4uc)7Sb0>wVoeJlolmYyfGBVMUzczDOZ?0QPvBL~lE
z9lb5AKQAqXsNaot-Sqt*^8NEtS7|Q#YVY(tBTC+C@nd(Hz1GRr$-xE{Z<0)>T;k_B
z*2OF|x_Q+lWkGAb;hDXu{%%h8d)phHw+$GNrU&ht-+J(AUHW3jhhA6u+YX&QWRZ5a
z^8HHfUR6&wjqgw1<ldu&2jM=T%(|_5EQ)3LT!0V=z1fQHGq_m=11r#439IWq@VNQ7
zs2^iGhJ=Iia>O+`JpREt)Rekk-OT$=?TT|*zmDClI}xGp9h{LHrASB!UlU_KbixzS
z)}eo_7Pgw`Y`I_lNbK<LyC@y?$C1H+w1*g+g~*V(n6)W4)v<E&Xu(vLRqNisUyl_t
zwO4qIcFZ<99Xxo*B;V%g3+spHQw}z&s9%yEPN?gVv)aabtg~hzOTBS;Xn94@g2OuJ
zFYR@DcvUQAGXL?yp4U#Mi9_j;YkQm4Bp+aATt7A{yYGVA(-&BW_QkGyoUH~<oM^;W
z;-!2+;rU!t&VHgfW>FRuJpOlk&}Q=LWjfeF5&oZ3ZpFKN!{39EVxX(cZ28^oSCx>B
z+u7O^JE4-K-Lwk@AZBCgL0vapKagHK-boIY%(<aj{`jV(jqc|+<H+!K{3srMZHO-q
z2GF&aDfb*8=I3cj$MHyp#<bJ^^6NWmRK5va>zK)jvhnayHRgIJRCIe#?(2e_4s)J^
zB8e`o80xwvc~fV9^Z8R>xs>D7n1|l%J13cIp=Q62oo)4p=JXG`&JM41qs6qC*KVwg
zoYL?J5KF5OWf;tQ*zRGhJ0xJM5G-`{$8_>z2Uk54^3`vxy;C%4-5-b1#;%_;L6@*J
zH@Euw0T8XO(2kSuh&CX~l1~>v%IH2W!9iA(XIHLB=wU5KSf{-ebi+|zVKt68wJ{{p
zHtMQ6jA)#wd(&`YC#F~IpC0Z>jkl(%;Nl@kc>dfX=k4(Du&DEufPmj=2W6ICgo?>n
z4XgW_<o=2y_Y97o_1WU+z2NNt$Mx$8S+_?SBwUu9-P;@?+xep|(PjQ&kL1DV?&g&6
z!Xt)_{^|@KR_pK2-#7kj%ui&MNVoH`?d)A=#Ma(OmE@tO9cJ4rb@aqxV|PoN{VC+j
zQo{9QWMrt+!m=7jW~1eQ1=n2^63tFdqqwNMxDW>uSqn7<@dY5;Rb0*kj}3&pZb_X&
z+)DhQR1WCqhcc<x6Q|&u8sFsb4mE)*o5vH5ASaf0foRzqB`7TZz2uDB8t<e9`PIFd
zkbSp7rKn@z7;Ee5q}>%^i3fiLPkYE)@!6?{-qQ~o92#33U*C7^<8?vhvSJ;FgUaV^
zi<QC?vwg>gi*LyDo!T5>?=*KpO=jJ4!Rbz(Seh7@7vl(TT^Fv{O0Ml_=JR<cG1+}n
zt?Mo<(&dGjo*eEcF(ny0%FKm9);E(4_wO%5wbGv(+$W<@(PIWkb)adaIj)IPv*?{7
z4bGx$y)ExJrYgCEqTG>yy*k1n!pEmXTR2*zyE*Y)dg|K~^Q_#bjep#BVr@+g^8Jy1
zr^odrGR-v|N)fKxFLny-IMSdX?=2~;8NU2sNlEbDe1DOZb@$=~c@@KbZ$<GiwDRgI
z1P_eopGbM^Fl|K#7ZX;Y;Yh)~>#4XM^Q$?_CF+Vi+z)aeL08V>qAh|ZMCGEg0tApA
zs%J7UG{)0XuQN(*2Zb(B^5jm^-Q&*<#>DNRK*D@StN4Rk2nxmf<A^FC?fGd&CZyz4
z^YO1%6F(o^ZD&4U;qmRsg$Pqt>svjt`=;LKt?Afbp70(<W5Z+lQ|vZJHK&VHPj2Yk
zx_sSkJ!Zx&m6z_WjN$N8=5~A|v)s*ac;x;!#W<1v4|f-Yee)Fc_#rVeec@eezwXVL
z!7*kjjk8xawr<;b^6P-o{4G@#TC^jfaTM8Y!$(&%O|{){8?NBF*i~(j^Ze+_4T~_V
z8EQ#`kDHIUXLgSPmT-@0Rk>pzEBh1)Ty{>5q#Ge{g8blZOA7PHYJvUmkJS*?zUZR|
zItzdO`UL>u*5jEpt;3bHZ#?e3H^E-GG3#c~!sa*n5qDoiMn`yxKgo(oDU~=U`Oq)Q
z*rk<+`t`U_{ecc11pL$Sg@-Lqd~DRX86zD2u6yYt+Xp{tCQ=zg*<H)1pH3h27v$yb
zy~r~stM7Ktulf7llyB;B_{f}GZZRV05hcZayW0g{GwsJ7!M0ZmoX(w-y^!(TIGXMD
z*N*t{{BD<haWS&%Z0sxF?(s3yYVb1{zW=R!>i=TzFWaJSzdvBqRzyV+1W`dzx}>EQ
zM3n9hrAv^Z+eSb@VF0P2q=xPWMG=^h?v@z39CFBe4PL*!_x}a#XZMqf<2tN~^SjQq
zKDFHZuYb!YowojHK)Nu*z1d*&FoTtNHh%tg?|zeSS{UWBe3+~9lDw1lWq3q{d9iMN
zJuk$Oha7v)egz8%6Y-)>O-sWz!NG<V(~IcLoDOk6Sb#3N`kU9?-MtR<1wxLHEs*pi
z<d_Et`+PQsU6(;Qn9gwL&LqGkHMj`9qN-s_KE*G0$KFvHUQEdbgBkQoG$NU*hD~wK
zF!}*pW96Q!ucnp4iv0%ZQj$_)ZaD}jjQ`)~ykLd7SEYw)?yZ=Rgx$I7%-Z**SJeAg
zGc}~HdQC8=Yq^eHDkKb5UzV@jU>$@<n*|>wBWEahcWY|C_*74yEwoWFgump@j*5!-
ziPozzg4y_ydEK*%CpQ-jSdVI_N^F>N5QJT^E_#nrho)X>8C~7~^Vpz_iA-T`y&_MU
z;6ljcU=!KFQevoZw1QpjPKg}TX$q;M2QM~-qH}*Uj_keU*+zfB&EyvzfAq_{@Uh_+
zb{EE12DzN;N3w{O<u&J>ds9JLYuxPvqoKa64`^flJF)OUb@%b!zAdG%P8<HaP@7$F
z#BBoH8iBeSOT%n>(7}VDS~-ZfeSV!xeCrSJ-Vd!BTUuZOE7Ly*N)qtCfcr>0t&`<P
z2+^#{ZP#R8r~o=l_+ro-Sy@>yr$Kb!29z-<$t*77aIiO|k3?*2zp2x~WD<>^b}r}b
zIhem{gCG#@U_E3x2qlSnFHhgh?h43pJe*=)k}1E=D>$=|wBA&=`?m1iB_Uazcuvab
zcR@~6=p@o}ZKx-Y3vg4Y8*U-2+p?H_53`OwCTV}V?Q=KK#lnVDb*(p&a|6C?E-86v
ztDW-kmM_YGBBerZ?uhvs*&5_^&tg&Ood_FDVLI_#BE!}8OG>ElTPyZG54TW5v(ej7
z6}iPY8zT#9^_cip>__C0C3wdZ1j(87Tirf}W1~HVbqVFQw*TsO$Hg1j>+WB&ve+H|
z!f^X&Cn>s_m_5M;uizutIlvrG8BKJ4Ais25d(Wms0{Y{=-mL}JJKdI5IOAy8`{~#!
zCI};Qk{uuu?e~5NO_zH(gNWI6#67Jo0UA@7#;8&j0i5dXTLp2bmDOAWal;A|U(8)#
z)AZmvy9WY4nFr<_0E^lR#2gllZ>JkyYOqk#boZjDSzN2b&Y<A4>_PGYZr64*Z;*f7
zy*Jlo`A$(`f6H3+poc*FY@mBg31d(c^=gZg%CYwq(V?O``$8!3$}gl!09Yb4vq|SV
z)hL*@HexzcJr4eu<JGu?TUShr871(x-MDyaYa0%Nh3(Ky`}qrFHZ-}<XPrK)F{Ua;
zP0g);bd|to(sJeg8IWhxL(SG6VB&}L_3Tie!phz8u2_GyB=zvj+l|-u_Y+;ol#2=7
zS<h^>Ta^o=#aUJ547p{3{c8^2)QJCwwzbpAWqnukPLa`ORj&emQ)A+XwYdP=(v|aq
zLl*&E<V%N>4haFq#z`xh*4EbWSzj;YYg)`Wn*>hQ&uxFe7YV)$hfxbKM?lxJI9j`f
z>;t)o??QgV!&xh^rGOLlSIemPW}L|coY1h)P`;%EnA<)=<|`5nB^|1dem^}`Dn!PC
zUlLLnIzx4Tw}S-i5VAT_18rc+MS;3EnI=)3s_T<>1LOcYOCI+&eVgcW1KVz*XmoyI
z>cNqS+1Bcuq};Q(=lymH@*U6>Q%^S5n(;nsbE5cKOF%`~SrtxMlYGP5JD0CS5dJ)a
zWgn`jFXWYz#}k7RABc^4_I#B0E=pb40}L4(6t<0F?{s0}Kfijpg>iWE1G6J;?hIaW
z>vlByl%>V~{3l%e#J^fVv*wYlGsk7Oj{>mXdcmq#7lJt!Yg)mWQEZ`DL70jGmkw7|
zH?ZU!{CJr7?YlNUb*#49c(_=DQC0U?-sE(EDo({Z9h88=&y8TH0+09GQ(&BcA|V92
zQ)aQv5zky^4d|hu)vow=Bn6otXtSJf>CqKyj*gx}pVIG1GdkNW=~r1LJmE_)lPoNX
zvZoqknn<p%)1x_VJlWkm6cmll)@fxREiCV|dq2Sc7V_o2e|Vo>ef480xd$oAdU}@M
zMm1og<$XnQW|d&(_68l=XaCvcWWyV~nM6`jN-B+V;nx^{<P)yLnfE?RyP@`7c6pok
z=0@pSO7o8T#4QenhNvBJ;>+A{1ASWsi9HdL0yUnl2XS$hoM3q$2s67oRzcOy7?#mz
z2l92Q6mYy5(s(j5F=dj&&LGM!IQ0yRZ>-KhM3ri@|GQ5{ZywjIx3C@1rb6?xxQ<Lc
z&oShoyJw4SX+L?I<oxRj!?3w=hDA~n1$mx><y_-RGw%)OpIbZCnTb=Qs(Os9aXABA
zZ0{b?L_DOTxU;+W?mg*?VEM{@En7Nl#)$)Te$r6huH#T!;}16fQ*RO-juS3>4F;VI
zV^s5zOd@<stdek<w(DD9ZET_<PK>mZ&xchiNDjY?gitWKclLEwVr){9V3-}?JzT%p
zC$6KT18!_v@YuB_K$ljhM<%-R@)rtNm6QlO;W$M(@odR`Jh`&Nq}};5XP5;{6^QG}
z-uc;hk1r8t#q|!Te!RTAQd0b4RK1`tRtavBvV}+L-zO4(3qFx)71lWU(kCAHSdDj%
zvQ)HF=#n_`yULa(;z^6L5zP_48?h?^`ij|NZ(j55TgE0D#R?u(Eg8~(R(xf!8ShF!
zpO4%R-sC^FKe4>5Rr%;?tKB7~k3l<jPl^>XjYpzryDI(eZjsQzgw!T&A=mmCwes=s
z{2@_mYfeF8T*gN<fl4fP9jS26jIaY4G1b6N$)5@z{)Ywp{COr9;wirHNgSiPbSW|4
z;)6Mjg?6=vvx=;!>?53bGcZdrZv{Y|1~VlkF0|XadLmflzegXafqE)8h11Z^3JFbl
zpB{2*)WsLKvD;2Qo#vu0o-)85Y!>yPrbFLqt=;-QPX9MkSK6&58a?~kR)_IJM;*S^
z0S<T4+KlAu<2lxJ>zG0Spp>0wkC`~q8UA5&m1(Ot6Ntaz1YOL3m>&xZ3ymj)p9chf
z1)U>}XLPf95bOyS3_+?vBiS}Wpx1N*kT#l`q1V7Q?iUKaVlV)u#asYMZcUplfa6K}
z74Wq3_aq#?hi^8(VEy?RX_VS|-Q;WM&byEs9I{WIPG`o}CJ5<N<G%EeniA4lKWH|;
zn|6A26y8Fh{}sbL%J_Y>m#imlot3Vd!$}y@D1@bcc;p98MQ<+1`OHZ#KJcUoZ@4`}
zUoaVeZSS!==`s=IdwKRIH@Aw3QnleI1p9+V?*k7N9bIm|g^NqcFO(mdjkh88=?b1_
z3J|d(*9#r7165u1_4WQ8ZNTm=J~IV(9nn9O@)e%Oq+NFcE)p!`|D?7n+<-=u-Bm)T
z`5!rGyOa{)Btvz@+O|VEeDm@2lV2>@{4iZllqf@$NtvbJOL0b7b;i`;9o01XK(GBL
zW7mFNX&%?~iWVJ<8Zr_H>`)sCP6%xD;1qJ$l1iZ+KXg1@oF=Uv2I)GD2+`G+bmFO%
zQadstA~k;+>^uA$U9(Oe)g#vHTTOh6>!%r#+nG5-L4u}2BZ`)wrl!^oup%m|IW?UU
z)DXQPkf{TA$$y0-`NXr6R4<yt$HyJWKN@!<efK3!Nd(<+rdpo+vbm<)n^V_l_}6=&
ztG~{5ZF{Dl>-5G9y{uBX$ZO8fq4jH*J%%5w9g<pGjl_8I>ecMh5mwn>Pw&2c`}V}i
zlMon%9d#bSYuL0tNXg$%NIUmFV3#=~-e^{zg&3Mr<_0=eCX63ZLg_=mJ^ZI}!<++N
zk>^0O*_n#Vp@O0>BN<&E5q6u8w=47Z&qoSkHkRHe)Hp`bV!uflBG>B$r)n=es@{$@
zD(+~4*1l6($#-8qUIgx@0CF}z8D*Wqet8kslo}o^V(p((drKY+t&bkP|Alb?h#?R{
zF;Qlic6ccOFeRl-gYgfz0rf3UYio2HBS?o$T7dzwTCfW9P4WoEVnhf8LZs6dEx!vl
zB*8je-wD}&4*564Je=Ulf?@I>JBGZ)^Hjq$@yF?aKw03=ZKqxcDLLl2NiEXQcy4Qi
zP#Nay{61!eE%F?V5_e6lx%VUDGm961a<M!r$oB}36X7H_s)&|3I&zO;hb7eCf1l0$
ztM{B{KK()o$1MS3Mm2Jlj10`q`M+A=0c745gA+bc`TETp{tbw$N&JN}chu4U!SaTh
zE8YVDs(NY4D_43z+u*<rRR<Pj=MyjEf#TcShnSM`1~hV?PdeE$ahBwby$Ox~V%%$5
z^5KXt$1=a=g-m=VIY*TVPvEz2<CRg(LJ|k8vf;C>VoBuKeUFsgznL1ho&G$3WstLx
zsiI(+>6#$@E&TZ|x?wtA_9BCtV#v+q$?~e#wuRcZ{X#ui>^8cO_WOSh#S2XBmZ|8E
zYsC_4%%9LzELSbDy)~KkTq>U~?lqKCQldh6&LsLdMIW3R1xHi+GTfJ)TbyvnB_!o;
z)qw(?<T=98@!fKiJR?WDNr7I5-<B;HNRZk9_y4RH0RKG<cOS^HSga%eTm0%OXa{-W
zOI1_D<qZJ>4j|lTB=XK-;VyGK^9`N1J6O_TMZ$s42ZAkK*Vf%#`1w)oU#ZcEgBeMw
zH4WppT3Jy#K4Z}xJ84MSi|2^rs^If&J-m!z^!d4Vh6EFl19OF4YxT~Pky$J8ic~{s
z7QaphJ|sa7Lg&fYnGsxlSpE{Odrkxi!l_H+=EIDR`hsGf$Xd{bu7dimY-1l<0gi2N
zNPUSOWdh%5Dg2^wCE#o7mSIt|F%JheIyyV~dz2vb<SVnqAtG1a;FSikTS<IQu&Ec+
z-G|TkOSuyaXV|g;2n#^mr@B5lS`byhATgHJv-$qS>0xcJuE)>`yc@xOwiS2NR+C6p
zp`xMxBVz8@vMB*QwTsKQ#?Ia~@$N*ejvto`ulQPx6t+%vU(WgU>-@tect?i}gz_zL
zD?oc|<aq$r#1Ie<xXr+H<{uQ)-Pdo*!$Nu+x*ZKU)l5ksdDQd0A%(DrX^%BVI~LGW
z>)EO0Wjb0~PE1swp>LkDrKKg9?EVqp;pdKOQ))i-3p5hTR-RdTfN83d;5TSurPzP!
zpmcf8>ARp2S5<f^&NWEvcy5hq!tXEgFkGZ6__8_7yh+Qg82im3h4AfX=QElNKj&-{
z7|K#Ab11k^NP?Vcl+2!y+t|qvV>@v7wwF6vEbc)LXj*Jhzim@f)4&KT#9071E`Mqb
z%ndXA5^9?;{+}J)0f3TkgFRbRDJ31gq$DqhXUsZ0KMA3UC!W<)v?XS@X-?&yJK<DB
zYT7isV$*me`zn49-EewzfN3X2BS-k5_~zS{O&<kEp8<-$U2Ys=w^45QEV5H=UVP>f
zwaU^PH0SA;H`hZoMMS#pH<)6Z_Lf}<a(1ZL7!F=J^)nUUjtJ(yKR263M$$t#-N>C0
zCb5riNGCmW@zI+W%dVyajF=_gRQwZp+JmA_p-DKO?n9mX*?Q`PmGeRUEl$r8lTKh(
zFC8Ak^mOsPwN7A=wmcDu6A(E7Hj`d>E{6Ob0rWH<=Q>h86>amD$<Sk#K?4g-7ylyy
zz<|J8D8!2oE6|nqNfvU|Y)Nj7fbDdM%keXqo;meO<mC?c@qwAd{eTOCDK@JX7HkPd
zLM*<Y5B8>F?BVdfE1mQqId_f%Ck0RH;cGc^_<gGhWuP=4Q&CL%N|Scdd7foj_1USu
z8U9%@?eF5}R<UR4I=A<-H*XjPxLbI9(_oObvQrSXz&3V~XC;UDU+{ck`b%VW*p+ml
zpJQw4+S^k=mvB%r9KqJ=OjIe<mV59U?;fxF!xUgrmGv3OHo)L=gum<$g_Z7wyl!JY
zpT$sS%7WSa--lx>FbHrEt@oNr$cS?@e=jkWV-&7pkp2kRk7Rii1NH-N-x!8Jr)aKv
z3Sx8_v=Hh+%T=qv8+>vhVjHj~eV&;7ot6uxQaw-ZpP(dL3*Ae}Z3kNeSi<0L4p`Iy
z5)BBv?QktahtX^>ZM->Ug|V%M);KgPnQEQco9WISA`xD@xAAZ8PUrwe$oQ;fude6x
zLT*j5PIjHtJ_nbefK__F<4oRzCh4);nwbC}zu$I#XP%h+eyh|buF%?`r6N9y#mcAH
z`o#L&6~s=nPxpkhzgh0Sipis#JQY`5yl8m!xTn^QkIm5!YuAd}=vz$*(`C%lzpn({
zkUBN;`R_ix7Q-=)G{tMyy%aPLt5>@E_iqn5tpo;83``z)>LTx#i@!d68Yp|Anv23H
z-1s=#_uvXhX$0dec%nL5cxi$l;{h^AHu#p%jbH>`>MMf+0mu%lF;9G@{~p+WfGjNl
zn?OebqPq@o!`Ws?Utz&uw2Zv@A)bUojLv=XGm(EOY!!FxCN3MG!OBieP0<4Vi@XmS
zxgyv7ndFcxlo7@fYAB?B@wvdld-i_{(U-FCj%1x>{xio`tc5FNO#52Hr{>n8T<X$o
zM#}GUVW#boP}JY029-|KWz-4`#k(xbRLoptR&0`KD!-}-x^nb$V0VzX+OZtrNGA3S
z+gRk;G%De>me+Ra4IgLBtgo*>g6qIGDe;*YhuFHxrEY<2%$|D~KQA`dn$l#?qu<7d
z9dpHephV5&NW^Yg-@D~I!8A<2%^S3S&{A7j4&8?t1s}4aNs##OqwE73jEb{s`*d;u
zL<cXpCz%3~U1Hu$lg5>8SWPs;N?wC2amRP%`)MHMnj0HGaX@cF%+r^tznHB#50PLG
zbv_58xsS-@_QD|=y#46o41~$*>PF*J!28UEax;cBHIL_70kF7$OywA$J)h#?C>a}%
z-wqL_7wv_ZMbH~sFAPDN%;7|E-%Rp|=1B^V%_EC(j)EQp_Gp;<X#zK&RD8P+Qim@k
z2d*3}0D^s1LlMPVTuAG+a8rdRyvxJ(wj=5$z9xa@-2z^0y~7ARa_CIOr;AeSZc=Y5
zXgRc}#<`@+EreVOZc;qCX7EB;IUXe)_Mp0g>f}>1-%`%9Q4X5v+k*D%&7;%%RV+I@
zbj_zjw8PZSt<Rlsv8C!bxZ<rr#z|-4ov-hfxl8wecp6`xwFOT&apdfrN)ih&$=8Nt
zo$<MDm?d|CAm^tpGE_&3Elaezphi|nMIh!uK~pn=neEAwC*W|kggN!sKJ-c=;Lp|7
zCGx<Ikjwy<Ke(BVT>8yuvon4@)X5QDYm*uffv_4)H|d<XU)vv5U%Yq$4GZX5m=B+c
z^y{)h5hrmE?hk4Xh*<bksJpQ(myQ;@UbrUQw&Y0Veo&smIosY;ms~Y39LFj8yD#er
zym>%f1^Cd*Dr@2VfAyC_YCj-ay|&U<A|9yR=vbSkb*{@Z9$BDrGw7YU%JnmQt7srq
z1LmRkVtkn788+-_1Mbn4k%~LPH;FId{z(^TI{;1y44ec7o`S3_V%-`}for=Y-a3G)
zT}v}_-Jc0{(aZ+)0kj%3VVPGT3xHU{_I5^J{5TJ%YSmH!T-SSW83vG-ZO>&EyP_b<
zW~B#09|0<ZG{66f`6;-(6`n?BzH3j<FXUhwL^ST)jQQPK(=j5Hut$k$`dGfYs>JjG
z|J_4?dmc+}FpYma*VR9+`jqoY+{0v*t32U6?r3JItE*Se*c-6^cX1zsMs9wjy0XcX
z+-#{D#z}zZhd14!U4)iSI_gur#zwv+Q6mda|3e*jSbQW+q7O9$6r?mF7N(}4j8$^W
z?8{H=f(!rOIZgo>P5QEjmhWQRYRNJM!_#e(kj73gmb>31{-8H7@4udozbFvHe4apJ
zA>H(~T3F;@?dq7Pd+i=-r<2iv<t{)i3W}FT&dxcEvFa_g)<$pAQJB>g?S;e^OOV(b
zNdE7Yi@??p5Fm+ReyAg0PVjL3qY6sLe>(+%+6i0)t`o9}p66@74atW6Y48DGq51*!
z(FaVMW1ev63WpYwPSAR-JXnmA)4sd{8*j1A&E0)MckiwY*yR3`7ph+X2^`;kc8tw(
zY_Vw+b5xbYCI~@<*A#JI;Q`HPt<}U+v+HTPOffNVT3Qyy-MHIPDC>?YWMpIzQ}3}_
zm80J~PlmElCz)we6pGqy<gMFOS{f*DYzc~Dmi<F6{9j2Lgw_>Oo<7ILabSJ|Ecybb
zeyas9@Y#U?Kx?Z5EbFJwQQzbwk7@3Ko}j3RZ%hvGdQeebX6Q_mI=vVN_o%lD4{(d!
zBZNdh+JAG?;mc<Ry2&yZ#VDUzl`ZnH$&|w&r`qv;OawY&0hg(UiqlP^X3yj&{GEQA
zO@TUHY-Sz@AUy|@%oa$i7Z?6`O81Lb=t}mp)s&`sxM#HYeN9C0NQ^B+4f^#Lco(}%
zkI^njB;9#t7&-LcJ>N&v@j?RwW9yilK+JOxQlcJ-a6lXm__a$^F?Kmb<2GAvRfmU4
zZqnDZG)U-S05#&)BUM#ZU>4-cf+0z;5GV+skRV^}A_Fg21{dRUfhqrY$Z+?MXucyC
zo^e@>Q>Z*(l4W<@d-SZScVKW-B0)_?L$AfvChV8E6&62brKo3TH~y#HU9Tii6_}M<
zW83=?$qf&!3a<-CzmW2sFE@3_c;aJQu!2r~Y1GY%j@b28iZ6H1>%C;Kq|?gCxK^&V
z^g!iU<oN&ITxe)0D7*>Ky6iA_v51LPL)!{M4NBC`WSEj&)!#>IRu)zJpq2uY`fVzC
zeOnkOEg{Ab8kvVyAa#$AT_wiXHGKp&!E<_XP;QK704!d`TJh)3oS6Yz@?mXDAcu}b
z@~=Ja$$C+)RzPTB|L@Zmtd?m#O2hnERt27m4KGf`F86pK&tkp)tVE5tVh#dS&9IH4
zo(*}gs~)B}>vV?36aIz*-xTrSsJPMH#Xe`3Kh*%pjj>c4hM$ltU`&gh<-KdsyxsBp
zgn6+!$3E-W`=boGH{Jbd{}uUwX5;)JpgEvY?~ESEj_D-O!}mc<ZvyTOz9zP+bz&x<
zWxM3Q7V=bB(;8^{&Qag}Cev<i_*hP^at@sdl5!*6z&o3%Lkl492^};-_CZgUQN0S7
zwX}cJB2kU8xCcDqgMZ&E1AMRbm%1`5?@||Sl;}Fv7;(u;ZQ#2HL{96s*AYk~c99l_
zLf#7Tz)cjO6r8Bw|1mmyQg!QlmrsvOB<stn4zLxHdkjVIV5i6<WY|A&RF>FpFSw7Z
znhW7Kqx6<A0OYMG11@&`8bEz4N;RKe3_mZwR*K}qDA<i<i%e#9q_(oSe;Z2i{uhG4
zS^<qwC49la?7-zCB1e4=851J{5=ux00l#+rxW<T03hWRDssZF(#K@aEJ@Y~WL{Ae#
z>%cNEO<3(S2_fdTLb+$?$7^O1Gg=^tFEqvg`F_x@ve}Z)dVyVHFB5VaQ=UOW6;b{2
zn8*I`hDk{f8aRS8yuZU%<O&NmRCTYS3TkvHVbDqJw3>U)H)oQmeYsW0yFDT-jC=Vu
z;r6sS^y2!rLD1v;;Aly#KK8TkZ@=KidKcX+WvYueWn=gmIADU=o=I=3+&;ZNx1=Rz
zI4?Y43tV$S1ZS)MZg`bfI_?JHiLTt`0R(?adjT?wJpOh$wq=N~u`R)HtE~N%mI2E-
zpZcorq4q+AT&s92#ooyn*9A4u-QL=>BU$hW%70*xNC-%*GX3I<cj}46@<y_Emc1)3
zn+(2b;}XoQBuf2jAd~ZOre4Sv;bLYcN|PZpAOrfZ2dkYA{r&v`<Da*P_uhaH66q0;
z0qF)r(>Y8CO5y}lpgkctthfqmoPQniAR!ht22!;YgHQWTo12<`C<sR)`7GNK!0UaQ
z*6mNppj{@Y5)=nV@d!0ymMm=Z1i_TuY=jLYt%hy1Kx_g>cHDjwQ#>pHFqoLz+1b&`
z)LdMfJwVNedFq#ZKu84(2Vp1Lw+?S(b;$~RSleJ4(SQy&;}r$PV6^zns(|~_m&Eo6
z-{vc<XQRYz?10n+u=T+M@O043b@6ne$3PYdJu65QAGCcGeT!Jl($VSZa_U?<z&#&e
zJz!(qcxJY;YCqheT^l?^<HL_8)Ys3QI~7xJtk9ZweXpVFAi-+c2dJnzsb8r<Z#-OJ
zdkZ=w7<BeCKO~*MKM<CXAdb0lCe1A+sb8aA7Mu6X0(Z|GK3nPX(R8Z`lR9R^KwFqR
zjofkJ!2E#U<<_lR5N2*(D8#|RAtXcqz65R-z~i<-QAG4B==cW)R)SWSxWEc-+Pu8G
z<?4vf06V~5q0p8c*!u%3Su5A)<(R6S`onCxK)VVMAE@|q;U4(=_b*~+-sxnot|J05
zX^jc01?UA-zt6yt6F&K$|8jgc>@mjAg*cr69bGvazt>%w!PU$j{n2Zx{f~&<mB^bs
zPZR0y^4TTir}eLXOOV8m>nth7oOt-ag$)F{jdUvL-#cXFI)^~V%d`uzOb`wV={yoj
z>dJte|9^1ABh!~&z6-=ycF9O@Yxwub$ZS(ii3OZF;M!5qwuG;1wZxXohw+qzRPnvU
zAl!_^;Q>9Y$M7F!h7(W6=+jHa^b9ONw9OB@@(MhUZCkve68lA{^KCnGQIkaY&Hw#o
z;?I|=NmTcv3Zs74KQel<{b2<S{`|Mr<wSuo90`)=c%{qU|Dc(Ff9hoixbiq(S1pS0
zZ}4?x8!R@MspKjObmf|CzBZ)u+EMsBAL%E?Cu<q8*UWnOrT*_<L(<A#9H(#G-mXj-
z>9ty1T&8o{E5^%cXO~ooJ}a4deXO|mdet{`tbURD|Nh9~&lJCN+GS_tYY(0Y`KY?d
z=JuXEIa~Lm%D;x3-lAJrPciua{BBvYquOQnLg`}IF`xK3#Blu?|M&CJfX`<<5AN0K
z1rZei+mf%`mvO%Tzi;q}GWyK7I_a?Oy0utm2~wlNNhYzix9-b6|M$%Z9Lsybog&K3
z(3{4sZSFXpcN)Hz{~TifUeHUji|{?N6Z~14LKI4HlOH-FN}XjSTSb2FTsQ>L{`b1S
z3Bo^EAGtHZl~y?tT4-K<H%8j3@nF+we3<Oc@Ig91$A4QZ{`&*sCKvC!KNUz5B}fKb
zeAVl6;f9x=Z{}3ppTB>K%*=7STXMfV>4-4w|Na5u&zH+^s_+cZgAi^zRU}-?IS&=k
zs9W3H>8rS?J{|d;kB|EIjU-|eCZ`8~o7)%{5dMr+jUN0SE_+w@&wupa--ZP8Lz%PR
zRw&aKDKY1gtYUGu4}thM0Q~n`lrO+Lmka2(<&F8jpRD-I|M~wT-`M_No9O>*oc-_A
z{QL3$CkL<T#Up%eGSVlC>`iRjf5ZJ|W9_j&`xYoIjs~T(`s7Z+2PN5iNw*z+`fg@v
zs(e>pDE=3?5t#r&CgME=vgf>hTZjo6fx833R23M*4qtHsJ<$V5lyOZjAB?_jwifb`
zN8U1coM+?}i*84((LF2l$3LXIM7!Sc^`+ts^~JG?CApZtE<I^-Cpm?y4XG%!`OL5_
zD#7$%4$`Rol1oY&UMr)M9Tm^65YMlrPC@Cp_)_lUcdnJW3!p_H(hPp@wG|n(FWlf?
zl=$L1ZglkdWbOHd)NBE$g>CXc=&w~AFydFAm%BshOQ0vp37-D(^*yPV-2;xkGf02P
zi6th+DS)tB0K}WfL}0&8oF3eZfn*ut)tVGL+nYNIfZT0*di6y}21HPvc*z6anPjkD
zG)m<H84MQ|SWk(Gfd~7W5_&?FXM7!I*SBGNS5i}K?DfEUdg6yecIl;t`_&k}j|TWx
z1vuN$O0T$%Cm=%Z+Nt=)sYNjAc?=wV-z{fM5lnf~<%uBy9}avnn9r&eMwU7R-WR&K
z-qDHBr&KWa-SM8A)Cy!wwy093j#s~*OLoJ<q9>A#RbKRAy`jh-)k{1x8=v+|Y36#!
zh2z2^IS4}YKC+(AgZcRtzVRQh>8eLb$aK4<ZoUMqlJ1CIx*pNDL6!QvMD2M6L>#<4
zn+A#-7~_;nU?a^wkxHp41&u8DSFR`!_aPEBmn#f$ioKAp26UkdBo6_AdFsu!t{u#S
z;9q&@jt3nT<mL>`$^j)qc?9ziW)grUSe0%-B88#|Sc$8k1%W+$d7;WiA42Yhu!C&&
z9~J=dbD$Mwk0$2JE|*W!60aJ!4@a^vY~vXun5NxM3ojaPN}fMGpaG`*n);%(RSC%i
zTVEzvw=ofMQY3W<Nh%s+L91HqB!|1kL4sYcDd)DN`WfQU!E+_3`K3?Ccge_<&zr80
z&UqWOofiXb<zsJ$M_@ENYEidzWA5u;RHd3xGz(vwpWlFj$ocnh`peb;@Hc=JM3YaF
zaxstKO(NU1I)JTv%LRdL#jui9xb&c)JG{_$b7QU>tFab-kFN9Pku7aVe1)NF7&2ow
zr~SZA4Q4O=XBpbhaYkN$rB%wW1|8-FBdI~wjWk+!JJ5_|)9V=ZQrZg5x0)DF&c#H5
z2zRSHXKYTRGpG7k<S}ra#d|BTt&W=MKJO&`+$w&>OKuqs+On^_`vzs27*~Dqan_G3
z`N>i;=XwV8(nx3eIPC~b{;tFJ;xDwnJ-A=l6CCtFtkUWnF@zxf97x}sap795daxGP
z{S^-}t{XQA%^0XjZhK`wN*|7+2Ca?G{#x*2O!DX%hwU}1+5_LSy&%M`uO~r<g2`bY
z8c)z^&_EZyqx9u&B7n1{!!FmPN#MJCN!~%KE_+ESSWQt^trJmmpz_TS9Gqxf9tj<f
z?YWV(oEaA|>kg6CsDG{A4@U4DY}Epb6@br9Kqq|9otc*W{NQxt_`p$0sje;yu@5z@
z#&>^mM%!2_D}6Hrbg-^}HML^p?gTE9C_Rczll2Xcjot0mG9uYB1bG@9IwS{R!jvyA
zg5V(*ViK#sBA%3-4CnhE3>-y#n1W=`xW61b`0SoeK~(TVqdNe?LWtxugZa@z%ry}H
z;+N#0sWJOXN_xI3^-Tf8#2cj(*SAV7Q)Bs-`y<6y7wbk9L|jPp=@GsIPE)^LCH^=C
z{VF%zJtQy&DzAtY6qEhw*4}HonX$=}ay~xBNrYUf645Ym){eeB!w1fi-MsUUOuAb~
zL_}6-u`2j(gNp#kX>q+97U6T>?Iaej4&ds`;Kd_3crEa@+E?Ad9FJ^D2QKN!)MPq*
zQK#MvcTd4oOA*m1uc)};Tz5AiG)!g`)@@QzQ_pOvf}S0?gvsw;V8IxCE>O9I%x{D(
zf+*4*IOfBy#U6^(RcTT2N6fSq`M60_?+W#Auf*x)g`!Fq$zI8+?Pt6#$|#gRsgd7%
zf!Pm8MHx|iLPa+;s(JUkTXrr~?-`GvXkVCJt9+E455_G<r)4(f#?etXo!eSmrwqFl
z;iJ6&0d!8%QK*L_GQ<$@m&>qla0r5hF%e*CJaaD{Jc|e(F0S0W+h^}z)h;mgH(APr
zas8TI*%)YPG>gFsyAHDgIAkgc8~|_w$1}L$McvL33x)sJg7A=b>Y>3Uho&qB?8B=C
zsj0Z<BN5y9`RS#&o182J7M5d2lxL+CyfypMaHXJdt#qvln_*M=beV0oMyA8Oio;gG
ztWcbX9#qJ$Rwez`3bB{XYqQ_h`aTUI4!{YB)y>Ui2*NJF!R96^LlR*n<QK*8xngyK
z(-g`B3S@YqJ>V`7g-32yZ!16t0g><u=lct%;gvIR-atr^95G9Rgi2x^MgIj!y5&Go
zhRIrZ5ilBr2#D=uyN2`M1UK3tCRinXDod7WH&I10>fDg=6W?hm4LYekVK9wp@tbq*
z4(&=zYq`JPUOTtoQEU*_9gSaL!{<1vNd4MXQmEXR$|5vHgsJrzgCYkh0Y=spl1-|8
z&gEb>qqF6Ej8bvB(qUIu#S0ik$eM`a(PaiKB~-`xW5=_sW&!e*_dEz4R5ld2oHLvG
z>;15!R{K}0=_M#O$l5KVc6!?`10d68q+VyUSfxsAey#qS101be;rog|dUj`K+IqOe
zTeui?srPKJ>Ja>=5kC9;7VBgsS+-isVfHE`2Q9lZg}Z7b<6hF(w(qXgF#_CO*(s}n
zx}Cg^z5`#%R|1o67{EdfrD6?^gX^ujyWu;fTcviFI+o3Ab@}%usqb!4E_~<p7qaQa
z9%XMRX-j=U-B>+EMU_cLS{Nl?vUaX>U#g!?vr-sY_lT@p%b!L2C6=pD52YC?BkFzY
zDfh%88IC^Oa&f7wKX=2|CeoKv=%8zMNI}oBMo;heH9Y~+irMX?rmWW5{Oc@buaiRp
z&Q!X7$$utRTZTqFq+BRIA5$o9G&Og`f#St__|fNjS82L<yU;nL7fMo7b@s*0M||(@
z4D#b$ReY#-U+=8(2|Tw=*J@DaFwC*t?{|#&;TyBD5Eh7bwsrG7hu&}=*^of=?&-JD
z-k@|jcwsVe$|qmL)}66j(6Pt<H%Lvk7cY$^ZVoMSwaPi<3nzb%j`+O#qZPqqEfEIt
z49V@y^JN7=`nK-r7(vL>2%Sfj|0xW;o~S6!%$)v*VxTA=5Yv<EJ6W1w@WK78#d|UP
zMQoU~$xO)7cFpN4T#=K^^(px%FSv}^cFKUMhjqDs_$vvWh%hi&Xw<FacKm!<o1<_0
zV+HoI>x^&#Cq@TkmMo=$tn19NO0q5cbAt=vHr@HM^`DKH0a@a1<U*!D7NWs9SPOYG
z&Ij5DaAaTG_|uq_TMzd*4;4G-u2`N$DVXCMc~RF*>TJ0WyxHfmIJf}LDm8|MB07pJ
zYQ=emlq=0u<YwAll}qdsdnwj@K$Wfr{YrXL*uRTm%eC~fcXC<-qOJq-!J&U^jH37@
z(Bx}rVQvoG3|KsCV!%7=;o*_LIt!r#M86C)Yi(_9b+V2KMriavooECL#vrQv-6?=O
zs=?%d<Unu}^;s=c--ypNXm4rA$?2!<3!5bP5&Q7u1NoxVGBmXvUjs1MRmgUSc#1c#
zU!SF7XJea(ei3}4yYSma-KTGaHQlL7>78G$nCCRZ0+O12!S{=N?7e)D5nv)fSSP+Y
z<d`$Xq9sdd3an-{QBcrNFG!Rdg!fx!MIYQ`l>_1+ELk#k^bKYMcsCF%P$)p4^EA*S
zF2bkFAJ~cH0)zuL41^nYcoV27$QmXJN$Rpeg8-LWk)<jv3lt^T&8q|nko>*+YM`_X
ztVe)d0}Ki#ivz|vo@J`KflLjF`slh*v*hcgAc&8=rVzXcwYD*675ctG(cQ~Rb_5U<
zbpci+8_tS&$iT>m2`6TAz~1tO{UFFHkOa<eY#HHvc0LL^2uBcw0f-vr7<QVdEre88
z#7x_*hEnXCHDaIukPg87!!9^nqr99P(2Fy`aIeFsCUPSk=vK`eveL+jNf6g<L4L(M
zQiL*y{HuU6fn~;HV`GS0IF@m6(F4Mrs!uwG)rjzhJK_{!6tc)MVQA4NPzOB>o`anh
zjgARreTJTk{2Ew5C^c=xzT4zhYuc^o7IW(VjX17qr@c9P21c0(&su1G5xrQ2=-60x
zC095+Uh~<dL-Dq_zs$8C0~jI9o&NO4dlDbbDzE=S9ANB;OBFE7$I`Gjsg!)q8-R`v
zWbv@CM;;9N&U47?2s53_8?Y6|rmJzO;?s3GMZfr=P{@^C09UvEKwUO#$Qt;P8#_N=
zmr%6ethK<Enznx($}6;}%=Ek&;-T?QU&zs&oQPhOJ$6FvtGN1uul769smv!Ngx-F+
z!kR?hF^hg~n60M%y4A2o*crp8k^9X?M5fhCrJLE_lPSb^U{-&k*C!*ScoZctINKsv
z;eY4i^zl67NUsEId2fgJCPVji&dzm<Sr0hsdZdc38$WYGh7MiO7>Q5$*jZrG)Jm{2
z8L+X}ZDkPg7Avz~Ze+O}$f)4EB;-1ptU=Yx4=CT9)xdhK<BveXWnF118uIn=&R4zq
zEEHO{i+#54wRUpE&NPvv-Cpthf|o|S>6Bl5YVEqu*4B=c-x}2^i3S~=3pW&erpyRN
zX>_>Gavbcez)zA&hoQ5r#bUm^@b(>h?YqNfY+jv3O5(C#(9KHRAKAYob)R_g`C1Y?
zXRRByvsW{6n;p)%vECEq7kwAIwi4zZ<HNRFP0_1Jo2Mfeky5+!IrHv=ZWl$*^`NX2
ztjSar%?l0Bv4wWi)tck}w`s4~<yJvS1DhA5oS&KI8ni9H=A+>Ktb!kB?Dy>IZe7DL
zop3_#%BJhctyX0D7Iv*v`~|OotlMGj?z!<~Q-ZZs3z};oJKu7_Fj|kgA{+bfZw;5t
z1wnOQEXqQ%x#mGgx!AWzGiIC*Ojx9Va|z+wGZh}Z=Pi7H1ISL!XpvRwu}1~g%KA<i
zY&Ik)HE4i6{%D*qvmOtX4@z844HwzhI-+&bKJMB^g4L$DncVI+4#ObfIoP(#>))PR
zOWoG4b5%T$!G5r1vH{geetdfW+*1X)NExSJgLD-hp6e1moZG_@pWQ343J7KCS^?<`
zwoKK{Q^3?Xoa1toHDVA3Q#vLB>E8-bK3BwDii`<aX~Jvjr(8tv_WfCyhGk|wMT2$)
z=!yf92>HWF<YAkdxV^5VwxhFP#qkEUWuSNR_or?<i=_~JaG`p{;EI>KyYk2zI@py0
zl{ePqlVA)y)Du|F%HPfMli4_sm;os(k6MRk`O!#_CO?F))~<EPfki4I)Ac#5pMz=8
z)izQPP3-<4J9JFf+<Xe2eTW$3s^a-umGmUAUKN_!>wdnkV5yXr#&0<wG$T4I7l_QH
z33CUa-V#LDb`Pk^VPr|QeWIvn*SA71F<u6Gqphti<H|T8$46ILG)({P)#IU#m0)6*
z*$1O#B)bm1K4?#sVSH%+dOZ`=A#P9>u3Hd8o?*BkAq!s`hme#9oIjwtSGu}}Uh20M
zASPuY$|}ybD9^#A19Knwl`B(g-AE)7mW{y*MQqLpr;K9zGM+jEcqdQ{3Yj)u)X-1R
zCpU8n?gE`QI0g(H>M3(Nx|)jJfap(?k4ifG!(;NZ49b1#s!A-}9Kf)2<Qt%VPP)u@
zriFC6Hih*;2r|lJj)h<}_8RQX;0rCsprw?ofPg{75|`?X(|<Nu`1Ab@hLSr<9xtE5
zKxzO|Bgl_Pu_fvV^fh#{HM0jG^1vX@adOrHbR!6^#y7)Or^}1O9f_>GUFBj4F$M(Q
zp4R#hC~?3Mlwb>-Lm00;q+)amVfn*tZq>diI&oQqA!Ho3t5GWW?5+30B^P2+N=%M|
z(yvuAIW>iu(4}0x<2MiQ6`23Uh2*pEGxf1j)?5F>0=|PlMc>CE-7p$P1BgFIa)5YS
zPR`MN5AA!fkAI<7a_;)Qw)v-Oa1>SV95g5Io<{Ft4fazeQhhhHMpJ9}3N3lSI{0Rh
zZn#z*3~vaMYEN+X$&R$h$NY^jDFw_6M<<VdbkNiMju(W5&THWpfma)nG17Say>#ee
zt+hWEW`m1AE_FfV#XxRRq-wy9c_K9H$ZF%_mA8oxs<-%!uKZLg3)sDQlFI40u=5AK
zz4EF>4!#c%Fffz%N^v};rB#;GrMrHaVAL*YsaD~*s`yjwGK6Pf&DO%1x8{XF(bMgt
zGs{@UiYNH1a48`=A9TF)ldfKK0*8(C)c~&z?oAseqq8^ozYe^oT%y`P_Qq%^K<Ri+
zO@~I-M{q-L@yiYW&Yq)My&dmaXNHvj&NF+g(mBAWT790L@LpV4c4-Z$!^)2}p~rRs
z6$sWVd0bYOITmP=2P4{*t~|$*J={nZ&w+w_W22hW?xx)ELMr%>8-B-)O@Xdx{^vp7
zZ?m;-Lj8t)x2VfsPY^m^VYsQ3h+zDM<+^Mq8$^9BQEEABd%dBhm2#Tkp`W4nuw-cH
z^~<}@RT-<lTKl`%%5yJs)1ZCUKd-{anfG9_B}lKl?B)(q?~+oGtM92#j%O;Tm->`O
zDLoVp?jd*Bz_K4JV?@bb!VS05*u-)#PiCGcpfP&vLN>mb?FF{VNkb3s#<)_L`d?z^
zKtQ4T$Vex<2O2}l9Zq*SAK<(3OIbB#z7tKENzeez!e*pSEfMEAz-$;d+qK5M&>=)S
z8>oONQJ&zJ9)4)_<P`?1b6^iE%^~yr1)VnoY=nm!JrW=r|4eF{O?A=|z`?Ftv`Tov
z;}{$STgWc947pFo1qT`SBCDL5xL2Y6iNQg)b5Y3FEd~M_cBhrh6z^qpz-B2J`Gi{T
z3JLXh&afG=quMQzadD4~C~F2_vjAkeToFM7q6(?{2(5Ol(AXbv$ydPsuOL!J!2tu;
zVH~v@L!_pV5OJ5O!sKk7!e{03E8t}$z#~~DG9GIUk_8y=^`(vcSDEsG$%D>BF-jgQ
z7L>UQuHPJ;!e0tRR0_F4Tt4D5D7}-cu|(A!02rr?$$91SG*A$QbGQyU_+=^)Ab?@`
zp%+HX2g=;iVCnKyOz{XS03$KPF%?$I;J%9H;CiDnXV@U_>Au|oq@i?Y>8Ne}hQB)}
zpoS-=8UIB?+6Yz_PeS?)xbJ=v#s=WkL25!jcV5|D?wHWI%NnrNBqR2BOA8}Wga2n7
zuww+tHM7WRA=e4}oB*Y$O*-}BM!iDCWsB46v$K8a+_Tcs^virQ;s;;b5N2Q(K<#@$
zyimQ%TJ0`Rt#!-z@!wMmW}_s{V5`ww4<vK`UZ1APstvAswA^$hi5)XVU%5%!dT+(@
z?b1i#WFu|lVJh%AzBi;R-R=Bz)Vp}C``rnxJ;W=Mp+t3Dwa)j_wJQTBMqNz$_I^lT
z{bW;W{bXfP&}uf5^lYfjG?h_tA1cxHJhOn}W4f!CcrBtkBa<v@jV;xUEHC{rS`Q@D
z|BBoSXxCm}B`Y>%4BNHt{a`S8=W-}l@B@>H_xsOvE9Mh>v1$ry^IWqgCPS^PAfDHf
z(OhZn)iS8~W^gwQKVe>*<?u!5><#X+KNRT2io8U{?7oxsLf%ci6S8zSQUab~-0TxK
z&>uh{BR_bcTv8U;FUB>OlD3Dg_aBd7h4>dvGQH}WIlL0&_ptKa6|f<PKt_Y7_qq4Z
z`2cn}#i_nj1%XYFZADej^5M36<Dkx`p}L3|3!&Z80<o{PscL+H*u49i)qkgHFjF_w
ziwMi=;>pXI?9F{wn*|>UDuwoeL$(g$P2TzG4==l#fYk}4y4@qSAd^EM^VMzi9K=vl
zL59cg_bF?Tbtob*;*q)P>qm8EK@Ee&f}kAZ%$*IHRdBNdiJx8MWY_Vv39jj)pX6YC
zuD7a;xuc;-u>1>dTrJy|uw-HZWQ$|ym|Y}<&xFwM%UZU9LJ!*L6O^tBx9{F<)5uFG
z=*keCnY`Ca-QEpy?(R%6Pp__Um|Td~kiLW>N&FYs(ddys%$I|QU*|)$ISCIF6Bskp
z{`Pu$KcJis3lC4Jew2NWZel0#b?2H^fx(hD$LL9fn%7#pj9n5gfauf+x6S(0WD28}
zO8caqef2sdHdzs7K79B92xxgo#A@_)643l33+j#Y8@tsh6JP~c!Y*E8s@hSSRu;Cv
z&<b}gMHN8@kx^F;JA{|b84=f5nLvh53}JYo0$`l~iQzsusvI{?jJce*Swv=wPRrbp
zQ==ZqVg15^F-`irDP?@P_$R-CAsq{uW6<+>)Gl{Yg2W=w@a#;RrZa%4rKV=nbO&0K
zLdd6`vq=^;Gouw{UW%OidB2CN4BS*j`8>8M8uH%nc9OX3xlZm?bR*;qD1nKg5T7#K
zTvf;63d~HeP^=>KS*yi8ey!HO4@E8wRbAwE$b#U-;KiPzwcW6^>o%TE3KYC@aZQYQ
z*zWzsT;<j}Q=VmsFFUKbVE4K{eObUb579fhn>SXQpQgJh8irWV35$))b7H_}{8hY7
z$ZBFiP~VGKWBu@bdv3z`_T7afF?Iq%PsqIG^7JZ`P%0;BRf*$ME$5#h`d@&Hw&2=n
zDVk8~R-Ki69jHVxc};~&G$WV%c`u|O90(%|5zj$V)_l5KdJ}r;6Hcl|Pd4khEvYEN
zEm-^ZFZg{FXRJuTKfM%|kx=uskUWfd3)vz~5^gp=DxMUG5f#Oym!K5XPt$_EI*j%&
zy}BaR6`K8oAH^my&4@Mak<{$eMc;c7&-n%Hb(J&P46lC71R_5}x1dJ<mgp@q$4av^
z7hFb1`?UXBW(;jLu_#`apOcg_9`R|Oy-rW--Kab`R#)A0=QIk}rlMD}T{WqdtlJgX
z!gj%E>z+Ho@X`x*3)MXJmYOg0X`*8;iYJ|!)<3&k@`(x*=h~GnetzEBI>Q67NOf|!
zf<Aow$Q})@4G`OF=P!GV`!k_6IriJ5jhkYYXeKxUK=YJB!8>}764J0h@phIB<l+j>
zxfR+7UREYS+rCdo<YdwG--(9slPzb3_R3~f)q|kaUyjTo291eu@$#zmb2iLzpX^s4
z%t3#9<8lmKw9tG4W!5vbvRQ8yX+RWXtHi!M!lcDJIaG84hx|UyZ$F}6t`52&;LL)D
z>wf$&s3)y~t~c2IB}Cd>fI%L119x+N0``d4bxD6LBJ;Q=r=f~YH9S6P@tOx2%vxi_
z9U(p0gJllMCf(&k%{TB&mI&wpfmPzTeh!VoIN)Ks6=0bpBt*mija79pLJ0|`C8h&I
zqk0l^ucH8iV6O&c68ZxEGA@{?iig(qbazb{=`7#H!gI_G;divYPc@~Ol-tm1ZNWvU
zext%=agMJxa_AU>3z}5)04`O#$nvwv*NlMLK>1bJi^QetBXqf8AnQt?G_61ExQVbZ
z=#Iwx=y4#(Df(Q(I;7ivjvuV`_0?#SBMkGwCe`l9)CHE>dvGa3W*Ccxfns^$^~@Pe
zSO}s3+T$F=Fmc5TW#q<yO$*m~AWaf}Z*5qg!GwRvcPU*36!*%Ixa%!X98JT{(gU#y
zQ%>!yx!KXG47BtJi))pRVd~m;V;a*5mnBPHDkQgTeC0Q*Z?Du4g|X#U%45rr$j1Cb
zvtxAU-n`oMD>D_YOx}Z-{k|~Jw)S)#oGrrc^yiaK_2J|@W+$(Rdp6unG|MPC_$=;P
zW7T`G*8cg`urTiVwu0pqFB>|Im7t;JX<Dy3#H6J8C6hu%4RJ3i9Td-3-_f=H)uP`L
z5UG*TIm&uw;o`L1!(j)<pJ5XVkAmB&_rEo+2}P67MlKEULGtX|wMyygJ8YV1HESO2
zjU+XM?Zzh|0WV2=Pr}tb1uiYC&6=c$#_4XQ@8({4%oA}0s@LRe9zyCspg1J@)%wm1
zALo(SUuO9YexE%Cy7d8M0%|zG1Gm57iQh6FzonmJ5N_G<^&$Rp=jeW(<>IlN8Xofv
zEas&IDC)QRb~+3_3;PIzJcXc+i7j2P#h!<v^&x7#fK^)g=T8U!<I5@~C)fmEGnc)M
zTKh90&3kG3wuv!S3x8LxS{J#K_a?GQP3)`~yEaO*8FvvMm}xEk;_=dj&R~N&DS&|o
zIjnTI`+a_dr`;?6lpp^a7JUa$i)?3&-&~*Nw!~r-J!VMU$H}KBQj*eYFG673s@()r
zl+OXzrs_<a$d88MG|__H@l4F~oPY&?uO$)<>U8(k8b>m5pIgpJ-?_HeBaev~IVbuV
z(s9pzMlz+IQF>U5&tlEvQ3@t7rS|b~>feiq$$#ojK~H<l(QfhwCW41r>(?n~4Z1}A
z#~kvW8~qB`b|?Sj3uQh{+D_=2Hp1?^D2ydRjhdW0y;<y8*R5Qe1A!i^M=KNVdz(IN
zyuSm!XGhFxr(;d!r_bV`3~%Q(QVt#iq-p+k9cj{bK-kWY_mgQx+smf(4L`b?UiJ2e
zX9Jr5+){lMF_WGt^mf>>bl3^SV&B<QXH;0TFJL^bjk|vyLP)(exm_<1VO<o&K(H}^
zA4=Djp%{pH89MK-Svk;VLX;1{spl?S06(JxESZXV%Hlp<2}o`5B4d~pI9%|L5P*<|
ze}DFFa?jpfrayU2T^4UxT$P53iqe5~xt}gh^XEcn^z#OhO?(gtfcL;b3IeyBvhlO-
zts~qo&A-1sN#jWKL~z(CjP*lvw<ZUyO%c|3{-AspKSCJw9mKg*17m$-bf;a0&OZ<h
zOP(R8mAI`CsvsEX@?i=6;&SzT&H>NT=0g7}G|*hutzbkEshib<t35Y>9>SskGhT+t
znv@BbcO3$-&|T(GXmJRP)O`vj5s@8Sq|rXO!(gpBfY=mNRFM%8jC`x><4q>hAWt?d
zFn#iD;e+T?T*rm0JP-S)3$UE9TmIe94a~2Z8Ow5N%oX>$7!!r7+0MWW`hfNyV<Hng
z37j($NpXl4V8XWn0Kkz0Lk$QuX-HZPydbn=JwU>IU@OAC55GOuEV#(YP>sj1ftz4s
zd2|$_E9yoy+5>Wa`QMA@m8Ucg1;1$T3{>WKVW33>MsDA^w_l8tVY3B5Z;lpP3U!A<
z45CTnl@Y#8*(|~X{1!+VCzysNubTIAw&sX8trF#*gOGd!$TBfI4!w1aLp@E_{XJER
zEGG($17UwyWu>J=Pli>u&c^?+05uChi@VVVjYuxRVfe#26?3c{tD|KO6M)b_A`YYA
zyP*XPpCX8pUlpW@noe5jUwx+!EF3Wshx5Klpy-G_AQ#{%^H+t%WcC^q$@(9Gw}0N3
z_n=!X*tgrY6W+`S%xOuFAGlxi22TRwE2VSWJdtcv*CZ!K_n~~YXOr@oe6IqI1w!E)
zRPq|WcfofY9t^sPBW5Azw8N$EH@H9oFDBykA96u<Ld5NZ^ns5--K|=L?(`{bb+*lE
zh4G{SgDu6C8-m#N@IWT}o?kxWgE7TmmYy|PK<WS1*<3CEOhzSb^aK)Z70Vnx;g%;b
zc3@;HLSkfn*7_ZjnZE4zsl9NY(noAWvLTyF12is*Cq3S#pZ@fs^QqaSpXrF}O|ybw
zDbbUa#bpDkM2WSkk<VVOTgK~hy}}4i2|+{_>o|vLUaIP`6cNG2q_m8}%PBSYZm*YH
zVOpE_U7GuEZD!#2-kz(-yL0j{+eU9981}JlJ5rV3E@blKGN`isUC6N8r4{;Hs%vZ0
zi#;voVb{uU7RcngxW|;nEec9f9wSHWDAWfZwUHf|T`FZht`GCc<FX}zZcg5N>a6P7
z&Qq^jkx*5Szi$~4QZ0WhP*|^=Te9*t-@TKSbc&kG=4(j6r|EAHRPGX*^jplG@~8M-
zclnr!`q5MvcF31~R_cnHQ%Q>}7jQpJ?zY}3b$JHUtx*BT?3h17bIvYemsjutdq7Pn
z5j7Q1+fz<uO(ep^8n1u+4vD;T!MiQzMK*(k`+^!cY?v!guFoVvkO_)8-7MptDnig!
z(c=%d##6No!OY1Fjeg@7jk;Q=VCFK}R8Q*uF~jzR@+QOC60Zs45fdJU5oh0xfaSoF
z&>>R%xe4k33c|;2J7th7gj*abUm~gAW=YQdTE#JVIj6dtlQP1P?(f<OmFw<2PkeUE
zNgFD!lZ8k`uJ`w%?T%_yV7U{{Uj03ccI)X6&1L;?-OGfy7D~B^n9mG$Z_JfV?)&d1
zIlR)kqanjirPgN;G+AU&4@TmN-4)DFbByw1KsY<vibCfB(P<DkJOGKFiY<%KD!DEY
zBRt(n_1$LRam9<f!tzScKRMM?YIUJC<Tytl8%~2n5j0)BrMVU2#rh}9A4A+-sOvn?
zMr!V!hAtu=>U(!y#!eF}fB-R^8i5DCN&TH_Mq}kva8U4=Cb5Q2)Dfq{@o}rcl0^Vw
z!GLiU)(itA0Z(HIi1X_#VBmr%X(R`*Qix5;cY^+_gQl=G7_bn{MQ;sqnlxw;AqV*l
zWZz&eF^tv#S;kenc2lD^mrAK68yY~6n(MTCg5a5`PS!|Inf&7O<bu5!A`YySz@lX!
z%)mxuNSlaJ*T!?8`4QIOF-M$htd9Tu`POt5NYh7sDp#Czz~_KuV<X!YSt^sF?AZWG
zdHSOQQRxrlmK|UH(V@eT2CfSMfE3;gO=i@vHom|(?q0m^lkl1rmd#ABi6EEan~<8k
zsND-$1P&Oa0b<(Fd%e5vGEi+mA0Zp!M2Eq0VGIJX9E@cJy-XG>j+oveJ^Oh+{j7Aj
zr_K_U8O1Q5;*(GGD7P3~<0GtJ!tD~C=2VWug)c+#A#U9Sm%=+Pupr11&NIs-EM#Dg
zvWQ?qG|iGcAnxiR%PgqkuQQ>Qt3bY!rJs>QrwW86=#C8f@o=F)y_bthQ$Pt%x_+8_
z=z!%YefUuS@m5?|SaLv>(|U1t;+tVgN~5p)FjBlsgA@REdfHOC%f^5K%x%;rFN9xk
zFT{0=?1-%0x)A03@WJ1k(<}wp_cgLbfALr(2e{$E-c1@$a?NV<Wi&razxxJNp^(E$
zHTn#yF)g6{M_jeB^U`)u(g{_RH%@(r*8h!+Maw}Ka3lES)_cvTBPy3Hx(i?v1k81v
zIR|DO21{Aq_S+(>;T*(7#C>lp!fs&p_HFeCLhgeu<|1t0S;(Rm>@`{RcJ&Mzm*e7J
zY&cC{Q*xaP6Lv=reGy{oHRm$oh;14!lNPc{S25U<|31*KRq-3l=p}^#RuL0SVHy(x
z-z1!7;_9+rm)=vqTZEf3tFqY4LYaI?H4suK%%*iwO0<?vF-iRO`c+96S7{M@{YP5v
z>~jz_y3vp4`z;uMajN)`pZt#LEQWo+=vjWO?284)hDQS*OL49JM{g??&-$c>47;oj
zbAQ>Mvn?;~4&utpZ8hi6oBe`ew)v}to=e|XSgd<V&m@+lzX=+M93F&O)lNSD-=TL_
z)intvsZ1>+;%n-av`@&yZjn{LUVFt!ZfWNI%r&6RFY|I<<oB|UL5U%IF;7J|*(I~E
z;Rr!PP5C35+n#ip<Dbr&fih$*ZJ0sGWHl8-?_H7C2En$-8>%QTm8<^`d+!~OW&i&V
z*VWZjsU$?S>=nw6A}O-sv`3K$kv%e68Wd%3A?qZvvPUvct6^p}jK~Pt>wX^B=lcA9
z-^cyeegARafBnusuB*`LIFIA~e!XAgIhgd%?S9odJpQS5tK;PHo`CMAk^18|mzYQ=
zle6L)s3tIM8XdFWcMYQ3)}N%J6j^9)ru@=54850%L}kZvFXUUg(|W*1RcB2hq(C0f
z3~W)d2P(N~;YC6UrO3<(fhgisTXlNVb;30`I6n{xT>8$39IrZl5%i&NPk?jDw`j9K
zeMdP=?V73EHyk3;5uExEdj8vM-L7E>9?$g)S|xploO`}$KT@RC_~uiRWq_?{s+bkb
zGRSLRYi9=q1<kw^AMYnKzb4d5-&~&mq{z=HlDg6>K%cU|7gRj5k1m=~jt2#&kzA4E
zeFqM!B^B8of0WWQWH;$+SLpKH{n?3RhJZe|U%aM&{6$&llhZXB_U?sgu!!j+=y23#
z{Z15RsSvR45ykI)zlKzloS)(V<5Jk~Vh904h@b{B*yJYn4z=VLKOPP{(sB%`p}OBC
z*RVR?uP*y&hVMU6juMTtDg<HMTdz7J+d?bm^skk>ok%EECW_G(rK};h;ePuyfdXv8
zONtSzbK387?j=h_`Q)c2+n>Q#TZ}XRKG)RcBZ2j;rMI0)PfCrCtsmew9HXz-I7gbD
z1`oVDw|?<{|8(Sq#gBIKC!v%Pq>Xz^2yc<xBlWookNZVK+%c6Y!|qO@PhueZM$?Q_
zVqR^kQ6eo9`}9#RGx??wfg<>(qGA*)(i!(>@Je_G_F(q+fFSYL3lw7=MJ-WH(;bCP
z6D_kqC8mgXeiGuTRq^qy9f=;h^H%qB!|k)d<7_7H%re|45<P`;ZJSp4ZI1RRM2hPL
zZE>BE0z_>1p}$&4W6rU4soXE))@@<7Z>@6lOEpy0Tcj#0)_o4d?;K8w_KFN~`YasD
zwc{+O$HWShfs7WqQZhE*XrMHsPMM}rM<A(gyQJ|bSc-fuG`>eY)8MRCm0pJU@Xaq4
zN?E>*+b+{O<d`WbYO#?nQ!dNBsi)emwwJO+?_qCs_G8=m)O|{;>ql2Z1SS*i72Vx^
z)lhe#D|wY>I7fWD%0R4Cg2j{7D{sl#hH>dCp%fMo$99Ev`rIy!y?56=K9p@D3$WFa
zKQj!(W~IseqGK^zA8`y0<ZLP7(QjDzN;CM%q^Rn<&TAw>NU0KlVqBf_JX^LZySSVB
z53y^vcF9o<veOy8d-sA@y1z-X?NU<XqOU<|*xV>1`M`QR-Nax@+44YsPTIS}gXyam
zJ?|TZg+zAfP#zo&k1ce0^Xa;}>7rokYgT<#xf9*l_8Lb_#nRfhFJIdU!E`jz?<gby
z#Gn+>X&~Z45Nka`OF}2Z))e}}L-H35N?BQ16R~b_HfacB78mSyny{^`rB4Voa+;pM
z7gEJ82gW2CszY3RLrb2$E*a^AJ0)rBVhv_+qGeOy;&0zRnrw~~f&F9{DE4;KfC!Vv
zf3(&-8-4UsBY13J+`V@Br!QUciilSiOa`K_6gb^vky?CtP}lApuR&2OY1k~r^*n8~
zrpDBVREUAseLGJ1^?h(~P>h#V(;Sc#@&VI_j3f(IF}99$ogWsOfYvA~De*@9kya@f
z3cK0xLh@OiPzAQ)@}H3(TvbYr`-|5<7^m)@!*sY!>4+RjGw#C&)wYkxm&ds12Cs5C
zpdfM@9T-qcM7eSsm=tcU3<pUO3)?Q!&{SP$26?l?Wm$vQ?`#(9US{TuD4gpe`m>Go
z^=g{b`>lNy54fS6>MbGf{2D0x3$>V2n~;FORH%`s+FQ}rvA<pbeB*%`5}6Wd7nT~I
z;FD68+52b%`C%;AiFuTQBHS^3(5dn}YlFE_>_65I%I^h;ysieP?f#=Np6A5Ey_TM)
zz1hyHr>wkIKKkd#My+mx`zKm8`$<i`B})1lNzzUd!b7V%5l=#cckUYPVy(;4&OT7w
zU=btrS?W+}$<A*@l&})o@vy!m2MF~3CH|I*#oh)pOO30n;y9GhVfFLQ<$Kd*=atnm
zqmknl-qdt#jd$E41Ok*VCV8sWj{GVd7_e2LTP@grQ2p}=(4AZRJ=Om(X8tYFz&Lzt
zG;eviATlp7yDYci#DErSjgndI*H=gF9+3mYM#jxd*Sh(JpYuubcs7L!%v|3BqT<Pt
zdWn#P^%Px6u6~^}hUfD#1<b5IrhloKj5l;WAFSJGX~=S4SfqM#dR(~7b<(K$cB<f!
zF0Tlq+@mKySn#IY8`bTzaca?AB4x5E_(L(Di5@cxP1A`>^QRlG=%*gdSTQzvFznzt
zN0s25pJ1QA!ly62gTEz;91%wODYAaR$+={QadXdQRu>`R8$XkBM&_jrnrq7*Wc97-
z7*<ocwe2Gt2T^re$;k;*ZFVX>kEo|{kZg4Ty-kPU71{b5Uy&52X;fGGw2^}YA9XQt
z-@1sU)7aERIz|2@UpRa+@-cUwMJoUKdd2|)nUFnGCT6p^uHNp*^@?lcXHdyxUv^?I
zjS^+QzBPe(_iKQq6&<BmLi2c#m$N6f=l6I>Y0t(!!`YDen}HNo33K@#2W16?FQvEh
zBlFXUc}x5?_aYbM-+_@<W?&kK+1E@M`wH^N(yC^=<}_@z+HnX<nPOe>-o?M@fy_F<
zs)}+OJk^^>I;St}PfP|@i&77d?mi_m*Mn-&kCD)hCwXP1m6-bWwp}PSEQczr>pst~
zcegUB@EF?n`1>WR&oe0|geXiW$LnzNtAsaQ*ZL;!P2dg&uK_I`nWh&W9xgV=nHxM1
z_sTtUWs5^Brz*+&H$VY&tb{(Ozb5JLIQ{t!L;J<A)>dQQThG4MOyi1+rVu&_Q5w}H
zlv5;+UZQY0^(ZZ)NI{J7(jcU`f;Mfr>(iX+R^p{t%ovqHxgbVaTdRF@+w!F#>A$^z
zF}|JfMBpxX<{@Qyp@KAi$mWKbXSRmE#@qC<o@aXKjV(}Bm6#c=Z8tK2rF6@QYf4IV
z*6aIuE>N>caICqVY)u;{ZwTQPQV-%XP*ufHZ*#7-wYhdnrbRj*hibvI-?xsf>kFvR
zL{KyBF3GU`c<n4_es)BpyvE)wAvB4B<xS;|zAp`XpD8giShR6)1PuwlcsiNVF)?YZ
z@H%`<mUedURcmoNd+l)EqZNZDem6e%r7X48Iw`q%oO$$inw@ez2Xs%&DP}$=-4pa{
zCePjo61FsK+da+~m1Om{RqJGJ<7#=MO4+vC6%$8<46a;Jo%}W6UlI}EHI$ClC_t7o
z!mCN9)`>1VznnDk&v7l=<#>0ajO(+DnVDrX?Bh1`zEAe`1@vQtIX7hkk?Q;qBZu7I
zA{PDUOiyI+)GAX74Ya>-#caJ&zww6GDqsK2L$bA^GQpSvQO+4{zWQ#x1(0pimapB`
zLEY`WC1WCaUO8+-rF?1K+G}DHqlqiWm7ctlS?Y~n(mFS^qH?I%)N{$yp__`X3A9!_
zI*4E%!L#Hlf);e@cix!W6JoqJR-coenf!QrlUbU7_@sC6XBn$cDDE_7ccf{~e&u%-
zVR*<SCnvV(D@%%K+C>tkOV)_9LCT_2?DYD>6%?|l6v<3ls77^R-u-Rzv|Eb05{snE
zhXJl#w{%{}Dq2^>pW~nI^U9h9jy3pJTIah$j2KKsUoLl+0dn^^U~1&MSWQuCl&I}d
zz6qIo7N%~;Nq@KXI`@xDb%${MPQ+k@ye;^soj*Gp+m0p+NRUbE##j*aAV$VtQgt<!
zVBV5{hZ^U6sLxZ~Vr~d*fRV?bq-#zHiBMce)JUhuv#LDhj}1kQIX^@I7qO~Cj*oo7
zu153d#^CnPN`5Dkv$L~#4)_YHsiXZD9a8w`9v6ijxB!p+L6RFxw+_0PL!K_}sXoQx
ztslIWQlf(7Lzc(W4?eKF<+JZ6fDHfi$kc<+X~47Za?IkaTd90P<rE{3{NYHe`6H|V
zD3@gNDdQRVzIlsbU9xqa?skIh!NHE>X5naT#LK8$;NsKU+*nTk%E=^c)SgxefBCCu
z(0x5&<<vq5qsA(stGP~Ve<*I}aeogk!az-A?$hQiL)HtYR-5J@w9xaTLX6Hl@;Q@N
zM2l{}!`0nNkp(*{xa446vW>;r>nw*Mr@@|jX@g5_M{+zq-02&iZTb`)DZevsj4uty
zXg-BX^PMdAD!2OkmL6Z$s|--h?9HN?SdLs5zb10?B!y}VSzlAmitkI_a}z21ci*8c
z6kU?^c_bkLt^CVt=cG=*vm1zQ4ZTjj{MCFl=$Kb*sr@yGtgpR}7><<+6rQ>1{G?sK
z&c#dZN{8jsrl`{u<PJDLQ3ptO7;!fal^iNY4k;JxmvSMM<-Qbaeppd`V6`Ug^)?Pj
zFIPU?HJxT4>yoy!CV26AZ=ySYdu!)8kIf%EjNcmnVB<~R_tZ!7G9{r;wKi@pmVNnS
zXG&Q^M~|UR8^=I%w+1hId152OZyMu{J=${zG*7Ngq@B-8#!Icb1bJ;7B8F>xBd7dq
zk6-Ul5ft5W1t^mpO}kmzmue$Q>TmLN2`NvPxwyC#L^7@e=t`C`A^0m11kDIK%9N1!
zLWZ4NYX2C3K;&J}N%Uy3ivXb0M=}TLiZIx3r(Gz%9OrYFdoE}9q3mMqxTh-9n`8O<
zpqJ^bSL@GW1G~15*H)K61hD5R8&T^Flqa1vU=X(IBt#JOx%$;uXM_Ns|Gu^#_FX~K
zd+cMMrE5?B7+CTI6ngsAw*?DrZSCcm829OVDDlGY-5vz}N_)FfafhFW{mVerI3gi&
z8;*<2n_nHE)YYk;Pa=<Y1wSA^d>L})bm4&`K9@RiL``QLH^vSi@iOmnsSUijy?#=&
z&=71oWh2MN(<2{0iJ#vBqY#}5O|eFwAtxxT&^{9&dAuiv>*Q|)Q%&$ZG?<e8w^0{-
z0pH^(^?~h8NORh&j+c5oNqi~QLA&M3=3I3;+ZKC+=P6H3dDj%yw)M~W`jV8td=m8W
z@a64zwX<T{*Pj+7D$Cfq;g~&%X$8_pUe~8OeLgSS)zn0@^hR}=`cqIrwV2m>fz5#>
zk}uuhLyPh0K%eb<9P~ZF7*2Z}zfZwyrgY_1(BrIma`wiqk0U#G{UR;?eBBf4r4;ir
zwdcMMgyaFQ+{=13hjn)$|7ctNX4A1AeQ|+<o5bJx8qJtO@gm%}Rjb9rZs$@!V8tPS
z7v^gRPK_7d<JC7VW7Zm4o$H_sk~$yXveYe_6I;NJ`wPN514-qt3%JeO9f~IpnU+eo
zF;u7*J-_lz2zH3FrC-Q3FB#p;U2V=zTokKOIJOP^n3p{P`JYIs0UA@<6aBwBT_$?O
z)QqkFdLwuUxbfoZE%(p<;JqqBO3~1`YS^b{nsS*Kss@WRqsd0cr_XUx51u|;8@T!S
zl>5$w=6^zA|I0<OEb0|6Ax1swSLVO4yqs34qY*sKluDjX72FrhXT)!qC4bI>+)Mi=
z{x?<X1JlW%oM}I%G!VohIk+*(Rads)Y)t;*CLj=F_WJES0ZxLG(DX}9%}{%d*Se=%
zeV|;HE;-k0=4i*o%X^dJTB!%=PEyRGBE4(UD{@yvz~vQh^}^(!joRcOyD!1NttQtb
zCpQ;fCZxsFtbF~ZUNGApd<~#ESz@vz#~cXsIJu457;bCM5qUmAe4=bEJ>z{~s*^sh
zz~V|nef`oO#cxldVui`Ne>Iz(e=%<we9C`^DeuQWJlEyoDf;pLPx$6|m%bhze6@Jy
zqIyCxT~B^~ah<<ppuTrWzo$y%)LW1(&6B8i*!90t?clrfJ|s}@y8X;!E~j^@-QDHm
zyF6|CdF&WGO!K~=gx>0Z&1?3iPRK~^^-hD0A{v=PW#vY@mUjzB`a`$e)T8K+Mlz!i
z9Zxf~P?oiQP<o$hal5E5`Hvck$9hzow6=N=Gn<>o!ZGSC7@lM|$pbh{yI+wcGI;y9
z$#i-}Z1GR-$fl6!W1;NMy)B$Hv2+I)9Q4Df$t|5nR+o3Eq_nq&1dn^FjwJY|4x7J`
z9v_G;{r&ot_@@28uSx3)Wj|<nu#08PLs<0wJAthLr<~b51KtHk!Wo=ofaN4ll`1Q~
z;iL+`F+i`L$m8<ra-sq)$+ydDPEN)zfG*5lrO&t=dgsBsIHLB(XlEIF|L~!vKk@Qs
zxdKAg@1y!Z0<H^&r_V9u`R+QP#%l6;-(TNP8S%&bco843&~1;-QhfjCPpw{(x{_*@
zFNWBb6xP1+snAV#>H{waF77!_wL@cPs|_Ug?;fc|jABtUjuf#8F}VWWA`IxAyp*9Q
zG6w{KyV|oXZSskCAhWvV(qj$8h}wRqQIVWlaE0>=zuO38nMiZ3m-RFmJXlvJz1C?A
z)jV=Jx;IV+^}GS*!D;Cel<5(%cyB__{D-6wNCkt}AaPH%eift=dDEBBRGtIC_&=)(
zD!At7O+M`E;9|^{TGn;pm<db-i-z>}XXX2W)vuUYw;D7Jl{9sqV>OYony(F(63<?k
zU+7Mxh^!XMFI=vw$|4`oJAZvH-_p+W%e60siaG{-5V?*EH_{jIvSB>fc{(Y?i!Zft
zXy^qPH7gc|E+GxSHl%;JdVhu7#U7sDbqOHz((lXYp>V$sBV3Ru3Lv_gULs{#npqjo
z=Z5fd>n%idMZv&wv!l!|PY7LXb}X$aS8BL-&|)_&D}bcvHQZcGzIN)UVnu`t-{8o-
zD~AlsFR0Edqfxk&Z$3)LGE9GNADorCj5143j6|AzNWMfi&b~gA%6)rB|L-)?dx0gc
z_5RN~4Vpu1xfe-sr-12{q3VCeouk7{M`=~PI^PpL_3`_?$E>?{J{xUd&5AU#H5GU^
zJ6bULmCnX_?IcU-8@|Ql@#YQTR0o!G*)rwt*%TTEovHgO0n0wZ7n?SyynG!%$P6o2
zBx2szmD6@n81oNu(;pCnX+ud@y48z(&rN^*71hV?=cg(CJV`-LT{m4b4c}1^ye1q;
zz@Ke*Piy8!?g>YoWXQ0@rZoq}D7qN%+zB1;Y@a9xU?G7WdE|GBEZNIRD|`KVQg&Ym
zQ<R-=;YdFW8wUrlc6i<ElYKi1Y)!s}a2Y($zV;2{gVEN)-*n$GFC_F<)!5KD8K(De
z#LD!hqNB*FkgjCp1{4tkY0AZfkJ?t3Pm^4pTkK|?s&}0ZZGWu?HNGY+RDj~1m|PYp
z+yK9*-+x}I*<pcCbj?&cMuKQguv(UXYa={QGnFAa#tS}1a8{plh~1w4oNKlfQx~?9
z_@$rdmy!dhmUN-w2cal->XW8FFhGTeWI0f=q+$FTE_Nk0b$9oRzQ^kVFGAt@qx*pK
zXN+M8om2qiRJ)LeI3ktYFh~g8=`4iZesDI+cW~E8A#-Sai}X|`6gpV0YCV)(c+0pc
zQ`1ODaC~msHbgOEk-zwpnw{*(y?a&}Lc`1X#g%;e?~Suemrhha&T>_cUY)sG_{&q-
z)7a;8v$%?&5S^Zwz*nCGV0_agQ>?6+vzVku`qyLxlw@tQc4z#ZR!MFg$^lHH+He2#
z=Y5G<3L03@pDH}oD=cA&IMc%BBM9nBcP?pdCI5JD#*?U(2T~NiVozYQp#sOoC+ymI
z-K+Tg+Wt%Q&*Eg4yro4iGjtuJF1oY(Caj9~lu2&!poF~8*~6ge(DBY3TA(pbarY-x
z^InyS$}+suJU6TK>IroXshzI>fuHIF%H{=7VO2qsv2eBd)6kNlo2|8<M($ckN!Yo~
zo9~+L7+R&{bJz2W{-d>@$|>E`C2OHACCNX}YpnY^chakuE2A3jw+}L&y0v~2iOsEx
zw}-;bp87}&40!Zt8BV>-U3z;{ImWMeBq`Dmyzy__UGw#5x3bMn_LrYPlaz<2aVld4
zf~wv&$5~lZai9wc$v>q(qHw9NuMD%lAYQbob6pKrbo&l#ZN8ERXagT#bJl|%4C1-D
zVlj{7JQh{tJUJnn5;V}RuIv`ADt|1N&kzcl5A@)}pry=ZQcld{AY~U{k1*<!{ari8
z4oFXBMSF4HyQ9(2{7-8m?|eMgTRe~X{V#GkUR)a*etlpOS(5}~26)ag2yc=%-a-p3
z)MG<Cl1753P`KGg7n*+Wfd3SG7D|FAb^_PEw<*ohxsVzgRJ2=v_~5}c)54Mn-bX2d
ziy=CF{=bE3y29V{{<jwp%oSDuU{(Ci`s$Em+eOFEkR&)F`*43=L!KTueQ5imhrrGr
z{GK#HRrp#VCSwxKav)Y^J`Mo+IWVt?WH{JE<4HEw^etPpdvCsf8j;!3*(OI>vyQIW
ze~8O9vehen%j{2Mt0d1W+`rOn<OWUpoIhCWCR4H8&Wv2!>o55-iYF;b=LrL*)=@$8
zWCJ<RZ3$}OpA%iy){fk_cAkwd$+5P&9vau{{__HnRg(V*L3(TB?swjD1IAVB1?fN8
zVf9GYXU?J-EaiL``0)Djo0i`=Z308nI{4oDtS|11=aZ64-f=94X;FS5!b4T=1(949
z#FcXu$&j98r;kK?m_#&%vv`Dvx<4g%b^a+AdPVJjmPLI~nrgy1=l3qzL&d!oU-CL`
z{0ZLQImi|Fg1<IcvdDXtCLaj^`Cd`fj-RdXKGaPp6!p|qC)ozbUNCAieQa^ohqA%T
z)K`%Hi+dfPyvbRfj%p6?uN-4#SIHp{44tDaZoiI<tvWK_ReCm=s<gNqH!<b$KvVCF
zWAa>jWeeY_eA)9>2)DRe!bsTQ_IRFkAIzx}EFhQh$Rr=ALkVFFM?Pltv|$eNz(zEL
z*7xbtAa0J6s$1Gc-OzOn-n-K-M<rZP&P5rE*ZU^e;*y9(WNU=ES%WZLSEsSC-pzsV
zQ?I{rYY_;DBqfr-MZ%)K4EBzeUD>8cG7U<_VS`1AQyJ{h*nStNA0NRqr)0`>9wf4o
zA>=UI5z5h><-_G<2JJ&@acMYxlTRn^VCLFhn&T@2dT8h{iFEH|t^Ey#H@dH<a}%sy
zBxj5C^Q@@}6dICGsJiy)5g_1KTsstYi)o!&*pYhFBQT(Z-}vQ{x$9iJOAJ3PxCXM{
zD)Ha<WP6Y#e~-2)^9@0Yo`d}nH4C4@7%VSUJtKiSDuUkyrPUJ1Njs*08e)u)wA2Q{
zqLp*qIA8bk^)lX)fW?te@&S|2HR8(+8!H21XI9<R7V8)n7i-6Ne1gz+t?SE&dmwJ?
zTPe6Boce&eJNdz%t8tWzme~y}>%^FV+WT2iL!06Y6@M+vt-9Cbb()om(+AT?cb~kV
zsVy93lA4h6aM1YZ-xDXtKQhLx2w6`D@vT6PpLt}=?Bp<@mAA0cr!1BcZ6a23^vM0?
z)T3f{UdsjxXTXvdus5rEy^{VVWHN1Xg>&fjjppU>OCcug<GK!}tI@3fzA&$#EuTvp
z?QSRaXGx*pj&c&3lsFvPo>4zpE(eI*PjyKAaj?IiWXz!2W!ok;7E?T!k^Xk7xU)t2
zG5k-@B=43HGI(R~@I-?&yZ$T>eSAi6Z-HQ>eS4=@Kf}uRa-&f;C-tcQa{@MHWQ#_?
zq(2;<<_u+Loqdy~8ypwg#ofVSsZUWlBsQ{FD<_~|9~#BvveicgZANvx409D1L~fTn
zxR;TacJMjc^4ZF1>eH`upNA>MeeFiN@$%?Fq3cftO9M+@uQdv_Y*VR=%p*54c|$$1
z|J6mBS|?XokD8|pn0RWidM$y@dMHpDE<fc)(#2lk9e`QT3TT?6p;aluWXVGz5$W*q
zl_0n*ts!(SBmW4J>(S6~j2@7*FQF7!WN9-^K1MOqOFl4eO2bW0y2zjKaiNMvrC?O@
zW<)QGv)v`w*`8ep$fRpgDvBUDQ(~OdUZ#%a=(YBc7ijoTo^(KKDC0Uv$o{~||EEpl
zh1!llr!W7MotKdrTa%P@?;M=HRI9I}3x03Qjb$+B5~8etY5<5TYA)!}Ixzmhyby;s
ze3i+4v?T<zn0n;V0~e2Ra@H%I8v%^$mF_-U0RWEW#3ZX0A9$lBo)`K1Y+(xMZoZO_
zxEWy*8W*LasoDN9!HL>=7rMWb-#<A+97ZqCBGIa=*g5le$jZ+^_Hn+i?sHvc)=Ll@
zpN9%Z;BAF9LD*6x_dEBEKytHwt*9Tc<GInaQC~^G`AEt{5NSF)4}34hmQ_BqXEWgV
zA=&p{U3POTnm&GbK8akFELlWIZc%99Sd#wcg=|nD9LA=KS`FSAw2T>Nh|pd;ZnrFQ
zb0s2iI;miq-RYx#t@R5PB~{13`TK*VH`V+So8Ic}MKiXCQcaFGi9cMgFitk&dt;fc
ztDaP_Z7&CFNclMPhbdoQM>pBt4=H7l3+#kLTozTo?Nec2mz8f7)=(p9ud;`@Y3N{&
z<Q2iemESqp?=qd9-TScXQ3ESMIlGl;Fs3m#%EHG(is+S9hVV0$nek8wdAFg%dB-Z+
zYd@zZIBsc6VDD3^4CL;)%|CW&osh|y)z3~lcaC-chYUv`&>%%fYrSK!SW=v+cqHNI
z(_N!nded*m_n5-4nHepzUnV9yxOYC3KB=H%@rLN2dzTxG={A3frSh60cHfQ6rYwmx
z#%Eb9WvNsSmydshj^tUHW3Ih?C#yOOuKwmNegAOxen?&`s48#Cy*Zex2SBdINR<Y~
zPCrq}OR>|aJ!sQmg2c5|bZJ=&y^s@PE@LfR?E^ti3#lG#nP#E~ue7M`D;-?6T!%E?
z4z65rj_VHzjxO$-NYWx2@`l}AU5_6BWN4uqxFSSPfMH+L3A?5AiEPw{n14z@Ded1r
zH=Y+?&9VEGsaw+5{S``iccw4tSY04YoatsG4Uuivo_A$m=rHmM78#+kQEZU-iPazE
z{MesKOb~#_MSi!o)3Z@gQG*Sk63xSC1P4<w?B9R9{}WJ1Aa4CFz7own$z81QT-}Zs
z>Gx8Fe*ga6kNGrln3yK$SEBTlo~}DKz2$9*J&=g+WNkAl_YRy_O`^@}va+tU_Q?ZE
z!g#qcTB4&V4IWPw7q|L-WQU5QUoSADM<`hk$&3+qROp(<x)tX=iW1p|%Xi`;HoJkH
zoj{9C&`dQ!>@?YZM2rVeeGHS6#W%pfLo*|{SXBsQmPl*6wUkb5d7j#wkLG|yUI+0F
z^q8rDzpq4#UY$>G1=s&aZnrG;=~j5u#@*%8F#rAaopLe3QX|KpL2Uwcc#U4dh4;yY
zynE2<e8q7W!_&g#fv(HVnlTsS<KqX~oxbGQ7!@DfZyo>HU12wMZSEyh0n3P3Q4f#y
zI(6S9ijC;Y1Fn<6muk&w?CSXX^()?6mNt;Rc~~dNNPu#naFQ7~Ew#Vw(1iwuK68gF
zkKnbs=TH^C?CD!wRaIw1cyWu3$#Gu1bjjhV5c6rbT&~PlOm>toX)&I`?MLdqG2a!9
z6;tsnuOoK&N<hF5FNly<dV?f<Ml99m2;Z>TZDRZlu_zx-I7K>sqsw5ZmyWrd+>DW!
zRb`y9F9-U^gG#o8{+~s+xXSCaz5Xivx=erTl|iB|y{Otp>!-Ks3RhDq-^;*jvQ1vo
zTKz6d($H)V?LQDXlknhD@pwRBLxUJ8l<x$bYORP(O^)^YX<)zwL3i7J-t7#x(xe1s
z=;-%2m}C;ioZ!N4QhpF;gu+Ka-*Xjjk1LTDu2h^l^u5f0skK=C8(-kEz|t(;vE)m+
zx6z?lopqK|UtIrU5J^=wPWXXqT9ZryAKIps|F&`V{!jr8wZUs=HTtvVFxlB&wwm<(
zNDQghPQSP!rq@{dcKP9RWA2U5p@3-Dh8e5osVxDqo@xu{hiVnal4h64ic;G~P3B*P
z>X#JI`jX6^K*(jkDfe>sWN;w#WeWyl_qW<|8~>&%wh0sO3aAhA`d(h;QYN*<qc$QW
z#?r{E{X@aoyx4Ny3le|UKVF{}-F4eMsK=vnZOi%5G-mf7DW9t0D#(|gEO-VkP`aSd
zee;+6=_zF@mN8Is(REa=_RWvyck{Jy=zET9ZGNY%qLh+-MR}!#o4o$E=HiG-+H6mX
zt<22(g1BQ_v|PPHBwYq;I%+k++C8&E<{!|h&In|cp7kCfiyUxY=9ZQN1#r>0u{d+N
zjjYznMwbZ=?55)G&DX={#~M^bx!n(s87>d6-F(~V9c$@oQu8P_MYpm+r%x2iB!Cf`
z9oGiD|C*oH%-}lacOINi)!<89$8D5}GZK&ksNdu0!O7HC^@JukHs$DKw8TU4`r9=v
zQp;li5^xW{aTvL5T9$FtdV)1n9~h|74EH$DS5SyGkf3*7h4ar5ieZb(@C}|urchOL
zfTfsU#M_Q=LuK9mCtTXAY<W!L#*G^jX(v&IOLyM=9OKukvH1rj4&VYEG0v@R;Aaw+
z8<j3>_ut+6tRw=*1Kr?YCBGU7<(^rH$)vME8OE)d{u3!LgsgD2%&-^77%1(#4~9%8
z)hezss(##sS5N}3Aie}Kyh4}$4eBjMn-aCf8oaqd@TIzA<Xn5qzgEBd@&|47o&Kp;
z=3Yo%iDI1Q&{T%k>sjU!f*QIaS9l02vgk@Ak8$RAV!$PO<I}6kmq!;1VX5%kSBu_I
zX8^Q(BhOUM;aqN*2h=s@D!wO%*f5ya(Mi<c8%5A0o#N=oEH^)O6g9!1%aFgHU&ye#
zt0q#7AK<}r%1<K?;?8e@G!i`>UGgZ879sYoeu`qVgT(p{BgOi?gjPtUn=j}zFOI1<
z8_@>O0+&w^_=7575UIi90aYl9{{+A)YDrmW$5Ap%0AJxKHZ?O#Q{WDH-m{HDdFqX(
zhI*l^FPr-1%Np-zF}s$w8+a_KR%ff%xew=neCCR$z!#%PJDN#uk%TnCDm&>V@xz4B
ze2m~WjdR~jCe)N8)_N>YM{+0}#vJXhV#D!i(@0*+F6a1timpp?uEhr7r5B-hI8~*+
zsD5j>TSwoUm!19Q7skq33@R3D*Jsl_zMU^Na&IFyNN2IJ`mU_pV_e+(jdkbpbD^g$
z79}gTZSSV%r_dp+st$`h-yW3PC};Fwcj;&AixwK(k1uk$bdBaFU4s<vO&^87M`oll
zradi9AH8{W-uoGIL~PhAs^1-t9+Jt+g`qif$-lQdb&Rc8X!^TPluK6w2~M|LtHOX&
zyVzff>d@7Bj<~7p^RWH!-B;PRaB{rQjH^`Kp9?Bbyj%V04|4Nu-MS!OD#<xoSWC6<
z$%w<!;}f+TngCs-e6cV+W?A3yZQfsXLZaNl7L1o1Q&T-5LC1|7H~WsBkj$ptc-r*V
z&L!nhU!fnG?#7`xycI@%@9)KhnPuzDP#M~3yFh`1c|5g|wV|@MFS&8*z%8Xm7Uk)=
zF^c=dOZh}EAn^<qWY(HK98A}nVCbe>x_RKx>&~zZi^o$>cK){)@MEY+SdWsU4zVaY
zSeH1<<#umtPUjD8c#&!mbnJxXh|lwlPAxyS=y$PMS0_&oTyLo7<%k{SVHTeq?C`ev
zJ2zjCs$nYdppXNFmrcdo`$d!YJvS#sj~huuU3*5OZ41aLWJ*;+FWgOggJeEyALr)g
zhP1d2x$c#*SvHg;PFbEb6`PGH$yuw|MBSQU&^>b5JBnS>7CSffUam%Jon-Kf7q%-4
zwjzVOy;ic)Sp>MW5KeLkEMPG2h~G@r;s@E}gkP}#Qr|qGU*y{{A}MkR!qtc6UyudB
zHF%pAFomol@r_l~%AY%THh6il)4gPNt#Ul=wyO_;VmRiua`<WJ#APf4oJq59-vG-y
zC?#w$xiN*x!fC?&8|PuMK(*oe{_Z?Wk!y9{mAk<r?<%xUwp+6kU_RZ_=C^0q{{EAF
zk<wmkomq7I3>sPvN_&=AT~ts2uN#~XzhQ>J`d1V!jgWz4=bs<0;_xSv?|paQTi?)P
zKQl+fI<#WZDM!6PxQsUj(9_b+j=E;d-D7&jdhw_>p|F9h<Fe;DXak}3$||kp`G9HX
z-DZVdb+nupH!5f;9^Fdx8GUsJzOj{$!5Y=5^=P^1z?{~W21@nqnUbEKo|P5%#eg3}
z0gvuyH^20e%pH{85|tDkC`$+?zl?%f-{$?$b|I<71oWS8>MnY(RPksqmgdX*vs|x;
z5e@7rXY|>W6Ef}W;XLp<<H{goYG%nq!Ih;jbFmA5UhH-99sYjxU@`=X&Fg!O8|p85
zj&%vfMACgSYifcJ*-S^2oDmGS6=P4gWDL$r^E~n+FEczt%}r(T0C@kCR>P3jwEiCZ
zmxSY<m<t#XrdRVZFWU=C!S&;~zn8+or^1gkQBfy%TwbpFnRZU%;r-6+?3Udn@<C#H
z)`kH&N0O<w&-rHR?%DSJgyg^#WshdQBO(5N?*y+XNjlH@eQQ?yuw{X6;E_GOwB65`
z;#$)UiT2m+lYT4&Y0VDIJ$aVpTgEjJrBm~R%dD-ab@;SOomssKNDYgI&w5Wil+pEz
zy%agJB7WmbtB#IhnbY(=L!&pY(Q-zKrGgFa73^{}C@oYm?`GfFLyjOrVi9aV^nG8(
z7l5V+lo49(U_yK617kGPEHU|b-#>Ocw0R(RDzN^E)4sozI%Gaaj#JHa;zj=Z=%hU}
zb%@M8C8K3)S4=;k5e@nli0n5cYY7(_uU;)`AJOTL-*5I5sF~k_138o&#5_i_YMF1N
z1U%F|82gcs4o%1$&?Ahr6)LU?LZGT;ie`|LTT051;gD&YQ=U30T`3g;Oq6;kj6w*7
z9H2&PS9ENL?@z*?EvPeyQ=O^BbF+#;bq$5q8G0Bj9?+<XmGaQlm$XwczyRIw+CMa`
z^Zv}^qit}cx>5K1h_Z9|=hElV(WfE3V0lA-$uQ3%ctzQE#eA_aE-nt21al^cJ!yQ~
zgi527i~AZND%V@eo^LUnSOv6+GIA@}m#g+E)~duW9KZ*xOOfaMJ+qrJtTLCzYAyK3
zNoXp}Ai}vJE+OQYm+wBI@uk?b(A@qD85MAFi(2Wtc2$_J`!gU-m5%w5p7SKPBf&5S
zfm$KSDu0Y$OWSXq`(#ekg2-&4mhXuD!sLS(XY+c#f5b+<{1Mx%rf~3k1qwh(=N8f0
zxvDs7ZJNNI@($En)9Fcy8-~xT)OF{!jVKbz9?S}nYaumx4NJz0;ZmDOq*IE~r+8Pb
z)?c&_>{p6zVP)@gEayF@uD{cc|G2b(oQZjm>*QM1)lmgkDe)~0kWqag<nhRyiF*3i
z5De&o!oQtVfOc<;jPJ;`yrfHRU8{Z^%eKL#?z4qgseyrdl~oQzlaL5C*W(-QJofb+
z5YxWZ&wjglG{<9dUx>Tbp-)Mr;bQCRO0?92PM%BE_fFm}+w0b`q4-85?@Ugn_w~(|
zSNX>b$$S2S9+50*)(ZG^)~82Y&_Rc)Omsv9Ijg+HbRxGDK=AIjHz;zv(rF-A$onzv
zEo0AD0jp-9)b-nuT3uzk&7@Q^^X)MK48?a`saGmBd9>AwPUC`b<ZB==2<T|m>89&5
z=){QJ`g%s~p?j_iC}W;kiBo`L6H+_AzskKZ&lCmmhIhMXy5=uLKt)!iX0SJWo2=NS
zm92N=JWNZN9%xTiVF}FH>h|Nu4-zk-`T-*$8X8~zNszHYXG<38<H(EHgmFx}%N$H@
zN`Vd(vEiHe{%{f~+4`wt@)0$A+5igyZ+IRCPLBOb6RY5|g`bqX&+8w7Uc2>|+>1d0
z!Q5KFhZr>!1RUViJ?W5=$+y4m>`(fuJkrX$hvMsL*p=(XGs#gueO8X5iDHlyK7-6|
zcwuuXRDBi2ZU@j{b>2fYRSOh&Tv_j_gw~Fs$Df|h4(`z6H}#yDcu}_Asqnkb_mq+T
z&bK@*mD}t(Y$V&Jmf&q<(EBlT{Dx4UGSkvali-wf@qy0Ot5!{%(eh$B2fTtsT^!cR
zn^`KdV-%HLhk{!}jq+W?s!u~J@rkqa^U0Ifs;ruq#(w3j$`|OW$2K=XkwPTZH7yC|
zhH<s8!SE>B@hXQ&;)Uq%m{-fpwqMSATEkOh$6s_&WxW<n%Z`?nyH=HMM@gR<;Q%2l
zd`3DiF^#5~k!)13f3WL|!EH;(0~mO}*+0N{aOxI9pbTT1lV-Vvmt4}zEm5bD18hG%
zS-0Zy<W!sKE&o#joTlGrwx70{&(+o&p%~2D%S>(*`{n5rINAb>2PQ_lof5n5aR!@w
z_%(CCX~12wTkuphbA7d9!CM=E)uRSnmc2sm%QruZx#d)GA#U6*ECD#%WT|;_+GU67
zguyM1i)-?FwxJ;uPkrJ@VRD!Z*LygyI#=AVEm<<~#xl$Fg1E@oS=X1_sS_nvFOSY-
zik;p_;SHH?^(DWuR8DMhHHzua4)qx3l4%Z!<Zj7Lmgo)3(UoQ0pHH{+dd_(v-RJI2
zD{Ym<fW;4c{RPb_ug#PsldYy~+VoxWp5q}8D&ahiIGNQju?UF(pMBjhN=1oMzBI}$
zlAi$wHS{LGfHbLPdnEfk^qx+j0V3iYG|0Q24>1pD&(`|W&9qo`skeQ1jN=eXE1oDy
zLw}yY(Mr=S!tGWbf9oxAwXbc}{G8Oa>bnHYI3VczS&3#Oe20?x>v!?_s0ZlYP7Gsg
zJZ9G7HaG9bq)SlVT2nt`d^zMmP1$W{R9E^IHJ6r<n)hMz?VmXts_jpr5&(NjJcKR?
zQn-W|EI3g6B?9RTUE;tQ!{@R)rJS9U(+@TXL91n)WE~u~Eczo3_1{O#ZWs7oeb$;E
z@9qGtV&06A)z!%YYGcqU)L5N$^FV$=iXIf;Yk7|HW&!zARCCic!TM9d-RDet$Tg%8
zb_UnEK+AEq3=Qj1s4~`>&Y9CM1nG}q?AxBA_5<odj*fjHk*nC$nA<+zq-|pS7Q0e2
z(~zLc+_=%qUsyMXqpm)oX5{yQ-B-&p;yn)$ytRyGU;Z+VmNaFFy8E_hkZS4MR--(6
zprw(lq?OfxoO2O9BaLU|PtWX*FrKnF{wOVt$L$jo$jdPRqkQ(g*iCxj_^Xw=LPE(G
zZO=Qt%4TUy&V&WZ%S+u-|7r&wB~MRDtno(DDh<Udi+)bN6iY381X{`rk;205ncO=)
zD+6p6=N%^aBWG0f2mT17N$|C-bXT4w)Qz)}lEVF0qVrd&XV%v~P51p2N#5dAMm86O
zMNtsD5ywhzrkgvg-fD)FfK7#$b(qs+LwCt*o?*=;hoXuMEyjbbr&?3^_&-PZGYhR2
z5^gDT<QIgCu8o)XkuvfLdXP(Wce6Atexu_T+_YM2zO#f}8fX1_rOJM2(<8-*Esf?p
zot4i<8AsdS>hQoir|<!GWtlc-Qq^L#HC%P#3=hdhM{H(X`KmTkRz9%BndOJ08vVgG
z5n+qN)HllyPPPBJG;>#WdYd4NIN8=JXn>xF`VT37lZ4~RRx%XWg93++t=Db5(dTvM
zc8Y1%Q>BAj3_IFXPaCo@$Hd;MabK7O+IU)p)kPr9S1<!|^g_axNB#NB!+x&V*Mq&w
z)p;%^XvWv5yyRuk;JPBnyFIh(2HS%fYs-}sO#;tvcBWU3p{zQlMW%>~0I|=#ts_In
zV1e=VaKPXOVN66?HW4WolclFse#(b|)4kw&(kTJ5B13wVHUJfCu>8INb>dpw3mJ6J
zDwwfQGfQ&V=vw;E5~6ab#G!Mooo7K33xw|`@GG8Z`VStNR19QOLKlG0%^@`SuAHdT
z`-(GW5*vv?&$!O?3H(m`X`uJkN{x_MQ?;hKn@vkgOL%}1)S}(5VVVf!-z21=z%t|w
z=DN;0Jp28SxB~|pThc!WE5PJ=Rt%V*K+w|>d$93(4pR#FNcJ=t-_D~&Iha1${+gR^
z45)~8m{k!Dp|Nc7fh-+J^<9M_X%b|12Y{Rgp)kqBZ8mK<5)nYAL(!MTfUIqm;i6NB
ze34}1`}gkweqGUb-L?*8p~~6;dJf6blL$^HPijnbL6vG1A8Ps}2PGeE8O$mO$nJD&
zbW9BP$UkHe(&6ayPzQTqba{G(Q|0aSK5wQ9qTSN(6)HpPXACdSOU$B}fQN263>_5a
zQveh7Ar3BH+Dc1D$6osu8lE#1#F)dZg;~r_zdEH*5Rk=<oA?Iyw=_39Jyiz|h(pUt
zI5K-}8bOqgpRM5k?v~?|+Nv+L_YNtpF0u(7M76iCF1brVZ}%?_0g)r>bRO0lRIe8N
z1K&+)<Z{}eNl@v>wM`oUdkW$G{M?#}^{xBjG@P!mGQ{kY(AfElgB75@4QCRN@pyZC
z(<)JHGN63~qm?^$>7TY-VfdTtd0jFa2m9;P8~@slZwNAj8o#PCtPyEENWy4yBUZk$
zBCOsKJO*n}?*?N|3eNC9BNSGQQ1+YT)KuEV-SL3K3PFFzE64;4U(I%9H}Gx#rc~X`
z?+uCd`lg_J`SK^|A0EZ6U_sPNSkgKxBXiGrP=R2;Yyl)$6%Jsa7ZR^qBLwfZqWZ+7
z<i-tW3P0jgqAe8-shMkn5VF<KDVC1_!WBPx##L?uf&KZ<>(&dfV=dlog#*rid<3{w
zBx^&Jqs8T37~^wKKi$Cd-yhxZ^=L6h($R0t%*>$G0P#R<vCsd01mcJ2{9!YSn0u%j
z(ALi=Rj|~FZwHxNtN82X6R=2DjnnokUFYRg%lPprnsI{$JtjKfukx<+h6F|;BI1J~
zuRn=EUWVZAU5?)bda&AtJC^4YrXWQbI{d7n;*4)~KwuyNZi6zM2gY64>l+4{VbXfC
zUVou*WpCmuhv6+7XwOq#5f1@ZDN_I!tiLyyhXe-?lK&<U_7rIa<h}pnbtiNif%N_#
zFaEuE{`uGc>q~}5H~fzei!YbJ#^`^2m-vIrlmBtIh%fx!_aEz6;?MuQ{y(xN`G0jG
zU)MW}X>O$rt=g`nZCAUf@IYpN+}%3;3-`k-9Zf@AFVsEHs=HKRZP0TmoJ*-jX6Ojz
zxzDR@7r6rV?^^O&GwYvpo15He2{?$@uH=qiQ&DE)rBasTdF^J}r==!`SMdxF%VQh;
z_hondf8VzM^NoM*%K!hjBsd|j(TA41vR~u?f7r}?Henuhr_FG5eVDkQH%p4Eu~9o{
zxz1Sz=J9RdCcU#+Ej+REk7MtfFM8c;j}8$(W_dvIe{Y(B3;%oZpYi)29!vu%cDW%s
zS;le;-8e1KwU#ITE%7>YgV3Xve|C^om`fvN&ugXjq7CU9o6!sV7NoBH<Uc=z>-zM&
z?wCJpBgJ)>weJxc&i}mr&)WItHvIp;cK**^#*P1fc-w=IwQC}6TY|K^G`iDZm>@-K
z0eTw=fe{%w2)7D^Go0$xGYv~0xAoz4pT@Cfrk;)I42If%932EB3SaU9+tz-%5h_W2
zC9d!oq&Bz>%>C}tVw`!fk?J(|<vpsY1#;tOfb)f5$$8@3qk}sW{y>LBr03TA);)*L
z4?+F(RI3SUv19+)K^rtVH)>l(Bkh_+fprLS%y8n2P+C0E<ke$a>j>i(Kz04Jd6lBY
zXVHak%)W)GSQ(Cd$95g|_?~bSo)ADLjI5x2e=Kqu%I^fcRYhVv7g^7_bY=k8e9=xR
z#s82qHz&CxU2aB~9!XXv3f{f{UPjtI)@>a}F*hvu;U|G1Q#;aAo`lSM#QYt@>^{d1
z1Bmi<f}3+L-4k#G?=dQV{es`G^ZR@_i~trQBvM3R5s%bX=e&`e>qb4ixg~%>L<=2C
z*lfnZ5yCgW=$J+4L8$4`UGavWX@`SKepgbV*Xjn4005OX|GgOQ=nd(4)p%SbpOqzM
zVIcpl(pycL&?3QG{2A-Ahr-p~v_LSgle7oX{9?%B;(^1jMLg4A=9=l+Q(x~>6F-P|
z^tYpJego7famBzsn^h^~n}3W~<SV>JxcW%C+yZdMe%R2t*OAb?gkr&-f6^U<Upt+9
zZ&nCc0AKM~HfreeiE%JzN9jy2?qCjyfuow6)Tj6VdX72;K&Ns14(lq4BR&Wqdfagp
z1SSFUh39qjN?fL@>5L>%qNkjEp!OZ_NN{CQ^fF{+13^b^P~^b*dgUHb6hlNtMkq}q
z^)i9D$E!jCy?-$g@MK{Kk)0c#dD#;vLSR<QP~hxMyNe=TiYp1w>oRm<_j30FhZ_G$
z2yYFDL@x2;QVU=2qj%gKB_?E?xPT&ix9Hb9pA35Q@KI1v1UC{!Gk9G|MA9BZ;I^?7
z4oWy#X?!`rr|(jC<k3?`5k6zm?WK|Agzt<3#^<Ucc>WNY{Y!x=Qco1R(S@Evje$g6
zE+~u8xj-!f2<|h5Zq#f3Vnbn|@5}w?cWekcy-|Bm2L%&aDNMoPUTZV4Kx6r6JIbsM
z9pIR0RafCPED<$s%7rj7DkECwk@_*9#YLi|R}{{L6WYL)dkzMN!vkpEXnjfR-+OeX
zi{=i=`t<LLP3Y45Q9kt)+5`A80BtO}^rK?w()2kyzD1;Yt*@a^`i%04KnW}9b}eF_
z)PiS(KF2xJkq|xWMJ)28|6V91Y(x6=jio;$cqVchbFj{s2SV*!`cc*=S&UNdE>#EN
za&zPK?YXBELx1Me5P$c7EO-JBIMmRMlk0YezP-|aFOC5hCxy<YNJ9W*F|a8=!(c<u
zb7cW@b(JVl+dn@)Y8g0^(4WeYlnwi8^ybRhDg_bDp?lg{E-}DH7JA}G+fR1QPrSr!
zC3Yajz|e+2xJK-9w3G-JIN@4s=6N_X_;TFDtiO1+T`z}6AN90-vzXb!?{5USjWDA?
zcl9(@9EMR1)4z$?T86}bKJlGwO)<n0G@GD=l*8%z<wmjrHXEYA)AH@zSkQo;4q_3n
z;FE$Sl85p8C8>)XAIiPf0c{yrCZyC2OI&Q#<caDQk9?&65`_qWgljhTDq>|nkTuxp
zMfkPt83qzu;gC-j(^qj3#K&44Nsg^tMEv@(H2cdYCK=(X+bTyXBsl^h49Gq8*1p$o
zzmQ@7G15<r-?3BMpGsocc_0?bgd+yIK@H6kH`sdzZM^<7AfmX!F~3-SF1!1Q-9GDK
z3?T8lzW`EHIkU5gtw+rz09`#x+=w5>2u}@YM(t~+u@GB+v<~=D2?CUn=b~v!E!1Eh
z1!Aaos`Uq!2*aqrO7D&2XfDl0t_%kp0Y7T}`7LZvs{vx`|HmeTM~6@-@?7?cFDcqR
z+X<!tDj|0L^J>Y!SY9f*Gz<~I{j58rU#$JP_hC)e=&|&}*k-|DeQ4GbABp#E=g~E`
z+(lJ+)N2xWyet4eAg=KJxJc;KPxKaN<}{0|IU(BQtDcSXe^AS)rJB;OD*x@Q_l_MM
zfxpwIw{NNh#=`eY@yGLw<8U6Hszvke;T)5vcy1#ics`nl=o6aLQ@BWET*;#n#F03L
zmT)0<{TZV22PWS-oIQ8+kW=T8otkQ?2hni}@uhb9)jl4e$k%n{{;uyfl~?EwF7B0Q
zvc*uM57$CC#@7V)pwWPW*)LnOC^&58sCgKBUMcqRiC6B3Sa@s46u%E!Wmg|=<U09<
zL+z(g?7(&{33inQLC5H;+S|McgKKb9{%d;6A@tW9N*ubJB9X?xYSiMcYqs`*`X6ma
z;lvic4U1sGnk%ROe2@h?BvXHJ{f08G=v?IyEY?U-TVo4}OHl;bgjj%T-UN9W(iL8h
z4mmycxq$^qsHLN8`(EXEXb<8E5eX1gukY+227*Y2Nv(ai9-<YT_!a{V=9o+CYpcFo
zJuolk&M1gSCxXE%S9OYd(5mY3Ua`NgJYzmx1c7KYMLEb7a&!j!M=goGpc{*5P<n03
z|3S_n*MS#=yzM?9@vN{Tzj@Leyr_U(FMFEVzEJ=xSCMZKpc;Mby6u~hpNH=7CuY`Q
z5PBlqDP;aap#D!U01+|&LjaEX-Q(+sN|&gEo<w7r$sN-E@Ii8<pTLu2`S?m-4-X*2
zUM4Q?KpwP-$aMO*-eDCv{eHJqKHQyf0m25b3&&nPJyk`6D_O>&8Gos{K9HF~Gl)3N
zfJfWD8J{5Z_dGVm81``4#GVKWAiyl-p^V}Qaol_=W(f@3f!;anaQBu=5XVz#oGLf5
zH8c)}@Edt{-^@2vpH5AVK_A*f?KZ^Jh|DO*b9D*%kZcf#q|b-@)6ZHq2dlBNm2cZE
zG4=*K<fPS87HO$Jwdmg^O?p5QOs46ft>Dfd-Vd*OEAA?m$r=dNpx-4UB8m1sg2T+e
zp1Uu1YTtWPvWVj~yZ(tCG~kY(Gpep^oX0sNbRZIG5`HrcZ7s;_ml=r*xx1A)j7gg~
zb;i+W$7!t+b&(@MdVM7aX9W?cF&cOdvKK}1vmKT&+;XO&%&%Y=W&^;&_S-+WnUDvF
z>dE{eoq&^KptAT4h`14_NW5_b7#TIk#W#Nr7!(355R2~^<qHtStw=SzR(`N-|EP5~
zB^CRVFY<&R2R}1wVTB@pX)gL95TyubK-Pux)WEKuHLmxeTkI)IO_}-ux2Mz7Q|DYA
za{;a}Lb|g3tj5(2l9oZ<``r@P?7dm{>N*OS7Gt!BH_yT`k$?rs;7j<IY`^{fj?k5g
zJ6Ki3g4AhuDfe7OF6Q>ln~rFqsy)H*c@m+LlZ!s<gD&A^PQL*ZfV~;VP5zLAMAn#Y
zRcr)`%pE@;zmHMGT3?v^(L+nc$7MbSx87~;s#2}_nBlGK9USJi_ko$+hqGG;ean2j
zrL>VGxf?x{*s<y3yRFbR`2E%D)5$*D+Cz8{_VniiYWe;>e0sK3aM?)V6n$!nc+-g}
z!Xbg2OEK(6i#AW=J^5;908V=0KcI7<?At>|NE$~d?F3FGXSdkEa}1@qepI<jq2q@E
zWi8%bt7p>;VFK7J`r|1N71$PokB|9X@H@a|j@??n`Jjk30mqgPFTqw<b0RV)WJqjg
z#}%BhH|S{9UL-<jiaWQIMp^WTWW4bqdh#SRA8zy(&0_G8uy0#OKiC~SGg{s(xXmWM
zj8C+Ax*qJ?0*sq$P&5K`8ZiPf-8W$lGywumXJV*fgojUNCvmhs-Jtm9T73YYLDBJZ
zM`36_j+Fk=I$P@qw&ooEe6D)`Zb@Q4as>G_Hs}cR9(U+7@e^aC$W;5#!gDL*Y4yJN
zpPH_$o?sqfuQ<ruMcf+F3$?Gfvk}KaKkh+-@j=0B7jWJwus$cGXz@CXe0q8a-)`1U
zLcZ`TJx4hx4@vNGlW=&LuyQ4#qk4_SgO<e(&zLX-+iuEsDU9f-^T?8R%wka!QL21(
zPA@1Bha<nqXsSCvzqVLiW-J@B5a*GKvlTYN3>2u{rcJv=4;N|+Gc?DSguO+Z->k7P
zSjFWjn5DjU0H&2QIku{Srg|<Y?YAT~o*|@i<;4~e{@>5iiR|ZZC3t-C*)NnPrLYaN
zjm%!lc<=ajFX583uDL&g`*&nIdX<r-C{(QR_&Bs6h;eE6^e;Rf1kxY=$O8$m+{H?6
zc&^4EVjp$grVyf3hgp!3VV3b*n_;9CV?blnn^uNt{+v&fW$nWpy#ACOzF5;uWKg5z
zG``Y5pHlu-#?t^HQTX3BB*$r-OOZ$|P8Xhe7j%N54RbN%L@Ioc{q8XyytQKxxjF-F
zKddvN_XN!#d=mghu~&BWX5dKTgsQ^u@gVKzPl<||g+mc33m9)BG0Hd9SwKErU*Mo?
zv6}s~ArRhRD=0Ws_;PS>eff$w9wisu`c?^nZMkYhqHHXnYlR1O@7-#`oTBdL$1I|&
zb08J@-f+<IGwf$;`VI}gzDP$aU$dw5_nsY2<1j%bm}#t&=I^i!VmumJl2HQGZx(l+
zV6yRN5E@F)Y4%YV!$uv0pkqy<5Ebo`ZjELyXk{lJ%T<3wFdq2J+v#pw+&+|1L?Uyt
z@Y2%dr$muAU6i3S`X%odJ^{nO)l*OaW$$1ea#umVB`4g~1Kg`53RcG=!Yym)BFb+O
zWOy8w46=`X2%|fUeg^e|xF}Sf;yAw)3*4?)RX*7M%?dd?Z@ZeDX+(VuN*V_oMm8l=
zH4KV`%Uu0tsG1P!xo`F|YXsH91?|A7NL&R`n?U;fyjZyKO<fIlgnIS*gv`q_w?%PY
z$^JkczRTC~D{+bq9`BhB6EOMm_9kO6*~)ERpq7bXho*?a1mT7I7qsSv6jSrCU4@!O
z6LQ6MZ$WGlEdIQLH~=wEG05^iR+lCG;*z866f_iowaEG%g%ap{N?3M%qce6AurwuF
zGdTVTyO0NeF<QMjTV|sfsL;4@rjjZR<KWbBOq1zEZW!MqvXjW0Z|lP(|E<UlGYVb_
z=I-K|Z^vdxSwLV6%W6ad5+7`gVwgCt-c16m7AYW;sEx$=89p_K?i1o7o|>*<Py~Gp
z_E0zk+9M^dtU+4Zho>=6iGyCTvluG~-m2%gKOz*Xo39S>oD7p^c0I29WDPWN`9$8x
zzFt^Dq=X?$%r%I==dq3mz}M?{KpzKBwL)CzGpxS{#fmp$vEUNvt@aO|e(*H)$Bqab
z9W{awA2rdqM5HtsRrrj964#Vct3)4lVdcBkFqoZ79QBi!c>JHhv_awihIBjDNY<HY
z)|~pw!l|znOgYndcEMZ%3a7~SQNknA8P#n1)t2U5xt(1feG)n&cUxgG9|9I=&bkC%
zdt_E4^wWgcs1;Qn*&`;g(|N-E3DaTK);^SEH%!~Dg7PWaHG;S(32+=TDKx^EuT3NA
zG%MSpo<!U~9KL*crSG;dYAj24G3kx3)0&-YNOFcJmo%5j%y3If(!I+l`T_;k_~$;z
zQp+Wh39E}|L^O<SbpXxn^h~4B?fHpAYu9(0>J{9&O79(SOi9|8kFHS4)7PBA^k2L%
zGgR-sYSqa0fbZ!jiVvz|?!Xl8co;p1(<_WnuKsVB5m4L{!i~yAu|}|P^A!>n9d=0l
zUD2zTr70J~`1=7OcnhuqipX+Y0a_V)HL{hLu&t!Mh#1x{i87BNc{sCZluX4}aHZF=
z<5~G40u?lFD-mt!9P2QPVpEC;l2wl2;P2{$mUn6O0X=v0xvnO8f$zmYy@+N29lBa*
zHL(Y67hz^ar|b(3LIy8@l2(c2$h{7Phkf#C1A(UJ<O;f=u04Us{O!9m5;H76RL0_5
zWe6PCp9T{P5u(4JJ6=X1ok{7zd9&Z~f;l5NTdgSmm}!m77a@hRYkUT=^$=2w5ZC*}
z$*du&v2@fDmG&4OM5P**eajQ}810`K*scnXdl^n#IU`(Md6O9jN@|<(`?@{4U$Orq
z-0SXBOSycMqeFZ?Mj@FmqK9T^5w>HO;KW;o_Z+gckFK(N9BGD|q9huEs3276NyN3Q
ztDHWyVjPrbWz2xngeEwvt#F^L0pT>3TFbm71AXDj8UiH+WCj~cC$@+x+i5%NsqfY3
zdX%DpMdP>QG+&9tzkP%|0cfgZT+6wjQ}gPu+>OpRS9SirLM)T5ha6NbZu_F%<8MJu
z88KCX<UwqAg)SQOHFEu1cG5p*zVZT+=*1=I+M(Xol2J}QA-n!hf<X9Hg7sT$H@NPY
zg-qoas(N_G*!*AYy?Hd&>)SSN*KRPRGAq$!y2+HOP;H`6=6RM3p$wTLCBqJ-3?ZVM
z$ShN-q`HL+mC&H1?obpN8_4iGuGIJWJ?mZ1zwcV_T8}^WT6<;q+}G#2&ht2r<2cW&
zVKL@Q-NdHgtolx#@l*cQtljj%oGdPb>maC>u2{1<Ds;uV?Uii|MfEY<NanBgg|M-h
zOpTGUI~xyQ?-Ek}<W_Ps7x-6S+L0v^_-QLs<N*G`iGB~keTrn$PxnS=kh>ok$!dN(
z3uKEp;$BUU98<u}p_*q~G^Y@IvJH~<k38N|BXf*8<!E>np=rQAY8_W7%ZgsOD>3FG
z(7QR$NGBg{`wEm=f<rowQ|5-qt4F=b7b6cVJh+I>0{lx8+FUyB=Ic>a(Y>IiONz{x
z?UdLkxDvMyUP;I*ax8iv)tbw-a*I--vmgOf2pDiKhq&^j;>m#h3BKs;!G7EPy&4-n
zT&tCv#T2vwwr)8TRq(AMpYC~n5H-y0yDlTS5S4bdvW53+$#2j@m37veO{gM)`N4gS
zE@s28UX#Y|m_bd-;sys?hk7YMsr9n(vZza*G{z;!G9W<D^VP@!^b2ZV*j@h=)g#X2
z&e@YiD7SD&@?o5J8Ga>j&*66jLMHW5C14PNXRXIstWlqu4JIJtT@}Ckj#~0xnS9gI
z9=z(cdu(%z3XDXR!zVc$yMFu}xr=d0_2G*!ZL$XMKjzi3#&!Oi#V5EkEQ4eU+%eB}
z3@<@9t~Ppn+#^DuIlw)CnVn<D?UwC<?bv9kWmA_h40iCOk|+*94N5&3jZi0+Z1GOS
zgdo6|JywS+pK4sa<Yxg2$v|MMkP&*EY-<M!&9G4<5S79m(B{hza3Sji*3{Ri!K6;h
z9rqlOkAh-7XPFnKNUNNUA@lO%pGcwh$TBz|(Qpl+N|<l0#@#;^+rhs{io2p?jvbMh
z5c`)It`RyLoelbjxG#K65idJT<0+j89?p+0CcPr(E}mJ~Ill|>k8P2ER?WEx5jT2m
zw8f_{7~v8tqxrC&GZySm^Je8c!Eec6+g^}HXDC1V0ay|Ts|OGvC0!pqKulauIXjx3
zFwqVBxuAVW0}vs{vn+%1)56-M+TffH!G=qNI3M6LxXdo;(8yzhhO=D#&-AHpO-rl@
zjM=X|Iqxw;=8YQh5sCr`{(|1SM+$Fa+14Q(F&>Ly>fXnzaHJbN)jG#54uTSv*TpFg
zh4zB5G49+@BBo65`?_x>_*gWKa8}&_(4*D~@$CRN_@DI=|HrJPPy3l+9*C%q*LBRj
zopMDs9Fg<*!v%PpDaca<=1Z57v+3;F`b2pGA25y$T7hrHBl(!}<)Q(&tT2I{zPWLh
z)cm}QX$PiE81`|OTt|@tIY38IdBY-ysqucoow8No<RD{D)w(13f<#E@=wVqaUt~us
zApCABD%W`t*B8j%)p(Q6`~Knh3G|b|T!TQ3rk%Ya=epS%;soB})QBii8*aREEmZZ7
z@H>W4j32DxZZ_rm&qJ8-+L%{<t}Giz&=m!Xr0WPN*^KsC4q;#GDyr?EDqI3x+2n{T
zZmaqhHSwm!JG`P*k6~eD-Cs&IKh{`#IMHf-`W7surC<h_57g?0swYA8Py&N9P<fAk
zDgi_DDDcl=mM6OmmmEAa`v4xJbqj+VnBAr&(YLGZQ6#Z_`*IiYPG~I4o%dATk(>P&
z^8SvmFz9EOOf${{RNk@8Q}{lbcT&8DuZ1y3sRuGI;s=?tQe{$)b`pDw>B&}G4(kTa
zj&EqW?7MgS6zg`8pA1E?TZ`Vjw>B`#%F$hT&=30~{EnD?esys9;2ZkV7Fh<d$J<O3
z!@6FyN4UAQUA_<IpRJig%uhIW1NE>lhZ)FJ?;)Kw#QMCyRkI)MU=VW<jEt%PaO1mh
z^ij_zlhgJrni5h-jD3sjjl?wtBkK@aEQ~sTJ41HKlf840H)}QL+ps0fG7Zx10M7be
z?zaYW8IO_V=ICXde<t>%k|4*PAjeJH7UhC+*Dry*alULH2AMI>&Vdj*D??l}6CnxG
z4258Auxgyc$<j4N;nBWxB%=(yIhe3ND@iP^XBKMBZbwmvJ=$M7^>cexa~>UR=xf!y
zPwJhdG6c0PKWXN<(lO2Lcy?a3DzFjUNo7Bbe<PlAYk99VC%K2IM$5_Zw+JmEI6JEd
z_V>fsz`7!OH@*8~3qRC*={u^Z*%mPrh5K@9AHX~WWTk@*2d-uw52C)6w5SwmK8T4}
zQ_tC3dCC%{YYR{?=|6A2#UJB4CsWXv?#LdWVmb2I#=9q5#N+&<zD2xi_cdhhy@5Nj
zg}BWa|1ztOe$(Xiuf%6rCu}aKnyw_n)AcLXFI`9rdxaSat-4$bi^*-Q=>?w<nq#6p
zFl2$Z<seJs-el=alf+~Lv26?k_|VOB?t-i5+bEMLsSX}Z>ni<j+6HBB8s+bmW$m+o
z6irc^_dInpT>l2ynm;Kg_D02a<~vFbsYGHcG~x-3XFk~4Yg{Dm$VoBUE1~y%lbTVh
zMv}CnX`;f*>#olz7QQAow8TH#Z?I6&2v~SRyE9IVG;hJygFv%inj9lp*I5+FRTvOf
zDb`VD&d1BqYKwH5dROxq%(T#O904_<HJ{>DUkNh)X84kJ08P29<;V&cZ@J$)719>B
zf^{1l-=D7@N_4t9ztyoh(TI*72jR>u4rj~Ig|?YH4{K}`B>&Rxl#6e?*UdZc0MP!8
z9z+Y<{*njaRkupiG#DRfI3cz0h$oD77)$~ykae8ICx$AXXw;A4lo8K(lOv(g-$$y=
zf+Ju&2JD$AeQZA;zfqCz7w>ak`%B7kLu@%-^>)fJQpU`uNSkbOIA<jvW7;79$|XBb
z9CHbFS|lLTMX~U*aqh_*i#YTlcWP|@!SG!W-%ZYh+VVabyCT=eG|ZAw`Xc6R9QqdV
z0-7Z3bVA9$?80eHL-+uDOCC(__Mwzrjy+G>rN~zk4pa}J!qC2V%sUl4;~aRUhsV#>
zK=R~m;R|?oQeT=3P97|L)1TmVcBfXFTq)QP@5@h6!9g=n>Gp(18fTIZ!r5O?JeLb+
z-U-Saz>a1}E6=nPnk@Skp{h7jenFbyGxklZ(DHndoVDELqzCCZsaCvGQJs?uYvCh1
zQ+^FzxvLpLl$-mo9=%T2An*v6dZm`VCJI5*5)(v_>f1o#du|p$Q!Kk+vx3yRk=cDR
zfB{p?k~Qc0&&ffhi51>ABIjl$=oEW)``1oG$?A7uBBrETRet}wp6|nO!a&m3rQp(L
zhw^~Yk;sGKW{JR<B<6gCfgHqI$3dnl9Ch`2Ss)<XTfteSU`xqWtsk@8e^EA7InZ0R
zi3kr0ItQxCy&-ThJ_~8r6wbN6RU-ox)L~F0IQA5u5h6NcFQ}Wl0W^D`M1Ve4SbRPD
zxe39-NK7O*>j_PMLCA_|<bM^MsEOiYYp#g4t%YoFoq+U#2T*)0jr!WKTP_BV-RH7&
zU!9ZzRT~I#%Z30iAa=2v>R5Q9{Ao(CPj`a<@khOYB!`oU+i`3f4iE~m=1zn0djRZ9
zR(42|ZWDhTR7I?0HyGvVQNg(K#zcsI!)kgW9yQfN-}5F6Nou9b(~Z5iES9_hXeFP3
zN{o7?p|hWD^@U(G4RPJ1Qgd04-2745U~$XmkY@ZOhv_s^64hzzh509;bB3KIP#`$P
zyi8Sh*)+qIz*bz3)$@Tk=O``@q=|fgv?*S&sh%VxqLnmX!R{IJBX^uIKS`19#jcTX
z9Rcr{y^oMgc}ByKP8g42aT{@TcZ=y`+r%)L?em8Xe)97R$(yYNt3-~WX46Q8qjp1&
zO)o{-!OAIM5%T+=lHFt-LNyiC)*Qs5X0svGZ%DheOa49PF0%K)$Kc|6qMfLlS3_D8
zgQ<w~EplTBe3V=>wP2li7yE;LCVu!%zXnCBrzGB}rSm0UrZ;PaMs&CJCjxC0122;!
zc5B`l%9!?HGD`+o{V8P}0KYW->$2WVa++ON+;(4dEpnwm4;U7QI2HM~-?5-wkh;Kq
z@#&i;&dvVJ^lIQGa-#kckOCQP*9?<V3Tl6N<jo?19ZZmL;lwTU|9GDqO($0>i6o#@
z*q5$229&dW|BZJ&&@*wLLNSP_M*$fCM>&}&W&9on?9IzY1y%a)gcQoIzZNguEU<RF
zZ-b*qj2o(P?Z<R(jTUfnTvgx&Z=&~wbuD!^JkkiLr}HgdVo~x{Y@9CT3qCl%uJZbZ
zC~=`yDPRV?q06aI;AYb9vw!b<A|GMjHVC|^)+)jw#wnrAav9s<USAYk(AOQJDWlk+
z5y?gc?^RWDDboC0G>w2x`?f!?%Uh74kdLUusK?7sx2NC~LT`kXIsh$i<Rjb19|zn+
zDc6gdC|>IICEb)GI|nYG%1WO^M-JY>Cltuj-lhP#d(d7c!+#rnY!6=JCoN&`sFMxW
zkGQ%&jZ5d)Gh<WETi;2S8x}e%3y@31!WZu*qikQ^1H2N2X4=fu#MYAS<Yo&Z<mvag
zI`Y1#VJ3DI#KLq~TJS^vj<cmeQ>FMu9$>uD1~7@TLW<goTr~~7ivWXnB|xulK;$tt
zlCA&r(=c|r4(saIPHBe;8jihrKC4DPv{QeN9NOGw-XI)e<YzUGA91OmQ>fKR|7oJ$
zRn+s*JLM0xZ{Efs)ZB8{7f|Od-t{0|i3~wZUhUY9SD0714%|03tCq;BTk{x!eEi;D
z%Q(8L5POl&gFsU<MrES>)0d7I`vx9mzm1%nqfZ7h3L#u!w_bTkLHQX9mT!b}1htWP
zDcHQ@`2#JMQ<~#TY@zayphnfsjf~>@7WqZ5vy4z@M>Z^E9R^;;dz4I6&G2C_Js6v&
z$+)$HB%s7XxR5?vn4{$2K*3(~;h$yeI+15Q1);|^d8gh~W8Jp7r^Kx6Jx0s;fp*)R
zco%%R0q@;*;laA@nY;6|BiF>VI>A4?a1zl>W~m*})-ay2)M{Jd7iE$bKC6>%-u%&g
zy$T#p6M4pGM;>>85r((oQHu1Y=4XhNnS3X{Hmvm+!b4G?w<m8SbINeLIW0%yG)Xqa
z2I$Q9@;(Wklbi$`BOC!D>qCAsyH-v}c7Sr_mMbn)3AT16LFOu873U8>$7#%xtvr{|
zKfIC{gM@LD3Vb-@Fuag^-fnbzYs-&m2w(CsFnXmLx)U-%{Dgdj^Kpdm2<go#E858#
z^(UF0#Xh3n17P7+m^EH?>l0kuevpQo%#T}ThzJws&CBrT)mkjsAuea2s8N-M5F+SI
zL@%EF{uClY-MM&AJI|N)Q8{~fe?!&2T?{5uM%WNYhm!l$_c#vKOgwJcHf!weopE3t
zn^5m}7`Y}rSRpb0B3<U-nhZip!O%lZ6wvZup!F2fjCLX8?Khh!DMEa+<W)O-R(bp(
z3|Cn-99m6Xv@ik^pmBi{Hc$K-eL=M8Bx~1843oX>GbrQv?w-h)DLRP-3W)WLNZy#K
znAhmODBdKH;W@J1`Lfm&<@{mrJlwGvT`t*YNMS>m2#NzJT+{oNu29)nRYV-3)};$m
z&Vu)<YGct5<jyc|h?w}&)B%Kxt7@d1*Cvt#FOopKIyWOSzaXtrox#}|>YEee9M!F+
z#4E`x-yjEE)ez8}jtINP3B9Laazc2x2tzqKh8^|9Y4`T`|8DvZEtb!tuS06hJkIZ0
zEjThE;3w4!X*jtFl3%Fa{mu4~JJKBB5}HAsjk$n3TOwYT)QmT~JZo~Ay+3)-uIr)G
zy0Ra1P+^kWzEC@@eV(d!aioDV!p?(*M1g3HS)~%dG5h7aHe2Le@AhsvkTj2K6=hB4
z{EV}?sTR85Ny!%WHtM)P3|e~}*Bj{>$zMm&DxR&62&uGQSN^G~e$OtBenMEoHKuNK
zfv7oTH_aU158}x+qD;i045BW9ul4}~7{Y-c5j0ojUO2qCW~fm4GY}i_N_P3`542@q
z_Cnt07<7WjhrCFA_nqzpL6tA504muHw-*u?>cpA|kBo#vnd)LkHj;!LQYTv#h)GDE
zx-usR<OoR_Mg_F5$<{6&9qoU(0GGYrqHkM~i=VFnCad~mSA0IPnDyW01`xTSXm;VK
z`i^-J`9V-QNok(f>ht;e7Rq5N6S`N{_7}h-uy`4(xa_V1BVvhQba=7G^t5q-(M?FM
zS?zw%J`xWyS}%OC6CA|J1xXT7Bs3EzR{s#(H_s3cE#OVc`+JS7%POcVM)#ARh9Rhb
z#G!Hnd2XbI{}3tKSW#sjl7v(1un&$Fx!6bFi<~0fx*ZKzdC+5>euxwNA(Kx<gvn+y
z3MN7mD%>mswj<vVb|i1_O&-EE?OR)BY|65@Vv4M8jwAp3^_}0NkuwZnPDY5RR;=7P
z3(}NBVZ<Vgh&X^p`sS~|)DUu^Ek4@-(Kk6UnDgNy`PbqsS918}*G$4@(<bul<wdj8
z^cjR252GMbK0)f;^!xmaNaMp>r8wS2)d(hmJt+ff2zU~A@J45}J|J4fMN96xCme3}
zti<{ly1#Q|uJY@QgMBAXA`4&I(Z^;&QLCb1?dC&f;f=|Wd|Hiq2(y@ORgZ~5N&Ns)
zcnv7=8=#emk1(5!dH=@ly{S&7lnd`A*8M<y;jD5)VH}EBhL%BKTWm5igBT8(rh3(r
zqaEZnaV_yq??F~Q^+VXYE_FF<QU3RraKk;hm9he9NkGokNHn*L`4aXR^%vrecRL^$
zc|+GFQ~%KNy4&^37O?+`_Kgf~#h#GN0b+jwX8Ie+kiGTx?mT=Gw*ijS1)n305MW!s
zy>I9Ily1X=y~yJ{P@x$Yuc1|`K++@CMCB)OC~Iw(|KW|PI{aFmQj1sZB%Uzx0-l&D
zESvK@ZdLVrz2!zXTYmxQFk%SfG__itw9BOo5-%o1*;l^Gv%K*I4LlW+^VrtHLo0Me
zm9t2DBoKjqQ~1?M0xeJ}ndb&uBGQpkiA};g2nL^U3!6h?sYj59;cR`p?Ym8L1h-9!
zrOl13@C~0)@-07Q-^A_{;WYy3V0oSCh5i>0v=EXvRq*m8tiaN8RD}L6hL+#6u#`R0
z9e`JBUvdXoQ-2I^8rfikI01=AFK=>YB6FUFo!%9`4n1Z*U{<^O4o8p6EQYc*3WU_M
zW7US|fZ0UK!txW;W0Fq{ybh_TL~bCo>W@V@of|8QTdVK|kYn$BE)X?<eGszaS;hDN
zW}RiasxneDf#Y(Fh-!kwud6qLlOAle55-m>PB}3m0~qbFcogn5h0?=0HF^*q?xC3z
zmV=;8(qP)H`iS;!l}6;KTKzgc0LeQr^Sr|fHkCW%D$&E)X#w8E#wzy0#PTp_&~yC0
zjJgV<_Cj$3Hk>xFy-<k>+4fQ}GrlKQ2TL9k(8lC8CKO+{Kn~Pz_e8LSO@Y{6ldZfp
zy)umle25{MSo^r#{C}S-w~D01@~~&{vT>e$xD}onRIWtd02RJ>$CU+A_$6wo@2}iS
z4Vr?C^-`Aae0O3o3CVzIz;~D!EcK!X;TXI=0+(pBMSpYB%12w#69@k;nn~xkO!k#Y
zofjzSgO0Q%utw)lu?3m=6YEHlwTLi&h;a*@l>ZW37n?~M9cei=PBchjoFNWM==xi%
zZ&i}i*GDu}ATHuslb8W8(GaY#{B;i3$PVBXJVALM-xBq~2gM+A&8={KnL&U3PXO~c
zN|;DaW2QRd09?;I0EpWIe3&I3-t$!O3D#9@gdc~qVc9dJ3Fv+ijhsRL_0cz%^+ryF
z2jLRm7BEJ0qa97_ws64c&`We{Q1`LUC4`DuN&p6)bGEWWhj_XOLiT*r)K3Id6x$Kw
zIpx9jVdyWj@_l9uY-rAt4zh9(pH6PdUL$ZrihVeSyDipESyVhkk!C689oe{S1wK+&
z#YY0calRsSCb8Frl2^V62HFn)zL)pT!{2$K$|?fv(Qdbs*t0+27(Bg`7{`e~UiqAP
z;yqp^<XHhiPrwo=H}eLDLbQxkj5Vx9%l<K_bYxzBwv}UR>m<<1)l!SEa6!!DRDq95
z+Yu7<l9gKzi-}!W3wlBSG~v;R&2LB<$cjv-tkZQ*73P$$Y@V=A`sEAx;)Z&}9sa%S
zp>T_zc$J1pKd?H)R~&0cttW%3jNtTa^U+pO(l=*bx4~D5IvXW%6Xj=QZN)PaOHx8~
zTO<~?5pUQ8A=Yjv6V~6Qk7}6{^c^NkGRauO(GJ%}(D#rSsb^@f<a1{<#&;ZNzcTiC
z<z@r!nT~mLaJqS6ZCTeJl12k#o^tl3ABj7&kcs=I-Tg2KM(&VZs^*^nZJ3Q4Gc#9#
zHyii|mu9kTQVTG#-_#t_6C);Fqh<1n>33hwwF}3P@G$I{KeUx6vtpp@<A=8a&NF2n
zo+TH(9lYkU;-HpyF_+K?IWjI^^<dQLJQxU7CA<AP;`Z=4;VfCgcQ8*Fp@$nqr;f-J
zT)vw#T?tWD&b6jVJ}}GsV1hE*6=JlW5$4_TTT#35R$aV~Y`F)Yg74>VkhT~Eg6<aA
z{cU-^7LBI8cq=GWP|bB6^{3&wA%@1<%VsDS!43^)mAABBl>1CHsvV)g(Z6va!wI<y
z4C3pFiX;V|G3#5THOzzvQOCf7XL!6odo6bL<fKcnDzUcy=@q!QMw@}_+!a(7;BW5(
z0FvB}j64LcBh9_M2{sOFm9L=F2*uG%0*PCjjPvjEieU-5QRDe=Mu?@tI~88~Z%^1c
zJHQEY{tovHMNJe926edVyBLMjS0$Z9X_tZO^*;}AaUUMwK4ue=_nK!!$|!ucQY&+|
z9l!sI-6J6e=7)9(`{e^+3xREAT~fSf0kI~aijMj7D9=3?T|3bV>?8#@0P#>!%JAub
zCYjoFK_mIoFLFXI6RRX<>0VZk#t)41#k}@YBEs~0I9DVkZOi=g+;+Z(+ZH|4A@P(r
z)y{7FfQ`Ryn|B}X2#`iK7Q2U}Er8;Y?wb=h(Ew7Hb$>t1WvkUE)Xf7CyAqg*_IO~0
z5mhyUE3gEvB~T)B=^qi@nL<H*t}Cd*`XYn9L_v<`eS&Ra*ZX5-U=X?bx1GKTymqDk
zdKV+BpPAVG=L5TmwVeF(unhlm@7n*^)b_vsfR+63eSTPye&SOm{Vos<_vqb&`U8Pc
z4!6zcXeVnh6itD1o<jbE)7bRCSUtO(JU;yrRP_#+z_+t+3Q?g>0TBF^Pse_eIly^@
z-_@TYGeDtWD05=aOoA@CLY#hKlNP}XsWOgQM*E1f0hiZjKhv$g1idKdy4u}p)bB5V
zE0){IVbVt4=zG?+I3cqich2(`Zy?VCw*Tt&H1rx^q*5NsX61B(Kp^++J4}Ktx3!P{
z@5th)%V2U7-&cfej=y|$sy6e|M~E=Tz(W&PCq%Z0yZV8$$mo*~Off!y`-HJ-De6XI
zEZ{^Z(QsuDZYUC3?J<wPNj0p5h_c9Rg)++7{MKM3fAdp|u8~`TP)J_6j;4Prjlay)
zRnh@M#Lm_-?U)&@LwFz*@&aNxA%prZcnuB|nAn6eGLZ=c;WPADlO`{U|9G)VC0L^6
z?R{<=U@D9;OCY5_@>z)MPc&0@Bl%@jJp(0%yA&cizu^Sd0{*Hyx?`xR_62dqwMe@!
zVLsew#>rH&?FTa9@2*X~Z;&+A5KYB+LWnmAbV_*YL(+t1RV@{QyM^BPVo9!pf2P=?
z!Q22c<q~GDD?6^^3b8O*V&z2^HhhiOK&;viE)Ee?2VT(iHas|PU=T2_BjptqBJ-D>
zEtWJ?a1OHFif0fvNg`b&_!GFMFZfe0@~OZa@9&<eU!6ETSf!ODmd+4cXcV9KL-3^+
z_+to7DrL?u$;N@#w2sg-i2O({DE;rC_yLan2~xbuy~~^A9uXDNq#|=5-@E^rPdd4H
z8-G;=0?8RDJwUHTfSiBdyEv2;BLTBD4M370pi6$QM1Q}UB+Q`-#P#6s0`6Y|-`WjY
z50c3v(_COfM6MuQ=}Ww$KUzTdro+XiKV^X3jvkTSi6@(r#F9__n-dwhk)b&P6;;(k
z_Jt^QPs>O;iw|wI^}yMDp~RfStYKU42S%QR)Hxo>uEl?1+d<8xMc$5RHSn4)L<+)h
zmc2QH{rnSP=IV8BNt+q$O2Tq8_B*$xj3G%rPE(NN=s^(0_@Xy3>s?#zco+j^c78|&
zxubXu5EAnwr{rI|8)`&7$xu<^&^bJEt&Wvgn`ljS`!7m*aQxu{_NPeMgFHe4F4d#b
zgpdZioYEqkc`^<r4&dGX0Jf^rsLtq=IZNf*0aW8zg_7I+y1RMxLmcI8Kjl`{Z9v<B
zb#=UFB=+kaEE>Jl@^F>0s^Xh9o4c(86!V88SFFWUm`(2C%YNXV@$hM;;zBStRGm8Z
zLa1K%>yjmH`3ppUS?b6Ti>Z$^hZ#r(2CuQst|$U)#Ed#Hi?oih?i+vwM~3J0$-y&M
zv5BdgR~GRRM%gbSleJ%MB}I0HnWD1`CzW*SNP;$h1G}D@VB}-+#zge<D|5n3`Q=GV
zBuPx5Pv{PcQ^ceILtCGcl<ak4teerR9%?gJO=hf*KeoU2b_Rk3&XWK|+C6H|nxHnY
zSMlkhTYPR{g@xWei)7_55VAVV(?L^n18b)`e@Vu%8Lxz<5&Ytx>i8eMsHQL@xmPuA
z7CH!R$yJRc&qux!?kHbD-o}`$?TR}__lo$&+kfWSSTc3H>c{Av4VOyvfPM}us<|-G
zji|zrnXe(r)GZdBe70)M!GOp4$vQKi7;SUst$6mbUv%T~CB3R`YVbS0z#fdqV7q0U
z_r++dSxES@acJ$~(aSHnUGjb2C9BI5TyASCm%gF<P~Lr`1lBv7Dw~GhhLp8gVdPO^
zn<l7l9*aW*+;rtG|MoCbwv51lca}$PIvVlO^}`ER3Ny;_@T)5-R~Akton?QJZFOH?
z!FnK#u4DL`K0|-IR^KmvCCf@FE5FHkR%SG<t=x1lpn&d2b2|Ws5Yr9zH3t(fje1-i
zHDP+PS+=*$kQPTU_3;<sV_Raq^M?ceT{se#XNVatoVP1LX`h5s`bXxDocZY&cWL78
zpBz-vcc<v#`j61*DF?i_UNjf2p3^u@iyZ-_!xcrlQi!4-Q3K=V3k`P8z(;)glrLDE
z>sjv^Xz8C((<=H6y$rieo0;4Y#n%oaVpi@2IEH)yX>+fy+&*yGP-j~|3bjy_vb1f?
z8Kg1B-bsP-YP`RN^s^x%Y~MG))xGxYY~#+kGK9E2Zso`V%F_ec`NLp@q8JB}bO_Do
z#jr=b^94wC6EIzqlK4*$+*c0-$mAEHWdg*Z<`t|9{;*^5HPWn!%qLexT*@GUuLz{{
z1i;<5D)%EPy@RdSSEfR9k(o_H(ZnLKBN$Y`5|68hn<$XpqENCiT5o-*Dks=<2cjp^
z!)?2_hq|l16g4SaAHh*Wa$bh!#AKUysLYr`>y`+>{@Vmu!FmKlEol$X_n!rWUO%>-
z?uujnBot2x`D35t1V-aV-lfK6f}LBk=_JyY@n|L0{=sYdRnlb;yhPPFl9?2tMg)jn
z25%M-$xyPde%*I6bp|oBPmK3fXi)OazIbgvTs$1?NP9>|cuW0wP<qOT$_Da{+~gM=
zvc)G_s^o)M4RFI`CiAI}2o+YN>C`N>1Tojn6~jAgOrkkWjWmD*c&F|1{tdgWYN-4v
zFB|iG&hZ`KnfB$`j+l8{^~oxVv~revm^W#BmAV*lchHtt!096pD2{^vIB3Q0hjt6_
zWm_h-<k8)OJ@Es~Uu=1GEVPrYv6QLWm1j0ro>N<?B0DuYsbBIgFYOD;O{UVw&TpE+
zmpCl!5-;^FE=54@{46IY9?q?WE*V;arX(>bM80P1?IC$=#?t-)^T=mHIK3+w&HVx{
zIG~qhjjTw>E*;jR%YFrayGM>NVdQ`#82d(xU=D?<6dOfKyA^Y~)cg$E%z=~^7WPjO
zq)R&02@GOF^fQr8G6;fhpHbT;6(-_gqS&e%W!_q@sGJRpuRkibHpLSnlJaht;0QqA
z7X*1We@0W(o^2Kj8VnYYNu%|OjxSQ@%C++16x9G4U5l`%s^}#`jY&GEQRE-06w(eo
zK>8aHEce9mTT6KgH#3I}fIL+8z0{6?HmPiY!rlJq&ad+aO_@k%uLx;}*L3Mya{C@}
zxXq0rbu(A|q~7NUQlhsI%Boxc$6C%@j@Jf5NZ@zIo5h%il?-$D-5e@!p~;b5M=uyx
zx2@MeoAwtKx-iXQ5PBlb`YtAIq5>L(6~TOfKIp%$1ba!Mi93Xo`I2n<RlB}Dtf=|@
zz%X!dhH&;rFh;)Ba%?siY!2$y=H@>JHB<E{MHc;8g%6}?w%{_<?<|QHW4THwHCo<U
z3+w7DiXLqR<H#9NEh6L_TaIyLgu2WigKYW40&ICiQH?6Co4-{V#SwMw9QZ{2thNx^
z#1rxi*5W?tNJfI`bevS?{kQVO7$3Q#$%g1ML80OU0H`(Zqs5qpPf^d44N%!6qCY-m
z8a8R~3It7Gk|;S%k>H|yhrxhRGCxa)^ObYJChj%(BujQgQeuvJEkFvrFVOc)p`~2R
zu-dS%M|dBL^QL_(G0A7^hH8qulrHr)xtMa2Gv9!zr2ZRVdqme4gPqFeDLS<uF1pER
zaE9M}3HVf!$5UjMa#hk*LS7!$i^+4B%~CFWLA0(-xrv>{RntKn2iR-+H&+P_C5#9v
zPk}Sb-E+k_Pj7?D*@8T~+(djbg`OVZ{R-P9GMNz0xo2cLi8RX|%JQfeNK0!ALo(?Q
z*;hN1ckr<28_+GbE>=cbE>pM;V3%ruV>6sW*fO)K{-iAe2rdmpL86G28r&H%(PPmO
zw<KiWiF0k=8xW)~-LHLxLx)X5=&eJ3yzp$Ar=b0$c5%}6aol~9Ecusi-ZTOx2g?M7
zCr$}2x3H;_=$}XRZ8o=|=grvYnyEXGD=DC<_oc-e5x>_+K3&Ufd~T#ETp|=+4(^~x
z2&OX#$~prlL_rQQZ7I&Hel0RGyz2PIDP_7>j&n%MM}$}%ekKFem3MF;Vy2zd0_vma
z8+&<SoLW=NNZ4GW@!f0%yJypRH&nHSMa{M$lr#LrG$n4+LRDhdf9-Gkzz*0C0vHRx
z%hjR>pb@-2*3HnxuP~OD-_GttTz3e^lb|guL5`vsN9UsKAdYVAN1r<7en?=KJWkf=
ziB|=iX}x@nIt}4}N3-_WI2jy(wv{oCpD5km;5<yaoMz+C7y@=#8Fe-ED9SQfx98&N
zp|GC7&dGYT$?NO|DPbb0y@9(LmzUb>3&)mTfnp0NzL%6{HPz`*Q#Yzed_*24;?DTG
zpXis#)$PZ&G(F5*F+#Lzl6arA?L_`t^5oo^(YCA_o?Mr&tD-{C!n7LtzBAA}?aB|7
zJgRpdZ1{&>LTZ>%+4tG1a`nX<Iamb?QC$p7f#v%eK&lG;5`)!@RCe4H=S6zrph&8I
zB&MVw2jVRbdPgJG84S{LP~)v$6EYHDfAYc%2+YWY@CK7k$qQGu<Y)`l1LHkLH!z@Q
zcH0G75(|&i`r|cTs#Tu;2vpwC?TKnY`i;T4<I0%e;0z@0FQD9)Sn7ZU>`=?~!{W3p
zt6NnDijOdn)Sp+JQvpThIFBgXQ!9;*EpN>5Y1gDbjc6ey5HUtfdI_;8(E}roosMI&
z-c&_w-HK11LrmssDE#rfJyfu=q&k;Y(pLFiPD5>C?Kba&!M$|R2>ao@?6c9)l9N^G
zN*0fMZFq*2U^DJ_+;JOph~W~FIDzWxotcN_XK$#UxpL#R)Q9i{kcP6#=SExAlyr;l
zroLMH%4WI_1Gl_pMu|7ZXdNoPuS8|h-^rcfIUqXtHv9uA7d+!oGs5&96!6ZAsj{t-
zb_oe_YqKU})NLH~hSyZ?D9Un`?Y>HMI{8Rm;oYRK4IU`chdMhtx-<|5o%eCnoQML(
z;vneGjNdu=9Te5lwJ7c^>$XqgFi1{n(N696eTlg!5hYJaYgkZt$ruh1D+1t`HFO!(
zB@uU~SXY{|^+=92w*6JNGUC>25W00gR<Sb9ik+QZVf^b-b*muB%BEoI-u#>>HD@yN
zfG4U>KR=*NPH=}J|Khq`UVv$lL5zoYbblc52y9sOOH${fwUl$lU!CVzhZ2m-H3w9M
zi&1I>uu@lCmEnk#QFmPT8*8SY|EsWuaU$1#PI8XN$+*ty2ejo0SPD4&2TP_VKJEl|
z7;BW;Pa2d-_b>G3eX7`pcVRIiwQG<GRVprRWb<I*>4-x=!K&xbmS@!jj!CTzL5gkk
zVzV!hQ8|#?7bScQZ5HiY!>nN3CuJpaYn|1xfJpn2S^PES{zSv~i|8|hE3b&q^H6vx
zS`7yU(v<zHhb9LyiMz?pB6-rd<m~oOd3uid1BD`zVN}=xNY5JI9=6ANofbyw#2k-}
ztJ}=(x@E)bW-XH(t)#XR!stOLlj%MLZikq=i2o}%w&lvQ?7!3cPw(VPN*9&=fz_!O
zKs0;{6S30DC&NVg#v~jfa(iBHQ*AHZa7TlvNu(J9<uNuxKHe>&rH&#!yp5&ZAr8Ka
z)3G}*T3R*>&rG8>>_XFvXXFa`mzQzAiIt$XW;dNi+q%*jsM~MA93|Oy>@H#<tlq`5
z;y9|8U}t`C1?gd8vX7DSOA#N5vo7y}=bUF1wTxV&Hs%q*pD1l@2z`r?AZ_myx(+6I
z3R1bly@aehgH{>WcH1S*=?0~uGH-nQk@-Hc64r#kZxr$6LUb(?O{02@m>VQkHC8xD
zD(88=fU{#8x>vkgmL^VAbAM~_UzfQ-`GVG=_Rs-{)LOdQ*KzMfcy2kA_FVqGic&_6
zXlPnBA9Rji-*n)K`XRaak)L*;VaD>-Ms}f*Bzy<yvkq_Iy|^DCMy+uhIHTTiYPn2q
zpjcjC-5U&D=pDV-7D2{1wDtGCW_%=5BdNM9u7wnFgHfesWgAs)DRdv==_fW1y)>#L
znVJe3<qi@|-De>QV%!(Db<Vqlvl>a4_IYCTVtMIL6hoWtbbVY)VYboCYi_$sEFVkD
zJe8=)5uaFR#Z*#ltCPbtuMwmdpv1xr=85&xH<Z4wrYoSxEX)hw3G(OZr_rfNTzn3O
z(w>DCQUhQD*4Vfl&kubW9=bGKUqNCOzj}~ReIjCOZt0oZs8S=2u)R{tOB~%rQ-f<~
z0{6L@NzJZZ;5PcnbQGa|oKZLDgBef42l@k4Aej(>7Sc~IO5c)Ji%0F@gXYdOzQZX(
zl8R~kPGP0ErY>Mn^}B;pASd4slhHnQ8%w0r2*Vt8*IsqIl}#;gH&WaB)>3l2?pPz<
z(=ALVSQ4|&r|lo-bT5q=FNE|a?RauvL3&YsgaiZ)wnXJDTblDA^;lMo$gMEvm+lph
zNLP~7`L{@xQr|QAPbQuLTBjqS&MA>gILtf`6~AYi82j$L!685|pk|5bQWnl2pv(sX
zAZ5}^>m!3s-{|-(ZC(8~;20`g3PsyQUbT*SSh@0>>UZ>T43YA4CqL345ti;BKo`ys
zfYyw3<vr4aK(TmySkxNMvd2*FgH`-bt&kr;x9_w9M6hO}pp3jEUIG=Wb*=FyRkbzf
zV4Eoe<1@JWP#J2uD2$d6m%YB}4H+X5rB;s<$^K>g91p)W6sYyR%rAk@{Nb4hbEJ8`
zs0p07rZD+{uU!(_`#d@)kx05d($yu8IVybVXMc4tK=O)A84<92ZmCYFgC09H_6>C-
zPyZ(%n&a?Cy^o_Ca~`j>D}y|nE4kG|szf0>ex*P9i_~k@@p}ZB9Ua2UWqpguP9n08
zCoh-1L(LQ&RjU_5{22FFD=B}1@%0)A<}roAuNk@`T#?OTrSH%<o*O5>#0|EBp3|k9
zt%jjtm;*7OOce2g{266)VcJYe&l@hr!53T&Wu*7)ttRboWCC%4JiWLnNx#T0%>$rj
z`V0r3XS?aKZph+l0^%<<>)v%i4qE<eE1sx|6kOgymD)tgO=5g`_h23s*V`uc>+ngw
zLIE1q!kIIJ!r$w8l$27Mhu=2q6q@qTwYvAp(iq;NyYiJ8NUxeZF!!LuY`(h3`-&Ky
z&e)!Okm+bsM1%bmM7s|lt#r1Sa^y}BFayPw%b46(CqDU;3{*kX94q>U^8TWNM~2OM
z748?X(wn<{h&?s2dz<EyYsRAvtRMQC%-j*85C0m1q1LPUq$ZwNdx^J;&srAfmP~%>
zS$j76#g3m)l`&1rR!a3f4&A>uw9Du0R=L*X4HUjZgo`t+VConpLXW;6Sb4&SR6DRD
zIY*0?h!l8|od<ZybVk_?cwxE`8!fx7?gkV}#Vg}TPp;syYQ(yI1BUX4^;(DsYZUI;
zLQTkhT!H%h+WFcOcDIa}Qqi=t1`W7&uH@Ex{gU>m#I~o=79yi)NR07Lk}Q#!tWsS(
z$d(A8u8U;k*OCy#q0WiD*CTO6sNQF=s{(|yk&*Q>u%t8KEK}ET!pmjV{gqF9NB0)n
zTIC*z0wz^mGJA&kjhuJiL&UD->gu79A4AdMOJ)pyl~%bXlL--zqss3ioQ)hkdild)
zf0Yi3c1zqE$ZAevo;S4(s3D~=N((~)f>S3I-%XZPBI6AXZ^$Gw6JlAOuGy$O6DECF
zblrBJe?2zap8E`Fdm&@wTASzV#L>sEKq;}m|FjU*M05|rXh~E40#^vnhsZeMvH0L4
zyf4KQu!vMe5g$afp7>P&qjI)tCP;*=%LzW@-QID0hWHA;954`6R=$rC3U@qz>J+6O
zOiA4V9^-x7ATEz*jJsv$ecmi6<7(KG8VLGh-*Af7<OXCLR6+T^8oIBfEh*P-O_C2T
zaGc68tDZybY7k(SSS<%y7DZ^zb<6}K?V!5_&q-Q|W==N!K%0>ZF-D7|_go;<XI69)
z@Ua+$CUZw6{4M3v#SW!+SpD<0Vt1AahHuUtBEx|EYBy|5D?Bp}lW_9|3G0jL|4Q5k
zIn3tqBy(pdYTLo5IyoC{EBCYJzi2+vEvDtd!1#106zyX*cLK)Vi<l0o<Y0d>3aTyB
zjcXUHo^dQktQcd8)3;&EpY#dp`T@9XxE5TNxNNq)cvXO{mMY&Usd+j}^!&Z<eZc`r
zDphIhRYUlWW(wZd1^C@7t23pMG|8a{leCVa<^T=Wq`2p+2JgS0+8kRpc&Nb-lY#o&
z6PxC5Exf49$^duD;Fv!E)UVCeCaSzwAez0;mA0b(Bzh0_+%{X8crY0odRW<SH2uRr
zn7VCT-E;_<!>b@eN+B597lv$Y4(>t-Rps_=z8W4Syf;&A|K9b9<;cj5F=m3w(cv}g
zpU$tHD#HYT;9~?u;mqb-2V3ujq=lI}u4HTw_E5s&pz=<bc~F$?d|Xl0?i7(Q@torp
zgSq(BX&9aSU=hwA2KhLP87rD^(`qH`U8K}=wlx_9$!h#Fcqu2($e;{Zj*J`3k2OaR
zqzxb+^@U0N^~Bjg1GbGGY#El*)*fJxn$#X_|6IiGA^f*pL=-z`F?e~ePSeNwhW6K7
zyQ{}gjTs0u#`3aH*JEY5DJ9Ul1>J>3_n;w>v_-#yANYXx6@4n+Zi|6SCUzIm7I=i~
zwi0h-cKfQvv2cqYn{-v_lX>}Vx7ZBYIE}{XM-VAia`Tp&blnY|$FIbd%ePQaE=k_^
z$Qh=GG2JL3Ys%t)pkzrA<#a`D!+|wk7Yj!l;z~FBWX3YnN}!+RQ$=U?KiST8S3>QW
z&e@A+#`&#-d_H^<r|0KJ?fz&fC#S-<rRH+>ZeD@k*2(@zfDFmj6#15;Q2L^#USNHR
z^LH?HFYWJ8$R8dsv`+FiPKq|z2WAcR#gr_sh_i19LfjiuNSFu*Ds~NTY9Ue>JT9U>
z^>^Y0Y!Y!dVq=*LU75Fqtmc?s`l~CK`-~L4yw9up;_@F1V;j48#Qyortg?R3#dsj`
zH>58F>GnWzUD6RKE#v}f;)s<>=3AqtT0j-I2JlCd{J&a4+qUi>XLkcD!M8yg8YLPm
zFposICoQAw10f=t4T3}rywi7E3E7l;BCbYAJRmRFvgy5+z((+|NngFDUQB2uck_E6
znVCvonAqmamr{<CryoeG0Aw##9eIhOe(Tb%%`ULZV1`!cT;Pw>$aEZH-Xb}%4R;O_
zdj(O6kn*B#sMY?PV6ZwvL%B9$0;9fFemc~-32sm_`bSXU3$22Ted^#2Wbt_NPay3Y
zyM$2ePO!&~k!z2bjlP^5=yBh;ek;@6l<prfpFRv;@<FPu5BdP`t38`whs5mls>1#K
zd^zu8(`8M%a`vXvhK~X&=%%WcO!LjrzeDQC-*&~;aF-qn$bh|{&}?I_LH0pkiAz2%
zYj0c|<w6*<5pnO5QU8Wzy9aTMS2gkwgh#yDvRnn>QQQ=je<>=iS4He4<R4pbI2pt=
zTNts~pS_L&M^q-J56hU?=S%w-4R4a^Dx}R^SW)zX=hdbd`(krdPT~TABVIEk7@L?h
zqIZ77-0xn7+c<1VzO3<+lopv?8?5YIm5h#1|1vAQJ1LTIfE<cSE#Rhi7ts$7o9DQ?
z`V82vjtSU2#bwi^t`O<CS+h=ApE0q%+BA{)#R)7-9unV#Lv`9asjez1xLOH5s^l$}
zTsDbQwYIl>2E&!@UmzSFgI?I*(wEGCJ~dsrv?#|`)2se3v%$cM^3y`CAChiqXs_I`
zf2F0QR)FZiR+WY3!(H3-Oq%q~9_6U6YJbr{+GnQu?9=&k`zR(w0SHImF{6*5)q+-h
z;A04xMBdLi9-u)aev_3Tg6J@GuRd};FXAQb!Th-mY7&@K5~i(La;e?W@($9_*f&TO
zoE`$`aC@qixc{h@q@f>gL9@kUwFjTtdU2dOQ6H1Z?3_~HVFBnSPEh=vf?Kc3`M)2a
zR)oJ6r_e;LG{7<8syv>gm(W(St&-mV%risT5(+tyT-6?u`o@RgD6n{6VI|}AjVymC
zc;QaG@{Q{LtBpUM3{MZ<u(B}!Y$7)3c3ns^J2ixNVKX)V#e40!D<Pv{kn7F=4qm*m
zDWHAAj}KiIVC~)fu8Mopst}$q(a167BDwres2?K@HKr#$UqZt1PZ^ew-JBI3^)VqM
zYg1aVvOQ(H&DIh?*PM(w3Rgx?Mj#pU3btG)LwQ^Gq1rxPA~>Qh^aPC6aJz#Mgs#LR
zCHHRBAAu9cEHJMKOCT&k%xQVCFw-d6B)TFZ4l<i?QB?l2)Vy%ZvWjNim}&=;?)h2o
zfTqtZC9?FexMucg(*ZYXc0`$=txGR~N$7Tq@RG4m*YfWc6N#0AeK55BF5|~8a7-A#
zkk%$cO5#t?3a{1@c2k?@JKzN-otBYts{*$u2^8p#pD{pgh$s>}a|=j=&=jp;DJvh3
z%_UNAe{u-YxgEy4!ZdgCdjJY;9n4QCT6yMurOlvbM!BZLg&nm?n~!@LtG{uq#2>7G
zO+5|_eNj(wR$%4A8%Xq6bnUqx)Rd#?+eJcpWJ8#4!ZS{IWurBq^4eu}6O*+aknCW^
zI+N_c%wB?Fse70Ei_qz1DBOv(lE363IpMi`6WD!;m^<c2OaSGk_^;7slf)YZy=b|}
z4EmHGz^|}x`Z(mXvEcbvLx`VzvMzeAKS8?Bz&NrE_OO6;tx%wySfVI5+sxlH6t$g}
znLEJufOy=JJOdpM5;OMVYqV8l=)TJ%BL!Vb+AGWvApJeqBlY(M;Fm=>$nI6VVw_dk
za3?GSbBzL&DjPu4ROjjE^gWfLOT5=tNH0d~sGDBU70>*9M?o?-P(;!Ul8!Bzz}345
zmibr#>!6p0)84*fZ-0TQs2es%M#hL{%bKyqs7^_w_p{8;{%`Rer${n+>MDBY_*RMM
zHO;103#07qa?1X;zuAuBoqg^J_Corj4ZkqgrHoXekmxb==A3QbmGb;BT-*S=mQ}8t
zp~Rk3nqJr8oZATb&q^^Q>rUR+zgl!sW{z~^K0@@ggumfO3p~;4yG1OHVF2p_7oZO%
ziF5@XSDFreu~C^cd6g$;tP)h2GNI;T(BZQ7Vp`1(!Q|sFyrkMLmH?^})*9F(ey-ou
z*I$tD`#3pKH6d`ZadCzaMKwu_D|1qxObCp9ZiY6yNAUXNGQJl-(qKPor0*US&4#$Q
zEp%?ig;O*1o#1I_ErI-a+hoKg!W*zL6#*WMeZ#_@)AL5Pi}g`aR;fAiKH#mYptvsM
zuf4Zx+a|PL!;|Oxe%MG#s~mY8!&9Z_QZnkCkd@EgAT&##EI-B<2LP@|TcnHZE3d^4
z8{9fO<pVt4qw_@0m=eY9h!`1tgR}^S$J0fLuVu~*I$s`3xGfA!&2SGA(qEOCjO!qT
z`HZxRb=RvR7~H&WuNanU?FxmjIzJ8&mlUMg<u}k%)$rPWM{VAkeY}_lSaWCm)RdNf
zko={#BZ&ML^nQ@@0kJnebKjsv`9V$n+qhl}`&vNwZw+@CP>8c~XGwgmNp!CbWzdM)
zZpulN4Sn=hFeS9HwZCpfsLtArVl@+^4ZLqt46$6F5vj=?p`6B-fl**wI=!=@N)KH)
zlR4@MZzYLoXUY7>XQsAiw2Z6c6)jvau@G!ykoVLmKRWn=?)xt8m{&O$tON^@whgGv
zkG3MI{EITa;4QZ9NO-Pw9h`83SP7W~H+ZOT+`QV84vLU%L9)8$2gTziTkehCC0;b;
z0dVz6H4-oJtpZOTnHHHztMFX`p1}*zO@Az$h^Yf>W41qmKju8e97d$<v)c<$MC6Z<
zSB6}rl*A22NC^Fp;*+D3azX7!qY_6)50WXRd?#1)TLf5PWTtrK!IbrJhF0N&-|l>S
zB}O@n-bY@{U_sU<Dc{7UY*J~zF0Jf>8zvXHV5}CAZ62$UhULbNKF0!7g=j+?1K7{1
znfgIGEMSfntL#I0-`-Jo<-%4=wPDm(@Rsd!{BC~D?ml6g0qr?0WRw$#e$1Ic95lXY
zR7Et<=iO_|JB)goB3oOG#!85tnunwQ+Nx5%`3+^rEl1`{|1l2z)hN!nqFTh^OK)2u
z4L1zAM02+}vnl`5R`O5XoEp~^`TN0yrGw3^zOSmw_T>x4YHA&hdhU&eq|#R7^>tf`
z+uKlAD0Yeroak?km~jxTQR(1*%KT<S&llV#g|nXaiXYQutH&k}8kKnl@XYky@YF9Z
z+e}OPrG6bIwK1#`mU)w^+C)nyV@Su31fq6P#vH)+*7Rv&pzibwu#Wtvh!Ad1FyxaM
zMFp9*Y~@!71IzWR!OheOsBfygt=I&9Dvr5J>~9A#UI&vTNcIb^SN(Ytn?|eFPk13)
zxG|A|4xmeLJYJOoev)Cim3^27&XyYmd&Jt%3b4UfpL8uFK82cDg!XRC(}^fi{ff-p
z;ALUo;DrJ=#vgM>B{MQvj}8yI)zy;>J=rxoc~BMQwt3289oxFkpo}FZXE4A-CsTh1
z0kt02Dz7x^LX^#Gt5hIh11aErT-Vz}H*etcn-=}JOBLr_lGF~)%f(T1L>vQsEWofc
zJDs1xd=k>s@WTN_K011Mipyx8UaiuN4+Jn}d>fQiM4pdgT(yH>oYMJR;IWF(m`aSE
zl-nMo<(b4U2zdUT<6`1x<Okee<1{0^Ew-vNsku6N?%c=LR6`@C!pXeLIAt|<Cr5*6
zFH?Goqlr5&Kq=&k)(yf1#NC32$dWphLzr{YJRzW#rfJLXFSz_WTjQhfTOyT8Q67XO
z|Iv%?>x=wfc$el(E+comV`XLD^1_?!2awY6)D-;umYBcn@!_I3mC){3foJzh^t<I5
zNSE(DFnH2Y-=_N@UR`e-8D4|gE14rK)O<4Fjq&O6vPs1X6kC!t<L%jrXrYM$3>Hcg
zy1|6NE}=5j1$V_upg{~xy5hQ(#h+eFEa-D|j^6>|`MJLet@7cqA?aoxr@g@h_BA<#
zIGto38n8EUDz?T&=08W^mzupN_0>{}SzXaGh^>fVX^`Pav~_ix$3TbG!b3?0ouRb{
z&l|Inac3FC`vw8B^<aHgM65SB4pI@mMwTek0;552o2<!W_#IcDe9hH;k~}&ZOYC4$
zvjV!akrPqu@+i-6j3Lw`*YjXP57OAW<hO8@k!d`6EU1F`Nn@L#Dcc-zPSEAmj4`wN
z7<%m?jgb3*-bepCUVbn~@<WxDG7`qvfzT#axQqbS<SAS8gSQZK!E`bp*=t0ntRz9%
zpBSalSm;>`FD%tR-1RVqB`sa+E(O5_cr&+AX(<seD<hfxXW=$!xKHMRGZ)LszG*vL
zH?UeGjRZ*OQeM~7*0YF4<SwFcqP~qzwz&j-9YzR?>+ZbM-qjfh21;K;cvyO)mwzQT
zRL}!eE>90+pOGgm?mUNSOBzMX!$7v?iXV_*Pi(F>#om)DXw3hKfXzt}ixsAplYy6t
zMgyc|jjA3sD?z*+l_lK*ZC6S3xaI~`Wa@xdbUCc5^-qoHd4%+yoQCWl0@+x5Wi{zZ
zC%EY*8axSD91w+Z@EOWV9*GeoiBQxf9if#lVR&K2Rs}e~s0-&_u_jN#NEa#0-V;Jq
zdV=1J%5zZEbC)qjY!I0pMW<Z&M>3o4>W;|Q#61FJN;|QNUz_I{872St9DheJn!VK>
z*ZT^h{Ll_bM>-*$W1m#4G+msiS#>)ZF|;DV!)F@yuJa?x)b|)~x+-*rh`y|c(3Cjf
zL+uTJ4WmY1{jv_-q>SaBm=#MG*n(~25J1MK9ZrAj>B|*Fnomdz*^e~;@!f$QA14FK
zN2Qhf!X0-lY<&?0ICB+<5}0DYU-!B+V9y4%$jt(<r<ihHJkW=?%gP=#RvDC{PPS~!
zcFhzQ7Q^_db{8^A7sJT@{kUmot6?WEjm5vVItzM85y%$OD@8^cWX@M8M{w!vul{iR
zc6&MA3H*QNV|;<t8QkL>#&Z~fCGHbZnsmr7!(EH8E{<zXaQ4@q?_<74sa|iCN<cbD
zWu9q$z65EMsm>D|7PUlr7`*sgk6z*dlLADS?X{o5U65j3J*gDNFVb`=Q-K|gq5274
zoljep?XzL+_F^!>MG`c>ZVRFSxn!v7@&t9khPI~I2MI7@WEm@8$}85Z(Tk6MM{Pr#
zxmD}<>&bz;x*O%|D<Yov_knfN)ph2K%K?bdTzT&m@MFmn_P1|721aimhTq79tFYFI
zBLjrN9c~3OBjADdMlLd^OmD~AWO}(_vDn;)Gs+Pe8@fNh`Nx)Y2FT7CKzYz~+#(~Z
znGC*P!d=x(<^m{Bv`*Hz3G|Bw1XQ2@(QiDkwgP+}@RxSzv&hh#zP0!2b_%0qo!rLm
z;`<C(VRRz^TG~WNrpKfEc<>)+40|Xf&GS3IZO4d41?W6X31Ntyp%?n=j9k$FLF;y<
z9;+J~B>GLR$JPvIxD8fpJ-@_MkEvsrv|CLdP*L9oVxZ%NmsnEWRwjkx2q;d<p}=Bf
zTy0i{LH_cUQ&_V{X5#y_i9rwTe5d!aQ$%c>#ByT2lLVJ@dm_Z+c2k9$W_W(gjHrn3
zt!vgnOi*oHIV<bXB-I%nkGvVzyl>zkU3k1I{2elew(VLXG=Z&p7;xP)10mfBb3bBD
zZW-`?-|jaQ@L=^Gj+r@p(0^~#{meqf=6$hM<zxEMcJ59wBOd-^C}C%giqhp)2WiRs
z`$LP5;MU`fxFf`z%<Xy?p@vuc2og5Ef%(ou6b_CF10|rYiOysMpGLS-=Kdx~x}MbA
z7B`NN`awv5|6(_xDIL8*BSidjJMRvi9`)V3E2mj(3(O#fJf4Va<^w&*77?Mb1fTux
zxN%zsXhB6uNhW)M+ULP+X-EMkor?@0#}Hm?>(Y(kf&EfHj{~ifA|8#BI<-Tr`Zj-S
zq#PylSb80c$8qil5ix%v=aV6t5jL&JQbEAx+?;j#@pX0C|H^b>3!?LVo`6{N6G&Ev
z5zjI0O~mWC@^gF!=cJvDe^5~zL?~^M71#&NZn&B=;seEUTXezubitivD3EqGzrv^k
z#RCui?feEWSgQ0YN^hxiN5D8^2pwY`$c+l590_2&X_j{%HN|%nMUOv7!|lTPy}5!h
zLUYxcJ|bR1g{nmc#F?X*A?qzAsA=FT@1{dqFHdFFY_^0R_ZiohoRds?gGMQcL)`Pt
zq+bu6NO64I#_|5e0^-{~lkQZUKGM<yvO&>3H~e-U;CR65D{<~q7ES?cz@GHO{PPW#
zATGWh(vLfOad~JI>$;0xCvQpx6GD|BNJCfkz`%!07g+XhjJ<{6@C7oUo{RToGWG(^
zRD<~yCbexBRQ*}cY*tR4bd+_lPe&1=ovu@)2N2EteH<X~gQcmoBe5(>eg+Gpep=?+
zz+{QOQTB@Ao7g#o$S1%}+^bA#JEjH9fjuXa46?HD3JO5}(OH(HIr7ZX?u0vSLpPI1
zf|QHZ(MNLhOG+?|1gz-jbi~k@?JV5*b}id^g@5ixCG<0-l$q7m|IKWSq7OS=(dSHC
zikfzYf`?6Y6%pZr1#XQ}POtlI?J~~41~0D5mQjQ$GN@y$5oO_LaxK>LMbzW4sLMmU
zlM0<djb~hHqtf~#a@$Wba3Jbs7^1HmC>T<#Vd6Zk^*zwqn#b%;`4#DoEJsrTx%a1B
zTESjof2>0poA#0St;+ByXO4_#D9(QZ{U9%n0E50pJ3t*Yzr3ef-*J?5GIyvbfAqXc
z26*R{B55DS&U8BZVm-BE78{AWEdpcCr6&_fe;nu1$s$mMjQbUysgeF0qm|Zz4>j{f
z{%`@BS5S#60}7!v#Qoa+rF5C-<{D0kAJ{3(+<cLZo|n@4n^J}kIZ~3mBr6-pz@R|J
zm$Yjp1AEJ%76Ot)#M{p>E}<P=o^30CGImJ>uItbZh_@foI;)6_Xg&bht%|&jVj;Yl
z=`PO^&m_sRi@Mbh;X@TQx=+mXVv^5vRGFX5vCuD#|L%XNQK`Fh1dJ<nW3+E%J6n$r
z63~iaIxyjK0mLqA1>G`>P7sUG<yK{ARwuXR(T2k}NZe2`8n{A#WC`-eGtyJqeiOx(
z_{m^P@BD_Fa|~!FOn*h~6VGf@*au;Eoso73ew^i;nHJi6X{_<0scrf3t94m&=U7N*
z|Ef3gx<+eg%0Yme*;Wy!pG5{{rK2c~1q;7jx3VC@JTQi(WY9o*#Z!x1oc_Y5cuSz|
zM^2C0E(T^jGs}-X)>YYn4=(G`qfA**A5@U`@wADD;N6FaS;8NiEe_GrO7t`G{>HZ?
zKH8qqg>9~(IcHtQGz);#k}RpqnnwT|A8GE9d%E!G4E<(-7#qmI;OLC1gBWK4aLO?0
zA^ZSAn>E&c^xlQcRK!Xye%obYgUScj3i!YVhPFx4n@E}?RAcso0(f`t<X9syel4`i
zT%IW>H!vRTCuGwNY-~SJ%Fr<nfwe7$k@-^#wDhw)(g$!SgjX31rDPDu?`YhgOzu~F
z*o-mPq}6i{;WR%EA{KuNF|y+q&OwrA=5NQq5!eDW7M?ND_QLwV8BP=#VU{MQ$GGDo
z)sB!o55qG06jMk8)$d2MO85&mJeC{d7{d`-0}M)r7^As5nsOas8&9eEMQq{iR-Gh|
zB9d`ug51#sGHF5J`ho{W`_P?Rfdt2b(3M*F)po<{$t{T9=b3K&RxHeJ8^<m@ApZOC
z|95fZ3BF&KmM;9;!}I@jqvZeo!>={@e{D(h`(27BvE6<*)S-(~)ZA^c_w#m!qWft3
z`u%l+?b@%4Nq_zC|Iugp=eu^DrR;HwLY)L{@Jn;;O#E2pmY}gDGzmpjS~@4^{^=8D
zI2S?4D+{HfEq|GvnK)>BT)*o4#M`OOb7mD^=RW&y7hl+x_`Q1_7*+rL`u{sS%=qj>
znyrBDpP^w4CkzaZEb{)_&e3r!rZjy1zm`On9Ngbu|MOed|1}1H<C^<)tYGH8|N5=v
zHy%qoqIg*Ev{?M#4wT^XlkH>hLw9OT0O<S<61YItx*txT6XPyT)w;B|z82RPe$xq=
zP2}KS4z_5UKR<foo7(T&5HGWsldCB&^I6DzNf7Ma`E!20rRCHD%bvKJmkjS~PRdEh
zZ5{MB;VAw$i;3RbUGj#eaY=a2Fh{c&e+pkBhkyOH=FE9@+y4A>-xpq=2>bu>xledI
z4ssi|w_`Z7+4exKg;h!X>(}M7{mlYunNP;GfBnYGeZOwvOcc;=2q~Y8DP=k?P|I?A
zVM#An{#pl-om`Wlo1+%S>+E{G@cr!M`wz}ItAANHpSs!X*YDE%^!wj<k6LMlEqt^b
z9dhgEuE2BYbDu&TH{buYjZU<q<s56F{7~k0(w`r`_3MX=#>zEAzut|HN1DLbu6#Cf
zsqVD~F%ugx&4mevmpOhtmRW^kCVpqX;Gf_5Yu)W0T~O2b&v#b-x}(?Z6sN-Mv-z{}
zf8&qhOY2wgJRxWH_-4_cCo<STp2%*0lI3*a{5mnlg?oAvm;PEYw*oe&vj6<_uTOMu
zP5$P=(mDU7e;(?=!sDOU5)A#%M^gRuww@~s>f$3!?ESqYg1;ZsFgmsH&!3N9_3L9s
ziWX0r&MT$;S(8Nzzd$M{qe6=f=>uO6Q%Qh7A*VT*dw2Tnwm+ZVYGF+h67{cBem~NB
zg``ak4DaS0Mt0oGE@)rM@Rmb$<vPy4jePWtR;k~oy*g$(6zw?7`P#y3*wNQ`=<x6z
zZt)XYCD!^wV$my>tUkZSf-Qdj;m}Ujgw%5^gMn`wmyM|0IQZf5!7s^2Yo}N{1=fx5
z*vzr2+s4ih-^-3)qom^Lme6zO_vR_cCm(6y>)Zy$g)Kt<mpA@@|AB$wf0yLf*7)De
zK$hXZZ-(YGm#G+qIS$JdVcJDw>baPhm^QlZuI|jq$r*bF_L0n3&eG`X?~f=%E7Rvu
z53r87d+HVJr*hBDHi`ei4!eBgPpHqz+tb1!3I~FmB6`B^!!6Ct(UPGsFRiXBMiqnW
zX}*z~1aeB>$B+N{S>qP1BD2L`>q(yjrX%1tkeeyvPB6Vh-vk*XNXGXv=t;*MpDlKo
zQHaT%x$g3*Gd{nAD`Nimik7=ckJAMHdbX)heImVod%q9syl?B5ngIJLo&7<@Tx$@U
z@b!tpXx6zEGZR~2!`%iqOwN}s*vvsJqTOC5Eb<5lGZ5Pp5s?%$CYgyiKY`676UKjH
zskL3fU?3(cIx}>axhLS*{k0=pp|gko?p$#*bg;|4E%MRaE&U#g!aZGG3whG_^xxv2
z&cLCH-grqeQ=n@<2qzv~WO?GR#bovVKla``kjwskAEs2=A-YvkNp33*BO_WAGP6gb
z%&bUMRz+o{>@u^n_l`mX8QEKuM93(6{EnCUJfGk1d7eL>zn;Io{<v@Vjq80~uj@6=
z^Ei*=IQ7%XP277ogvTVLGonQSD(nRBUwzvTwY3DUA<tc|&O&MQm7!>1ZlR?|W2X5I
z>oEiIliL1WDKZUS>v((g<TI<+iLX3g<7V2l_;t`1-h%z318VbbUh3-V(1LcMAuqB1
zgIr-R8ynlI${;Z($C=HyiJ=wLk7{Z`dF%^owUH-XOU_oII(bD!L&)jZHEZ()+wt;n
zmWZVfBgJ|@zHGH9Zi;>Ccbj~ebNfL`4<R#<JYYUq56n8OH7GoM85~dof0GoIO6eoA
zUo=X|2j)-wM%_l%!8RHdd(t<I+WB3a<#3+5YL^<X<7ui!Ihotjm14b*Vpq@qnG=nB
z@UpbYs6atB2>|K6CM=_F!mD*FlMt_%nAj?g)adB1kl__UU`g8Z*<AtW_w*Nx?|zD%
zUXiKA&wi)w+W6jaH|1}g2Ff4(;g(l@`3MI9UyW;Vb<z?+XhJZ##Oyy<zy}s$<YFNR
zLIA-@=~dMBtqQ1yGX;cwuZb9|+sD_}8aU-1u!CqQHeWIx4AJ}<X8q#?O<h`+=v-a%
zxh+RnkU=7vsP=Uh52fq&1=iUHmJhwfVBL!{6pV=d>ba9mw=noMATh$@_pK(;o*+f#
zB`+u9E(dpz@Rwna9Yy1^RJ>=a*P6AC)>~(4WdBLY;!oi%YZ}ysIS^0}7aI@2Bo>7_
z4s0ZQDy3{(aRkH(NO-(*iQJaVDioYpD0YVQF&~s=zAZcMEhc`l%)cW_^I>r6NA)+%
z^5l*w_}GN+30(oD2cA0OdQ(lPxTEZ&+@>lo16=etmgS0>Dsdhr`i|bfBda2G)n}H@
zl`z?54Racem8Q;G%rh}M_WxOLChi;58tKKw#j)HQu!gp2l6ntvV@C*eB~Jb>M4~{N
z)AjZBwGQF6!E;~t&}rwjk<nLcn5Jv<XKSd9F0_Z(SXI5U^;)^Zct?)Q3aTL>#*7aq
zg6~b7Co)na-nr=HLW`XRTaTPMA|eFAA8)6$)b@Q%et!zJ(NzO&#}T+=c>KKzMv#u!
zUSREs<%9$VPNO3*l9mD*`TNAceJn9BICz)lE2v_Kx}MtkcFN5A@Yv<Wh4W3CMlMp)
zap5+)<6G(eJZ8c(cIuZ7DE|z>hv<vNTL4FQ@Y3C!+sANOqDe{bA08eiZk4cmprQDE
z(fCbg&z9o}c73%pb!z=n-<t=Qg7JR;B;WD;c*ZJHAtNmm!W?Yi7FSh#Pa_LSKG}@Y
z`+a<TfN)xZVT6k*Tp#~c63#QfVQ0Qr<>$~_3e>}Yf}#X3jD7|T9fwiG_TsicBMeeI
zS5Z-+Y7Dc~X~jm2S`eM4Her)gQ8cm~<5_AcVhi)2h>Y)Fx|1Wg=(3UsI1jy8#gIJ+
zSi{{=XR)8hDIc%xs?Mq8jU^9=2pD*ZULu%V;~<Ufrx@}tP5*LLhw{2Lv;BU1uCprx
zuC$dtEuIe(VR3$X8F@|Q+x5(#AxMD6!xCXW0|FFbb+t|;B&N&(3;z1`>sg9Mx`r($
zUW|RI-S4~{n0u+`vF#@BKW}d>#^)OF#}u_G<uu5bJ`~>*VqK8hvPa~2jtEX4>^N9O
zVQOPTyE0Op54bWrW{f3I{~eUO7?j5VaY#LnIEq!}=jY?*ucNxNKjP3cn8W}Pb@%Wn
zvx1`m;Y9(+m7r+6b#YoK%dT{q=CzO2a((6`%ktwtH)DdE5hi9(xEV_n$jQybWBVi8
z1k+i7n1xW5Vpxi1d0y?G-*Eor%nysQb7xnQq?5`QDLpjOAiBU&kRK7TmkU+3IZ!UD
zYHPin3k>mkP{kwm-fHHsLUCD7mywZyYk{5M*wybW?i+WO;^o&H+Pe9Mquy3lf1mI%
zp70(}aLxb+da_cmK59sVI8<%^(F}u`1Lo&0O8JM?4puJ1oDsV{4lW-3IjivJ*ix3l
zyS|K?U%D%%ELrZ6=0U(PVfa;tLMoX}C?P+(oIb<lqEO1iLt%5Vx7C{^;i7C{zp$9K
zQ=s=H?cUJ9cI|O*>Y*2qfibV7R`M|yPMzmgLk$_Dx|4x)DVPhYCGE)rF0M0j#Xf73
zjv_ybwEGjpNR1k_mw$_ILo2d*k4WA<^qD<I<R_0)$s)BmmOTorY&XPoieHF7*`@3o
z4?%uh2UeL*K{Bl7)XmaM7W#Qm68X3AOnsp~mL018s!Bb?m;}e|`;*!jX;R0db}o1s
z|2?qUmOE6KC&4Uq^c6d2iOrB1YmA3us0MHEd?Zh?#@IVyo8C_<l~%PPPa0lbv$q*7
zldCD{E1<6bplLXgGq8N3Sfk)_uf_bHJxw`DD%`3wwU0g&!H^bT%4`Dnp8p2V>3v4(
zJ*XXo5*~JgW<sXN%R)eTLy)pF!5|cIN95dP5U<@53Fna`%=tIYJXDhx$D77zTi#G5
zfkp;TgCx^CST%&PcjKG`IaKA6ccW$9SN6D&dQ9u`chR<_HZpW&mCB5=7wctMU&@g#
zNg(htQp!(r*)K;4`P4REt!|1M&WgEdtvcF$<MOgtfcuW>JGzZYRVm!sX@?V7d=wQc
z?bTTg-?IAT1e@nMp7qykPn7rmno`e_doDNrF*|pV=1iN@<lL{n>tKKE-so7?fTD!B
z^=kA=^75AO=Y)gFW8HlTTM4T>uN~7TURSd6um@pRM<!U}<-*dq#MCu;?cQ<KCN38W
zo927DKRUAX@&&nXwmIex?5Q;A7D-rbRghBGAEipSTs7FtXB-~AJy-l<tc23b=5x#$
z<%wf8A0C;ceQpx?&-AC_GHFK<W}BuOf`U8K<}*D7d%$hLVaC9%vAyXQsXbz~>s1kg
zE__X+9`xh&$hGac6a@eoikvlT)}UTLNf<hOT<{8TlS?B+jB^x?k{f#xEY_=e=-Zn1
z%=QXL3hhOY)98R<hKgsp#|{;6a4hL)sR}tQc}^bkj#pIAmoDBQxTKfNu<??^u~lR?
zL<|Mpd$LnmOKSn7w6_67kraRGJK=hYI+UJPQ20bBiE#XkW+LW&@Ct8P94KtoxaNTH
znKVd{m90TNDlE7oLX;UiMNzA(?He{=3mk?MY?ON&!aTi=q%x-Y(*(tQ(%qMoU-`It
zH!pz5;NpsUibzpYupeXO+K8L<PGade)*=gDrlno&Uij|a`MeVhzsSyz=n=uLLjJC+
zpK)Y*4Hd14(g|Lubb4-)d229IeB-4%oaIh5jc0nl?6)`in$lS()xGj?jSM|(u@W-i
zBNmgEvgbCJuGIDP(2a>02P{FuzX^M^aX4{8e>tFzz7VL;1s2FD*gT%pH#D3c>99@C
zZq_iFY64Oor7y3cQNU#w1P;2cu5QehTi}9KwavjW>@0l)cs}o!dk7;9CTAcU2^fcu
zS@HaiNwU>be{cjuG&hR)D;vb-_a`KN6J6@`tG3;|ym-{;eZ>z8!I2NX(y_JY+vBR;
znsja-6BbTXt}<%#_xtEH=#NKDw3}*Tw&n_u6rR86dr-alxrD!uzkgGPxKdMT*#}FZ
z51k>yHKCO~{ocn6RlkIXS6MB2@)$G~MVUxyFV&H^Oc8IZ^g2?4^_v+Nk`0A3S*05|
zJF)1A4=pL+TiAoEi8JPkx(x9j>hp9VNIu9nq#Rs~q0`Mq7z!Hy*}h*+uCA`6RtZlM
z(&!%Qj|WgJ6}WWWL`ecw+d^><v4<X|aw1Uq(lUPpn_w!iWPvrERm2mT!&^j_5`bWV
zRPMHJ>}@T74<-N`v9^({H7CvhcsC>gL1h(bUIM5pM9lft;|?gH6NF`qY8q){c<<gl
z%Lj0FJSO6SL=2m!knsTNl&MuQGeo&=_hB%?2(ge9c0tKETEEo-CdG+K8B*eozX;_q
zZ)b|GUUJ6xm-i$^(7xiu7b#`ZT{Meri#DtZMU>#yJvIDr#Ez#VEfVc#5hM<xvQKqV
zTk)vbZ6&$wj)%>MKA#C-{(aW($yjKE{_M=e28)t^^!4AWI*BcLmTnc36e%M+bXWcv
z`|QtQ4+lD}Y~8Qy@L$NN*wPj%lyhRh&tTV-_r%1K5f`^M@2$!ZVdkLeua9OJ+ZPtg
z847<s@%Ig3X&PM8l)~{}8X`Q(Gc&!Y`vPZu&0sfQaarfNurP-a?m@>JqZ}vNwJi;N
zo0ca^h7(;~*K8HxpMM}+dWHHL(ioFF-y~(4XR4M{&PYo38tT*(47W#)(?#-XFgu*j
zJhkiF%^!2;y5(lnkzh}L<FQ*zR&VLldLwWW5t_MeTiT4tar?@E!hw_=sX~t$^Lp!;
zRu=Y9F{j>jU%qwTFl;;L^Q(TLU{O>?V7TX-r*B5b*X8s}N?D(O=f;IEdCzR=-SCy9
zI!!7SgN?mTEhX{sSHBJCdyCN>GPbL9WBd8*vspf;ZLRyr)BwAcs@*_LYoEosJr@^7
zrln1jKF<1Pi7rGKICUM4n|E)UO<uNB6c_i1UA%<DFn{Zb{ISrj0al-5clF=+F;}v>
zEb*|@sXUcqJcY3{!3ocr3Je;fwr(bCz_~zf6$2l~k$%=A;Zb)hDk=n#q0sq0i+o#Q
zh*rdUY9O3x>CI#Em0-%1t0HUcSWmaK`^Ox@L2rn|$1M8x`R=#_h6lEhB9hyH_~e}p
zfyWO7v@)I6I4mXCtC8TXezgbNVOQo*yBVTu%<I7RL4@~MT&&%S^73QNdL$7CEoiqt
z>3Ih3b2}~(+WJq;ShpVH@*ymheC)-n=8MQqXqjulwsS-<cOb0ynPC|5c8c6Uy+bUZ
zhrt&8)I-3waI^S8TqEvNB?XZniJkHXk(FLvuja<++Z#hRABM$C;a2QY1|K=*rXC)A
zrQ(%)mCqs|t>`RG?C{ix&z9QJ#wG8Uo0fHCA5INEHp_UYBh=+^#xJPB*WbUv#x<u*
z_F7Jb^I+Tp4?Vk~Yd@{rOk8JY(py2v{HkRh%j(h2>u$`UPXq#fMP+K_4lR5hQD|^s
z?&3{t(p{I;daIDVW4KMvI~0vdP4tdl^a~Abu}zlU+C4SD-tdt9{9^PvpN8aX?>kZ|
z)Ez5kZe3?e`X+43w8WV={j{y6b2qn4UXYu&7-y~|nUhYx-@17p5P6D85#JWE*)ZhJ
z;KB|Gp7GUz_K$H=A6ou;Wl77T{y^^gaQ60Dw%wnG>J|g-9(znzj5fabedJ;GQpeq6
zJo&e~GkF$gcL)CPn^1lvU@(v?WtuuXyS#9!SFiiFjol~TEg#i&XUBBx`ozN>W;=Rh
zIW&8@a_8Nd%x6_6?)EAheG*CSX%A(7mH9o<!cll8FW$#h<C^s1+}}<23t~(!lTGw#
zdI3O>q5}pSE_z#rz#vnSn;5m25<}}&v}yCnNTsFUzI``R7Gm6B3Ta{v;kWf|;VCS7
zSo<F=;FX`qH(oF(%9~L5g#+ck3C=)iM2^gJe1d}LI>Hx!>tTWkpbJIxaN+@C=YpM9
zzGe%NdkB@mHv1DCY~oiDK}B=`Hd7JD&?|euBCUVh|L;-xscI2GPzZ@W2Jx=hcallz
zr+b^<AvLR`ebKznIqG|3IisT8rIu6MzTKZlwC*mGwY^kwcB*N)3WGY5A4m4HMma&@
z!ZN-cY%(z|H+=6_op8{xnriaV*xVL3BDS<gSw;5dJSWfj#q${%?b=qd9w%;c418bs
zvQ^H6-EO9$_4L5GpQbjgl>M)gZrw8DIiC5prbB|UVrF5vFo@G{I`F)2_8p$-nJ&rH
z)0rjajk7QB1X_I_O5~nye5C-Fd54HqE0v3r^uYbRq_{#Z@{7OR_w4v}Jw<7dF%?H=
zajF~~$w4pSvmP7eLvivbtRWdm)Vbx<<8Kh*_~#8GBnGUbqF05G?MYq%NFRJJUvK*a
zCW$uxL-tP~JOr6vG&UY22SqS%nmt>HB{?ZW&9BwFZUDzEJYJ9RY|5L6#v80{;o-D1
zdROc=5VJ17r|u=4zg6qEyU<YBTsXmL;OpOXwTZRTFaS<~%J+wJ%qrX3O_tv@`OVOO
zO?jRpYUFXkR#s|M{q&_vKUlWRS@UrwF6x(6c8EE)cil89__S6b#w9LX^OC|>{<z(m
zHO*fyMD_LEl3S!Xk|SjFv$KhVSMo;3#+szhVQxpooLqSfWT#VR*_iz8E*DDIysW#c
z9q`j`KKuVRaPB*5Dr##j6y=I{hTR1R1^#y;>6kc&%-a0~mIN@n;MJCe?lwSBESvl8
zzD67LcqEJ0!!aEfz+<$7tO63CfEzPNBN;VYA&~UpcRkZr)jP*ltq^p4URQ{fl~v!V
z4|J(f*b0Dly%2QeG5hiuQISE;D`P4MA`Ov=j9mtL*alahav8~%<Rnad(kY9u=J7%a
z{WE^mLD>*uGFTpfJyUR@qr_<$-1dVxVrb{9AVJ8M(E*5UPnf8c`g<?eNWESae}72f
zNHEeO;qD_MiTWPp?|ga^lkKh=8{<G@D4y+(bo2EQ;H$pIZ&Wt6tggCgdC}#Vfp*yL
zhaU?j=IZt=1v^Y?EA;yxQak)JKaj!m7K_V8cK#g<HBRIGrE(=)h1r8^f4mLs2yr}}
zr{|`*qj>pK<EyRn`cWf>VNT*RG;YD|Vb>M??nXx5k`od5k+5q=@#LxcfU%?5B9~Jq
zybmFhS?KbPnH=D;|5;|4UA7N9*wd`qg{N0ynXXTGX7Xt8-l`CKuC8uYyVRq)#ZheP
zm*vYHMN`eR!rOV=Us3gzl*$!9IuZS`hB<5Y&cs_!28Npa-=jTp$E~}+)JjM*oH5J(
zIqI~>?ps~-YUzRP9}y1pY!NaTy)SowDX7J^I>cN%N=R<aO3BTc!*AEA&F%wcyp6N#
zJUl#zs2hNQ@Jp=*2)3YbCQ?J<Ki4_|aui7q-MC5mhhuAxCP`=^i?V?aV0kXy3Tf-Y
z1pfj!-2k#HS;?u55%dX<{3^-6Lil_K!ZI<@z)f+?;w40LM47ajq+JccP%Oq>M2WjL
zM`DuV&HZol2v6+#Z(uY+Fpkix>Ww4sytl{BA!+PGEsp3L7T%bRGa%)Y#uQ47$V*HW
zrR_fU_Jo9l;8t+JTX^S+f$|AfcU4V_k%0*oHbgI_$E0qjmnLSyMowb0ETH4E;C-mu
z$+I=}>+x6TcI;1;`zaRioVUWb=TPC9!VG_xZ=w@QN=(4vMkjOoEQ&pnvkMoBzIB*C
z&3jcblz3>Sw!<U#!s3?_{{l89?U`OS@h@y=pDlh}voY2*9f#Mfu3)MY2tGQ#S!I5q
zQ#`XH-rN2ybSUgUC%UKqTe(1g(wJdyMZldAAG^kdz)R1rH;bqD->NOj8+)}i@Xk{2
z%<qqg2y+K2-}X2%D{CoyN-f-~&O7KGJm0x)&$aw%bF-SA&+}e2E!}xAb>rNQ&gIr&
zr>>w@AE(Y<N&oZ>qqi-mY?gylZZCar32<8KMLN-^IXRc&-<9rAku~U~H8f85Jf(rH
z-Smq~l=P0`*-QQ*VqCeqi^|F5l5I2YX^nNYDAqh`;h4B@{Th|Y39G_XHIeZFu`Qif
z+>DFMs^)&w%m;pa&J<wiu+&ppTWo6EMysQ0bf>wl$6IFCo)#L8KP7LaeE{YZ)SLJ#
zq`7Y+EpOII!bSrJf^MXeJ{v^W^nYc;v8F58ruv5Hn;Na^C8ZmW9S1&6bi=I^2$bG2
zkW{363RJ9@Uze*mJa_VOTyG$@Z%?mAsny6tlJpE%lr<0<TQnK&Pe+37mPz;Ez5R!M
z4-bsiK{i7U)^z<+m#nf7SQuODXQtjm#CH6;4J<`XQFJmDRN263j+7Ruieo<8{FT_!
z-^)67hmoD<0~Yn262v;;4125W{q^gD#pS#M`ixsC&a>c^9=w)3{@&@8N;OVR(<x;j
zulMHncqP2K*V652sI%tS1ML8%q<;yfar@()Iai=~^2cv#4Gs%pCs~}h#x>9J?=#V;
z?>|`k!jocUu59eB=RP8S*?7>?`jC2`$i-L&$Gr00l`;a~cPPK>jJxzmUuV(c_op~%
z$N3Z29}Z8MH85$4^v)wbh>-kwNjeGJR`Jr5%N2&|xfU7e;V1r0_Ej=b8>(g&+L$`n
zs&m!GK3sHDjxgx4Jg20TRbH!c&C73Hjl;}K+}KA<MahJN{<$+JNq|kUlc1^!<CPMG
zW7#ObolB)=3$R?k1<BCp6My8KBkb#q;b*~_ly+KA8W0n)e1og_-fr4jYvO3WBBDGG
zdLJ}swR2M=no3H3e$M`W3I4K*t5mS(H-kx99?;p@iL6ft(UQLRBGxypYFX5VT2^2&
zCc3?Dq@k|9ToX=>O_fp(C?X>I($|Aa$AbFoWf1J#S~%>0U!1uzJ8<FlYf1D1^Ygpf
zeECAC5MNH6JZCFq<26C1_8mJudJVnsd08TJ;(KfSZLWpOZX96>3JQZov(g_O)y#bL
zb~qNF6?Lcxxfim~>?E2tEhg1j@V(__#Vv6UzLAm|+8^rb+TBdgiW+?6UQ{F`p7lR6
z@Oa)w<6FtZ?J9@mkQkw`%__|cfjXQWK^-=3@!4aUJib2N-@I@C_P(vK{+6ALind@v
znrCfKmXno<#vARehmcnB-nyS0b+mHNakjzNZ(llc(^g(%txi)HaNX+l2Oa0wPwBC<
z>1D&R!Rlu~Y5`T~(Z@U(0`#>DI!Hm`=p?4!i2V+v5QmmwQOUOR<4F-{z)l4D2qVwg
zH^6HiLq8AuxPt~ee*+Q;$x8Dxe9Zh0_sE-a))P;SjN7E&z#;l#j_r>C$-C|ulUs=*
z*i9@FN+P$weo_KM9mLxD*n%lx_!BgGt@=_zUY=b|$g=<FcO=wQCz&SCJq=@aavus_
zlln?<(N9-$JugD)tgn*I$ak;B?!RWN+w1c~TJ$|DC%3rqp_AQ0*VqKOxvy~Lp3|po
zmX`kF3hSzp`Ri`KlafMGI1i{)xN}OiTc;1_%u0uFH{Fey+;JfGU*&`?>hA_>e`J31
z5%v%G7(%anvJI!+0jK%M?+;m><})%;=-^835Pa%nZ?rOv<;4$NR*0gV<cB5s^HZmy
zZeImlOF%k|S5&2kVL^HHN2O~SU&lyV_oWKx;W@ok#F^a=NJa^4R^14Iv83?!K$xJ0
z*3X1t(ea8wA3vR4Trv69iB{1=FeH#P$%lfWs!dGfGx2L`kl{SCRrUhhGYIg4C{@&i
zypruYDwG=|wj?yXHI<T*Vvu_s*j03^@rGM`?96~p0?&K`<p=Ywgp7w*T|KniUR}Hz
z<$sX%q3bIsS2+%`b8&G=rPoG^ODCxeX)-<w6PwjjnekG6vD$ZHWGT-`=7-&?fDM0$
zDaz-O87G`Nc=`8em#}ER7D_SzB++p`zg~)yTiPKt+C<JRpXWO1ORl92(ELjkX&VKx
zV4Tdn&WZa31R~zU2S!U!iji1B!^)dxv>x`01m#7u(e7zNCmcHeYozsg!UrU#1&#MK
z^-1@sezwbtIQBhx&|}R!8%<r%oe1(YCO#v#h6f2aa@Ua~*P7YUq}jjap(_ri0H?uE
z<<a3P^P{2z0fkZnHJk%u!v+->KkF-Z6y3Fv`D81`^;A|_F#|_qmDttpM+yr1SF_Fi
zm1@~-W4^X0zU^7urmQx2Z;hMeWkKx#x$!faT;o~pZ1y{pmuG!>3~t^$E{6m8Q@!7b
zF>j%((y=f5Z|F??e2yB|(WaK6o%DZrSP4%6>ndSSYTOH_%g;cwyc3iZYZ?HZZrrdz
zBYSSLY8r3~5%>0qLPhV+V`yl|3}0y26qyzEqbA6Na)Es|PB(%|DIJld+xuX00kE!Q
zg*CuL*;}S<w^pNf@7MTP5e$?<Kao!Wgt~>z@uK-=9vOe65~urklBl?xh2k%5&t!i#
z*KtpEslhbS<?KLb=gsArdDP)_Y7~F~xrgmy)LCS?b|5!>f&Stz<q6Z866QO%m0~nT
zUunK6`6*{=Jk{bA(0T>9W`dvp#}I$tCwrTK$@|`%`LafPf}U$(xGH|GR%c2tr&Yf&
z-&@4LwI1o0b$hNy>XKu9n=7-E3d-gacZDs4e^#&-chs3)US{3%HAzq*H10oHS>@x1
zwGh^^!!(dKEujn*fM<CcKtoWJJeX4i3vbEnP+GdQdkFWquM@GUtX3EBlgJIyQm;3d
zLj+acgldsJwr+NBnaTztR{HRi#diwgoIA1@sg39>h;AmtxsMpE$8-4k`5n;C0y;Sy
zP>EcF)^?++Fnhk2QH74$#cit^PyLPws`lKt#7NI`<b+mcGJiF&hsJJJTch+JQwpam
z61TMI&@}md&5+<r8Jk=_lpYq^HTV6D&y=z4r?$}WqTGg80ycTQ?l*UYcOlzV(9aUJ
z>nX1aZi%xUt&}cz^oXr}#6gbgN_G9*3X7cCgKperOOB`O_iYsWXGe^$uP^T@-FE}a
zESs-YT*yGBUNY%@vsHMPwdzoqe~-{oPh`(>yq@yR;10=k-<WMC!~dE24;EnAXJS50
zZ>_2=n6Cfnt4`#9!}Vwaa;00=AeEwh`VKLA3o;@s(07`I<boj^2G%MlD2Rc*X<uI!
zgs|K^qk@)2j+hXmq*Jhd<|cHf@ukhkhr#PUP$Oc87K32hERI+>p%6%Hvxy1UjraT(
z-3vHY3ZcRI!cFpEWMGVUvXI-s*#Cy2Oj7hq+GA7X7?JV(Cq=j3#^V|E9Ey>xzH*}Z
zsN9`BFatFAOBG_j##6Vhr7||Hi&<kmAj%ine`)>2eTMqkg{G}pXO=HKXMZLvP$;t$
z-VrRI)7xbD?Zo71V}<J;OgS~9jr$Vzu&!An$vyji(d^S#cHrX-j%vbpuMLLWi{yE~
ztWZC=oGq$%zG7Gq72rN^|KVZ&xIG>Aajf?ON^6%24=1=JH7Ap(mvP5Z=68?O=RebA
zf?u3t8%YDQ7+Dzv&PK3V!P(8pQ>xm>zl2DCEBOWgmyV?`zlw^lv6^$wnrY;Ha7wAs
zu@bEuo67s_DVW<6j0T8#+X2Lnb#pF!oh-6xer!=`-eaC0_j7siYvzu{InBiTQ|1mI
zmZTTHmzIi)$w)a|9*_+kE$N^BQv2^SLC%G|$GMl7xL<zmJ{KvJTKxBDYTStGZWLkb
z6fZ6p8xt!PiD&`z35*V4d3-$5dY}d+##X4cHwNt9OGK1SXx$RM*x;W}1bixLx~}o1
zR@T;XVkd581Y@gC0lp4`la*kbDt2h=3w=Wn-V^s*Vy=QL{*rNwzfbJs56p|!?aHn=
z=*>~EWS=$#F-h@F8j(7|6M<$qH7n~Ecr@PJJh^H(*?kMGraSj^p?=uxFL2h?)s6es
zkEGC`D@yzw>`1r+=C_*Lj1@NpI?(%F2o6*F{;yWO>~v54_~YLE#9xn0Dn5EFXP4i;
zc{8{{?)yY{eE)lq2K`~q-VCnv?0BQmDF3i~f?7>vamu!S%lbm<Lv%GoeFgDH85Vij
zZ)KDW58n*j{Nw0oHhs5a`fQHofsy5T_A**kkCItY<A>im%-Uw%?f~5^%LsS+7SnRT
ztQy%<h`p<Tj*&y-K7|HWDKl=npJg)>NmUQom|C$920HzIc8K{^`w@|}SV_KugCCiH
zn<(YFPTy2~d2A(U2yi9mfr?5qR@rvVu%r6!`_=m4PsKzGTiu8AakPy9>d^1-^>Oc8
zyLHcQWyRysD5@w(z<$UIF)AD1V`i}>q|Jx^y=d5nqFRkq5cR<;Z{NN}wM9*@3eCc?
z`_JB(U#XRF_x6e}lmKqAeCN3=Bes2+er-gGal!ang;(-QyaOrgeB0Z#Z=2iS`o^lt
z#(J8ST{~@W!k)K1au?dVO(#z&aI??-Y?%ym+?UVC!&9go9Dkva_u5QyzfM6VN8Zm*
z(Wd$CGmEVaQX9XiT&-QRe5=r?!kA%4(c&e$htaLslD_019$$FdW3OsCu$o>l?Z#Bd
zU|iS^9qyfCFFyCY+`_dhFTn4D*lcHfjr8-}l~TU5{sBsl=Q(g|Ef1uB!_kBJ;)Dz@
zprjV`a(hg+*v_m<jzshVOEtaICoO;K)~#E_C%Q6o&5K1i5^)cVq2s}4Qtc1;hCkWO
z8*d^Z(1Xbiei3U9(T4XAm%L@DcuNZa{pF+Oz?npim$RId@sid232f`t6nGIZNDmxR
zFg=R&%1+{Z#V<yEPWrdp|4hD%40m!%cn@raBUGTo^iIR(W-pW4j~kZ+r{BB}Ea(`%
zX7OzPb-k^$qU_tGSr&<E<V^7sz|!YzrteD)Z1>9rBslY_K~6|G|CQY*X1;nUsmeW{
z?5j>yIWCQP1_+5=wzHNMMjcfotxbSy@wHD+oLtxRSUDs8k0gzc>?`aGqbG<v8;~Yt
zqAT0`fFH)IRLsrI`-tmrr2Z3}7UmZ*zfiPXK$1I(Qk!Hja$XWNp*CiP@>aiyGjxgq
zFZD^13W8N-sBf5R{pug^i6yofh)$=!r<ZRR!H+x9ShxwUvhiA^_zeKg9@bZ`=l1yD
zI)pO96w%#x@9Gx`LlAnFo*$rdbij?tt?!6#k3ID}Y7p#)4m}Q-?LV}f(7c1^)h|WU
zeOmDeQa-CAD*3uDcL7|BDu}r1w*NxR<i+ht&uvDyCArOHPaG;1`8jSF7j9*)xL+EH
zRHjAVmARK?K2GiTTor^iRw-Ga4{62woU;YWpJvvVm=^yiwG}-t^lx0(@<TaEw^Qub
z_+sV&VlQ>ZsO@$+@Z6?<bHf(FV#`iL_6=J80fzvXy)4|yo;T1NKVhJKb7Z(T_n=sN
zn>9L^fAZ7~Jk<Z$)!5^T|ApYCs#xLL;@+v~3x#6ac{F}aeg*%DW8u5s`x=MgXF9fm
zmp}1T7+=WmQc3cetS$cb?dAQg+za0uw(rPHOT(V*$e4A-jxAc$viAPP;tjpJAMf<#
zvulnhEL7V{o1VY@P|4UK!&5)o^l9$Y&c8$!w!|#+8<Y+4yU`XCRn7~hvq%}RBh&8>
zFz79H^<^LpZII!bOh*zP1-L*TYiqZ9M`x^;M9G!lZU`oKGC&ATTztSaQ>w_iujC7>
z2Xw|2&VkhSGb%>ht0GdKUw^k|^4zPPe0x!5<R8p7Q8Ab8-SI`*F_@t#=%CC*vl_Q;
z%qZ&`YmegHB}SEv@#Y^;`mE4M6j0AUr_xX)Ub1-USChb7u_dMPtT2W<!;Lpvjor9?
z=go3viq!KHll<^htj7$w?S3py&{lEq6keGx%5MHJm|;J7&vj$Bed^UA3wn{mi8hHv
ze5$qTDGiZ2PMiyUi8okNkBU0^1-5+UIT4&xtfA5n+k2G3aY22JA-|`U_45V&Cb2E1
z-AP6Zxd<qC(yJbPlaj;NV=#GBb>UBw--w~}uOk_VwF5xLtERX9cF3h_B*qLR5V=wX
zP@n~@oSl^Ns?{i<Ga71dKef}CE)C2*ZT_U$n_y3oFD0gn+Y~nv3$Nkf<yX^$eE0I=
z4=HiVy%jL4By_@7E25+4vA}`WZ2tp7P%dW5=%*dl{bQ$S{*s8WU^h-ou8=WXCrFVG
zUDK)KeGj2RM>vENr1v}Y>LB%Sv9T??u<Uo{o$wasvX}o$Lt_W&^D&xS#i3A;-cQm-
zxN5jL3mJe)M>coUd`M6c-I`OK3~jM5<eqF+7hd%*OX|<()%?tVOg-eAa1+Atb-jW0
z{XRfiN{Se<QpaBb0<WT>u~SnNUgwxJU|2CPDD<w4@I<}kKg2cl@i#W{x-e%_!vhn_
zYU>cffqFQIP{;2g+J2IX=8$$8#A}4e-6`VP2;l7c(|+3<pXW*Af&6hy%sSxce4hTY
zwCB@t-Y(0<Edtt%e+FnX?k$*<Lx}BbPSH?8B8XG5kYv)xcYrXuhzP}|uiP!YiI_3L
zp~aITUd+8@)_kaY=rX0#&_b(reqze*zt=)F&8!`}6XH}l%`h|<BL+i?inNs391A<q
zneHwqm?+$9PSKxy<y+X!k-VjiXO$Y4{oW77D|C=}QLrra3B&>Y?iJK;7bb89F;iv_
zq0iVYEV(OHkU|#2{Dy^M=*0rvW21tK*VIP8o`Y^QbMn#3tcm9**GNn$7y^DA>hDjl
z`3iJ8(g}n*o|TZGh<~hRO-&6ExI=>siW9TGVQ$HAXQzL`xsxmb9S(1&mPN$u_x_y$
zyF$|%i{axn0atp@R5<#iqcE&X)tE;vhUnNk6@t<jLQtVP`N|*0CG&|qH6~3*SM7{R
z3gB+nv3<66Wq6#24ubyNi*Ou6xu{o#ErUR4h|soE@_k3Z-G;=7P&^Vz=Qkh_xU<^+
zl+IUOF#{6II%eCA&Y~u_Jh_0l?JsfZ83^O<_^X=$?9%&T^nwddk;tB^@e#4|LwylQ
zk%XxYq89>tfY0k<aG&4QdMKTy?!(t`E7Jxq{=dWKNVo+wjho@e-Gg!vnN4<8IK)NJ
znut1H7A&KAM#B&q9c=`hU>P=GlcRQCd-csVi<;xp_4WCa`y*b=U-|YXk;lB?O~IcX
zmGAT_2Ae7vyn|-fLo8mqGteKZ2YwtNwm))CU@)g7XBl}T7K5-q2km3u{Dz2A97~RU
zKi@AqAX%WPvm|WSrFLm6)uBCq=GjHevo2ym1VCdLIL>$gXisE6z!q#xrSuXNKs&J4
z&wng#$43!E?lx75&B~*dT|@!|Ubpzk)&9ATC5ULjuOzc3;=xO2aV8sNQ6VrC7;ggY
zYd1M|aq2ocI#O{3LsTD%kOd@z^Lm6pXoD2@90jkP2Sas{{Y=sOa4+WvF-=b#Cgenp
zR#yCJF&nRrnOI0zS)gzOR}&l$z&(@x7~tu+Fs|Qs4D?peVW)|qBjyBa&ck;gezUHM
z`1J2?Ve@92+#L>6`c#chGR>o1-^y7g=BEFWkqK$Pfmq6r5(&T>DbryX`k>xv1$dnF
zz*xm`aDl%Iy92hUF?gxcbr9Z|G!)G-{wnSiM)nLvQ{RSnEop<nK_f55r|yuAJ;$P8
z-1!ee+0H`gQDBb5ftVOz3<aPDE}vRhSRh7@sO@zCGyEt`J?PRCLAVf5gE|qTHvVKV
znu!Yn;aXDG1%V*N{Cj9P_@@@{bw#R1W>CbwF*~SDj^sQdtW@%4;*UA}5ZOylUMu$D
zO7kxG6p(Tf>61VlxjS-y0<od;Y9)^X)?Eo68-5?8J#*#gHph#E=|Nb}!otF<oZm7O
zO@z;0=~f&2Rv42xa2BEm|DJ-jcdMUUyfXejMGta>3}-(xhH){&;okrAS$H^eRe5Dq
zl}E%2PC#>Nrg&vU+hJHcCVd_4pP4YaFjVuThya^*1HigBKP<TIMw0v7#Lk`UdV+n!
zAlSSSOA2QIXQeTPMErlSfd5PgX>7L3+qZ9r0^0!XW)V9t0J~+mYz&vr5@I}%{+5C8
z4yY*TFA7;Wj?4Kn$SeUpV1MfySH8^69kh$+Rg|kj4pj}@R2N;ckPW1_DzvFK`6RNk
ze@3JbIn5M?#1mYszj5gPy{9mYbJIV?z?A~5Tm(RihN8}ByTg&C+|}MvCd0p8Cldr}
z<$X9OV3%5}hgT0q+%p_nB&3-a$T@7AvSBk{bVS5w>{M>4Q+O}rkl@?T!^5LB0@~F>
zr;aS+Oq?GnfJ@;a<VoQyA^8VaqG*inq~7U*MU|AHc9xqF)Jm|v7<Is>zSe@pv@+-L
z=@F-@{!l~7oqTvi^+!>N@0~YEzFv92l^+1tBmX8}|MP>DVfgSrL-Ie9VPz)ZAO9aG
zLq7?!8<`unh`k&ulZ%v^8*z@R?Ad4Wsu;4_KL;&^KcGs;k{o=Te(h7>i;rzsS%fF=
zvk_Z~2+@ikJv{h*1^*3fo8tbcZJaB8ogu50uT{F0&C#E_a!-4&tb`UP*Mz{3iPTb*
z=t<WeRQsUX-+S>tcaZSpf0t}Hd&WDjQECJ$0Mfyo+?keW`b|yYtS|4%m*`irav#q6
z`zSZY$HQZK6#h1D0qVykk1JDAygvHj&wYJ5x{+;t+}~~O0(KA%-8PTQ>`rSa<dqYm
zt^6ncxPzp59=J^DpEfL>My?yrQFVz*dX{tL&ed+xra4!t2kcj?)S;wMO4d)(iCLgu
z`4N}!dbN}NT+%dL<S7%HGq%4`Tv~}GC=y(#xFYJ0a^54qd(!4Zp8J13N}iQ`RDe27
z5-jC4@FC6|f$D#*fQv>XT=fqKkf8AY1$ISBW{uFs9fy)WFU`)*lKz7;0;}*F^pBYY
zMjrV_Rerad=cD~o=!lTQP+ir7^@}jXC!EDjt?E<wV7`~8|Go4EsGYAG!OjG+`TFHU
zHgYR>tr_FKG9KiKl+Ul>+It2cM$h&4#uM%S`}Zc~?^E{w9V5oSzeD~`iJKms*OjBG
z1IT#tMg9F9{KT09b%nGGl{|m0C!=BV-|JQ4dR)E}e_x01-``oe-a1@Q-#_K=^-@Fr
z3_gBz(ng+gqngU#pL>>{L_Bm29LUO?hZ2bI$d^15##i|>48Y7_xTz<tw%H4TC|^qd
z9%1FQKOyPLE9H0+9$tc^?O=|JG8qUHabLdM;tKUzlQI822u=24cI^aR6!w_^*Rixy
z2(P`#2vNTA;PM7;7uU3%loayUGHBf|`yaZ5nUAjoaTO8WRhJp7!%h?;#?b8rag=X)
zFU83b4uo~>G;9xD36G?uL}vw5qEPbgq>gZhvK4;8pVD11%QgJ*!|vM-S2q5+X?ZiH
z*Q*lh(JH011X>k@m+@w<SKf>NX97I`-;YQ6n}05gJ2@#~1-)6kg_J=J$1{G1Pgy<E
zj$4;yc|swDbgl%XAQE?Fet64>wU7<<vOzB2Qz3HyMC~g*jX6l#8x!|jAsZ7l;H6S(
zK`0JTQTPK|_UNZgLaawPkdWu>kI<9a!KF1bH4mo0HH5CDic5L2slvP^wk^Wzxmoe`
zhPyuu`L6Axq>t*^<jnD+XH!Bsp^|;lBMz!09;$v$ua`+p!69iH@GPmmzW$LC(X-(t
zt#lO;zG+HD(X^M7^BPi_9;B6|wFObbuBulXoA@yq=3xBh4zq--D-DHGVo{O7>iOJO
zhlhw#X(^4r3#^V<OKh6vsw4K}&q4{a7XTTlz2l;<gAByazn0SN%)3sy9pSn6P@a@&
z!)+~(dpp7Lo^2H^m%Z)q@UGE+=lT+<DNI!0BG4Xk)BaLPHp||-j>jlW!W@sCC%1|+
z`ZciK{=o%kf@4@HudN3l+z&woFIu(WFU!DZ5<@~o=x+BUQonnQXQmXaDAp+APspsB
zsudfIKM41*Q&DjkruLYgO|)>P8v-mnkG9Dy6!Dw&GBXZbUK|85nP^xQ%{8FFC2jkl
zNKQtvokYy=Xo7|Heu{WcQ1IcANvw;2lWf?C6iKC^O^8THF(q*WrZpqeHTi=z6Vnyu
zJ%<cuYkEsMQ#h|?8({?W{c3`BL<R#PoH;bt-{Qk~tg0vfcltw8siE=;!c!;sJ06SA
z1G=>U!%yZTdS{_m*39VyU6vrE*z1YQm)Q>3WT|7)?BlQUq)HNl3(^;qVu_WdZ@V|_
zije%>2IJ#29YsPJRI^Bjx*)RcLRm~Q7|BK=rWgyPyZ7G3=Gnc=53FGpJoq*?DG8(0
zoV6@;Yq7<+z&xC5^&JYOr}g*lLAj@K{AOoqI`a;%@NF?e9LB{B{3A7DEJ(^Co_?}e
zdosDsVlBJZE&+3Z86kqlW`z$BscFyBRIZFb7w;-(lfC?j)a%tgks3I1-bGN$-MmQ3
zvu1}@9nc4Aii94LVq+qm0GZ9r3(WLBcu!fZ)!*rV7_C3o8^(m(Oq=Bo9tgjo1dSWs
znyiQ8bKW0w9XmW7lZRuAmKKFJl_<4|@1$QeplB3YG}tBp<3yNU!tnTT`ZyYs3j;n=
z)i931hlRH$?e;oB`2(qs7^FvZnx%L8a8Jx2=}}Se{UDS|FfmK1&*>3&@?y+Fi8^Y(
zn(*b0H}C14CbbpsU?b@Wu{T{2GRt3dFP<@JE-~lY9T-B_8Qqe=^t0&F76vaDyioK-
zGZ@3>iIyh{Zrq&7S@pPjKBmiA3i-@(19rY4swAQeCe0E6F6VAyJo*(S;tHtsDI)k?
z<|ok5Wg0K{y(TJHM0>=to7bL|wS;+k+V$rlK{q=Ul_kk@*+O<bSPEy}bZxCJ9?gkn
zTu;<u4|gpy4hluQXuvDdj_UDzH;kv*lCG{-g%E%=Zv?SaoI-wAxq*Iv2-wjIQM~AK
zNm$h@dKDxkvv4_V@Sr-$y&?C7<sA+9ZWGnwHFkD(#v^*=(AidpUMS<AZ`b@LCMJ~5
zns{q+ON(~1UYr?L3M;98<$fC?LM5pWr__Nq*Sor6L3&5@*5i(tqI*0gILi%?Yg+ex
zysxTl(}dfaoR}bgizT_!cvUkpIa}1_Dty`AYm%h&Sj};kRn9_};igYC%uXOrwwgTB
zCa$=^7~bnN@+wV+-7%iZ&OMm(^@e)!my*;f%{!n7nJA-h9Bd(K^v0<hRMTA+TnjUk
zouk^pNzKRZJvd*&NMZBL@z~DbjPy3lNlVDv;c~F<Q8g{!J9cWIi>O^KpveAKlk^})
z_lkY1oD069n<ioF^(7K|CTVCB8p?F4OmU(ki(Pnh2R;2;%?yp4@6dVZzD6Eh@B%6?
zN8!)$z;*h#QLyEnUO3Y>(ji`#Mt0LnbrupV`}pzAw&1tC?=JrW5GmuS)C|LD2={R}
z?_I>A*P&Ur4%0D%kKiJ2KXw1uwHY(FHdTe2Hy`!}Ru->{kgXW`lw8Iacy_&SDq-ph
zca}!HAuIG%1P1%GDZbgu?_qp{J`IUu7G~jv=e+DW?O1}SeY^qzpN69G1Tgqc)J@5r
ztEqkcEj@AU2K9`3r#r;_vt}hMw3_W<P7)s4x!x2JqtE6)(`BX<E!BdLRO8+KtZ=B3
zhIjj1HAVcnU%{U~yOD3o4HQ_CoNWMSykqhI4DU1gmlX1buE9!us?Qx^?FLHq;d^VZ
zlA>e^KU1p?LM<DWs>SJ#&~=KnNJ|@Dx~@&N`4L%8G>Znjc6#{6E1VzF&OdzwXwuai
zTWQlaY}`oX-!ntVgatv^rluH5!v=JN*ovlJg6A#DiZr~`n2?#@GkNGV+e2<^QBl~a
z1vfmF)8a-Pfm8Nu-CpuGx<6S+tUidh(M=P~mqL{U2F8I{cO97GVuWttOw+X|mAoyv
znMlH+$9b05ZvQa3x(}#%%hl>j)wyjTQbM09{^xR{^%fFmSaCT~ldtLOU!-26e~FU)
zEkJlbVIPcpfDv5sig~{(orR&i6W(2#<?wr_l!0$qf`d5ahKd&Gygf6Phh^1g-sHun
z9lkdwhe`YUDJCsPI=)e0@vh#fx~ds?)OH=x5(rx)+ZMsEPiCz8Mm7zly8d+h$KS79
zHF$IT;X>;;az(Jmc)N`5i?w*TGZc#*`g=t`T=4+8qSBSe)jJhdHKT#`5j41HwYqev
zdj*3!c_O{yV6aQDswpIr6*{mcp!(ejsk5|}Sq=fahTIH-xvqC;0576xv?ep51T$gm
z5&34PwQ2Js+B8~^;KkpmPSq7aaU#Nu;CxC9nRS>>+`d7s)zTxSWj58anLNXDvmD7j
z6GfFHjpzPfF9n8c<_sag;(UGOV>da6lbI#HR%+u0DUd&lpQ9*0EXzc$WEJqk4{95G
zn@_dA(gU^L5u#*cd==Z{xmJR#jAo-NnG$}^zX7~$nIN37RnE6r$G`C*yr&+@^kK}T
zRVCX6{%=f$N#cPN5|Ev8h(%CwTc(6@vu7*5N&fWCz>AkM5j{sRQ8?WMQp<yPHlCA=
zYHTx`#7(GXbmT~C$y9PbxP6Yizvme3f5>QSM0r(PMM<z6Nl$@O2>DwfAEWaOtgM%_
zjp@jfbs4w~>w;<e^H(sXeCnV;)Lk0#jpS>S8Csnd@L41%<WmnU#U%R){SF1gt<jb?
z&FJ#~`OAFmtw}Vjm+7%J1^(G+RZ&Z&*9n8Tlj?VSX=!;j*tILSshM+Li#xPr@4dMT
z|Bw63_+z+0;@YG8N!t47YwwxAu`~J4qX+)y2NV?l{||{DDqc<Q?(Xj}BODiIV4Fa+
z`YYIBMEV@|ETS*K8Rh`c8uEWHsD2n$DgeA(@7BF|3Zy~)?TYEeR?!(0i#&68BY_Ik
zvXUf*6%<|{OO}48TGDx@-W;s&M?FOy4!0|_!TCYy%-+3}iL!)1`_7wr88Es7l!9~z
zFA&vs)Y~YPE(S1a2DU&N1R?HOuWm?M(aQE$^gC2_hrwoZ<AxAxec%z}TrdHc(Pfop
znK=0d!z4$1>SJ}a890D>HH5f>dhvb+O++KGGXBTWnr;{AzBVR&2U@|iRk8OhY$yUg
zp+Z7(zYU`yz@Q814?zOF6d*f+R+$G3bk=~=*^Q`J3>)P(aTKNKpB&-`1)~QU0kiT)
z)E3m_<>hl05jJjI+=YaZp6<buQItiHMEPl=Pi_~2(sTaP*bhm+MVVY1gk~=@wIy{o
z*+LJgzfu}Nlc#e{!^nMzqjqHuxkvxxS6A&V85x<W?j_w2`0yYOYkj;wBV67_CQpZ)
zP`zb0UfwYWV-$$|PmpRFgYJ0n!<3`kv@b7u$8DUTq+VGy%Am(`#`(Hi2|IlYG)f5B
z#$D)S)o@rxz2o-$*8;J%eg`@mFJfPmSQ(L>X>&F__pLtOS!jC}sKumXc4zb@_f)4~
z!m)aXARgs^)-0f9>utn6JQye%1zyzEapw7%Ieosnjwp_(BSaIwOdpL;Dp<&sC}<@P
z4uz;0M!B!Q-j3RkT8;zi_|?Gz-W2i6*zKP*zHj9^NTm(eWGN*{C|`z9b3lc;VPp*R
zBL!Z{3ZW!_LpqvjI!}Dsh1N%zOyTX2hVJ?u%QzjFKp9Zb|A$#i;@!G^l3zTlGgyX#
z$c!N2G(vT8SUDiAA;JiBl&V4kvHcYHdfjmZx!qvFL&;_d6CDMXDP$6Hrd#hSe37(U
zW0ZxiwgRY8z%%R1y^V*0pp$O=>=&(Avw0M5^HObLzmyM?4Q!`#o!}H|b!YvF`p_yP
zHNMJo>pQ%;{p;0is!<?p2E&l3BNC#C{R;H4Fb~gViB|^Ibp*{65VMP&^@0!ctNQHV
zzzq@O|DZC0(5LJ5?Z>c}ZaU(RSIpD34>Lfftr!^pN`apDICK;iN|N+E*Q7%A?dxXt
zZj*eSaFK)uP}Z?jDxEs@1|u+!)g>;U2+2kct|IsBD65Gd(Fh<-4KyQ@8dXVOBFV*6
zH9Id*zNxsJA+jOE3q2`F=PCkboV;(1AHuIav2PyDi>{+~Li0O({M48G&QwVSdZ^Q&
zO`}qlDQw8VKXOK?9v@ix#QIS>!mOxwYytw)gwb7TE!OKoN4iK;J4<{+#f`XVG(IA%
zFT~NO^rXS=#*K`Ff{A5DLBV_W#bjKcFu6yX&93C*>OS;KG;W68WKxmsB{AjBvOC&k
zHN`0AxbXc`6sfUMn<(3Hl5?J*MmxjN*_#;QV=Z(8<Uk<Xh<3Z+Y@Vgym4e%n175{W
z>o;+ARcTN(+oR^%*474s;CD1sN9k!lxr?3g5GD6xbtitvx`v`L>2Q8_wH_I7UIW^+
zAs6tTtqjg~qmwzT#tSg~{oj_xZ`1GC@$hL8!tprH54Z3!Qm-RTh<OO!hF9t#t-LX!
z>BGVW<l&0d6D>T1oS_TCn_X}O0sC~9S(XCT$ui;wq=l4aya`qzvd?*qK?We6Kr@9x
zT?+e5uYEl>YNHJt7w{#`4A2e2_Hy_1A?gBXc4%z;$KO;Q6{YqHVW<A#LRu9L4rwr1
ze>|dl-hvdZhZBviQ<mLbz3#y~(zHV4E8u_xCFA#aCMXr~4Ck7n;^PT$iR$#HjP-`p
z1M3Yv5_IwoBJ$UQ(X*1c-i~~OJ@$NqK9|vyxf{s<*|o{TVeW10RjoWjREpbl&-rh^
z^c_4j*B?4Bqe^!j*Xp$ljhahc+dZ`J>=v>8343~7gHZ0uSgu^%cnS%}`J#O(z#n=a
z9EVXso$@c3NJI;B+>jsya0RA|$}}3AHM5KqVn%0_?WB{N3)v{-bzJQBo?WBBM_{s<
zYeHY@Voah6)mqLri8i#dcqYjDhi{{ZKTTGk_|3vEkA)+L6y)W%^(Dp+DcQEj+fZFr
zj(qIBwI*Dw<W0E?PB=<=oKZpW7pk1H>?!zsZ(}`^&1n7r=~;^kC}$xIJ{*S#A$WD!
z>n0dslTtI8za4M&MzDH@o0B_`p66rhBU==JL*s&DF7rL0;RQDa!ITUTMsoVQow~Q)
z+*?B&L68>C5t9+?s?sy<`hnV{FN?p5275vp4%odRL)iM<#cC|WuyTJQw}zZqyU9R~
z`1BEW04n(m40_yP(zjz4k<OoEbWu`sU`QbBZbF4#F6i(+t#q|3k7P@~=;-?^m)<8G
z<uWrbvYm1SGlm@8ZBwX_la9gTrbTB-;l9$g3j32KsBhv;24KYzmk?42_R}o$_hh>r
zXW!w%xviVOcjCePbvu93C(mxpQ=HU<LQOQNj|M8k1YM~2-M)j#Q7Rq=rSZZp+TID!
zLlSy7`~>N)cN05v6S*YL#uNRqVE5!BAXeBZCo+Dva{M=GukE--QMCFpGBXjVC8K^N
z{7&BE$Vza_G4q95rzJX3OIjXPF0F1zE6WNK7kt69UQYy8idXFHi1tK{L>0u7f6S^}
zc2D<EZ}vv!gQODx#m>8ynkB#t>m3>&MqGnYfM;s#!r9GtdjPyVn;08Yy<Vwlme=Nb
zlC@YvhNd018QbPF#m)w?+x~-10`6ITV&<R~j=vrxy)nsYyJsTRX_3<<bi9e6f(Q}h
z+Sve~QLQD63x?@-So(4IHiz2<Zkm2S)~bS66TP~urdJA!rBHWYGi_ui1ewQwZ8poO
zI7nX-qf*gDM-l(?^mNTJFygRxxE?>SN89B?G7jv02U?BeLP@QD;><linokgs(cjBT
z+g4h-ZPJCAW^3)~pmB6$kl^cBW^frej+3d5=c!%JwsWqNE{{0RilYA?ydxqH&(Ypi
zSlJ|Zc!VD-cTaata9Up47b)FVt$d7)iXx#F!IvZK3Bkd!>K~?yd<?{pGhzRWWp1it
zx)i*dCRx`W+b4_t_uM}T)F+J7AIG`}Lm&RA;q-ge??&!6n_Z6|rn2faC0yv)+LZkX
zA{5Xu@QEG=sp0TDrh;Me;<ib@*9km)^q;A%Z1C+{tqR(opLgX<#Q3Rr^QGO%bSQ@V
zWSr>as2n^>Z5vw`?sJs#8d}k^Z+(W4?~z>!a`|npeqBOl>6WEniHUW_mu~)oPHEDN
z9xhvd_+2sX4PX#*E;al4Z3oTpf3N`TDV}k=-@10Z<MVL!?mGOg8D#KyEy5%e90-|&
z&y)WNxoz!dQl<WJ->Ay2VSpa8!XS&C_EuJ$M=wtvZLZFNQvH{gTa+J_L0WOo?;?%N
zB`(jS-B^LW-3%#X*x<tg0|T=(akih1yHr_VL^=uquF=j}WL};*S7{R7%OT#x)v5Cn
z#H8|_(bxC+x$(r^=>ST^kO;O1TEmcj69;pg3R*#*BjzvVQ((^3(cFUbOl*<pcu46s
z4%cJhpta~5I&7F;vP%j%P;`gxT!t^{bK0BD*|BGjQ&v{ov(Y;g3VbC^W&Im0hM`0*
z8BV>raL#3&J+`zx2%m^~O`Gm;-nK~p#qUOl(Ck*bd^o=FsC;T{s1sWPVO`Z%ZK!kJ
z4A{{}`jF)8tzDvGWR}mERLV74jcx~>hTY<j?hN;Mj<O7mhPY@2os;=Y)QK=>`qMA{
zwz3Z%+WoFxar7qE$-~3!<<k0wKelY0fA_YO+Y~It^yn$<rOZGS38%TfrdM4oQ|){4
zEf^2h+q@}P?j<WBuJm{vqI%lMD8EIDeL=HU>1v;8`r_+ko(5Tl|Eqs?yGE&V10su8
z4YI<lW*ffPr@KBMbn;-B?sh3otus`+c`+&15`LX8G`Y&{z~}#nJzF`4g;Vk$sZ9>6
z28*?~72ZhiKV1CJ1M5=bs@mrX6LhO6_&y^J-ExJuf7lZ6xVZ8@s$<LO<yq#<S;)@t
z(S@?Gu8Hp5r_wL$Lj^(0Nc~{U3~RH)qW+B@^eR2trZZ!`FMfVUxaxUSv7b^cIlg!N
zP2KMuYpYH_)NQ-y+QNEM={p6fCTsx~gZ?G_*T)XMo4H)?eOQ!Qxn{eI&FO+Ycky&3
zn=XGhoXzqir#Sn@<pr>Q((V2H+EgV=UkxC5*v#TOzT~liScI0wnN@mE<l%f0D&NpA
zmW>WT`$gI_azoDUn`wm>o#1ucgjD64l9<t^>Q-tqgOL9D(JpR<yl0CjCy)}4qJa+U
zdV!p6{K?qX-4xDWKt!atcH61%pExz0c{_h!G|+Lq6h|_%1V??}5WPy#Y(H5b#W!+$
z2`YY_ugL366<R%pnm5;+?R`#;1WZU<#b<5X;$ko8ZG?|$=&0$7)x7#Q=($IYy^bm;
zTl{YA-|+M9gcIu(;uh$|-yR>r`J@JYFnqRazxAg}Ud1Z{f7ITbFsq9N?FxLc3H!5l
zswgRKUz*_wcJTj>l|sVf$hS=_r#Gqa&vPhH`<IFKm+a=Vo~EK0%BXuqciZ%I%c%lK
z=L7p5Z*aJ-o5q&lS=XY(Kc8?f;c&r5CcS-+WCUjd4~TrGlRdug*9(8KV7Y%1Hmw#P
z^oj9tiQD$zbXg1>`6RqT5lb-Q+`U7cSZ@aTwYmR+%dRx;+df8rES92uAj$)VD~M$_
z5byW@R995Ag2dmY`-R^#q3gO=4|J(rnkD<7I3K_03^E6optO5C7Er-rJbd|NTd3F8
z*sJ#2prA_<dV!sOke>-DZhz;+U;&F_Jw|rUOAllpl6E!=Gvf;S#PF%N=BfFE@{D5i
zp*VbA<>?7h#(@@KZ&$OWYB!P%PAh5ZdBUqkdgUH)>YrSMDlKU7OPxtfX8mr-9s$L*
z75gx!u+DGfUT17I+wK?|UEuP6nzu}P^R&{gdUGQ;cbleCPMC>7{i}zl0Sp)!pZ@ja
zmuDZ`;<9myzEdsRWra;E;k=b*BoX3$c(QMDpjOV*Q~52|57!-+&QDLj#sU8<;}t9n
z7y}s-n{#jfqh0gaY6O9R|IpDbJEq`$Cznh5p1UC{0pZPWB)dag5z$`t#`|XU`JArK
z1Eh9_$`9v6_1$f<yGh5MoaT>YbEql}?}oLl;%rZYH2Xr^rKd|Vd4%Oqd7fUv7Fu}H
zca%w4;=2K(h@E9YQHtf7qca?rkDH*HNzHVP&+;?{Y)QwH@SA*H&2@o_j<+w0FF<=K
zg0^sxQtb#Fs~Cqjf;D^-+1ok#I~2q&L5Wd$k8@MXb4KP(s+U2LP5oe`5ji%bh5TC5
z>)pDBBUr?zSE+>7L9%!w7`vqxn022CU@wq(SseO1mtEHS*VNxe2dDAJAXMZ@NF(Q~
zez9eqt4p}rc>FaKM*U^Dq$ldmY*n@&*hU|->kR3rcd<D@D`DIH2bW%Cq@OPc%R5{d
zG~;N8&0I0y+s?z6U*qW6)AZ=ZzSHPr7!||L_I^3y{uXzhhr4cl=S@1ln3Hk(08^xI
zxnr*7by&r!-K-sZC#^cb)#b5kkFo*XVbvd+4&deW4(Z>_FU<zSHjpFF`g_BL>Fp%q
zfXnhZ3NOh5%S32V6-HkAP$#Qsq0JC|=Ol=MDR%2leRrUi%QU^?)pddr-0rh`{fF44
zcoE9GZ}s%o$<N%aOyA|YC59MOBotv}1%4g(XNs6Zz|^qWh+FwPNrCNbNWiY!-<Vc}
z`d_5}BqoQUiZcgwS?r+VK-r^uu<3RytHqpt&$0EjiS}mCt)#K>V5JIo6X~Fr7|LvD
zpSJtmI^8zp#dM`XS_K=tKJ^WUAk%r^P}&9Jiurox44hgD`b9_*`#*-Zpt~vBuLM}z
zeUBv#HKR-{tNB{|%r@nA_+_qXq1oqS2i9^`&cmRW_p<9Qy1%NF^dkPtc}?Ok_mq{O
z^J1%&-LYs+C;CYDkLC-E$ijFObK*AXaU4p&F@S2(6LnhMk4P0tQ|0XWU>)3Ld-9^=
z&ll0r2ejXRC!Bo!XpNqsefM+%bUM)Mnfr=vzR~pzd#bvi73|11k%O(Hc#9O{i>B-T
zBNy`qV}mRCn_WrrbNxl3(@j_9v}0zd_Yw)Mps<T*R-La(&6$J`zXbTW^lwb#)F<bw
zLhNa|D{a4~ClX5^*3^<3BWMzXSOe;ktL>B>u?*%+A)3+Ob?))*XI4{L+oYq1T_gpM
zU66Xg^Bsw>N5C6cGXgL1ZB*0Jvd4KN(G(@LDosPR>&yLK`t_+wS(^@l=U=WN|88BC
zq5Zair+^9i2<kK>N=W7K0D6VdCpa595x(CinQPRBJmd_DIa_xh|6lBV_dnPF_qUQn
zLK&r{Veb*5WF<R0WM`F(5|OP)$jBaLW+po!E1|5Ckq|-(l_F$>>;A0I=X>3*>vp^T
zgR38UzcXI1=j-`Ak8|$le(vX-pHLQ1q`e{L53d|0=HECQD-!vD4%6sK1b44(Uad+z
zA&g&|iFN0>voIR|FA-OSpCQqdGkp)DPycM7o^?aZ3wt*N-%%5j*Db_^PPSeFny2aD
zdIW~nM~{3!0zv4tiDU_rFS7=DKlHT??|g&l#?dEC!LK31rP_`;eA2BuUxMYUxPLGw
zk6~+4w^eSOaE-Nuag}qB@gHLI7SGGQL=xsyOSLoEu7dioH|54{u`^Xe1So9`+SaYs
ze&4BTf*9mzm0}Da=>B`=fYrm5;c2J>s?d?4?LZlK%=1uV@@qnjKHSdfx;=##6RGZS
z@t^E*)2RUkaGE6a%pN=L>~0%EKs@c+ex!^x{jNTbvHb7OYsZc}Cu$nHPXx*sCF&Y(
z6~1~sx)pekJs>&S$szUdikfY16Ko_Rp;NP5D<I~(uQI1GjsBAMZ$O9*P++q3JKej8
za9kipc&1RHT~$|Q+2t}Z7hwIVv#CA}J5`|nB**;m8W?nveYrvFknD)go-k#*8~EJX
zGfeKHvJdH-w-ZYM`xsSR7b3G<a|z_s%ic)E*(T|KD9_HKA}G%O+ka_ORq>-dSQ!b$
z1h;JXJCJF68N0j$g{-DM_lWYcJ5Z?$-2HO<a2-TgmqAl#vg#_3oO@<#=J^w*!<#K3
zx5s72EqC)RqSYJ|mOqBDX)NebGkGYD>_SUu&OSo6AaFfqMz}aXZa1*sYyYG*zGvS6
zX``Y&Zr7$oQ@kCO`-zO}D~iZ=B2X@Wa0E5vj4guELpRV^q8UJ7T=W~DzbO1M;MT^D
zFRHGtR1eP0CS9aGHQQDhe%m3AptomJgwR_GcPw0bB-lz40s$;*a<N;6tCd*j(I)ms
zMsqrhzNWuU)Y-;)iAJz0%L<I<2#gb1pY|Wzz~1!|fYr<o;@@tduE$pHJo7=^sJ-OL
zgxnp*n?XOjOyPU2-q1NX9bO8tZA1f%$=MaNKMQ$xXpi4+V;B|(F@rC9U%1iLIHs#4
zd*=#Rte3HR$TK>B?YWr@FA_5(Y*a?Ot+_20vSBg*A*&Io(E|iypAU9DD0C`|bOata
z<F3wEL&>2JpGL?0xtZ#U(nuwYs=hOFukLOlhE$!>=Q26X`zJB*CDStpzzgH0USjzE
zmd;KF47dTS_~+_D_iJ4)ss5>t_*l%W_NP6@(<=@r>1KWDzxw0MK6`rI@GGU%YtF>>
zM!N+ta)V$-TPu4G*M|P~d4QVyVY7YE8TCub9T#&Pu5L8cef)t49&E-gzX&%0mC9@{
z`WN{9Ip8Q9@N=FFRU%vmY5coy&&FU1DYtWnd`R6Gv-^22r;jD`b!r$_V*K+La$q*<
zrGQt{7$&z(=4}767itd7XUO3RU%sD4Ql(9;7Lc;<O!$R2d~D9vw^O>n)|SW^?{U2w
z9;mxavB}q#VdgbJ!h0lzQ9TD&bQ|s%qP{TB3lE{1P`duKZtd~S7x&C**^S>bp1ISo
ztqn>3Zo?f%Wy}@%ockW`Z`ubw7nxk-@%qGqhw^1htA6I&3PG?H_u|p>-c=9ad!BP4
z4~ycBMFdXmIY(5cqXYf#b%K=S8QxKWR(*oYCP>y+!C7K3D=G!+ZKmtH3`I^|1W*j8
z)OUG>f=x=nXLE64=;+VNcW6;Ua&~lr8loUi3?GqGrJd<My!SX}I=%=Mcb@SN|LC@;
z`vJs7(j3d^xKLjFmD`;ZyMC-uywkS`B}UE+tt(|JfLZ$P?12SpN2VNV(0%HE{AeB}
zgam>^RW2St1zlE*>>X4OW>)Wwx>O<_MLLZ)Y_qDW5NM<%R=0tJ@zT!v61ZyW_U7TY
zU`U@z^E@1eXy^SoSo~j&ipL5+pCIbFy6uFwm;Lqr1p9{`xpw+D`}sLJDQ@L*hD%_o
z!+5_Qv@Nbi{mt>TIjr8|W~dgaR}R8&B=!iQG!X4!ZDd*ok2;#Ew7hk@MHeIrUi}77
z^#H@7qjvf)@t^k7Z1PXpv)+D3A#-$7_Nq6ExQxRLJ^!N%SSK-&l3B_ib}*Qtzl501
z#>dKW{{GfzKF!)@9t;0-A+oRbzNrmn{4Jf?ekz<IX;+=s9tTxo_)*mZc48DsK@1Uy
z$pbXYXc_!>rh>5%p6C6B8%)euC4zsv7X#f^-maK~g=SlI%PM+gCbw++5|m9h@%eM}
z%k6E&ci$RM&M8+8g2UBYe6!rCLbp|I_4g0c>l=+TiH+&wN@!1tIxqWFw;~S*g5cB%
z|7+^}Rvz@c@tz-4Yq7nq2;Wrz_a;{R<gyLANEE6Pl~D3f(Gi@wneY*^JEh<(S@O5&
zZjEvJ0<jFS%YL?()`FM;HIaPy%nH2S0per6RJ6g^OeOXQ^t^)>Cb1;>=XyRZeFQj;
z;nSN!kFg?`Y;0WIZi!vpz0qoUKIWbR;F){n$nqsv0Bk(}*rSHUp6qr(+`^4BfcCIw
zCze3WgHloZvsJ$n3PwcE^qXIl#Izmz4I;Xg#97_}A$MM4m<g~FV|5{^0T$Ne8f8l?
zDUsc?K<xA-mi%61^51tuYf)DfR6DV34_rXWw=BonWwu%)G`c-HbM74h@+Drkmj3|z
zGwKj0<jU2^1Y1?Hy95HZB9Albm)5WX8qbz-Y<csvMt39}pHiRP{OHx6=Z9xhzftli
zOdeA;NDyV)qCY`zrPiN3v$lvNmvC|GnQwj?UW3ReX2_nH`(4}zc_Q7Hz_9Jbj?D~e
zc|RVXLLD_a?knE<@<^>$t6amXl>fug`iF}Idx8$BkXUOhp{_kkdF&v=eG&=256(b7
zbvfm{urEVdTEp^ePUq%;i{hB(58_fwWt%`ljmU(TC;CBVClc#CHe-5w(^vP`i6Y!X
zzZu$E_AArhEXGuiL%Ga_H)92>R>6mAUr&Kp>i~#oO|G<Vp)F=|x2cqD)$a!2^GD6S
z@4UoBeG&{8kq|X5%Iyy6dh|C`^WOCgn7vuDtV{3<<F~dUt|;XS2p+zhyJUBH%2vz&
z&|#|^Hvy~#CrCpWY2FcK*y0JN>0JRk-$##oneV>>tffh&gGfzk>*^^mq;dX^$5Vvj
zlJBD;l%&r_o4B5F=0>0(v1k02#srI5ulVRSE-DcMQ-I$#t0Fn_;7Xh=qIBlxWNtpb
zbxfrqCTYMKa($3(UCuL-_wTd?jeNE;7eg612k8Q9Z$fs)GU0IeW>D90Ot^~`+{A5s
zg>FCS7f!mOUAKw|!<bm(@mC{+W6{cYNQmN7^aCr-mnY<|2w&_>rL1LcxCD7adS0wh
z1BZg!3gKnQT>0uW2%%9#i5EzAHL<{X)AhMHVp1N;BV2!Z|6q2rfFbl*YK!W70zIP6
zH6ACJ`_bS7czimmJh-AMzCJ8dAvRe$E5xkLT`W6p%A4oweCZ0w=@1ZlvHFD!Z3okO
zV{ufU*;!21DkZ!chR=>3k2AM)$Te5(7(wuJ&&I+OX#Qx1E<)VpGO1L7W6|wpn18d>
z#s6$JvFRY@>9@DWtzFc_I_Um;yXcbL`kQH&>7m=mtGR6h$<UAJ7qJ<P+vP4J^<E|%
zFvg7qY_rdOp!XN+Z-tETp<S}}9l-_;OP(7NJlTJ|$BAOOu6|X?w!^i`u4ro855ARK
zF!R*OSJ5wT=NzT#%KT6U;sDsuo2W*W9qZlc+k5x?er8W(VA|!(D9ldPHWz`^&Q`6b
z?BjKwXeyojTNCxqW8L(Kk1|7fm1hz8h!ju~l%OBbW5(_F4M2mC@WyIq{=zG7xAB0V
zf3fBSNX8i=V8vrRwQ$HdT{W_VuA|w1CsqjLm$Y&L-uEY(2esaK4@9n{m&bMNw%XgV
zOG(-X_pMa#3b_|MlvpA;#QPls64Z7NvkpL%taa{J9wDeQ{kFoRTd_Xz`(7rM;H|l+
zLO9zLzD?Z4T$h&QRT3UEdn*tH_4iIy8r~3H1`FwWIW9m^%xbmD8fUaiw+nR(jeA35
zO=g=Ecg@@$eYd~2+$y}&Rz=I8vqC_}K=h=F*oKpQt)t#AS9R#$l1{kJU|yr_hV-5#
zB%F?UCp#prCQm3EG*3Dp*XCShl=Wn2ew40Exwem3sLmU>sgH;vL&+n2jHWvd96GEs
z3~2E}_UzfSt#WyP{GrJogfK(aPDAtxWsPOALu|D6Gyg$X@ttQQF_-k=J`Mw<r(FkP
z9J+Cs4wxpN@^WwW62(q-C!udIZkgI{KDR(-=Ayw6MswS5F8Vu+<7|~2wp>3DD&>k7
zvT6<HF4$u#a!Q|i{8oe@irMEYcHA#|52+<4Tdkr(jkyXX_czB2?lyMTT>8MDw7jn>
z7*M-}U>@^CC+<4xelol`p>t6^u}EBL()j$e6{mvdg@I^H&PovaJApZvjCN{siL=~o
z!Pz6KN?kF9G&N4ZTKcW^$28p*G6ooL`Vz7Ts5l>gTtDo<;S=b5>E={{xhjTEYL~M&
zt>I`BY`ymNr|5iSWi&(4GJKC<`ZsDQE#;RT+nfMvYbZ;(uy?np$E%^u__=HeNvQJ1
z`Wlgn63vx)q_KjskK`Hh4;Fv3U7DdF(Fqdxrt?~lHp)LaIH$q-_5B;@m^TJxrs<-*
ze?2$a>h27xDLZu^bV@NYZw!JqD?~ku^31t$#%DxE^RfYPmdU-Q)jPbnRec+Y&Qk%2
z8^|v1L!qwp9fmi8H0HqV6WY|;>lhgn!o}ln%Q^TW-dNlvtxH}5f|Ib_(aNr$=U$XM
zXJ`iH@sm8#&hzyAi8G<nPn1*RuIW@9=M;X_;G*Km8A=oTV(E~j>gIE6w5RII^`UP!
zM`r1c;rnvT8dX&NM3xILv;73Ss0mbw4EOyj7&{)E5VP`F+QRQMlYAw^ICe`uM&`&*
zB%ice#a^)s+wn~1end}M52}finYSZPYE!SLEN(z&GGlKZ6s5-+xu=qity?Lw+Qhkr
z-aRzEPivQXKVM*r?#9wfsfGp=fbR?CdSY`JP7Qcn=QwWCsmO^<9HtfIpaxW?rp>g;
zD?K(#d-cHSb&lvhe*jrbKV@tY<*l254PzzI=L^Rh>TPsfc5QzV=nzV~)e$<9n7ykM
zaT0gm5}YQ%2y`7X`diiAWIq4UZu7YcnLrM1<5Ox)rPCSn&sCRA2f`V58!3vfn%}Xx
zprnI>lhO?{G)$z=b7_6gUD;ezl_3F+t|OuwoRCwPve>E1o<(ExS7e*1w)aXM-gX=U
zC_>U2t^K~4MQv{7htI~d85>jikT%&YJDR6Yp>&A3_EE?>Ec@ADQ#*pPmB*hm@iXSx
z+j}lRm=sqcd1~#70fLmJP60tH8jBYY)SNGBWg8&e^9Cllls9Vp=T69V*W_E(k=zr~
zq11HCum6m;@pK*8-=@*IwqB3g#K?0_r7?dg+A?KLPCYJ12xU&MjlxhH{WW80KZ|@s
z8Gm;2td5JaiVB^co`F>iPWzfKDfJz$DLe=&NnY54vTfntI8SVJgE)e3&>Iz1qOfB%
z_#)LNb1cgFME1VdhSSuu<{406=uFoK+lA)7BgucKJA&wZ`q3Qu_3q4PF}#eIJ!x~C
zxXgNMuSB6}b%Fq;14N^;(`PPfu^@uObUs1=Hmj%J@ZYl&M0FQrT6k+OrflILJ$3yt
z3|;gnAiZ7yD<yX(WC7+z!d6y=n70xutoad`nvVC@Pr5eF{V{HWbWM&HQ(1de#e}b_
zR{NfdbS8V+aEm}N8BPI%zfcr+@72|l?@hI<*e}~fd*-SA;B|C2jF{cpk$18n_$#XA
zt&4NN3cF+OaPKSljw|NuW&-x<g%!_(l;(JL3FujE_Z_{{PilL+8Ir%F1>cJK+H&c&
z&BtU%z2n?cb_{VNRlVLiTS=R3k5cKxCtW>d@h7>tyJnI}q|27L$B{0XEwB1NFU4N3
z0-~mWe~M5CfFsXXVKY|p{n@j!@O8JYR{u@f!~3fsARrb*pncx|Yn0P^T(oT9Cv0la
zE;oJj&s~5$m?Sow*b*CaS|0>bG40YlQ)TuU50i(Nx1+UHx$;R-k-*TTjc4+GLLx9h
zJ=L6aflG@!r;4=5RySn)mifG>6~mxF^ZB#SOPx8FteCTBpF0zl4d7Kv=n1T9=6{NN
zpynOz^9>CnQ3&v}4)Z<Q>X|40fWxK!9fTGV_76wLLy<t{Ki-mm@#@-}Xx9fI8%_<`
zcugKKZ02XX9hI$8p9sB0)#im+58bLQ`OayUsyrT5`OcZjafuiq`{jY_?Fvz6vNO6|
z{=TphLmibad8#R=@e5jvk)c|wW&yF-fN>p?BBk$G?lypft-bj5J46z1OLA+Ux>tEV
zA!K}LJAzzH;_#m1h*7WM?@N+o_YiaO2&J87Kmg4$(&@}U7E2rNpKUMVC>N#vs30S)
zGe3}eGt}jKRkLgFWeelM%dYtIv~Q+yW~S=8E8X?f^h2{XZ6D3=?}+WcKeX{<bT;9^
zjw?3T-}nr}S77xOQ~a*;>JZl)!XT>NchAnD3=O7;o=Zou;$-MY=mu5&_V3?+%)}>9
z;!V#9Wve!(Okh);(T82FkdE=0)_Si0xiO@xkarn<M6JEOy;S@}w{@0wiKWtX|JyH{
zJIN^NI|cUzoEd1K3fa3o)86Pc7LXq+$X@3^MH*Ya`7KII@z)33GaB3J>Q$eYtlb*8
z-6-j^UTyaL=H4H{cklMRlWJ2KxH`$ag(Twz>o#6~^!x1X!yrz>-<G#d4>m>8u_`yl
z<?czF73{gMnsVyFw8Ge1z4?6$Epk~I--q-ooifX_F+w<*$+{_+VPK}~YOj>ZRh0)4
zPnyX)Pu#%tUwd_Ep+cJ%aHF5CwBm4lO{veJXV|&(x!s-e!wx;gkH0I2$;ik!7dAh0
znrO|e)f#uMm}h!>y!yc(VEA@{tij$VWIUwo!K5T4p*hTFUw)jbFuAHfDE$cgD1`)A
z%aU<Rq#Zs~q+MMDJj#*Q$vCrPc9J{G>-x2?*~J`b8|_+GWnD_=Cfa^~>%WHPKYG_(
z4e_gEr|owpuDPGjy<tL&SGdcE<O}Ty@4nn~Kc#v^C6;Gz-`B~W!Ri~O%?o1`IbGT6
zg}4by*^kf6qfQGgq>yC1ux~$=J>9X%$&tqijsMjJ@MnZ(+WUHg;qKK-_n{@ZyPdR%
zM}1KLo3F1g6kT84#$JXq$MG1XuZp~AXh1C_d)*hp8Qc9|^WF&9M|Hguwfj(^Ile!6
zp83A84YhDPd=RsgcYf_DAt5KI7WSsd`rS=AsUR){o@+027O%@tt(W2Wb#u*ZGR1c&
z>SchC-^-jooBnn;ze$hiqGB4b*u$%9ar~wj<eoOmcVN7C?#r9P+7j%kCw}mOV^7Y#
z(d@H{4tjlyt!P};sq5i<id9PP^<XkU`?=!7pj1=iHamur92E(PvvRyZTDbw&l!ocx
zviU$_IeGwd3g>_Q+9zyHReB*>H@+clfe`;?O|YDq9tKr<tNCTh$s3WJQO&Q}g9{}J
zauk0f552rRH-Sl7C&0oGs}qiXS@_!bXI@kJF*v-3?tNf7rv&ksO^VDmO&BUAw#Ew{
zjbVi-H?KHH9#pth`flP)uH|7WLVkGK=Vxd{<e72$+@5<?GLtOynxX&g+k7U~`s3QI
zvAk_@pxxTa^vmrMniueCdVg_AW^FSQRUcdkq27Nywb&x=(vJjQ?X0^YAt5X7^EBxV
z6lO*hThb<)!kO!&{Wj|r7-`mBMlwxJO$|;!yYAv%k>WCwK{w9fLtaZiWyVQ+Yz*kz
zlO>Z3bnu*>4D~)#qO<jAbR;8VbEk7QbvIB)n)Pd8fkA=WHaO>Muc(?8WQa{-n7tt9
z6SVRIgBbKGohGJxABE_7ugoirGXxmuywhPmc>1mKc#0;r@Zg4Au0HOJm34VKxffo^
z-+4^=y&$?rB#djHsGUBPV5K&1_)KoBF526BjmB{4cI_#OWKoj+k)7Oq7xTyhncAJ7
zNl4zCJCdp1vH}@$ckSubycKPZY$9fRN!EOKu4uq%VqYo0f6A+>SqEP}wsKRK#%aL%
z&G0i<eqCLR)017+(3j&MEHFM{J>+b9-C$>@J0T(L7SfF@&y4|fSZHID#E{<FjE=zG
zzTZDaHheZ#nHiLNe(XJQJ-?ar)0-42{+`1g3)3!>orf35KefiF)EIIj0h{LuozM^y
z6ElB4`Pb8Zj)tfYjRWWxQhRBERu-1phvDmpizx}hHhG2F4)oIpi3XQyx7nrEJ9qA&
z3-4kQ!xV}opW4F0!Uo*!atDBi53baV#nAh2rP@<JZxKvl{R`Icb#yeX*fk&ZaV+nP
zsdhwh{9Sol48N(#_<tXL{H8W8te7+zG{#-cI#UMV0q;7Df8a=bdHrAz?gl4Fb2aa~
z0mf-CFqZ8oOK0TZ;83h)J9&~|T?Pt5Y(ytoV}30zzH{5nn%o-0jd>_X1q6PgGZ*!-
zOYe))inH9SyjDd;YI?X<S691FT!X*_=<jR%H%+0VtWPQi&X#8M8Ng@-w2li2%|Yue
za`_!TaC$SjcHpDZ(o(k$oDkGs9?w3H-d$5&eT@2f7Uf5jE8=%d_2fo1FGR;*dhy`+
zRoQrtTkDzj3adfodvnVB%-vtI4Rl71y3WNr>;332&2C=6f;7yq&RKHT$5d+wo3l)_
zXJ=RLr{U@9B&L;wH9yOdOcb?GTyeJ-HY?8AzWZE`hM!49Z87>*&p%Y$87j{l(#gof
znZ<X$Y!Y6J2D|)RzA|dF{q@m@DjQOLryZv$0vmk8C~qxr>lc|N2wC;?Y4=etY$z#*
z!JRQ3yBN{@T53A&(*vJ@JXW1=T6L2xkl~hPegM%BKS_oTg8Ft0u}fRsv{%7<^46|9
z;o;%9uH7*bua`2@b5k-E!VeB))p40rS6C+A!rc<)<?zQql}L#tpsVY6Yyr6LTrK&H
zoy)}O=a;#;WuSZ;nbUM%#!Z%mnl82JL1V;Mc%>&b(Uw2&?^z-5O>3Yyw9mS}gc6hC
zu-msJtZm~`Qoq*GmBlZ+rLqpnV2sKF-O{A1?&I?@M-&NV8HdJdnc4HrmnVlq;JcA7
zV)A<CtjS8LMd;-c&BnKj9<0F(+_A9D*+lGlT%7JzG5m7*2M5uRyT0~ph9hg89Gc@Z
z<Jvi74Azkk3;HM8;vR*6NP%Dt^3iJ(txa~aurSW}gD0-5uJO71V4GJ{`fH`$>sxR6
zYUPI6&4cOJatjvW7PIZSvzb{qUdh#EKpt^TsYPjxPhv6k)!E-jPM5Kw3&cg=;*t5@
zv{^Hp<DR$oY{4gpP#0w}R-y?wa;Kh-?%P>gy>x-EQJ?_qT{Sb<cr++$u8eNhKJ@p|
zrrIZJO`p%876`uL%%g5@hMVV}e8jOMM<=tmT~_z>%EsqVS+WQ^_Op{Y`oa9K;e-1T
z3Li<`wiTf-%ek+WemV#StK~R`2bL?WG`?Mn{USV^>ikVykePL+a!l8I1<uq9i4O~T
z&%y<ze;@N|OW*b@etJeUy+E>MFEcZ9p2MX!Dd7x(%DV^azsX=;9W3E-@vpGpVvw2S
zF5fFFDkg_J!Hg)z@+6ddyp`hcqh$9zEI=Bod&Sv#KXyk7M}pE0ag62GJ3IcuVWd{g
zbY@;&btDb({%NvzE&TGYO_uL)Xw9d&bHyKSReD*P^Sy7#O`H6&<#~_kx}M|gOcNxh
z#!e_jvJCJ&?aNkYHvjO{{?3AM`U&IW9J{n}lUAFB>0XQCT;pe=!n>kormK${9rzv?
z{pg}k_q_uB9y{|tn=vyy)er|9n^|(d4<qSOe)sA1gJ)Wq%Bq)~6%K6b-Nw?L&$aC@
zvOJ-%CbqXvdl&Xh(=Hr}<<Lx5ieeKLSP724oBn+m4ju*LM0Y+H=XK2+d2pnE*j!Rk
z;nyC#)%V!257vx;sacm%{#@%@pY~$t`oG()!}3;e*3XZQPh%tNic_tqW5%SLG_0<d
zU**fkkEt8FWaF)qo7xXfPHtt;IM-K`R#Q{MDLCy$vO><PF}g)y%c+y^($RW=mK?LK
zhR}IK0p4_(UW`7mA+$VX=2C{bYbrJLW4#;Cp>*!i4~JFu<CI%&u%fZUu`|`rP0h{C
z4IH@0DK|)<FsAblo22Hr&nPC_8<yLdm!~5f4?cCYapFbOH5_RbbH<5$IvSerBl5ul
zM+K(}&bpY}Uz?u3McE2WXN@~57EI2-eXhrCx5!K2pxAsJspn?{(F3rX&nVs?@zJA4
zVVB-lqOn}SO7<%SZ0<{rgaY|`yMqP|^Ma9(LC&x6X)_8sHu}Q-Vh;Ns+c;@nDw7SM
zWb=}NfeHxQ?-t5nGkK|aSyD4D=bQF^oKF!T%uv_2%xsl>=K1`Y8@ECUvqW$Iv9qCR
z*|-)K<!Hs<7M)VB;9blPQPr0m`9AOj%U?yKLI#XiPU(gVVGPFC?(Fbn{z%MkSh-*o
zdk*Me$3D@?<&Vf$nB1ONxRXgTEA1$1Zh1onBr#ZQ5qMY27&rl$#t{Rh!{3lMPSd=O
zWDT+0r+Grs`;S{z3kKav`K-6wk-12<o#=4JuVDsa=z@8VD_?@YYP!s=t<4AK?YoR?
zK<U7MY_2Mtc#lGbVD$l#Lj}&N?{bovC+`qFII1)~qPbtTs9YMUt(hs0lsA^W$I1BD
zDm`Kk$=n1YoZN8Bd{Yn&4Ln!r#iSFa<Y~Xu*X*QSU4NrZta0ydk?Daa+%ad=*8Z6t
zHaosOUY3bYo8qvbpqQwrZU}07Y>I;!TtqeFue!MOx)o+*j3f9i>>rT#x?c6gCQ`ti
zq?8V4IzmvGY2kgcgp0D!)u1zz%=D?asmDFN^HpHC=sMZ?RltzK);SRJt6!hh?4y{e
z_a4gu2rRA*d;0V@ypDFJa#Ox^03}1%LCL-7)L1#XgIVy*4J)|r;$%&QfFy(st>o_6
zc*LRo$FHQqF{(=SEb>E`-H>qW)-5;Wdq1AIjD_tJ3u{QRWMw4{{X$udh=aOG`)v&_
zNzbLCa?Ue7417jQn5ypXoi!O6(=Nw03w~bMLKqh7Nbi-iAf<O}{VvYDR#oJ;2$*d+
zEdKI|M?dfcqG?&UIR&s|J!%Tm!sXSEUCFQ9nW>g^9p|Jf=`locf~<0XZTC$MX?WG_
z1+P5}_i|L^UNTrl-;_876g`xy&Ayg0Ha;$Ab<F;O51MMzxD<dA<A-w&DK!b&+nn6H
z_AkN$nP+`bW->A|I+w36Q)9RCCQ;n1p2XC2#IhxF%8jaK09q$!BPmVkTnqHw!0A|B
zHJ>N3W{1H&b)M34f3x6uviDN1l;)e|mQJZVaJ0o{B(c3|C7YixBL)L=J(xM?pXg(I
z8K?IKL}qBKxl^c=9o7&SX3l-^;6ac~r`&#~me152yVRxV{iHc?YEQvB%3YU?kViP#
ztGC4Qk05rv4BeMqoDBFyFjGy5-i^o3wsETJ>jI8U^YmQTeNg4{6(Kuv*mmKb`d-s3
zFkCe8WQC@Wn<HaQI(cKRDP;H8p4<%YAAsL=p3CXAwMLar1E0_KozqKC9_sAWuqG=D
zH4gb2beDd2POFmP>E92}MJs?nR=Ib~XZ??=qr`1ntCq-sQ^`D{LhDIqMtYkt0D@-a
zoA&L?{Uw=Uftp*5i_D(Gv!Saahu8S+y}K*QEpenIzV@BhHyh<U-w%@4-M0_}i^>#`
zPLPo_(tIY2JRJG}%l7ztQ!h_a@Pbc>PMq{L8q7}_lajL-e4bt~#8aDVKjVDB=e814
z@!wqQMaygJ3wza%Kl~7RNM>_OD;}a&?qm4b0qRdv+t#pAMB??1sE0z5bej2vFPOxJ
z-lm9wi6*9GlPS59GpxM?Fjp@YwRwGC;vlhf6hKpBDC_EYbJgWjI{P!aIxwU%_juO$
zNso-WL-2d?H_NLv5si^ve%h60LfGodDS794KP`h?oGswx2N={HhFvwekMWQBBJZ`8
zTy|-fp2Ld#lV888>{OKW>r4b~M_`!Ye8w|WW&>j>nn%it_dN26SlqAd-XotgE)+JO
zh`cFdQc?HWaTl{RAKJBBBxiQ=3kgN`lV43*TVM0Yq6NsRzV?NB?Ku|frdzGdoW*}{
zQ!(Yt(_T(Eb97*AeSIB?h|lWccX<D<EHxE=`HtH$u6y5}kUkJGJJz&)`}VeIPP&ED
z(+97x4dO=uwAOLx(8|?)LN$~;Q@US}_2kJvy^r+x(>uAz$;q=7@7>&c-d1D6{#3-a
z9Xm4D5{69%Y<KS58B=-|6NmoI3n=sG98@t39X7XLP~*1gGF~GTtuRL>dHol4>iJwD
zx2P%Yv5TE-b!O?fsC8JgrJVb-ce$^>?U~pT%uK&eR#uiH`G&hY*AcEQWMmYN1=jj|
zF!EKFH>CWn4rRbQI+8LO!>yuQU+&$Db;~nI4{4ZB-DQ?KC9*a%Go!=S<>O7px+_xM
z%<RzjtvZ49LI+t>Fj2B?U)TK7tc5#iZk`gqVp`m=Tx->QBE9>9_}jMx$0SN>&-8xR
zw>Kr4-oJkR%CKeN)sRv_B01SHzqpuHU;in6CL2kI77sDi!Af?zBF)*d(OWlzT);!x
z>w``#efblCxu6yDOWa@D6SUJD_pXpXUwm(4czYAE5GB~JoXT#i#N$mQ(o>zWexc8c
zw~~->92gKPVtt=NeDPZ;?~5V>{N(@jCqaPZe|o_G=UdWjRP{(u{;xj~6r}&=YyBTz
zw`?H!pXr1D`y2oNWpOY5A2&e(kA}pI0^ZI8qgqf79)`S$kCJx_Il1ss%%ew_F_=O7
z^iIa=>gu`A9c{!-9cy^=<_CZ@Xqvg-zc+r4zIe$oQs-l1c2dy+->y$vw3>+cK>T0D
zzvtN=XsZgWK7?0BFQG}DcZYNVoW4%JelZw9OoUKE?-|%Xl1~4XWwdage)|<K3eJ#<
zXHyGy&(?dVE@nFaeepy4wi1iZe8ugM8-b%ia4|Qd0ti0O5D?pjh=DaFpcII{Ti=v&
zj9miAc@an>Ty%^@3}5r`9f-4+b|T)Z|KGK#eg%nvUZ-mJg}j--8*XkD&z?c@C%mMq
zsHkXWW+pA|TTZ?|xCDeM{3HXXmOt_KUeC~Miv}-_gOhHmxI<B_Duhzwuou(r$bI<!
z0om^=Y5&JPP@TXX!<CFYxg57*3|cowCs!+I7b_t<#0BGTp*tN&$#Hkqz+{5d&{|N?
z>U-uqwW}sm#I|RTh;4LsHal_UtK(n3C@7hs+vwiCdy&s5<vEdP<91y8^y+ziqnpzS
zmuY&|r`&o4cYZKLCWVK;LGu*`y}ZJ&N+)Qnmh8x>BtC;?qc(p_e;zLW*980_v4$a2
z^PFKh7!Qb?mCqrKC`HZ*c0=Xf5i-&jz&eX~EHIIC{J%O9gbAUU`8l5Vt}kB}cQ1AP
z$Fbp6qF+!B3IRzFTdi;34%R#O=v>Fkm)V}nbBd<1R%<OgT<~5R62G2W<#_dTT~>5>
zMc{Ym#s1hP8~i%S8HQcEFhAH(i7XGT16ZVVzTD0Ljf)z7Lcyp$ieBtA!$r+EYmMYB
z@lAVv?|l^aaD$lpXQvO79C&h>-C@nk)02ZmLnpP~ci!siU&|@q@`Qiz_9w#J=gdfm
zJ*Ru3Qc_F-xUq(%y$_t#29PuNx%^iM6Qp#hVzJ7y^K9LQ9eUvDtC5@`!hjehvD=$j
zh<|DB`FI)s5rI?)*yOO6!QsP|-}_71!RceD(o-(oyhFrY=Gbg&x=1QQ*xntwe|{`O
z9D4eeNY)=8Dvy4+3%&{E)A0S`S`}B!x3Zma6sqZklh1l;tbYyZ0yN`3>}T(r;rGol
zIJ|)6rU8!|)D#q6f>_3zRl+K%^7Rqn@Y%V}I)KBJA?&-z8#niG4{;2o)%W-kv+tS(
zfo5=f@V7xl0zkW|scDPlH#1vAmf<4vTS-YtSAM}n(T5BIW+!24Ny3i9CzVZc6dO8V
zC_j*r5z3}rtQS(Z?2RJ!cQN6o^jUjqzcJYoho6@F--kT<9)}%MotD)c9e;oph~_nn
z_3H=wwvLx6qgYDB)B_Bxi6abgN7}rI<ttimVSF4^U%B*)4w1_5j5G|}FTRwxiFE7V
z8>xS|r<UaJeeB%v*YnqFAPutZFJY}S05&|T5QgpnKfi#^B=w|JB*LC*z?`Ua5FV?Z
zO|h$Q#AicI@+NADR;kj_AE*&U30pAh&{*BP>F=edlKyioGT@zcaUDNK>b8p^2-YHn
z0)rz|#4)f1hYF`6>q?ZU2AmIYIq~w+qdnbyk*q5B@893U5$o=R-#Pf#3&co&-`=Qk
zjkuBa|Gdqo?GzMgls!nh0+N=0eKD=La+vf{F?`ErGRkdjn>KC2TH;i-X5vMQBWms9
zk5?|Qt{x=}NuTr~f9JNpH$WrsZ<IYW0;d5IgO|s{&CPD0tfjv{!LK*9quBh#)`4RU
z9k^DaphMi@3x~b>1rAq&fj?Uj^!H=$h^Uo5`p-HJ{QKCdetv$~f5Q-KY-|j2{{9hp
z%B|<v;GAn~Yx(&28gSxmwr<%%cvg)=5BZZ6T0*N_?h*Etzol#Uq;Dep9*N?=llAHt
z#v%Y%o8JJHGCVv?m9K?|iOE+yJc0iHcMqJ1C9Y~Su8Q=pTmI@dPgZsKuUFdh?`rk~
zm;DBj9xH6s+Ee9ndF#1+49{Z{vZRg0cYLs?hd9W=H|MRSSXx3&7m2c2JH^!YdB4Bc
zapj-II|1MY@)J(s`Ex%%29=0Io9x-l#f5}Q(8Ed`W_q%zHgCnqLElZJd+^Wr1NbEW
zPV2{i4{Xd1QWjKM=wneeF?wRFyY*Zlh!6Q-`kk@rsDiovFd;64(r@0%k)x7<_q>k&
z8RGZ}Na1lY|Fx?_^?xzRol+#2a}(hI1T^j-pPIFrJwwzsxC7^{0?~2zD(>&iY^R#q
zKDOoWb3PPCT;d_Vo40Pgd2oWA2bXaY6l%L=Lqh{RbhBesWhIESU_T=iS-6cVimq%W
zB%25zi5!|oh|7A{aeu0f1AS6}nM=eR$FWFBp?}9Ic&saK^ls7!5pR}%*?4yk4Gs17
z>TYCro67oxTV`fw+uYnjQ6@P7GsXObPB*<^dQKR5*7qPB3<Q1BI&izKFu{@vxxWGR
zANHfwgZ47`&K=s=M>@F;szG_i2woq>Kp1i-Q;=Aus<F}Ex_A_w-VHs5w75hno7eMJ
z^pDR!8H@XNIGkDP-P<WLiGP>q|DQ_)*HPj&d%+vl`G8d=wr67s9MVizW{Bkkl2lJm
z&ts=f9Xs|nReOf`@VO-_P}B;gAY&t=M%T9^;^qxoystrwhXl>0<nK$9@W~JcbM@NK
zk1|9uXth-nUbW8<g$nL=t{|}lH*FwJ-(K03NOm3`)%|ZE34as4^)D7V5>d<3*4L-!
zH31So!3gzSN%(WH2+J(GS-yYcOZ?w~MPt@*KMk@-QowRFA0jHg5acyGu0tlmt&vJn
zdP@A-=lS`0)PTi#F)+}VI1{~ccuOH6t^IFGEL()Ge3Z`O_#3?#VPG=+rnM)pe~VvP
zLAj&@(-FZ!wv)hVfaV*1>S$VER2g6V_Y{#>*Av%&9QBK4uoeMUvrU_1WR~bBbzF#2
z1mTdlZ_itO`HN6sacw0a@G`#http7GhNaII;EkNW55y#F{p-dayr9xA=RW2i5K#P+
z`I|ydUD^JfuceRFl3sJRq^8innd5VSPJo@=S}*!ZikZhIeLp;&xe353VU0txw=*t8
zaK2t9-4W4|zr%@aQK@rB%FajlG<b7WvhS&)OY1LdH_d%4wUEP&y^O~;Ff+HXfMlOK
zL=Dp{0xspe0xZI36GDuby~1(+8gMEwilBv@QxwhjLP=@EptTR@%tyBF1jWW{dh>nY
z({C?MEK0`v*-;o9lth1f8qHHI6V-p7f8U_Goi{Ep0VsFY3blS~3LI*EP_d{=PKD1d
zE*8MKquvlE^%;y2;%@33LCd4~_yDOgk3mUiDa09tsFGgtc!yZ{`}?56n{?B8z#_0l
zmaWl5Whx(;F(ipi;ZSFsjM15VdPnbUyntVxY*{C$3Y?jr3p&3Iu%nT|9f{%`TogU0
zmgVdF3F{9b%*E0s!BWK}QC?F<M-72fmcmUk)LS}t^bhW8kFA{<sZ-|+II@G4S(yhE
z3cWXAh7J%6IGanJtq@29%6I|_5UHC!mqw~I!WhS3<H|Ffe}G|SiqKs<YZSr7qu7nu
zGYZ0cH;=x?pI51=selu|l310aC*K#31At(qiFDmOsFQh*M*uh|xl_9RF~<Qth|asy
zr~N+_Vqyg+Z$)J#v|@U5?8HP1u&wleCP%hV?CN|3S6BuwH-Ad;U?or-$g^Kb5C_mu
zQxETDJ#;7)-0D0VXzwH@ipV6vv;)yQm?)$VTC!USU06xqMPSdR4p5a=ZL#*)HUi%E
zVW<4P42?8d0Ku^r&N(J!cKt$>Ec9F){u&c`_%ZsZW3?6QG2DXv%b`uI{4HmuW?+JU
ztYJeSeHt9KwyxqaLF|_G`)e`WmX@&th%I`NsRQF*k+EM2-lVVSaP`*W?mbRy@A*DS
zdjxFKZ{5w*a;iqp>uPtO>wB85w^te4Yb9;`-WY6VkL3xNP7<85rm9W&FBjmb>OoT@
z^!}&!g{Z;p^}(~^@B0fy$Vv^KUAG5_T~gzEfSRj2=x)qi)hbLvA^+C25ys3g6h6$p
zj}~EYAc&RDj`xnp_xQAdF3<VH!Z+JlnnQU;qy(BUZ66bGoy*4awmMJlRX5adlxY+g
ziJu|~sam;BeSmA(!aop0jXlr^(^EG&J>9BG)pV#^R#f}gCux$Qh#KDKR8uMy)NSx|
zP28NB8b9_ve&}5Y_FU^n>L-KfT5LJs_dXer36#+6ereA%Cnl66Rgm6|O_B6CljZ=0
z04@-GnvlyBg)133IUyqX<2=olfBs3{r{7w#n76VsW#=f4Qlt%qf6TnpE}Hsu*9vGA
z;QZ;NBG;1v(o`WUz(=MRIk12KlJR``9aB$qa6uv|w($c8rvL;}yIaHus(|aA91-_O
zKFM6yVmq2u=<7>z)$ZbOwRmp^yza|BjZdlP>Ey$Z+;zkY-qIqkQ`u$_eFfH^Z&Dqs
zJrNxBU}P*Y&XVBEm)M%}V76U8!G-<ET`;}j#n`Kkj>ll*=CkKS@aWCid_OUsD62c<
zcb}r1QoPf|oFq09&MwaTTMYB|J|U^JTN$=tCwjw=W(=U6nu_Jfk(_HL3um=f6{JSZ
z>prX=jjo~4S?jzfmpIR3@7{YN_jq|(%KI0Kn~U7X2K<n<2^WGE(jHavlI%@F)l2qC
z_AXZCpE1CXfUbKPBFkz9fWdK?%X~Jxm6$H02>`#)x5&eFR+EOc<~W0cz7daUt&z}*
z@&%Yp53`a_ct%iNZDY1$@S|We4ohJx8EVV->@w_@j*rZz=Nb0z|A019oVUv!BxH{%
z8MvVO^jn|cCOG29hGL=N*?fZR-=n^354;_+DR-Jsp3XBWz7Wuyu+OC0?QOn+aHu-5
z01YXy(TPt7Pr7{^A3u6<2b)ZB#0(Ti1?B!{HmU!aN3f0MF^FWMiA?gmNIoHR=E8e1
zX+}%-eHW_cpCDU=&&(-g7BKTAirDiE3QGBiM_?N06pr4A;qG7V_*wl>s%3#Zx8yhG
zIM0&sAR%EQEs7t|m!NCnVi7a$T;J@(_QKmCBZ5?Bi=keEtepPG?Y-m+eN*$gBLf9N
z@s}_3s>|w8rQa=mrPzC==OaJQk}yM>MJ;n~0+m~{Nv&C~WW2}LUPWE`qUE*5=JMUX
zvOkYRBhks|w-|$^x_nTnF%6_){w(&TBPrWro<T2HD-#h@TQA|tFX)&hZ1s%*kV>#;
zq_#X&wBgx292xQhrJ3~CmEhxow(HN6YyZe<j-n4$e2-nxd4+2CLv8lIvKA!~r<E47
zbZirJSxGNAzVKEL4jZw0Oa!G7f^7InuAz|HOfBmd_F7!|G*Z2&{Q0>#Liz000l6t`
z`2*A?3woUow&woA1tbz#m;2X|y1Fnaedz;!Kz_UUOmk)+jUP*zx7p_^e7Lg3?|SE*
z{~Q~k?o9sBjKVF^Ps)bm4d5VotMyq5omfxQ30iz&m6UY*DZPJj7yDTwgoB6(+F1(@
zceqwA?5N^Fg~XkuR>_fCcoU0QN9X#@Gp`cN9z~FT-*;P=OYN1|;-`bp+{0?-!k4#Z
z|CrIaWDvWbN5SNCLO`Z!#tPR<u?njBtha^=j;S{1dXo~w18w_9zZ_<)8RcJlA5)sA
zCcUpAvA@Opg7DyWY0ae;L&nPWRI}D-PT<=Qbv`~|?VG+90+oGwwbMMIYL-RsAjqC&
z)M$xx7Yp=Swu4#F(Z__9K+AX?zs+O_UBBTLz?oRLM9O>i!Mpnh0B)@;FE31WD|kYa
zxc+sw{N#!1tK+wqhJj*NR#%aJ|AK@eQk<xRHL3EW4W?mpu*_{)(Nd;Yek4_gJq*K?
zy7eqAA3h{?L`?0;c0pmOr6L_FFGP5Xw&-gt53T@-WfnODT;i5ZF1f(LFq(1%?%KI_
zB=`!*_Us%s?@xFam+G@P?73fO!O=r6Nne<~+Z5w6c@g>jFT{Up6^fqlcLTd3XWoHn
zi;Ww|njI;l=5K3DpMQ3pcVT(<88QS8=ZBZNL8jvn^`f|2(Z@`GsIqC(fJ}zmnavU8
z{YovWiM2VMW$5WdZH^G#tPNv!7!LAdxZKDE;^Z-Y(k+PJwA^v$2IslRuQc!SblX~5
zH~}P2ojNtPu($Bo<9(SO7_<`7N5p0Tz(IaIf9n4}f9ra!==$B?$aHCr`V5D?jI78l
z*ptY@Nvf?lnYW@86-MTDfqA6lO-g!S-Hn#v>I=yUx=~xsAAUBZPG40+5`8=6dX|N?
zQ`Gq?XU<;Ji-%G5=y?uo5ejej%OiJ-Hsaa&)C;jo24zkttIei|T_K#Jb;sUW9&P+^
z+6B6`@SF=SKZYf1lk*hu7+kJhv(R*5;vx-tBs~8Sc{R>)9}-~)HpK|(Kl`S7jf{<#
z)qH$>W@}K~b-sGlJdfjG;n@cg%;>rNvwRKo+mvg9jpe?SiuFOU)1IV<lKKVy#mkOY
z52v_Kp1fbxnj;pr5}0$eqr1Blw$fls?_~QfzY?Xtb+cAs<X#q<!a6~w4*`?rk2K5`
znZKAco!0JI`Z_7X+4hz{eME5sGcKE6ytpMFPyoRdXwREcb0}@8hJf9`zD{+0)HQ7{
zUd(Y53W9Z@W%xPr)yO>y8p_GsVK%3QsFNjjA`xy(-*q0$7vS*O15pje@Fsw$v`$%7
zP%LTLun04;h<T+QI7Vv8LUJSG0ezG66gTqs>dw=ZH`DJe4da-&PWJ>c5*^E^XUThJ
zjo`iqkii#QOM45SGwFJX>Ryu=@E+tJ3+g8)Z2`yUe}DDPt*@8PnjQ~J4FIWd_n_qY
zIbRSK0^QP1A%2Uy$F_*m*)ce!K6p;T6R?fOB7CMKJbiX9XqPYz|L0Hb^;91s^Soti
zOMSoOQIP5$>Hnp`GkLTvQro5J9Jk-v>D1`&WT~pvi!2EwA5Ma1&eJP=?TE*hiW=hB
zCVkISw{WV0Q{F?}<CgwQh3i~CM{Ut-RCy4pWS%@Gr#W~hMgD-F><*QWGc&^#S1qp6
zjNtIIGzr;5fx}j-WL1cM!t#r6)31y+=<LlfZEO$e^YwpgL2ENQ`t9ul)4>lc?Jwy1
z+qcSp38rOSy6d$jqG#FBG-lXwx8aqa8Rx6vESs+RiOETh1g&UPX|RQZ=p}Nx)Id-i
ze(C|NlSoFFtdaPZxqP$=IbuS`$hi2qV_&OTB=_88{3$=zISN33HtzzKEz`~HQD&OA
zUQ9}H%)CXdw{+=w<Z@XBa8H8sJcFE5H~E0fFKyMwRFwzv?`nnde@mL`iVF{?;XjtC
zo>Gg<14;1s?{_(xxA^0@bd~>{KDgCVufXz)SjHz-uTE2rN@X)t`~y(u=DO3T%^ET7
z=9$jvqBGeo`J5oNRO3b>KIlYr)YDEzkr@W;P4ogg!Md~<GxV%QwoYNhS+)K{xA4=E
zJ@E;pD40F)a(@F&Q&G;Zi@63hH-c__G3P62A1g{x)L&lQtdY;66uE6XDsdOA_44%v
z15GV1LRi!!b|dqQQ%fBnevo5VNHm9LLtkH9;m)mQK`M$o(_<pv^vcc{H6zq9b<@Pu
zqXggrJ>zT&W~OPFC(Pt&WwwH>dwg~MhV~M~u0@9my8UWv$x2tnbQF{~msKwMwq`N)
zIyHrcw6D5;j*Kwa?{r9if5}tM1a>bX4FSwYg%fE}@Qi|1Fs<ns0h|JOM0%-1*q%=R
zh-J;@0@C&&q~)l0@*7t*k~e-0YUo04Ft>&jy&O*ZmsAkrDX1t$jvW9)!n+<$zyM4q
z?VMf0@v}8Dh3Lilf}%sQ^offy?@YMm9LO(QO}yNF{f+aKO8jcnulad;n)+Sg+I{aP
z+a4LUymoAERav1`uU1CR^)fqB8NdmF4$~~^e+(5{DB!6k@XSjcfXs(D#+JeY)blMj
zAIt9OcsF{N^3m`0$J3o5KDV+JGbE^9h*glWs=Y4xV$G?gFhaH5>|g}1E8N!LogV7q
zz)!+D&K{vjaa-a|{0&z1WTTSXwr9qYdIEPdGBO@K$d}8cBr&asQIRa_mg%#GH&KRA
zN|q<%oK?dhx-3HXY<uF_43Y$t+j({KdWaQhOD<z-x66kBl>8^KDp%kRoo<rH;jG={
z_65doBe?mFkZ*33UKHJ-oz1T-12_2C_}L<A#TEy=ntJ&1d8QQTC*vc0cWHuUz})#F
z5IGfLwMRI$9%`5-@EJ?Ys*MH<7kBxv)JV@Ue*rXZRHbO)WxPoK*l*!oYsBF5DuXYx
zWcpQ$nMu{HG2i}J=U3A|diClRc#q&dg89@weR4&)BCe$i(Gdi;3ZIJoX`-xPX89j0
z|Bkxg*G0An$v@(Pc1Ye@k}}m^){l)f=^2NLXkYKWW4((hP2#~!s0o8fRK0h4(i3}r
zk^rJ$Z2GxxRe0Y*<p|2fJhcg!P^h4wfa>sh+QKiTK9@bx1<F*MY!jDQq(a|xy(i1r
zu^^%qlug9jIyGXp7X}fVv#||dF(|P#PpuQ<m$xqvZi^<hFBl4X%`lwT+2mH>*1|(3
zPMg1@<S9k`F)z&u+kvuNw`sE1CxTa20A+$5ZSOOUt$B3FzW{UuU7+A4nVF#+!zC#B
zv+YnY5{I*%+FqY(&SV`tZpEYMP?dV1?BF>)!XyKV%E!0gxzIll=P<{mSMn>Ve=f2)
zNVD#a;!KtITGc1pySswqDd{;nb2N|URX&h#32t>@dl26`9JQ~6DSq>c<@0lCx2-b-
zNZNwQPT8o>DDXdH(==Y~)@5pv@fb~vx9Z4U(UacC{gX^s>KnUzNhCbECwSt|Z4w1M
z7DvWZmMB;P1iT~D-3G3sN=Da0$9k=NyU5O#E#Ia$WLoyx3!lF<K0S>AL+>G(XU5ES
z?5@NC1Q3oqX^mvJy|Iy%%Xz#>hU7`5lxx!IAVAG_hHIM#xq}V!4t%tkOh0hzNW$`A
z@|(S~i=tdnS%s)I+_9-ir_KX`gBX7tQe0SYk9OvIG*+_*JD&1b<oPS$WnuBJYCN`H
z1(OMO#A$SbxY~8*!ws-Y@YV4LQ9E21e@Qc&h~!Z@D@!AVQub)eF`_u)Uf2z$BZ2i$
z<t3!4lm;!orJPQ1gvHox`gr%hT)=+QdiB`HUQ=v;5qAPFzfyrzPB;Rv?XwV}@7H!x
zKE)x(j85X#<FmeS{lN!#<cFQ?+si3MjwRjNr2lSuZQtUUjo#JBhddVNK7XvQA2@zo
zs4$;r_6;4I$;or}$FDVb?_y^hF(DC^G4dDMF!25ICMDZMY&H?XvpbG+QtCn^DnfZd
zd57n<#zbT{sr;!siWGouglhZtDEdg2I(gMDktN(C+;?q3Y`DIL0&QlnI)=FA(9GfE
zMb0!M=^py>lj&^rD9eUb=k%K4XLj3bH6>{sPh6w9g{<|yQ*92m1XRB8YPi{=Yu;tN
zdB<!Ax|XPzPgO&{hb6A6-L%)o5I31*_$s&DEngR&eosfUsEl5D$znvjhJdt%>XKhX
z+rp1wUX!CiT7+hB(WoUl2Z(g%8x{BIo?P_*1v5)uCGs332oLR`q~%`7)$br}Q4=n^
zb*^phiO{F(8f+oVroMNqE}K@h{Pnh<TU6$49Fg=k-AjJ)yQAIvuSIYAk3}28qPe`5
z+YheaA3bW|gv_NW<Ym1?Q+VOZS=GdoD{S@^g((R)%%tu;zX>Ym9JGqZ#l<Pw;QFnt
z`_kpN4@*5oITKoukRO@rvgUpgzZ$<nX5$69ySX?A2O&Hg^FTQ|<&d9kEHO4JxDWW>
z18B3s>GbJF%tvbc#jQc6?D_fri^4#|KYbL~Fieag2R+zXh|crpXb$&Z07lGS_@>vx
z+@cyZZPl>Zz7^UI;X5&T9c$uqH1>Q~%Jy}>_T9fN6~5yh;X9-fma+sGm46avP0_Ug
zm8-ENB;t}c<{lP#jy8~m?q;&o)Yc7h%u>83yXP}&YFYEVoXiYjQp4Q6qY6ZYrdIEM
z{@B{eP|m6L8i)`*6D|xRpf*`dPQ?I_85dt@0{J@8o^TBn=k{F@AC4gcPVg8J?xv~a
z<1E>q*0Cr22Y^XFO^8{?Ry(7^sl`7Fsuj=7+w9WMK~l2VTslvBLXGgxqW|&FJFZ%q
z*~`kkUrV`G!=~DJvU-nxowG^aj^Dh~pTa%F^pj=VTM`oJ7wP2UeLOb3k0lDQrn`BK
zKvs;5NEu6%nvCCX<-U=ju{-ghL=<i!=FchU^BI=&^u{;F@t}d}6hjg=kMy)j-~t#K
zBQdlcB0SVKem!GD=P&#<yu?VwRXL#$VsvK|i&BH5a@I9`<!FtHj=i|^B<+wcNND_E
zkk2^U<~J}_4>Yp<P?heV(<`MutKY?}g}`+on@lV+%2H+8TC4@1WkY^dt+C6>lH@`(
zx3_=M$CS#k-wix|bi$mUq%{~V9W7|H`K6@l;MIkX-mC6`qyV=y3RxRq?N8r_1-Rvr
zGCx72&}Zqofg32dQ7WKvL;f?poN@Ql<Ya|yFIP+TISE)}K=Q=*?`vzTt_!9LKKo3w
z^s+oTsJ(kc;#pM~p`Knz=~AQg9&>0wgvXYK0tArJ(NP@#-EaEj_a3`g-%j14Mp|}D
z**xJq6Z~1qayY*<UE8}_=LqA<$heVsgSp6uLTC8TZm2B;Lb0S3OQ(LR4#oxFA^gZZ
zyJbf|RXdGWiP<9!xl#(WR<xe>FMZZ$pdW9W5SCvp;C=4!Md7#2PC6aQ4GrEot&(M&
zYUHaye(lvYBz9*}O<gYe)a9MkoGl5YRb@%b5F+vQH7Zj2VJMN~;WTwWj3QJKBgvnF
zpa)H*KIvVG2QZezGi}#^G+fD69|blCG&;HM==Ejsp;<$wPO_qXsS-{l^2TE%UOnK&
z@zjGAg6<*l642h|C^Vb3rQ^tv^nnjKQ77n*KYDGyIfC}J_HGIJi+X7m76bOG<l?mS
z<o$zt8r8}_xeIRPf)-$jjqG46JHQ9%_zgI(GD&V|mLvPm80hpJ_)!yODIf!qZYrkf
zat>)BIB*Dhdwk{@aIumLuVtqXMH`u90~<%a?A*9V6O#Q}$DD;x;kg}r9aI_-^K92=
zKJ+75OgIpkL_Z)yCg@5e19kxkcplrgzpK5#ikQM*C)oWZ6ZuEW38PYLHG7)a4^NPr
zzIvr-E%HsU@^F%$e5yL59fR#f(M_a9`4p^8flvE?oAo+X=LCJ;FCd@bw5`u3lzAb6
za=rE7usPe!wMLHiay*H9D1V?ms_5I-uWju)c)SC70x);S4;963YT#N3j`guO3o+mr
zQk%xhI7vj?g%YdEO<NB1DBWS+h}$0nlMA)T_P5o6rfl)Y2!Fy4;~_v9IKpPtOL*1|
zH$e&J`o!^mw0H0<t4uxceNS>UcY1-`-ao9?vQ8Ot)LQ}&(Br4N^e{f2RnqnXBsx9U
z`w+q>3%lHQPdq|OXIp(4<>dh_#tH6)uR@Qw0kKeq6Bz~o<y{bX2XTH&1P`M~wAAtA
z`uZ~%w~caG{8^M5_li5Qlx|^pYMOdLXa6<tjiXO*@d^&kl3lcUKA@NXAJ;Wj?L5{<
z(Nf{FuxZ{1x{F3J(#@MeJT>Ou9%2PRFFN!OpsOt-m?TzvHJz#rH(6|Nzi+&UBSb|u
z_VBg&xtFeaJ8UW6tKV%pi7>**sucMUo~vOFIA8|S1l8uZvvK1I5Es10GD6h1$6{cs
z#-QQgaan2DP-U*fLxqfj^+nMn(SQlI8sv=nf=%Yx2P^PX$lu>Y%DWF7Ti8x?lOp-r
zTe#~zLM9%Wip26}Qqq6`)dV3N4`S}$G`|X@G&ewI;V=kjr_Y@6wzWXJ!VSTl$2@*%
z^-6EcX}QwuS(kdiD^bWY*yIfL7LCAf_Is38j<mbwDA+?$5jjPP8tGG;HwRm`q`Xeg
z>g?@x=`XR0+@woi%n`XT`BrZ5$K3q<N$1H3%g&SXM_2ZJe*NI<$B*^%od}+2-@4O%
zpr!$)0K|2q_GFpw=J&|KaCzJYKYsjp6L-RS5(9VzDJ`b!LL`<ay)b1WxMD*q^5BE}
zsxDR>EMlDSP?pI*d_G+-lKd=QOY;4$?rLP?KAWRnGDPHWbG%vcnYCp@N1;9A3P-I$
zt>=wU5wT6ZA9AQTOpY3H3Jn*QzHQ_bncB#nwhkwJ7SHy7K1;j8?VN~Iwo(xPUP5td
zZGYs*``&AB>8!HV-e^6vPSu!~T;j@$OsWr>;BFq<=MsN(kuF1cYH_oG=+{ea05C&k
zm$c2nPgd!?GylARQEFVaopn0GV{r$14j(x(2C#r-<z>>6J`irIN+BL1nQ!`!SXK9+
z<RbwTR5DB?-LF7!OBCAIeT#~UzGxyHiasp2mFs?!Sle%P<W^`UW#hpku0<Sfm%Zub
z>bd_!=!mN5!>5-YOt<H0DAqbL+VeGr9@qQCpCuvq`c4Gt^R4gCEs9<<w7xwrUrcBO
z&^w3xSc^HWfHYGmI15fHQzr_VVy|RbgFD{4CApEd5NiF|SHuO5y!Z={k)xKOuZ@QC
z5`9&P&6~4ziA`+Bjzy<`#FORF)RygDVy2>|&Uy)<SnN$ED=8Wpn(iG1U4aQv`=+hU
zWZBl%6&%R-S$B<ZH?;gv-VT@`Nj$Pwj+-yHsl0nJNjwc{egY9#(TN<p?AWGC3fFae
zL-_NC&XWj%oo(Mbq~9JK3QZ0Z@?!fu+H!Z>Y7l3<gU6;lNeg9G2xgeKkm(>i`WYg_
z|3%hYcvaQy;ldy<ptORdfS`1@bO}gHcbBwugNk%XH(R>98|lssNK1G31~zy4o^!tM
zj&c702ivvQob&lTH7^=XF*Iku`F^W<2t+l&2ZUHO4ox!ve~P`69&V-FCnr(+sN+g|
z12uF2VTtEH{`-9DcV!n47*oL<&<OS_w4p6&yMolOmdTmwfs0t&1I~Q}b^Q&tL{<hr
zg;k&cv?E*u2x(QQ4VGulZ6h$IaTt;Mey{4-o)|hJBBa%uznDNr9LtiDBtgEy#buiS
zf{-PMmV#4kiwA@w&4k69UWV=kg8guv2XHf1za})$L`D$jb$`&vH|-#+l|41-{r2i9
zH`1IAa}G<h*udXj_j~FXl6g@b!>oVTfCn{S8-n0#pRXAQm0N)}DC)@n{hEPkwhGHv
zQEiG4Y{6Qczss}#nPFBkPWUZfE0P+|T~=u*%=R1?Ou0J1F~%#Dd<EPQAhX=r5egDF
zC%|Xi=?Ie4vT?M(M1lwujpua<Y8r6}+BZUJhBd(lW&YZW1Oa$wUN=f-lGY$n!~VY8
zREw;2^l@z9q3I&~i?=mj{&$N6-qRs8@5kQde<WGXIkZJ~Z}PlJJKB&rx{QR`=(6ou
z5bjt(!23qHTtE=e{($deuaE)uE@DB?nu>#+op->(fx`DacwzAZ<8|3&s3Wq(yDl*F
zMTlN;BTOa=ia5rK@qgk7hd)FuV!3wi^bz0?d@%T#DoFizqZa!w$b15Hy_fEAR!<55
z`42ifxEtP@O8e>0Kxt`c{=eVx1DG<vp8ISFi2gtuJpw8}(Z7ZPkgnYZ%24NDf<8|%
zYV=upM#zG$1qzPFXqN8j8XE^-p?(vZ+9Q3K)BroUjgXIY+2y*;zC1@vD#|BR+rWwT
z$LNJ$3WN_gPu8B)vW)*y`1cu6{P!7s1<z;_K;XXXiJ?M4!rw8R!aO@c^+mGCBv0-_
zhzK13?u`Y)5U{sMX<|Kn3WfyH4<DW)6^o|&H<^Q9%d|Kg&oKMf$+ROP|7CouH>^*2
z{et>Om?QF`7$d#L_Xop35v+ewzaQ8lIKY5&xBm7b9#~KJDM7NttPcHO^vB&Byz<z8
zXs8kH?v3aWG*9r!^j~CGg8!e<DUXxzi<#v;iGZ|nLPy9~rc6wkRJ9JC8iC)6!yUok
zkjr>0m-HD-?tt9EvC{|j0pPj@j1ox@AT85xrDs%m{A-)BjAa`KPSTx#ZaYTNCn&G6
zH__$;{_)O_LFN6i><=Jmx#on$$qz{;9hbd1>%n0yMTnru&rki!C>8Y=n}7cN(C;1@
ziI`)4%Y!+NHBb2F-y>X)ZS54fn-r|g==6WzyY^0Oz`HEZ^~v~Rd?o|3n=`6v^MXve
zh&M<>Fj{(i!ZF|^LyaOPef~VtS3`^-5pN*YVsJ+-(`F9%DcG#ptvb8wk5%o1gPQNY
z=nE!e{v3hb##*gTc_q*@#g1^^g>>hY>L_OL7H|9W*W2!=3#P(g)!UE!pEvqTR~UDX
z|HlOYu&v)N%2RDR8u!NQDiFAH8I<3ZwR1XTz1IR6kPIe<hg5EPVsn(<d3^*|YT&B?
zIH~}67(W$QT|59Lt`LFEV)PXa&8sxc7q*cAgB&b2f_C4vHL>`goLjeiYMimPjXWU8
z++f4oK38MZMHzs$ciuf~zZ{;-nY_YikSB);DZ&U}os4H-m?^_ecr4T?cb}jf4#tZ|
znr`*Db8S7|YQ8=ecE8v;dO)?4jxjwu8%&{cDzy^Im5mD~U-@Kl28eG=B0)(_c(v*P
zAD6WZS%uTs@@VTFm^>s}*jJ7{*gZYiTJ>6eeRhkcJ01JDOPxHuI6j)pD}Lt#tD+#k
z94wr_&2)%?uW9jPQq|4vQ6WNJb=Q9~vuP9rJgyF=_j#aCwgy+_BMb+Chef?;XXn#b
zWqOvx2aq1@|K*=FNyqU<uf^N!akVRdEFInZc5mtKdUtV&jzH;GkyTIVys}RTMW5%#
z?Wu~&_3xWm0cc#7zrQ3$hhNX+Fy7hid^<2zD)9N5q({SpTi>oxrl(Wq8PVIUo2DnQ
zIF)z)nI%rxZ%Zzj@C#qS?Alvq-KG|+2T$K>*=AR$(I8{@6`D1OP3O|9V?D*l*&N_7
ze{eepu8l~!L3aF^1;S4f5|ULvu_uPSce2>LZ*Ckm$0i%GgyI>d3zf39;|K8z$qRK_
zef>Wwot<6OL?dd}XdxLC;P0SEbJw$~IO`_c2uHtjTcxypB1kSLfir+m(vip_6;9G_
zxzBwnGyij&MOU}doXG`Rs^7v2_>nVT%O&mFz>EF$WC|n>x@;R3gl1KcLjuiSHCEFy
z4ZHjMcfk1#d=7vGPWwvL;&Gk_q(QLVuUZ3^I{`ROP%77K%TlAG8jb|rU)!B6xA-*M
zCF>I?X&*Oh-FJUyW(JF$k>&pW)=RdvNRrHsa`a_YG6QO;lErFEk1Vx3ghKyzbBKUm
z`ePsAW)ovF2UCh5gCDRc5-$7Qbku)Sc|s$-vXSm}ol-yh+0i4!xJOfW(d*>LV}eyY
zgN{c!ZA_h4ocmTpcHYDL0`V*E@V7onQGbA%HB+W%J^fOA{K<ek!+D)QINQ(hnaJQy
ze*#24AzB(uoV_GFI`W5I!1H|t&GmKMjy$h`i7rPjx)UG8kZAvI#k5fm=Jo9x43o6Z
zVMzT{X7K7l9Gzo(ghjWa1Ki~c9TR|(I+hI9AFtd(WO%!6#3N1H>#5BO-QKuL0#u3g
z^9uP%vw~gTn0XXLXga^EK>4;E=De?6AcBbUI<G)zPICe=__!{Kd3K}yf!lao#GJh;
zOlgq5WOx0*@9`O`Cu0%I-C3>mCj35DiwQc8hn)Djrho;K#3~(M9VW5Gy4Y&(SFDg;
zD7y|sOANWM+zht5dGza*fOir|SXR6ceHn|!WhE_X5Rxw7lqVXNP<73TMzmQx>wUlR
z>_2bY>o3y|=Gn7U)xevTN4OhMQBcg?fJ*Io-V^^5=$)!Xsv)8!LVn?vPNeeuA^mXi
zAcLFR9vJK1Q@pWMWEt>24ZbA_n2&v>prDAGdz)SUmQ2uBIa@S)NSLM8P&wwIU8K!h
z)jZd(;(f>qHj>)Ub5(d5L;(=od_@kDzyn)WX&9f|kuFf1KzH1rh!Qk*0Zb*)i&@E)
zq&aI|hkhv^Bn=9M^JI^O9s&XNh;H&aRjKW9Bz|Gcpg}XsTVmiTMMzj;xoV-FMb{P+
z#@dr(+ccuhn<p6l^8~-WMn<e)MFmBYq{^sR<VFa_+)x_X)-q5~V|v&tpU00;nQaVJ
z+!Yk)=0V>Y>MJ3#`V{(&sDd%nAb+aciSX?FI~YxUAAo8PstR7^ki}gNCFaQ_$9$cb
z=*7G()4sV;*b3yH^`+d}+)b9)ep}Z5;HiJv@%+v02cyXfyL4S%$B&Rxur1XAda^{|
zdL>{cy}87oO>V(@GBV}9e&ze-&!1!VE3LSr?zrP4>gi3d7MfF&<5s~r80m8Gdtzv)
z7>r(k`O8iPVy)^IO`v;UBD1q50wVuJUgQO}Tmz6Li`3YRVtj`ew#w!j=w|4IfpL)8
z&Pdb<FA3=mi%2Hj=squ~*(>+VPf40`=X`reqa1t^lA4denW!B>Og>+^1dW9lG&m=-
z*lSjnh&4J6&pg~1DW=1~c^R8i4v5`&aApAO4<Ps*U0ux$FMli=8<n}9Oz+S348<qv
z9&ww6;su~><PY{9HeYvp*qnxf{+{P5y%9#QQ^nX{NSrpwr%0<S_b@&lx3_zq!?q6j
z*L?C!qB2Gm6l#k!On#!a)U#9YYa#y40mP&xTjPO?&6(lVP8^h!XA`kBooPRHyYQJ5
z$@vVCI8MK?(N!y|FSUsWQCSznUO?xn&14eIsSOQ!3TTtr&2^id2PV~uU%dS=US@`l
zJWL(=s^Asah?LB4U$9(nL)wZpz!(4a?EJdj>+u)3;r!OHgkiR9+Is%J|0w-*-9(ww
zBs=2nsMhK$x0|QdY;N6qlXk;i=ZEd<Hka+uCi%AetzV=I-74)Fyl!pUt+39suU%4h
z%Wdg28q5*p9L9e{23Q_|cQD-JJbx^iVKGNALBI6<X@i~vwH*dv+^-@+v4GZFq>?`h
zDBj&I03%4iRd@jOfx%;|KidB*9VqPa0v9u=VysyU2nc{_JC4Ib0mYNuKDF6-vq)c$
zkDqs!FWw5Alo)Zcmb@pYu{3Li@IEZ^nLG~;dhru3yba>IPgKrgD&@b^0?;kwGrHw=
zua=rSpS;u`0tR9X8;q)YwvRAA_mkID%)s7&AKwNVLRxL+ssN1(2iFv0l)R*>2X6sP
zGO^{E8+Cwg2WC^&Kf}{lk?8^w0`pz@j=2t9L1rHy8Rfi=_csO4V%>=%1~2?H%GJ-J
z)-X1d#3a!$F%N}p8r(+!{^{}I0Gq_V56{%7c)C$%iroV&ky#0(1a!k0@!jn=#a*kg
z{u4RLO0Jg_m8d35=MS0vh%TlU_I#b@WP{sj`5u|Wf)zm_*{5oc7QL{1vBo7e1jTSJ
zfAHnt6t)W5hR9~eCz7F%aMKlE{m7A?_+(kYqX}}D7Tjnw`t#R?(CGc7pKS9FGWPL&
z|Nb9|SJddF0vy#h@CW`_s(0^h0GB!3@B+Tr@XH_x1Aks|ZDT$n$#S|NTfuSl@I_A;
zCdoKtMZjZ=aY_fwM1fbwvlVuvZCiU0B*Qrvi~0y1gz;pN<ih$Q7iuD;vS94~1SBA&
zi5geK_kWpQP-hOzVcqes=l=n=3sxDbPoT&}RP@T>E7EygBQ(9@x<ix{+a12v<6B#u
zej%zw3(O+}XTZ1ApkN{29tJ@m&bJ_nY2MfrtnQikBs27tpuAgGtwR2Mi*%s|KdOz=
z!*O%I#tON;aBS88z?3<f*F;iEDmG2%eGme>5KGmy2(COqdHBD0>dinr13_*%XhS&R
z0<;2N>t9v|kke0B_nsMYxjW)UwY`W*&B!i4ph`_HCT;P)EONg;O)?VKV7}K7fQ3q=
zFE%W=W#6Q+4V*lW*s<o0ffE1@UXuM}*WCC9+yi(W(ZirF<az&IQz7l$X+mxB-Q@v=
z5XbV|T%*UjpX;4nmRA55lt{p2S%7*digs9c$Bk%`kC5<0?s|Fft_#4eZp^CKX_3Pr
z-yIbvac&M08k&6dkrd`+{?zih2D4(*7b?#@CW0wnO`|0-o@Ef?2MkEGbCy-A^r|E+
zsw*xZ#|%)zOp%@-MWqYSF?xA;p1rTJi#-O5ZT-fWouM8UtD%{VZC*l-@6o67M8>Tb
z)3PA*D;%_aYzDW7zj~E4r(};tx;WYS-Et~`Ydue{RJl?NSiPa--uKYLH+_n_ZJvi0
zjZTbK#IAcjmP;j;V29m3dfNE-XBDh87K3Kj-9fcIv*8$Cm0tklZjUT9_zLpWH$;$T
zaQgISK+@x$;WpirX(xlQh3_%=_-1eI+8hsI0YixamLFQH&5Cu3&AXahCLcVBH1N6V
zz5TbC0yfJ?=haFz9pGzJvKpoMqg&;>>r?q&vx~iaZWL{w*1<gs`*n2}zFF9(E=&wo
zP0Vu1lev=eNwkc266pz~G&K@8n)a~<fdd_f$OuY+Oauv(WiTQDKSO%?B5^LTxBw>?
znB0eAsL+wR1VBx!r<$7zzZYQF%Yd#qn#>_}4V8hVg24|^sDQ;C2LfmV_lgW9v(vj2
zy0<DT;v-f<^GABs4!BbbQx;<dd+&{QPp9(54nv;k%ss~Ez02{Pt^<E{79=<|^B7h0
z%}4yDA{n*Y))oW8I-SA@n3P*(;uGYFn;RNF-MeIFW(Gx(8Z=wt=CUmF5in~4g_ylG
zg<C$EJ)o}rJOHvX=(0~ogy!-OT997?{dBRc1-9F@uXx~t+wO}}InW3I#mt5;zS|Ux
z#Dan$$M>RJ+S6fgH#0>dLzj1<-bSmd?;`QpXPm<iGW}l(SPWK&UJk}j+$5zfFUO4>
zEw?KUfv{aJ>?dp$LHM6{K1TwFN*5X1qsiIQ{wQ2U>HtYUo9c>72G*_x7Jc!r)pGGW
z*s|*=m-BU>eqo3NP|$0a>efd-CJrSst*aC&#|C1)s%f9Tc$}}Zo{it14G<@R`I!yH
z<SMoDVOq`3oIYlW-B(Rp?-=flwt96kV%01V^ruE)<#m(Zs=625yOF}WcHRtYxE}Mo
zwuIK(QL~hrq35JW4&MC>fiplpPNm)e7{<MQOsHwvfF;v~07y1}ozcM61lVv6q#-tA
z$Ld5I^90u)duK?2QGa*}DR!WB5xr8%m{ylr5_4x#*R?BcUWsj9h5YZ&SYeL(%>&o-
z5hRa#p>W5%@&|yvr)GU&&bvvj#O%rg%B{^V4vMJ>yI;}VE|wG&w*&aC%u=|lG_U*~
zaqFSL-%~VqLhkFdR7Djto3D>nl;i`O3lp%1L3Q(zMtVAq{ie3Bz_f`$#Fes=#_k$k
zH-J)QHd5uhoCX`we#%pSw8-VTgOf)-uTyt8-|DbG6BI>;PVseq^F>dndf~^f+D-%U
zrag#lt`U1ne6BxQh$SM4F^QiI0rU*HG5v6K9}osGe#__EL7+kIm@f->SgD;`&Q>8$
z9hb*H7l0Byw8kfnC%LqcIG6(olJKRKK^>C<;1h?33x?HR8wjl~q_&(~YqX<fW=wqe
zmJ&$CprJI3Yrc*jnOHbhtTsg*!z61~QyH6&Hsq8qpV?C5GkXNq@p<viOqo))?_ql(
zGYxO0d^kOQYW?v~6DJsdfIc^UWIUsOI5BVqpgxfadDAP8lRz+%5kE2HbP2;O=CRqZ
zm$)oav(jifcFy@97f@c7J^8_Qrd>8suf=f_4BMS6(jx|^lmYy8mZfCYydDx{9_>R<
zZL$<y?~an5L*z-ge=6A0FQD;UlMBgtCH7j3B=JX8QHAY^uQZ#TgR7A7OEpC|jVX%9
z^S@l-?4`3L2@Cs$h8xGdRtTsC1PXGSw*-1FoL0#E_s1d`c?gH%O&s{yX|C?Dt{eY#
zPk|oUU<HL|S2kC<F_)dd5#@s;q*Bv7N%CP;YuzIB(P$o?FSgO_`OtLIH}0jG^YNFr
z$Js}wbU3}a`I-+u=XYLSjtX@E&v=c5`*iuK4O4mrlBI%XO1Btw-*Wn1n7LhahdBDd
z>3l^#e?F;TTTdv{rqY*|s)kNZVROYYz|$cbL%b;f!0k`?eR0Q(zuC2znz6n3#sJs*
z>GwP+1ykr__)Qty?BZo^7J%O$0=K{fX?U<fcfsK_*_{_b9C{49IwT?Ic+V9X$fOOR
zao~!qw6Wo_{;($4Pb(eVRc(X0J=4Nu)GHx7lB6{mMC?z8^fQQ{<geRma*M6g`ojG%
zBZ<b-!EtM@i~<Z)Hz9*Kz%0T4`A-LM9oPqNl{FKZfeKPy$BhEuO9ssO|DD>#yi9BX
zixZ%65Jm^;OjK_*{rTn)5BS%>f5@JlWd#R%2guVH4sE`5NVR5GMQL(-{OWdPv*$Lk
zx^~|qo8-I2q|JELi}TSidt5>|e(<r@d3h1YLTAlFez(Kb;{fvW*e=bt>0qBajXk)1
z^(_!Lp3Vxmcpl%v?t;T@HJ4&Q5}7S-2g@9;bJ#pPGaF*(0uz(vRBrLj;(Ll$%zBMh
zk9DOyb}KL7^n595es;R&8DCtN$R1FY6EO_L+x2c%lqgEXcrpEQqUq>SLlqzVR`XrP
zTk6)rL>_RyEIZA6UvPZx?gtW3FuLHpfY+&*K(|51Y#j3`D#vh=bgac_DvQ3;&JG)F
z&g<k)rxwR_`x@n&H;Lu?Q(ohSr!p`<rTAE1aFD(C396AQe9R(kzINW7(r^?it5~?R
zTTri8XWILXAKI?kw8o{PP{0|jXqB(RaEVLt^}tp&t_`1A_ct&pSpjdc@YpQq(Nm0y
z0gfzigyGYx?tqG&zDtMUj+}v!qpIYA`ClaUb|HP_*ZUKCef}yrAC?<LAGk=k(Ri@Q
z`In2dR8EmbGak!rXYFEGEMTMgl0m)&^_I{dzlfz^%H;a{qbcl@MQT#6$EJKr5!T%e
zr!BIQBD|lk+a4~&mtyx5S>)r{b1O2ins;;zPeXT5Rs7$%&8wc`?z*^#l*sK)?ky$v
z8g*+YTiVP$Kd<w$7*fwS$0WthQ>J%GL|aIQ=l&>B{1v;r-CMdKBlct|r$bJdV{0TI
z`t~RT5A~)qh3|)$xZeq?sTzrcESvqzJ@Wm<2SmXPUv8V_DoxJ#V9B#@L6VZ*_GUDk
z`yM<SBCb``0C~Sa0(^3E@@9WV1i9$l10Mo|!bEWPR<;^YnDKv<;6*0pk0duc^qj3p
znB=|keO!HG@4C|Bvrs8D7NJuY3TZa$!-CQ2Wp(fMpmRkkX9+j!)gN7~t;Itdp5_X8
zQeL)(<_DP;6;dsq7|8tkxiW6VFjMkU*l;_e^<wHwF80|QsRHc#tiUKwZ7PO<E&J7~
zO<bucsC!Xr3uRQxirFjf37Vm(cbcl$2Y_q5WtR6!sYBF^$`DxfdTN`e9RYt%V85$U
zVKZ$7OXl+Ud(M83cVLoqaG)=Fmc5~+I^eb#SEyn>y5^>2+p@e;dm~TOr?U29ZJ)<}
zkJHXm@d8=l80qEj-F&b7$S#zN#9`5{N7jf(mCJq_-O+Ep1)w8x1$oWEWb5^EeY;;5
z0;4rZtR|R*C<wV+P`%4BfFO2BKIJK2X`v$f^4EET#$|mfojE;G|GCx^^U7v94vdEb
zdg-25lkNf9h^^*@Xz??QTDrN$$oM3CvAE<f%5`tbZ=!Ns3#=h+eBc^pgGaDukGmE3
zdeJB(>XSEVMt6cy*G%$#Y7)=YD6@lCnacr9Q~Z7QyN4b3j>78g8^_*vk+%89Xg%`2
zDrpY#JwE`*YcC=+1In9fXcIY?9-14^U^o$*K_~F|I=Q*=%;W%D0w9n;Ecn^er{fP5
zz&3;hN*S%xa21S<*EipC)HNPz*Zp+#uK-*ojIArMNH{QZ)7?*Q0e^%l{ta7%1ZL$!
z5SB{m#)=k4GIgI~dJJCDyS=CbuFp8gfOagxi7)vmef`hzWoqp^m(T4v+m?WO(eu2X
zxQgSGPs#g`p}Wv}cD4)(Bp!?O#dYFxzXjZ|59VbRyh`Gdl`~ihKE*}b7?RDE#wSSk
zy40^9&{$}#S%@pwce)F7QI$4LsJ6MZvL(3AfseAq=E)Ir$W*oY)RVO>)LD9o!u(uz
zmi?8j{rPHp_6wD#vc#qGNL%w#bzbZdn>ytD`F9jDVIbKA+jLwTvxGcDzg|SAJvHDv
z(O?%WlZg(y$>3Jv!N2tadvRtcBHSE{w_yag>{Ogfv8vIcKAz{Nlre0~V1Ld0le6Ba
zdi_ZJO2GF1-Kmxp;~q)U{Bzr}EX_;3yJ_Z6<OSOK8L$fXNIq5inR~DLV@Uv0A&&w2
z3$BMRJc$dY^U{)q?e$m7G|COYHWMlAHu!tuRBrarbcsmXJB!-Z88uzctwxlmOjqGS
zuyX{X@=$`2-jUO0Lb(sAU~NyO9^Ql7S2H3-qT&4RbsIE~@KULEcTug+36rr^hVb-X
zgu~TJ;`o|hiyYd9H`2fb#I5RQSdonx+LW_N1H`89-{5nh<oaBb&4-#W7ReW`wDhc|
z^H-Tovz9JFwVb|t)IpVsHHwwiORY6zT?4`YdeW1$mTNU+VWu=X{8#90ZuR!TgU7(@
z5VK-+ux-tkZL&z49Cb=Gg$03+B)=)m)HLcpi&+lsICj&iqO!oU>r?sAi)cE)Ac=j+
zCzPI`btzJ9GWhOlX-ody&gX7(BvxkuN)P*?q>1~A*Eh}gErT^YEn4sD6i;gPBqIR`
zq-i|DfYvHp?`3}|(XP)BOOHh5v|q_|t1t7vyE5A9zCH|oXK?;}7&QJcZU@zVj~B~Y
z9Z>YcvVJKC;aAlCX+PECQ79Y=hVmUC^+3^Sy=PT$WxsA6<)W`8N9>TO3&4uNt_+Bc
z1S%D3&xc*7?X%e&ls~<V98F{QziV8qA-~wpWyc_Ft=jQPPpGB?yHQ)A!#sES6!9HT
zo*3B8H$^}e1Rd|c@2SySjOJJibpTI~>BU9M<B1Vh7urwaacZoPP=AMZXwBsTO_kEd
z%b?Qs!TZ8TCvZdw7|lB`|4<RO0}iv~LZYfx1d-T1r2_QNpsEV^9zgxl)D7z+Eyfxx
zNFV{DR|%-c13r#qt>7VPz#aU(fG^3G)g<-KqEI;qNMkQ1z`RtrF6tB54<_`p&0fqs
zYmzT6*ULT*{QD}6%Bfo;lU_M@WM@lm3$DKOFE+C>()qVfX2!$Okf~V|75AJk<RI`l
z5bXUXHf*A_-T}m^(dNzmosd}f09uE&ZgJQp-DMy7vsbtRU_=0?-#x8c@8T`GMIXj(
z7B?76$UTh#zC+s@k_u{b{v-boX^_P#Z@S%TRy-S=ZPU{}sK#s{lpb_f%I~&&i1`!)
z>MCa^7drU0w&)gvm`zzTZ{$>?mUy~YeRsK1{Hyov#jc;A`$ljB>ui-}Y$&J*myd-3
zpP&<5uUk=Sf2RI1U|q_^ps&SZTOnd^CO5$9au40QV6w(r^a7qHlrBo(`n<}lk}_a_
zx+tEyc5f_|+k$!J0Uv0Hxjs5Vt;Hwq4lDX#xSu$ELi%p8$;;wU(g6Or_dDC-szj?>
zd`40ssUy*{J$JMnj3dg?pSG8M#HFOLo3xu8)wb(w+0BM`4h~u@s_lVuvllctm+8?g
z^5+<=tVyWmlfRY0JAavZ@b6AEMT=_&>LS29<OOAb?!Np-K5>8-;9z~D^4HQYuG{j8
zgTC_fuP2p4%YwGr5wrhbc;6~7>WFNj588V;ZReTRUjO;EBwSuByK<sB^AoQdbU*%Z
zCsVl$?^a2c1Q>zfy5u7&0@vqJh0$5NWkN0rzG^`)I3P4EtMldX$;6l3*QK!R7jjcS
zJB{}%HT&>9!)$dw^04xEPMp9nTO!)sNUrv76lrUz6w0V;fKT1~J;L>>>MwR@xZFn5
zF7$k^+8+ZWNNH@|S*7sUEKjza3J)8`ZTGB4v{akj<@>g#Ezdy&{Z>K!(JeZGiz&jJ
z1byUQ&%a2d*z;c`q7IPATaUk^7Zi~1)MO`dblC(33C|<?lh3z%{F7mq2THIg;VO$E
z8L9DXY6U#%!mRC4?Fx~5Mui&_fyJdl%0zw(tj8}MK0#PYG=-m!!N>>KYbq)KlrnvC
za-xrf8fI;+H(#6kn)uay1Uv>=HUVwFkZFIhIclTigTjq};c+}Y??4Q7tHa$DREv${
zU1Tz6uEPWDo=*(Ks#?%~W$}p@5`Sd%Yr_Vy;FVrkoUY#R;@$PGKFJ}5v;I3h$-EPx
zxse686Eh=bMS7}<U&t)yN589sVEZoZ!4*LtV{&BhBpv{R6zp}l`=-J!*-CM$osbHD
z79h7G!|kEi?aS19I+eEsD9`$ZGG5>ch4+Nv7pi0jS_EFW9WCYiBuO=c4R*FnU+>zR
z@*BX&AyNiPb1k-ETkYGUm%A$CV1?fp%EQLvSyTd-QO&u%SFo^6410h>z|mN8LfgIU
z5614)xtW6m{8yJ$HNpLmeW*n-J>bS&tfxzs8VXslDSV1233woGf}EVrCk08rN(K4c
zvf|#<WK)F_WOIJ3k>fQQ6!KiF(`$B#dr=U8V}N5ZnWPjGo6ucLAtUkN=}geux^?&9
z2D5&oRnK`GU+rwgYcZG4$T_Va7rhw_K%ev=ghpqhuXGzZ*dH*}KuVS?R&NSb=8tk2
zX&Y5@xj{A6(jDfXO|khI%c-1+t3Q87Zhm^kpnw2DkE`%d_Lh;+RGP5_uHxDVYi?@s
zIs$}G8nlBTwG3RgRf2;+1SIU=+}u>-koo$g(hV>9+ed{IAX$R!JfN}6(f@@u&Wj6e
zYD0i4s)RTMhr-uT7n>iy%*I&F7G(N97qPoLS^|O5QtijllwYWWA6c-%_}Zl!JoXl~
zB9JOHq3^<T&$rG*4I}nvivca;>nszr<Bc!_@Z=SlKsThpdJ4t2O|`B>>uhTP44!PO
z)Gk56sD>j3E#K>RouN%0mom!~qPgE6;~5K092q@4jzQ_SsyvQxrQaA?XR1o3F0W@7
zNv%z(&_LZOn5vW&bQ)V&x*-4K0!~)U59iOhIxjBiRB{SFmK{Jqrk74nW`WlgG_L$4
z)Ae=g3N^bBLLaKhwNfpe&vi4%j17-`U3c)i@YIp@)gf67GXuTZWad8{F&TP%Q_s<`
z6C(Dene-~zqe}8eGw!x6(rMqmeJ|kp1IrfB-82UuRI4l}e~JR#(L>MW>RW*9_SnmW
zLi>0FnJ;`--Wuf_=Z|i7vk78n6>Jk0OG;}aacpl|^H`_%0nc??o((O9x2s>#h>?P<
z)pYRRrgCv8A{cX5yMp{{3`7y+1~I_Gm&*VM=-jLv!y&a&$7VPuY5CpWGo908?^SIM
zsOGraLC!A6P5pJvoRc=UrJNpV=SaX%!Z}JXd(3fBycT<(X^yhr{Y0s~ux<Orz*N5X
zYay;Ue(sX>Qj2IY<igX-LLEigi_*D@N{z%(=;G6B<rdvW*H+f&&ui72ua1iKYtb&V
zPK$q!uZWbs<e+01{h%820z&xHp+B8sCw)7SJ+s~ufHz;eA~1pP3M`UvMrBm3jaQmT
z5`E$FK5%c78}K_#n}g0WEZSTtX19q4p24|YB<Wfm|Fh4T%O3~I^()L^f;ut7xQ##?
z^P+Z2MjOCN3J6WOy*qY{A&r1H6LL76Wbsz-K}+Zu^JS794`X_unRNGjMK8zgXWjXT
zNL$MFs@|Fn;&sYfwb3X**mk!!-OL}GE5!HJ@5R28aNDnDC+-|CHo0O#G>d_I!0b^Y
zg$8ktV%ouS{cEe&<?gclC%Dy(>O-?<t@2CyXKqT?Uh6ZqzJf%j&a+IZ+^ew&6FNLT
zo$iBOo$e_=#~{ax%{02lA6%oQdXL$Kkgo<DfvR3SQ@YJ#ec#frCl4uV>20=~+R{Wd
zjJDmMRqj#K%*#3@mk2u(m8g0730Eau=FvFrJ3N5v8En{2zco}SCg!p#D*x@L^3-=$
zIVZfi>2-ieTPqGz0H_RtsJWikt(%+f*+npx+_RmPjcwUnwsdQW04=v&M${B`8~Qx_
z1t3$frInaBDV$D6_T=9%YBt5Os4y@$s=t<qZB)rWQJDlYt1O5rnAKW5A`1NogKgX(
zR(ye7QAZIiHMo$hZuuoLTQX3+5_Sm{4j<qDpdANH6CSp~ZGT{{$J9jW;!!J=UghI{
zjh+vIr*8t!pRX8SOj~wNXvo!sU|JoFG(mz{SWC*l$mogHk;3kTe@vKH)=c5!GBQzW
zGJg_jtF4l<f&6@m-P8;53mMvbA~xgh%l+9xEQ$1Qpa;p1AOIiKGZEc~ri=pOHa}Pl
z9TYqbgZr7tkj$TPX91fgU~HX$(X;NO0#N^S>dobi5b(qJRAVtZv>Tc8b`*o+`1JGr
z$}{xl>$CTIOPk$@XUkcV^MWHMZ-3p!=4%hNsq{uZSNtU*DDnmc(+0{8)6JsE0t~on
zVa8IMG*#))Y?)GE+_1X5AT3~ydh*M1#yAhFJFDEq%C%x?WO`@D{T_c0s1V0~IcTYu
za>kVMT>C5Mjb%OdAJE0Rn+<-COF$}&tXObU@yBQC@i9>q(E?-IyVK}Bc0qnOdV{(W
zQwv=3C*ze!EW^)0$=Ro=1AgZZ?sI0v8vA5l%#@esswUvCm!l_h6a)b*0;JMY9!RVE
zujBbz`;}@)>^~~VR=>X(<dNrNj{;_hV+*d=&}chbmicgp#-;09`sz&Z?R!UUnt+7^
z5I6zOqqqs#Yg5A)p^yJE;(~+Nm|5dzz@J$D-UAdinVP;u!mY4z6z2|OIGwFcv_PQ_
z^Aq{v?)e35=O<X)qU{-i3K_f%-n=TsO<)*W#yXS6>c4olezU_M3Rs26SHi#Yr=yeF
z-)%KI<tZd=Fu?2}+`hUaC=uUNN$PAi4dBpVm3szt?xsqzcgCi-Rc0tr;mN_)Gda@p
zO`PGqp&Xz-hs{LIGK|p24kc8&93qefhk|J;o>@uE(d<k6VBG2uHaU?|OlO~BMsPW-
z9;nX_9ua)Y1yP~j(s~<b!qq%C!!MTy6+Wq7+Vy`w$iXS_p$jPd%imDww|N4YhSZ4n
zZyD|W?3lrgl8^La6mNl|y?*)+(ui&egb?6QJN#V%U(Z+Mt+JSM<q~1{Ix`gls-77W
z_%PN4{6t-9t@#L7nw&JM{j&Tn0qX1a%ipL9jKkd#?&<UUs1ALX#iJ4VO0d}(U&H*9
z{4CbtZ4L1SWDTi8{}aSLO8+bTCe_W(VkoAkYbm|`=K*C@_==e~+Cl8*DBvHraRy25
z(ROcrAD4!vRQiPhB=$NviS9)=b_8t0AJ97CY${6iN$4gD%jmByOlwV5Gxn!A8EC->
ze5Dwo#B=dI`c1bBw~QwqI>#fKAkkj*dLOW#B?;=N=jn+U{&cT{HcsVz5V`}O{2z$}
z6B<Q!r?qA(6hkc@;A?%7Q0AfhM#?}$j6>Q7$@?Kfr~bwfUET!XG8RduCRPZI5BY>r
z!T5{C=X$#>22n?Q5uf5iUyhRUGOBvTQcrsm9iS&NKQ7VcHCIY)0|@#ys`2rJ!oY5&
zDi<co|F8%AZ70v(>fhWJE8dGd{~qPUlMFfjLV;|DJktx{+8d!U-=21KcNQC600uU0
z3a3ca895F=Hh${;t&i|Cs6~m879t-Xo0L4S%jcLq81~tfi<El`yPX-O6;kX=wxv}6
z4;8b+>`y-W{V5a9jAUmZ7_{B5u1iHI=98iOvW|t6qlj%Xo$AGvLoH}t07LcBZgtYW
zmLD4IE$0JhV{CE#!J|mFXQAw82aI-{SRFCx*JPp0Mbo)@{FfSeuVj59?(t}2mGrUh
zvo$9kBT45fJciD=tRWAcUmfw)o>`q3$cB#ZCon(1CJ4nw<cuWFNzXKHbkuPz*iveD
z*=FV-RI`wbgcPhJV(!n(xQ`-`hMx=+G>9P^GY>Jt4OYBxs!^>Lqd}yKuily;xYky;
za*H(r{LxRlT`s=i=E)yVmN5xxYKnU~f`PEIK?VLVY|z>anFKa@6m9?${EV`!c^atY
z`b|AfcAgv9Eo3$Jj`CVD-XxySJ;HJMF#hJRIbOJ!+-nuZ!EpZyB(?}M5epLm{CnYa
zDor&oBwFXwP>3llw#)B}<2e&!Xg7xHRIze1^Kp1)8xb1P@J0#Gn*gcq3yTIS2NP<M
zC9$~BbE~~S?M}yJ2ENyDL5|;G3Ei?ED(v0mS64eFUL8t?la#}Cv*Yx8{{QtEaFD}V
z;Dad69cv9Z&5P`HL_CN#PZ)1aG-(8T@Sw2?wfw0ZL{vcJ?F@?(U(@wyhP;np?MDzf
zrcSy4=8B^4G>-pRVAzjpNXqN`%~C8L^Rl`TEo{r?92fJu%=Xb}Vq&Sb9vF&>)Cz|o
z8SG|gm-Vv$Ij0ekuLoduE2D{Ew(UuzGv_SQ2^xD+3v4XDf?hlBq?cK-R#nB60Ule}
z-nTMW2qo`c&g6`heiZe|Jy@p;IZEd%dNjJQih~s-YBfk-vMnK1bVo;J6!;pU0rqNt
zd(``(h*<V;!*uJbCpAgkQ%O*Il@QxO=lN^WqWEJXp)e7j+h|fD<MDD7)<3FY*En3s
z#uu2QECmPK<gYK5mtJxWLv!;_Lz>!`c8VJnVv~MDfp04Ffor&dxy^8GUOrVJqzpEE
zig+f+bvCakNWXb;WuDi|QyGgJ#(;iEQ_}-VIVN1~LpLg;va^I#PcJ?5!%1<iA4Y*Y
zWkrG`QaKseUc6dFa|KJ4OXt0~?I(RU4d1YW(-`45TTf!_@bVV-BQHW&VP1>&7^<P|
zN^6is^;N0%o`;ww@QA#O+QEtT)xWtD_JXf%9WD?nE+zbQjDpFWnr(^seYf)ddsP=5
zvogWN)b>~*5LQ^C0$wOeNG(y-${9U)9W4^i4vl(6WpoQDJq*)}PKX7_2`#?=%KJlN
z1VfQ442b!UZl{yL;k2t4qnmcL=tp41W7p(zXeE@jv;2_6@e#oA>{GMCeOb+)f@zVW
zH%^<k_qSn@w<^hdw7oj(2#gVT-t$nl!~rbyuw7z2h?dS?lyDODBZJmAx8qa9FsPRX
zP)6Vc3dy`-zB|WsN+q<UlrIM%2Fu}3|8qW~uo9Va_?V8QCHvJ1U7t_61`sTD`|H-a
z(8c4#zb6y+81#E%aBEQ*L#$%Zwo<Fm`RlH!z<1K(1ScYDwNUw93aud1pxq;EoWIk{
zxIn|PyW{IHM#;N3xpL1r`~w<z`tk0Op3vHSEXc!LCBPAJVI_S~I}6TsKc$r56w0ee
zu(lz}y`VQQxmI@-t1faAr#7WQ=n>=QC<7c>II+M7f!|`ToJIP%Xb_n%#A`CO@I0(4
zna#&66H_a^x43ad4C<Qa$o<_x%ijM~G*H2chatr4<S#c1KF~sqo;*PcknNEs6Q@vr
z2wAhf3k>K<GZ#^NYW2+{x&r7Lc(;RzbShcyN<|7EB@}!Z6aRZo4VLso14o4Ia-083
ziF$6;&GMdF@d=`)s`OE@<r6&S>bzvB?)*P+)<438`JE|AiTU|Alo)AX$vm6y1Gnoz
z`%n#clhS1$q9*VOrWMV(aoeU}v3B+q8J%k?3@5r1R@3seY!C5PNs;5Xd0&R2J|}gm
z$S07OdT;i|NKDpYCG`dt=s?-HBMs_<JjE%=0*Vwh5M3~f%EK)JSF^lv`H3fgr@9Dh
zvAac5B$h5UTG;;u$0HOEusSRJJKh<<Z>T)x#+^4^9eSOfy~K~_O0C`hY;$a9t{ez_
zz6j0ve;i}x7If+JHb!Elc8;_w%@0oy9|F$3y7RB6OSL#=W;2QVz=oe#s{f|EzITpp
zbT*OqdIcHwrdGc9r-JvTxGidds$b?Ae(fcI@#o7v6PBm*FA8}h6J91EH3Ac-N=rTj
z3>vMT4=KxjMd~L7in$$SK6j-zZeKs2Z>2BXhsbJ_g<kgT6247LmClO`j<3#pqI-Xn
zf{oT4#61ve4Hv^zoS-kujU?p!)44gchP?$2`CTc^yw16w%dK1))W!a5!q4}9v?9u3
z%*oZuWlgm~+JEpO?8E(&9Nz8<a6*245LEW=MHZq}Pm5;H0oU_|C@3hbDKH*grt-8n
zOQKhDx2=Wv{R6#a^B67wP6JT1NW?Fx<7HtA{sHY1rSce7@Ler{>@nekzqre&yiPrn
zPHT!{xDnqP7QO9VzSle_@hr*z^Z5n<yHcnT66|_sQM#q~$EUb1{<~mNq@F2qWe=;l
zqUnpSEb4swxg6;`b*5T9UX2Aaoxk7jhamSYrZJ3^b;w@X#qMp$=Zijf4^J5~oczJS
z>gw~V+w-DX`;OUho%d#fnN?Cm2ir)XllwpS2wXxuT~IIf=rUaYH=*^+tkD_<^Y`)C
z%@rL+*J#|koyJ7k=|;@r^30f#uh-n|ieH_^eXql#@g33J-(C}z><faj8(-OmpHy1?
z7DzDR%I+Z-2*0IY_0Q``q?nyxqJg7e-+J73Dnh<}M~2aJ4%YK>@d8h@M*BZT<J)75
z%-sZ<oD4mYbqU)Yt8V}S_J@bR-g=?fnt+<XMW$4%s=@R&RIE1Iv#^K2lKoklG)kx=
z2(7*oY>UgYj5tkkmnSMOO#P?;19B|r-?jo*fV`D{;R8oOuYRApP-Yg!+<NzPs14k;
zWVxJ{!h3pYU|cE%Vg=K-^KyiRC6S@;*KlhijL)wQZJV8^+!K43MX&aAB`GN>lkhV$
ziSy<G$m#y2s6*-UIe1KNMBULa1zJeLQ?OE?zto6MfJx4;pxNj&rvLZ_Arsn<jd+1)
z{Fz-bn$p8bepY%LkT@e4)Iv2ASA?glF*lE!t4F@>+mV2k9MeB3hgI(^WkY~J@lzU?
z9!ZZMC3H^rirdZ$&5*I*d_H*lx9`c0(k9xb)}jw4d@yl(o92&hT6zE$65NdJ1u>;(
z)(mB7Y@YoGhm~+4P9c4P-Q6)RcEy}<j{VUO$sA@IPK<({XEhZ{UVU`f*o551z+p>#
zyty75PW3*nvUY?w)3%jPrd-nFFOzER1(?(&_DIkP!AFt0n++%dRibsCK81`bU@<hh
zJ*ixeLDWQ%%(f%t-xypKG@r!Nk6SOO;5LPR+RM{rb!zf-HJ)eCTNAezq8QguTCsj2
zRoXZ)$Gasf#0h<B?>-<L3K8`FG`um;e0`X>C}H0Nj2~`?3+<k#o%g~l$yOhtY0BD%
zZt!%%blN?tZ?-DfOk4!q&#y=WhqH~;Ovx3cyQ9h*%cvCGgpEnGY2YTWN^R3{SC~jg
zym!TeNdQED1;;d=z<MczGPOOr&U1^vcq$j~i>N&|d-~TRLuYcK<qw^vxoDlZ{sT_n
zO-xgK>f8+uhVYDcg`YCTpf+LT>s0iy5hQE^Qa1Tf+m8=!=FeA!c^sY)MYO6N(7^az
z&rE@%_*Q=JB?*@)D~DWB937p-*iB>hve(IY4N?WhoIZlN2B;Q$CkU#>uPcR6%0p&3
z6Tr+4w9+}yN0b0=6tOw9xYWuTDcx0Z={R}bnYj*pIkk2(Ha%luFRBWx@p@rs4}n;~
zO9>Ji_kd_I4nS9t8{FBvrK6>_$ONI-BVl)1BA-nlyYx72R+$ZmDY44$L4j7LQ=>bd
zypb$KUEPYKXC=kR$*H>jhiT4(B{q>jI9Gb1@e+>sbr@>HfT~Q9Z5?z4@+|zHZ-OfV
zVMPFf-Q#?*(Q4+KnH@-_!REk_=-$Qc<-o-ypZ^%5yY7O7WY8M!;hkqtCjUd=*8UAD
zHt~4zHo(lypLfr0!xCwk!pO%ny`nD2$f#;`Q&iIbZnHMbUa47v$gKFL94>K&H)p_M
zy-;tpn^O%j9|(<i!e@4LRvqyh&r~a(8A+`yphLSs(r@)mpIXp)2!Yb|kPHemI-;TP
z3L58;LAkXQG&Pf8c$o*YoupJ9;K#A0$56=^!3PCVF=9$`xbm@&X5Gzj-c%oj#|c`i
zFZVP%PZxC}qwn|%aP2?`(fND75lx}L9KXD&CE@u?em|=L)-N-e_^gWz;KJeIsi*Wy
zh<13<bN%C(c-8`E<TDY@jj{<!_9ZdII&`vFX<29P*~t7dChy1k@HZghXWnn#l&cUg
zBf!6Vf{5gfP6?%=hpR=dSi5rq{(|vA!1rteI_E@CuA7<d?%*WXcUH>pGS_J750eG)
zC-wF6pW^myX-u-tE7mY)wkb2@HqV|K9D@QranE%*^}}?*g(3;`l~ymmv*BcPQ0vkB
zIa;x*C(B%wep}_CXK6vK*vc@PMggpuIIXbk`mp0wm}a}j`A()k*Qj&uyT3FUc$(P`
z`bG{-Lj~NBv`FDVG_yvhEz=qQ;{{Nb&;*bL7I_*WSuf?A<mj!3uwtN|ogpqccZ{((
zLRgK&go1u8-C+YsMba7y@s;N!Od}suuKc3-)93h?xW}8%_2mY#n66+Ozo#T+;&<iq
zFeG<5IPD8=mlT}Ln|9UHM9+>G3Yr>hpe_ck15ZAuBX5w-I7z*<eiSr2Aj}^AMqL)w
z0?m+#==f_bMX>rF_!_K~8KFi#VQOri6}&0cPoL&1zJ7l0Nxy$E-)z4*hNy}6-T8X4
zqQE-w;5ljX@$ZH<D7jxSx#5N6`S9(zccXf(6_BN3pfcaueN_As8k(FzpI313(@WeK
zW`ovV&gk@Oc8kG&siws?FGco9NV!EGJ_ncc;+Pz}J-CqL!LvQH>-%4iU<4uO$Avf5
zW&@q5hCcT<(waErPd;Y8e>MM7{{FGa>A0;|NbFSNbAh7L1ETX=wWBfN-5?3I-}MK-
zd4b(q=+)kziEJ2lhw?p**poSuju&{bBg2zeaIGRd7QYFe^Sw(FZ7%Dg!(VYmz_r%h
z-hsXqCB!4=t&{|OMAr9?_+yrFL;Ot)N{i{PU{cQuxe2v2Uh7QH&h`&a`5nq--6Lr9
z1hz7g#N+o7vJA}R_i!E`JA2Li(P5ACfX&OcRB(<KXYX$U@4@{OHdWn`Scb$S0%2En
zbD@mNuAo}m30+6K)?Qwk?prN^nqXXm*NSr9n{nW;Tc&NvFQn<@(Y6wAw#KKAmmDtr
z==!maj!+@fZ|*sm!DKy@C;xruNzAWo$@sf-zZOg`0pe%islFE;$x;Yu@j8Zo%a!%W
zJpxW=;{3D*m+i>j#24hoDiji$IBqUVq>}5n;$mWU%aOkFgUO)hf7o3)=YxK+Cl|~}
zNxY91Co+{ie#Hy6=wYOpsuU{V31@zzVgoq<*4A70o($)sl=ALvazfg)L0Q1#I4Cb;
zw9QBYT++RCmtsPZE7T@;$31lyl__8u)2d1a9gpjJkw}Pu=wsdI9TmhO+u*!82(ZTO
z2tZp(PW|?0VlR9`?3Ws4A9hvao=5e{r&7Zvi`Lk7(GwWe{MJB{><o{I`92&Z7#<KW
z4%LCR6BRYcV=7<S{Dr!*qt$G!SJEdt5i+fQpll^mJOA{(-J5P06|$1M$Id(Z5uP`X
zc7-db*Wla;av%43ikmWk0i1AEJ7{QPEP9r5mD2pz|A#QX+lRfMF&<stSUDnL^L}j(
z+B17%i_4Yy%}y~xXp<tyN<3yl<NK_2_$D|pZq5oQ{Gns2Q|@f<>8DP@`~^JkO;>)2
z??olE*^^DZcU{JXWVX5Y$Xr?gH|B1$EeS^<d0={m-SVp>J~jGz@6NH3Tl8*?w*+C~
z;Q~%@Vc%G^pA+a=U!}aR$j5IMfgm;c^-HZE_Pvbvr)uYE`b*UBK|x~%ubld0c~vCa
z?!ozXhfPK%;P_tPrLda9W1)flRh+bUM6cra*K&u=ALbxWUHX?163nMp2Fxu{)6>#C
zT@E|#BMF69PjO2*u$Aumr3{|MGZ^uD%_OmG14<ozD(-D!S!gnE2fvqdHr>%+7PDYP
ztJ~0QiIMh6G77ChNMFils1?X>M$RK&GOUl!`mRuj-;RKk#%T?=*%qT!d9pMS{K0;0
z@hDwT2as<!BfwteJ>!^(3&Xi2=T2KGxpphn+@^Tv0IR9^vwE~#DQ`Wn!?2eDeaB)`
z6vw6!l=C7D*3*1VDlp9XTv4+5(=FQNkjRuTWg1S_C|<5cc1wK~Zc1(Ie=NTUnu4Yr
zOP*oIB%2VIRPUZ^;ujJ6?H*3>P6=tkq1AMs-tK2TVZCxpEM-BTN$PE;-JfiLq2!jm
z{o4=LkcL0w6DGvlEsK>F*!D6tBNw<DfMipR1-nPMJ5_F&&{8wz&U9=!FZ{f!G!V~Y
z4b~hkSLss)*y7cpYHE1_uZ<tQ<a>kL*z4=i2!`SC0Ee%C`4^x~Pxk3n#S}TM4RM)X
zoIxL>lIuUQ3F@68&?m#yN&{K@Gp*8_hHbj<>SCFOz0JFT9+IW&r=JVI(=gY+@L_X3
zivuyhQ*qB@n>lSxJ4RnQ>j_>zkY>0%e>7uu<{Kqv_rz$Q%kyv&no#neuf2sGHoKkE
zmHZQD<B3iD3Wt#P-aU8=SxxFeWQbsRo2T$s2A?%|yH<lCqHjy9?JV=&!ViITdVIBg
zD1$+3p2g@QvP^>S$;oq$_G96@vYV|)hM_|mShMT8WI8n)zZ@XL@yC*F<HFXJO&XWo
z&QmZ+Zi#KhQzN=g{+=4`q2Z3;l3^eS=GUD`J1|acZCza9CptE0PkU?X7R>U0Z|Reh
zY@M|LAfI@QAV2PRz1MI6I{(GaKy$h#ROunuVf{8-=0(-HengSljR|eEOvZ<H=Z%|Z
z!%&b_E=2zUxfPjrJI-uVnXvE}&KX#nV|SM>6HQMN|FXK?t5RRK(WpAesM3=UMionT
zi&D+%1W(a!z7T9%+PDlpFZDBoy{z^0Q|AvoZW{By1gbm;SgtidFyodJTQ^0O%^>io
zoeYPUzt1^e&=;n9_TCIk0u)|Inop{d-><_iZ+^eo+oxBlosV4ddK+~M96T4iPEzto
z{j<R=FZEdce1!<Z==G|%SbhjR05V8Dl$k@X(fh(<57a)4kUVzHVv`D9?avy(^MOV>
z>u#PcBA^eEvE9SG2H6QP9sX#4Ul^yK92gqvZhF!`;oS(7<N!3hBzEpC#8wn6<>Mqy
zYAVy5vcrY*O@OT9i`Dg784~%d7hDe89zPEE=fnISM=m5Cv<08bCvoeo`v-&wemA4v
zmT|3aMa2qbv8GKBK0dw|@bz5FA>yFI)@<{PsN;pmsd{qV|9iZgECrJQ0!Qb&O`b5l
z?#01m^2#eghnRQ#17VUZ2CZ4ghp&*)H463eWe%J6W^wThIQSY9ZU+j=sEF9b%*xWe
zjHx;4bzpv--(q7`qDIqiU=-O>vVm?NdCeB%Ebq;iQn-?T!Hd-2m>jJXQma&pzHyLH
z=%AT>Enw5neAa&h%ooE#b2N&OGrGPH0gh(1f|L2mRBdu!H-NT2Oz2FIEhi6-mwzN=
zPP;Ur1dN-4LipbtfA$vc*FLaabXz)Y$&j&H|7uqyeu=`HBcC3a9O1swD;++Ai5sV-
zTD8GQyGPss@z-3-8RpDrbsyc{xIeqxe+a?`Db9SMzMGoU^|xJSaC((Mtd9XE3ag<l
z;DDf0Z@?iv0bbeE7YO895&`t56`P>@yvBASEsCaeA!iQk|JE?oksm^WT$5AV!`Un{
z@ISzW&6*Ab3GNy{VKn8=k&r11ko(t6^8L6oY(2-uSMqVCw_~|go69zZQo`}ubk#rq
z;{s&#63g^Sg<XgrHalCHM@O~TEsVFWd0|zIMI%g6T35IsU42o)z=GX}bOzdWy7-$b
z<m9yhFzK;yQ!Cc>m~Hc!&(M*QH5KqY%P|nScqeRy=l@Np{p4EMeWRcOEtW?yqeQqo
z!S+QUXx=!VuQWmB;BKMTSNVITuN*!B0RcHV<nJ|F(lOnh79R<~^gfhD|9;K+{d}#>
zFa9SkCphwwt#+~YAf@j^uO^qGdYQP={P=V155+tmw&_p`Z{EuzUc>R5=q^wJpz=1G
zeF{t)C>SJ}haphue-W94YiZzP9J5lEA>3OOBCNtIx&F-W$(%=2WC6)^@z7Xc4vjKp
zsdDDGAg_6lxR6WbkXlSPp$C~cyj{!s=Lv4d3kF%<0g<ITDjK*idqCP;1ob(Hh_^8}
z{o?@;(arOJUQWz&+B09=Pf#<fUzHQ#_Gy5dJ3xwA={Dx-bCK^E4gPQ<ONJOda*TK?
z@g<1@DNo&+!RF4?^~wL??ycXd+@iM8g{X*tC<sW4gwhR4OLw=Vbc=K>KtPf1jzxE;
zfP~WB9ZTs(8Wyq6#J%@9-}k=%!SRQEU9M|8pBZD0Ip&!6xbKnW31Y5(y+6#}f3jJ#
z&WV*@d3!adxhq=?F#zUdbh!VN?fk|t|Jp{uO4$@SLj<>7KZZPPb7v(5&^rL`*b%c(
z+H2g5LHw#Z+F5f5x-t85ri;;!kWIPSYCKzI`bhv|4N?<(h?hMoq3Js9ClOvyPLmds
zKM(VEwt&lDy;$INPB%mE1MdpA#mm8+p;cymh^>=t5s7f8{VAAWl=i!W&;1Rxc6ILu
zv<)w&d!oIOV+lb9<M^HrAM!XKs!j<&ovv2L$wtn;M`Y!<<pNCg*vpV1*x4D-=D58J
z0k{JIJ*{FhY3D!I7jRv9a5DLzZ#>g!H=PJerA~bSJndqT3LY~%=~kPMCM15vVN*WH
z6l-wWX>Ii0fHJ9NM1j!hsZqWjV(<DAgsC!}d`eleVttzWiL;J|@(*SU^3Upwk|%!}
zKLbQZ&v;F?*hYG;aR7+HeQa`LldelHQF=!9nL*S3Fa_xmx#H_hc$Gw6T9bb=*giSd
zlZ6(z2=+8SXf3D}B6L`{@F)$GF8k7Qd*b6Y6WjYWn9Ku;Gs5S|iMS>&5jO-|GUHK9
znw8Z6Gx}5aF!PBT`)GY5#yt-A82~{Yney06c>@F|HrAH#=sO(5)-U<PJ6nQ?-aoW!
zYIGh*WtR~8)yI$a2ou0|;WDA0zbU1&J-4&nkW3+p0V&zFfoNVTs+FZ!`URi|UxHqf
z!0B1Y=BL!fwEuK(yz0z1ajd}jt!@**Q(QhG!x^ek`Y!q8rnVb^$^P+YS_e+~Ti3cW
z*GZ@;9<$Y|Dyz65yKg@Hfgw&3egK!&F9ckg=nx7j?DAp)d1=Qygz2&m*RT8->*^c+
z8x=7|a3{EroE?N!NFSfU-C1Q>zzRYPoqj0?`$4W%qkPYltNT;$69rl`GGZpT!-Rzc
z5E1qhd19MRW%10B;Iiz)6A#WWF4r0Lgon^n+63)pIST0u;7%uq6HsT>!DDk6Q(>eX
znA`UPa8Q-0mw6RKy;N0kur-F#TGADVGWR~w=P4YXjI*fReG-1g<FXPlye!!S-EDAQ
zH=(?NoV2)IADUbVmjId;dQCd_?{CClw9B0=WAz@4?n%9#Vu=pIG=4p&xabdMc?$V(
zmc=pmhZ|zc=L?O@dT54suY=7Fy=dz{TqRhbjS@CDL1cS~=Ge+nmq-;99Al<)<&pub
zmPHZyKO(AYj-~%<4KfVI*zAE<ojK>gw0oAjqtvnV?I{IEVDLNl9tMu}75H6t#80G)
z45WO{EW#NdW3fMe<)smRgGyy~swi@?sS<(sEJHL|!fxk&>`|(KFP%o=?(Dd=HQi`Z
zRerT|add}TCYW5jo?dQCl}JKSm(QNTAvZz&@_5DpkOCNJ4<pa4K9qk*bMJjhyQkmO
zzaJHU*6kM%egly35-~aY?eP2y_S|5FefBVqDb0ik`XE*_0vf;ikLf-^(D8kG!bka7
zHkGJzbqx&-hn%V;2LRes$)0aVtL?Bh{ONczQ-NZliTm)H#V(Dn>(sJ&JXipffQ(j1
z94F)ftixoXo*am04*R3H-MdwHi8%3xLKB_Ot}n4Ui8#hxukTbO2?+Gzw;xZBtT%X`
zBt@AOc=K7j<g4^}>CLS<{s?w)<{8Bu>W+W{<QKN$)=S~kpH+3SwI&8=vXKJ`sS^X^
zyYp2Vo~-7i8+}*5PHjLPC2m=EFP_tsRH<K9n5EWwI9Z%y{xKn+F({SgN$Y5VQ4<D=
zIWegh=t>;Ao``1v_K0yy6~Pyb-q(oOhGEyP#U$$Bi<4ir3-u}u?@exAAW3;&q~)|G
zJXNO8s=NSEIH-gw9`f6sEIipSCS0Oen-v}eEIV^9+Z0|*HX!A`FpgVe91O2_DFYFn
zY%n-w758Jx8PM55ovF8aX<?Q;{U9WicpS!W!qy_={AYNe^(?MO&b*%v9{QT)>ip+q
zhV6a)Pu8ZQOItJLDAyg)V)hOMOgIX=ZfA!b;|0p-eQcReW-5&&k_UCE6@F(`erx7$
zz}_L{_t(%d{yI^Du}-a`U#4BB$CoaejC*;u))N~H52>lNzX0fP(Fc9k9;X{fhoukz
z{djt#PuSyEP<S*yq;NGD!=UHcH#_0!8uTxOzIQWv^%a4V`AW1)XVQ!IOYEj-UT&Mm
zagC>&eQ3l5`%XJkLxZ&-L8DPg)j~h{K8E5mr%e;`J;)}tBdr$lt0k$wfrpwdM8F97
zSiQ!+X4xOf1CNEuoU7#al^89Nsv+wyGLN-mf~}5EX4|~lWl7BRK&2;ty*I2A0H8P-
z9TrQhj0j0Ya@@epE9!;VVJb1Vt65*}av*>a?k*Nkj-f)`24JkA3KCLSLdi_JpD*}G
zNl6I?)1;WGy}l#fGDAm_SJJuF;mzXS#G@J+J9Z-U(+ZC4L$3!xwr>YsJ5ilg76Kse
zkR4)Dq~rdgZo+F_LbLrqrDS>?p@r`@rNO~6pc3U`;Jw(xU<v(AF3Ug9dpt8$34fE`
zPo1qb6c-D~Dk5OUDa)Aeuwspw+?twnpNNg}ewvr1<JE)BTIi`X)6t=IG_h^6-ej#+
zwKMZwYA$9iM)hR~(GS^xk7Cb;@IHD-^e3aHrlxY2YLabZ)-YHy>sA>@0zsPK2KV#D
zfn;irGGm#Mwdod{VAt=FCo*YQfX!)gOQ3plHsjhiu|<dFtH2Z}M{Iq`NbprKjiFGs
z-hTCCPvcwOs}<HP>N4+@^Mel*xpZf^8IM4AiQy@10I)2mmuZ^}M0G4}ig8*39HDM9
zm$bNkMSkx@zZC8^I1IWR3Q(7a2Y0vfsuV~#E7itwXVW+VUXL{Pv1Q~YCpCMXG|@fx
zegKel?P>+NOMqUoqy_(p;x!utu(TrrLXP)O+3y)m^vc5KmOFyE-8UjYK}#1xa*HC3
z(=9U%*K@K!D|%>xBHgtW*9jco`FC;;0^c+>NnjG?A23;V5%eegsQ&QrV<u+$u1Qbt
zXQX9gpJ<Lo8~mLcdZ^ZFV+L~;i9W<9ha#D<)Fird33ZN^-Kf*8`>QyEWjT<djLHM#
zE=o;B-b4DG3J#7B%1Zb%t${KT;&sApS!UTyaaf@lnu|5apR<VqUL~$#O`3xHAlIjH
zH8|{TIFaeyL7BON=eBaql%-?}+W|mtFuqw2B!imr*>aJ32w|i*V*ZVwx3_7zX0TGO
zY4^d?I?EAZ8<*Px)>GMo4f+M|{*(e0N7Z_*@$#SEW`iv74f<QM9Z)H<TNg8e@fMb#
zHSEHTXS?zI!_FT=;I9bh>#$F-He5Y3?%dncujeawVU{w^NCq@bx;$<=bAclOzxVpP
zRTqH9O+=%eh*-nRZTG4RqU?BhAo%#>jd0~0St-(IS8Mf1CI+2a9nD<zPhJ>Kx?iot
zbwJ<=Fh)9;Q*R792;Mn<WP3|I1Vs<hWBDK;RJHT+(ZTYt{MWijiZ@bc%sH;oSeBqx
zqoB+MRA$bKKO_pR02pW=U1ewVK$+7jA%kA7sSYtBrzDR2q4*BJiubE)YqidsQSvr(
zl9@y`8C5h2QRCqpL7W)WAFo%-Yb|qvVh#@1BIO(OinMF8Je*CQ$hmc7k;V(!E%xQf
z?<`a%-WY7H0fM5jDw%b_gfsGkUGSX}C83*wPz_z--4Rr(eTAb=<j(xJw>sD#)i15E
za`H*K#jwz|DZWn-@n#fM1wF*Ce!>}+lO^H<4lU(KVYWY#uB#wIO5^vG?Alr7IqmdE
z51s6xs{hj<&=P#3U+po5lxf09ahIwq*5&{B=eb#p$TN4A-8qnp(C{wvxB8~f>p<6H
z9_A7jR$g2Bj?xX=&FqcJ#w}Ke+b3{Fl8fDlS5m)FLmsBX=ThrFm|-W`%lHy|Cz;h=
z7(D)Q3Zyot5cH?K4HX773Dho1PF_nJk;hFX_QJG<vkHXVUl7Dpl*0KJ=}dPKL2FhV
z&RkFXVaThIw(;&l?24SA`76S)x{`PFI+;m#n>}fpf6jjU-A1L5ktTM-1M0dOK5VkF
z^B6&q$<%dS!31RrXSU&XI^e;n9KkC)mk%E1&PsK*M(U&Y5QVQ-6yL;bRm9MbSE--L
zlhze$?e44;?>d2?8EDC^2nP(@SX8?W&~evMd4{?tWH5g!v6?#Go)N*3$!897-nnu!
zGIdcz?pFE**n&v+5QnI$*F}W6TORT-z&aOOA|L_P*#?d*EiGMo(i5yv44&f{TL|;a
z+m##~wtu=Ih%}H+<2;H1G#z|4BHYSU8gh~pgVqdN`7NMUQhsMn#yh;ztj2QkxIe>h
z{Hx5Q3ZMB@Wk(>?Bi|v;BCn#7LXXx0g+7Mf<)ok19Zod?!Jk-DHgbQD)H`v&{AZUg
zE1EKfDZKB^EENP5F~ye$w8~Tj*e3#>JKqpS9FH(@UMinN;99W;1zQ=)N$j_*n5>d2
z*xx%^&ti~(X@MeO*%8)9*Hh!+%Z^uu$6fu&0-;`62)DxH1>r8+uG2lPZSFUKO6?bp
zf86N-X`{EwU)E3ST#SO=+n|oX>*nSY3aCpm?%lxKmik1pYXq{fSe_SjR2=>dlWcBo
zo6k}$p9g7ysP+8t1cN#Qynr1`Y%zH!%x5)@EN3-&n@M4v%c~B0Wm?~I?a}xZjQ@D?
zK2=&57C1&-d{!wJWaB_<-}L9m1JJi=YPupE$!4ldLr)B*g+S>DpfP}+-9Rg|rP$4S
z^F8jW6@#Z~Wp^=`l#PV&q@Do}5P|@7ASk`kJ()7?-&kAglpUb?XrQS0cvltRIH?tG
zk~O|yZu0RR!^_fu5W(TZ_Ak31fjYP&0#ejCN2&OxY}Hw#Xaq#&rT^su7@z;4CY{Z8
zI7{c(hapupHKzg2bi-!@WcgHcdm;o#@u0_vRLg*+67ZDe+;QZ=b~*W(Bg6_azP&?>
z-|kXq2GLd$iYx#U`8%U^*L_oE^HEeiQMA$S%&E3zdM&v)vw7*yw<5As<5)79*I%j7
zJM8~Jo$@a|9)JnxHoWFc9iQj(JU*XDo_dP0xy|1s!L!9~q%K)O7`QkMNI=lOV`kr9
z0L4s&ABgmvvI)N1U#gpLgvZdTHU`zM=`DcV^(!FbCUw9d|5AJuxdfP1V#opEUVdwl
zjZg*`4P6t_`C_k(dA~Lst3<JG92GFdKIt}{l+xqKe7r&aOp=v_k8hqGdY{KDUiOA@
z*!2yUI}_>87Ox|&cX9oMP2Z1Gh@#U@e!^keLV0)P-!xSvTN;llsG6lCbz6aQCqU<X
zP}oisXi95Q5|5NP-H*bCR(7T<u=b803#N^_{uXmbMCSpLlURC*N2oHB3|mzAf=Hhs
zeSw!!#XMZuM6~RJ9cx0D{ieCQv7e@?r8@Jm!a`IBNF@Z(<v7`TJ~%=W8LjXUhW4Tq
zlny|tmOb&X*IqCOu#9;n#Gd1mT-!({zYa7k5PowR=t~GlJR#FqTUGl&^BdIv;dySQ
z`On!sytO(v({3Tbex3X~czHdv-dE@Lzy3Tyw)!|TzAJ=#0JCe>$xbhgkBvVA2<#vN
z#-IIbjjuGm5uR?An?K4Pa{Y02QIlF$K&(c*88CytrF(REJpTGJ{t;mM9S>w${u!)l
z(3{Ghx7YP*`JXU_!<r>oE1%RcII4{o@F#(1YkSfjif)j@x@OVJug?(FJcV1+h=Zpr
z58J%&a-?;gq?2(VQ+1+pb@G;9>X0XT!~2O<!|)FfGNAqwGHf?yBt8jehO~x63@}LQ
zao`B2hZQtB32H1eOjQWb*AWf{X7c!bCwoUIMmEzTLv!3i6e!T~N+lY~XA+Yq^DR%V
z$csX$N*GJd0_4F*Nk}w%t9RtaF};|tHECpRjYaP0i!x_R_bm}S*DLJ2G&N`kIcEbj
ze;j4Np3A^)7qqE}`*>^(Q6)RM;Fm)J%F{`C-FoL-_RZf=QB{Li_9YL%Ek9eMAm~*E
z5>K+5?e)SfDr7ane_2tn46M152mS}2C?w%tC81A!#y?!@(m<L+y|pd630goTNqnW|
zgg(?>8{4@v8Lv=iIKp80+Oi>}|HHHbzzED?Kw6z=tif5neo{4X?aMW#Ihrd)8Pfcs
ztt)KqJ5*xq3l<-HHZ}$ZK%*`Ksxcr^`eHu$wf$1>D)N1hc>N2_ZoC669;1}?06+nJ
z9|V^9)`H1^Y?n|Rc}up-Yj_Nv0a>Vx*&!H0FotP55cfO)e91ml7&6iFoc?iQSlI(f
z!Jn{PH_4kKxcFs$wPOZcw`Yfd`!%3>-;IyBD?gaYH3c*2K&gGAN{7?{xcOU3$NBGG
zN2YKJZcc%Zo8R9Awb(B7`D}cy-qiHH+y4RRVHp9$R!F;ECE@JbWW(dXEX26tg3S=f
zm=G6g`Lq9*&Q>nb>BCt_8XMCJ@8$8QPoq%xve_60OCHDBZ=HZ{UR1XFwj&SJ!hq<Q
z3wSgDl>F1Kcv8Q9-_94H<<kTe99-5y-lW*wv6Nj6CNhA4r|+p;EPZnUzB$1m%c3OP
zicmQrc-ZPRaGAl}O~+yxxm9AB=EEfgVXG2FGKwb7zpS;g;EA1wO0spHods!DxT<l}
z&q&C$T51p(xic{|7RASxm~|jv0v7Iv<L$z!AA{N^AidzMB)F9S=9kUhHYDzt`~H20
z4<9y0>Q%tfVFSIt!+t{GDtzKU0S|66m@v}EE)w`&4D^zC=ziruQR~LNUc5(-{?a9L
zJ@-I;=ErXe6icMd8vZ}#X2|keuBtZcxR)A(;FgKe2cmOA&BqAi-FFi~c>MDViCcG|
z2T`-rXDoo)@Uxr==cuV76dLfkf;^+p{cVyX=F^~BN*mFoU)`hGW}Tm}+c#u^&K|`2
zC*X`vB>i|6V(TCxqKaYe5K1K$v;v^q8RVwXdWZ^gibBx2r*k0~ZysAiK&-_&ZNVkN
zn{WPqkaR;>aE#e``%M8#A)EaEBm`P{S|Z)?@VLzy=e9H8W{HIsknqMI-h8V*rI@Ke
zKHWGq(znS*gsi68dD&^Qb^9XJOWoXzT2l`jUK6(V^%}rC2!-Z<CV3zou!9BpBE*}o
zlY4V(&F@UMfHgxzo+p3e{MVXeFbfuvvZcDBs6zD~xpp>t8>KVAeG`#m8z!?c7JLb`
zfWaF7=oSsBSX#YlG^>L&W4LR>WPZk<aKRs{m%BhyVj&+0lmu3VPwzw8GDuZl9C_Yy
z{qM349o&QXPyl>Y<-eLcpKs|PaG1&Z(gNPRRArP9uUyAgt0MAM_P<uNVVnKn&-KDa
z8dn$d*=3+of(>xuKA9#+{@elR=>zaZao+p8WUTc|E~YQKKcy=Ii!^v@j)vEj@|Q|k
zrr+5U1!C~ve@F)OzJ6Uv;--d-A{U$v?iwLyDgRg~er9Gb@%@S1-G6m4AVT#dB%(I9
zuZ}$WAyk>c%z~<YBlSOHqJ=5Ze3yVt`8)x`dh9TDE0U$2aB+SI()t+4syz9Z@mdau
zyKOJ;WD@nidT^7O#7$fbgR@U~`rO%vs}YZkm&2a@yaM(PiIJIK^SZ`yAbbEp`S{$&
z_I3n1=4i1$D+$r-Nn<c(&>=DRZsk2{UYDzNfBGvap$w#nWWqL974~PMFBwRV2({^F
zIjTSTE=s_&vErvg6VXm_2^qctYZR(iwXq%CFtK!iWe$9PRZYx?w;q%NSl3&Gz{23Z
z{lE2N{#h97e;0<>7l<Lzi4nz7s2qR%LvXsmgmE$0I_rrnz5Uo-Lbf8V6u>+bh#L%^
zGJqjGEijs$FEe-eZB}|tH;7k|_y*8~$BKaO+%kmMFzDav)R<JB|7QT0|9)o<d`G>1
zA=(7!{&lD@A|IH9?^iOv#Vkg%347_Hmi%SdG&6KH?NcH-zz=BkoC10E)gW7ktV4Fr
zR|<O-;ETI>Htw@1nGRx}Kt7Vz*bc%1#8lL~8!Sz_chgDKKmKb2EVTbP$bmJ$80;jI
z7PLy&N`jjoNBII&81F0)-=F-oOFyxe9x7~(Is(3FLOZSS-bC&1Dg`Hn&kN4Y|M_tG
z6bP?n>by-Bc%f4x%PV5LBIKhFo+*81fc6*Nr26e3bIJ?<+fjl4N`chgo)3DNR169f
zal@R5wLXGEdLOUL-d5#}0dLQ6An4k>nWS0s$(&sa{}k7z*x}aDKPssldKkvBC>_iF
zUBDXR>I~Rb61}-ux;G<mAH`^u+>iwF*|$~(sekSLy7=fnJJk8t4tGBq8(gQPXqEcz
zjF6rlq;8r1A(%iL-Q|w!6mcR*kdu7iu{-1|&{=%JNZl6|-BB0zDP&rKs@U^y2dF>1
zug9nisLPt0FY7jS7UI{SQs}5$`Py6^+5uL#<96Wpz`^*O{_nw9bgRP$0nUXBHS1qj
zVoiGAfY#p+6>RS&?>0R?Qwq46m9Id)Kw^(drRrY)lev-hpFgL!A*a7>`iaa4;wY*n
z<WRr<qfH5Xm{@=aSm3+=Z4E#=o&-~FzNK@Yea?&G!w)_sl8%pdD;_QItF7$S@xdiy
zjwKrp@JM_i6_OKEJWy#|YD1|gwmRbxjg)&v=$9Fmw0;5=zlIpt*xYmcC}q|=Mzf6o
zjr_K8-DRL~9T>nXg33fJ;J$$PJ29mA@$6f6p}#V(=#ZVqv-)3gS7dMZqVs*!@|Z6I
zfaI`B)glqDG6B>&Vn&DJpHC?K!dP1(y0+Piiuhy=_fymNg$Wkmw{HyO?Y~8EIhG@^
z!*q9Fa+Uwxp%DYtnEwrL6%6kI8;%bjxO*C`58ntEN3j1;r$C#fx7IMp#Lm`GpQyVC
z?kfCLO#=1VT$f9?oMHWBc?dWYCj2aZP@n{dKZ&t?@j`VuvaL-G`9+M;|9beUd!<0@
zi)>*c1h4({6nAb>4+2To={A-2C;1A+alGB2t6+mZFs9leevVy<3-RGH_kQb>5_mli
zzU=z|tRErtb=BH?LE)JImz^<>iCB}(qy7=JWG~@o-4cMG!wyKe#WCCiVb0TDFYpCW
ziS_pjwRis!VuqA^nWM>}{G&1tfmFAo69b`lx)mW_5Y+WbkdKe=6_Oub;9efTJ^6fd
z!j3wF16C}$s2L5nku}+{?J`jA78<0;WXvx1->N)C+f7$`PKna(w{sWr97v&3{Wntp
z0?Q}`WKT!URDm;58?b*FlB0I*U-9+BeVl_VQ+G$%KSy07OyX&DE`k+9e-Fyf)}{jy
zs1*vnf8DRg@S`nMLiEe~f7^bnVeY+)^^xY(;T<?UUjVwb#tpyFA+Gj^m*^0Pk6Ze{
zJu5#b4#=~DsBHND<$dtuMaK0#51(t2)<^ATkpK1PImUehl>hZ>w?B&J|N0Ta21-`{
z*RMXZ&wRl7{y+Xa$Nm3pvv1hS4WB$=;PAhGV3?6n_!%svf#U&bLNvR>$M@(dY8VHs
z#kk<K!vGO^`N!^4h=B%(FnovCz*!;rJQ?K~Dceh*8K6O7b8#9A^#uN|d>=j&u9%Hm
z4pDoz*Pf!AaBIX5<A!6w!b~%QW)wNn9v=4omkTiVfRwX>)4k@lNgq;SE>sqFV|mCJ
zh+S5LzZ$?6i`X7s6BB{Dv)~tpXLf}!5RrjxdNAG-Ritfi*~eN=1PlbFk`OYDdD|9B
zw`uwVa|aYit32qQ=3~&kP0+ol&z~z=*LQLRgF}W933ugzLc`j#lQKV4RF(#C^em%c
zV5nVRQmVQ$-`kk_R0wlD(3(B&r$lvVoq7cN4aDdniafXNQ-i(^{OxPgThLcQ(ATQA
zJjuk3ZMHx6JT8PeRdpDeQDtHhsGU^?2qjrNSW!?}fYvO{)jO6;oc3m~uo*F0WtCd5
z)uH*Zs%pZ=si3R5psPM|!nJ6S&tL*N-X??ag$r{AvsL=J!<_^&;3u%4c+JNu)Ukic
z6JpVEE83+rUvRG_eFX}C5QeWW*sg~K68Z3gLyUju&rCf(ee)HHt-e6~Wbg`BAaDPt
zyLB|X%Rdgd4%co|h(TM#E{c$S#DGx7-*L!+PnOelr$BN8fX{f#x*FR;m+OE1RckXY
zBuBn0C6&+zFLNX1RmIlJ8Z-=a!?J6wVTlR%pjqa$av?z=Su>g~@)PV$G0+aA(bpOq
zqW)+G)B66b4&?80fWIc<wsNpQWGH|V$b!|*WnBU%x~`f7q=Du=BuFTdN5pi(U@M+k
zHTqp;ejpP}@V(ugL>Ij^|5hvrBnXG7cTZ2P&or%n0+`VB_YG_EemwyRFjqxB*7s{4
z+Ax7r<q3iVCFUOV8>G{(emUm(IYy%!Elt7eMwTH428Tyfc#34R78X+j5n?sO82J<}
zPEr&3sNkR7<9x@>Y}sqN@f#K5A*}CCRC&F+p-c+#nE@gDfXMAKJoFWi1FJ&L<iiSL
zn+Xg=x2=9)V&+kuDuaxC98d{YWU9+9Tu5*>{Si)Hn0hsa2ByN`T6JcJ4cMd*hea*6
z+6fvO#T=?nJ!te==(f>GY-kchIzT`N(smm#d0Z-U%9x4zTfWibiyI7fGj8or|A9Yj
zE6dBiJNom6<jLTku7;cmaEb;4i_HkmWD`*^)#r)3?48D!jWN6WY!HZw2p6h{9~U@c
ziwVJGSfe67pkV&$ZneDEY`{z=!3;<&(-O6W`-jkLskI(X@Wl<0OTe%XRs;ZjJ<#<5
zt`+a0=b#>6pq@BrJ3=xp<qdCe<uyM(e(yX#A;c#z-S)n-Ow+*ilU}~RW+Mi!qSMcg
zf8Xf_?DWMGm)xvU)EV@BQK(Y)tZ{dz3m4`%5j4A})kk2WHIvWmjKuZpX_N=rLagsY
zo=385ZI7I+Pf<c`UVxbi%&(joY9Op6oTiXU-ahkhdT0P#aNO<GC;JQN_<RH2py+s&
z-NTjF{mrHwSkeh|d&oPnM(*8}>LLvDbtEDYxED=qHLgayCRr?X8oRZxZpJ7Oj*K!1
zM3g8nmS|v|2Hywd$e>3vsHeXfL9bW@k1g&@vw$JAKLJJ9u;ItfNcZE9KSddI#qS$n
zn`^A+iOx4>AfAK1Xrh9qpET_xea#ta2mX+|_p~(A8c7+00(pi3k|~;q5Qd6($A@ja
zJMUO-+kSc5HY#X)0}I5bvZAjWJ#?MW)uLJh-AoKYNCfc^YUJ7d^E2>?p`hxjD&qC+
zN7O|{Rk?y22BCM%fP5zkM5y@H+!z53>1buXwL;As1kXJP3kfuFSR*K6AO#3DWg2&r
zERf?9{@8<y-rCigADA)TPr$C4fY0L$3{jPvKjYsL&2c?Q)KFjZAsqjaHvCAT5qg!s
zpYyA%@aPnLl_A)y>Kyn5i2YmrgtVAlQq{g6`tO+}Z?AU<wu@7>8ljnf+!@U0L0iia
zVw_Zw{+>qR`@rNN>_RXaAKkZLZ+L;!R?`0^7w6MtFO|<@r|<^^#v)*C3~2523W+FD
zI28s5F(HuS^`)O|SKm3FRq{ig0e2xpEFlp`fpOwh6bElHw7WwH46-0Y0k?HA9h*Q1
z8^i{jK)MWEDf>W7*lvs2Dljq#qtQKPgT7+1=K)hEYD@+8n@<MSi~!CI8Ds@4_wYc+
z=Nx(BrmN!&OKosoLB`&K{zAcC7P1EYwY=M`sLLKpCEE^^&>*J_CPZsXh1%y&di4;j
z;D0{Ca3xC}(1{#?Krn@7(jI-(Qmw_lwWNA5@$X~VY>q!apro9R_5h=4bsWw^H>ev9
zz(@z7f)<(@HNx$<(&PSph{c!$^Ig8+!2{5usfZl*Z67QCL{qBG2!x<O+9$A;xMcjS
z@287>cV$R5J3gEm+Btf8>p>oFjNL7F*l4>q{0P{OAAD@%4I+xl1YMU9LM2VYZ@~!V
z*gyq?GLUCZYd2;m00$JL?J8;)#scyAc8F`jt^t18)rn@QTN&v?8M>WM+H^3VgBf5x
zd2jg!;4Ky0pGNww`VAnz$OEQO{x#h2$M#$@LtsoFEX2UDKcPU51FY{qerds<Ng&W<
z25-Jy`DI}k4diy`n1jL|^<Nil8=sAPfVes;<P%T{JYJXbc&$VRf%LB>zD|Avdd8Ac
z^=hugwI3|}-^S2^=uh2-iL5UOw!{N~(Hh*2^dWfRWaRLNdXhJ#%=)4DXePnPgRt$?
z;_=Wx6P%W|{?_=+WHO;+=MYFpKqWu42J8#+Q$G~Q1}ZS2FDnIE1dB~!&7x1iXqCWd
zA+K+{xYXTR>8dOhrRwAr<#a2A8b`|8M)|Wyt#l`iixHKDb3)2PYGz%b&;(JQ{ZkKo
zi{|vV?y>ND?zrbDD!u^oU_Dne$1Z}P!=s~;j`@l*P3U>|so(AQAI_vTgR~=x5c$J?
zQz|yL!<OLqurxlcYQ-OHIWk@0b{mA{;@)q|?T_8;KdPTZR^?+nxrvJc`{CK=OyH(5
z12UtTZijyN_Hj2WKf-w7=g*(gYQ-dv^Bby<RtT$Zc%7+$1|+8JCcuieb%x=_0dm;!
zY(rG9sego;=o!L^_`2ij?(Jt^_;(URAhJW5GuD7r6d+r1;(*9P_K?c0{>jP^+s}{n
zg2-dtrl?Og^`J)KrcFXVm7n<hZ~{=5j%CZo_Vm%`)wx99#{xXpnd`wMJnqMU1_BU@
zHG3dYn!cJLjuYA3@n|*64HtL{RC3<uj@xyY?^D1(n~)Z$U6qri@|X_BNG-R~$S3cS
zJMsM_H;oMU35$7DAykXz^Nr1(tI_T96jbG14CG=F<I}1t!d^Cmv@Ae8UzuL8nE>LS
zRqiR9!`;!w@Nz!SUp}DHpRLW@;|Cy|c|^v^v$XzHq9gd}1(3(#*T1FZh57pW14<@B
zcbDzn;>C`>nBYe+0T=mhF(98*W!jU%>9AIaN5577JEX6W@@>#K!=KNVzbS8Hd7lGK
zIT%gNPqZ+S1(!d=04fVmYW1&qF$$goHIS(iwXp%YBiMSQ%^X0unp1dPo#Tp!eXv)W
zrhZz&h><u0rsa-)bM`&JH-OUQ&Ne2p!0DWS1j+vaylGH~@muoD_-HDV$z33ubMI<r
z*A<X<ty)dxR~Q;d!<)VJfnZWO2_YeE>2eAvx`I#Cd2qiY^ARJ*$}kWO<%Syj7lB|6
zlJH>2)E3|T9bid5-MMfu)B?px$#r(?eG*~hdGfDQLQL3weSPm^l2<IcRJpDKQNw%$
zn3jqejGGehAl{@BaOHNi<r)e2?n4v#E&$*7Qf%G+Vh(KK@-+MzcQb%8W_`hQ{_w#d
z*M1WSP*0Vj_f61gl%8w6IqBkaJvRsSoL6i6^$r#!K4Qo-FcW{0{Vod;8H|Tdh9gHQ
z@RvZWmyV5VR^<V7eajpV0cy>uFK+8d)H1z8L3U&51({EcyGXw-FfVRTNL($!)t`gq
z-kR-mUGNNDs+-jypc_cQq?^|G;Ymv(wF3=3xsO<VKH%U5wG4P=*#i=S)hs|@1E6j~
z$k?(0(`<i8F%Ql+>Tp{J!S5!CmB6t;+O*_gYd<I@v|aY3)$TNZi7Qw>1R(W%i#>K%
zNr2TxoNSbm1%<(QnoQfo4c%7KKdlk^h*5lE?uwpkGfCCz?vE?cmV1|o|DBINloKLz
zHu)B;CD@XRe&|JvTYWESQnJ=|-d{U7<({3dejL1av}yz~6(Yx4&worpHrVV14o*n!
z(S?yLmxF32r!8QHIWVECOn+#=p8u{|^dbn<)Zl>E8m4s>C^DmMmh8i?Karp|3!qG-
z`t`qOJCrQ~{jGiux;Xm2_@NZRvIEwr6Nxa`@Oin6M%m#ikn72oN=^Drnf`jo8cF>X
z_&U>5Yw?mT48ayna(pr}rZjFD-O2vMi$nd+*HEP)g6z_+h08N`eg^%jFSKZ%346t&
z$Rz$xJ)*l|j|z((N0pN^oYUWiDk*r!7G6MRY4~d-R#M&5@MdLhqrLAfNQ<k}U0&0B
z%C4qQy$UA_`i$S=vym>mLleuJzCA>+Oj|2oc~uw}wcI@KiD6xy&5;2#=&{e=`hw@Z
zUkE<~fn$^>Oj1V&sV@W=z}-VNsMplDp~kWqdS*LUstZ^F7c$i7?{od`K3H~2=7=u7
z6{P@tqT~YZ3@HoUoR%||%e||seQ~jTH+xN&SnsNzmKCVplmQ8ZKwN6~-}^0Ymyh&{
zvvJ5`BXYxt`(%F&Dd(J5s|AFS5wn`7BaFbJGd4@5!f$!!{2ukR4W=N&nKcSD-)go>
z2)W%}g1qCpO|7_WgHAl%EekHF4v0dD_+Awx&-JjI6{!~sadMclT<d>02#R&GoE*Ql
z+=qK>*7d~G`giKA0C6Sc8C<`~4GJoV?U7bpWc;bADVAzwoj%`aOf$e!gr$S-i2efz
z<bIXo0t1j^mXFR|ziE7~rQaZm4)79DzCD0#(uxzY4g`MW<tGJ@pKZH^@%=NS^%U1p
z&hbDT5i`njL8tLbK@hXGe*^V!?*uv1h<#4e%k8slXED>g=)sKg<KDvuzB?2uqHjgN
zyn3Gb>g$W{w91=1biUS)6}5bQF=v8g(L`pt_3rg<AOv?~w<8;~rINBOE-$^#|J3U+
zS$sU|ITAQ)R>J+*y~3Ocf&7UQ)%1x43M|}>j&a@(r8=5C&JbRF!>{waVJ?l|XDL*2
z6ZWpDt7<=Nj-Cl3H1&Ud)&Pa-hS0#Jj*zk>4x1za-CD;@EtmqmItN!6k-(p2R@|3z
z=hi`|AJ$Up`5T;RmA{oAR(H{<jpreO(hsSN7f9s%!xsP)+rd%C%Ji6wtl4&1JXvFR
z!TVQW7g<f>Mc?E!Pf5}QfKZd%3B<18hpbbJT5}nlrntB}y38wb8x88LDz5b>24J2`
zx`iFty|M}Q28uy#CcUpUO-JeibFJ<==#1~DE_PlD12}Nwhn`VGqfX1^k*{@&`}8H{
zK<-yfGM=K4P*#jw+6{va0$HNXI5L%K);BF~j$-JlMqj2^&wu>vS^mHq*Ns0L=(sKV
z^~xTvw7yEI<ehAu#7S3w{fvVz^)fGF9fhp@u|N7tHsyt8IMN}>vG*k)jbDAgWAG^=
z;_<R;-NEm3>=|63MMXl=rTElvBqn&pqo+=V>0xN@{0ruo>F$YmQFH!p4KjLO>w~1L
zJTrP}v&U)ir#C1#A5~BwzxV~h2XNW}jcyb7Vv6^nD<%o>0!2#ogNY9=ie?;c_}yib
z2O}ujD#b9UH1aj{E!cToHp*=~D!;oOZm{PKBp4nEv{*0XDljK;j%h-vM|0&a?OU1|
zlei|<trraW1q}FdWD_f;+U_ITQX9SMw1kKP2T;+hXPOsG!x)T6WDX7_=xJT*?H{zW
zOP>Wuz7z0kAvte9g`~tku1KubExEBM@w+FV#<Oa0rC;a9Ldk8lcn58$7jNL;Jn*#r
zrPx~SW|b-Na;Dw-5VYlNu2b(qB~O0g_iDU4qZY%Er2~~|0*i@s%KnbtDMK2?ClBv&
z=%&#m`jigD2aQTJId=qTh6oVxiF!{rxK&{lsSBtVMCn1PrQ_+|7;Tx^Iqqc-5ehiZ
zcgVyqc{<cLH$DmJiPgms?M=R7#2<Y<7}!%~TZ~^v%)NWyG>^A0xFw!k*^=$veFVYI
zL@V|;`hN9n2{rt+_iy3kN35t}$2*g1+UocWdM|9=c%1G=zX5#bR+?qD`+IiybkCfQ
zqEph>nRGbJerH~LUu86j-XX9UXN5a1)-GF_4W-5h0^Q1i6jS@_W}v|8OD%J@2S;x2
zH!7s?(RxcRu0(!Z)fPa0mx~U6#%n*?%PClxzXszdYSC@5I!hbDr74~(S6YjqQ_57U
zT8Bf6@|w$agyWdr-E8l-Ae+s~PT%DGD6ov})#YubLy4<Yn6+35MmqgTzfu`Nk*=>a
z*#ekj?Mr7uc5Q;qzPfX-)k3@G%RQKPxFzTEVPPJ<;7q!FD#5#&81qiki&Nc(G#;op
zO(DOU$wn9I3btJ8O)S-N^;9o`-E6sGp2jTkyY7DS!$v%Muem0PIU%4)V>S6LQU*FM
zBSdMRQ2fGXwHwW=z=>XKcP-TXNN$~3uX4W?#m2(|Rtv~#4=sSuo0-nXxv<o0LBe9W
z^}b}YQvw*8z_&3n9?z8%Jv*zh%C{PxRj*!kJLJVb{nA2>7M2$davGV>yvy!WCq18e
zc2Z+LyHdj4U@->b9gCULCN9R2bkTcOQ)S4*Z7p7}xg5MkRky=H8Z075>$8tZ92VA#
zD&aOepFMRwPI<0|1lbN0zhKhiGmn}&?=2p|vLtFYvEd$dKti3X4Dl!WhkIc7%Fo$q
z>kPgD8P;;~sON%q^Bmp>OZ=Co+gXqJZ_IPnEhjxopqD!{RWp~WOk&*xOnO&;yoRX-
zNLh;!V+!w@ceC*5Z|vq1@R@7I$Oco`&zkh?RtIBcJX}xb-&~7GTLV!$y*}<p(qBU@
z$jRKMsh8dW=&pWMuARKtU=$!1-w^j%f1CSyv{AxkIR*54V+?C+a>VGP9m$=BbJ5K~
ziCKD$GD2R9O0I>HF{{JiwsY$bA3lt6+0<ABwt8zeOs}1FuUNqP${;rG?dhKs)VxN|
zXA>RPdwQ=fhbgY>q;ejHcbny3wJ+0U+$EAP2YZ)9^4qj54#N<)t?~Yh8=OJiJ~DU^
zD4SGo{vbc`&b3stabI2=@cR-zp4*bbSMVXj7bmn|_c+u!<B1#*m-$F`;6>S-hX^ms
zd(x+QpZ|DRByQ-Y(y7SV@Z%R5TDEWrKO6$WIjyco#M)KvPJPrepoq+<7pdpEs<!*v
zg<f6T`I+;1w;;Ssr``<d)x*>~6}hjRsaa85@~+lm<mcknXgfPqgree|Zn$%o|6T1_
z74`I{2LndRIqE1VO1rC1ek&pSI3N()Bh%zu_D*juvHcY(99|?bH<w9oOq`7Lv*+=;
z77pWNw&x~C7>r5pm}uiIq@GIVXW_k(vK~$!bim0RFH{nlvA=2$v}?ZJ3xG|6Ym<%)
zvt-)(j9Fn{#{$iHBER=1xw--zrE%-WxN9ARBea5FKOc)5mYg_T4(h*@Pi?SSFFWk0
zN%*tN4UgFgs{NBxvu)a+m}REBlGS`HTm-bjX1?bwa-`6y^^(UiMOx1hu(!ndsMyV0
zBi|EC?Z39YsOh@+*4I;F#Jp*|vZWnrmRu>A>u%n5k4zLr{U>^(_n4-lbT|?MNE2!o
zqa1;XkcIvL3)f0Fp%xQka;^13x#j1S>&BL`^|{r)P-gwBg|kDuE&l_qg2%f{6u46*
zJOxp~DtUYS$8ls%$kMkL+=pWaRRS>6?`OIxubrfk5rWs>Z#p!1w-iWuKCTQ$dLIYm
z4W(=%)R~j*Q&+JqU@Am8rci+i&4ZFit1Bxz=P9~|5cXB*3Oo;axs$A=za9C>_Ndl|
z*=6g!13@!ijKV7<jcg*~+Sg4xEA=4Qs)*X9GzATtv=sh5=U^45E))qjbHHcNVL76A
zXn*|V39H3cH3;Yl&3Y{(y@TVtc(1E^deJq?bgkwpqSXy^y$#T{R^Z9HJlHoIZBJ<#
z5Dn3a1u{c*A#*a9)wp@GvEES+q6xOt)D;A7Gy$c@>C2U>9?LolLLwH&{ANzHW2j(v
zRlU+1q3l!|KAtl=v_}MX5FhSmMpf-?&rbMlzjD~le>V)dPvCvFux;05<C%f~L`r5f
zg}J3WmObx)mcO>%Hcx*P70CaLBn8O_Z?GqG<iig_xobAh&@kt<N|GwlB}Vn4<c4!s
z)ts#Oi@vu4NAlVUQ7!i^Cvu+}Ni}(GdO9`4Z*`EP6B=>ib*Ogy?bARqhtjDOo6HMC
zbp4uus<narOL@Da_ffbpLW694MF`c{-R&t_W{+G;Yplc-ew(y~YLj3t3SRM0OEnF#
zyx+BZ(@$`4qL_4d_-p2{TJEJ4X{o?YJ1NqaNOKyWS`c)@6p;CqsMG#4QH|p;yvDOV
z_Bc)S3qC}eR=xoW^yW}a@Oa}WZD6110`t(W=L|0M$g%g_{w=ziwX`*MD<L{Ta*xTz
z@Ndc-={OcaYB^DN$>rAAqN(GmvsikKlM5i^JHFnRvvrL^-nTk;{u58IIL@22u7>!c
z=ebdGW)pWcFi3iy?^jW)Dq)vhY#%wr)(*@Sn?DOMhMF<L?6wRHEndZ%((NwMBl|j(
zglVs5y1To})(1W6kO5q9lc8qlp&h6m9?i6v;UFH0XeD`AxKX_hNPJe|?IT&Ubx<X@
zSQ3GZ5nbADWPvh01Tw!iz%}p<>8d$>tW|Xq;3u$QR)&xk!zP~EjMX^4Q_N{KrKPvJ
zzu0(YS;rm17>+}1UXUTsw77L9Z|BfA8^fGOOrOaSwLYS!wqHNXp6eOMWut9#Gvlxx
zBDl_3D(;AI^lcY*&nmC>x;eev6ED#w)-USt7cA4!+l-Vj?N1w9Z$p!A=CWO6KvE^L
zn{GT_PU7Ig(*NdKvD&v=Ly~n<i^JO6qG#890HQCH(j5z?4qbU$QV*$@p&nM80ye!~
zNn06M1g?)o9@CKMQ%89%e(RY&%;vQ}Tp@0P6S5fR%k@R?h1PlW;Yq%cV7iZ`U0q#Y
zPUz&?l&tf6hktH)L4eCa&pjiStHNV{F%MQ`r2;jfx=1&*(Fd_elD(;`>-l!mVr@Y)
zTh#U#2B{wZ;ZRFwA`U$tJh#LR^J!{vwRnkM`BcElCOfjm5*f7Gw`xfj>b%DK7``_*
zL=%`5U7qf6mez}oqnwb8%8B!+7sfIapCBYmjW#E<M2t>!Y&)^)%kQ=F;Cd!J;1Rpm
zfD<v-Mp1+2$O}EfM_PiiKRp)~_#w~hB~$Kc4o(AumfH-JuT<Li9M*UHc@#>_e`YOb
zqb*FcY-5b0bc|fVz5bm?`NgCsO3W=0&FI&d*`R8P%8=f-9Jk-G8Uq;Lo>17$R;t0`
zjP(t4-UMSWLM31~HZIoWN^cxihV!Vcw=WNb&N^j}zyAFEaI>VUGA=}_v(aT=`fjNl
z;2X|TYH~-YwCpb0ct-2jc9td*O)Pzr8vjBZAmo|ps6n}Vh%K1H|4tU$vXaZXvtS%!
zoWs2-RXi#d5vBoX(XVeLrPig$W`67wN%fx)zm}wa`rZRF_{YuKbZ6Ln@aN~azG4s=
zdpYkOTB6}$FVi50auL$p4ukXHWTqpi@u&zDxL%#AVu+9I8>>_+s<yDmVRz{)aG<>1
zDZ{Q4+wgVWF8fH19Vq+dHi(@kZtz^oTciT-TF-WdtXMg3pPXjqz>{D>3X&{#Bivyk
zKlJv`QeT@C9?~@}OO@6`d|ai6zb9TDPP9cSQ%iH$j1M0i$`OrEW%;_eJJ;#ty0l>L
z)bNF+zP7k1B)2w|mNY1BW<%I748`r*+a3jIN>Y}<m|ZGu&#mCAPJy~Mg&^k><2TZ@
zszO*)7D6Rnd6pK3L$w!#)OIS6n<-P_UvYz=J}k$P&ky&F4NcD4V=L3n>0PNXq6sBj
zNVg@urVYHG3*{7{*_tfnv{~|>(f7RRm9YsetBEhGu;06Kt9RVQ&Vk;>qH&Dc&+YQf
z^xD5kMXw$jTs+dQ*<TJ<cRwphvvcvT(pv7EHJ}Hzs{5XQGQ8gOL{Ru~h%zSfzFVw+
zmp64BzmHrF-@}gkU^7=g=BnfkE*<pET8`#J`+^L*nP=|QcDxp|98kg@Lc(|Yy>U$Z
zM!jad+{N&lqXq>D%qd>ii0!(j?Hqrf*$Lg7`Khs7`DdJ?)9@_MF0CW-Z+##3Z>~YP
z-6*;A_<2vjHMKAiyW`hWVUNfFtP%%RP=}V`x4P;lh#1zKX7U!ELvtL>1;KFu)|KYu
z5VAAWMpdwO#On0wo__z8w)c6vQMj`;Tpq~;gC68?krELhexy%R&91N-^=EOo`*<bz
ze>}Jkag{I^riuD4T@)SnK(6%Mq4`R9iKA&&M68ZdS~io<aOI`n@#b%%E?pp%mwe-V
z@$tI3Eoq{t&hy4?eUW+Veiz&e4!uS=t@2=Zwu*>{a(&4HoLjS%rxJlUp!kI1Ah~(k
ze~7Gm`5OU+-D0gStW-1OdyvfMkJ#H|XxQYFdDQf0;_LDV5h+*xL)8gzp{uWBv-wt`
zOGGq@9Mr9Vy9_l?LlxA6E6R!)=Ug_%xNYZ$r<8%pVGw@BoVIn(gvfINr3T{2S}Lhf
zh26!*q4O_=oP*f^<pKmt^pUMDGv7weKO`GMB$lObj8`O~+FqJH`tYXJ_@=qqXI;+|
zSUm<Smb=t^pVy-O!i061au%wMVMLiSYnnF)%8P}|=PR_#uieAL)}ECXrj#O=!jZyx
z-)ROiL>}9djH^MigzV0Hk5zDK2<hrIlj9TZo(Ue*TuPC#*Qpq%h29UfSIUu~Yp?(A
zDeva63$t$}2)xdIBkipT&I26s-U%(=hKH-Yn@4ch#ySD~Y#ITIA0VaUe(I*+{VIN$
z8Od$YhE2Z?<<uQbLtH6{hw!=YBpi}~jR;YY8vZ`Bc#U>!VX+)sWt8o>Il8Iz7Tnhu
z<41fe2(&q1Jci%>c{&+_o^d%_Cm4$E_ys&t09lk9MXwI;I)g>KWG>qq3%N3G`0zUO
z&7Oyra&nxe{pyn43hbtMg}VC9;ZWkcJ{&&$Q7LQM0pF;I$XAkVn4NmhsGg4pMNmbM
zaeF4L^oE>03{pUzB~}`3hvoN&TPwQFiB*|C+CqL}9ipi(F8MMZfoj{XdjRJl(<)-B
zp}lk}3`oFbF?jIPANL*O-bwR0IM7F@4Ml2}Hk_GjH^-1!gbr&PL(-}gC3j{Wf!?SL
zK65F7J+ToH8dXlF!c?J>5dulGiF&7(*m-wGrsV;Y(<7{j)x0a5ghEcA%P@My{&<me
zb@XQ8$_<EmjKMEJ=)LW?FP(3^qjWT-+p=x<f<T+UDjJXyT<FVrSDG@GtjNqd9iwP*
z+0Eq=NXVp@TlR1#vYCvM#nEZK&|l<3z@tpDJxJ?i-VGwu=nvt{jPWw(@AjKo3=VL1
ze}niugmu2vumUPAbqPO4%1t_GR?;nAnz!y;3_4>lC#$_6E*Y9wPlMJPHOBLvZP3Ph
z@6Omq-<XjQy5A}TR`<hBE>szx-bQHgdglD@SN@T(u&K0b$3x^w$+2%?_~JI@@2pA4
z8_TP^7tV)rW&^M?H6IJ|IljUyvyA}si7^O-`M}V6%>&0ml1Ykucz2aR8|aQI+p%i5
zY{m!SEe$TW7nn!BAa9<M*dCR-^93Z-!bq+Ht4UAEpU&Y<fay=!5!CT*jn~^Q{%jVd
z67fo`zMGQu&*xwQjj~YEY`fJZF?S-drO}70WL`i9a#keJwIzX1Nq;o-f!31pGSu4b
z<2tzS+0Y&2;m`Co0D<fY-rxIkm%A<4q>~s2CW*J1zMCGnd#$^Zg^}0Qi1eq@vxj?&
z&IMXcNdj9DD^thr-x%kNq63Fiq1t!6dTJ~@a(Ch?c`X#Kn_bG9HM88EVz+g8?k?fx
zG!j@$xt(e?;Xb`k%fx1LMf4N$k4{Q%pVWZDF{nj!h7rrmKsCAr=hXgE>`A@xo;9>=
zW3fiY*m$K&BwzvgZZ7yKQ?Y0GG?@>(Ct0%8*F%IA>8f@?CS~HjMrmbzKPiu=s1-F1
z$Yybd8*I~Aq;8FEGcs~m&gL5)(S#OF1k(1zVt)WPZ=Hb(N7wq@V=Y#v75$;)GvIfL
zV6l=S%*fdDx25)|0oZk(<iHV-h1_5G8qBcJ<S{jk+d8)ZCmBA2?xJ>2)PwTZvZfi`
z{cwlFYGzZ}P#ek+1<7>%12xC2*-N{#(fe?>Y)?0I|Fps@Q8)@}joC}tL>`NN^Hu7K
zsd<lw5TA2Na305<4L_w-m2~UQ)MDQrFU*nSwi^9rxX>V{_jOZQ)hh(X=Oo>NBD*i5
zT5UPGb0md(?7H@w%|z8PTyD0Fk+(LUNllq1`+@=Kx1b2J3`d)Ev9S(U6!>gWYg6Ek
zIheqjb^7N(I(FqVqAKdWcI}5xTvzX#)-44u``MjfcDejDW^jQf(#c|@OXsZn-kJRL
zb4xX+yDK&)6fU>-Xo2jYU}Ad>zPhly$-*O>-kY>7iXqfz!>H;%57b;zqlnJ4k!YQr
zv1tnpL<Hru;(PPI@t}x5g2?=DlH#4N+|y>Tu!%WT4nIVfbG^kFUbH+@MN}E<x_+l@
zO11*hZvI&lLYk6b`3AZ;L2k)UXfB_^ld}^MUgtUT6ZHR$y8%3{B>AMM`TN{wBc!cP
z)7IFNHiE&Fg1k768mmc=M!q=9Z{j8g9_=8BvFJMbrlJn>2D%X;06m^&H9E@}qY0Uc
zel5(Dg5&VaZoowdpBNm^_U+rpn`7Pr_P#fYhkl4*DzlqQg%;OfLX{gc27ir_5vd6}
zR+P}YHGP=Z#ik(QyotC`OadG>O+2o~vQd%($S&w59dpK|G{mQldV%7BnySc@V$-px
zWD0ve5)IL2^iuv6b|n1Ded@{R&zHL~D$OaSc|F;02QQj~S3bM<!KgT?V$*eg7d(4y
z7Dn>&24OVCOboW=LF2un5blbCjjQ;T*y8|qZtOj=?x`}gZFUn*9xYO}Tvb}=>}%Id
zst)}AE9s;Fn>hHz98-@hr};>wWc@=}$TPQtQR>x)XSIDQ3IYWR$nW;i0!=sZ`qk(c
z&G!!1<I$VAWY`>WEG@_8oNo$SM48z?1|IzlaqB2|Ex&kXR)o_p6HM*0I40IQU*ES8
z7RdJE-2u+z<lf$VlT{U^)S>O~DRviIP39J;HNxwN^ft_u{5oA6n_-q)W;#^i=6vcq
zZJ8XltEYZI8LHXj;mDo)(^!7Uwrm@lG`n^u@>KA;S)!h5Gcr(|=+kk2abFSX4yRwi
zc}_PU9##VZL1Kwc)mnQ`^lUW;me+h)nSH8^>z|J7={pFp$Hy-*zbZ&Rr%2S(W_-5-
zQfn3^J`IDUJR20B?uM40I<NT(xl=+Qu9CiM15EmXp_Y7VJ|G8r>V6WNyQQKAND*@d
z`P>lI0t;uUi+PW3YCaxtXMOQxGaP@AJlPLkrZ>jA!aQht;(k>`VD%JjOlZ(G=rIDe
z3PfA@qPId(^C&Wct3R?cp@c0;(GtX2A#V%(-*paEd5z_^Ni3P?$wz$aQ?Z)3;4<-6
zI04TAn6Fw7QA=y6>vwv($k_Fsiv75A@7O|W@7WmI3$;R3_e`quPAohEBh=WGrGYbK
z52q_K%x2D8?<LafYSH~qvuP-CqFJw+VvA2K$ODVlSgx6b5Ja6MdyV9Uwh;sJt;t;Y
z$!LzWy4xXovMCEiyqkrpN6kVXf@qkq%%M|psIzKFwJtH5--GLVfeM~|rsY2Vp+5G+
z^o9k<r0*TLYpnW%=N_(b#7p9Z>4O5YERu^eeQ0j>T)(%5*vr1-&D|D(;jJU#;5Ec`
zJlykA_b7gLlk*(M%VZ!)%&qTwntHSk4ZvWe_LM0DA<4-N<9@pFz-?)}NrL<<l}oyy
z^;AyZ*Z+sTxBkkq>)M4cFt{yH6p?O`MnJj*>27JIk&^CEq@-J<q`SL8kPaoJLApCH
z@|*ZR&$pj<kNpSivB%4}f6(F0d9HJ=wPqaim~&btz8k=Nz=1Pv6vRD}fK5o4uQAi~
z<h9kae)(q{?AGi~EBy;|l+vph1!!#nol9Du@ChHB5-{^d$Z@oNv3_nBT#!81!SGZ@
zgUP<UsLeM1l_j7(bV@7Fb)#1-tt@KV$9^kV_ypmH9;7FuJs#YeGErnmZw^*_k?>19
zO$8TcYu2Ij;6hpRzw8i!aaVmdc9gNJhVj4&b~IfkTjm<`CFD*RyiNMQ)z?!#IbuWd
zya05psj0|OT{YKyLk(OK>z|vOu7H<n%rq-_#Z@1?8c1+G4QTcf4SUynzWUA&C$52S
zD&eN>+83E0!7ACQGKsv_!d1QOg@2MQh}ysRd|_5e3@X8pxbiSR-<<UK??%VL-Egug
zJ6^NGV%3U2aATW$i1|dYX_(87rQ(aY!{{z@gc=eglcT?-f5oC!0Zo>hf`p!`bzX3+
z)Hs52us~s)d#|HSm+L;y-n8nR!pcBK^go4NIR&^|Tm4U*<r|zXv0b?-9BB0f<!M;0
zJEMZ?ND4J@#w`iEUfEwuuX?-O*(HkmJWx}@h<up|onpUFu7*d)2m-m?K{eZYsnM;g
zK+fa!-Irh9%cp;i*|vING$U}sZ1Kt3`;ymXw^L=JwK#elc5-$<*;@NnH8p$d|2WwR
zFUnH|?OeE?$PMZ(lF;#0moJWpCQR!3kT4x8Ay;S6lNOmXWnGp=B^{=^I3F6we0feu
zCkU}c=y1ZtRs&EzINu&K9_sZ)^`ukCDCCMha9zG%mmxJ*QBnc5g=}bqIf}om>T5S%
zVGXQhxlN~9I^(oausBs)nPT4%2_|6UrBHvlYowIukAoB<B9>PhRAaM9uNC2wluwff
z{oq-k!#qu+l>Est{kq)Aex0mLkm#=DP&OtO?FD^ydK<gbSc_arH^m%!sqv_W#lbq*
zH5KN6rhGpXXx2R4Nn+s?C#FQ=itQ}N2aLUE5MZ@SenY!pxjq;(GD~8-Tk6Ov^!ZWQ
zyTK552&~j9-p;l5sQ=DYx8G~(RvAvHQ?$W8>AYob5zSeaFjNydQe~o&a&q7{PT(B;
zs%Q2253^Rp>!|3~6+AZc^|3mUScNiitk`N!!%CZfS}4VXWm4&4rVnCuPHv9xjOU-&
zCiwgMzOGsnG3&MN`^{~Can`&1xs=FVi_dDCa<vHse{Cp83cu^aQ+0)c96T<|u(NPi
z{)<v_Nur$Ba>cFGZy$_bdoPUo!+=2RT~06!n{$(Z7^m?-m-6{HZGLU{yp(W3YA)GY
zBe^}vxj#&-wnNhIG#cvX(@TR-0J5mIb&^`U_Gh_B_ryy$|2uMb(RTOVq-dxkIj#)@
zJ=1^)zOtOAG_QVDH?vaW#kxO3nQ<L07ca?&9rZr#T8FOlP@2Gtvr`LKweMB^-ooNC
zw;LL;)8@b4LHH(K?}^3P%Gw(=`xMpmdTOGmj?+u+fQX83=*sNteVU)nVm6eH<34E9
zcE=GB-H*5)>=keui`J<3@(I^hr)84yayea}*N37XzgyLR(o)E9Pm^jJr8524qWQ0w
z#yQ)E8{-W>pzD73lqWheDjU0gr27Q7XdT~q++HxDGwPULglCPmr2(A~>mDpOlo(Q=
z%l>lJxVL)Q^lgT0|Hph*jP+t~K>auj=OiT<FAH~x>6s1;2#DDK*<EFAkK20iK0zXy
zP1jnYzSfa8x+9z`+Dc$Eu4>k$YDy*B(s}f>raw2$aP5M}u6uEmDNVd?^1SC(qSW)=
zGn<y}V@e`|Ul`%U^iv4L*0!qYqIH%+mF(gC0{|4>AB>@8yJ(s3eas;cve_7cF`NPo
zTa%{_X`eR(IG27sacC=OaDBeF24>U7%JGO)PfQbRh=9aw`&f<B!MiA0OB)7ULPGOy
z7Jaw(pNLc9IIL>-1x%2XRk6U@ajDSpV(DD%gHSC;Z)cYE8m*d@bIme^GW9#Xy7>P6
z8b@{0bJ>M9-D-RB@TXFq)war)rON5U<|B+QKlydzmE+a=sE4cmePA`$Vn*^C+(xU*
z+~Swe33+pgUWJv{yx*CH4oQmp8x$GRiS!|SmvBw?quWK&Z`%AD3qWmcV9IpoQ?+Ql
zX=Q9PJU$uAV*2xP(q1BxHVN}KkO2(IWlfa<be;d0IcdRaGIjRh{N$Y`kr??m23`ED
zpJrKkxRmm#z83F<#;Q5%`rT$DGEaBr1&D_q<vn!>di!3_uvI3&@H6ejuWxvkp%l7R
zwRJ(`feS`XlS;J$sDd(g*H}#zEq8P<UOTyyP=)_tTtgrduduYzYpVlo(hddzd|lP=
zV}Gp$z}&Qk1UC1@3CG_3;rs5l2=5?0>SQ~gIQ^(9e+U}2UCp*kuk&Bfm^ZN`yI5MZ
zmpVyN^MX^kMYB2y$%&2lX^MD;G=Vc~gFS<te*J-Pg@u8;*=PWHk0Q}M!v1Pkw7G9p
zz#ec#ySx5-&8%xMY{7MJ$MQ&P-SzPBcWn6DfYvJ`7i8V3dv9f({FqFAY88=_8oHn{
zZQZb5_i@NBb#?{{Vk*kUxpB8{KfQOvTCXo(L#4tl4*=5)$b&}xIN>d^87=mvQ&&~i
zj`1W79DiW-i`47Dc&?G{@Ch1aXDnrK6`l(-l3OXkMF&RApW2%;AKu{trLlm2R4y^v
zpLQ^mc8{PQ+{g2Kf%d|@DkbTxN%x8>&Mz3fR-35l8T@1-2optXAgmpWCl^oy*U^&(
zNfE}U&5P7bnZ~KIZR;&8EKJ-o9L-kF(qX0#TffU!@Or9bd@YLT%@2&6#O(74wrRJF
ze{H{p>F=_+oRj@9{Vv7*_n(}w|7>WP>T<N_UK$Oj2lCRHecHVQ!bHPY9+6nGXgudh
zmetur(mhcYqX7R4*FsObCCvsxW_Evlv}?G!dC<?nUiazj1I*V?2k<McFN2-5*aP1p
z5Ey{ksD3yriuc9iBHE4l^XHH9hBgk1%O`yv*|?O=O3JsoBt-AiEty&JKQ>(VtHIRE
zI|0PxO1ogZz9rJvPPr@0t2={?x$NcDNDtTzIYa8?c=jdmSy();v!Fb9b3Z-Vd(}bt
zf`G@)wCj+d=5T%VVy&Q+5EYUL6DvK0G>_XRP}whIe+(G@u)9XA((_m<b}&~t53;dB
zcd#MSn|t`;9j-Q^%#FLAy=V4^ar#MLx>ckr9ah5h9Vj=H!0ByIv2>1ac%LMhCBKL*
z{_NY)7qxs-oV{^376;#+ZWKXp=~(ucjxxvR&7bH8P!L*SiaN|hzRXI`4Q9z>Uv55i
zVO{WA?5TTE`k9S@cULBw&;n<PC0n}yCX!No#-fq0l+BOhI7L4m8HtQ&-T0>p^oH7!
zi~z1Uk-rK5YQa*^aE9gv0kwO*3xs6_11tvfFY7c%CCKxhCcbZ)rJ&|iKN)WFglwU0
zg6p5~;Y?+v#Hn(aB24%EoLkIAE8kRgL4U`ue-6i(Z#r`(HETd||2!TNl)pL$6$h6;
z^+DXE+gxp1s`&LRgi0y7(k<derh40%Pq9JIE?~2#bpz^d*Uuqe1I(6a6&&mkg9Bhm
zR*$`iH@tsk0>A$-0Oic~KE&?pxl3!ebU`iC+Qqj|)J_2c3)AExijchCC}p5~9@aVv
zsd~4e<$ZByG)*p}|Nl5ax_9q5#j-_64okPj4deD_>if~eBK|3QW=1MnNbU;r$>Me6
zKkLX58s{R?=Q!oZpRRk|Z6?1*#8POZq4_|OR$I%_Z^}Rn<MqGr`kk?A^X68v%QN+4
zhv#Trkg%#yI7*;i&9M2Si$&AgaB!7#+ZwB*JluOkJ5nn)*BQ)5Pb7(&y4KXBPv|V*
zsP?^8fcO2y_aCT8y6QkS@7G>i(>Vq*U;%HHDW9_q2_~R1enZgAENgOl`DC?=E)30#
z*Jg#x%u)tEvo#r(C)DY-S)Xi}w!$%PJf16PIFJc@DuuhpB;@}n)V<&pWjlCk+-9u-
zqel-7!#-3)YRPUX+47&@x7YYKA=MFkI<o)SAea$d*!oW&Uzq_Gp7i70OV?%DNJ=^#
zF4vxa#6pZ8wr<!0BtyI9#Bu?>-o(ebPiH6vyBR{$zX3TVV2@Cotpg>QG60ps1O-tm
zc<K5iVbGh{Mk)LBh&rC#k%@_^-ymWJTqX9+bLUGUcgcjqDo3|14BppedX{nb+%62p
zfeLC<(i%t^OkftSbgRmB{EWJSY`#2C%~<!QpO-|G-PYKTmpi{#m<{*6ggiNml-ON)
z&qNtAPo_tTfUQvB;xjAczdC@;psB2-oYTszh7$FJ`E3~QWlXkGpue%}OXHf+VkN$1
zs@~RvHRPMiD-G8tdRk>@^6tiKYR;syfxfk}6~jb7$HcK0CPp`2^PQEJ+jNZFG@aY_
zVg(MCdXDftv%+>R`%RY`7q3#^HJ|OVdw7`X2%2&eCtOdIk?8kDF&b;*4I>7t`vr<N
z_5nZw`L!nsBpm+|?lB@8r?k4MC(MxfvHCuo=v1WN#jZ`*_b4VK`6V*5w@rvrCcb~`
znC-Edgn;B$+uD|(51l%Fpl7?NL<Z}F#E{03h%apR<`!vPaSynzlYqYSI2QZKDrNiw
z#xIYC0V|pioruePv6KouDzWZO(nVK=ZjBwa8#%{e^SQvYqO(}9A!r&|*~oFKDcU0P
z_sne<9xR3alt}yyTr07VN}9LB+0$u%$qZKvIg#Y>5eEtl3N?y*`ilUM&@VZ~-VhKF
zfN5iDn;q1<1#i2QJB?d+EYog$-~C;^z<2g-TF%fK4GCDp!pYInv^$<*6upww_sq~%
zt28q%_o1iYTqwo1!w6=)c&^dZD0;2x)amTa2RHWG9_za!4`{6~!!i4fJL=h`Vt9E-
zNxvH`0>4qudKu#mRshnvb>jdT5c5{K4#vYlm`1O(`=OA3>;n*l)1<Iz)bvJ^N1XYc
zkJgBEApH}rV=*id=^%lHg7EVojP;^e!==@YP7b?W<aoFg7>i%a%FV4IfO<Yt>i4kJ
z#v`QBbo09qbrJI5X!_uaQ^PhrU{HHae#!2WM)9j1;e)jmj8j+cW$*a>!37?^C;NUE
zvY3*r`dYh9&};c@KV06@y+$01`WXZBW3?5Mw3eyGQ)RrVt$yR7uS5qiW$#Aln0LPc
zIcO)KG|^@Kx$DW?+vc9V9KQ2XR+0vfo5A>LQeC%Mj-Ha%w9SxR=4v)f9U}))#rFE|
z<iVZD>r;Km^E;`)%SxRbkwF3Wbo0lE+!<%>lvLsspcnZ>RPkHz8JEsPhEwG(AOWK#
zhW>jCJ7S@ZjJUK)#h;3zMbIqejEsz?gV9zo)Y&YePA)te^d;J&xca^@i>SK($r><R
z#yBW)n|+8G@$4}krb~lW<N{N_c(wDER;=51Zb@|fyzsC`ALaoN---Nb_I0wx4$@3%
zfBqb;{{|v5UNwUm%<A}@sM{927QL>b^$zmcX@u+dnm#xmX{>S6URmESheLO7WkT*!
zpm}7#Wk$eq-(w-GvMVhwoY-W@U4f@`1{EV2LGv=LhL2@EUY+`vQ>o4m@nG&`DT#}P
zflF6|lEzfy#I4baE%5Ufw82Y{7?4jBKd?JuJMba8hoduKXL~qNHKWTnL{#o{;b=BH
zf!w>%#jSDjs|~NzX!M&9jo97MTI-A2qMpyHC3<iers|v*B`(@!+Gv8aA&2JXUz=M2
z#J(}w?SlzN=|hi$EocyWr`Gfz9)hPxCLUZybB0mU6RE>$f`$u&0I4-TY-gY8JoSnx
zBr&TWtNAgb@%8@jFiPnJd^V(eC*I~n!J2sV%PU@}7%8hi-&~#kHJ^JJ_X4H(MLSpW
zj!ropHgX;JD7FXEbGVV8^jw7RewISGvgj>Cu1YbPLN2){F0Cs{^`_~LUx>5KMz)N_
zWKoLp+|yR)MV2<1xJ;nw6tNqRG@@X*c$~Ux-X-LCcY3al9zgD}b|Fo4KBF5+P0i31
z%2VTboZxM{_BA>evI36jT5j`7SBCnban5ogUk@(Z@AQMxH-I~@)txQ&Mt0Sr_GHaN
zQmk7&Sus+rY}{tqXq`+doJK_2l~ZPOqVvdi1BIPoMyCV<BGtneQ@NI8kxx=3WBQAg
z*N39DmGj?2UVPN3aA~bzZQyV=`3^P%#3^fSwtQ>WT1HbEiRJ^zUc7Zc^raiG7_W5!
zow<*GO+4~h66H@gg4`EI6z8t>K;j+iFnwHUvtrd8m6vF;TT9MJqm<`1pXeUR_GyCe
zedQJ2Li%#gAUJ}-VtrycZJ0Cg$x&8MpbTaOr1Q<fv2|!xOolQ;rx{12&u~igaE&YR
zSq*X@GAM~$oU?WRIK7R@_;?ouN#9ED_j&3grp-!VEM~xuQTvFDS^DVmpsnF-?Tr5-
zpTfD+@5N=dY!25QM`{(Y>1^G==dzSPvY(2~0kTFV3tsmZ9>e|Pk)}wz-#IB7Z@V9h
z?Gq12UZrx6HYdR!J&0u;G9Hs`@DP*EFi!CvD=n3r?+O=*jq2O}?YwoB1>ar{b8%#!
zDWP)WOQWVX@;7b{ng7a45`74+UjlNAZ)0XCN9EMz_?KjJ-YVgPM~?<8j>b=#cP>vQ
zd6%ZnPZ!1sxNTmKbxdtsChct<UWgEN4IP0knO`_X$6ub@x;FRjvQk^SZcLM>vd%k*
zaA0fh!!9-%DQRy47n@;|fG*M9^QjfH^*ZbI)Q<kJRH+K1F~zm!H~iB_%zEwL-0xU#
zFQKsIw@EJh0HQecN2X{L{QRXqiM-WuY>JMg<yDrG-hr5wJ(mVMkh~+0-+z68i*Ak`
z{#pm>7fzasn!RsczaH^SYrU?*+1Pr%EJ_#WlzEQWweIvFT2{owJ0i6ko7vEAWhbf*
zyPAMR#cg(Hil=%F1E9ZLwRoqE8k<Od6NoS<Wln2#E7*wg4g)NS98#<)c_M~bEc#z>
z9SN|!8&czKOs7*1B7oY07Qei4dza&mHyxZfH3fxKH+RFF`i9D56lx6a?dizyAX9tr
zJCqhWV-y^<xl?Q^$jkyA9a1>^cuic4v_ACls1F$Q>SF1dtfU6ItQ70-`U^WhYj~u!
zf*V_x_my}K0~6d*t&gn+i>T@O1lmIni7&R&u+_%9L(7S}vYD<@)r7$}7p^tvSC-?>
zB@?-wiRI^o-KRNUo^$H^I_qga9cm=*{)NZ6oW8*BClRabj1cl{H;_Cze6iv~v$s39
z&6kUHU??1H*2A@EuW&0+F^zbJ?0)|6sTObtgr+BsyME_w)YuI%n;Oe!&?}ev?s|uu
z#_Q>ILcM@*!>8WZKpf7NFKZ!PYYJtF;cxi+mAh2V8G*%Th{x(yrC=(eT3lFUNL;Z{
zH~r_?6_46|6MBRbmHVI*8Bf-G&h<XpNAD^-><o-$1ExXGL{)m)^#CsyK{aNd09?A9
zonEaXz21Lg0r6azMja=itQzN|5adH|y8a!m7UoSWi?w67e??o{#KN<ZvQ|$yaWswb
zT%;DLzG3EpeXaYMT*X^m*g~}1SNo;(9_;0-DuM4`{Zd2@s;7T_)HqyyVPal2zf9tJ
z?Jfac{n4R%e9h5dy1T|v$yqqQYCX53>33o=M4D8ra;*8$?48|<v3($kb@AQmWzz37
z;@D3TDK#3?n~lgi5%~&bT~adZyC`uuN3!aYQ=J+IxygGbz;k;SM>d{gwx)c-dZM#9
zyxVsspo#=T_lxKPc{JU6M06%6sqz{IU=!`X<P&Q&#sH?31x(JpcI{du+KskP4>W2a
zc3+SwQmxRk;BqLJDX8csm~r^rVjFh)(=!AZ=)dMBN8G~51wtl#w60r__ZT}l{syw-
zn!WvjQ_6U)(6muUkVQ0u#XzxRyjqzeDT(DE;4h`depnQJ6mt3yz0KZzF!zuIWBJq#
zbWYJ_s*;Ht%b~sgzEv#t$&ur*LHei4@U|f1@tqg0L3J44kh|{TwL`l{-=I7r(6R8E
zUq-IlM}3N`T>p9c$PPWIsvH*z;CeWRmgftXWwTnFa$a+WRPw;>Qaa`Ec<~_K^ZI}C
zBxTFD4%V7lgXyM|rMez>9+@u}xlZW5K@r`=WMMUVU6HR59FVqDP&=qhL5SR2Fp;h3
zT}}MGY8{aGDyS-+bWfOtecRIwim7&S_BqgJlYwh{u%fR{G+kl8mB(ebsv_*{rO?Or
zPH$k+fLrh*WL4Z7tkMqOw^Yh3B=!)dA?KSfsN@}%2v^jPE*~RV5FR4rHdB&rBl&8@
zm2x@1PYzT*K1AE;2&*dL>Bp13%50zyp1upCRSmYMbJHJJfS`cy9Djgr;5&uHLZYN7
z*ViJ+&JR~dS@-Oc7tdmqLrZi~VavX`=(t7G+=76pK&e6c;HUQ;ZePMeOvSG@a&t+a
z3xAHFpI|06Ha1=c;?dAaqDO_^X<m9rSt%DiP`}}?>vPYxkU#0;jbZxBdX3TI))+{1
zpI1&_o11I*`VD+C-ohQ_@~A$(%T0Bjz&q_i5*U-&+{hN-O34#OQY&RcM%8Y+yrkh+
zgJWjRSYc!GBNfr<IMUioxrRHA-AQq6u?N34qtqc!y@=NJWPeQ17<C=A`uS)Rk*g6c
zGWw^2#kHw2=RR;LBGD%6v6#O(td`1MLgf&lUyr=d5l&3IZi$0<Jm<lF-_vpD!`M;n
zrM}o<Zud#=drs+sZW|5m4T;x6={2i=3Eo`80B_oTO*t87UQVE=YM_CoH#Aco<H17g
znE!`491;n)o{_#x3P-!vh`y)61SxH%!UqXCJWE{+aVwd+BaOl8Q$$_k<EA$`Bghq7
z190e~OIJp+49ebhs$5YG9vI_++ARrtdn`J7{`s-vH^$9hpM#$eiFZ}I@%c&1H(&9d
zU5K#aBU#hu_1b(nqj)&)dn%BZV+`n?vfM`COZ*&>l+I}VOkwP~v*1BX_-iHdu+=B;
zD~EHHJ%i9<nh_&0@tby!;O>P*gRon1ECvxf7m`xHb5-lL85<P+FwwQf0kIl*I)<M2
zBr$~e*|TN;j)&vr=K68Q<~JfT)wk@Mnn}Ow2I1a%F~FA!+LVvaXn<C(cI30g;~%4H
zDrMr4fjKIU+fzT9hz={n6rQ;2H;ks0cn+64)yE*OZJo|}SV^O{3QRpUrg4_(c&x!<
zk{&L!y5m<fF~!NNm2(k$MIdENLeM1XcMvi^aM5%ODq?O{%)+<r`@(95i^e?gq&3gq
zEk`kGudIPx|187GfDPjV2?w_Er;yi_5>d2=ys2~FbBDEz8_Xuv_5!^f_vTl|c80Wn
zpKZUU@PD(mv1xIE9PbU<7>`K|qd9_-qjagbHvsAH`)nPA+A--Gho%q5TDWjon6D~k
zMG7tsB|kq5G2WBXk9T2npE|9Zj%vk<m8nE#yuhM~7+xAVJ7|1Vw54z{Q*2VN{to|K
zO{f50EQ(IOvaz^PTe;rl9Egu)j**|u|G|GT|8O*-%6g&SFkfwNE`QRwbVWzVzx`c>
zBb#pM#J2}zFfBQcdtvds*OV&$CgRv*ip*a`mzna$4G#6}d=Y})SFS-RFGG3b%}Cmr
zm2%8gPjx-3G42LZzHOH2s*i>eZsoH#KPgZ4w_g&CD-N;bs;Kl?0;;yIQnK`nVO#z#
zEz!kNWLJ-I4d@b!<G1?H1ziIO>DCh4hW=5dL>7Zvaam+tqc<8ru)fCNo>%v(o$rN7
z|Lf7=Ot-o^^$Jl%)9`P<M70*7oP}VtW+|{YKBAzVI!q>wFIQnr)meg9;ot+_bu;P;
z8!gW36G8ovYoX<V!rt}uxL<_HBe0HLQiM+gov(?Ax70&*S3!nU8S;$UspiNz<EY+D
zomx5b+h3kcj?0tSG%;Ogaf{)_8?Ix>%@jq&T}swTJ&VQ%UC7p$ta~Va%oaxU9eHwj
zU#FV&m(U5;v3O#uqDl9(Se{wRC2Cm^@Dy5Xix7RCBdr>-UE3c^;%SiRCX-T#+6sZJ
z@~!cCyqKD^!A;FG(4kp*{Z2b~Z^3;f8+MKTrbdR-MX=^>{;M==H*D>whP1uq1vcUj
z$CUAajaXI~1v$?_b3aAv{zqZA?amiY7Xbyzv|5i050v5vgr9iQ+%lavn_ll9UF2oE
z6$QLevjL({_wwXL=+9dj7oj>KVgQr+vDMFKxrC-CEX?&ST5~HYSVW;7;;b>2>AC&&
zb<-E-O|=>v*3^_!8gq6N3l3}S(wtQUZ^up_<2wK4SOc5o%k@{n!rAjACcj6>E;}P>
zI%PC!a?vjzya;8jqgE5AxCND5T&{}^cx)Ej5i=ylp<y}EyCL9kD;V}_RJ(8}bt=N3
z&+a&mlJEjf>%&}^?CtICkH|ZZ+7lTxt8Id`t&qEs*WAw?x3r87O;v#vw<+0&vO_L1
ztBr=CRck{fwaOxN8{6vsYxeguvp-VWf_x^>9V;bqmZoRUyzT(LSw)B+M`tn^{ep5G
zbEE-HcQfsoQbOE=KN-VJjkY8bQQCNiSr?3ZB3tPuD`V_GrotZSmK;|)?k)N$WPC*R
z++FH28GS2LjERZ4yEKi)pj`#Uw&}@2x0kv@n~}q<%mVdJ2iez4G1oh~tQXt0h~3>(
ze6mADj|W!<AdZ3P!uiIXd4?~14dF#LOxS(Tc$&yI0HL>D>PzIY*K!jSW0G^b-J!xb
zjlRYuMpJ$?ZG!XX@vcGP{OO|@T`S|L;Qi^U5-a1ba4!2$0k8EJENY*9eM5X9owl?&
zRTIk~qvf|8x1Prb^?tS6EgcGM7LyV8>D{Ml`-_+R+w9u-+_P%zlb?Q$kmulLJi!ck
z7Q!YdFJQVD0C<^by-@zTl~?4QQqS0UZXp3wKZ*+uCl*>-4J&<2f>D~F3UaEC0G5e=
z=KqLt<Q7Y*NIOr(b6U#=SlQTqV#CH@bx6p3N6{Q55L^_>ZH%Lf&7vlP{;fnKuaqb{
zMc+sOYVN1Ug!y(BN@L0)Zz#;HEPkUBzUO*H5J=enTEM3*JL{3nn9qFBE6lLFmu96w
zzOoG#B+yN#FFazR;YjziEhp!C?zO%9w+lmBj#n)1=`c6mt1!==^GSIse?40yQJ%_W
ztnfBD@vecWxY59?Fg;Zdua?iO8Z8u#tp@nFZqYHy>NmLCa@eb(FmgIm8<2{a=T9II
z+96$1rlxknC<yK!PsS-PR%sBt0;V@BXF7j;@zX$N)}taEFwMRqYykXFW`A<VKlSnX
z=u(J!kzg8XrK2Vo@fRd$qV?ZzBM{T=D$8!BcHtv;5!`}0r}yc~Ws-KW<Pd+jVXYKz
z-%=mH8~mhUy*IA{3G~PC%tvOG9-5EdAU_NmCvOV(%QB)b?>nnoFR4%|P$3X5WJ>P@
zO@&47ApYE1y6}%_kC#c4%tACewitLw^iK0hS}n@G)PQDP3Bs{Y5kh$MZ?JE?z95ll
z`jU^_oRS+ZphgTAydprScB(|-;0GTgt=4O^&7i`s2SHq)taCaJb<6J}AJQT!sV!c@
z3aLPvCebMwsLAN~2t@4%Rw?3`lzZ5P45Cd$sghZ{k7Ny{Ur8nMr7#%;tu#IqO&}#3
zLY`K%OO!wJWyV4@R?PROv>9MuD8v*$LwJn$CI-fYjPNqbqIl$dl*f!ku?%<lYWKw#
zziRn20`Z5g)cCt5w4d#Pbl7Lya(ZHg)_~i74?rS<_?T{F_8&4CDQG3Vru;i8RtOwW
zJ3{d9SP}a+5=YWBKuc2?`WfKYvpE^~l^Bl5Q5;vEz?QI-s3`-VGfE>*ivfQed0MWf
zwWoYGst^`L!h*3+C;EXjkIV?k{N;Uz9S~GEGDb!_T5pM^p)#7=q6zuhO3@50l1nt*
zbh`+TPjB%lC3H&GS_}|>s{f$ro<2$?MpXKb+<i|wuRNHPM5XmK`zG`Z+DeiFK|q1o
ztia(w;(TWYVdo>}^XXf*OXa9xvEwAG-8)~5Iq<C(ln@B=hzX>wZV5Bxpr#Hp;{A{K
z`?e<z-KBBT*47d%9>;Lj*KgfXpu7x>i6WyQYqmi})CR*IRKfjuj|w|WPRt)kn<1YO
z_!ZiXQ(pR=?A#?MdYdFyQ@4Hw{i-?epRnU2LJGyBf&+V`&m^EzRBzbB^f*>s-P7IM
zh}qzgyNv$6vTebc+sn-)nm2C}T}K@MWA>H5SOAay5B}}KGs!n0)S4u#?hkOYr3nH#
zLQ%xD6g}Md9N%%@hkkYZA3k`GtS4}~Dxx4}ABDSMz&iXkRw4*JDDTIj7*Gbc+WdnZ
zA`t2DB?`LeZ2e5XMg9=(jC2a3>oQgPp%P2>tty<M49*bzINk?C_G#&g$jocd%f<ao
zK#%!k0D<%!#G9+y^eqrXfHaXp#Yf$A|L7T@F>JpWWBD-e!Hw~U1y<QF7^7I!|9oJ$
zAXC>zmoxNc82M<OJ|#vy=ANwG#a$fO?h7(%R+@**bVZ|<An8Iu>EO1&B3B$>+9imX
z-po85o>)`SC45YqU#tgL@t6>VfGG?@Ace;(m1|`4hkjWJiCvxcT-_wNLC#~p`D$aT
zINap+qrfpF3SygW)T*`Bpu)EY(fIlC_%u`NAqN)1;aU++7{|DY`GZKVL{tQE(v<+j
zKmhq5fZzqH%+JwEP-{7mbTs(ObJd^_H4Jk!Etnu+tj=qFwYYhS>Koipnde2SHfOZh
z1-d>uXr~B7JC&St!1E&4+pu&k5mRryuGz2ZvM8|2Mg!Nwo{YUmsgU(pm@ZzF)u+k&
z79ltA;K6DO-|DW=4f1=@y&@a^#kzM!JM>ke380^l`_t%arex0l#sac^w%QD4W>(pY
za1gJ;N3^8<pbB)rD$L~zu!Cjp$CBX8Uddj))EHIlCS1!JAmTZ%5XmnPDi{y^;O4fc
zewR8lUhyczp#$AzKZMi$>Ehe!yK-Dr>#HDBzADp5ca1bDqCHuik~z3WVb3{G2%Q<r
zqr+3rFc9@GO}*zmP3RGgm%l(xb|9ynhpB%qp&(VCNa^w-FJCjr>4_EdYD@HU|ISFZ
zRVv~KRn97!>?t1$e)M*PX=2f&$jjcnjS%IQPnXBw%f3L;JY}sBGQCNx%G7qKYMrT*
zrt5v}8X}Q|RWPg#e5MfJs|}Hd7bO5&h4jIbOz|iM75Z!ik)cU0IqQ!F!tp321}Yr8
znZ)H}XIihnRBtC%J5kw5ud-zG%T?!Iht5&EC7|2+i-n-1ZyE%YbtNFt0N4slY#r%F
z>&kWtYOAkZVLaIb4a}5^4qxO$<!1cj?m=`y*qI7i6Gs(i`|8HZ*>2lnSqTaWw|3vX
zE04ULrGZrB_kcsQL&|zBBo|Vt+tw`xqD)utX&3@jbKe7NR4rJx4jE<51X3wzVs(Ef
zQ%#Wrud^YxN$#>YLEgCk$16JHerjTr$y<KaZ>B2=U%VyfD%2=h=p<<GKtqI(!zC5n
z1z4Dz6dpbJ_t8(_(HQXPsg|8^_71-S*`3VHg~4B$A1&kKo-IuOD3Kd@NtMEhynFkz
z+UuvN3fYeov%lYgZXBDM|6l~4@X<Pv(hfRx<Z>u|AeF0AMn#0QT)hSN>Mi$L47S~`
ztWyVC5l)D#F9%9u3WDZ&c=(&0V(R^bYA03A2Fw>9i{sdAtxzM~?Xf~a$Yp!K2<i7`
zGZ`xUHGpA^aC^n@ig-L)yhiT&VM7Z8{(eEzo5y${?K{sJ#n0wHePNav<g=Wsu6BDt
z{l3ap5arghb3tl_-<c+M-T^=o*Mr~W#}qWhAeJLz6(s$BbrR+u#G>2^`tor5>FvU>
zC?6)F^Db@ncbxlLirOF5dK?BD7_lDYBZ4I!OwyRjcAj2-%nXCBdpC=4uGT@w-!E)>
z^RfvZbhR_%|N5|%u!ql<WTBf4-%C)uh(COw9T12!_;v)bm}nCG`9FTllMrA#{^Muj
z70ToP_$vZY>4yqkU;g9g{lgpoy$$OhSp0wdJG2~=di3Ahw|c}rYlI$W|M9~n_rLXL
zHBbJZh5Yx9wf}EPBwbI@Ba&W|)Ai(co;uuyS3ewfn6w5xTAmSWs?9a~j@v`CH$U-L
z?Pha=u@ZP8%OPyn5ajRXd;VTz1ZJ5YUMxilYA!y9)iNaSwG_dNp~j}y_?cn7*q!Ck
zLM!x}w$<lBbip$O0uw9NU*)r@Dptss(EsC8Xy@!+m|MXA=(V@hw>D5^wII*0^H>y4
zK5^)shW*ALG>qzxZ;%_z!_D!-bz~-g4rasS72Rm7!At5<#+x+J^qN3DC8wU~@JS{A
z;h8r$6AeBtyx6Hx08?=4E+Ql|luZy*cO3;BHAKiV6j}5ePUNGZ<HN-yr*8Gf_9G{^
zV->vbec}2VjA-U3!i%<JMxjN?+oIj=u_y@47Z5z?1jKuR7DHgh|Lfy-7rNF4_%6>%
zKtanr*Q%vf%=`w+A|}?)nmtMJ%^CiVewhOf61l)7=OfF5>I+8wQTf}V^Z)CK5EEx?
zl7XX2&e_4rDj|I1we9NQuMGQ*F)V!i+^b)mFD|p+(mH?J?0pX_q&+QPdGvU@w_F>1
z8NW|G`ZPVB*e{5mlUm$Fh}O2plB{H@SLE|bfua%B2(vbg3b<Vei&QB$RXv}nwq3j0
z)0SYqi%c2l^1-WKZVHR(SIp6IaWJF-E#mQNZqqY5k7X!Po}X0YN^A}wwtliARjB;h
z_xUSya*j5Gj!c9Ej|1~`u4>8OCk_LXRR)j2kbgFEHPi|Pr+*D&>%5+AeMAgKCrsbr
za@(D%=iB$8Vlos*zBj%>?)G;hAHhb7{e33&)iWy)CVPuLuqHWh66)^Zv6@cTYr2b)
z-V%Go&;K>s8zq*M%rnC!4V)q8riXmdT~QZ|Wg5MxsE<O9{~jx0IGl>0z!8`!dW5kQ
z1*o}z%RX^dAmVl?guq}69x0hfuaGXe&>4vpLY`_dFae^hmP+!uyn1EPPd<#v(aIrq
z%I2=TM^MXmbyWX8ljmSi;qN*rV_=;*2pS+DUqeG5B-(_*$FMID;PI6k^gv?Wehot;
z2tUgsl~gHhH!Fwdz6+Ynu?FOj+dfkAyw4I>D0$b(L;)}V`*2QJ@Tb2ECeSIFSMo?p
zu3^uSPy2jP2*Z+w^EDM<RcR8@^mRv5&L_=ZUzjKtXlbH|iKbU*vGLZ{oL7WcsK6;d
zlW#8`vUd;cA<gpe2(YkM;KvlW+B;te<-@?MMToxg?NMZ+ZIs8bbF$l=?<hAL_xAR_
z`pp211R%S^jm2^8g(*W=A*I(NpM5Q#xhCiVz{g76^dVf|v+la-BP~4cR(49waHp4E
zx1SLklUyCRM{wX`uA(gR+bsrP=U;m$Wyz;iOgTxoS6VOi!qAheUxrs4uKUpmu7Gr)
z8x&T^yq-%=&h6U)uJ{iutB!o$Qc6QadnP>6F%a#15bdwHp8KsaV3Lc9xa0rulE#;w
zH?!t5K-iGf;<cqtf4f!CaPc`H0N8q8VUzjp!U*A${gsnu+!ya8W0-_c#N<BTT~W~M
zaIxPD8c|J3vS&4y+S?Cj(uQmP^Lr3s!^FlU+|)p3X7@9<>^4F<e)(4*y+2FvajMVT
z3{X%|lya0INIOQ;Vb=5@msKpbIapQllkSb@%IGs5%8pz|d-?JusL)R^o2L%GnpU;=
zRbn`w`-N02>s3uXirDZ$=tB#-lU{a8V%O?iU9^n+-AYgyGZT|VYn@!zNG+yWdnGTe
z)+Al4X^2;@F7vhwoDJ?6-I8G~XS4m~UobqaEi?$?7tfJy;a$2$Oc)521KpjV4+rm3
z2W4U$pSv62<DeC8&45k;S_A80e+-=egSFuSKhCgvUtfuW24{=m1T=$m(a<cJ;C(ao
zE7knHXVm{ArKAFefwa7eBloyr3YHXs=<1b*I=crK)NpYm7bbm|81!^P!5b`^<bG@n
z#hT3wSunTGz`-a;|D@%iO!t@P(2e$wwG~QOSIBeu2Z^qSII862cc|p`@c39VUx%U@
z2*1)G;#rZ8o=QRshBv!B+wT*M<~+Jh$TyUJLY?Ulnmgw$>*_V{QHz6UEP%7iL|GKG
zzTL_Z%W9S_pVkR>3O<il#MFRF^~fVF^k=GOjoom8Hd`;PX7#@B1G0C6ncz)r^CHX6
zE>5?IIClB{#2}IRm|o*`m6iSta=cKIih|m`Uz70-v5Dg91<I`z)i)P=^5A#Uw-pRO
zQo1`jZwT)xWaTLJa=w%0uP(hU%KBGT<2y3*S6I%qMr*qv4?W3J+1?E<!==oTP5KCD
z?$oyjA9#M99pRL4DBadap2s4?q~GBNUI}>W{h!7USijH-IQ8}*b3yT#K})0X&C46)
zY!4nZ&1Fo*)r`z$J))B5Q6t$X8S3X&=V6qg2d%mEDUrwhbV+;Dbi~DCi^%FZ6GO;M
zBrDGJX8M)J>;9`i{@FF~px|Ipt1x$+`F<l73ALV^qa{nsecUPVQK&l1hO!=5WbEvf
zx@|$APYYejWs?M;$rrtH?(2G^T}DVmf$maiFI%)JWj5@^=WzmhvObepRqB~q0*AGM
z_g$PvAsSw}udO%cLeU@pL#;*5XrKQGryosEl;{gb_-(ysfajRNAZY(eN1ENmJl|Nh
z=044TPM5xTdX?NgWi)H%ye*o4CBxdlTAV+%UC}Tny$KBxAkX<CS<S}ak`87o<+vbs
z!N7FJaaeCo*id31-s2R-I6rIrOp&9r(x2Asg8_7as|!N{f_mk~U12)P<k5>2vhEen
zj>YY^8ZR{tX6P1WPstF|fg4#NKkp54iz^dzE2tLdO{v@Y$;J68=!GlGejnJl&l-!d
z9zSMvK3p%-ZA;*?mxhx|<G4HTxK(!q8Xf!5qg2F%y~WmtH8M(X!V?krXLYKssLqK3
zmCoIOyqhh5&Fy`7gY#qB*NkxP!YO4yow|69bQ9h#%=Pm2HXkXRsoAPOo$(<upQyY#
zmO%kH%&ev(g{mcxM;juQM9CErp1QDf-JWM?zD$Y7K>WG$!O_~#CC6mUsq7Jg=4$=*
zB#tFF@8PmoOvQopMuG^q;4mMbA5Ej7q0s;k=gHc`F6V(&0n`!()#7;=Cl55(YMc!i
zk_G!Z3=Nv71WTbD6Prpt)pqSS{HKJ71B&~}QD{vAeC%m`jq{<%RAm;dFV4e<Db=l1
zAiIsaveI<_-&jDp+j?k3nndO!sz(UQt3&7TS!ya*$p0}cOBSI~WZ0JgRKLxsy3_Vh
zGL-_Y$j0^WUU#nE{wsau=HEah<oK0F4WZ?V_;Fg-gXo1zn$QXhSiQ!B5LUA{hq+Y6
z`uDm+r7mPbIl})PlmK?|zdPR|uKy9PAQ1l(_54p9_&<^H|6m3GO)31p6{7zSjPrjx
zutkmy#xz4F5&hOJh#(Oj*b~t8YQ7^J8YbQ5uf2hWmdN9*42cYcAIg7yN?1MQc6a95
zuB@hj*KOq9($+-PUZVR2SYW7w0^p-F)}lTJa<5SH69v=7wHw_227(j25M#eE`uXks
z%y$gFvuy<#o)^abslLAdT-nLvB9HcVQTWpzIat6{nMw5LMCdg<n57_s(lJitepX~Q
z&N>$d-c#*vCk+H?^6!6CTF!aj!!wA3^7TUqR2DkIMJNma70{}-$+DE@=jVqA19<Ey
zA>X>uEXqws)yhq?5Sf|iw=C#XlX9zlZc&FY*p_v6`bfvI?<^&{L*TPNQl#sHLBwmb
z9MVk-F6IYR=!?*&4d8?Exl|%=9V)^Hh9Ikzy(_bv6Q1h^$B$mUToTm*%i`1HZ5gdG
zX2|L9?+?gyUAD%+j8Esw^CP9*$Iz&04Wf**y*>!7IovPK+%M0u@$ofC)qW)lQG_ek
zIzT^ln$7}&D@g#73_8(a$^+#Z@98=-7GGHH#jHQWqmbHzjq#%{hKAA@s*M)EI@9*H
zc@>!?0Wb5ZT4QGSiAqZXE;~iPQ2<M{T@RFEW7dA>Iq&}x!NQDKXmVcY#Ja(swOz8*
z$7ZUFR9vMFHjL#|MnZo)5s_fR^B%V8mMXoa-gs@tg-F;!Dn#KN%+!>D8Ue=(2wS=$
zs8VJFf1+M=NH{OTKA!h-ZH;tyLn~o83Ow?^zC4MCbK=%0KB05*)+EJrw7Aac!07_H
zRAmVt)7bXpBV^eS9nh;quf?;HlBDAfI(oUJyvbzTapXS_4`mt)Iv(IYczcfFwhqo7
zxMOZ-J8kh<^_T-0GVY5phBwji9k!-;ZXlGU6S$2zF5$ct#aRTMJc?T!nzk{;b$>tG
za%)c#DP=f7smuiJ4w-aXe0_-A9Dw>|sjQu~{0k2jeE?tP3R?oc9fB7;WH|47b09AY
z@rc5hQNStWQiQ3<HLo1`1fCiWRVYBVT#)%)pgo<fL=zhWPp}<Gm%>6^K6Ja7MV{o*
zC5rEL52#Y2t87c09&K4nR2DIBM6*7XNvL%_J*1F`((C>rhtlXN9z|=+(O~o|c`*he
z0V1y7<rNJLmls?r`5Lz^cUCQ`0oMW`ri(q}b&*cP`C;rw3jj99xS0jL@9vgJQ!oQ6
zX*6EGk-*~&9ifl5ObY7kAfkry0cKJX_y~)i*RBxuum_y^qUGc(rpzK%M?GI(C|r=U
zv%f|W<%Z}+Nz@d$8rnzM1uXs4({;}FPJ$?Jlq=uQfO9_54JcUp!m;OFf+s{;=Ti1N
zvqCrcWMRl~t>fNUx6A29Mfmu!=M^lZloN$Fq*9$E=yM2T0a#cdT?*0Te?jpf`*l05
zcmO7KL65aVS=?sje2tj9TZuP4=C7KZgTgR}j?>C{YA<wK@7_Q>g*|j^3nDo1VWP|M
zpI2r;b$A8w|JD7?QKs8SI(v`Dq$gUSRi|iWHP;##t>v@=GE>-Lw%?q9I2GJ)gaeV_
zeek!5LM3As>KYCo(Y}U!{8H_M4QLk*QI|wKXBjGjoSE<9cn$&&+Qe+FIwuG(K4UW^
zFlg6<o`DEaI4X|u?MMBbjBfXXAr;S$?b#>}{17#^LXhdSZ*+?ta0BrbtouX|FlZL*
z`DsK53J4VIbtH!+^17a!oo+Q8CeVSV0O0QqHa#t$g-ilB5=fRH(nVN8)Ex{0&Qge&
zqR5hAsg0hZP!)tA%7T*yJA{QG&zz5`K|}aj)FWH1E+FoJTbsid;VoJ9I)X+eU(g5r
z+ReMiaQ{uCVEn`-Tt$@zH&>9}hYufYN^U!duNqM!kpLC|fNhFYgoW2%oS4)(Gfu{H
z*)R6QLY)7sizyeD3J?PeF){zuhM82}fl(%nYOh|k0JtJ3C>WUmJ&cYfs;og%hw~+2
zVstEk>UZ8|o~{J|h5VJ{*Te#?(JVcw?3OJMOmTK3Hn5_cR(|dgBR8$s+eMW8eDKYS
zhqzB;7Vd#)*ZZBleSEqO@7=kh;3mVH>Y}*dTFl@$r)Lyw=L;yB3`J&p$arXlKtu*c
zGSsz^=A-2lzE{zDh~u~yRUO+%Gmny#6v}2!%@Fq%prxRb;sh*0!UJPXwWV8z5Z^Dx
zJbWt2sH}|x-N>zuw`V}!wa6^Eb6G9?{?oNKO}h^7pHLPgG|k_pK+#LC6c{C26Djvq
z5tMRt#}M|Yu$YcwQ`~0h^M362%wbQam~NJ1KaZgUg+6v%g3^u%t!}YlGjt$2iYjbQ
zz%l$R5_U_KR|#wzR0_xD6ubh4FQ@HlseV@!n829CNw7p9>q!6FifdhqaH&2@EIr;z
zTY)3W?L`QgEPhhrd%EN0W+gFHfo~Za&Wh)-?bd#80L<0O0gYA&nGGa2C#vY8`7CE!
zAbcN&!{dJGb{^FPouuLJSH2s{-WV&RQO^BhwVYE>f3nj?6ll$)*UktxDJEpFAIv1&
z4QC|Hm_pd2@e;$}I))LjP1srvO*@Isdp&Gs=4Li$H+oXzvrLBbTR9+@ULLQoNE46L
zQyZ&*rC$Zz0E0<fj=V7W9nq%@bHiZ`)GBdY_U1F+z2M=e05pK^%`)84<5A3%O#&3N
zkN4CxU!w}Y*3&shMQD1B%3V%~ZSTwUAsDHM;8Z>UG{@8}>e4jcUc3Pn`-Ii>3#;q$
z&m@NW<Jra!*U&Hs2kXn$70m#@9fOI+!90&Ilf=65<V4l2z!GiLy(-VD;tR&$J?0<Z
zJY0ukgWO%nQ7MSBNbL!Y)BuAHd(htWEN_s>5N^BwV>+gK@xxYFXS#S~XA{@uZWjaJ
z`F^;}=T^#pV*#dKDI&qE7W8;*+Vw7A-E2~X1LqL|ORjy3X5{Hou?7=?bi?xid(d#0
zV`(x~I_%6^G@L8*Cb>;?a3q<Hm(!`2mv&on396y))9G{k9J<<#3G2QUjD?4|M4WaP
zXGjhp$vx$=n)h{U=}-o-+Cu*Wy#r1MGk{k6;y84H<v+VoF&*UxSr_Zs7Qe8j;bBix
zVh(~1Ia8#vm2jk{bZ<V$yWj#-RTp6T(DMw?0#>z|m0$RR*VW)@#TB)*v<yWtqp(Gw
z7R5&GK|cb*3u}|?RU8wEJTHW<fmT6bFSLvG#IPpsQsGT5dRbK!ncgT8k<PZ-90Mmu
za+!H;D2LKeh2tBOL3buMup;B!^oJu;B#GKy)qjn%N_1Sr;m~Y%WB`bbnsD=?`gCz!
zC`v}(Xq?n`DAV)VE@V3V>l;dRRhG4VNClI7Td9imq}7i`SzaVaD`g4r<JPnt=OHCF
zO;3AvvrHfQ<TN(=cBz<4COSKxFZ$lWE<>(-9hBJ92xJ+`ezwQK%EYu^&}?tNUR^R*
zQRp5lqEVOL6NT|mu~t;}gA0|!V~OEH=|(}Eb+-hs>8a6T=GFLhHqxodvL&nF`sWy^
zsD!H%^h0C|>vZ^*8z+;~hZB>BYju;S%?z5qm4p7FmSf3$-}KGJv7ehPC$rW{^LXVl
zxqjt$e3D3zcOpklpG+vTh-{OKae^Dufr3mbt&&F7Aoll3XZxe|=!&|Uy`#eL3|&66
zrn3(>_Rz4}X{K4sHgKt*$s%z$I@Eik=X#rR=9%c0*sK?#;#A6R8UM2mXR@c{#+}Cz
zCW#Ap;wdXIU&_ot{Pn?@Nr5Uo!%Po2uL0KcACFfu5*OP;o2?w7&GCCt>0fOrIM>F&
z2WfXqhrs}FN#zfbOzbwoXMJxLX?!&bIqlXnlVw(RH4XX_%+5HA^VLd?NQTAz2D-PN
zMl;_cFf-^}fWGA~JCnfuZnrCnp~6<Ks?By_w_S~JxpB)1%pnF(NJs%OiTKX!j|Fwb
z0xh223+e8+^5E`*de4yB8n2Lfd<>^F;N{nKQL7gbQd{h;B_ur?>J{dZ4HQL*rjK~o
zfAQvhYAZILeYi_;ytB-%5o-IaVGycCa(cEHOo$D8<Hkxq{U#F*2*D_bn;ZT4ozIhP
z>pVU7g-O&akFioW>Yp9rj2Dd2599HB(c!MRJv;R~s}3cQbZ6su_gOeRkW`zx_gsTD
zZC#C(nIQ4G-lX|xu~1CC8mNm%*QBJRU5<r;&Rd<wWSY`sRz)E)G<-bdPn0*UocnBc
zMe;4AwXKR?gB}CVdfxq9Qk`|opP@eU^7iq3xXk=leV3%T4*;KLX;7klyNC&#7l~V6
z4dSbc6ON))B^|}Go{3nGv070?chp0(3#krG%-m(3_);CplLsk_u=f(-PXm#8vx(_2
zC1*R$qs4ZB6*8TVZr**eJ!+UZ+I@C7ZZS#tQMR8Y%(N_qDvRFQ>6a*OYiaQ<ys%a#
zHq|R{8FK<sOiJh-D$Bo8d_0xyjN^-q!$MiY=bux=Qr+WVy|acT5Tz~4dj{T2q-)qe
zZnJ)r-FtKm-+02#!hW;I#t^w3Um>(GimH5bvL^Q7PfjsG33+y46;spq6SFw(>N%e;
z;fa}uTwa`SlucDtI4Rj&On%w6l`M7$Q&Y-kbZ5lUeE8H)O*KX>;g|eWts|x6mp|VU
zT6g0qa$+fE2+xxigd<)U7i5XG=bM{{gwW>IxvGB^1ZVu2NKvui?{fTuenR37^SWJ0
z`#+5+U22IC&55mx3r5tZt%u&D^A}5ru!<fxvFeTE2*iC6mToT=&sBM(5_a70u_TX|
zx(HuJpBAuyc%DEX#h`t$no}@FONKlVA#$|=&DekQ&!0R!qT}Pa;EgiEjujz`rQf2=
z9oX6~Z>#*2YzDGQ%|^N-=xFZsTTU6%nY`|0g`R1ag#pODC&8A?T@oIps~uRKR*pzx
z+NI23-jjB#M)W{@<=sgrnL22di)Wc%qvOHt(%b|)OhQ6pMG*QFO+PV?CH1YK<3|mV
z`F)x|ElYYTZ7JN+QgLy%39a+Jp$kFU#7^$*bDJLADXoKnvYEL99RfU*m41VB8>7|E
zU{zjcv-T0lYO3)@9#tf6o!c(U`>^FDp4;X*ZR1T&UZ`&y4hUXyr_S!mE*-9nv&e)_
z&N|tcjbs2*n?^<N<eU8oHm#G~=SsVC(6?-cy}^3~@;vg=yz;BrGMuWkSa$34fmzJv
z1(Q#f!m_9%`}Vc^BJ{;ut5R9|y=k={o{g$F4SnUIvRZ5(IfyI`Tpi2Fxx?pt;Uc)E
z;Pf}_dv|n#MHH2BgD&L#nLw3V$I3pq53Mo%xaZ(T<}8=^u;71{A!rLGsxVb44+tmt
zRJK@>$fVi8qUN8@;@CQ>;8ltijL*^U(lIdIhSrqC%x!y<xuBVC%0W<T_h{O^VZUDj
zy<Qsh7P(%r>JX;9_#0!bk*UYS?ONog0gikzY!(T1y9?|cThS1G_I-WPwWEVYtr$WB
zUGk(nKdw*tn$#O~XwgY+_20dOz*(ZyV9U$uddJYfE?e|H4ta8;P=b!)iHT$HUF>O>
zJ*lJC0O{?yUzU~7$OE^{>kli$9mcukJ5ok7eNC}PZUd^Dx6s=$c)G5MmwTC#`Q0K&
z^eHjyqZiQ!e1KWMQ_ljYi+Fm+ZvA&&tYfNXRcpsv{i<4gh8*R*u&vEMESaHv)XrXY
zR{RVbG13?92TdyyZgaJe(1wt&qQXN%N&m7Vk?(S^kI%w-oqcMFAmq%u%0NYE*ql=}
z8oU9?s`umFgUUg5(GKs??5J#0LQ}>Ur3GaE`iCxlB>%uPPtu>MVh{HuJ9^p88P#j-
z@*EAoap?IWwl-YgemvtdC%Kln%sZ}L_U?u4s^Y?Jv60cP=f<=Re;|WPQMC3)sn`7_
zo2a@9_yGhNIuv!|#rj>~DN*~R?ySccCRjrCmyqEb@E@05bTm1NoF0lB8D*B<;LNO-
z|HVTnrjW)Vx2ck<v;w-zR@OBw*+L?cp!FrwFfBKCEjS<09#&FZO}?>TnObb>I!>t$
zq^ALFu!-~5f<$1A-Nu=rLntJuxboq7_8ndHtNr{!{iPPF@F<C&0T^jQhLBwazt+wm
z?vC-P@kn7(>3#CS_M~Dqak3AkY8+SVpnRsPyMwbg3kJw)%x2<#TJm@l<UW&UMOd3c
zNCdUqkot!2uoZ1=g#cKoV|k?5zB{DChiiV-xj$Icp=!K_q)V9w+w0PPa~E$5u3x#F
zrtX2#d_0%RG?5Lm=O_-~1h(`(4wZ}_c^365TGsYUTT6I#%aR9?l@(jTT|B2+E?Fim
zX*B;IRbL$z<+}E3AqzoRqJT&#DJ_C@h>Cy+NH?f-cbAGtgVZ1`-5o<C(hMOb4GIk1
zJ><D(edoKbbN*R>?6t4G^_};<pZk}OEr*AFFCUp^-R$dql_8-`f&13(o-Hoz&Hr@e
zHf+6LG=JXSs^Q5%%b^{`0CWl+jTR=PJC-}%xXX2-)DJHWNU9EU$2Onx6;_hrCXEk<
z_mSo!94KcvJQH0rUx)(4<?V}EFt)Fd1T51ttOm$BTxkQeuf%HN&e&?$_6xtzP!kZ&
z&HHeFdojMhGHie9NdE$mLN9zVA>0)l^4<8@^_FmY1s3TAnc(u5GX5Epv|`uh4`mXt
zwUn%M)h?Ye6(e{FBBdvtnvQQ8zNdzL2eAK5h`a(Sygy45%L)`W3{1ZnKWAX^x0jaj
zvJ*azz<nOnLQ;o$AfVQfqXPBJNq%UHEkGOaN1o0^((6T}?L?aZp@KKoG%r~b*|_wi
zfxxXt*yUIgpmBm2l`>E*dASL$y-6Z@!Y?XA4fj<5QYLPa6qycYF2oY=j_%21?KTmv
z-FH-~cXNziVYSY}!lb&-SWDp7f95;F(_m*_z#vGZ1W^>a@W?E=C5g>K{gSvMd6U3G
zBrp@1&9>=s*<J6Aq8y=aMp(q#JB!)Ay;#&0xk+cKw$lm4ik8+NfthR<P)xtsc?giE
zo8RlRzHQ<3=g04UUPD<L0FLI1v8p~`F#Q$XQa+b^2MT*F>BkBZ=%lrnM#AI}umKhA
zuy<Cj7OaIzQzYg2sJV55eFY%GLU+W#!^bXLZ_$*d%1bkijrGPMOo{>`2M~m5@xRqY
z0y1=zO5*)Q9;{9b{FSqj^cWu19y?hUaAj~wZ7hS>@lqOGjltsV>+8F}JlHOrAE6Js
zi0gJM8N1(pK-jP67upp3U9k*BH}5&lp~kvM_>9<#)kdNV#VtJrXICm@sN4lLz8W}q
zwp`;Je(URjT(LtsQ{BnXxFO;)Kd@R)S2$W^72sdRYhbaJ#ep=OJ~kSwc%UDZ=(GnG
zAzhOxt~HZM%W@(QQjPVZgDT{VZ>m`lmh(cN$|VZwG<xZ@`WR;6BP2S3Rw!57G}JKN
z0|qnBI8NyGIMP}Vz^D$pdid7!LNYmywWdFh<V5*>00lp<tmSSsD^<-PnaNbwIREM@
z-7Yes`TKGQO9iDBvm6j44i#E&G{gX@IGC!%+!gBGc_9n9n2M(vMH4+by?tErz+3Hr
z*1jT=oA}gak4xT{G=Rfpmv1LB1q?I2cet0!uiTHZ64|-4p6#%Y9ECp=wXt|~ud#R$
zgM4Dc{7IajcsYH%E(dE;uH-4m%<PMYE5kAZ@PBB5MbHNCHQuhoQ;mwRv@x2``|wZ!
zdlvJbQcH}BVx++(ZwC9G*1`!aCdM8QO&OVPoAJUxS~O@4PS04Iva>WOBv2x3{BF=w
zX*Fe*WW9?swTq6?6PyVT;|UpM6%04f4x<){T7?iRkIAq5#s~+yeMWyS{Wku_Eg*Cg
zy5F2clz(`&n!hXL!?tWdf;z?QPSr{{!tMnwDHYNA0jDU+vl;J;0^&Fsl4o!r+V417
zqU=L6-S$`7YD>_RkKHTH4SC|oxsCSLCq~*`cj4{kubwf}F2H*f2Tay3KK5*0R|O}+
zf>eCAT_TSFN+DBt<@ZnPM7^W7DDuBdef*7e^(lB)2Qosaem!D4HM>Z`8d{LrG+a&7
zdbShwI_`xxo&HX~zvHymlEGmusa;W+S|woLFp<n_=F-%u7q=*>U1L{mET(4O>JT&I
zGSaErUI(7Rr*f(b7~(?V?Uvhc)_l!NvI|0gaDXrCai4=t0aCbKv$uSidl{Bh;+Hie
zIBB14<PLn6a{l}xhu5bkQD_9?_9Q?COLivc3%o_l>6rY-^}vs(TsQ#)6$lH<$E&Gk
z#Rh7&rOCx`G6`&)4Sn$m(g$ok_0NdmRq4S7inGUzYuiiiNjKPu)wUL_3w3G_24py^
zZK)A4L+DJKPyfpW6zN?6#odLR6k<_v@KcdHAKljYWxkLzI08MXIyH#SCml_F3^5iH
zl|8~`uwxe<Ao)PB5MhL6rC6hzPpEiqNEYbMeN&qB|7I8yT#S8*{yKu{h2><Gf}#ZC
zYS$@n{tL03bz9GXncMRN;%VboichH`kQXpbKpuG+aSmHZ8D**=5V|`%e$;MKuAdD5
zVl5@mcLW5Yu~%2AeLn2G(A%@uHAwA!x(zI$Om6SA<x=SbFJQCVsolGc8tU`SA;dkO
z28GlN!osJ3HIu!La|FhiLe$}SVOB`}ymM`APqXheP(6?N*gF>BR+BI1Tm6zWDoF?s
zP_mNTUY*zY==RX>nh(~+{DIF6{nq2h`_@2Ms--KxQ!Kl?n_6|+$`Ha%ngGl-W`9JF
zfy{cE4-V;BU7rj|sh^saX+9j}jB*J}2AfK8SW*fI;qmgd-GvmJ`8B3IO>dL2A|L(I
zSOZVNsuYa(#YuAgN1Q~1IzudDx;9djjDBx-9ihJ-E=eumwDyh1SCiKZrn%0}rrmW_
zQCqn4u$`T?^e224td`|+2Uiz`1=!)B3cc^Xd5U##YLvB&-us&lZVu^PAGDI)<0$Jp
zckh0CZ1~D_90Me3H>x8?tI&%1rq3Z}G=$uqn<&s)&v`kHPgR_YJdA>Sacb&Tk>Zs3
z^R`SjEfz!5KJ5tFLfzWQyv9Jk;xwjtI>R#u|DIF#+C$unK3}tEW$}8PQZuE}Z=uwu
zjFzrwk7l;J*yrFy2<KRtbs-HYPP%jfF?gG%*!+G+G{13j7huV_tk^3iFTDL(=CTSr
zIr_?y<;Rj7p~NqZy1(`F4>tYK1%{4F)T65BH7fTOUUx7N8M~%|>pf;5-GGs&kE#LH
zOZzpJJhFGbzw;ARi<)tboIpvNyII!+d^#OfE315NWwwP<v6@SJPr!UpE6^OyOwlpd
zM2Iw<?f`s^J^7~-Y+m3YjSiy!2LvCrH4)b2SNQyfeI;wrFGN$c_o()aO~ageB2=B+
z+4p9=PAq2{JbO}3;D2r1F?KLj0v`_#R!qk2u(gW?BDRx7Sbua@wj~($wwKhKKH=<V
z%X{7VMkGDvzMt#`VjYWaU6q~hM2f_Fyy?2bc)0`e`b#DN3VBbe^FJS~PplH5jq?-y
zgYiN9Y1fs_I>?zPDDymVLak6@w1|TQsoDDA-m7@y&Fm;^O;DC17-YJLa4{<HUF%RO
z5Avj{f4Yko?Rrmz435B*r5vJfb)^a>LPao+adZh0d*E7)6ecF+?B@M9?<xM1D@18s
z|6Sb7v4jZ&9AL0LJ=HF}AaN)quXBtsN|6B7kY;iG2o#_aLy4bYEX9gH`ilEg&NJ(9
zNvLdefI%Gg6Hz3R-|3C0kKm;?Z4_|cNZ{&Z(0fDNwQwhbzItUSN8gJTr68=mo-QJ{
zQ;^}y2wdm*^G;`(_>bk;u`#Eh6k66$e$9*mt>{}!RI3GaJc0^=7K*za1FA)u430V>
zIA-749;|8XdOZwL+0GZWeM;O=ssZygTZ8}~UkgZSkb{hL6-yBjFQXQ2qG^6MH)jO&
z?&K^cxo?#9iK4>k{0<%giLd&7S41;W)N{P98vXCr@>+V83O^7vqSGsRKEo9(qnYAz
z1Ct;IM&m>gb+$+HPQkKsT_VPz<FDBJmVZ!1Z1GyZwcdO!6RSv%m7O_DXK&H|z`!bg
zUTBv{iGQ0(F6ztZhYy!rU0_`WfA(mp`M(0>H4gtsr9l&rC%wBP+`&pj$-mW3<9&BR
zW^KQbq4o?6S0UyLaEN;?COUV^$i?w=8sn&g#SS@ghu+vlKx3K41p>x)<U3O22ug7~
z*(hF$^_22PXuljR{i;xCXjLxJdHo4rs+7!y^Ngpla88#OLjhHv@NRHV#LoEH$ziPm
z?_XvB24Z`fwLd;#l!eptXq0mA+U_5RFmqFKQYx3fnV)k1YfR~g;|xo`#+O!t_z1XZ
z7M=Rx`{?)C-=`U&?vXd7VtBKq#M|p%PK^}{fG1p|o1fcdfQ+SAK7ylQuF=c>AocZ`
zJ6OgyMjbbiB3&s_L@^OWbAK%9V0zTM>C`NQC_l@CWfnm3+At~VvM6)hYnY)LpKb_{
zb+&fID!IX1-K~%4w6#=vvihA+t1y^2<E{|0n3ASII+77Sp#d5&Ja=JQPOUa2xV`KI
zrWq(7w-3N;V3Tu+RTNOThsX8Em(BuL%^5g})7jOFf0Ry2PCLQDh#fYfSs;)vWSRu%
zu;UlA`N>+t(iM1zgGjd6q@NaLWH+XO&H>Z!lD)y9d4H;JwcA@@*><86trHMBa__0f
zu0h*}k2eSj?B37Mwwj4}&E*f|QF4~(!B_tp=5xkWJrf;;FV6x&$!Dbv<h@RPGkr>E
zJHPbzJV|XhxVReM0Tl=GYlb#i-!IydYu3{zvLg@Uc-h@cdp^=pv;tj^SxiQpv3K_2
zVy2AOESKPvvr~>UziBAbNp0?WuvG<9-E*gt2_fJ4ZnW0fdfm?_@O=Fdm{Y6m7suHc
zYrlG+LGe`=Xqpf&(%%;Fga)R`(#2;ap1#q(`<l|7!a$0*DtYRemOpz=acs87HnaI-
zr<cZK>my|`u(YS(0GQt~TdV$cXetPhr0@Md&%lmA7ZHw`HkAxj558@np<|$7!XQ9q
z?-}8=TX_CRSa`COh}yK~Ykooxd%?go-53(|pfNVK&K9`O7k$li{bVjoY(9}eDHdum
zT`#~SO0H!am8c+<{-9lW7r^^Myeb+$PAg?re<)i4)ZTuIQDuh}jq!ChKc6TPj##0&
z1Rq=?1l$Q}#AT{c0thyi+Ze$pxa<CEKuMrIb~ygN!A*<ta_OQ5;(-tS`5N3BI&Hn9
z4v5tUDIHA6*PgH3v&yqphSgTQ@WQK;FS)bf)<qgg!L=GpCm@XzDa&=ZMYdvf9S^DV
zB`ljTm5&tbq{MXDeNgA%)NqOZ1=qfxf}kUOwm0ZT7s%5E|78p?!@Qgx%L5Ed@`fxm
z*4Itne%*~Ok2gXgWbaMTHx+F54ZJlSQ+?p=47i_Hf&fI4l^8wEU}wgg7{Zzd+ia*N
zT=c4xes%fSU9qjSFi{qoZVyfS=<?eh@Q$^S-f@*T-7i_gMFTb3<!Cn_$B7*Zd@<!f
zk@c3g!!4C^%<?kf4EBh>SMAv2W9<9Y$Y%odxAG~<NFS0(ga{lB-OfqMrXT!>*-7`P
zD(AiU%{L?D63v$Ees(Aj)7w>HC*Ir2jeb6^wR1pZ-h2@xP(FzC65UJ++2LF)tv*1=
zgRnpTc)Zbp{hs+Qoex~ux{*EO&z6RZ#uyrgRwpk`Z7Y3|3+;Mu)$94)<Yao&eRKVU
zF4TFtM)SNgMpmcCif*i+6-8^^j!>LB8c^8x_@XwkFxK!=)H10juQZfu?QJK8UQhI>
z3<FQVzu>|Bj%*dYpXG_So6c1QPJsbU3yy{2cLD^l<@@(&y3l>LV&uFiEFHFBXtA<`
zHi_QqX3YM|TESyEo?wSgDSsY6^Go~6>{DT%=f+1n1eyD8seGv@7PFa#dc%^a;s6ng
z4U+!RRppm*I}5R(3#)P5z{f8OCP8bm&9tfmQ4^E^>bpK6KiV&X5~oW5KH6}E#oUA4
zAtm|F;YR>Z7kqpE#(uuG@YAq*y7LAX)>WaeR2a4};EgG_3J!{S)2{z4z}O^w=@Xwf
z&}w&fUkkhhyYO4?-&%0g!?ZIUGmm?*+{HA{W9TaMk#c#nZa4J2SzO}6=^MXoD!RIN
zVX3$sSG?%zwy@_I>-{7^GurP$5~E<AxWiVvqom;4+ZsgH!`(wB8Md`e$d*G9kTdNv
zchl7#Q^L9V8|J`3hW@M*&HqpeAOE8iOhDb3n*4kpuLUegqur-~*19=kDj&|-&|~R8
zvY3v?2Lnq3L+SheZ|P;P$W1RlbY0=sI!Rw|ImO9nlBT&Sjs)w`E-It710&}=s|+I?
z(A~GitXI*m?s>5V`K5=n9~Hxpj);vO`U|oqy*$%RmSm5efco$`HX#<9hD#{ycS?U~
zT<56EByDWE#oeb@@?HWcxE&(ErCfbc%K0A5sBllPfh^2R3I0{J+!`s=2(wlJ`L5Fh
z#ZeCQk*Q+ze3i$eWXG^{asj(^v{RIR%VQ$1<2}>pUw}}JE$)x(Z%j>;4mWl7fi|k4
zL4lY{H8YTb`$061VPc1{3knJ_316J<0=dF|nc5j{ctdGz!Iq(qii}7whJ-}MtoXF}
zxJCEwI?2l_h1&bahntPy+5nZJ6B*fTyf#{57g0W9nqWv5xSOTNghSGutlt!4N-;#p
z_Kh>!poCyuuj8OP&23PKqVl1d!OEaWA17;>EP3Qv(6%dYLB~O(!pix%)9OU@fi5;>
zHO3h7E2!{OAX(@3zA;ef<67qnrx`5M8y087O=TMGM6z00nFDb#idkKwX)?z#S`%9Q
z^Apjx$T-_YwaccPgd__t1fNt`lYQfquf%JfUxk0a_M#i_!RZ>t-JNh$>$Rv>n{E*<
zP^<g*B?5UWk~;;h{Of(2`x5HQ#&Qlcts@tj!FVn-Bkyy~ec;AK@w?{&8UiME9BR;Y
zCRj>d%+^b49-lq%c$#}!?t7|G@F|>8=-KR>vy8a42~BK$+$?S;yt@xLw{0NBV)yJ6
z`|Yg}9Ka%}`Q^6VIdYA-JJVGZvH}Y=*EC|m`coOpJaW%oUdAwunXEIeWbNGS=Vv^`
zs^0l$LtN!j)x@zSJ51%;s+1Ew>fRni9>%&$)^4hKDUO}=3_#`yP@&*1V<^MW_P6`9
zG@A5<e|l!Xu-8|bY6~t1UX?F#u!y5Bn<sISF{0vs3HR=NFoWa#)P=7vhUzWM;sp%2
zUQ}(jWq+B=pUUeYMCLm+ODV7MLS*ltCfq*EkVqYlLgl1|6Dk)Vc?lKyMCG9C8wvoh
z?!Wu}Qs9k(&!%U$XUqom7h|#U7};H|b#OB+Pq)5CKxMvL_5dOSh1|^<on#)%88H?{
zV8%0rC4`roU8`(un73MzW~K?OC=S*Qrv0t~hW0VP$%hB!#n|-<;8o*2WLsf#*Q|lU
z8M{xBc_WAE{W1sS?tSAF8(4_ZC8kdLwlh;ct)fD!gtDT&`!Tu(6ndc5z|k~vs$8I1
zVL%p902zIrBwEXI#BN6CSn0_P>pklE2>7<f&3}6?rTDFk6j>*28eI0X?GpN5F5ovX
z0T~~gnyvsY;_X|54ZmJrPhzAb)>w1Hi`p2*Fwa<}>0sNm%=~w!v`+2AHVW%eR=qs+
zl2pvEDstIsi3527v-vI8^@<Tn?fY!<Q?OCLp^jdzPx@GGcXu(}Yp0)pO1B*8(K2lQ
zcah`aq5=8AJLTwsGf%erbI-+n_3vf>ybvO@{hL}(Cc5Y5_W@Vl1cc@c@08ej^rl;?
z*V0B&<Agg4x;bNDDBp;CH$`qe%JcA`y;5}=)4I_fxgS}&=Tnc1bKS^o#7fNIUAz7b
z*^Tw-tTp%SAWLOLrmEwFn1RjVNY#Y7XWG+`S739z3v)zfc*4%hd?>pgcw}~&45f6b
zcZE`;73OL-HpS<UdKaF?d&yg_NGR`(mhSvz*NX=(2Ka{8giZlQ>_K0AwGG&bTz7j2
z5W*ysg3Y+b#el-6rj-zM7jZr+D6htDDie*+zR^lcEwmu&-gidXIDV68<k~ZJFFpR-
zHeD>GWc#u1<s`hV#&+pgG{lRNdX0Yjc^iPlZl4HWt|FEN%sBER4PXTp@Z>;4`yog-
zRvLZj;Zg(ICfRE(8A%M18Ln0KB%Xd>>SN}66Kes}xY9(y)gL5ede`fX;4tZADw(82
zs0qpf1VLvjP`|HcNuUw@?J7F`k--uE%C~Uwj~>f{CF&0YHfH{zrKR+DQ|3KpHnwiz
zFVDbYX<-$PwD|FreoDiyTiOZL^?(8)lA~T~@vhXg#^2xnQJ6KYUNMvbcRi<{TX1<A
z;<U~-?n4ze`_2ip3NX)T@gm9%H8Zyo=1*7lxljna#B>uOr!|wLO|j}{sHBf;!y%>y
z$da`WO<(H2{C)8Ji&T6<x}hOa4C64kV$rzs9T7&t?tPlm<Q@}`+|)kVXg|1<+_!cl
zd>d})a4oAcyj`&YE&^WfbTE$emEP+sW3#S^*^T#ExM@lO&Z08An7La7`~7^u32ebO
zN!l+sbn6~k(gW8S^E(H;VGlX+yJML4l}PJ{(yjYjn(}_03uGpIUD*yar5LY&J2hd9
z<nz5FU=Odc!tSYqEXAn1G^8E7hL|$)u>KDC#Vho{{$aO;)4UNDc-L#=laFE<f$C;L
z>1$^9DNl*%(6QBxjY^>;<(kZWC4(;bn}7erzBc6DWqs}Xb#OVTj8mZl=Z+{1^&#D9
z$6UT9k`4dqLTp=5j;x5^HEUj+2D_EPT8$dmp#h2;?plFAPnF{a9-e^P-V%7GK)SyF
zAQIi7)Vn1M-Y=r0Cbpt4_fTD4yDl#gT9cEpU(tyV5LExPcG^9BjdD?p;nIJJLLs;>
z8^dZrRaa2`Tvp#T^3moGTJYzFdRs#BsB?h<YDddQ<a4i{y9&EK7k(b}f~*b`KjT$a
zmEU;0k{7zEzBH5*>6+PoLi41Iz!MC6r*PB?xeNo3apCgSaKw$5n0F~;aTzrklM;CT
zGW5jV=~QNn0U<)_J}1Xcv-!g|)5;_EKNkUU*iA)n6Z{beMxrc%6Rr;mouF4rM_Yg<
z;^x}|{$aBQy<*@Yd9OZHH!A9iE)${*6B)=PS$rHC8TJw&w+pbymTjaOaQXw-+VcZ_
zl8-M*IxPnM&#et+pkRE2l2jZf0$dk>J(~N&fCc@)s>0TvQKF<e4yMj1KmJBH&u;PN
zq_)SK7TiB%pOw@t^8zjru$#BpVi~if_vF;l5QqYE3YbsBXvC&>HhY6J&#Hkh7X#K8
zVqq+L4RyGOHZkf}jEVK{OFyH(cZ!cKf9xh7ApXiALyC((%A;d4pU%Ec*_9$m?b<Ra
z#c6D6?QG=?4&~j~xFYr@lrzZnZ*zm6&^b@e;m^ht!a88V$)u~%*I@lsO6iQ*&`}l-
z7LG@HNn6~;?0O`&%{jXN4k+96eATWxi%aK;rl~kp7MHkjJza)^{Jl=ZU0cknK+3V`
z30gX;DCvws^(MD-{jkaNcLivr<ME&>2aT}@dXlOYt+&NLR;zL-zf(;VFbu<M{@FKi
zR-Qxc-s0A97Jjo?p7C@mpLf1=|8+Uo0U@4h1(wg9M)bedFH5^&disGCoqMKq0tFsH
zl*(&~k=oHZd!UC|RdUO1{yvLGS4;=9O}v0usRsIuiOCXdiu2FvjQglf#Ss1|C8|Id
zI(~;QF}-i?B<$ZjPGVK#Kz|0rDt%4Vc|&{dwFU;Hn4vj_F<S7>`}E)&s@ZOSw$^w;
zVoYzLfmnb2WBJI9>E?9kDu&JP*F6f^YAI1m7<W2u0b-P44YvSv_v2WfFRW<<J!0&g
zR%G|qJG%d@Oqiv9&s<Raldg_1Yy%R>@YX93YJ|#eQcL^Cilrprfn<{}+|@2*lOPn&
zIp_emSoaw=w6ql-PA4gtoQ~k7Mqwae%vrxT00GuuZU%0Kkk`lc4!q9X=G{8Rtz$I{
z^v3rPlmuf&&ncXrYhDiF&S=6~q1+04gb{wFgM8m6D1-G=BPU~JZ$(@9190Ab3VnF{
zF+7Tz(`TEvdW&>vg35T>O9|WLt$x>eoz=Kza^GZ$a1JfIBqI?fT>=b7yI)E<c~K}Y
zsB++;;>8BH4SM2KFsi^}sJx#$`fl?pB}U(t@Up3Zg-JrRKT8csi?Gr?$@-};#$#2)
z#y(#sNGw<iW#_7@nr_<F-xc*Z0y$gd(~WLR=Y+T)b=B)+Zv~$Ct9Q+Y-W#PY)IlC9
z2PQbJW?$Jw;|aZ=vbgPZ@GRHm&RdD;8uXvBJ7Z-vJbI>yb`n8Vq!!k(-)WtSmSH+7
z5=v+{yx+`uDzy6G*LK!TBDJLHJ`q}o^RuVrEOAhJVbC$)>1ldAJMbE;%fQ%>un525
zX6ng+kGo3tA{>+y>?$8UoGl2d4;y@GJ+Co?;}5eDb7>-&`N*!&ATmw}GuT3EvP(#q
z0*>T7<45gkJd4nnSz%_V^nn4)>_tR|tm5I-*L$0uB13hm-g5Eg&CR+PE|#KSUse?^
z(m<&6ZiIjRv0xLV^piTQ;Z9#q6c*CyS0}e)xPRGQrilvHZm>`&TyH9UKnGsgq_b5-
zyF>!(D=*%zFjb^`98YQ8aw|o^mH&UdeYt-PT=$A#ohFvE|FzbiAKUti*9~6-u5SgI
z!!jw_qrO`5cG!Gt6xs1d<mo3cLc?`+oO)Kf767?~<Co=N_e?;kGfr7-<iOan0%9;v
zC2ygAh1J_gz~*TJzKg!WWxmPMT;dKONfJ2AM?4d6Vm3<E`1Lwyao0ZM-DXkE=l4GM
z!0|R53;4u+=C8h?3D{Ce*Qq(TrQMcO@8_Y)2dl4$eUQoPz;lhK>q*k;)syV=KCwgV
zK^NX-a!M727uO~VW^Z(xIX}l;DA(%w^ZkOw_{F4+@&`lfr$6o-oOlMTUq*TPz5Cdk
zh$xu32%LJ?sAy2hF@2-M#QB>1EvV4gareb1^8(f#lCUly)W9GZUu9Yb{|H}SzFJXI
zPXeUEO&8k$q)!M#Z-YF#H*q2}IiSK^-%SWGicimu-J1#X>I9HAfEcV(^UM$?gP*#w
z_bs6aurv!cy`$)8IPIV<LfMMz!YjOy`p%v9^$G-;2F<ku1PQ^0?WUjBGpeuvnN<Ag
z(-6b6R|#Tq-OnvqID^N`j9kM)B0bL;SP_lBi5R@E?9}2h;fC@G(|6McW}MzO%3|>V
zf7pNEx+ChLLMrS%yxfpl(6XF`L+bGi_aQhF;%C~Mis|rV>?{|A>h`}-LNDf~$!<QH
zEI5px!Y(RNStnOHCzuGZMD5$AE796eU~oc;x=ti!iYn=*(mJSp+q~0YCWCY1&M3fo
zpcbPBA?Gp%?p@%LUNv!QI6a*0UQ$DZQ1&MH&vurMeC4MI78%X(i|IJV0*{2{pkBT!
zisMsJgf}9t2-`k>z5R8{-1GC<m7<RL15~<VtB%j?(r&u*DA61BZ|Jp-e@`k*a`ZWB
zFO#n|ltp?5XuxlbJU~r93<-DMczAMU7J0>!O}{M|c-rxLcch_E_6z>-@Niyk^WXWV
zx{9kl?V0~(fk>;#HvV1w>YRtEn=p8Q6a2fkr|tVhvhvw<>yCivQq*0@0lEC#>AL-E
z)gTYe_*huPt2~7kE@3umH!YGpAv2>xB`a^taZoe2<v;jYJ@L8r6o-}6mYx=#oiL-|
ze{wh?`r(5Iws*q)zGwztP#Ei#Z6E%6PAV~gXq1i=Kv85QVDSE&TEA<D7v3bP8t4l&
zEk>9LCIjHSWs?Y2A@_rPFJHxT<kb_)I6{a5xDtr}162yifH5I{-_8#=s6gxe9uQFy
z?6^Uu5NvT>XeJV~uo`!r3*n0js#D<5Z<zB2zY#Vu@cW*=nz|s0^Da$9N{~G{ih3ag
zQwy1go+OcpX%s^iW+^QUS_A3~IwMNiyWpEH)E1DR+FW7+UTDsRjT?3Hc*-i$z7s6o
zRGe=$KA^jcuW*C}-`5z2Ed$~nt|$b1skMy$H*Oz7tnmt*M89#-pD&6h|0a$xq>KCz
z=1y|{I#cV+*=rbhhk171k85Y>*WGD4zv${5b+vqTE`b@uLxpE@jaZ*q<p4+!+OA4R
z0<{(Ke=ia%4x@a=nHO;u%7i|@I>M<{qx94kE4#BTB!O$-f$b7<&yayKp6d&x4{rol
z8F*9vSmW}Oev>qLfWQ-)^YW$_$Jz0v7JiRWK9X1^S^6`WTjj>KD^Fa44bBkfeM<(6
znkvhAD@=IDznp4(hy&XSQ>ei!4ps}t@&M3*Ln-)rjW7@Z;LSFC(g|U=ZQ%J>h31=;
zL3;gJpxAG4>_a4KQ^Y?_2SoqrIss`GsA2M;mKbGT<1Gzf-y|@ds;RJx@$ihNl6I<u
z_F0JP3%W!b{#eej(xfb=tW-Q`hSVA}nFgtNTjycB{`>!#>EuvDZtXh!OT&qTbkQc&
zHgK0I39Yc)y)05)qOD*{O$NTmq*o>#%P3)`9W`*HIWONi22DGjGY9<k1M+TO6<1j=
z{-X%^|4Va!J>s#N#OC{vu^52$kk`j5Y`nV+Vuk|Lui$mEd@L04od%)+J6GX=TL=G4
zPdBXcyjYJ;W<VyGe|iZB79;rG!x};8M2GaZQIN9d6{V8^?n`3VEboZnOn$YJu8|62
z0wF2C>rT3BX4Z{j${EiS@E+z>N!4b`KKO322a5~;=nQCKz<9}{Q$bkI7UwbDj%Zu+
z?4RE%XX6|40J{yuvDCJ>O$S@(6-NG-3&@PtpUnI#K0ZfBM@L1#mbXTUZ%c@?<iaEd
zA9P@l;anGN%9M>=xK~?R{K{LPwxC705u12(KLoEqWsmd%gb2G(8|z3>_7~Gt<W56Y
zN~%v^65V+#@KEN4$X*!wwBrxOEw%NqTCz=f66N%_OUb`a)JIEhBXHDHF2<)`GH(#2
z-~BeR5i2nJv$Z3h?`po=ovO(+>lVWxw;W)kv#ifNh9(w}LT~cxEy<iFt%R%s*<z`J
zC6_JXb96r#GqyB>NRln=f3^*(w4JY_S;mwv@|J2y<IUf{dGiLg(nibz#auW10<l3~
z_E&D&pZ$U+ZE%1C*k#j_-q(F=3A<+oI4t1oy+J^rob)Fg#+H}M^`J<eNHSK{ZlkkP
z@Z}EFSvGLL`2B?fEh)IWNk&3tGft3TtouWF5Vv`m^x>Ny!ev-F8-j_Ve^2JPxL!Fl
z#W$8r_RX=Gma+voWO}u3-v9!u$gZPwx;NI{B7y=%LbAwdLPU5=y}<*D<Ru8Gh1Gl2
zm=l6B=aF@W;$<Z@DC{<RD)1j(r~hxO2!LB*s(WO~KqH9xjT7&7Yx^fYr+P!ce2?XV
zR9Zhc!J=v4F<OH%X=w!abZd?iLhFh(x0oohe*&Aq02Z{l2}_AQ>f@P?_d49ru@}nl
zD1rlY50u8q;9K|Z#kJHl62nxi_c3n%`P1UwXPyXC6^>HMwdQS79&0M@POmuQUhuLu
z$w0yl-Tjq;P-^<18Z_9$DQ82pR4rV=r_V+<_$BNk&ErFb2eqH)wja;8)IyAO*CSrP
zsV*5Mq&4kTAYk+7!+-A>I6iEFqIKsC@b^E012vka%)%tR`4tBZP%u0(F2{c+-L3mR
z7B`b-P&^RJcidvZtx)R4?>29|wE9C2!SDhat66cAS-d^+{CsYVuak2bV9bK5-@OAd
zbi!S_Yk;9V-~+)jn1CuydRf_yac_#bZ)`vu0ypg2Ma~J`D$W?^kD3aD>KpjTZ;g{1
zS+XkA3L*YTKnT(l{_R+2j%}!5ZV6>dXQ^NcV0B)5aMj=Dmo`t;<%$$^G>cd013{t8
zsbIaoKU;y$5DlLvU*9R5azHgRc>mP)L_6hET!8rp-YWZ-AV^v+bP(OH*8MgT(6YY0
zjA$-Bkq>B~Y&3%xaUm9b4yw9FuC=XAKDg0Dm?M|h>Hpb#x;1bNpB!Z0MBO$5DLj~n
z-FsG`O8yT};<irx2Cm8wb_k0w2JkA7BJ1)Cyap-}j4>4U`^EXEfZ<?9&gpe=grg28
ztQ#$pI5CC%eV7{X|A3iO+$^8!aGG$9+WY^VZx3TpxlT}!V?8ar8v*G#qz5kQIsxhc
zFD<Pf96M1l6+jaj^#UMf$5qF!b332Fw>j?4^7yeGP#X)Fwp1?EkPY}L)*U?@kG9@L
z+rW^DCX=!nYC3Bv6=%nNoTr=<VHa*lbA7xj0fE{K$eexe8r+eIRC~`L)RvX(m8%U-
zm_%?EqWntgW^_uY;T+MdvPr=((;%lA@{5ZfMY}|?X$%P41N<S>eGIiYyWQY%pWty<
z-}u^ix)W4thh_hf74Ka8kanXUv<1bsPT|qTY!sY;VnJ<WL7{tmQPcklJARQZk!y+0
z<1^}Z-ir86>#JOcv(N(=M+;w82N%w3^L`|VWlCkaH|#38Q;N%e-|S`%8e8W<AFL!d
zUzB+cuUEuV?sY^TmyC)MD2iGj6K2~+@Vn=zrxTDZ(>re7nuL{~JaQ+*tV?6by%yFI
zD=60M=^fFMDnIf5`KOptzJ1a)cMLLJY$x7b(Wv*h+#|p8mO?c{h~jxn->)_N%zXKx
zuxvq)9%U5?$!uQhX$$T$ICY?v=Z)(8t26KxusFAJ1G4r`YMLDafizwKs`etJ`Y5d`
zEXEYU=V)7(?}|GY3d~ARX?_pxbG}SCn5}guXyr^tkZi_7otybEAD+ie7#^x_FQDf7
z>FW0KT1vntEAXejV)6bxWWL^5jbolqpo+jXHu)@hk^QLc6wH=F|Hth5kN4OkAMnm+
zm!JONHtH@uBo?R#qnG}c57ycoQA5n|>YK6LshGR-6=M|*QNmM#lhFLY)NE50md`oi
z>9P2v|72bkv&DJcqGL;EE5n2Lpw$13ZKqBXfea2=i+|T?^;biV<nG5L0TMU)3@~E7
zr)iiT5ukLqgSfZOKphI_Hr|+Y-*BJaO<HvAJ<+w7Z8%FC$sP0KnRV-j&3bZuF~MGr
z3&&=gYRYNCvU(y+a3y=^BESB6f~*J;tonDJ1Kj_0KLerSd2upRRBYJs^#M33WjuX-
z2n8QH&q<K!L}}huVtjArj#z;X9o`9xG9V#o+}BES6be>Qo`r&`7qB<y6mNIXh2;<Y
z<Y=wk?G@TBVBmwzdFa?@2eqCdI#$<8>S|2O%&4pFuBi4a`&K`rQkmqfif+q7Y12zQ
zj;-B4X>$?;n_GZ5u;+WJZ3hog`WB(kTJdB^KVjq9y7i(_FD<(*9O-0{xFJ`GnT%SD
z=ja3Lo<V?^w*LvV7I~Of4oO)#8ikqID8{&CBU6>SrjCAGC4$AA-|+&*i>~vOWA%i6
zR=!k^pk!8JTzmc2PyC=*(hLg>YH~eB$4O(utw?&g#ST6}H^s&b-fteQMd8hPMx|v^
zH0<i-vvo4R>rXBk^PhO1w3miw6=@w8d7SWV9%jtSB;I&v+Ml}L|9t0c?@Ys9b?VIq
zE!64<?sBjev%C)~+ABCZmYzn({;u0GTdC74xb7{|X+5@7Hqx*^lXa>lw!hYe&on<#
zt>D)aw{bL6{c@Z@jCLl;HajLnbhR<>W}y~Y^4Zxbj(X2IcZq5l=h|<Ble#DBtnE7I
z+mRQEUZ(347n)83qx6jno_Q);T)=Tk9lxCBB2MsKT<I`|GpcWjAI6%;@FhcRY};CJ
zcxc$^efjN}%JlCyhAA*B8C|Q87~N<aB7F43ST8f~wu-8~je79$n2!oe;hXCH*S7I*
z-pQm7<hea%;h+Ed+)na*J8>b8;vC{uia~QH`>Sd)&i|4qckD4`WSC+W_}ICjuj&kP
zQt)I0nuno-;%;b?+e!|Xrqtsc)NaYkJ5?kFA~(&qRG+R-4W6BCdiSYKk%WI7`tdW0
zS!w62t71eqzNY>eU&L|3)4E6stEvai?t4FMFGbP@-+RL1JV)ex)a-$K0WPS{dK(M%
z3VS+)U_TavxecqRp{J3BAl`Int<ARH+%(NfMAV8j<orXbW8d=xW0jn?m<;@If=P~;
z$ig@Mu8XpRdp5ik_cDVT%wehGiU{7GxAxkNzjo=n6V^?3FC7lRo8*tv2c~YU4Z^g7
z{xWXo6FjDbE!gB2t->DJzPR8!<xc%-IM}%8ex)J~T-3>$=ZfN7xDU##J?1E?`&2>6
z4yks0E4^$WfnJ<t5i2;mjv-C})FAcOIN$sY3c<|EBXNH}`Qp@A5ucWZ+%NBE`L$cL
zl#kv%U9q^<PUWl}(FtF~*IHZPf$1bewHrJzU)ZtV23=m1V2ETPfT^tBq61)%B)!l9
zOi2&5GS{(>W21VJ)?R5o@)u;Z0<&%D@w)tW=wiNdI)AH)(Es9lkK!|SrLn>yFN$CE
z>h9|mYG$f-5HM`KINM~k2=3(_S2t_OdS-Rs0;$tgC%#>~eFKeuC6!&mybeC~$k_z<
zjq03<xtp)!c$TBpbeU0>FMf&59)%MZUIb-i%5_E-oh0(xzEA9-+3o)%A#*@ew^yu>
zpnUAGe5<_xBblO$9RA=Fac^LugYL%ZUcD)IObGw_%%HW$ChlMiA=Q3=(QaXt@<6U3
zD#3X;d(H?)*JJr2VXNpb69*NqS!?V?PXO=AK=tq~zlD?N3hTNGhYo*dj>M{!FB7W4
z^)B$8?KXN07|ko7QA3(*Ncp*f9mJN`&SDIL(xGKXsn>n6bd!@xaA#^$wg+iEIOWc}
za-3X~8WB;+L>W1c^yn5~?WMlhj72u=PDyW9w4L-JjdzRoEKAQSr5OP<g$0=gyV5@Q
z7?kDHv1!6_->i3DF)1ka$ot~C8$XjE?7Gu<u2Mq#=y)1_+(mG$$=6#E(ufK>dS=sK
z?B!7?e~V_~FvH2sj2Q4RSizzF5>!nw=OJHj*79aCN=Z&SH%ri``TfuYb-rQ_0~^VU
zSNzTj9V`LQHP5{ae4z9X-CMT<HEyAIxo9Cn{pJkuCf(ZmWTKkFdnYovCENPU8zIPU
z4Lh`Lob{2h_8>U0?>gV8&XXrC>g{dMeO2%=&jDRD{_D?mYiahG!3?JYTm5M3iy@X+
zFqtQK>~vO_V3!<S$6=M~lXeY_6lsT*A!ccAuhXNuX<p#jGQ0>5UnziIO-MvAwMy5|
z1fP_;_)ZFrFKsF5GlE7Y!|T+qpOuuZrswH6`M&+kdQ8M?@|GkY#o<5Iw-r_OKK}XP
z+;}p@Zw~Kjl0S<@)l$3ELSgMjAeUl;S)B|=H9gX)4uSnf$uiwna<UE}lMRHL*vkmp
z6mnsgt<QL_G<KIRWrs52U3!{$7g_?%9&#tciN{V$hvVcgJPAR2{I!2CfBzX~)TY&y
z`1~9iDc4}XF>s*uC*3{-E9Cjf%!L=o$F#o?@m@h<;kBx7Wyu8{O#T|$&K9-Dzc!P7
zQADdkZd>o)0R=W9sq?o~f~%ZXdP%NCm3VK6hFdN7r?o?rhDNf&LWXie$~Ci4LrI3#
z`}QXHA@lTALjLdh0SyP^=G%lyYO@`Tnx-!#=A<@C+NrmlFSh)|UKlax-IUxAzAO=V
z-=&4z9@)oClG5h?rxA$C@M)>sS@_gsWO-YvZ6GhklwmJmkS!VDAZOLKmtf!P3QPo@
z0`gssFB%mi>9rBaTG-*~JFbO6mqiP9N>b)YDMhnu-dW#upE=QOi1HS({jFh)UPwvX
zCc69R{_L{e`A!TtfXFZJbu594fUe@~zY+Vhu7fc1yt;!#V#OgV(P`Z4WIfF{3&BhJ
z3#K^`=vf?Ff+fm|<72AEz25{Ydw3`2t%A=B@;_KKBluOri#fl_<}>)N7It}Pt~k6!
z-~M_h$M%q2%WLij5se$$3}GJG1@n1~a^`wKd-Qy|yUcibsB?U6&CK=Wx})XeTytI5
zCmOZ982P^v@o9cuTf2JblW3O;qK)KuWyW)>)f>LrArwd|$33CjjATazVcv(zim^9H
z)YyrpFQz)hn2QN!CGkmHFCt#)9kc|KwEYEa5_(6UiK)W*f4Kk*d%t7wU9MU98S=VN
z9)cyZ1g3VYcs~zcNm&1THG0XLHks^fJyjy;hW6YI?Na?y^093Xv2`$&SS7mceT67c
z_aW<cn<6qs_M^rF!}GPWK4>C206aJIrmPeW4S*eIsX-jMUTUg|P4Bo?T!~bFr1(+C
z6{R}+(1r5T=2TX_$m~sZYr-Kr-Ml#8Y{I3XyxI$$2=_NkHmc@AhZwTvt~2Qc<=XZS
z(fKCVst-ekkLv1>Nw&~tojt)R1f33J8c!Ksdgd65(~s;Hh-(B33en`TIC`b=t6JCZ
zs}dk)IhfnrjT3BNDl*;s{f9jV?OwB9Il*zLivFe_8qh{57RdQ<qo7MZ<zBrKPx_=@
zz{C%J6I-Q=3{KA+sKBuO0xBKf{#b;~fHV`@D!7sOqyOYO*V9B^OU=3v0DG-dhSA3d
z{QR&Fd=Z}w@+YL<Xr0vx3L`%>gd@dzh3A=VZ)R^pT{w_fj(d4n<hv2(rNPqa#;ILr
zvIt|te8VHqkeXfPV5YxB?fC03Un8bxXgqV={KweP%WqcDq_SN~(i;Uc=;a+l{hJUa
zOMU=`m8Vo1s<}sJyX;g|;@1Z8nOf=mwfWVtH|F~POy~IiuXJMR#lur3+U`3atJ9rc
z&}VPyg-K~s4ZWLG$=wp&7G-5ak(6`{J)8#H4-NBIfBPra)2DENNz397S7L_;ALd>N
z_v0eN3#wa-_t<{i;Ec+3Kz2-I$eq3kmcnZ}=^N3c)r>PB7O3;Ey?8uE+Y3@^HS|~6
zBjs60E}xl*fi;Nv-xt)P9xkO^fi2!E2gWkdXU_DIPE(E}>C{3?-+gFb(<tmr(&#AV
zZWUQqqY*iI#xJ`?bOrR{E;1CQ8T&aiNZ(ri`jA`nbJ~3~v6f5p8NJTzd|-1GaM9ps
zZRm*I61~0NE6i+~Br*bERR5*tUW+w;l(b5&#^%)cyhhg}FXh)NgK^$<{RXucdKv=;
zC)Adq<TWdm8q!Z3zPU(CuLdd=ms8qo;U4y}XC|>F|86EU-yZfn@5{`T<*PkPAkpWP
z%T4L=|J&oX|GM;*$n!L{;5{3aqWBnXyH23)bNBodTYd9?oYLr>&XVC1{8eP~4OGzk
z_$lm)d1`AO`oIer9Z1u<zXuzg7E~_v9O#c-_iHt&5>W>_Yd3lqu?%-ghiEs{!d<+*
z0*g?J%y1}K_DbdW27utAg%{c?5t<)JNTXf_X4~}&i(ACj2-D=z>*1j|Uom7zE|d?-
zfy0I4cae#W4>Fy1bJ=OkFlK1+J8$_sw3w)<Hy^_n_(~`Lpi@!Wu&`=2aOhKAS+5}L
zOo%$qaw+#iAODY&HqAGynItTj#c*^)OXQ`crAzVrCkjnYajaZc-x^JVhBFP;RcJeS
zSf`Z{(^_@??5JI=_po(X@oH}-?@tFPeX(0fGqD|3g<8-dei`U3x~T#T`3=qkg>Iz<
zsO5DvaJaGd=6?Qd@fCuAjM)m4{`b(8g5#7O-oB({`R!A-6u4e{JZA-FngSjfz9`>>
zldv!Sn1y+Exw{+vibQ$&(Mv+c0aIz!Tc3na*2;orE}+$z&8`n1aKp1tDIY)-P3L$P
zRjc(e=O5bJWx(xU5ub+#n<ZCLdCPy3%dsSBM>OwtmP<HuaEk}D8%4aPeJ})E=MYT@
zl@KrUIJotLChfyS4ju|8zsI2<cHdW;U)c3L;IB^I3@Nvw8sUg4H`6%n?KxN(bnEz&
z{_@GRQ62~1Mfxl2w7Qp6ysP}n1M_0`e5$_|s!|z$p3ZY#FttxwtuYt)sW$ww5w&a&
zHYwSRu}8*~n@pRIw`A5DCB&q5@=i@8dfIIqkm^k!o1^C<^Jj%DomY^NW-hA*d(k(!
z*`5qTuId#l9t%m#TIurk4z^8392c$glH1Yix97na)6BV+RW&+PXye;v7E^-Fvj!T_
z);0lpgvpqNDC-S({3%x4FUDon{cG#aWqyZrS!f0$w>?sIgYosZuhxpGn#B5*xHKNc
zKL~v%7DM=^zga84N&oL1JAd`}NyS{pkcPSS|9!VYMUR($3e6X`+_SU*hqW}LAEljC
z14TB!7QXzlj(9k3F*panQrT1ac9PsULE(F-E8T6sB}hCmd##^9z;zvdS7})aVHcad
z&(cp?a09lVew4&D&$(=@I`^(-(l8TM2U`NHF|tbVD)GEEG`GtL{Nu91y+^`h{(G%v
zwNMBkO9Ttp-1O)_vLt5a#odTf-v`nGemN;K$(Ex)qEsEX<%}G?mUn(sykMYD=fCy)
zwdbXJ-j-UHN9GboJ=R{4L!UuJB_$sTwYG<}1w1eL+y@c=;ta^3u{g&jw73pH!P%Oz
zSYA2HL*_GL@BKVI5&@>kY=yKy*B))L<Nh$-jVxulJO%zv5GCcA_H{w*gT~%zDB)6B
zM$UQ!Fy0a0^$>y>;~{o;2`nCz6Uyjq`6|zo3m(KfO1l4IK6tEt7@`4{3B?z$S@^fv
z&lvTCWOHyV?0|(OYr<iXO33S?G@aDw#H4iYAkq3r;mf`JqgD=Q?U8Kr7!M(y&06DK
zFTLD7N7cryoePY!wDgIsapkcQ;*QbDuAI61fWL<rJ0z2L_d0FqBU#MqRFI)cj8Ww#
z;m3oBtAx{QwPf@vWR0WClD8unhvTf6W<D@!k-tdz33ErjG*EN}j#fkHFvH(e{S$cF
z%IU@BtWUt479=y(xMgCtT7Z;GRDPUnK{k{A1qNESwTSxm4I)GQ#fZFg@Q`4a-7l^w
zke73Tm6g$vWBdRDR@@#+$Voey5K1KWoThJR9~!1dVaKAP+P%p?1qU0;mE&f4KUo8z
zd5{fx#bvbk9XSVwt)3I03zBb(7C<uI8j}iq1Vk;^^hKHF`jSLw+?G;ulcH^Z<n2*e
zUYm7;I_A17>>fV;UdoL>g_4)>upQ|1ks^nayCaR~ju~XXHO=5?b@|3ILl9+4OMmIo
z6Im<`^a1RRx|pBgl2ne$;qS0^zEfCDPkWsklsrzk?9_lkQ3E13Qj_%Zst3+xY>!7l
z@2Phyi5l#SaHQI{z#{DgeSVqeJcJf6dIDpGb0FUb%&<2VW#8lNHY?DPuP6-h&3JIn
z&_$>a2mF0MI}ROd7tl>c_bXXh9!eRkYS%0MKax(b!+1MgmiN}oxNk~X0tW2XAW3xr
zN57-sa1Gb_aLK@nJKNW1pXA+15B>a$%6T&U0pUck!{+oES>ut!$5-DcTUA%GU?*K`
zIN4zJDy-nYMGd6Y6??g;fQFg@3&Vsd+Z7c}Y6Wo~Y&_(S)M-1ajY)95d@#bT2*SGC
zszI*0VmpUoM@>W#nyLd;wplbfDyGqjL01n~J*I|UQjIfJq%HRfIn^(=vGfQHFC5X;
zPM$`#X*sahX=O3r)}*ZS{_CkKre-TUy@bnGyOcmUQ(M(}(E2;hL-VE6+0buEm4UvP
za`OqyF-@h=Zu%^K?|9-9qg{9J-v)l`Ks1<b@d?fd7ko1-dmJKYaj=YAH~TY!beM%x
zZb!Kgt`QKnr#gkfQVorpvy0Abx0|D}h2F42vSq5<!;_Yo5{0kd1K;3qb4JYZ<RdQi
zw>u61*YsTe`brzlT1w8SC#r1ait)3(^jvKUBuf@?#LG(OVbCs%bZ+A}1D6TZusyUh
zDy=G)kOLcDf2Z+0zTVL@0_Py+_YZGNZ)4#sC~qc;w^w#N@*@D`{DJZ#_TpyXM<Rz(
zzC3Zs8+Na8>GKV129Z3bmWzYKdD_)DoPnxeUmJpnK$)6^XYEyY!>p#^)4-7CPu}0C
z%@gF()h3+HXWMy@?Sh2j^3bwU(<D4`zW4oX*a35Ngt@2nIi2>q!`c3b+OBKv&xZX1
z>$B}J@BBTZ#=5GfExtl+>=RbCmRu(zFR%9I8#O!FK2&tyzrZA?GM3_8$|lAxk3HtY
zxhjfGw1;1<KYm~lVW%pxpLSiW2fTGljOCH3$7ip$FdA$N0|>FqGdyBB$@LuqAMKu4
zP4eqicLLr{8p`Bnyk(F8R@9Zt0nfQ0;Rz|*mF%=omMvOPae|AFERj=)O^ua~>k^|I
z@c5TtU03`ZCs-F=dNy3-^#no~Ll4b7YGBJ|c=BL&{1#Ks;ixlc2T&Kd@Q(rZpVBJx
zD3aEL<nz6(TTZVFq5>mne;$Tk_&Y@(ullOFkUx6+LzZu94<5UOjew{^3tu1qT(HzR
zNb@JK)rO6l%v-!if}qYQA#^aRe{q0pluh6-u}OMDs61bXm7<Hh&sL>XV=3gnTvr_)
zNWMY4f*t32z+>c8BcN3$dqB-!spyBiQsdI(VZupMUd=b<(-afyeq&O?M9E`rO@)Mi
zB;<^4V~R}(!X<h=d%$lxX@_EOJVkS&H1!LCY$tI+OC=|GpJSj=ZtW8eK1c0ZDTv1+
z<Cs=5Jz==p0}L}Sb+_{L&dk;zcV9!F=fPwhJA_a=n&@UCW(Os@=5z<O8_nEqx?h%j
z#zst05yv|IJzXM5POK((Zg@tPo!6{nMl{h&uzGGDB{QChjEq3IDhY+;Dt;Pt$+KGL
z6m}2tGe!!WcU)<e-e#Ogu-PNsHL4IYf35K3bx*uw-O6mJQqjXV2}1^`a+LO58+)Ve
z+Yt>u#{@US!72QVT1^kj88|u|>dlSHM1taE^3!EkdFj4bZ;yJew<nS(3vOB!Xja~P
z>=NX+3G{Sw>OhR;Z+E2JV8aYLbXAj-jo<vY@!<hkLJ7vlx#IZu_w<$4*=iguEZL^*
z)<qWAVz`l;SNJOT0mm<{7XhgE2Ko5%9K<?3FuW+3J7Lo9{qZ5<C_M!gdLzfv<>N|-
z$Lebp&B=dzVX7}>?nDQ-Nczhh+?E$s@W9CA-Xo_ZO(S$GCLlX}|0;2(=S0P4mB{Mf
z=4xy$Z(A%jVf`pHP@e>M1!&ag;k)SwwWGM`JevnzW5Gh(JxM_N;Jn1y7Ttu2V$!Fg
z=~_^XU5Erd?g=_9!M99?EYB%8gY=smi&EM1Ancc3?_RUCGRH4`^v9>aD3jU`roPxd
z8Ii#JSCe{MgBv`5_}}R#G=iU>pDfUog>fSa+iyj4anzne!`+sLvtl>fLuT^8R<&(-
z9k?K!kFy0!$6e<wuyEumd#aovVvlb~s3!ilI3(eV*xpXV4VwFRqzSvnpOZVc^dF>#
zw=jE5+O|XKFn!K!y^V^58Wv??eRHs2uzH+Ou0P_qxosscfQ~BVQ%%2T@ne|CtkNCs
zWgsM!ej%<rHT3oy2Q#}Oo7n5XnZPzZQ&YN2Pp>lozbAj`(!)h8qb7EN=|e(X8ir8N
zsCkPAK-blOIvqj4RAowh<p|lfFe;(SpKbn1V(_s^%ld~^qd01nNAGU8{KJNrVG8Yp
zKEZneAHYZO((Ns<@<odGIqM)q4~f>-V@e&Mm;}s`OFAN_obt9YD|u!BnBf75(Y`%|
zAisn#pXe0mFG|DCBo8_!B`%+zE{a({WD6n#<>rFgk1O;!9L{r(+TInJO{qj<x!EFU
zQwC*_?wB(9A)(7ul*WrAQN=P6-g7jkcg|ijmb<gH(FHf=kzi_K%Y*SuWw^N2(t;wA
zfBF1)r12#x;38E2?z_WWRq^55&^UCy=>3A|-;3Zuc2N{r!<KJ%m~4Affd46!?9vS@
z{LUEadEsVjhJ9&BcwZWo42)5U-nK<ufLtF%mCYZWY9FLe5)e5{mcu;YM<i0Y^Aj&e
z%*^>X!1Co8QqyfpXtNO0PGLTyt2t1oF(;Q8w>O$Q&#ftLF;%-+;JLb9Va=g&c#gX&
zc3P}ZTN%P@K4VZz9m2O6fq630c(_?%ePO;{ie6Q1*fpKaZZ?vwT>0%1)DxuXW8D*1
zA%kes(%fB$p#MU#`n&zabTUI}u+N(#XZrK)?d9JM6+EJ*ln3-~LlN@$BXJgk^_@-=
z^s%_SwiqyV%GRw>SQlIv>>r1z@of}qcuZ#sc@`oXejWLQ&tW~`b63JGx0|lat|&S6
z6WCtH=IOORq^bqzA}dGY3pKc$LWb5L)t>4XOh@W7dh`#MMc%;REk|DdeC5Rbw@<)L
zU>3n&xyZ_qb8A}%%p37sp@Bgb33RXz1r~{JXuE-Dp{nk@YzI#FmXR7TZ<yqTypnhx
z!p(6{v9fe7<at7)tqk#uKIP}TbN~kEj#KB$28*v-Ke3aKk>7LK?gICNzcYokP($4N
z(5GXsd<{SPE;Yr$Rq+3(y=(u5It}A*qEc~|B8$mJajL_%va^-j>@E&6v^mIPP?oY{
z(Q(<_w!^U~msPe*7v)me#*`2;mC$s-%54g(5F%6LvKp8DyxX3mU-m!n{bA1hH1qv_
z-}iam=lMLJ=kxfy9KgQradNJAn8fhJM7>SPoCwDB`m6Z`2crT>woXEOO4&2?*Dyjv
zo*jqF4)0rcx6#qHxaZM{^*3kgZhF(<Q&zga=5gBI-B-~T2nI*c`=H{~ci#ADo6zis
zlBSr#Y>Vn6fyz`lY?NJ_mD`Z#v79i!q_a1MN&tiHho*oMlM^}7O4GN!YZ4z^`!3&l
z6`v`Urk$|SIX7vwxU|DxVFi!>g`yufNI^+Xh+Un1RayQ%^u>mA(rpX)qe$`}>SlE1
ztaXo(X$f8ye};{^d39`}@e8CuG<x1d4ECWN_%7nj?%drMRcF!6QUxqmi3wm(P@bZ*
zgzy#8WtNaDw`rlObEt3|<jkdgyHV_inDMmEg@_<9oWMMCE%9}TO$i>Dd+Gs2(DGI%
zi19i`nnzByxdfQ|NMMa~K!T&eQ@j+{jmGuqJez&R-fZ9XRc{r&iQhP&oGO4>{r-(*
z1}bF2d3=aEfKII$*j(~_KyzL_jz_nwWy2XR{tvn+iC>z;uoKKy5SH--A`(cz=!Z%`
zN{2RACQBFD!)Uu;vSg(i&g(${gT)YKFPG331|Sx~E*>ZKy&oEoZ~tBU`NIHbNGXA=
z!Yl93>~u(N<GC4nR>xZ2=@T?K3C2!I$FN%=sc4HuUAfgR&Qhci_WT!FBKHt^aTw6~
zjBZ8a8FW+m)MuXh-hKiFRtndIN|r2FPbGxEnNDfklX6_cbPn%gq^oiYyPmp|JaKVC
zQIPpLKr?Q;LdCa0s2Wq#5*y(S16+Y@dJq;#1dOFSeBc}wW)^illpnl@hSdXW6l7bR
z0CBs=N&P`PRS~YAje7qoP5-HH;Z^YKCef`$%e+svfTq4zoHRb%-q<`sxS5t^v`&pE
zE8$U1x}C|Hibg2;LQOM`{Fw!))&yl1i!6+ULH&9steCoUj6tGG$~{b^fYFdww|BoB
zJwGQ)2$u$pWI_nx9c0FUZ!Sd`n$74vF_LW&2(^>(!1%?6*`}qriQ#E@q&(Z-WhQF)
zp7$UZezx*RKlC*8bR8ZixdzrM$rA4A>qjKG18zV(h774A4#PXHhw8eKmoOEe&A{A2
zi~Ri@uO~THATF>85uG%!Mu9_vgRr?%GiFRPX*-rpddS*Kj&eG@N?vBTPy>=}Ie@#X
zkccbOeQ&<L{s@la9G1no%-=1yb`a<Ok2q7LSW6)v+1D5;4z_YcJxXI|kQc^8X<Hx(
zWJO-{xO=SH5dC;QC_36?$<vxCG&HOWc%bN^UMW;|@k?XPmJahO8@OK;0qn49MNm0<
ze0zf>5!KL~t$=S6ECb>@YBN7cvF^3tz=PG@4(JwGwaPJejbmSfbQ-wupWxfviZF$t
zwNo1E=+{FWbYJM$omYR+i^4;`&^@7FRYF@(aQC~jHi)2!5hdy9cFb>kiwfCvug3fi
zBq-RtjYzTI&0fJxA-UK#D$DwI-Bd9`%yRgijvI&U`-)bp8VuqztpdtI#Y(YhUmg05
zkUgd}QG|B!{%MC5TG7oo?G&^uR;%ye=j3e6mq9#_nv*d$i(AxznWoqRQQ&>XR`nY@
z_~-|*V=B`$$e<cVAAvd>Tm&U4Z+ZR6hF6T;3}mZ#`e-RR_Bc&vOh8$L`6!*3K@!o>
zbs3r*O+p~$Z!8N#QCGWow$5!AvukH$a-DWZ0GG(cqi|3GKLv&)6rVlsWvHwg0SuJ(
zbIQe|I3E;=ssL&C`SAWTpic`x&gcyZqi(5Lqb{<>)^KF)x;UT_O7kK`Lez38sR???
zEowBCf~9Ltw8FRdTqusM7>7V)k!$%FL{Qw|;o{{Pr9dhUpE~gv4OmVYi6MU>7^9NM
zBhOm(HOa{-+`pc?z=$Uggx>!2D*ooM0aFt&vUE#Dn*M8SLS)FD4+ECaSAt95_vD8!
z_)Pt1I8e;-kEXwR<t&VK{Y;D6+<(`nn-?a+3hCs{|1OrrN5f?G_b!ZON=;jsL%aAF
zP$^%0QDkvP!SojGg8aV&c^?hGGC%(&e98=8meI^`DVZO5-kV)E{IC16GPgD3edBTL
EAJQhv82|tP

diff --git a/apps/docs/public/openagentcore.svg b/apps/docs/public/openagentcore.svg
deleted file mode 100644
index f12bf1ef1..000000000
--- a/apps/docs/public/openagentcore.svg
+++ /dev/null
@@ -1,3 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="232 244 756 780" width="100" height="100">
-  <path d="M 588.500 247.500 C 482.038 258.932, 384.992 313.332, 317.342 399.500 C 241.675 495.881, 215.170 625.903, 247.575 741.747 C 285.409 876.998, 396.299 984.807, 527.500 1013.894 C 573.849 1024.169, 627.260 1025.623, 677 1017.964 C 780.514 1002.024, 876.331 944.643, 948.289 855.500 C 967.400 831.824, 987.086 801.273, 985.647 797.522 C 984.937 795.673, 904.376 744.245, 903.572 745.128 C 903.385 745.332, 901.319 749.325, 898.980 754 C 892.404 767.143, 880.011 786.376, 870.305 798.499 C 861.349 809.685, 841.417 831, 839.911 831 C 839.456 831, 838.926 782.513, 838.732 723.250 C 838.422 628.124, 838.183 614.283, 836.696 605.117 C 816.784 482.366, 703.587 402.140, 584.478 426.362 C 501.463 443.243, 431.784 511.254, 414 592.759 C 391.575 695.536, 444.831 796.779, 540 832.292 C 593.282 852.175, 661.017 845.557, 715.796 815.117 C 727.188 808.787, 741.006 799.755, 743.477 797.025 C 744.485 795.911, 745.690 795, 746.155 795 C 746.620 795, 747 817.488, 747 844.974 L 747 894.949 744.056 896.471 C 738.990 899.091, 717.003 907.070, 705.123 910.599 C 657.494 924.751, 607.787 926.746, 561.151 916.378 C 448.026 891.230, 357.961 799.046, 338.509 688.500 C 308.967 520.602, 428.454 363.695, 600.492 344.473 C 714.005 331.789, 825.907 394.237, 886.008 503.808 C 892.987 516.532, 893.355 516.997, 895.386 515.673 C 898.015 513.958, 931.494 493.905, 955.500 479.665 C 965.400 473.792, 974.115 468.594, 974.867 468.113 C 977.865 466.193, 950.810 421.104, 933.996 400 C 864.951 313.340, 778.345 263.056, 673 248.466 C 656.745 246.215, 605.885 245.634, 588.500 247.500 M 607.585 516.107 C 555.949 523.638, 513.408 564.461, 504.530 615 C 493.290 678.986, 530.313 736.554, 592.500 751.785 C 605.725 755.025, 637.608 754.155, 652.500 750.149 C 733.815 728.273, 770.193 636.477, 724.629 568.135 C 699.042 529.755, 653.329 509.435, 607.585 516.107" fill="currentColor" fill-rule="evenodd"/>
-</svg>
diff --git a/apps/docs/scripts/check-browser.mjs b/apps/docs/scripts/check-browser.mjs
deleted file mode 100644
index 8bd3476ff..000000000
--- a/apps/docs/scripts/check-browser.mjs
+++ /dev/null
@@ -1,44 +0,0 @@
-#!/usr/bin/env node
-// Local documentation acceptance only: never enter credentials or call Core.
-const { chromium } = await import(process.env.DOCS_PLAYWRIGHT_MODULE ?? '@playwright/test')
-import assert from 'node:assert/strict'
-import fs from 'node:fs'
-import path from 'node:path'
-const origin = process.argv[2] ?? 'http://127.0.0.1:4275'
-assert.ok(['127.0.0.1', 'localhost'].includes(new URL(origin).hostname), 'Use a task-owned local documentation server')
-const browser = await chromium.launch({ headless: true, channel: 'chromium', ...(process.env.DOCS_BROWSER_EXECUTABLE ? { executablePath: process.env.DOCS_BROWSER_EXECUTABLE } : {}) })
-const context = await browser.newContext({ viewport: { width: 1440, height: 1000 } })
-const failures = []
-const unexpected = []
-context.on('request', request => {
-  if (!request.url().startsWith(origin + '/') && request.url() !== origin) unexpected.push(request.url())
-})
-const page = await context.newPage()
-page.on('pageerror', error => failures.push(error.message))
-const screenshots = process.env.DOCS_SCREENSHOT_DIR
-if (screenshots) fs.mkdirSync(screenshots, { recursive: true })
-try {
-  for (const route of ['/', '/install', '/configure', '/console', '/execution-model', '/api-reference/agents', '/api-reference/core/sandbox-manager', '/api-reference/machine/sandbox-node', '/harness-onboarding']) {
-    const response = await page.goto(origin + route, { waitUntil: 'networkidle' })
-    assert.equal(response.status(), 200, route)
-    assert.ok(await page.locator('h1').count(), 'Missing page title: ' + route)
-    assert.ok((await page.locator('body').innerText()).includes('OpenAgentCore Docs'), 'Wrong visible wordmark: ' + route)
-    assert.ok((await page.title()).includes('OpenAgentCore Docs'), 'Wrong page metadata: ' + route)
-    if (route.includes('/api-reference/')) {
-      assert.equal(await page.locator('input, form, textarea').count(), 0, 'Reference exposes request controls: ' + route)
-      assert.ok((await page.locator('body').innerText()).includes('Authorization'), 'Missing credential documentation: ' + route)
-    }
-    if (screenshots && ['/', '/console', '/execution-model', '/api-reference/core/sandbox-manager', '/harness-onboarding'].includes(route)) {
-      await page.screenshot({ path: path.join(screenshots, (route.replaceAll('/', '-') || 'home') + '.png'), fullPage: false })
-    }
-  }
-  await page.setViewportSize({ width: 390, height: 844 })
-  await page.goto(origin + '/install', { waitUntil: 'networkidle' })
-  assert.ok(await page.evaluate(() => document.documentElement.scrollWidth <= window.innerWidth + 1), 'Mobile page overflows viewport')
-  assert.deepEqual(failures, [], 'Browser runtime errors')
-  assert.deepEqual(unexpected, [], 'Documentation made external requests')
-  console.log('Nine desktop routes, developer navigation, mobile layout and read-only API controls passed; no external requests.')
-} finally {
-  await context.close()
-  await browser.close()
-}
diff --git a/apps/docs/scripts/check-python.mjs b/apps/docs/scripts/check-python.mjs
deleted file mode 100644
index 96bb15afd..000000000
--- a/apps/docs/scripts/check-python.mjs
+++ /dev/null
@@ -1,20 +0,0 @@
-#!/usr/bin/env node
-// Decode YAML with the locked Node dependency; Python checks need only stdlib.
-import fs from 'node:fs'
-import { spawnSync } from 'node:child_process'
-import yaml from 'js-yaml'
-import { appRoot, surfaces, sourcePath } from './contracts.mjs'
-
-const mode = process.argv[2]
-if (!['routes', 'tests'].includes(mode)) throw new Error('Expected routes or tests')
-const args = mode === 'routes'
-  ? ['scripts/verify-contract-routes.py']
-  : ['-m', 'unittest', 'discover', '-s', 'scripts', '-p', 'test_*.py']
-const input = mode === 'routes' ? JSON.stringify(surfaces.map(surface => ({
-  label: surface.id, document: yaml.load(fs.readFileSync(sourcePath(surface), 'utf8')),
-}))) : undefined
-const result = spawnSync(process.env.OAC_TEST_OFFICIAL_SDK_PYTHON || 'python3', ['-S', ...args], {
-  cwd: appRoot, input, stdio: ['pipe', 'inherit', 'inherit'],
-})
-if (result.error) throw result.error
-process.exit(result.status ?? 1)
diff --git a/apps/docs/scripts/check-python.test.mjs b/apps/docs/scripts/check-python.test.mjs
deleted file mode 100644
index 05d5b6697..000000000
--- a/apps/docs/scripts/check-python.test.mjs
+++ /dev/null
@@ -1,30 +0,0 @@
-import test from 'node:test'
-import assert from 'node:assert/strict'
-import fs from 'node:fs'
-import os from 'node:os'
-import path from 'node:path'
-import { spawnSync } from 'node:child_process'
-import { appRoot } from './contracts.mjs'
-
-test('route gate and Python regressions honor the selected interpreter without site packages', (t) => {
-  const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'oac-docs-python-'))
-  t.after(() => fs.rmSync(directory, { recursive: true, force: true }))
-  const selected = path.join(directory, 'selected-python')
-  const log = path.join(directory, 'arguments.jsonl')
-  const python = spawnSync(process.env.OAC_TEST_OFFICIAL_SDK_PYTHON || 'python3', ['-S', '-c', 'import sys; print(sys.executable)'], { encoding: 'utf8' })
-  assert.equal(python.status, 0, python.stderr)
-  const executable = python.stdout.trim()
-  // This task-owned wrapper records selection, then delegates unchanged to Python.
-  fs.writeFileSync(selected, `#!${executable}\nimport json, os, sys\nwith open(${JSON.stringify(log)}, "a") as output:\n    output.write(json.dumps(sys.argv[1:]) + "\\n")\nos.execv(${JSON.stringify(executable)}, [${JSON.stringify(executable)}, *sys.argv[1:]])\n`, { mode: 0o700 })
-  for (const mode of ['routes', 'tests']) {
-    const result = spawnSync(process.execPath, ['scripts/check-python.mjs', mode], {
-      cwd: appRoot, env: { ...process.env, OAC_TEST_OFFICIAL_SDK_PYTHON: selected }, encoding: 'utf8',
-    })
-    assert.equal(result.status, 0, result.stdout + result.stderr)
-    if (mode === 'routes') assert.match(result.stdout, /Contract operations:\s+[1-9]\d*\b/)
-    else assert.match(result.stderr, /Ran 2 tests/)
-  }
-  const invocations = fs.readFileSync(log, 'utf8').trim().split('\n').map(line => JSON.parse(line))
-  assert.equal(invocations.length, 2)
-  assert.ok(invocations.every(args => args[0] === '-S'), 'Checks must not depend on ambient site packages')
-})
diff --git a/apps/docs/scripts/check-site.mjs b/apps/docs/scripts/check-site.mjs
deleted file mode 100644
index eba981358..000000000
--- a/apps/docs/scripts/check-site.mjs
+++ /dev/null
@@ -1,64 +0,0 @@
-#!/usr/bin/env node
-// Check every English documentation route against a running built site.
-import fs from "node:fs"
-import path from "node:path"
-import { fileURLToPath } from "node:url"
-
-const here = path.dirname(fileURLToPath(import.meta.url))
-const contentRoot = path.resolve(here, "../content/docs")
-const origin = (process.argv[2] ?? "http://127.0.0.1:4001").replace(/\/+$/, "")
-
-function walk(dir) {
-  const out = []
-  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-    const full = path.join(dir, entry.name)
-    if (entry.isDirectory()) out.push(...walk(full))
-    else if (entry.name.endsWith(".mdx")) out.push(full)
-  }
-  return out
-}
-
-// content/docs/index.mdx            -> /
-// content/docs/foo.mdx              -> /foo
-// content/docs/a/index.mdx          -> /a
-// content/docs/a/b.mdx              -> /a/b
-function slugFor(file) {
-  let rel = path.relative(contentRoot, file).split(path.sep).join("/")
-  rel = rel.replace(/\.mdx$/, "").replace(/(^|\/)index$/, "")
-  return rel.replace(/\/$/, "")
-}
-
-const slugs = [...new Set(walk(contentRoot).map(slugFor))].sort()
-const routes = []
-for (const slug of slugs) {
-  routes.push(slug ? `/${slug}` : "/")
-}
-
-const failures = []
-let checked = 0
-const concurrency = 8
-
-async function check(route) {
-  try {
-    const response = await fetch(`${origin}${route}`, { redirect: "manual" })
-    checked += 1
-    if (response.status !== 200) failures.push(`${response.status}  ${route}`)
-  } catch (error) {
-    checked += 1
-    failures.push(`ERR   ${route}  (${error.message})`)
-  }
-}
-
-const queue = [...routes]
-await Promise.all(
-  Array.from({ length: concurrency }, async () => {
-    while (queue.length > 0) await check(queue.shift())
-  }),
-)
-
-if (failures.length > 0) {
-  console.error(`\n${failures.length} of ${checked} routes did not return 200:`)
-  for (const line of failures.sort()) console.error(`  ${line}`)
-  process.exit(1)
-}
-console.log(`${checked} routes returned 200 at ${origin} (${slugs.length} pages).`)
\ No newline at end of file
diff --git a/apps/docs/scripts/contracts.mjs b/apps/docs/scripts/contracts.mjs
deleted file mode 100644
index e8b6356e3..000000000
--- a/apps/docs/scripts/contracts.mjs
+++ /dev/null
@@ -1,91 +0,0 @@
-// The public schema is constrained by the pinned upstream route/field snapshots.
-// Core and machine schemas are local generated contracts, with separate authority.
-import { upgrade } from '@scalar/openapi-upgrader'
-import yaml from 'js-yaml'
-import fs from 'node:fs'
-import path from 'node:path'
-import { fileURLToPath } from 'node:url'
-export const appRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..')
-export const repoRoot = path.resolve(appRoot, '../..')
-export const methods = ['get', 'post', 'put', 'patch', 'delete', 'head', 'options', 'trace']
-export const surfaces = [
-  { id: 'public-api', file: 'openapi.yaml', directory: '', title: 'Application API', prefix: '/v1', credential: 'Project API key', authority: 'Public schema constrained by the pinned OpenAI Agents API baseline; documented x_agents_core fields remain Core extensions.' },
-  { id: 'core-api', file: 'core.openapi.yaml', directory: '/core', title: 'Core administration API', prefix: '/core/v1', credential: 'Core key held by Web’s server or an operator script', authority: 'Generated local management contract. This is not part of the public OpenAI API.' },
-  { id: 'runtime-api', file: 'runtime.openapi.yaml', directory: '/machine', title: 'Machine connection API', prefix: '/api/v1', credential: 'Route-specific node enrollment, node, daemon, or executor credential', authority: 'Generated local machine contract. These connections reach Core directly, never through Web.' },
-]
-export function sourcePath(surface) { return path.join(repoRoot, 'contracts/agents-api', surface.file) }
-export function normalise(surface, source = yaml.load(fs.readFileSync(sourcePath(surface), 'utf8'))) {
-  if (source.swagger !== '2.0' && !/^3\./.test(source.openapi ?? '')) throw new Error('Unsupported contract format: ' + surface.file)
-  const base = source.basePath === '/' ? '' : (source.basePath ?? '')
-  const document = source.swagger === '2.0' ? upgrade(structuredClone(source), '3.0') : structuredClone(source)
-  projectSchemas(document)
-  document.servers = [{ url: (surface.id === 'core-api' ? 'https://core-direct.example.com' : 'https://core.example.com') + base, description: surface.id === 'core-api' ? 'Operator-script placeholder: replace with the Core loopback origin, not the public Web entry.' : 'Documentation placeholder; substitute your Core public origin.' }]
-  for (const scheme of Object.values(document.components?.securitySchemes ?? {})) {
-    if (scheme.type === 'apiKey' && scheme.in === 'header' && scheme.name?.toLowerCase() === 'authorization') {
-      delete scheme.in; delete scheme.name; scheme.type = 'http'; scheme.scheme = 'bearer'
-    }
-  }
-  const tags = new Set()
-  for (const [route, item] of Object.entries(document.paths ?? {})) {
-    for (const method of methods) {
-      const operation = item[method]
-      if (!operation) continue
-      if (!(base + route).startsWith(surface.prefix + '/')) throw new Error('Route crosses credential boundary: ' + surface.id + ' ' + route)
-      for (const tag of operation.tags ?? ['Operations']) tags.add(tag)
-    }
-  }
-  document.tags = [...tags].map(name => ({ name, description: `${name}. ${surface.title}: ${surface.credential}. ${surface.authority}` }))
-  return document
-}
-
-// OpenAPI 3.1 can express nullable references and compositions without relying on
-// Swagger extensions that the reference renderer ignores. Visit schema locations
-// only: example payloads may themselves contain keys named type or x-nullable.
-function projectSchemas(document) {
-  const from30 = document.openapi.startsWith('3.0')
-  function schema(value) {
-    if (!value || typeof value !== 'object') return value
-    for (const key of ['properties', 'patternProperties', '$defs', 'dependentSchemas']) {
-      for (const [name, child] of Object.entries(value[key] ?? {})) value[key][name] = schema(child)
-    }
-    for (const key of ['items', 'additionalProperties', 'not', 'contains', 'propertyNames', 'if', 'then', 'else', 'unevaluatedProperties', 'unevaluatedItems']) {
-      if (key in value) value[key] = schema(value[key])
-    }
-    for (const key of ['allOf', 'anyOf', 'oneOf', 'prefixItems']) {
-      if (Array.isArray(value[key])) value[key] = value[key].map(schema)
-    }
-    if (from30) {
-      for (const bound of ['Minimum', 'Maximum']) {
-        const key = 'exclusive' + bound
-        if (value[key] === true) value[key] = value[bound.toLowerCase()]
-        else if (value[key] === false) delete value[key]
-      }
-    }
-    const nullable = value['x-nullable'] === true || (from30 && value.nullable === true)
-    delete value['x-nullable']
-    if (from30) delete value.nullable
-    if (!nullable) return value
-    // A union also permits null for enum, $ref and allOf schemas; adding only
-    // type: [..., 'null'] would leave enum/composition constraints excluding null.
-    const result = { anyOf: [value, { type: 'null' }] }
-    for (const key of ['description', 'readOnly', 'writeOnly', 'deprecated', 'example', 'examples', 'default']) {
-      if (key in value) { result[key] = value[key]; delete value[key] }
-    }
-    return result
-  }
-  function visit(value) {
-    if (!value || typeof value !== 'object') return
-    for (const [key, child] of Object.entries(value)) {
-      if (key === 'schema') value[key] = schema(child)
-      else if (!['example', 'examples', 'default', 'enum'].includes(key) && !key.startsWith('x-')) visit(child)
-    }
-  }
-  for (const [name, value] of Object.entries(document.components?.schemas ?? {})) {
-    document.components.schemas[name] = schema(value)
-  }
-  // Components schemas were already handled and must not be interpreted as
-  // document objects (a property can legally be named "schema").
-  const { schemas, ...otherComponents } = document.components ?? {}
-  visit({ ...document, components: otherComponents })
-  if (from30) document.openapi = '3.1.0'
-}
diff --git a/apps/docs/scripts/contracts.test.mjs b/apps/docs/scripts/contracts.test.mjs
deleted file mode 100644
index bf191d9af..000000000
--- a/apps/docs/scripts/contracts.test.mjs
+++ /dev/null
@@ -1,85 +0,0 @@
-import test from 'node:test'
-import assert from 'node:assert/strict'
-import fs from 'node:fs'
-import os from 'node:os'
-import path from 'node:path'
-import yaml from 'js-yaml'
-import { createOpenAPI } from 'fumadocs-openapi/server'
-import { schemaToString } from '../node_modules/fumadocs-openapi/dist/utils/schema-to-string.js'
-import { appRoot, normalise, surfaces } from './contracts.mjs'
-
-test('public rendering preserves operation prose, schemas and project authentication', () => {
-  const fixture = { swagger: '2.0', info: { title: 'Example', version: '1' }, basePath: '/v1', paths: {
-    '/agents': { get: { tags: ['Agents'], description: 'A constraint that must remain visible.', security: [{ ProjectKey: [] }], responses: { 200: { description: 'Result', schema: { $ref: '#/definitions/Agent' } } } } },
-  }, definitions: { Agent: { type: 'object', properties: { id: { type: 'string' } } } }, securityDefinitions: { ProjectKey: { type: 'apiKey', in: 'header', name: 'Authorization' } } }
-  const rendered = normalise(surfaces[0], fixture)
-  assert.equal(rendered.paths['/agents'].get.description, fixture.paths['/agents'].get.description)
-  assert.deepEqual(rendered.paths['/agents'].get.security, [{ ProjectKey: [] }])
-  assert.equal(rendered.components.schemas.Agent.properties.id.type, 'string')
-  assert.equal(rendered.components.securitySchemes.ProjectKey.scheme, 'bearer')
-  assert.equal(rendered.servers[0].url, 'https://core.example.com/v1')
-})
-
-test('OpenAPI 3 is accepted without guessing its authority or changing its schemas', () => {
-  const fixture = { openapi: '3.0.3', info: { title: 'Example', version: '1' }, paths: {
-    '/core/v1/example': { get: { tags: ['Example'], responses: { 200: { description: 'OK' } } } },
-  }, components: { schemas: { Payload: { type: 'string', enum: ['exact'] } } } }
-  assert.deepEqual(normalise(surfaces[1], fixture).components.schemas, fixture.components.schemas)
-  assert.throws(() => normalise(surfaces[0], fixture), /credential boundary/)
-  assert.throws(() => normalise(surfaces[1], { ...fixture, openapi: '9.0' }), /Unsupported/)
-})
-
-test('actual Fumadocs renderer preserves nullable values, references and compositions', async (t) => {
-  const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'oac-docs-nullable-'))
-  t.after(() => fs.rmSync(directory, { recursive: true, force: true }))
-  const example = { schema: { type: 'string', 'x-nullable': true } }
-  const fixture = { swagger: '2.0', info: { title: 'Example', version: '1' }, paths: {}, definitions: {
-    Text: { type: 'string' },
-    Payload: { type: 'object', properties: {
-      text: { type: 'string', 'x-nullable': true, description: 'May be null.' },
-      reference: { $ref: '#/definitions/Text', 'x-nullable': true },
-      composed: { allOf: [{ $ref: '#/definitions/Text' }], 'x-nullable': true },
-      choice: { type: 'string', enum: ['only'], 'x-nullable': true },
-      titled: { type: 'string', title: 'Label', 'x-nullable': true },
-      requiredText: { type: 'string' },
-      sample: { type: 'object', example },
-    } },
-  } }
-  const original = structuredClone(fixture)
-  const projected = normalise(surfaces[0], fixture)
-  assert.equal(projected.openapi, '3.1.0')
-  assert.deepEqual(fixture, original, 'Canonical source must not be mutated')
-  assert.deepEqual(projected.components.schemas.Payload.properties.sample.example, example)
-  assert.deepEqual(projected.components.schemas.Payload.properties.choice.anyOf, [
-    { type: 'string', enum: ['only'] }, { type: 'null' },
-  ], 'Null must be allowed outside the enum constraint')
-  const file = path.join(directory, 'fixture.yaml')
-  fs.writeFileSync(file, yaml.dump(projected))
-  const docs = await createOpenAPI({ input: [file], disablePlayground: true }).getSchemas()
-  const properties = docs[file].dereferenced.components.schemas.Payload.properties
-  for (const [field, expected] of Object.entries({ text: 'string | null', reference: 'Text | null', composed: 'Text | null', choice: 'string | null', titled: 'Label | null', requiredText: 'string' })) {
-    assert.equal(schemaToString(properties[field], docs[file]), expected, field)
-  }
-  assert.equal(properties.text.description, 'May be null.')
-})
-
-test('actual generated public reference renders the pinned nullable error fields', async () => {
-  const file = path.join(appRoot, 'openapi/public-api.yaml')
-  const docs = await createOpenAPI({ input: [file], disablePlayground: true }).getSchemas()
-  const schemas = docs[file].dereferenced.components.schemas
-  for (const [name, field] of [['v1.Session', 'error'], ['v1.APIError', 'code'], ['v1.APIError', 'param']]) {
-    assert.equal(schemaToString(schemas[name].properties[field], docs[file]), 'string | null', `${name}.${field}`)
-  }
-})
-
-test('OpenAPI 3.0 schema conversion preserves bounds and binary annotations', () => {
-  const fixture = { openapi: '3.0.3', info: { title: 'Example', version: '1' }, paths: {}, components: { schemas: {
-    Number: { type: 'number', minimum: 1, exclusiveMinimum: true, maximum: 10, exclusiveMaximum: false, nullable: true },
-    File: { type: 'string', format: 'binary' },
-  } } }
-  const schemas = normalise(surfaces[0], fixture).components.schemas
-  assert.deepEqual(schemas.Number.anyOf, [
-    { type: 'number', minimum: 1, exclusiveMinimum: 1, maximum: 10 }, { type: 'null' },
-  ])
-  assert.deepEqual(schemas.File, fixture.components.schemas.File)
-})
diff --git a/apps/docs/scripts/generate-api-reference.mjs b/apps/docs/scripts/generate-api-reference.mjs
deleted file mode 100644
index b9b706b46..000000000
--- a/apps/docs/scripts/generate-api-reference.mjs
+++ /dev/null
@@ -1,38 +0,0 @@
-#!/usr/bin/env node
-// Render the actual contracts without copying prose from superseded API surfaces.
-import { generateFilesOnly } from 'fumadocs-openapi'
-import { createOpenAPI } from 'fumadocs-openapi/server'
-import yaml from 'js-yaml'
-import fs from 'node:fs'
-import path from 'node:path'
-import crypto from 'node:crypto'
-import { appRoot, repoRoot, surfaces, sourcePath, normalise } from './contracts.mjs'
-const root = path.join(appRoot, 'content/docs/api-reference')
-fs.rmSync(root, { recursive: true, force: true })
-fs.mkdirSync(root, { recursive: true })
-fs.rmSync(path.join(appRoot, 'openapi'), { recursive: true, force: true })
-fs.mkdirSync(path.join(appRoot, 'openapi'))
-const record = { sources: {}, outputs: {} }
-const digest = file => crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex')
-for (const surface of surfaces) {
-  const output = path.join(appRoot, 'openapi', surface.id + '.yaml')
-  fs.writeFileSync(output, '# Generated documentation projection; do not edit.\n' + yaml.dump(normalise(surface), { lineWidth: -1, noRefs: true }))
-  const files = await generateFilesOnly({ input: createOpenAPI({ input: [output] }), per: 'tag' })
-  const directory = root + surface.directory
-  fs.mkdirSync(directory, { recursive: true })
-  for (const file of files) {
-    const target = path.join(directory, file.path)
-    fs.writeFileSync(target, file.content.replace(/document=\{[^}]*\}/, `document={${JSON.stringify(surface.id)}}`))
-    record.outputs[path.relative(appRoot, target)] = digest(target)
-  }
-  const pages = ['index', ...files.map(file => file.path.replace(/\.mdx$/, ''))]
-  if (!surface.directory) pages.push('core', 'machine')
-  fs.writeFileSync(path.join(directory, 'meta.json'), JSON.stringify({ title: surface.title, pages }, null, 2) + '\n')
-  const body = `---\ntitle: ${surface.title}\ndescription: ${surface.prefix} — ${surface.credential}.\n---\n\n${surface.authority}\n\n**Credential:** ${surface.credential}. Examples use reserved \`example.com\` origins. This reference does not send requests or collect credentials.\n\n${surface.id === 'runtime-api' ? 'This schema covers node configuration, enrollment and identity. Daemon WebSockets and executor connection details are described in the [machine overview](/public-api#machine-connection-api).\n\n' : ''}${surface.id === 'core-api' ? 'Operator scripts use Core’s loopback port. The public entry routes management through Web, which requires its signed-in session and supplies the Core key on the server.\n\n' : ''}[API namespaces and credentials](/public-api) · [Application reference](/api-reference) · [Administration reference](/api-reference/core) · [Machine reference](/api-reference/machine)\n\n` + files.map(file => `- [${file.path.replace(/\.mdx$/, '')}](/api-reference${surface.directory}/${file.path.replace(/\.mdx$/, '')})`).join('\n') + '\n'
-  fs.writeFileSync(path.join(directory, 'index.mdx'), body)
-  record.sources[path.relative(repoRoot, sourcePath(surface))] = digest(sourcePath(surface))
-  record.outputs[path.relative(appRoot, output)] = digest(output)
-  for (const name of ['meta.json', 'index.mdx']) record.outputs[path.relative(appRoot, path.join(directory, name))] = digest(path.join(directory, name))
-  console.log(surface.id + ': ' + files.length + ' tag pages')
-}
-fs.writeFileSync(path.join(appRoot, 'openapi/sources.json'), JSON.stringify(record, null, 2) + '\n')
diff --git a/apps/docs/scripts/generate-guides.mjs b/apps/docs/scripts/generate-guides.mjs
deleted file mode 100644
index ed336c31a..000000000
--- a/apps/docs/scripts/generate-guides.mjs
+++ /dev/null
@@ -1,54 +0,0 @@
-#!/usr/bin/env node
-// The site renders current repository guides instead of maintaining a second manual.
-import fs from 'node:fs'
-import path from 'node:path'
-import crypto from 'node:crypto'
-import { fileURLToPath } from 'node:url'
-const app = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..')
-const repo = path.resolve(app, '../..')
-const guides = JSON.parse(fs.readFileSync(path.join(app, 'scripts/guides.json'), 'utf8'))
-const routes = new Map(guides.map(g => [g.source, g.slug === 'index' ? '/' : '/' + g.slug]))
-const sourceRevision = 'f6d258735fc601c521dd990e6f9e1ed261f4ef2d'
-const sourceURL = relative => `https://github.com/MiniMax-AI/OpenAgentCore/blob/${sourceRevision}/${relative}`
-const digest = text => crypto.createHash('sha256').update(text).digest('hex')
-function mdx(text) {
-  let fence = false
-  return text.split('\n').map(line => {
-    if (/^\s*(```|~~~)/.test(line)) { fence = !fence; return line }
-    if (fence) return line
-    return line.split(/(`+[^`]*`+)/g).map((part, i) => i % 2 ? part : part.replaceAll('{', '&#123;').replaceAll('}', '&#125;').replaceAll('<', '&lt;')).join('')
-  }).join('\n')
-}
-const record = { revision: sourceRevision, sources: {}, outputs: {} }
-// Only this generated asset directory is cleared; authored diagrams remain separate.
-fs.rmSync(path.join(app, 'public/images/source'), { recursive: true, force: true })
-for (const guide of guides) {
-  const original = fs.readFileSync(path.join(repo, guide.source), 'utf8')
-  let body = original.replace(/^# [^\n]*\n/, '').replace(/<!--[\s\S]*?-->/g, '').replace(/^```caddyfile$/gm, '```text')
-  body = body.replace(/(!?\[[^\]]*\])\(([^\s)]+)\)/g, (full, label, target) => {
-    if (/^(?:[a-z]+:|#|\/)/i.test(target)) return full
-    const [file, anchor] = target.split('#')
-    const relative = path.posix.normalize(path.posix.join(path.posix.dirname(guide.source), file))
-    if (!fs.existsSync(path.join(repo, relative))) throw new Error('Missing guide link: ' + guide.source + ' -> ' + target)
-    let url = routes.get(relative) ?? sourceURL(relative)
-    if (label.startsWith('!')) {
-      const imageSource = guide.images?.[relative] ?? relative
-      const asset = 'public/images/source/' + imageSource
-      const bytes = fs.readFileSync(path.join(repo, imageSource))
-      fs.mkdirSync(path.dirname(path.join(app, asset)), { recursive: true })
-      fs.writeFileSync(path.join(app, asset), bytes)
-      record.sources[imageSource] = digest(bytes)
-      record.outputs[asset] = digest(bytes)
-      url = '/' + asset.slice('public/'.length)
-    }
-    return label + '(' + url + (anchor ? '#' + anchor : '') + ')'
-  })
-  const en = `---\ntitle: ${JSON.stringify(guide.title)}\ndescription: ${JSON.stringify(guide.description)}\n---\n\n` + (guide.slug === 'execution-model' ? '![Application, administration and machine credential boundaries](/images/architecture.svg)\n\n' : '') + mdx(body.trim()) + `\n\n[Repository source](${sourceURL(guide.source)})\n`
-  const relative = `content/docs/${guide.slug}.mdx`
-  fs.writeFileSync(path.join(app, relative), en)
-  record.outputs[relative] = digest(en)
-  record.sources[guide.source] = digest(original)
-}
-record.sources['apps/docs/scripts/guides.json'] = digest(fs.readFileSync(path.join(app, 'scripts/guides.json')))
-fs.writeFileSync(path.join(app, 'content/guide-sources.json'), JSON.stringify(record, null, 2) + '\n')
-console.log('Rendered ' + guides.length + ' current English guides.')
diff --git a/apps/docs/scripts/guides.json b/apps/docs/scripts/guides.json
deleted file mode 100644
index 1cb63cf15..000000000
--- a/apps/docs/scripts/guides.json
+++ /dev/null
@@ -1,152 +0,0 @@
-[
-  {
-    "slug": "index",
-    "source": "docs/getting-started/README.md",
-    "title": "OpenAgentCore documentation",
-    "description": "Install Core and Web, create a Project API key, and add execution capacity."
-  },
-  {
-    "slug": "concepts",
-    "source": "docs/design-principles.md",
-    "title": "Concepts and ownership",
-    "description": "Projects, credentials and the boundary between applications, administration and execution."
-  },
-  {
-    "slug": "execution-model",
-    "source": "docs/web/console-server.md",
-    "title": "Execution and API architecture",
-    "description": "Applications call the public API; the administrator browser calls Web; Runtime connects to Core."
-  },
-  {
-    "slug": "install",
-    "source": "docs/getting-started/install.md",
-    "title": "Install Core and Web",
-    "description": "Host prerequisites, installation, HTTPS, first sign-in, a default model and the first Project API key."
-  },
-  {
-    "slug": "install-options",
-    "source": "docs/getting-started/install-options.md",
-    "title": "Installation options and advanced deployments",
-    "description": "Installer flags, sandbox backends, listeners, reverse proxies, split and native deployments and offline hosts."
-  },
-  {
-    "slug": "configure",
-    "source": "docs/configuration.md",
-    "title": "Configuration reference",
-    "description": "The operator config.json, generated files and database-owned runtime settings."
-  },
-  {
-    "slug": "bootstrap-projects-keys",
-    "source": "docs/web/console-server.md",
-    "title": "Sign in and issue application keys",
-    "description": "Keep the Core key on the management side and issue Project API keys through Web."
-  },
-  {
-    "slug": "quickstart",
-    "source": "docs/getting-started/quickstart.md",
-    "title": "Call the Agent API",
-    "description": "From a Project API key to a finished Session in three steps."
-  },
-  {
-    "slug": "public-api",
-    "source": "docs/api/README.md",
-    "title": "API namespaces and credentials",
-    "description": "The public application API, private administration API and machine connection interface."
-  },
-  {
-    "slug": "agents-and-tools",
-    "source": "contracts/agents-api/execution-tools.md",
-    "title": "Agents, tools and harnesses",
-    "description": "Native harness tools, shared declarations and the limits of execution support."
-  },
-  {
-    "slug": "sessions",
-    "source": "docs/api/public-agent-api.md",
-    "title": "Agents API guide",
-    "description": "Every public resource with OpenAI SDK and HTTP examples: Agents, Sessions, input, streaming, files, Skills, templates and Vaults."
-  },
-  {
-    "slug": "examples",
-    "source": "docs/examples.md",
-    "title": "Examples",
-    "description": "Complete applications built on the Agents API, and what each one shows."
-  },
-  {
-    "slug": "environments-and-files",
-    "source": "contracts/agents-api/environments.md",
-    "title": "Environments and files",
-    "description": "Execution placement, Environment resources and workspace ownership."
-  },
-  {
-    "slug": "hosted-providers",
-    "source": "docs/getting-started/nodes.md",
-    "title": "Nodes and hosted providers",
-    "description": "Add and remove Docker or microsandbox nodes; diagnose connection and readiness."
-  },
-  {
-    "slug": "self-hosted-execution",
-    "source": "docs/getting-started/self-hosted.md",
-    "title": "Self-hosted executors",
-    "description": "Connect a user-owned Runtime to its Environment with a restricted executor credential."
-  },
-  {
-    "slug": "console",
-    "source": "docs/web/README.md",
-    "title": "Administrator console",
-    "description": "Monitor Core, inspect resources and manage deployment settings through Web."
-  },
-  {
-    "slug": "admin-api",
-    "source": "docs/api/web-management.md",
-    "title": "Core administration API",
-    "description": "Management operations and their server-side credential boundary."
-  },
-  {
-    "slug": "observability",
-    "source": "contracts/agents-api/runtime-observability-api.md",
-    "title": "Runtime observations",
-    "description": "Current Runtime observations, recorded history and their availability limits."
-  },
-  {
-    "slug": "troubleshooting",
-    "source": "docs/getting-started/operations.md",
-    "title": "Operations and troubleshooting",
-    "description": "oac lifecycle commands, backups, key rotation, current-version repair and diagnostics."
-  },
-  {
-    "slug": "user-guide",
-    "source": "docs/user-guide.md",
-    "title": "Use OpenAgentCore",
-    "description": "Sessions, capabilities, files, cancellation and recovery."
-  },
-  {
-    "slug": "development",
-    "source": "docs/development.md",
-    "title": "Develop OpenAgentCore",
-    "description": "Set up a checkout and choose the right extension boundary."
-  },
-  {
-    "slug": "harness-onboarding",
-    "source": "contracts/agents-api/harness-onboarding.md",
-    "title": "Add a Harness",
-    "description": "Implement and validate a native Harness adapter."
-  },
-  {
-    "slug": "runtime-bootstrap",
-    "source": "docs/runtime-bootstrap.md",
-    "title": "Runtime startup",
-    "description": "Provider delivery of Runtime-owned connection input."
-  },
-  {
-    "slug": "runtime-protocol",
-    "source": "docs/runtime-protocol.md",
-    "title": "Core\u2013Runtime protocol",
-    "description": "Runtime lifecycle, messages, receipts and recovery."
-  },
-  {
-    "slug": "sandbox-provider",
-    "source": "docs/sandbox-provider.md",
-    "title": "Add a Sandbox Provider",
-    "description": "Environment allocation, bootstrap and reclamation."
-  }
-]
diff --git a/apps/docs/scripts/test_contract_routes.py b/apps/docs/scripts/test_contract_routes.py
deleted file mode 100644
index 243b9dd75..000000000
--- a/apps/docs/scripts/test_contract_routes.py
+++ /dev/null
@@ -1,28 +0,0 @@
-"""Regression coverage for nested router helpers and exact namespace inheritance."""
-import importlib.util
-from pathlib import Path
-import unittest
-
-spec = importlib.util.spec_from_file_location("routes", Path(__file__).with_name("verify-contract-routes.py"))
-routes = importlib.util.module_from_spec(spec)
-spec.loader.exec_module(routes)
-
-
-class RouteTests(unittest.TestCase):
-    def test_nested_registration_inherits_parent_scope(self):
-        region = routes.Region('''router.Route("/core/v1", func(r chi.Router) {
-            r.Group(func(inner chi.Router) {
-                h.registerNestedRoutes(inner)
-            })
-        })''')
-        self.assertEqual(region.calls({"router": ""}), [("registerNestedRoutes", "/core/v1")])
-        child = routes.Region('r.Get("/projects/{project_id}", h.getProject)')
-        self.assertEqual(child.routes({"r": "/core/v1"}), [("/core/v1/projects/{project_id}", "GET")])
-
-    def test_unrelated_router_does_not_acquire_a_prefix(self):
-        region = routes.Region('unknown.Get("/projects", handler)')
-        self.assertEqual(region.routes({"r": "/core/v1"}), [])
-
-
-if __name__ == "__main__":
-    unittest.main()
diff --git a/apps/docs/scripts/verify-api-copy.mjs b/apps/docs/scripts/verify-api-copy.mjs
deleted file mode 100644
index 743a100ef..000000000
--- a/apps/docs/scripts/verify-api-copy.mjs
+++ /dev/null
@@ -1,25 +0,0 @@
-#!/usr/bin/env node
-// Compare every rendered operation and schema with the current contract projection.
-import fs from 'node:fs'
-import path from 'node:path'
-import yaml from 'js-yaml'
-import assert from 'node:assert/strict'
-import { appRoot, surfaces, normalise, methods } from './contracts.mjs'
-let count = 0
-for (const surface of surfaces) {
-  const actual = yaml.load(fs.readFileSync(path.join(appRoot, 'openapi', surface.id + '.yaml'), 'utf8'))
-  assert.deepEqual(actual, normalise(surface), surface.id + ': rendered contract differs')
-  const listed = []
-  const dir = path.join(appRoot, 'content/docs/api-reference') + surface.directory
-  for (const name of fs.readdirSync(dir).filter(n => n.endsWith('.mdx') && n !== 'index.mdx')) {
-    const content = fs.readFileSync(path.join(dir, name), 'utf8')
-    assert.ok(content.includes('document={' + JSON.stringify(surface.id) + '}'), 'Wrong reference credential surface: ' + name)
-    const operations = content.match(/operations=\{(\[[\s\S]*?\])\}/)
-    assert.ok(operations, 'Missing operations: ' + name)
-    for (const op of JSON.parse(operations[1])) listed.push(op.method + ' ' + op.path)
-  }
-  const expected = Object.entries(actual.paths).flatMap(([route, item]) => methods.filter(m => item[m]).map(m => m + ' ' + route))
-  assert.deepEqual([...new Set(listed)].sort(), expected.sort(), 'Missing or obsolete API page: ' + surface.id)
-  count += expected.length
-}
-console.log(count + ' operations, schemas, descriptions and credential surfaces match current contracts.')
diff --git a/apps/docs/scripts/verify-contract-freshness.mjs b/apps/docs/scripts/verify-contract-freshness.mjs
deleted file mode 100644
index 785c6dc3c..000000000
--- a/apps/docs/scripts/verify-contract-freshness.mjs
+++ /dev/null
@@ -1,24 +0,0 @@
-#!/usr/bin/env node
-// Source and output digests catch both stale generation and edited generated prose.
-import fs from 'node:fs'
-import path from 'node:path'
-import crypto from 'node:crypto'
-import assert from 'node:assert/strict'
-import { appRoot, repoRoot, surfaces } from './contracts.mjs'
-const record = JSON.parse(fs.readFileSync(path.join(appRoot, 'openapi/sources.json')))
-assert.deepEqual(Object.keys(record.sources).sort(), surfaces.map(s => 'contracts/agents-api/' + s.file).sort())
-function filesUnder(directory) {
-  return fs.readdirSync(directory, { withFileTypes: true }).flatMap(entry => {
-    const file = path.join(directory, entry.name)
-    return entry.isDirectory() ? filesUnder(file) : [path.relative(appRoot, file)]
-  })
-}
-const rendered = [...filesUnder(path.join(appRoot, 'openapi')), ...filesUnder(path.join(appRoot, 'content/docs/api-reference'))]
-  .filter(file => file !== 'openapi/sources.json')
-assert.deepEqual(rendered.sort(), Object.keys(record.outputs).sort(), 'Unexpected or missing generated reference files')
-for (const [root, entries] of [[repoRoot, record.sources], [appRoot, record.outputs]]) {
-  for (const [relative, digest] of Object.entries(entries)) {
-    assert.equal(crypto.createHash('sha256').update(fs.readFileSync(path.join(root, relative))).digest('hex'), digest, 'Regenerate API reference: ' + relative)
-  }
-}
-console.log('All three contract sources and generated references are current.')
diff --git a/apps/docs/scripts/verify-contract-routes.py b/apps/docs/scripts/verify-contract-routes.py
deleted file mode 100644
index 96067c6f6..000000000
--- a/apps/docs/scripts/verify-contract-routes.py
+++ /dev/null
@@ -1,227 +0,0 @@
-#!/usr/bin/env python3
-"""Check the generated OpenAPI contracts against the routes the code registers.
-
-The public contract is constrained by its pinned upstream baseline; Core and
-machine contracts are generated from handler annotations. This reads the real
-`chi` route table from services/core/internal/api and compares all three
-contracts with the registered paths.
-
-Two checks:
-  [A] routes the code registers that no contract publishes
-  [B] paths a contract publishes that the code never registers  <- the real bug
-
-Scope resolution is brace-matched rather than line-based, because chi nests
-`Route(prefix, func(r chi.Router) { ... })` and the same variable name is reused
-at each level.
-
-Read-only. Usage (from apps/docs):
-    node scripts/check-python.mjs routes
-"""
-
-from __future__ import annotations
-
-import json
-import pathlib
-import re
-import sys
-
-
-APP = pathlib.Path(__file__).resolve().parent.parent
-REPO = APP.parent.parent
-API = REPO / "services/core/internal/api"
-
-
-VERBS = ("Get", "Post", "Put", "Patch", "Delete", "Head", "Options", "Trace")
-ROUTE = re.compile(r"\b(\w+)\.(%s)\(\s*([^,)]+?)\s*[,)]" % "|".join(VERBS))
-METHOD = re.compile(r"\b(\w+)\.Method\(\s*(\"[^\"]+\"|[\w.]+)\s*,\s*(\"[A-Za-z]+\"|http\.Method[A-Za-z]+)")
-BLOCK = re.compile(r"\b(\w+)\.(Route|Group)\(\s*(?:\"([^\"]*)\"\s*,\s*)?func\(\s*(\w+)\s+chi\.Router")
-CALL = re.compile(r"\bh\.(register\w+Routes)\(\s*(\w+)\s*\)")
-FUNC = re.compile(r"^func\s+(?:\([^)]*\)\s+)?(register\w+Routes)\(\s*(\w+)\s+chi\.Router", re.M)
-CONST = re.compile(r"\bconst\s+(\w+)\s*=\s*\"([^\"]*)\"")
-
-IGNORED = {("/healthz", "GET"): "liveness probe, not part of the Agent API"}
-
-# Differences between the contract and the registered route that the reference
-# accepts on purpose, keyed (path, method) as the contract spells them.
-ACCEPTED = {}
-
-# A HEAD route wired to `methodNotAllowed` is an explicit 405 guard, not an API.
-GUARD = re.compile(r"\.(Head|Options|Get|Post)\(\s*([^,]+),\s*methodNotAllowed\s*\)")
-
-
-def brace_end(text: str, start: int) -> int:
-    depth = 0
-    for index in range(start, len(text)):
-        if text[index] == "{":
-            depth += 1
-        elif text[index] == "}":
-            depth -= 1
-            if depth == 0:
-                return index
-    return len(text)
-
-
-class Region:
-    def __init__(self, text: str):
-        self.text = text
-        self.consts = {name: value for name, value in CONST.findall(text)}
-        self.blocks = []
-        for match in BLOCK.finditer(text):
-            brace = text.find("{", match.end())
-            if brace < 0:
-                continue
-            self.blocks.append(
-                {
-                    "outer": match.group(1),
-                    "inner": match.group(4),
-                    "prefix": match.group(3) or "",
-                    "own": match.group(2) == "Route",
-                    "start": match.start(),
-                    "open": brace,
-                    "end": brace_end(text, brace),
-                }
-            )
-
-    def _enclosing(self, position: int):
-        inside = [b for b in self.blocks if b["open"] < position < b["end"]]
-        inside.sort(key=lambda b: b["open"])
-        return inside
-
-    def prefix_of(self, var: str, position: int, seed: dict[str, str]) -> str | None:
-        """Prefix for a router variable at a position, or None if unknown."""
-        for block in reversed(self._enclosing(position)):
-            if block["inner"] == var:
-                outer = self.prefix_of(block["outer"], block["start"], seed)
-                if outer is None:
-                    return None
-                return outer + block["prefix"] if block["own"] else outer
-        return seed.get(var)
-
-    def literal(self, expr: str) -> str | None:
-        parts = re.split(r"\s*\+\s*", expr.strip())
-        out = ""
-        for part in parts:
-            part = part.strip()
-            if len(part) >= 2 and part[0] == '"' and part[-1] == '"':
-                out += part[1:-1]
-            elif part in self.consts:
-                out += self.consts[part]
-            else:
-                return None
-        return out or None
-
-    def routes(self, seed: dict[str, str]):
-        found: list[tuple[str, str]] = []
-        for match in ROUTE.finditer(self.text):
-            var, verb, expr = match.group(1), match.group(2), match.group(3)
-            path = self.literal(expr)
-            if path is None or not path.startswith("/"):
-                continue
-            prefix = self.prefix_of(var, match.start(), seed)
-            if prefix is None:
-                continue
-            found.append((prefix + path, verb.upper()))
-        for match in METHOD.finditer(self.text):
-            var, target, verb = match.group(1), match.group(2), match.group(3)
-            path = self.literal(target)
-            if path is None or not path.startswith("/"):
-                continue
-            prefix = self.prefix_of(var, match.start(), seed)
-            if prefix is None:
-                continue
-            method = verb.split(".")[-1] if verb.startswith("http.") else verb.strip('"')
-            found.append((prefix + path, method.upper()))
-        return found
-
-    def calls(self, seed: dict[str, str]):
-        out = []
-        for match in CALL.finditer(self.text):
-            prefix = self.prefix_of(match.group(2), match.start(), seed)
-            out.append((match.group(1), prefix if prefix is not None else ""))
-        return out
-
-
-def main() -> int:
-    files = [f for f in sorted(API.glob("*.go")) if not f.name.endswith("_test.go")]
-    texts = {f.name: f.read_text(encoding="utf-8").replace("\r\n", "\n") for f in files}
-
-    helpers = {}
-    for name, text in texts.items():
-        for match in FUNC.finditer(text):
-            brace = text.find("{", match.end())
-            helpers[match.group(1)] = (name, match.group(2), brace, brace_end(text, brace))
-
-    # Pass 1: everything except helper bodies.
-    code: dict[tuple[str, str], str] = {}
-    calls: list[tuple[str, str]] = []
-    for name, text in texts.items():
-        masked = list(text)
-        for fn, (hfile, _, brace, end) in helpers.items():
-            if hfile != name:
-                continue
-            for index in range(brace, min(end + 1, len(masked))):
-                if masked[index] != "\n":
-                    masked[index] = " "
-        region = Region("".join(masked))
-        root = {"router": "", "r": ""}
-        for path, method in region.routes(root):
-            code.setdefault((path, method), name)
-        calls.extend(region.calls(root))
-
-    # Follow nested registration calls with the actual prefix from their caller.
-    seen = set()
-    while calls:
-        fn, prefix = calls.pop()
-        if (fn, prefix) in seen:
-            continue
-        seen.add((fn, prefix))
-        if fn not in helpers:
-            raise ValueError("Unknown route registration helper: " + fn)
-        name, param, brace, end = helpers[fn]
-        region = Region(texts[name][brace : end + 1])
-        for route, method in region.routes({param: prefix}):
-            code.setdefault((route, method), name)
-        calls.extend(region.calls({param: prefix}))
-
-    documented: dict[tuple[str, str], str] = {}
-    # YAML is decoded by the declared Node dependency; Python uses only stdlib.
-    for contract in json.load(sys.stdin):
-        document, label = contract["document"], contract["label"]
-        base = (document.get("basePath") or "").rstrip("/")
-        for route, item in (document.get("paths") or {}).items():
-            for method in item:
-                if method in ("get", "post", "put", "patch", "delete", "head", "options"):
-                    documented.setdefault(((base + route) or "/", method.upper()), label)
-
-    guard_paths = set()
-    for name, text in texts.items():
-        for match in GUARD.finditer(text):
-            guard_paths.add(match.group(2).strip().strip('"'))
-
-    unpublished = sorted(k for k in code if k not in documented)
-    missing = sorted(k for k in documented if k not in code)
-
-    print("  Registered (method, path): %d" % len(code))
-    print("  Contract operations:          %d" % len(documented))
-    print()
-    guards = [k for k in unpublished if k[1] == "HEAD" and any(k[0].endswith(suffix) for suffix in guard_paths)]
-    real = [k for k in unpublished if k not in guards]
-    undocumented = [k for k in real if k not in IGNORED]
-    print("  [A] Registered but not published: %d  (%d explicit HEAD guards)" % (len(unpublished), len(guards)))
-    for path, method in real:
-        note = IGNORED.get((path, method), "")
-        print("      %-6s %-72s %s%s" % (method, path, code[(path, method)], ("  <- " + note) if note else ""))
-    print()
-    accepted = [k for k in missing if k in ACCEPTED]
-    real = [k for k in missing if k not in ACCEPTED]
-
-    print("  [B] Published but not registered: %d  (%d accepted differences)" % (len(missing), len(accepted)))
-    for path, method in real:
-        print("      %-6s %-72s [%s]" % (method, path, documented[(path, method)]))
-    for path, method in accepted:
-        print("      ok     %-72s %s" % (path, ACCEPTED[(path, method)]))
-    return 1 if real or undocumented else 0
-
-
-if __name__ == "__main__":
-    sys.exit(main())
diff --git a/apps/docs/scripts/verify-docs-facts.mjs b/apps/docs/scripts/verify-docs-facts.mjs
deleted file mode 100644
index 4c246c4cf..000000000
--- a/apps/docs/scripts/verify-docs-facts.mjs
+++ /dev/null
@@ -1,47 +0,0 @@
-#!/usr/bin/env node
-// Guide copies must match their canonical English sources.
-import fs from 'node:fs'
-import path from 'node:path'
-import crypto from 'node:crypto'
-import assert from 'node:assert/strict'
-import { fileURLToPath } from 'node:url'
-import { execFileSync } from 'node:child_process'
-const app = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..')
-const repo = path.resolve(app, '../..')
-const record = JSON.parse(fs.readFileSync(path.join(app, 'content/guide-sources.json')))
-for (const [root, entries] of [[repo, record.sources], [app, record.outputs]]) {
-  for (const [relative, digest] of Object.entries(entries)) {
-    assert.equal(crypto.createHash('sha256').update(fs.readFileSync(path.join(root, relative))).digest('hex'), digest, 'Regenerate guides: ' + relative)
-  }
-}
-const source = slug => fs.readFileSync(path.join(app, 'content/docs', slug + '.mdx'), 'utf8')
-for (const token of ['/v1', '/core/v1', '/api/v1', 'Project API key', 'Core key', 'executor']) assert.ok(source('public-api').includes(token), 'Credential matrix omits ' + token)
-for (const token of ['config.json', 'oac apply']) assert.ok(source('configure').includes(token), 'Configuration guide omits ' + token)
-for (const token of ['oac-node', '/var/lib/oac-node/.oac/nodes', 'Node installation and removal require root.']) assert.ok(source('hosted-providers').includes(token), 'Node guide omits ' + token)
-// Keep the installation policy visible in its operator guide; the node guide links to it.
-for (const [slug, tokens] of [
-  ['troubleshooting', ['In-place version upgrades, downgrades and historical conversions are not supported.', '.oac.lock']],
-  ['hosted-providers', ['/troubleshooting#installation-version-policy']],
-]) for (const token of tokens) assert.ok(source(slug).includes(token), 'Installation policy drift in ' + slug + ': ' + token)
-for (const file of fs.readdirSync(path.join(app, 'content/docs')).filter(n => n.endsWith('.mdx'))) {
-  const text = fs.readFileSync(path.join(app, 'content/docs', file), 'utf8')
-  for (const retired of ['/core/v1/admin', 'sandbox-manager.openapi.yaml']) assert.ok(!text.includes(retired), 'Obsolete claim in ' + file + ': ' + retired)
-}
-// Retired behavior must not reappear in any authored or generated surface.
-// Each claim contradicts its current owner; update the owner, not this list.
-const retiredClaims = [
-  ['it has no implicit deployment default', 'contracts/agents-api/model-execution.md#deployment-defaults'],
-  ['Sessions must name `agent.model`', 'contracts/agents-api/model-execution.md#deployment-defaults'],
-  ['automatically adapted by Runtime', 'contracts/agents-api/model-execution.md (native protocols only)'],
-  ['`none` and Docker sandboxes only', 'contracts/agents-api/message-input.md'],
-  ['当前 Core 不接受托管 Skill 引用', 'contracts/agents-api/environments.md (x_agents_core.environment)'],
-]
-// Provenance and historical protocol evaluations keep their original wording.
-const historical = /^provenance\/|\/model-protocol-[^/]*\.md$|verify-docs-facts\.mjs$/
-const tracked = execFileSync('git', ['ls-files', '-z', '--', '*.md', '*.mdx', '*.yaml', '*.json', '*.ts', '*.tsx', '*.mjs', '*.go'], { cwd: repo, encoding: 'utf8' }).split('\0').filter(n => n && !historical.test(n))
-for (const file of tracked) {
-  const text = fs.readFileSync(path.join(repo, file), 'utf8')
-  for (const [claim, owner] of retiredClaims) assert.ok(!text.includes(claim), `Retired claim in ${file}: "${claim}". Current rule: ${owner}`)
-}
-assert.deepEqual(fs.readFileSync(path.join(app, 'app/icon.svg')), fs.readFileSync(path.join(repo, 'apps/web/public/favicon.svg')), 'Docs favicon must match the approved Web asset')
-console.log('Guide copies, source authority and namespace/configuration facts are current.')
diff --git a/apps/docs/scripts/verify-links.mjs b/apps/docs/scripts/verify-links.mjs
deleted file mode 100644
index 9cae1c306..000000000
--- a/apps/docs/scripts/verify-links.mjs
+++ /dev/null
@@ -1,107 +0,0 @@
-#!/usr/bin/env node
-// Validate documentation routes, anchors and package README file links.
-import fs from "node:fs"
-import path from "node:path"
-import { fileURLToPath } from "node:url"
-
-const here = path.dirname(fileURLToPath(import.meta.url))
-const contentRoot = path.resolve(here, "../content/docs")
-const appRoot = path.resolve(here, "..")
-
-function mdxFiles(dir) {
-  const out = []
-  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-    const full = path.join(dir, entry.name)
-    if (entry.isDirectory()) out.push(...mdxFiles(full))
-    else if (entry.name.endsWith(".mdx")) out.push(full)
-  }
-  return out
-}
-
-function routeOf(file) {
-  const rel = path.relative(contentRoot, file).split(path.sep).join("/")
-    .replace(/\.mdx$/, "").replace(/(^|\/)index$/, "").replace(/\/$/, "")
-  return rel ? `/${rel}` : "/"
-}
-
-const files = mdxFiles(contentRoot)
-
-function resolves(target) {
-  const [rawPath, anchor] = target.split("#")
-  const clean = rawPath.split("?")[0] || "/"
-  if (clean.startsWith("/images/")) return fs.existsSync(path.join(appRoot, "public", clean))
-  const route = clean.length > 1 ? clean.replace(/\/+$/, "") : clean
-  const targetFile = files.find(file => routeOf(file) === route)
-  if (!targetFile) return false
-  if (!anchor) return true
-  const text = fs.readFileSync(targetFile, "utf8")
-  const seen = new Map()
-  const anchors = []
-  let fence = false
-  for (const line of text.split("\n")) {
-    if (/^\s*(```|~~~)/.test(line)) { fence = !fence; continue }
-    if (fence) continue
-    const heading = line.match(/^#{1,6} (.+)$/)
-    if (!heading) continue
-    const value = heading[1].replace(/`/g, "").replace(/\[([^\]]+)\]\([^)]+\)/g, "$1")
-      .toLowerCase().replace(/[^\p{L}\p{N}_\s-]/gu, "").replace(/\s/g, "-")
-    const previous = seen.get(value) ?? 0
-    seen.set(value, previous + 1)
-    anchors.push(value + (previous ? "-" + previous : ""))
-  }
-  return anchors.includes(decodeURIComponent(anchor))
-}
-
-const link = /\]\(([^)\s]+)/g
-let checked = 0
-let broken = 0
-
-for (const file of files) {
-  const source = fs.readFileSync(file, "utf8")
-  for (const [, target] of source.matchAll(link)) {
-    if (!target.startsWith("/")) continue
-    checked += 1
-    if (!resolves(target)) {
-      console.error(
-        `BROKEN   ${path.relative(contentRoot, file)}\n` +
-          `  claim: every root-relative link points at a page that exists\n` +
-          `  link:  ${target}`,
-      )
-      broken += 1
-    }
-  }
-}
-
-// This package also ships markdown that is not a page. Its links are relative
-// file paths, so they are resolved against the filesystem instead of the routes.
-const packageDocs = fs
-  .readdirSync(appRoot, { withFileTypes: true })
-  .filter((entry) => entry.isFile() && entry.name.endsWith(".md"))
-  .map((entry) => path.join(appRoot, entry.name))
-
-let fileLinks = 0
-for (const file of packageDocs) {
-  const source = fs.readFileSync(file, "utf8")
-  for (const [, target] of source.matchAll(link)) {
-    if (target.startsWith("/") || /^[a-z][a-z0-9+.-]*:/i.test(target)) continue
-    fileLinks += 1
-    const resolved = path.resolve(path.dirname(file), target.split("#")[0])
-    if (!fs.existsSync(resolved)) {
-      console.error(
-        `BROKEN   ${path.relative(appRoot, file)}\n` +
-          `  claim: every relative link points at a file that exists\n` +
-          `  link:  ${target}`,
-      )
-      broken += 1
-    }
-  }
-}
-
-if (broken > 0) {
-  console.error(`\n${broken} of ${checked + fileLinks} links are unresolvable.`)
-  process.exit(1)
-}
-console.log(
-  `${checked} root-relative links resolve across ${files.length} pages, and ` +
-    `${fileLinks} relative links resolve across ${packageDocs.length} package files.`,
-)
diff --git a/apps/docs/scripts/verify-prerender.mjs b/apps/docs/scripts/verify-prerender.mjs
deleted file mode 100644
index d9f715144..000000000
--- a/apps/docs/scripts/verify-prerender.mjs
+++ /dev/null
@@ -1,63 +0,0 @@
-#!/usr/bin/env node
-// Require static output for every guide and keep API pages read-only.
-import fs from "node:fs"
-import path from "node:path"
-import { fileURLToPath } from "node:url"
-
-const here = path.dirname(fileURLToPath(import.meta.url))
-const root = path.resolve(here, "..")
-const contentRoot = path.join(root, "content/docs")
-const appRoot = path.join(root, ".next/server/app")
-
-if (!fs.existsSync(appRoot)) {
-  console.error(`No build output at ${path.relative(root, appRoot)}. Run \`pnpm build\` first.`)
-  process.exit(1)
-}
-
-function walk(dir) {
-  const out = []
-  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-    const full = path.join(dir, entry.name)
-    if (entry.isDirectory()) out.push(...walk(full))
-    else if (entry.name.endsWith(".mdx")) out.push(full)
-  }
-  return out
-}
-
-function slugFor(file) {
-  let rel = path.relative(contentRoot, file).split(path.sep).join("/")
-  rel = rel.replace(/\.mdx$/, "").replace(/(^|\/)index$/, "")
-  return rel.replace(/\/$/, "")
-}
-
-const slugs = [...new Set(walk(contentRoot).map(slugFor))].sort()
-
-const missing = []
-for (const slug of slugs) {
-    const file = slug
-      ? path.join(appRoot, `${slug}.html`)
-      : path.join(appRoot, "index.html")
-    if (!fs.existsSync(file)) missing.push(path.relative(root, file))
-    else if (slug.startsWith("api-reference/")) {
-      const html = fs.readFileSync(file, "utf8")
-      if (/<form(?:\s|>)/i.test(html) || /<input(?:\s|>)/i.test(html)) {
-        throw new Error("API reference must not collect credentials or send requests: " + file)
-      }
-    }
-}
-
-const expected = slugs.length
-if (missing.length > 0) {
-  console.error(
-    `\n${missing.length} of ${expected} routes were not prerendered. ` +
-      `The docs route is rendering per request:`,
-  )
-  for (const file of missing.slice(0, 12)) console.error(`  ${file}`)
-  if (missing.length > 12) console.error(`  … and ${missing.length - 12} more`)
-  console.error(
-    "\nLook for a request-scoped API (headers, cookies, searchParams, " +
-      "`dynamic = \"force-dynamic\"`) in app/**.",
-  )
-  process.exit(1)
-}
-console.log(`${expected} documentation routes prerendered.`)
diff --git a/apps/docs/source.config.ts b/apps/docs/source.config.ts
deleted file mode 100644
index 1d83698d7..000000000
--- a/apps/docs/source.config.ts
+++ /dev/null
@@ -1,9 +0,0 @@
-import { defineConfig, defineDocs } from "fumadocs-mdx/config"
-
-export const docs = defineDocs({
-  dir: "content/docs",
-})
-
-export default defineConfig({
-  mdxOptions: {},
-})
diff --git a/apps/docs/tsconfig.json b/apps/docs/tsconfig.json
deleted file mode 100644
index 73915d7f3..000000000
--- a/apps/docs/tsconfig.json
+++ /dev/null
@@ -1,25 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2017",
-    "lib": ["dom", "dom.iterable", "esnext"],
-    "allowJs": false,
-    "skipLibCheck": true,
-    "strict": true,
-    "noEmit": true,
-    "esModuleInterop": true,
-    "module": "esnext",
-    "moduleResolution": "bundler",
-    "resolveJsonModule": true,
-    "isolatedModules": true,
-    "jsx": "preserve",
-    "incremental": true,
-    "plugins": [{ "name": "next" }],
-    "paths": { "@/*": ["./*"] },
-    // The `*.test.ts` files run under `node --test` with native type stripping,
-    // whose ESM resolver requires explicit file extensions. Safe because this
-    // project never emits: `noEmit` is set below.
-    "allowImportingTsExtensions": true
-  },
-  "include": ["next-env.d.ts", ".next/types/**/*.ts", "**/*.ts", "**/*.tsx", ".source/**/*.ts"],
-  "exclude": ["node_modules"]
-}
\ No newline at end of file
diff --git a/docs/development.md b/docs/development.md
index b8cd29623..f50b9c75f 100644
--- a/docs/development.md
+++ b/docs/development.md
@@ -74,7 +74,7 @@ separate contributor workflow.
 The [Web package guide](../apps/web/README.md) describes console development and
 its management-only integration. `pnpm dev:web` starts the frontend development
 server; it does not install Core, issue keys or start native execution. The
-[docs app guide](../apps/docs/README.md) describes the independent documentation
+docs app guide describes the independent documentation
 site; `pnpm dev:docs` starts its development server.
 
 ## Repository map
@@ -94,7 +94,7 @@ site; `pnpm dev:docs` starts its development server.
 | `apps/web` and `packages/agents-client` | Console UI and typed clients | [Web guide](../apps/web/README.md) |
 | `deploy/install` and `scripts` | Distribution, installation and validation tools | [Maintainers](maintainers.md) |
 | `contracts/agents-api` | Pinned schema, local semantic contracts and qualification evidence | [Coverage ledger](../contracts/agents-api/README.md) |
-| `apps/docs` | Generated guide and API-reference website | [Generation workflow](../apps/docs/README.md) |
+| `apps/docs` | Generated guide and API-reference website | Generation workflow |
 
 Core owns durable execution facts. Runtime owns local execution and cleanup.
 Adapters translate native operations. Providers own outer compute. These boundaries
@@ -180,7 +180,7 @@ implementation gaps and evidence. Avoid copying the same rule into all three.
 Update authored sources before regenerating the docs site. Adding a site page
 also requires a source entry and navigation entry; source/output hashes verify
 freshness. API references render the namespace-specific generated schemas. Follow
-[the docs app workflow](../apps/docs/README.md) for link, type, build and browser
+the docs app workflow for link, type, build and browser
 checks. The release bundle has a separate explicit documentation list in
 `scripts/core-distribution-manifest.py`; changing a bundled path or heading must
 also pass its relative-link and anchor checks.
diff --git a/package.json b/package.json
index 4dd082e71..cd3147793 100644
--- a/package.json
+++ b/package.json
@@ -9,10 +9,7 @@
     "test": "pnpm --filter @oac/claude-sdk-adapter test && pnpm test:core-doctor && pnpm test:web",
     "test:core-doctor": "node --test scripts/core-doctor.test.mjs",
     "test:web": "pnpm --filter @oac/agents-client test && pnpm --filter @oac/web test",
-    "test:web:acceptance": "playwright test",
-    "dev:docs": "pnpm --dir apps/docs dev",
-    "build:docs": "pnpm --dir apps/docs build",
-    "check:docs": "pnpm --dir apps/docs verify && pnpm --dir apps/docs test && pnpm --dir apps/docs typecheck && pnpm --dir apps/docs build"
+    "test:web:acceptance": "playwright test"
   },
   "devDependencies": {
     "@playwright/test": "^1.63.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index c71800d80..96ca785ec 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -18,58 +18,6 @@ importers:
         specifier: ^5.8.3
         version: 5.9.3
 
-  apps/docs:
-    dependencies:
-      '@scalar/openapi-upgrader':
-        specifier: 0.1.1
-        version: 0.1.1
-      fumadocs-core:
-        specifier: 15.8.5
-        version: 15.8.5(@types/react@19.3.0)(lucide-react@1.47.0(react@19.3.0))(next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      fumadocs-mdx:
-        specifier: ^12.0.3
-        version: 12.0.3(fumadocs-core@15.8.5(@types/react@19.3.0)(lucide-react@1.47.0(react@19.3.0))(next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(react@19.3.0)
-      fumadocs-openapi:
-        specifier: 9.5.1
-        version: 9.5.1(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(lucide-react@1.47.0(react@19.3.0))(next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(react-dom@19.3.0(react@19.3.0))(react@19.3.0)(tailwindcss@4.3.3)
-      fumadocs-ui:
-        specifier: 15.8.5
-        version: 15.8.5(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(lucide-react@1.47.0(react@19.3.0))(next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(react-dom@19.3.0(react@19.3.0))(react@19.3.0)(tailwindcss@4.3.3)
-      js-yaml:
-        specifier: ^4.1.0
-        version: 4.3.2
-      next:
-        specifier: ^15.5.16
-        version: 15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      next-themes:
-        specifier: ^0.4.6
-        version: 0.4.6(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      react:
-        specifier: ^19.2.7
-        version: 19.3.0
-      react-dom:
-        specifier: ^19.2.7
-        version: 19.3.0(react@19.3.0)
-    devDependencies:
-      '@tailwindcss/postcss':
-        specifier: ^4.3.2
-        version: 4.3.3
-      '@types/node':
-        specifier: ^22.0.0
-        version: 22.20.4
-      '@types/react':
-        specifier: ^19.2.17
-        version: 19.3.0
-      '@types/react-dom':
-        specifier: ^19.1.0
-        version: 19.3.0(@types/react@19.3.0)
-      tailwindcss:
-        specifier: ^4.3.2
-        version: 4.3.3
-      typescript:
-        specifier: ^5.8.3
-        version: 5.9.3
-
   apps/web:
     dependencies:
       '@base-ui/react':
@@ -310,10 +258,6 @@ importers:
 
 packages:
 
-  '@alloc/quick-lru@5.3.0':
-    resolution: {integrity: sha512-U4+70Pc5ZS9osnCBCE5Jha/ciHM+Yp+CNMNC/7HvYbNRk1Ldd+f7qO65W5qfhu/TCv+/ozljlXXe9Nj8419DMA==}
-    engines: {node: '>=10'}
-
   '@anthropic-ai/claude-agent-sdk-darwin-arm64@0.3.269':
     resolution: {integrity: sha512-o7vdVlbJjkX9RL7+Mwa6owEGFvHNVfbNRRpoYSJ0jzyvimxKa+8kSjwZo7nYBRr+5WydxB/ApSE+xrWflDUhKQ==}
     cpu: [arm64]
@@ -375,10 +319,6 @@ packages:
       zod:
         optional: true
 
-  '@apidevtools/json-schema-ref-parser@11.9.3':
-    resolution: {integrity: sha512-60vepv88RwcJtSHrD6MjIL6Ta3SOYbgfnkHb+ppAVK+o9mXprRtulx7VlRl3lN3bbvysAfCS7WMVfhUYemB0IQ==}
-    engines: {node: '>= 16'}
-
   '@babel/runtime@7.29.7':
     resolution: {integrity: sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==}
     engines: {node: '>=6.9.0'}
@@ -410,315 +350,156 @@ packages:
       '@types/react':
         optional: true
 
-  '@emnapi/runtime@1.11.3':
-    resolution: {integrity: sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA==}
-
-  '@esbuild/aix-ppc64@0.25.12':
-    resolution: {integrity: sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [aix]
-
   '@esbuild/aix-ppc64@0.28.2':
     resolution: {integrity: sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ==}
     engines: {node: '>=18'}
     cpu: [ppc64]
     os: [aix]
 
-  '@esbuild/android-arm64@0.25.12':
-    resolution: {integrity: sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [android]
-
   '@esbuild/android-arm64@0.28.2':
     resolution: {integrity: sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [android]
 
-  '@esbuild/android-arm@0.25.12':
-    resolution: {integrity: sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [android]
-
   '@esbuild/android-arm@0.28.2':
     resolution: {integrity: sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg==}
     engines: {node: '>=18'}
     cpu: [arm]
     os: [android]
 
-  '@esbuild/android-x64@0.25.12':
-    resolution: {integrity: sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [android]
-
   '@esbuild/android-x64@0.28.2':
     resolution: {integrity: sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [android]
 
-  '@esbuild/darwin-arm64@0.25.12':
-    resolution: {integrity: sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [darwin]
-
   '@esbuild/darwin-arm64@0.28.2':
     resolution: {integrity: sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [darwin]
 
-  '@esbuild/darwin-x64@0.25.12':
-    resolution: {integrity: sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [darwin]
-
   '@esbuild/darwin-x64@0.28.2':
     resolution: {integrity: sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [darwin]
 
-  '@esbuild/freebsd-arm64@0.25.12':
-    resolution: {integrity: sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [freebsd]
-
   '@esbuild/freebsd-arm64@0.28.2':
     resolution: {integrity: sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [freebsd]
 
-  '@esbuild/freebsd-x64@0.25.12':
-    resolution: {integrity: sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [freebsd]
-
   '@esbuild/freebsd-x64@0.28.2':
     resolution: {integrity: sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [freebsd]
 
-  '@esbuild/linux-arm64@0.25.12':
-    resolution: {integrity: sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [linux]
-
   '@esbuild/linux-arm64@0.28.2':
     resolution: {integrity: sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [linux]
 
-  '@esbuild/linux-arm@0.25.12':
-    resolution: {integrity: sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [linux]
-
   '@esbuild/linux-arm@0.28.2':
     resolution: {integrity: sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w==}
     engines: {node: '>=18'}
     cpu: [arm]
     os: [linux]
 
-  '@esbuild/linux-ia32@0.25.12':
-    resolution: {integrity: sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [linux]
-
   '@esbuild/linux-ia32@0.28.2':
     resolution: {integrity: sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ==}
     engines: {node: '>=18'}
     cpu: [ia32]
     os: [linux]
 
-  '@esbuild/linux-loong64@0.25.12':
-    resolution: {integrity: sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng==}
-    engines: {node: '>=18'}
-    cpu: [loong64]
-    os: [linux]
-
   '@esbuild/linux-loong64@0.28.2':
     resolution: {integrity: sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ==}
     engines: {node: '>=18'}
     cpu: [loong64]
     os: [linux]
 
-  '@esbuild/linux-mips64el@0.25.12':
-    resolution: {integrity: sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw==}
-    engines: {node: '>=18'}
-    cpu: [mips64el]
-    os: [linux]
-
   '@esbuild/linux-mips64el@0.28.2':
     resolution: {integrity: sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA==}
     engines: {node: '>=18'}
     cpu: [mips64el]
     os: [linux]
 
-  '@esbuild/linux-ppc64@0.25.12':
-    resolution: {integrity: sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [linux]
-
   '@esbuild/linux-ppc64@0.28.2':
     resolution: {integrity: sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ==}
     engines: {node: '>=18'}
     cpu: [ppc64]
     os: [linux]
 
-  '@esbuild/linux-riscv64@0.25.12':
-    resolution: {integrity: sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w==}
-    engines: {node: '>=18'}
-    cpu: [riscv64]
-    os: [linux]
-
   '@esbuild/linux-riscv64@0.28.2':
     resolution: {integrity: sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA==}
     engines: {node: '>=18'}
     cpu: [riscv64]
     os: [linux]
 
-  '@esbuild/linux-s390x@0.25.12':
-    resolution: {integrity: sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg==}
-    engines: {node: '>=18'}
-    cpu: [s390x]
-    os: [linux]
-
   '@esbuild/linux-s390x@0.28.2':
     resolution: {integrity: sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg==}
     engines: {node: '>=18'}
     cpu: [s390x]
     os: [linux]
 
-  '@esbuild/linux-x64@0.25.12':
-    resolution: {integrity: sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [linux]
-
   '@esbuild/linux-x64@0.28.2':
     resolution: {integrity: sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [linux]
 
-  '@esbuild/netbsd-arm64@0.25.12':
-    resolution: {integrity: sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [netbsd]
-
   '@esbuild/netbsd-arm64@0.28.2':
     resolution: {integrity: sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [netbsd]
 
-  '@esbuild/netbsd-x64@0.25.12':
-    resolution: {integrity: sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [netbsd]
-
   '@esbuild/netbsd-x64@0.28.2':
     resolution: {integrity: sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [netbsd]
 
-  '@esbuild/openbsd-arm64@0.25.12':
-    resolution: {integrity: sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openbsd]
-
   '@esbuild/openbsd-arm64@0.28.2':
     resolution: {integrity: sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [openbsd]
 
-  '@esbuild/openbsd-x64@0.25.12':
-    resolution: {integrity: sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [openbsd]
-
   '@esbuild/openbsd-x64@0.28.2':
     resolution: {integrity: sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [openbsd]
 
-  '@esbuild/openharmony-arm64@0.25.12':
-    resolution: {integrity: sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openharmony]
-
   '@esbuild/openharmony-arm64@0.28.2':
     resolution: {integrity: sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [openharmony]
 
-  '@esbuild/sunos-x64@0.25.12':
-    resolution: {integrity: sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [sunos]
-
   '@esbuild/sunos-x64@0.28.2':
     resolution: {integrity: sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [sunos]
 
-  '@esbuild/win32-arm64@0.25.12':
-    resolution: {integrity: sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [win32]
-
   '@esbuild/win32-arm64@0.28.2':
     resolution: {integrity: sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [win32]
 
-  '@esbuild/win32-ia32@0.25.12':
-    resolution: {integrity: sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [win32]
-
   '@esbuild/win32-ia32@0.28.2':
     resolution: {integrity: sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA==}
     engines: {node: '>=18'}
     cpu: [ia32]
     os: [win32]
 
-  '@esbuild/win32-x64@0.25.12':
-    resolution: {integrity: sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [win32]
-
   '@esbuild/win32-x64@0.28.2':
     resolution: {integrity: sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g==}
     engines: {node: '>=18'}
@@ -746,181 +527,12 @@ packages:
   '@fontsource-variable/inter@5.3.0':
     resolution: {integrity: sha512-OupL48va4JNofb97w6NYeF9S7W/kHNKM0Er8Dem5nqi4jeOLrVJDoE8tZEpnMJmtkvNbB1EIPPwHcdkF6b1oUA==}
 
-  '@formatjs/intl-localematcher@0.6.2':
-    resolution: {integrity: sha512-XOMO2Hupl0wdd172Y06h6kLpBz6Dv+J4okPLl4LPtzbr8f66WbIoy4ev98EBuZ6ZK4h5ydTN6XneT4QVpD7cdA==}
-
-  '@fumari/json-schema-to-typescript@1.1.3':
-    resolution: {integrity: sha512-KnaZAo5W769nOaxhPqEMTdjHdngugxmPpNS+Yr2U90iVxgmNAWwhSr8Nx3l+CUehJKNFzJi2C7clQXOfuPJegA==}
-    engines: {node: '>=18.0.0'}
-
   '@hono/node-server@2.1.1':
     resolution: {integrity: sha512-ELuehkj5VCBdgEw9zs+ivkKwyzzUCSQuE96YmiPvn1ECBoZCczbFXJLeEGMTYjphP6gydh4pHMqEYPVMYUVgQg==}
     engines: {node: '>=20'}
     peerDependencies:
       hono: ^4
 
-  '@img/colour@1.1.0':
-    resolution: {integrity: sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==}
-    engines: {node: '>=18'}
-
-  '@img/sharp-darwin-arm64@0.35.5':
-    resolution: {integrity: sha512-QRUlFQ0WxvdWyqqG/WtI3iupfD5rBzmCHXSdPsY91sAtVtTo7Q4cb6zOccZ3gqEqkr0f1As1ehLqmEpDsRf+lg==}
-    engines: {node: '>=20.9.0'}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@img/sharp-darwin-x64@0.35.5':
-    resolution: {integrity: sha512-+BR255RhDlpygUpOc/Jdt1nT6DQ3XG/ERo5wbcdOf5Q320dKtPCKPLR1LJs9VGXRaMa8l1uUa0tkCNOXiAxZUw==}
-    engines: {node: '>=20.9.0'}
-    cpu: [x64]
-    os: [darwin]
-
-  '@img/sharp-freebsd-wasm32@0.35.5':
-    resolution: {integrity: sha512-Y/z91nEZ4uIBX5X3nfTovjU9lHNKFYbL2lpHCLVNmXQK03VIZvXBBt0KxbPGp2SdGSF+2mQU4e+hQaWOt86iAw==}
-    engines: {node: '>=20.9.0'}
-    os: [freebsd]
-
-  '@img/sharp-libvips-darwin-arm64@1.3.4':
-    resolution: {integrity: sha512-5R89nBYiRdUlSWJxPhO+GVtaXzXSxKnRu/xqMn3KTA3L9EB9Oy/P+Nn2f2vlhPuUdy/Zusb2DarbyTpGCfEDuw==}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@img/sharp-libvips-darwin-x64@1.3.4':
-    resolution: {integrity: sha512-iR2OKH80yi0U+dUplyh3/xdpFvps6YkCwsXenIJxqxR1v9o+xtKTGbS9H7cps+2Vxjc8B1j96p75NmTGjIhtpQ==}
-    cpu: [x64]
-    os: [darwin]
-
-  '@img/sharp-libvips-linux-arm64@1.3.4':
-    resolution: {integrity: sha512-Y3dgX/6lE2QhQb+Gxy0WZxfg9MEm/JBjamZpS2IklP7xIQoKN4hzAm7KcMVGtaVDt3neE9OKBC7vAfonA/Lr1A==}
-    cpu: [arm64]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-libvips-linux-arm@1.3.4':
-    resolution: {integrity: sha512-LmRtTsOHuvM2+wlO2Db37dx5MiZhB0FvSunciw48YjdOkZz9KAiRbm8ujeMOA1INqmei5NapFxYEK1D1ZSidmw==}
-    cpu: [arm]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-libvips-linux-ppc64@1.3.4':
-    resolution: {integrity: sha512-Le6boB8Tai0Nis+gIxIpKx68UDVVIqdR8Tin5Yf1z2LJJQLDJvCDRqRu+jC2qCoD+eIomonmOwB4smBRxfVpYQ==}
-    cpu: [ppc64]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-libvips-linux-riscv64@1.3.4':
-    resolution: {integrity: sha512-aHkkIEHPRdQEegJN20MLmGtxYD9R2wQr3Cwpddnu5+YKMt6Uzax7S9h5gpZTo8wyrGuZSlfQ63OevL5mTyOC7Q==}
-    cpu: [riscv64]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-libvips-linux-s390x@1.3.4':
-    resolution: {integrity: sha512-ra/mB6MikESDUO7Yg+Mi95bFBb9GsObURuhnOv3OqknjGe9sZrG8tCe9q0xSIGrtLgvgw0gKnFWcK4blSgQOuQ==}
-    cpu: [s390x]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-libvips-linux-x64@1.3.4':
-    resolution: {integrity: sha512-GJ//SSXbnwSDes02umB3nDJLFcQzw8a18V8fyhqr6tV515tOEMdImjjxj1AoafMRz56F3PHgftnj1QEKSU1zkw==}
-    cpu: [x64]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-libvips-linuxmusl-arm64@1.3.4':
-    resolution: {integrity: sha512-hvulFwtjUcagsis6BBxHwGFwWoNZjgYmULGVrZcyfNbjA8hKILbRxGg15/7w5HDyXHXUos/j6baAWqnCyQ2DWA==}
-    cpu: [arm64]
-    os: [linux]
-    libc: [musl]
-
-  '@img/sharp-libvips-linuxmusl-x64@1.3.4':
-    resolution: {integrity: sha512-6zXKeE/p39I1AmA3cJG35eyBGNqNddLnUXjhwBnsGjFPWqf5VKkDBEqaEkPDoTEtkxwi2vv8Tcr2mDyP4So7Fg==}
-    cpu: [x64]
-    os: [linux]
-    libc: [musl]
-
-  '@img/sharp-linux-arm64@0.35.5':
-    resolution: {integrity: sha512-LYVx5JTsOM2CBzmxreh+nl64/3H6Xb09iSLknqH47z2T2DFFxDeFLP5y4dJwe6H7uGQlHPyEEtIqyo3DYsRwdQ==}
-    engines: {node: '>=20.9.0'}
-    cpu: [arm64]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-linux-arm@0.35.5':
-    resolution: {integrity: sha512-LEaXK2WdXVK5ykcw0buWyPMsmLLL2vpHLD6yrNSW+JGEL3BZPA4tpKN6iaMc4AxTTAoaX/sU1rOL51lcIz48ZQ==}
-    engines: {node: '>=20.9.0'}
-    cpu: [arm]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-linux-ppc64@0.35.5':
-    resolution: {integrity: sha512-QVxAAq8evVRI9ia2vqgwrmWucn5Dfv+JdWzj75pD8omHLPSP7f8p20O8jxzjCcuCEQEOtYOZUmX1hkiZ0kdevA==}
-    engines: {node: '>=20.9.0'}
-    cpu: [ppc64]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-linux-riscv64@0.35.5':
-    resolution: {integrity: sha512-LtdreXguaavKODPIfzJ4kffx7UNt1omwtK0rch4EBbbSTXPnxWmYSayXdLJw0fJzQ97kHt1gL/yh4tvU+nCyRQ==}
-    engines: {node: '>=20.9.0'}
-    cpu: [riscv64]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-linux-s390x@0.35.5':
-    resolution: {integrity: sha512-UZasTOFiYzotTsGOCu42BfUzP6Tu6Do/947iRm1RsLKvlllxwGcn4RN27LibGWceix4Y+Pmw3jsnTcCQIgWjqA==}
-    engines: {node: '>=20.9.0'}
-    cpu: [s390x]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-linux-x64@0.35.5':
-    resolution: {integrity: sha512-SxFtLTeJInhAA9Q836kux2vZNeOBQEx658qvbboZScr0wIARym3IcGmW7KpVD5sbVg0Ojy+udFQdayYIZyoNog==}
-    engines: {node: '>=20.9.0'}
-    cpu: [x64]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-linuxmusl-arm64@0.35.5':
-    resolution: {integrity: sha512-9HbMclmI1zlNkFRs3z9/eBtDjfD0sGlrX1z6b1qwmiFY5ElDLh4BC0LPBdVp7z1DXFiKlIcznf+ZlsuZzLxQqg==}
-    engines: {node: '>=20.9.0'}
-    cpu: [arm64]
-    os: [linux]
-    libc: [musl]
-
-  '@img/sharp-linuxmusl-x64@0.35.5':
-    resolution: {integrity: sha512-4KOphqB035HrVdqLZfCgMzzERrQkkzOwRhl4OAkRO1YCldbaFjySXMaK534Mo0V+LndnlJk+sbUyLeU0ULyD1A==}
-    engines: {node: '>=20.9.0'}
-    cpu: [x64]
-    os: [linux]
-    libc: [musl]
-
-  '@img/sharp-wasm32@0.35.5':
-    resolution: {integrity: sha512-Ptsga1su4tQx+LLF1ECS9U6nz5kmrXKo6XVbtR48Ke3ZRxxgaWBu7IDtEe1quo8hiupwm6WFqxVlXaSf7IINGQ==}
-    engines: {node: '>=20.9.0'}
-
-  '@img/sharp-webcontainers-wasm32@0.35.5':
-    resolution: {integrity: sha512-hfhF/FmoQyTUkA0bIKFOtw536BQSeBMe6BF6QyWlrPxT754+TFLaZ7sKKTfvvM0yJgKgaYTwnFCIZ/GuDw5SUA==}
-    engines: {node: '>=20.9.0'}
-    cpu: [wasm32]
-
-  '@img/sharp-win32-arm64@0.35.5':
-    resolution: {integrity: sha512-X4t7g+7ZA5DKblCBEXGjUqqemj4vczING/5viFwAL8h4N3qYeyjwdCvRLHi4EdOUI+2Z7UFlp1VM+p/AuEtm6Q==}
-    engines: {node: '>=20.9.0'}
-    cpu: [arm64]
-    os: [win32]
-
-  '@img/sharp-win32-ia32@0.35.5':
-    resolution: {integrity: sha512-5Zm82LoBc43nhwNybZlG7Y1KO//Zhsn306fQl29ZOuStHLGTo3BWL83q3cznX0poxSAMuYL1On/BHBxkBeKr6A==}
-    engines: {node: ^20.9.0}
-    cpu: [ia32]
-    os: [win32]
-
-  '@img/sharp-win32-x64@0.35.5':
-    resolution: {integrity: sha512-x76eH0vEiHlcMQu8Y8IenntaACtddpT6W0wmXtWrnKcnKI7ME5DdgqhAD6SEWOEl1v2zDvkZDhFA9KnURwpfqg==}
-    engines: {node: '>=20.9.0'}
-    cpu: [x64]
-    os: [win32]
-
   '@jridgewell/gen-mapping@0.3.13':
     resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==}
 
@@ -937,12 +549,6 @@ packages:
   '@jridgewell/trace-mapping@0.3.31':
     resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
 
-  '@jsdevtools/ono@7.1.3':
-    resolution: {integrity: sha512-4JQNk+3mVzK3xh2rqd6RB4J46qUR19azEHBneZyTZM+c456qOrbbM/5xcR8huNCCcbVt7+UmizG6GuUvPvKUYg==}
-
-  '@mdx-js/mdx@3.1.1':
-    resolution: {integrity: sha512-f6ZO2ifpwAQIpzGWaBQT2TXxPv6z3RBzQKpVftEWN78Vl/YweF1uwussDx8ECAXVtr3Rs89fKyG9YlzUs9DyGQ==}
-
   '@modelcontextprotocol/sdk@1.30.0':
     resolution: {integrity: sha512-xKd8OIzlqNzcqcNumGAa6g+PW2kjD5vrpcKOnfldAUPP3j7lnqMPwlTXQm8gF+UwH72z0lqaRbjr9hqGz0eITA==}
     engines: {node: '>=18'}
@@ -953,90 +559,25 @@ packages:
       '@cfworker/json-schema':
         optional: true
 
-  '@next/env@15.5.26':
-    resolution: {integrity: sha512-NJBz9q10LU9h3KjHLEbdgWIV+ow/x+MYzKBRfqhm9/QmML3tPMhYmXF/UIV9SDVCNtOqFNc5oX7kZqeiigMCEA==}
-
-  '@next/swc-darwin-arm64@15.5.26':
-    resolution: {integrity: sha512-So8eoJxIcXw/TexNUvvh3uY72J9nDo5BpJsAwUKx+FK57CrWXg6RqVufV7U9OT3BO+siMzJ2FuAwBhaHoPlLGg==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [darwin]
+  '@number-flow/react@0.6.2':
+    resolution: {integrity: sha512-WjZuV4aA+vhRCgCF+adGLgFVVAJ8vdvq6EchRT2FiBIgElTXtDOA3YgkcMr9UHpvpS9v4H70AB5wZv0D9jc3QA==}
+    peerDependencies:
+      react: ^18 || ^19
+      react-dom: ^18 || ^19
 
-  '@next/swc-darwin-x64@15.5.26':
-    resolution: {integrity: sha512-jImzLUTClVWKhP91e5sgDumjxCLhaFSt7DuN5cnRYw99Dppxxhhq5jKRyDa2aTv3JE7dQmTSTsY3EFkSOp9Pog==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [darwin]
+  '@oxc-project/types@0.150.0':
+    resolution: {integrity: sha512-rDS5/31E9HfPl/CIzGrn0DOlvBbXFseQ5URJ9sYMfstbKLD/c6Gm9vmRzRGDdAXyOIL4zmO37lc9RIwYqVruZw==}
 
-  '@next/swc-linux-arm64-gnu@15.5.26':
-    resolution: {integrity: sha512-CaWd+T/Lud2BmZbrsa1CzCnIOdU3YX9Nuk89virZaSB1O+C+8Yrrevgmnl68u4dvZIfOAzQ77S+Njrq7v1XwSA==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [linux]
-    libc: [glibc]
+  '@playwright/test@1.63.0':
+    resolution: {integrity: sha512-oxMK4vllB9RK5NQ2l1pq1IfOf2AvnEuj/vYGDj0H2nMtmtZpKtCwt/l00GEO6xjGfpBNAvjovvYdCm50dRQkpQ==}
+    engines: {node: '>=20'}
+    hasBin: true
 
-  '@next/swc-linux-arm64-musl@15.5.26':
-    resolution: {integrity: sha512-97AyKI34yjpaudlkWHswAf7c1PjWQAC7lLyrw3R5K+bq834EOA+9IG68rIVy0VqrqGjtPSMjJmMmgeJ3wHR5og==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [linux]
-    libc: [musl]
+  '@pondwader/socks5-server@1.0.10':
+    resolution: {integrity: sha512-bQY06wzzR8D2+vVCUoBsr5QS2U6UgPUQRmErNwtsuI6vLcyRKkafjkr3KxbtGFf9aBBIV2mcvlsKD1UYaIV+sg==}
 
-  '@next/swc-linux-x64-gnu@15.5.26':
-    resolution: {integrity: sha512-eVtuOCew1sBPV7BEgxy7qxuVyqoU3tJIS/xDZwa1/NiQ4Q0LM2JMH7rny+/uVIN6hsQ3PTb0hTQWypA0L2QxtA==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [linux]
-    libc: [glibc]
-
-  '@next/swc-linux-x64-musl@15.5.26':
-    resolution: {integrity: sha512-EiUXADp+Z+OdQnSqbX10YgOSUrs0CXVODoTfySfsP2jdhngn9bq5RJd376FJzqMPe/XX25FMr1aXtYUVPA0qDw==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [linux]
-    libc: [musl]
-
-  '@next/swc-win32-arm64-msvc@15.5.26':
-    resolution: {integrity: sha512-HPl41fgkC4kdM5CCIoqNW6KlKEj1N+xS6bjNFFxDNKooUNUu09frgD948zo95TPw/C3XINZpkdkBGNU2RhjEnw==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [win32]
-
-  '@next/swc-win32-x64-msvc@15.5.26':
-    resolution: {integrity: sha512-TgmJ5ginKr34RPsz01/swpYtFBxh51d66jM26aytpE6NIypU5KtBVI8C2hJjUNpWr7v6sWj8a6+og2MyntcnpA==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [win32]
-
-  '@nodable/entities@3.0.0':
-    resolution: {integrity: sha512-8L9xFeTYKhm49xfIypoe2W5wV1m/3Z58kT+7kR9A8OyFxcPduI4VmxaUMQyKYrRjUoLLSXv6EKKID5Tvj9cUVw==}
-
-  '@number-flow/react@0.6.2':
-    resolution: {integrity: sha512-WjZuV4aA+vhRCgCF+adGLgFVVAJ8vdvq6EchRT2FiBIgElTXtDOA3YgkcMr9UHpvpS9v4H70AB5wZv0D9jc3QA==}
-    peerDependencies:
-      react: ^18 || ^19
-      react-dom: ^18 || ^19
-
-  '@orama/orama@3.1.18':
-    resolution: {integrity: sha512-a61ljmRVVyG5MC/698C8/FfFDw5a8LOIvyOLW5fztgUXqUpc1jOfQzOitSCbge657OgXXThmY3Tk8fpiDb4UcA==}
-    engines: {node: '>= 20.0.0'}
-
-  '@oxc-project/types@0.150.0':
-    resolution: {integrity: sha512-rDS5/31E9HfPl/CIzGrn0DOlvBbXFseQ5URJ9sYMfstbKLD/c6Gm9vmRzRGDdAXyOIL4zmO37lc9RIwYqVruZw==}
-
-  '@playwright/test@1.63.0':
-    resolution: {integrity: sha512-oxMK4vllB9RK5NQ2l1pq1IfOf2AvnEuj/vYGDj0H2nMtmtZpKtCwt/l00GEO6xjGfpBNAvjovvYdCm50dRQkpQ==}
-    engines: {node: '>=20'}
-    hasBin: true
-
-  '@pondwader/socks5-server@1.0.10':
-    resolution: {integrity: sha512-bQY06wzzR8D2+vVCUoBsr5QS2U6UgPUQRmErNwtsuI6vLcyRKkafjkr3KxbtGFf9aBBIV2mcvlsKD1UYaIV+sg==}
-
-  '@radix-ui/number@1.1.2':
-    resolution: {integrity: sha512-ceTwaxc4I5IOi97DgCotl3pqiyRGvffcc0oOsE2dQYaJOFIDsDt4VWG6xEbg1QePv9QWausCEIppud/tJ1wNig==}
-
-  '@radix-ui/number@1.1.3':
-    resolution: {integrity: sha512-Road2bidD0uu/1BGDOWNdPI06g0lIRy6IF9GZcIrDK2KGItfor8IQwQa+yM2ERgHM1MmHxaxpTzk0/Jp42lNfA==}
+  '@radix-ui/number@1.1.2':
+    resolution: {integrity: sha512-ceTwaxc4I5IOi97DgCotl3pqiyRGvffcc0oOsE2dQYaJOFIDsDt4VWG6xEbg1QePv9QWausCEIppud/tJ1wNig==}
 
   '@radix-ui/primitive@1.1.4':
     resolution: {integrity: sha512-7AdCK9PQyiljKoBDbN8OuctCbd/esdwZPQ8RtOE3SsyQtUpiPb+ND75q0jEhC1m1ecBI0MFNeLJvwIh9iKHRcQ==}
@@ -1044,19 +585,6 @@ packages:
   '@radix-ui/primitive@1.1.7':
     resolution: {integrity: sha512-rqWnm76nYT8HoNNqEjpgJ7Pw/DrBj5iBTrmEPo6HTX5+VJyBNOqTdv4g89G63HuR5g0AaENoAcH7Is5fF2kZ8Q==}
 
-  '@radix-ui/react-accordion@1.2.20':
-    resolution: {integrity: sha512-jDhG9FvAEnlhnjrsINbNXcUa4G+L1KqSkJSunkbKEzFRcAb52jvM0PjPxPRvhe1HNc5F5yc0yzzWeeqlH4yBIg==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
   '@radix-ui/react-arrow@1.1.11':
     resolution: {integrity: sha512-Kdil9BB1rIFC/khmf4hC35bn8701AJcizTU7G7cUbEbk5XqqbjDuHW60uUfKqO5WojjZcbAW51Q7P0hRmMLw8A==}
     peerDependencies:
@@ -1083,19 +611,6 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-collapsible@1.1.20':
-    resolution: {integrity: sha512-mcGesGplBnzN2sbvJETzpCNfSMyPnb29q1GRLU+Ib7bJrpIG2ywmRoh2V5VbA2uNvKikKUlVbAPks7JDjz4A8Q==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
   '@radix-ui/react-collection@1.1.11':
     resolution: {integrity: sha512-djW9+zeg137KQdlPtmE8xnaD+K2rcXXMWFrSg0hsmYZ6HRbdTA7tDHFgpaW9+huWVEu0RCabL+985T4TA0BE7g==}
     peerDependencies:
@@ -1109,19 +624,6 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-collection@1.1.15':
-    resolution: {integrity: sha512-9W+B9NPF0NaaPh/1NJd3+KqsnlLqU9H7T2rvww+fp+T/evVXdNAyYcnfRQZFOjkR1ajQp3yORlqnI8soawLvNA==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
   '@radix-ui/react-compose-refs@1.1.3':
     resolution: {integrity: sha512-rYOP8OMnuuPMQF1uhPVlGNcCDlkokKqGFE3JcxFViIkAXP7EvFWUliJAstrapypaBLJNHbZL6jGhbVDGTwmVhA==}
     peerDependencies:
@@ -1180,15 +682,6 @@ packages:
       '@types/react':
         optional: true
 
-  '@radix-ui/react-direction@1.1.4':
-    resolution: {integrity: sha512-5pzg4FGQNpExhnhT2zlrP1wZFaYCd1K0nYWoFAdcYoYK868IEigqMX3B3f8yIoRlAhAeDWciLI6ZdCKHF9P4Vg==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
   '@radix-ui/react-dismissable-layer@1.1.14':
     resolution: {integrity: sha512-4lUhWTWAjbDIqFrAPWJ3WqBOpO5YchVZ88X3nh6H9Lu5AFi5nCUeTPj3D8FSDmabmFeRe9ME0BDA4MwKTha5GQ==}
     peerDependencies:
@@ -1277,32 +770,6 @@ packages:
       '@types/react':
         optional: true
 
-  '@radix-ui/react-navigation-menu@1.2.22':
-    resolution: {integrity: sha512-ou7iLEJ+yrhQndkkA4U21XIdS/CS45F4iXIkTZcb6/Ne9EMsOuDudVmCwmDnfFZZ+y1FZqXRNSIgBy+YMvZVZg==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-popover@1.1.23':
-    resolution: {integrity: sha512-mw58MrBlyHWFisTOYignD0vf/3gdcgAR+9of1s9G/38CbFiUwH1nCDkc0AUM9IrXFgN5Ue8n45j9WCgyM1sbiQ==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
   '@radix-ui/react-popper@1.3.2':
     resolution: {integrity: sha512-3QXNeMkdshed1MR3LNoiCirBywRFPkD8ETJa/HlPuLwSajaQixf2ro+isoDNJlGABg9ug41XuZpINZJIle4XWg==}
     peerDependencies:
@@ -1407,32 +874,6 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-roving-focus@1.1.19':
-    resolution: {integrity: sha512-V9jI6hDjT7l3jsCQD9bLNvDLM3tH/gdbOTp7Tefp3hbbgCGQoK7tUvrWiRlcoBHIZ809ElXwNQwVo0B98LuTXQ==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-scroll-area@1.2.18':
-    resolution: {integrity: sha512-Zn5Cd171wxsO3Dfg8HaW6RifTb9CYTKQJHs/G4+LN1GfmJpaQMZQyQxMprVPHpaz7QY4l9BxK2JwQuzHsXC8nA==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
   '@radix-ui/react-select@2.3.2':
     resolution: {integrity: sha512-brXD6C/V0fVK0DDbscLVw6LsXrjQ+ay8jdOBaN+tLb4vsHsAMm6Gt6eT77wHX1Eq8GPtD5rJ+RxFtfDozsb4+Q==}
     peerDependencies:
@@ -1446,19 +887,6 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-select@2.3.7':
-    resolution: {integrity: sha512-WFGImkmbzcfxeIwq/+4HvRN0pizBwbwQUED4I13ezQsDdfl38ZntN6TmR8XaSzPBqoCToe8rF75j6NPNDSzhbg==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
   '@radix-ui/react-slot@1.3.0':
     resolution: {integrity: sha512-MojKku4U/miO8Av4Dkb+ctMAQx7JmY96LmtDQlAarCRtd7rN52QCSzBF+XAvr5S6coSVj9HEPBgHAHKEJVk/WA==}
     peerDependencies:
@@ -1477,19 +905,6 @@ packages:
       '@types/react':
         optional: true
 
-  '@radix-ui/react-tabs@1.1.21':
-    resolution: {integrity: sha512-UKxJlZid7FVtsk/WTxj4i4uSEgj2Au+KBbS7SQyTlzMhhn+86Cz3tISZdTa87bfEfcuvZezf2ZsxD4xuEKtkog==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
   '@radix-ui/react-tooltip@1.2.16':
     resolution: {integrity: sha512-6EamKFRRnlpdadndbZ6LMwycfwkwPte1B42hs6QA0gYhjaOKqW4PZ4pjaW9UrlDX5eVt/OjncE7BFTPL5nmZhg==}
     peerDependencies:
@@ -1557,15 +972,6 @@ packages:
       '@types/react':
         optional: true
 
-  '@radix-ui/react-use-is-hydrated@0.1.3':
-    resolution: {integrity: sha512-umO/aJ+82CpOnhDZUTbILCQf7kU/g0iv+oGs/Q8jw7IkhWBzaEP4sA268PhFAJTFetbwp3ICc6ktpI4TqtxcIw==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
   '@radix-ui/react-use-layout-effect@1.1.2':
     resolution: {integrity: sha512-jrBWOxZITuGcnjRCM2t2U5ZPkCLxD+Ym6DjfssS5haTj2iiak/DOb64JeN6OdLfLgptb6/e2kKR+ZuTrGoZTPA==}
     peerDependencies:
@@ -1593,15 +999,6 @@ packages:
       '@types/react':
         optional: true
 
-  '@radix-ui/react-use-previous@1.1.4':
-    resolution: {integrity: sha512-XoSLhbRbqxFtgJoi2fNHA3C6pDlY34x508vUpUGoFZfvePfHXHbE1lC4FYFMnJWgiCRroSTw6fOsXQoVS9RwZg==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
   '@radix-ui/react-use-rect@1.1.2':
     resolution: {integrity: sha512-d8a+bBY/FxikNPlgJJoaBHZX+zKVbWHYJGTLnLvveQgFSTntkGdEKv3JDtHrMS0DNYpllz2nRsTLGLKYttbpmw==}
     peerDependencies:
@@ -1769,61 +1166,6 @@ packages:
   '@rolldown/pluginutils@1.0.1':
     resolution: {integrity: sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==}
 
-  '@scalar/helpers@0.0.11':
-    resolution: {integrity: sha512-EoAufzG0crQloYJxbCV8F+Y5vPyeeh1HMngGlXPT6oGSJPi6DiNA9wztqK3lvaBmSkJMh4VKIbejVqAXx1a0tg==}
-    engines: {node: '>=20'}
-
-  '@scalar/helpers@0.0.12':
-    resolution: {integrity: sha512-4NDmHShyi1hrVRsJCdRZT/FIpy+/5PFbVbQLRYX/pjpu5cYqHBj9s6n5RI6gGDXEBHAIFi63g9FC6Isgr66l1Q==}
-    engines: {node: '>=20'}
-
-  '@scalar/json-magic@0.6.0':
-    resolution: {integrity: sha512-sy2yL7V8ZF7oUoMl46TjFbBfqZESDmKPfPXeyWeIcwKgjFwjM/FvLdGOOPNsYQ2tPZUCzg8QCNJk9QM+BKVyRg==}
-    engines: {node: '>=20'}
-
-  '@scalar/json-magic@0.6.1':
-    resolution: {integrity: sha512-HJMPY5dUU3EXVS4EkjAFXo+uCrby/YFu/gljKDQnhYWRy5zQ0sJWrOEDcHS8nLoJRCIRD5tiVpCxnUnSb6OoAQ==}
-    engines: {node: '>=20'}
-
-  '@scalar/openapi-parser@0.22.1':
-    resolution: {integrity: sha512-GJV7f9VLoyKbArMcWETbJ+xPqkopNBlb+oxEBSlSYYsoWc+p+sLAtuwObfJT8Ia+CStl5Y2ZRk/2DgCuy1vsaQ==}
-    engines: {node: '>=20'}
-
-  '@scalar/openapi-types@0.4.0':
-    resolution: {integrity: sha512-vdFLzz7vETw6kS3bxWUHCBeFtJOnr1bk/+FXKyxKkd6TbcyT6USXkoelI704IaBdoXyOgGX10FD1IVrs4FwUow==}
-    engines: {node: '>=20'}
-
-  '@scalar/openapi-upgrader@0.1.1':
-    resolution: {integrity: sha512-NlrQezuNGtejqS/SQshY9SjD4D66jiJcWgC2zfCS4muyfE2K85e0i6gegnKLZPSNrqoAvJyR78NPapme9z2/wg==}
-    engines: {node: '>=20'}
-
-  '@shikijs/core@3.23.0':
-    resolution: {integrity: sha512-NSWQz0riNb67xthdm5br6lAkvpDJRTgB36fxlo37ZzM2yq0PQFFzbd8psqC2XMPgCzo1fW6cVi18+ArJ44wqgA==}
-
-  '@shikijs/engine-javascript@3.23.0':
-    resolution: {integrity: sha512-aHt9eiGFobmWR5uqJUViySI1bHMqrAgamWE1TYSUoftkAeCCAiGawPMwM+VCadylQtF4V3VNOZ5LmfItH5f3yA==}
-
-  '@shikijs/engine-oniguruma@3.23.0':
-    resolution: {integrity: sha512-1nWINwKXxKKLqPibT5f4pAFLej9oZzQTsby8942OTlsJzOBZ0MWKiwzMsd+jhzu8YPCHAswGnnN1YtQfirL35g==}
-
-  '@shikijs/langs@3.23.0':
-    resolution: {integrity: sha512-2Ep4W3Re5aB1/62RSYQInK9mM3HsLeB91cHqznAJMuylqjzNVAVCMnNWRHFtcNHXsoNRayP9z1qj4Sq3nMqYXg==}
-
-  '@shikijs/rehype@3.23.0':
-    resolution: {integrity: sha512-GepKJxXHbXFfAkiZZZ+4V7x71Lw3s0ALYmydUxJRdvpKjSx9FOMSaunv6WRLFBXR6qjYerUq1YZQno+2gLEPwA==}
-
-  '@shikijs/themes@3.23.0':
-    resolution: {integrity: sha512-5qySYa1ZgAT18HR/ypENL9cUSGOeI2x+4IvYJu4JgVJdizn6kG4ia5Q1jDEOi7gTbN4RbuYtmHh0W3eccOrjMA==}
-
-  '@shikijs/transformers@3.23.0':
-    resolution: {integrity: sha512-F9msZVxdF+krQNSdQ4V+Ja5QemeAoTQ2jxt7nJCwhDsdF1JWS3KxIQXA3lQbyKwS3J61oHRUSv4jYWv3CkaKTQ==}
-
-  '@shikijs/types@3.23.0':
-    resolution: {integrity: sha512-3JZ5HXOZfYjsYSk0yPwBrkupyYSLpAE26Qc0HLghhZNGTZg/SKxXIIgoxOpmmeQP0RRSDJTk1/vPfw9tbw+jSQ==}
-
-  '@shikijs/vscode-textmate@10.0.2':
-    resolution: {integrity: sha512-83yeghZ2xxin3Nj8z1NMd/NCuca+gsYXswywDy5bHvwlWL8tpTQmzGeUuHd9FC3E/SBEMvzJRwWEOz5gGes9Qg==}
-
   '@silvia-odwyer/photon-node@0.3.4':
     resolution: {integrity: sha512-bnly4BKB3KDTFxrUIcgCLbaeVVS8lrAkri1pEzskpmxu9MdfGQTy8b8EgcD83ywD3RPMsIulY8xJH5Awa+t9fA==}
 
@@ -1836,9 +1178,6 @@ packages:
   '@standard-schema/spec@1.1.0':
     resolution: {integrity: sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==}
 
-  '@swc/helpers@0.5.15':
-    resolution: {integrity: sha512-JQ5TuMi45Owi4/BIMAJBoSQoOJu12oOk/gADqlcUL9JEdHB8vyjUSsxqeNXnmXHjYKMi2WcYtezGEEhqUI/E2g==}
-
   '@tailwindcss/node@4.3.3':
     resolution: {integrity: sha512-/T8IKEsf9VTU6tLjgC7+sv2mOPtQxzE2jMw7u4Tt40Tx+QSZxpzh95/H6cMKoja9XuW7iMdLJYBB0o9G1CaAgg==}
 
@@ -1928,9 +1267,6 @@ packages:
     resolution: {integrity: sha512-krXjAikiaFSPaK/FkAQT5UTx3VormQaiZ5hBFlJZ9UFQGB/rwg1MZIhHAG9smMQRTdyJxP6Qt5MwMtdyU5FWrA==}
     engines: {node: '>= 20'}
 
-  '@tailwindcss/postcss@4.3.3':
-    resolution: {integrity: sha512-JTSZZGQi1AyKirbLN3azmjVzef92tcX7h+iSqPdaeStyFpGpDlKvvpxeOE8njhbUanbRwr3z8DyzhICWnMtQeg==}
-
   '@tailwindcss/typography@0.5.20':
     resolution: {integrity: sha512-hwbzQuNUfcPvbegQFatVPl/MY/tcM9KLl963hQ5laJKPh81TEZ1+dNG9PirGvcaDBkp+BCshExAyKVPW91dozw==}
     peerDependencies:
@@ -1978,21 +1314,12 @@ packages:
   '@types/hast@3.0.5':
     resolution: {integrity: sha512-rp/ezSWaD1m44dPKICGhiskI13nVr7qTloFwDa/IYkhhf5nzwP+zIQcIJh3WIFSBOy/H1PzB40jPjMDksN4F+g==}
 
-  '@types/json-schema@7.0.15':
-    resolution: {integrity: sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==}
-
   '@types/mdast@4.0.4':
     resolution: {integrity: sha512-kGaNbPh1k7AFzgpud/gMdvIm5xuECykRR+JnWKQno9TAXVa6WIVCGTPvYGekIDL4uwCZQSYbUxNBSb1aUo79oA==}
 
-  '@types/mdx@2.0.14':
-    resolution: {integrity: sha512-T48PeuJtvLosNTPVhfnIp3i/n3a4g4Bad7YCq5k64D4u7NwDrAotikQ+5+sjtUvBmxCMlbo3dVL+C2dP0rWHzg==}
-
   '@types/ms@2.1.0':
     resolution: {integrity: sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==}
 
-  '@types/node@22.20.4':
-    resolution: {integrity: sha512-zJRE40jpHtKqE/C4fgHrAKQLJuSpzEnP9ff9Y7YtoR3Wd2pwqzlekDeEuUQXjRd+QCYnVnNwuJYmhdk9XV8gvA==}
-
   '@types/node@26.1.0':
     resolution: {integrity: sha512-O0A1G3xPGy4w7AgQdAQYUlQ+BKk2Oovw8eRpofyp5KdBZULnbe+WqaOVNrm705SHphCiG4XHsACrSmPu1f+Kgw==}
 
@@ -2062,24 +1389,6 @@ packages:
     resolution: {integrity: sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng==}
     engines: {node: '>= 0.6'}
 
-  acorn-jsx@5.3.2:
-    resolution: {integrity: sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==}
-    peerDependencies:
-      acorn: ^6.0.0 || ^7.0.0 || ^8.0.0
-
-  acorn@8.18.0:
-    resolution: {integrity: sha512-lGq+9yr1/GuAWaVYIHRjvvySG5/4VfKIvC8EWxStPdcDh/Ka7FG3twP6v4d5BkravUilhIAsG4Qj83t02LWUPQ==}
-    engines: {node: '>=0.4.0'}
-    hasBin: true
-
-  ajv-draft-04@1.0.0:
-    resolution: {integrity: sha512-mv00Te6nmYbRp5DCwclxtt7yV/joXJPGS7nM+97GdxvuttCOfgI3K4U25zboyeX0O+myI8ERluxQe5wljMmVIw==}
-    peerDependencies:
-      ajv: ^8.5.0
-    peerDependenciesMeta:
-      ajv:
-        optional: true
-
   ajv-formats@3.0.1:
     resolution: {integrity: sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ==}
     peerDependencies:
@@ -2091,15 +1400,6 @@ packages:
   ajv@8.20.0:
     resolution: {integrity: sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==}
 
-  anynum@1.0.1:
-    resolution: {integrity: sha512-N6//FLET/tXYNM/F6ABca1oH6fWB+KlTt909Le28WMDBk8oaT4vY17DCrwg2MvmuqUKt3Ni4N5dGJ/EoBgcO6A==}
-
-  argparse@1.0.10:
-    resolution: {integrity: sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==}
-
-  argparse@2.0.1:
-    resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==}
-
   aria-hidden@1.2.6:
     resolution: {integrity: sha512-ik3ZgC9dY/lYVVM++OISsaYDeg1tb0VtP5uL3ouh1koGOaUMDPpbFIei4JkFimWUFPn90sbMNMXQAIVOlnYKJA==}
     engines: {node: '>=10'}
@@ -2108,10 +1408,6 @@ packages:
     resolution: {integrity: sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==}
     engines: {node: '>=12'}
 
-  astring@1.9.0:
-    resolution: {integrity: sha512-LElXdjswlqjWrPpJFg1Fx4wpkOCxj1TDHlSV4PlaRxHGWko024xICaa97ZkMfs6DRKlCguiAI+rbXv5GWwXIkg==}
-    hasBin: true
-
   bail@2.0.2:
     resolution: {integrity: sha512-0xO6mYd7JB2YesxDKplafRpsiOzPt9V02ddPCLbY1xYGPOX24NTyN50qnUxgCPcSoYMhKpAuBTjQoRZCAkUDRw==}
 
@@ -2139,9 +1435,6 @@ packages:
     resolution: {integrity: sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==}
     engines: {node: '>= 0.4'}
 
-  caniuse-lite@1.0.30001812:
-    resolution: {integrity: sha512-qN+QNNBr93TCmFrmte0bBCjSDMuRvt78VlHT99qIGPszm4QsqCX8lnyWUFkHi8B7ZBAPq8SH+UqyXNy/odMdng==}
-
   ccount@2.0.1:
     resolution: {integrity: sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg==}
 
@@ -2165,29 +1458,16 @@ packages:
   character-reference-invalid@2.0.1:
     resolution: {integrity: sha512-iBZ4F4wRbyORVsu0jPV7gXkOsGYjGHPmAyv+HiHG8gi5PtC9KI2j1+v8/tlibRvjoWX027ypmG/n0HtO5t7unw==}
 
-  chokidar@4.0.3:
-    resolution: {integrity: sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA==}
-    engines: {node: '>= 14.16.0'}
-
   class-variance-authority@0.7.1:
     resolution: {integrity: sha512-Ka+9Trutv7G8M6WT6SeiRWz792K5qEqIGEGzXKhAE6xOWAY6pPH8U+9IY3oCMv6kqTmLsv7Xh/2w2RigkePMsg==}
 
-  client-only@0.0.1:
-    resolution: {integrity: sha512-IV3Ou0jSMzZrd3pZ48nLkT9DA7Ag1pnPzaiQhpW7c3RbcqqzvzzVu+L8gfqMp/8IM2MQtSiqaCxrrcfu8I8rMA==}
-
   clsx@2.1.1:
     resolution: {integrity: sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==}
     engines: {node: '>=6'}
 
-  collapse-white-space@2.1.0:
-    resolution: {integrity: sha512-loKTxY1zCOuG4j9f6EPnuyyYkf58RnhhWTvRoZEokgB+WbdXehfjFviyOVYkqzEWz1Q5kRiZdBYS5SwxbQYwzw==}
-
   comma-separated-tokens@2.0.3:
     resolution: {integrity: sha512-Fu4hJdvzeylCfQPp9SGWidpzrMs7tTrlu6Vb8XGaRGck8QSNZJJp538Wrb60Lax4fPwR64ViY468OIUTbRlGZg==}
 
-  compute-scroll-into-view@3.1.1:
-    resolution: {integrity: sha512-VRhuHOLoKYOy4UbilLbUzbYg93XLjv2PncJC50EuTWPA3gaja1UjBsUP/D/9/juV3vQFr6XBEzn9KCAHdUvOHw==}
-
   content-disposition@1.1.0:
     resolution: {integrity: sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==}
     engines: {node: '>=18'}
@@ -2291,17 +1571,6 @@ packages:
     resolution: {integrity: sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==}
     engines: {node: '>= 0.4'}
 
-  esast-util-from-estree@2.0.0:
-    resolution: {integrity: sha512-4CyanoAudUSBAn5K13H4JhsMH6L9ZP7XbLVe/dKybkxMO7eDyLsT8UHl9TRNrU2Gr9nz+FovfSIjuXWJ81uVwQ==}
-
-  esast-util-from-js@2.0.1:
-    resolution: {integrity: sha512-8Ja+rNJ0Lt56Pcf3TAmpBZjmx8ZcK5Ts4cAzIOjsjevg9oSXJnl6SUQ2EevU8tv3h6ZLWmoKL5H4fgWvdvfETw==}
-
-  esbuild@0.25.12:
-    resolution: {integrity: sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg==}
-    engines: {node: '>=18'}
-    hasBin: true
-
   esbuild@0.28.2:
     resolution: {integrity: sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA==}
     engines: {node: '>=18'}
@@ -2317,32 +1586,9 @@ packages:
   esm-env@1.2.2:
     resolution: {integrity: sha512-Epxrv+Nr/CaL4ZcFGPJIYLWFom+YeV1DqMLHJoEd9SYRxNbaFruBwfEX/kkHUJf55j2+TUbmDcmuilbP1TmXHA==}
 
-  esprima@4.0.1:
-    resolution: {integrity: sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==}
-    engines: {node: '>=4'}
-    hasBin: true
-
-  estree-util-attach-comments@3.0.0:
-    resolution: {integrity: sha512-cKUwm/HUcTDsYh/9FgnuFqpfquUbwIqwKM26BVCGDPVgvaCl/nDCCjUfiLlx6lsEZ3Z4RFxNbOQ60pkaEwFxGw==}
-
-  estree-util-build-jsx@3.0.1:
-    resolution: {integrity: sha512-8U5eiL6BTrPxp/CHbs2yMgP8ftMhR5ww1eIKoWRMlqvltHF8fZn5LRDvTKuxD3DUn+shRbLGqXemcP51oFCsGQ==}
-
   estree-util-is-identifier-name@3.0.0:
     resolution: {integrity: sha512-hFtqIDZTIUZ9BXLb8y4pYGyk6+wekIivNVTcmvk8NoOh+VeRn5y6cEHzbURrWbfp1fIqdVipilzj+lfaadNZmg==}
 
-  estree-util-scope@1.0.1:
-    resolution: {integrity: sha512-B0np3dcdxqILX5e9nEi5/Fr4K7gL4oYFVPV1zRa2e9wRCbQoZZNWOZFYyoInvXUPJXBXjss+QXlWLJChDEHDkA==}
-
-  estree-util-to-js@2.0.0:
-    resolution: {integrity: sha512-WDF+xj5rRWmD5tj6bIqRi6CkLIXbbNQUcxQHzGysQzvHmdYG2G7p/Tf0J0gpxGgkeMZNTIjT/AoSvC9Xehcgdg==}
-
-  estree-util-value-to-estree@3.5.0:
-    resolution: {integrity: sha512-aMV56R27Gv3QmfmF1MY12GWkGzzeAezAX+UplqHVASfjc9wNzI/X6hC0S9oxq61WT4aQesLGslWP9tKk6ghRZQ==}
-
-  estree-util-visit@2.0.0:
-    resolution: {integrity: sha512-m5KgiH85xAhhW8Wta0vShLcUvOsh3LLPI2YVwcbio1l7E09NTLL1EyMZFM1OyWowoH0skScNbhOPl4kcBgzTww==}
-
   estree-walker@3.0.3:
     resolution: {integrity: sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==}
 
@@ -2372,10 +1618,6 @@ packages:
     resolution: {integrity: sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==}
     engines: {node: '>= 18'}
 
-  extend-shallow@2.0.1:
-    resolution: {integrity: sha512-zCnTtlxNoAiDc3gqY2aYAWFx7XWWiasuF2K8Me5WbN8otHKTUKBwjPtNpRs/rbUZm7KxWAaNj7P1a/p52GbVug==}
-    engines: {node: '>=0.10.0'}
-
   extend@3.0.2:
     resolution: {integrity: sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==}
 
@@ -2388,13 +1630,6 @@ packages:
   fast-uri@3.1.7:
     resolution: {integrity: sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==}
 
-  fast-xml-builder@1.3.1:
-    resolution: {integrity: sha512-pIM/1n3ntFXKYrUZwW7QCK0gAW7XY+wzj1YMIV3tLDvPj/V+zTGJK5e3/4WJfwj0qWw2ElNXiTixda/R+3YSug==}
-
-  fast-xml-parser@5.11.1:
-    resolution: {integrity: sha512-TBw6K/fxoQGGjCmZDw9w/ZwP3uDcnTM4YH/g+PFRWr8sbe5idXtxNN6vITh4+1ruCZaho6uBFurElsA7F0zzgw==}
-    hasBin: true
-
   fdir@6.5.0:
     resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==}
     engines: {node: '>=12.0.0'}
@@ -2411,9 +1646,6 @@ packages:
     resolution: {integrity: sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA==}
     engines: {node: '>= 18.0.0'}
 
-  foreach@2.0.6:
-    resolution: {integrity: sha512-k6GAGDyqLe9JaebCsFCoudPPWfihKu8pylYXRlqP1J7ms39iPoTtk2fviNglIeQEwdh0bQeKJ01ZPyuyQvKzwg==}
-
   forwarded@0.2.0:
     resolution: {integrity: sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==}
     engines: {node: '>= 0.6'}
@@ -2438,98 +1670,12 @@ packages:
     engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0}
     os: [darwin]
 
-  fumadocs-core@15.8.5:
-    resolution: {integrity: sha512-hyJtKGuB2J/5y7tDfI1EnGMKlNbSXM5N5cpwvgCY0DcBJwFMDG/GpSpaVRzh3aWy67pAYDZFIwdtbKXBa/q5bg==}
-    peerDependencies:
-      '@mixedbread/sdk': ^0.19.0
-      '@oramacloud/client': 1.x.x || 2.x.x
-      '@tanstack/react-router': 1.x.x
-      '@types/react': '*'
-      algoliasearch: 5.x.x
-      lucide-react: '*'
-      next: 14.x.x || 15.x.x
-      react: 18.x.x || 19.x.x
-      react-dom: 18.x.x || 19.x.x
-      react-router: 7.x.x
-      waku: ^0.26.0
-    peerDependenciesMeta:
-      '@mixedbread/sdk':
-        optional: true
-      '@oramacloud/client':
-        optional: true
-      '@tanstack/react-router':
-        optional: true
-      '@types/react':
-        optional: true
-      algoliasearch:
-        optional: true
-      lucide-react:
-        optional: true
-      next:
-        optional: true
-      react:
-        optional: true
-      react-dom:
-        optional: true
-      react-router:
-        optional: true
-      waku:
-        optional: true
+  function-bind@1.1.2:
+    resolution: {integrity: sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==}
 
-  fumadocs-mdx@12.0.3:
-    resolution: {integrity: sha512-OYqbHSmzkejG+iUMlZJJOitaVbCgBdo/REc/9Sq1WaZ1vq6bH9PCFU0cKJlRdHbQSGRfVg5EJJy5uKy5+iNFGQ==}
-    hasBin: true
-    peerDependencies:
-      '@fumadocs/mdx-remote': ^1.4.0
-      fumadocs-core: ^14.0.0 || ^15.0.0
-      next: ^15.3.0
-      react: '*'
-      vite: 6.x.x || 7.x.x
-    peerDependenciesMeta:
-      '@fumadocs/mdx-remote':
-        optional: true
-      next:
-        optional: true
-      react:
-        optional: true
-      vite:
-        optional: true
-
-  fumadocs-openapi@9.5.1:
-    resolution: {integrity: sha512-MvoOKtKHh3i/gq4fmasVPXPw+KfTlIEdnEj82xc/JExTd77+aW2f4AanE/bSm47JMzY26IXyS3Xro7wFui45sQ==}
-    peerDependencies:
-      '@scalar/api-client-react': '*'
-      '@types/react': '*'
-      react: 18.x.x || 19.x.x
-      react-dom: 18.x.x || 19.x.x
-    peerDependenciesMeta:
-      '@scalar/api-client-react':
-        optional: true
-      '@types/react':
-        optional: true
-
-  fumadocs-ui@15.8.5:
-    resolution: {integrity: sha512-9pyB+9rOOsrFnmmZ9xREp/OgVhyaSq2ocEpqTNbeQ7tlJ6JWbdFWfW0C9lRXprQEB6DJWUDtDxqKS5QXLH0EGA==}
-    peerDependencies:
-      '@types/react': '*'
-      next: 14.x.x || 15.x.x
-      react: 18.x.x || 19.x.x
-      react-dom: 18.x.x || 19.x.x
-      tailwindcss: ^3.4.14 || ^4.0.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      next:
-        optional: true
-      tailwindcss:
-        optional: true
-
-  function-bind@1.1.2:
-    resolution: {integrity: sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==}
-
-  get-east-asian-width@1.6.0:
-    resolution: {integrity: sha512-QRbvDIbx6YklUe6RxeTeleMR0yv3cYH6PsPZHcnVn7xv7zO1BHN8r0XETu8n6Ye3Q+ahtSarc3WgtNWmehIBfA==}
-    engines: {node: '>=18'}
+  get-east-asian-width@1.6.0:
+    resolution: {integrity: sha512-QRbvDIbx6YklUe6RxeTeleMR0yv3cYH6PsPZHcnVn7xv7zO1BHN8r0XETu8n6Ye3Q+ahtSarc3WgtNWmehIBfA==}
+    engines: {node: '>=18'}
 
   get-intrinsic@1.3.0:
     resolution: {integrity: sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==}
@@ -2543,9 +1689,6 @@ packages:
     resolution: {integrity: sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==}
     engines: {node: '>= 0.4'}
 
-  github-slugger@2.0.0:
-    resolution: {integrity: sha512-IaOQ9puYtjrkq7Y0Ygl9KDZnrf/aiUJYUpVf89y8kyaxbRG7Y1SrX/jaumrv81vc61+kiMempujsM3Yw7w5qcw==}
-
   gopd@1.2.0:
     resolution: {integrity: sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==}
     engines: {node: '>= 0.4'}
@@ -2553,10 +1696,6 @@ packages:
   graceful-fs@4.2.11:
     resolution: {integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==}
 
-  gray-matter@4.0.3:
-    resolution: {integrity: sha512-5v6yZd4JK3eMI3FqqCouswVqwugaA9r4dNZB1wwcmrD02QkV5H0y7XBQW8QwQqEaZY1pM9aqORSORhJRdNK44Q==}
-    engines: {node: '>=6.0'}
-
   has-symbols@1.1.0:
     resolution: {integrity: sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==}
     engines: {node: '>= 0.4'}
@@ -2565,18 +1704,9 @@ packages:
     resolution: {integrity: sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==}
     engines: {node: '>= 0.4'}
 
-  hast-util-to-estree@3.1.3:
-    resolution: {integrity: sha512-48+B/rJWAp0jamNbAAf9M7Uf//UVqAoMmgXhBdxTDJLGKY+LRnZ99qcG+Qjl5HfMpYNzS5v4EAwVEF34LeAj7w==}
-
-  hast-util-to-html@9.0.5:
-    resolution: {integrity: sha512-OguPdidb+fbHQSU4Q4ZiLKnzWo8Wwsf5bZfbvu7//a9oTYoqD/fWpe96NuHkoS9h0ccGOTe0C4NGXdtS0iObOw==}
-
   hast-util-to-jsx-runtime@2.3.6:
     resolution: {integrity: sha512-zl6s8LwNyo1P9uw+XJGvZtdFF1GdAkOg8ujOw+4Pyb76874fLps4ueHXDhXWdk6YHQ6OgUtinliG7RsYvCbbBg==}
 
-  hast-util-to-string@3.0.1:
-    resolution: {integrity: sha512-XelQVTDWvqcl3axRfI0xSeoVKzyIFPwsAGSLIsKdJKQMXDYJS4WYrBNF/8J7RdhIcFI2BOHgAifggsvsxp/3+A==}
-
   hast-util-whitespace@3.0.0:
     resolution: {integrity: sha512-88JUN06ipLwsnv+dVn+OIYOvAuvBMy/Qoi6O7mQHxdPXpjy+Cd6xRkWwux7DKO+4sYILtLBRIKgsdpS2gQc7qw==}
 
@@ -2593,9 +1723,6 @@ packages:
   html-url-attributes@3.0.1:
     resolution: {integrity: sha512-ol6UPyBWqsrO6EJySPz2O7ZSr856WDrEzM5zMqp+FJJLGMW35cLYmmZnl0vztAZxRUoNZJFTCohfjuIJ8I4QBQ==}
 
-  html-void-elements@3.0.0:
-    resolution: {integrity: sha512-bEqo66MRXsUGxWHV5IP0PUiAWwoEjba4VCzg0LjFJBpchPaTfyfCKTG6bc5F8ucKec3q5y6qOdGyYTSBEvhCrg==}
-
   http-errors@2.0.1:
     resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==}
     engines: {node: '>= 0.8'}
@@ -2612,11 +1739,6 @@ packages:
     resolution: {integrity: sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==}
     engines: {node: '>=0.10.0'}
 
-  image-size@2.0.4:
-    resolution: {integrity: sha512-QRUkFFsRV/6fuESxb9Vkq+a0LkSrgKXuc2NEqfikiXxxN/G3tjWt5EVUlMaImRBZRZK/jRBEbYvpPYZL8t08Zw==}
-    engines: {node: '>=18'}
-    hasBin: true
-
   inherits@2.0.4:
     resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==}
 
@@ -2640,10 +1762,6 @@ packages:
   is-decimal@2.0.1:
     resolution: {integrity: sha512-AAB9hiomQs5DXWcRB1rqsxGUstbRroFOPPVAomNk/3XHR5JyEZChOyTWe2oayKnsSsr/kcGqF+z6yuH6HHpN0A==}
 
-  is-extendable@0.1.1:
-    resolution: {integrity: sha512-5BMULNob1vgFX6EjQw5izWDxrecWK9AM72rugNr0TFldMOi0fj6Jk+zeKIt0xGj4cEfQIJth4w3OKWOJ4f+AFw==}
-    engines: {node: '>=0.10.0'}
-
   is-hexadecimal@2.0.1:
     resolution: {integrity: sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg==}
 
@@ -2654,9 +1772,6 @@ packages:
   is-promise@4.0.0:
     resolution: {integrity: sha512-hvpoI6korhJMnej285dSg6nu1+e6uxs7zG3BYAm5byqDsgJNWwxzM6z6iZiAgQR4TJ30JmBTOwqZUw3WlyH3AQ==}
 
-  is-unsafe@2.0.2:
-    resolution: {integrity: sha512-HgbIHPBH0KHHCcjLfGsCvhtPTVxjaAZlXjwdz7/GQC40SjSe4sfQsar8J5VFo8JOSbarkpV0OLG95bbaNd9aAQ==}
-
   isexe@2.0.0:
     resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
 
@@ -2667,17 +1782,6 @@ packages:
   jose@6.2.12:
     resolution: {integrity: sha512-9NiFmJEex0sy2Dk58j2UGBSHgUs2ypF9eZSu4L6vjOX3Dp96Sw1F3uL+H+D1sx02jZZdzUT0HgvCy59CuvXcWw==}
 
-  js-yaml@3.15.2:
-    resolution: {integrity: sha512-6EuL879VkRA+1Cz578mKMiKvjPNEuk6+r1JaFzoSWejZmtf7xWbIyw1e3KkxlkzTIt9Taw6JBhEppG7utc1P+w==}
-    hasBin: true
-
-  js-yaml@4.3.2:
-    resolution: {integrity: sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==}
-    hasBin: true
-
-  json-pointer@0.6.2:
-    resolution: {integrity: sha512-vLWcKbOaXlO+jvRy4qNd+TI1QUPZzfJj1tpJ3vAXDych5XJf93ftpUKe5pKCrzyIIwgBJcOcCVRUfqQP25afBw==}
-
   json-schema-to-ts@3.1.1:
     resolution: {integrity: sha512-+DWg8jCJG2TEnpy7kOm/7/AxaYoaRbjVB4LFZLySZlWn8exGs3A4OLJR966cVvU26N7X9TWxl+Jsw7dzAqKT6g==}
     engines: {node: '>=16'}
@@ -2688,18 +1792,6 @@ packages:
   json-schema-typed@8.0.2:
     resolution: {integrity: sha512-fQhoXdcvc3V28x7C7BMs4P5+kNlgUURe2jmUT1T//oBRMDrqy1QPelJimwZGo7Hg9VPV3EQV5Bnq4hbFy2vetA==}
 
-  jsonpointer@5.0.1:
-    resolution: {integrity: sha512-p/nXbhSEcu3pZRdkW1OfJhpsVtW1gd4Wa1fnQc9YLiTfAjn0312eMKimbdIQzuZl9aa9xUGaRlP9T/CJE/ditQ==}
-    engines: {node: '>=0.10.0'}
-
-  kind-of@6.0.3:
-    resolution: {integrity: sha512-dcS1ul+9tmeD95T+x28/ehLgd9mENa3LsvDTtzm3vyBEO7RPptvAD+t44WVXaUjTBRcrpFeFlC8WCruUR456hw==}
-    engines: {node: '>=0.10.0'}
-
-  leven@4.1.0:
-    resolution: {integrity: sha512-KZ9W9nWDT7rF7Dazg8xyLHGLrmpgq2nVNFUckhqdW3szVP6YhCpp/RAnpmVExA9JvrMynjwSLVrEj3AepHR6ew==}
-    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
-
   lightningcss-android-arm64@1.32.0:
     resolution: {integrity: sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==}
     engines: {node: '>= 12.0.0'}
@@ -2848,16 +1940,9 @@ packages:
     resolution: {integrity: sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA==}
     engines: {node: '>= 12.0.0'}
 
-  lodash.merge@4.6.2:
-    resolution: {integrity: sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==}
-
   longest-streak@3.1.0:
     resolution: {integrity: sha512-9Ri+o0JYgehTaVBBDoMqIl8GXtbWg711O3srftcHhZ0dqnETqLaoIK0x17fUw9rFSlK/0NlsKe0Ahhyl5pXE2g==}
 
-  lru-cache@11.5.3:
-    resolution: {integrity: sha512-U4N8FgzmWxc8k1VH8Kr6lQg18U7Fjvby6wXHVRX/ZZ7IwWbRMgrRbP0Wrb5q5NVinryp4SQampHKdvtecItxUg==}
-    engines: {node: 20 || >=22}
-
   lucide-react@1.47.0:
     resolution: {integrity: sha512-o8C23aXpNQypRY73W7fW02EyvWJinEMXgKeGjFoKym0zj3Q73hD97A1IQps1g8C14HTGsOpZL0Am+xjfgFZAbg==}
     peerDependencies:
@@ -2866,10 +1951,6 @@ packages:
   magic-string@0.30.21:
     resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
 
-  markdown-extensions@2.0.0:
-    resolution: {integrity: sha512-o5vL7aDWatOTX8LzaS1WMoaoxIiLRQJuIKKe2wAw6IeULDHaqbiqiggmx+pKvZDb1Sj+pE46Sn1T7lCqfFtg1Q==}
-    engines: {node: '>=16'}
-
   markdown-table@3.0.4:
     resolution: {integrity: sha512-wiYz4+JrLyb/DqW2hkFJxP7Vd7JuTDm77fvbM8VfEQdmSMqcImWeeRbHwZjBjIFki/VaMK2BhFi7oUUZeM5bqw==}
 
@@ -2912,9 +1993,6 @@ packages:
   mdast-util-mdx-jsx@3.2.0:
     resolution: {integrity: sha512-lj/z8v0r6ZtsN/cGNNtemmmfoLAFZnjMbNyLzBafjzikOM+glrjNHPlf6lQDOTccj9n5b0PPihEBbhneMyGs1Q==}
 
-  mdast-util-mdx@3.0.0:
-    resolution: {integrity: sha512-JfbYLAW7XnYTTbUsmpu0kdBUVe+yKVJZBItEjwyYJiDJuZ9w4eeaqks4HQO+R7objWgS2ymV60GYpI14Ug554w==}
-
   mdast-util-mdxjs-esm@2.0.1:
     resolution: {integrity: sha512-EcmOpxsZ96CvlP03NghtH1EsLtr0n9Tm4lPUJUBccV9RwUOneqSycg19n5HGzCf+10LozMRSObtVr3ee1WoHtg==}
 
@@ -2962,30 +2040,12 @@ packages:
   micromark-extension-gfm@3.0.0:
     resolution: {integrity: sha512-vsKArQsicm7t0z2GugkCKtZehqUm31oeGBV/KVSorWSy8ZlNAv7ytjFhvaryUiCUJYqs+NoE6AFhpQvBTM6Q4w==}
 
-  micromark-extension-mdx-expression@3.0.1:
-    resolution: {integrity: sha512-dD/ADLJ1AeMvSAKBwO22zG22N4ybhe7kFIZ3LsDI0GlsNr2A3KYxb0LdC1u5rj4Nw+CHKY0RVdnHX8vj8ejm4Q==}
-
-  micromark-extension-mdx-jsx@3.0.2:
-    resolution: {integrity: sha512-e5+q1DjMh62LZAJOnDraSSbDMvGJ8x3cbjygy2qFEi7HCeUT4BDKCvMozPozcD6WmOt6sVvYDNBKhFSz3kjOVQ==}
-
-  micromark-extension-mdx-md@2.0.0:
-    resolution: {integrity: sha512-EpAiszsB3blw4Rpba7xTOUptcFeBFi+6PY8VnJ2hhimH+vCQDirWgsMpz7w1XcZE7LVrSAUGb9VJpG9ghlYvYQ==}
-
-  micromark-extension-mdxjs-esm@3.0.0:
-    resolution: {integrity: sha512-DJFl4ZqkErRpq/dAPyeWp15tGrcrrJho1hKK5uBS70BCtfrIFg81sqcTVu3Ta+KD1Tk5vAtBNElWxtAa+m8K9A==}
-
-  micromark-extension-mdxjs@3.0.0:
-    resolution: {integrity: sha512-A873fJfhnJ2siZyUrJ31l34Uqwy4xIFmvPY1oj+Ean5PHcPBYzEsvqvWGaWcfEIr11O5Dlw3p2y0tZWpKHDejQ==}
-
   micromark-factory-destination@2.0.1:
     resolution: {integrity: sha512-Xe6rDdJlkmbFRExpTOmRj9N3MaWmbAgdpSrBQvCFqhezUn4AHqJHbaEnfbVYYiexVSs//tqOdY/DxhjdCiJnIA==}
 
   micromark-factory-label@2.0.1:
     resolution: {integrity: sha512-VFMekyQExqIW7xIChcXn4ok29YE3rnuyveW3wZQWWqF4Nv9Wk5rgJ99KzPvHjkmPXF93FXIbBp6YdW3t71/7Vg==}
 
-  micromark-factory-mdx-expression@2.0.3:
-    resolution: {integrity: sha512-kQnEtA3vzucU2BkrIa8/VaSAsP+EJ3CKOvhMuJgOEGg9KDC6OAY6nSnNDVRiVNRqj7Y4SlSzcStaH/5jge8JdQ==}
-
   micromark-factory-space@2.0.1:
     resolution: {integrity: sha512-zRkxjtBxxLd2Sc0d+fbnEunsTj46SWXgXciZmHq0kDYGnck/ZSGj9/wULTV95uoeYiK5hRXP2mJ98Uo4cq/LQg==}
 
@@ -3016,9 +2076,6 @@ packages:
   micromark-util-encode@2.0.1:
     resolution: {integrity: sha512-c3cVx2y4KqUnwopcO9b/SCdo2O67LwJJ/UyqGfbigahfegL9myoEFoDYZgkT7f36T0bLrM9hZTAaAyH+PCAXjw==}
 
-  micromark-util-events-to-acorn@2.0.3:
-    resolution: {integrity: sha512-jmsiEIiZ1n7X1Rr5k8wVExBQCg5jy4UXVADItHmNk1zkwEVhBuIUKRu3fqv+hs4nxLISi2DQGlqIOGiFxgbfHg==}
-
   micromark-util-html-tag-name@2.0.1:
     resolution: {integrity: sha512-2cNEiYDhCWKI+Gs9T0Tiysk136SnR13hhO8yW6BGNyhOC4qYFnwF1nKfD3HFAIXA5c45RrIG1ub11GiXeYd1xA==}
 
@@ -3084,41 +2141,10 @@ packages:
     resolution: {integrity: sha512-NMPBRMJgiQHjbd8phG3Vebdx4kZ1H121rbl5IkMqeOsahptB9BKo/d7oJ3zTXqTgagn2bWlNSXkh0QUGM31RYg==}
     engines: {node: '>=18'}
 
-  next-themes@0.4.6:
-    resolution: {integrity: sha512-pZvgD5L0IEvX5/9GWyHMf3m8BKiVQwsCMHfoFosXtXBMnaS0ZnIJ9ST4b4NqLVKDEm8QBxoNNGNaBv2JNF6XNA==}
-    peerDependencies:
-      react: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
-
-  next@15.5.26:
-    resolution: {integrity: sha512-EVCqhvq8Hs+nX9udH2VzE/iXAg9QodZBZnwVJTuAMl386GIYvlJtYhFytV9nSlDYxKw3kEyv8I2dCQs0+on0sQ==}
-    engines: {node: ^18.18.0 || ^19.8.0 || >= 20.0.0}
-    hasBin: true
-    peerDependencies:
-      '@opentelemetry/api': ^1.1.0
-      '@playwright/test': ^1.51.1
-      babel-plugin-react-compiler: '*'
-      react: ^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0
-      react-dom: ^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0
-      sass: ^1.3.0
-    peerDependenciesMeta:
-      '@opentelemetry/api':
-        optional: true
-      '@playwright/test':
-        optional: true
-      babel-plugin-react-compiler:
-        optional: true
-      sass:
-        optional: true
-
   node-forge@1.4.0:
     resolution: {integrity: sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==}
     engines: {node: '>= 6.13.0'}
 
-  npm-to-yarn@3.2.0:
-    resolution: {integrity: sha512-K1HmQeZT2HrjpsR6KgqbN2FAXL2NrJJmNUSD9ck7HGTVu1JKXox8n9SB+tjbU8m8JGLF4OscrroPepew/L7/Xw==}
-    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
-
   number-flow@0.6.2:
     resolution: {integrity: sha512-MCnImG4Q5vPwhSXnov56nOuyyKn6LC+Qd7II1UiKc+ACRtug5iAtn0+CwXNxM38AC5lSowEY+oYEtZX2qMnUyw==}
 
@@ -3141,15 +2167,6 @@ packages:
   once@1.4.0:
     resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
 
-  oniguruma-parser@0.12.2:
-    resolution: {integrity: sha512-6HVa5oIrgMC6aA6WF6XyyqbhRPJrKR02L20+2+zpDtO5QAzGHAUGw5TKQvwi5vctNnRHkJYmjAhRVQF2EKdTQw==}
-
-  oniguruma-to-es@4.3.6:
-    resolution: {integrity: sha512-csuQ9x3Yr0cEIs/Zgx/OEt9iBw9vqIunAPQkx19R/fiMq2oGVTgcMqO/V3Ybqefr1TBvosI6jU539ksaBULJyA==}
-
-  openapi-sampler@1.7.6:
-    resolution: {integrity: sha512-MvWOm3vdgX7CZ6CNfu2wOFMGhC/pq03BxYTL/DKCkyPWfR6XIwUJnOV32mQGgCcUm1tY/y1jj7F2yqx1DieIWw==}
-
   parse-entities@4.0.2:
     resolution: {integrity: sha512-GG2AQYWoLgL877gQIKeRPGO1xF9+eG1ujIb5soS5gPvLQ1y2o8FL90w2QWNdf9I361Mpp7726c+lj3U0qK1uGw==}
 
@@ -3157,10 +2174,6 @@ packages:
     resolution: {integrity: sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==}
     engines: {node: '>= 0.8'}
 
-  path-expression-matcher@1.6.2:
-    resolution: {integrity: sha512-enSlaiat05iasnzmgNxRj8reFdj3puY2QpNgP1aPIaVfT6nn9ICuPoFlKHk8EN22HcwewshO+mN2DGbkCEOtqQ==}
-    engines: {node: '>=14.0.0'}
-
   path-key@3.1.1:
     resolution: {integrity: sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==}
     engines: {node: '>=8'}
@@ -3196,23 +2209,10 @@ packages:
     resolution: {integrity: sha512-IQ7TZdoaqbT+LCpShg46jnZVlhWD2w6iQYAcYXfHARZ7X1t/UGhhceQDs5X0cGqKvYlHNOuv7Oa1xmb0oQuA3w==}
     engines: {node: '>=4'}
 
-  postcss-selector-parser@7.1.6:
-    resolution: {integrity: sha512-7qASPzhKF2l2KLboRZux8CCTRMdGiV08vWmyKzPz22qZ7ZjQBOeY7rNzNoCLSUiftJ7HUq0GERHmxw/t0dCdMw==}
-    engines: {node: '>=4'}
-
-  postcss@8.4.31:
-    resolution: {integrity: sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ==}
-    engines: {node: ^10 || ^12 || >=14}
-
   postcss@8.5.28:
     resolution: {integrity: sha512-RRuzqDtt5Y9h3quz5hWhK+TPnsmVs6WwSU6LkJMeY4HstUEDuYTG8UJSdawMRzmzAtV+KEoG8N3Qg2qLy5vM/A==}
     engines: {node: ^10 || ^12 || >=14}
 
-  prettier@3.9.9:
-    resolution: {integrity: sha512-Z/CJHIkdujO/OtN7nXUii0Rf3VT5SRuhjBA82Xvu2XhBUgX3nhP67T0LHceBdQLex7OOFGTox+Q5Yg8Jk2Qivg==}
-    engines: {node: '>=14'}
-    hasBin: true
-
   property-information@7.2.0:
     resolution: {integrity: sha512-IAtzIB6sUiWaJYrX9smp3V46pBGbBeLFRGdh25kg1334VcBlD8HzhPeNIWQH9zhGmo2itIe25EHt9dQP7G5hmg==}
 
@@ -3237,16 +2237,6 @@ packages:
     peerDependencies:
       react: ^19.3.0
 
-  react-hook-form@7.89.0:
-    resolution: {integrity: sha512-vKcoCfy8RKZDrhSdqsRFp0uEOdS1AhLjOL6hR7Wmfzg1akNxEhaPf5WORx8SgEQPVXakdDyDkqQp+KNxVnnPHg==}
-    engines: {node: '>=18.0.0'}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8.0 || ^17 || ^18 || ^19
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
   react-i18next@17.0.15:
     resolution: {integrity: sha512-7uYpx/oBkesLto7cOzOmfITlUBaXHCAcFahmgETMfWr8nbbWRRnVGvz8wsH/xpbNcyoH+NpCcnOQEqWPMO6/hw==}
     peerDependencies:
@@ -3269,12 +2259,6 @@ packages:
       '@types/react': '>=18'
       react: '>=18'
 
-  react-medium-image-zoom@5.4.9:
-    resolution: {integrity: sha512-czBdTbJI6JEbqeRIT5M8D3j7TrffBfo00U0P0lzzd19usj8PiR1yPH7PK/vQlwBE/Sv9YFdJGN6XauJPi4jRyg==}
-    peerDependencies:
-      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-      react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-
   react-remove-scroll-bar@2.3.8:
     resolution: {integrity: sha512-9r+yi9+mgU33AKcj6IbT9oRCO78WriSj6t/cF8DWBZJ9aOGPOTEDvdUDz1FwKim7QXWwmHqtdHnRJfhAxEG46Q==}
     engines: {node: '>=10'}
@@ -3309,42 +2293,9 @@ packages:
     resolution: {integrity: sha512-E8LUcbtBWt20bbl2YoHfx4ZDBdxVTfOKtCZn9cDSJ4l6/nuoApcpIBcj47t2wZoVX8g2ZHuMHbiShgCR1T5Sog==}
     engines: {node: '>=0.10.0'}
 
-  readdirp@4.1.2:
-    resolution: {integrity: sha512-GDhwkLfywWL2s6vEjyhri+eXmfH6j1L7JE27WhqLeYzoh/A3DBaYGEj2H/HFZCn/kMfim73FXxEJTw06WtxQwg==}
-    engines: {node: '>= 14.18.0'}
-
-  recma-build-jsx@1.0.0:
-    resolution: {integrity: sha512-8GtdyqaBcDfva+GUKDr3nev3VpKAhup1+RvkMvUxURHpW7QyIvk9F5wz7Vzo06CEMSilw6uArgRqhpiUcWp8ew==}
-
-  recma-jsx@1.0.1:
-    resolution: {integrity: sha512-huSIy7VU2Z5OLv6oFLosQGGDqPqdO1iq6bWNAdhzMxSJP7RAso4fCZ1cKu8j9YHCZf3TPrq4dw3okhrylgcd7w==}
-    peerDependencies:
-      acorn: ^6.0.0 || ^7.0.0 || ^8.0.0
-
-  recma-parse@1.0.0:
-    resolution: {integrity: sha512-OYLsIGBB5Y5wjnSnQW6t3Xg7q3fQ7FWbw/vcXtORTnyaSFscOtABg+7Pnz6YZ6c27fG1/aN8CjfwoUEUIdwqWQ==}
-
-  recma-stringify@1.0.0:
-    resolution: {integrity: sha512-cjwII1MdIIVloKvC9ErQ+OgAtwHBmcZ0Bg4ciz78FtbT8In39aAYbaA7zvxQ61xVMSPE8WxhLwLbhif4Js2C+g==}
-
-  regex-recursion@6.0.2:
-    resolution: {integrity: sha512-0YCaSCq2VRIebiaUviZNs0cBz1kg5kVS2UKUfNIx8YVs1cN3AV7NTctO5FOKBA+UT2BPJIWZauYHPqJODG50cg==}
-
-  regex-utilities@2.3.0:
-    resolution: {integrity: sha512-8VhliFJAWRaUiVvREIiW2NXXTmHs4vMNnSzuJVhscgmGav3g9VDxLrQndI3dZZVVdp0ZO/5v0xmX516/7M9cng==}
-
-  regex@6.1.0:
-    resolution: {integrity: sha512-6VwtthbV4o/7+OaAF9I5L5V3llLEsoPyq9P1JVXkedTP33c7MfCG0/5NOPcSJn0TzXcG9YUrR0gQSWioew3LDg==}
-
-  rehype-recma@1.0.0:
-    resolution: {integrity: sha512-lqA4rGUf1JmacCNWWZx0Wv1dHqMwxzsDWYMTowuplHF3xH0N/MmrZ/G3BDZnzAkRmxDadujCjaKM2hqYdCBOGw==}
-
   remark-gfm@4.0.1:
     resolution: {integrity: sha512-1quofZ2RQ9EWdeN34S79+KExV1764+wCUGop5CPL1WGdD0ocPpu91lzPGbwWMECpEpd42kJGQwzRfyov9j4yNg==}
 
-  remark-mdx@3.1.1:
-    resolution: {integrity: sha512-Pjj2IYlUY3+D8x00UJsIOg5BEvfMyeI+2uLPn9VO9Wg4MEtN/VTIq2NEJQfde9PnX15KgtHyl9S0BcTnWrIuWg==}
-
   remark-parse@11.0.0:
     resolution: {integrity: sha512-FCxlKLNGknS5ba/1lmpYijMUzX2esxW5xQqjWxw2eHFfS2MSdaHVINFmhjo+qN1WhZhNimq0dZATN9pH0IDrpA==}
 
@@ -3354,9 +2305,6 @@ packages:
   remark-stringify@11.0.0:
     resolution: {integrity: sha512-1OSmLd3awB/t8qdoEOMazZkNsfVTeY4fTsgzcQFdXNq8ToTN4ZGwrMnlda4K6smTFKD+GRV6O48i6Z4iKgPPpw==}
 
-  remark@15.0.1:
-    resolution: {integrity: sha512-Eht5w30ruCXgFmxVUSlNWQ9iiimq07URKeFS3hNc8cUWy1llX4KDWfyEDZRycMc+znsN9Ux5/tJ/BFdgdOwA3A==}
-
   require-from-string@2.0.2:
     resolution: {integrity: sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==}
     engines: {node: '>=0.10.0'}
@@ -3376,25 +2324,9 @@ packages:
   safer-buffer@2.1.2:
     resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
 
-  sax@1.6.1:
-    resolution: {integrity: sha512-42tBVwLWnaQvW5zc4HbZrTuWccECCZfBi92FDuwtqxasH+JbPB3/FOKb1m222K42R4WxuxzzMsTswfzgtSu64Q==}
-    engines: {node: '>=11.0.0'}
-
   scheduler@0.28.0:
     resolution: {integrity: sha512-juorfCmIkIw8tT+p5BXSm6PJjQF/ycEYmKyzURCIt/RaZIhL+PulbQ9Yu2z1HdOJDdqDTlxA1+xKBmHXJsczAw==}
 
-  scroll-into-view-if-needed@3.1.0:
-    resolution: {integrity: sha512-49oNpRjWRvnU8NyGVmUaYG4jtTkNonFZI86MmGRDqBphEK2EXT9gdEUoQPZhuBM8yWHxCWbobltqYO5M4XrUvQ==}
-
-  section-matter@1.0.0:
-    resolution: {integrity: sha512-vfD3pmTzGpufjScBh50YHKzEu2lxBWhVEHsNGoEXmCmn2hKGfeNLYMzCJpe8cD7gqX7TJluOVpBkAequ6dgMmA==}
-    engines: {node: '>=4'}
-
-  semver@7.8.5:
-    resolution: {integrity: sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==}
-    engines: {node: '>=10'}
-    hasBin: true
-
   send@1.2.1:
     resolution: {integrity: sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==}
     engines: {node: '>= 18'}
@@ -3409,15 +2341,6 @@ packages:
   shadow-plugin@2.1.1:
     resolution: {integrity: sha512-V4MwWPNzna/Zq6lIjT7vWAHf5uSCVDPkFG5m1cXs9WTtLGeLA3/NAtjJxxY3lYwBiA9O8+g/yLfC+c+P4qk4yw==}
 
-  sharp@0.35.5:
-    resolution: {integrity: sha512-Ywn4OnzGukp7CDMrp08RQ50YKmuwG47brZgIVPTvBaaAfQlRlygrRqSrxdCiL9M+LlzLBiJ68IR1QqvzHyjC7g==}
-    engines: {node: '>=20.9.0'}
-    peerDependencies:
-      '@types/node': '*'
-    peerDependenciesMeta:
-      '@types/node':
-        optional: true
-
   shebang-command@2.0.0:
     resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
     engines: {node: '>=8'}
@@ -3426,9 +2349,6 @@ packages:
     resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==}
     engines: {node: '>=8'}
 
-  shiki@3.23.0:
-    resolution: {integrity: sha512-55Dj73uq9ZXL5zyeRPzHQsK7Nbyt6Y10k5s7OjuFZGMhpp4r/rsLBH0o/0fstIzX1Lep9VxefWljK/SKCzygIA==}
-
   side-channel-list@1.0.1:
     resolution: {integrity: sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==}
     engines: {node: '>= 0.4'}
@@ -3452,16 +2372,9 @@ packages:
     resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
     engines: {node: '>=0.10.0'}
 
-  source-map@0.7.6:
-    resolution: {integrity: sha512-i5uvt8C3ikiWeNZSVZNWcfZPItFQOsYTUAOkcUPGd8DqDy1uOUikjt5dG+uRlwyvR108Fb9DOd4GvXfT0N2/uQ==}
-    engines: {node: '>= 12'}
-
   space-separated-tokens@2.0.2:
     resolution: {integrity: sha512-PEGlAwrG8yXGXRjW32fGbg66JAlOAwbObuqVoJpv/mRgoWDQfgH1wDPvtzWyUSNAXBGSk8h755YDbbcEy3SH2Q==}
 
-  sprintf-js@1.0.3:
-    resolution: {integrity: sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==}
-
   stackback@0.0.2:
     resolution: {integrity: sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==}
 
@@ -3478,32 +2391,12 @@ packages:
   stringify-entities@4.0.4:
     resolution: {integrity: sha512-IwfBptatlO+QCJUo19AqvrPNqlVMpW9YEL2LIVY+Rpv2qsjCGxaDLNRgeGsQWJhfItebuJhsGSLjaBbNSQ+ieg==}
 
-  strip-bom-string@1.0.0:
-    resolution: {integrity: sha512-uCC2VHvQRYu+lMh4My/sFNmF2klFymLX1wHJeXnbEJERpV/ZsVuonzerjfrGpIGF7LBVa1O7i9kjiWvJiFck8g==}
-    engines: {node: '>=0.10.0'}
-
-  strnum@2.4.2:
-    resolution: {integrity: sha512-rDG3Ah4TV0k1hWvLSzkZtMmLN9+eS+h3knq4MP6A42Y3Yh5qGNnOUs1jJkoSr8FG5dsL28c7KgkIBzSEykqtuw==}
-
   style-to-js@1.1.21:
     resolution: {integrity: sha512-RjQetxJrrUJLQPHbLku6U/ocGtzyjbJMP9lCNK7Ag0CNh690nSH8woqWH9u16nMjYBAok+i7JO1NP2pOy8IsPQ==}
 
   style-to-object@1.0.14:
     resolution: {integrity: sha512-LIN7rULI0jBscWQYaSswptyderlarFkjQ+t79nzty8tcIAceVomEVlLzH5VP4Cmsv6MtKhs7qaAiwlcp+Mgaxw==}
 
-  styled-jsx@5.1.6:
-    resolution: {integrity: sha512-qSVyDTeMotdvQYoHWLNGwRFJHC+i+ZvdBRYosOFgC+Wg1vx4frN2/RG/NA7SYqqvKNLf39P2LSRA2pu6n0XYZA==}
-    engines: {node: '>= 12.0.0'}
-    peerDependencies:
-      '@babel/core': '*'
-      babel-plugin-macros: '*'
-      react: '>= 16.8.0 || 17.x.x || ^18.0.0-0 || ^19.0.0-0'
-    peerDependenciesMeta:
-      '@babel/core':
-        optional: true
-      babel-plugin-macros:
-        optional: true
-
   tailwind-merge@3.7.0:
     resolution: {integrity: sha512-XPPUyAc+cvspz3lHTcR/QgPfW2A0lv/xQNIjX3HGhLR+Nq2lHaLq5MtTesHn8GUr3W3DguT2KT5x3NVgRtYwmA==}
 
@@ -3557,9 +2450,6 @@ packages:
     engines: {node: '>=14.17'}
     hasBin: true
 
-  undici-types@6.21.0:
-    resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
-
   undici-types@8.3.0:
     resolution: {integrity: sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ==}
 
@@ -3569,9 +2459,6 @@ packages:
   unist-util-is@6.0.1:
     resolution: {integrity: sha512-LsiILbtBETkDz8I9p1dQ0uyRUWuaQzd/cuEeS1hoRSyW5E5XGmTzlwY1OrNzzakGowI9Dr/I8HVaw4hTtnxy8g==}
 
-  unist-util-position-from-estree@2.0.0:
-    resolution: {integrity: sha512-KaFVRjoqLyF6YXCbVLNad/eS4+OfPQQn2yOd7zF/h5T/CSL2v8NpN6a5TPvtbXthAGw5nG+PuTtq+DdIZr+cRQ==}
-
   unist-util-position@5.0.0:
     resolution: {integrity: sha512-fucsC7HjXvkB5R3kTCO7kUjRdrS0BJt3M/FPxmHMBOm8JQi2BsHAHFsy27E0EolP8rp0NzXsJ+jNPyDWvOJZPA==}
 
@@ -3732,14 +2619,6 @@ packages:
   wrappy@1.0.2:
     resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
 
-  xml-js@1.6.11:
-    resolution: {integrity: sha512-7rVi2KMfwfWFl+GpPg6m80IVMWXLRjO+PxTq7V2CDhoGak0wzYzFgUY2m4XJ47OGdXd8eLE8EmwfAmdjw7lC1g==}
-    hasBin: true
-
-  xml-naming@0.3.0:
-    resolution: {integrity: sha512-ghig2TBE/H11aOVgmahA3MhimvkBr6JIYknH/Dhdk10nXwdbIqBJsbfMxpvFPG8bAw77gN29aQWvKpmVoPlvPQ==}
-    engines: {node: '>=16.0.0'}
-
   yaml@2.8.0:
     resolution: {integrity: sha512-4lLa/EcQCB0cJkyts+FpIRx5G/llPxfP6VQU5KByHEhLxY3IJCH0f0Hy1MHI8sClTvsIb8qwRJ6R/ZdlDJ/leQ==}
     engines: {node: '>= 14.6'}
@@ -3753,9 +2632,6 @@ packages:
   zod@3.25.76:
     resolution: {integrity: sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==}
 
-  zod@4.1.11:
-    resolution: {integrity: sha512-WPsqwxITS2tzx1bzhIKsEs19ABD5vmCVa4xBo2tq/SrV4RNZtfws1EnCWQXM6yh8bD08a1idvkB5MZSBiZsjwg==}
-
   zod@4.4.3:
     resolution: {integrity: sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==}
 
@@ -3764,8 +2640,6 @@ packages:
 
 snapshots:
 
-  '@alloc/quick-lru@5.3.0': {}
-
   '@anthropic-ai/claude-agent-sdk-darwin-arm64@0.3.269':
     optional: true
 
@@ -3812,12 +2686,6 @@ snapshots:
     optionalDependencies:
       zod: 4.4.3
 
-  '@apidevtools/json-schema-ref-parser@11.9.3':
-    dependencies:
-      '@jsdevtools/ono': 7.1.3
-      '@types/json-schema': 7.0.15
-      js-yaml: 4.3.2
-
   '@babel/runtime@7.29.7': {}
 
   '@base-ui/react@1.8.0(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
@@ -3843,164 +2711,81 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.3.0
 
-  '@emnapi/runtime@1.11.3':
-    dependencies:
-      tslib: 2.8.1
-    optional: true
-
-  '@esbuild/aix-ppc64@0.25.12':
-    optional: true
-
   '@esbuild/aix-ppc64@0.28.2':
     optional: true
 
-  '@esbuild/android-arm64@0.25.12':
-    optional: true
-
   '@esbuild/android-arm64@0.28.2':
     optional: true
 
-  '@esbuild/android-arm@0.25.12':
-    optional: true
-
   '@esbuild/android-arm@0.28.2':
     optional: true
 
-  '@esbuild/android-x64@0.25.12':
-    optional: true
-
   '@esbuild/android-x64@0.28.2':
     optional: true
 
-  '@esbuild/darwin-arm64@0.25.12':
-    optional: true
-
   '@esbuild/darwin-arm64@0.28.2':
     optional: true
 
-  '@esbuild/darwin-x64@0.25.12':
-    optional: true
-
   '@esbuild/darwin-x64@0.28.2':
     optional: true
 
-  '@esbuild/freebsd-arm64@0.25.12':
-    optional: true
-
   '@esbuild/freebsd-arm64@0.28.2':
     optional: true
 
-  '@esbuild/freebsd-x64@0.25.12':
-    optional: true
-
   '@esbuild/freebsd-x64@0.28.2':
     optional: true
 
-  '@esbuild/linux-arm64@0.25.12':
-    optional: true
-
   '@esbuild/linux-arm64@0.28.2':
     optional: true
 
-  '@esbuild/linux-arm@0.25.12':
-    optional: true
-
   '@esbuild/linux-arm@0.28.2':
     optional: true
 
-  '@esbuild/linux-ia32@0.25.12':
-    optional: true
-
   '@esbuild/linux-ia32@0.28.2':
     optional: true
 
-  '@esbuild/linux-loong64@0.25.12':
-    optional: true
-
   '@esbuild/linux-loong64@0.28.2':
     optional: true
 
-  '@esbuild/linux-mips64el@0.25.12':
-    optional: true
-
   '@esbuild/linux-mips64el@0.28.2':
     optional: true
 
-  '@esbuild/linux-ppc64@0.25.12':
-    optional: true
-
   '@esbuild/linux-ppc64@0.28.2':
     optional: true
 
-  '@esbuild/linux-riscv64@0.25.12':
-    optional: true
-
   '@esbuild/linux-riscv64@0.28.2':
     optional: true
 
-  '@esbuild/linux-s390x@0.25.12':
-    optional: true
-
   '@esbuild/linux-s390x@0.28.2':
     optional: true
 
-  '@esbuild/linux-x64@0.25.12':
-    optional: true
-
   '@esbuild/linux-x64@0.28.2':
     optional: true
 
-  '@esbuild/netbsd-arm64@0.25.12':
-    optional: true
-
   '@esbuild/netbsd-arm64@0.28.2':
     optional: true
 
-  '@esbuild/netbsd-x64@0.25.12':
-    optional: true
-
   '@esbuild/netbsd-x64@0.28.2':
     optional: true
 
-  '@esbuild/openbsd-arm64@0.25.12':
-    optional: true
-
   '@esbuild/openbsd-arm64@0.28.2':
     optional: true
 
-  '@esbuild/openbsd-x64@0.25.12':
-    optional: true
-
   '@esbuild/openbsd-x64@0.28.2':
     optional: true
 
-  '@esbuild/openharmony-arm64@0.25.12':
-    optional: true
-
   '@esbuild/openharmony-arm64@0.28.2':
     optional: true
 
-  '@esbuild/sunos-x64@0.25.12':
-    optional: true
-
   '@esbuild/sunos-x64@0.28.2':
     optional: true
 
-  '@esbuild/win32-arm64@0.25.12':
-    optional: true
-
   '@esbuild/win32-arm64@0.28.2':
     optional: true
 
-  '@esbuild/win32-ia32@0.25.12':
-    optional: true
-
   '@esbuild/win32-ia32@0.28.2':
     optional: true
 
-  '@esbuild/win32-x64@0.25.12':
-    optional: true
-
   '@esbuild/win32-x64@0.28.2':
     optional: true
 
@@ -4025,127 +2810,10 @@ snapshots:
 
   '@fontsource-variable/inter@5.3.0': {}
 
-  '@formatjs/intl-localematcher@0.6.2':
-    dependencies:
-      tslib: 2.8.1
-
-  '@fumari/json-schema-to-typescript@1.1.3':
-    dependencies:
-      '@apidevtools/json-schema-ref-parser': 11.9.3
-      js-yaml: 4.3.2
-      prettier: 3.9.9
-
   '@hono/node-server@2.1.1(hono@4.13.7)':
     dependencies:
       hono: 4.13.7
 
-  '@img/colour@1.1.0':
-    optional: true
-
-  '@img/sharp-darwin-arm64@0.35.5':
-    optionalDependencies:
-      '@img/sharp-libvips-darwin-arm64': 1.3.4
-    optional: true
-
-  '@img/sharp-darwin-x64@0.35.5':
-    optionalDependencies:
-      '@img/sharp-libvips-darwin-x64': 1.3.4
-    optional: true
-
-  '@img/sharp-freebsd-wasm32@0.35.5':
-    dependencies:
-      '@img/sharp-wasm32': 0.35.5
-    optional: true
-
-  '@img/sharp-libvips-darwin-arm64@1.3.4':
-    optional: true
-
-  '@img/sharp-libvips-darwin-x64@1.3.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-arm64@1.3.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-arm@1.3.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-ppc64@1.3.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-riscv64@1.3.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-s390x@1.3.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-x64@1.3.4':
-    optional: true
-
-  '@img/sharp-libvips-linuxmusl-arm64@1.3.4':
-    optional: true
-
-  '@img/sharp-libvips-linuxmusl-x64@1.3.4':
-    optional: true
-
-  '@img/sharp-linux-arm64@0.35.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-arm64': 1.3.4
-    optional: true
-
-  '@img/sharp-linux-arm@0.35.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-arm': 1.3.4
-    optional: true
-
-  '@img/sharp-linux-ppc64@0.35.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-ppc64': 1.3.4
-    optional: true
-
-  '@img/sharp-linux-riscv64@0.35.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-riscv64': 1.3.4
-    optional: true
-
-  '@img/sharp-linux-s390x@0.35.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-s390x': 1.3.4
-    optional: true
-
-  '@img/sharp-linux-x64@0.35.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-x64': 1.3.4
-    optional: true
-
-  '@img/sharp-linuxmusl-arm64@0.35.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-arm64': 1.3.4
-    optional: true
-
-  '@img/sharp-linuxmusl-x64@0.35.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-x64': 1.3.4
-    optional: true
-
-  '@img/sharp-wasm32@0.35.5':
-    dependencies:
-      '@emnapi/runtime': 1.11.3
-    optional: true
-
-  '@img/sharp-webcontainers-wasm32@0.35.5':
-    dependencies:
-      '@img/sharp-wasm32': 0.35.5
-    optional: true
-
-  '@img/sharp-win32-arm64@0.35.5':
-    optional: true
-
-  '@img/sharp-win32-ia32@0.35.5':
-    optional: true
-
-  '@img/sharp-win32-x64@0.35.5':
-    optional: true
-
   '@jridgewell/gen-mapping@0.3.13':
     dependencies:
       '@jridgewell/sourcemap-codec': 1.6.0
@@ -4165,38 +2833,6 @@ snapshots:
       '@jridgewell/resolve-uri': 3.1.2
       '@jridgewell/sourcemap-codec': 1.6.0
 
-  '@jsdevtools/ono@7.1.3': {}
-
-  '@mdx-js/mdx@3.1.1':
-    dependencies:
-      '@types/estree': 1.0.9
-      '@types/estree-jsx': 1.0.5
-      '@types/hast': 3.0.5
-      '@types/mdx': 2.0.14
-      acorn: 8.18.0
-      collapse-white-space: 2.1.0
-      devlop: 1.1.0
-      estree-util-is-identifier-name: 3.0.0
-      estree-util-scope: 1.0.1
-      estree-walker: 3.0.3
-      hast-util-to-jsx-runtime: 2.3.6
-      markdown-extensions: 2.0.0
-      recma-build-jsx: 1.0.0
-      recma-jsx: 1.0.1(acorn@8.18.0)
-      recma-stringify: 1.0.0
-      rehype-recma: 1.0.0
-      remark-mdx: 3.1.1
-      remark-parse: 11.0.0
-      remark-rehype: 11.1.2
-      source-map: 0.7.6
-      unified: 11.0.5
-      unist-util-position-from-estree: 2.0.0
-      unist-util-stringify-position: 4.0.0
-      unist-util-visit: 5.1.0
-      vfile: 6.0.3
-    transitivePeerDependencies:
-      - supports-color
-
   '@modelcontextprotocol/sdk@1.30.0(zod@3.25.76)':
     dependencies:
       '@hono/node-server': 2.1.1(hono@4.13.7)
@@ -4241,34 +2877,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@next/env@15.5.26': {}
-
-  '@next/swc-darwin-arm64@15.5.26':
-    optional: true
-
-  '@next/swc-darwin-x64@15.5.26':
-    optional: true
-
-  '@next/swc-linux-arm64-gnu@15.5.26':
-    optional: true
-
-  '@next/swc-linux-arm64-musl@15.5.26':
-    optional: true
-
-  '@next/swc-linux-x64-gnu@15.5.26':
-    optional: true
-
-  '@next/swc-linux-x64-musl@15.5.26':
-    optional: true
-
-  '@next/swc-win32-arm64-msvc@15.5.26':
-    optional: true
-
-  '@next/swc-win32-x64-msvc@15.5.26':
-    optional: true
-
-  '@nodable/entities@3.0.0': {}
-
   '@number-flow/react@0.6.2(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
     dependencies:
       esm-env: 1.2.2
@@ -4276,8 +2884,6 @@ snapshots:
       react: 19.3.0
       react-dom: 19.3.0(react@19.3.0)
 
-  '@orama/orama@3.1.18': {}
-
   '@oxc-project/types@0.150.0': {}
 
   '@playwright/test@1.63.0':
@@ -4288,29 +2894,10 @@ snapshots:
 
   '@radix-ui/number@1.1.2': {}
 
-  '@radix-ui/number@1.1.3': {}
-
   '@radix-ui/primitive@1.1.4': {}
 
   '@radix-ui/primitive@1.1.7': {}
 
-  '@radix-ui/react-accordion@1.2.20(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.7
-      '@radix-ui/react-collapsible': 1.1.20(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-collection': 1.1.15(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-direction': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-id': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-use-controllable-state': 1.2.6(@types/react@19.3.0)(react@19.3.0)
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-    optionalDependencies:
-      '@types/react': 19.3.0
-      '@types/react-dom': 19.3.0(@types/react@19.3.0)
-
   '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
     dependencies:
       '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
@@ -4329,22 +2916,6 @@ snapshots:
       '@types/react': 19.3.0
       '@types/react-dom': 19.3.0(@types/react@19.3.0)
 
-  '@radix-ui/react-collapsible@1.1.20(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.7
-      '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-id': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-presence': 1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-use-controllable-state': 1.2.6(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-    optionalDependencies:
-      '@types/react': 19.3.0
-      '@types/react-dom': 19.3.0(@types/react@19.3.0)
-
   '@radix-ui/react-collection@1.1.11(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.3.0)(react@19.3.0)
@@ -4357,18 +2928,6 @@ snapshots:
       '@types/react': 19.3.0
       '@types/react-dom': 19.3.0(@types/react@19.3.0)
 
-  '@radix-ui/react-collection@1.1.15(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
-    dependencies:
-      '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-slot': 1.3.3(@types/react@19.3.0)(react@19.3.0)
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-    optionalDependencies:
-      '@types/react': 19.3.0
-      '@types/react-dom': 19.3.0(@types/react@19.3.0)
-
   '@radix-ui/react-compose-refs@1.1.3(@types/react@19.3.0)(react@19.3.0)':
     dependencies:
       react: 19.3.0
@@ -4422,12 +2981,6 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.3.0
 
-  '@radix-ui/react-direction@1.1.4(@types/react@19.3.0)(react@19.3.0)':
-    dependencies:
-      react: 19.3.0
-    optionalDependencies:
-      '@types/react': 19.3.0
-
   '@radix-ui/react-dismissable-layer@1.1.14(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.4
@@ -4502,51 +3055,6 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.3.0
 
-  '@radix-ui/react-navigation-menu@1.2.22(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.7
-      '@radix-ui/react-collection': 1.1.15(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-direction': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-dismissable-layer': 1.1.19(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-id': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-presence': 1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-use-callback-ref': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-use-controllable-state': 1.2.6(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-use-previous': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-visually-hidden': 1.2.11(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-    optionalDependencies:
-      '@types/react': 19.3.0
-      '@types/react-dom': 19.3.0(@types/react@19.3.0)
-
-  '@radix-ui/react-popover@1.1.23(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.7
-      '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-dismissable-layer': 1.1.19(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-focus-guards': 1.1.6(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-focus-scope': 1.1.16(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-id': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-popper': 1.3.7(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-portal': 1.1.17(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-presence': 1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-slot': 1.3.3(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-use-controllable-state': 1.2.6(@types/react@19.3.0)(react@19.3.0)
-      aria-hidden: 1.2.6
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-      react-remove-scroll: 2.7.2(@types/react@19.3.0)(react@19.3.0)
-    optionalDependencies:
-      '@types/react': 19.3.0
-      '@types/react-dom': 19.3.0(@types/react@19.3.0)
-
   '@radix-ui/react-popper@1.3.2(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
     dependencies:
       '@floating-ui/react-dom': 2.1.9(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
@@ -4596,79 +3104,43 @@ snapshots:
   '@radix-ui/react-portal@1.1.17(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
     dependencies:
       '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-    optionalDependencies:
-      '@types/react': 19.3.0
-      '@types/react-dom': 19.3.0(@types/react@19.3.0)
-
-  '@radix-ui/react-presence@1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
-    dependencies:
-      '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-    optionalDependencies:
-      '@types/react': 19.3.0
-      '@types/react-dom': 19.3.0(@types/react@19.3.0)
-
-  '@radix-ui/react-presence@1.1.6(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
-    dependencies:
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.3.0)(react@19.3.0)
+      '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0)
       react: 19.3.0
       react-dom: 19.3.0(react@19.3.0)
     optionalDependencies:
       '@types/react': 19.3.0
       '@types/react-dom': 19.3.0(@types/react@19.3.0)
 
-  '@radix-ui/react-primitive@2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
+  '@radix-ui/react-presence@1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
     dependencies:
-      '@radix-ui/react-slot': 1.3.3(@types/react@19.3.0)(react@19.3.0)
+      '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0)
       react: 19.3.0
       react-dom: 19.3.0(react@19.3.0)
     optionalDependencies:
       '@types/react': 19.3.0
       '@types/react-dom': 19.3.0(@types/react@19.3.0)
 
-  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
+  '@radix-ui/react-presence@1.1.6(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
     dependencies:
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.3.0)(react@19.3.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.3.0)(react@19.3.0)
       react: 19.3.0
       react-dom: 19.3.0(react@19.3.0)
     optionalDependencies:
       '@types/react': 19.3.0
       '@types/react-dom': 19.3.0(@types/react@19.3.0)
 
-  '@radix-ui/react-roving-focus@1.1.19(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
+  '@radix-ui/react-primitive@2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
     dependencies:
-      '@radix-ui/primitive': 1.1.7
-      '@radix-ui/react-collection': 1.1.15(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-direction': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-id': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-use-callback-ref': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-use-controllable-state': 1.2.6(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-use-is-hydrated': 0.1.3(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0)
+      '@radix-ui/react-slot': 1.3.3(@types/react@19.3.0)(react@19.3.0)
       react: 19.3.0
       react-dom: 19.3.0(react@19.3.0)
     optionalDependencies:
       '@types/react': 19.3.0
       '@types/react-dom': 19.3.0(@types/react@19.3.0)
 
-  '@radix-ui/react-scroll-area@1.2.18(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
+  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
     dependencies:
-      '@radix-ui/number': 1.1.3
-      '@radix-ui/primitive': 1.1.7
-      '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-direction': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-presence': 1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-use-callback-ref': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.3.0)(react@19.3.0)
       react: 19.3.0
       react-dom: 19.3.0(react@19.3.0)
     optionalDependencies:
@@ -4705,36 +3177,6 @@ snapshots:
       '@types/react': 19.3.0
       '@types/react-dom': 19.3.0(@types/react@19.3.0)
 
-  '@radix-ui/react-select@2.3.7(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
-    dependencies:
-      '@radix-ui/number': 1.1.3
-      '@radix-ui/primitive': 1.1.7
-      '@radix-ui/react-collection': 1.1.15(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-direction': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-dismissable-layer': 1.1.19(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-focus-guards': 1.1.6(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-focus-scope': 1.1.16(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-id': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-popper': 1.3.7(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-portal': 1.1.17(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-presence': 1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-slot': 1.3.3(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-use-callback-ref': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-use-controllable-state': 1.2.6(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-use-previous': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-visually-hidden': 1.2.11(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      aria-hidden: 1.2.6
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-      react-remove-scroll: 2.7.2(@types/react@19.3.0)(react@19.3.0)
-    optionalDependencies:
-      '@types/react': 19.3.0
-      '@types/react-dom': 19.3.0(@types/react@19.3.0)
-
   '@radix-ui/react-slot@1.3.0(@types/react@19.3.0)(react@19.3.0)':
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.3.0)(react@19.3.0)
@@ -4749,22 +3191,6 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.3.0
 
-  '@radix-ui/react-tabs@1.1.21(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.7
-      '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-direction': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-id': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-presence': 1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-roving-focus': 1.1.19(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-use-controllable-state': 1.2.6(@types/react@19.3.0)(react@19.3.0)
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-    optionalDependencies:
-      '@types/react': 19.3.0
-      '@types/react-dom': 19.3.0(@types/react@19.3.0)
-
   '@radix-ui/react-tooltip@1.2.16(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.7
@@ -4829,12 +3255,6 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.3.0
 
-  '@radix-ui/react-use-is-hydrated@0.1.3(@types/react@19.3.0)(react@19.3.0)':
-    dependencies:
-      react: 19.3.0
-    optionalDependencies:
-      '@types/react': 19.3.0
-
   '@radix-ui/react-use-layout-effect@1.1.2(@types/react@19.3.0)(react@19.3.0)':
     dependencies:
       react: 19.3.0
@@ -4853,12 +3273,6 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.3.0
 
-  '@radix-ui/react-use-previous@1.1.4(@types/react@19.3.0)(react@19.3.0)':
-    dependencies:
-      react: 19.3.0
-    optionalDependencies:
-      '@types/react': 19.3.0
-
   '@radix-ui/react-use-rect@1.1.2(@types/react@19.3.0)(react@19.3.0)':
     dependencies:
       '@radix-ui/rect': 1.1.2
@@ -4956,87 +3370,6 @@ snapshots:
 
   '@rolldown/pluginutils@1.0.1': {}
 
-  '@scalar/helpers@0.0.11': {}
-
-  '@scalar/helpers@0.0.12': {}
-
-  '@scalar/json-magic@0.6.0':
-    dependencies:
-      '@scalar/helpers': 0.0.11
-      yaml: 2.8.0
-
-  '@scalar/json-magic@0.6.1':
-    dependencies:
-      '@scalar/helpers': 0.0.12
-      yaml: 2.8.0
-
-  '@scalar/openapi-parser@0.22.1':
-    dependencies:
-      '@scalar/json-magic': 0.6.0
-      '@scalar/openapi-types': 0.4.0
-      '@scalar/openapi-upgrader': 0.1.1
-      ajv: 8.20.0
-      ajv-draft-04: 1.0.0(ajv@8.20.0)
-      ajv-formats: 3.0.1(ajv@8.20.0)
-      jsonpointer: 5.0.1
-      leven: 4.1.0
-      yaml: 2.8.0
-
-  '@scalar/openapi-types@0.4.0':
-    dependencies:
-      zod: 4.1.11
-
-  '@scalar/openapi-upgrader@0.1.1':
-    dependencies:
-      '@scalar/openapi-types': 0.4.0
-
-  '@shikijs/core@3.23.0':
-    dependencies:
-      '@shikijs/types': 3.23.0
-      '@shikijs/vscode-textmate': 10.0.2
-      '@types/hast': 3.0.5
-      hast-util-to-html: 9.0.5
-
-  '@shikijs/engine-javascript@3.23.0':
-    dependencies:
-      '@shikijs/types': 3.23.0
-      '@shikijs/vscode-textmate': 10.0.2
-      oniguruma-to-es: 4.3.6
-
-  '@shikijs/engine-oniguruma@3.23.0':
-    dependencies:
-      '@shikijs/types': 3.23.0
-      '@shikijs/vscode-textmate': 10.0.2
-
-  '@shikijs/langs@3.23.0':
-    dependencies:
-      '@shikijs/types': 3.23.0
-
-  '@shikijs/rehype@3.23.0':
-    dependencies:
-      '@shikijs/types': 3.23.0
-      '@types/hast': 3.0.5
-      hast-util-to-string: 3.0.1
-      shiki: 3.23.0
-      unified: 11.0.5
-      unist-util-visit: 5.1.0
-
-  '@shikijs/themes@3.23.0':
-    dependencies:
-      '@shikijs/types': 3.23.0
-
-  '@shikijs/transformers@3.23.0':
-    dependencies:
-      '@shikijs/core': 3.23.0
-      '@shikijs/types': 3.23.0
-
-  '@shikijs/types@3.23.0':
-    dependencies:
-      '@shikijs/vscode-textmate': 10.0.2
-      '@types/hast': 3.0.5
-
-  '@shikijs/vscode-textmate@10.0.2': {}
-
   '@silvia-odwyer/photon-node@0.3.4': {}
 
   '@sinclair/typebox@0.34.52': {}
@@ -5045,10 +3378,6 @@ snapshots:
 
   '@standard-schema/spec@1.1.0': {}
 
-  '@swc/helpers@0.5.15':
-    dependencies:
-      tslib: 2.8.1
-
   '@tailwindcss/node@4.3.3':
     dependencies:
       '@jridgewell/remapping': 2.3.5
@@ -5110,14 +3439,6 @@ snapshots:
       '@tailwindcss/oxide-win32-arm64-msvc': 4.3.3
       '@tailwindcss/oxide-win32-x64-msvc': 4.3.3
 
-  '@tailwindcss/postcss@4.3.3':
-    dependencies:
-      '@alloc/quick-lru': 5.3.0
-      '@tailwindcss/node': 4.3.3
-      '@tailwindcss/oxide': 4.3.3
-      postcss: 8.5.28
-      tailwindcss: 4.3.3
-
   '@tailwindcss/typography@0.5.20(tailwindcss@4.3.3)':
     dependencies:
       postcss-selector-parser: 6.0.10
@@ -5166,20 +3487,12 @@ snapshots:
     dependencies:
       '@types/unist': 3.0.3
 
-  '@types/json-schema@7.0.15': {}
-
   '@types/mdast@4.0.4':
     dependencies:
       '@types/unist': 3.0.3
 
-  '@types/mdx@2.0.14': {}
-
   '@types/ms@2.1.0': {}
 
-  '@types/node@22.20.4':
-    dependencies:
-      undici-types: 6.21.0
-
   '@types/node@26.1.0':
     dependencies:
       undici-types: 8.3.0
@@ -5249,16 +3562,6 @@ snapshots:
       mime-types: 3.0.2
       negotiator: 1.1.0
 
-  acorn-jsx@5.3.2(acorn@8.18.0):
-    dependencies:
-      acorn: 8.18.0
-
-  acorn@8.18.0: {}
-
-  ajv-draft-04@1.0.0(ajv@8.20.0):
-    optionalDependencies:
-      ajv: 8.20.0
-
   ajv-formats@3.0.1(ajv@8.20.0):
     optionalDependencies:
       ajv: 8.20.0
@@ -5270,22 +3573,12 @@ snapshots:
       json-schema-traverse: 1.0.0
       require-from-string: 2.0.2
 
-  anynum@1.0.1: {}
-
-  argparse@1.0.10:
-    dependencies:
-      sprintf-js: 1.0.3
-
-  argparse@2.0.1: {}
-
   aria-hidden@1.2.6:
     dependencies:
       tslib: 2.8.1
 
   assertion-error@2.0.1: {}
 
-  astring@1.9.0: {}
-
   bail@2.0.2: {}
 
   balanced-match@4.0.4: {}
@@ -5320,8 +3613,6 @@ snapshots:
       call-bind-apply-helpers: 1.0.2
       get-intrinsic: 1.3.0
 
-  caniuse-lite@1.0.30001812: {}
-
   ccount@2.0.1: {}
 
   chai@6.2.2: {}
@@ -5336,24 +3627,14 @@ snapshots:
 
   character-reference-invalid@2.0.1: {}
 
-  chokidar@4.0.3:
-    dependencies:
-      readdirp: 4.1.2
-
   class-variance-authority@0.7.1:
     dependencies:
       clsx: 2.1.1
 
-  client-only@0.0.1: {}
-
   clsx@2.1.1: {}
 
-  collapse-white-space@2.1.0: {}
-
   comma-separated-tokens@2.0.3: {}
 
-  compute-scroll-into-view@3.1.1: {}
-
   content-disposition@1.1.0: {}
 
   content-type@1.0.5: {}
@@ -5428,49 +3709,6 @@ snapshots:
     dependencies:
       es-errors: 1.3.0
 
-  esast-util-from-estree@2.0.0:
-    dependencies:
-      '@types/estree-jsx': 1.0.5
-      devlop: 1.1.0
-      estree-util-visit: 2.0.0
-      unist-util-position-from-estree: 2.0.0
-
-  esast-util-from-js@2.0.1:
-    dependencies:
-      '@types/estree-jsx': 1.0.5
-      acorn: 8.18.0
-      esast-util-from-estree: 2.0.0
-      vfile-message: 4.0.3
-
-  esbuild@0.25.12:
-    optionalDependencies:
-      '@esbuild/aix-ppc64': 0.25.12
-      '@esbuild/android-arm': 0.25.12
-      '@esbuild/android-arm64': 0.25.12
-      '@esbuild/android-x64': 0.25.12
-      '@esbuild/darwin-arm64': 0.25.12
-      '@esbuild/darwin-x64': 0.25.12
-      '@esbuild/freebsd-arm64': 0.25.12
-      '@esbuild/freebsd-x64': 0.25.12
-      '@esbuild/linux-arm': 0.25.12
-      '@esbuild/linux-arm64': 0.25.12
-      '@esbuild/linux-ia32': 0.25.12
-      '@esbuild/linux-loong64': 0.25.12
-      '@esbuild/linux-mips64el': 0.25.12
-      '@esbuild/linux-ppc64': 0.25.12
-      '@esbuild/linux-riscv64': 0.25.12
-      '@esbuild/linux-s390x': 0.25.12
-      '@esbuild/linux-x64': 0.25.12
-      '@esbuild/netbsd-arm64': 0.25.12
-      '@esbuild/netbsd-x64': 0.25.12
-      '@esbuild/openbsd-arm64': 0.25.12
-      '@esbuild/openbsd-x64': 0.25.12
-      '@esbuild/openharmony-arm64': 0.25.12
-      '@esbuild/sunos-x64': 0.25.12
-      '@esbuild/win32-arm64': 0.25.12
-      '@esbuild/win32-ia32': 0.25.12
-      '@esbuild/win32-x64': 0.25.12
-
   esbuild@0.28.2:
     optionalDependencies:
       '@esbuild/aix-ppc64': 0.28.2
@@ -5506,41 +3744,8 @@ snapshots:
 
   esm-env@1.2.2: {}
 
-  esprima@4.0.1: {}
-
-  estree-util-attach-comments@3.0.0:
-    dependencies:
-      '@types/estree': 1.0.9
-
-  estree-util-build-jsx@3.0.1:
-    dependencies:
-      '@types/estree-jsx': 1.0.5
-      devlop: 1.1.0
-      estree-util-is-identifier-name: 3.0.0
-      estree-walker: 3.0.3
-
   estree-util-is-identifier-name@3.0.0: {}
 
-  estree-util-scope@1.0.1:
-    dependencies:
-      '@types/estree': 1.0.9
-      devlop: 1.1.0
-
-  estree-util-to-js@2.0.0:
-    dependencies:
-      '@types/estree-jsx': 1.0.5
-      astring: 1.9.0
-      source-map: 0.7.6
-
-  estree-util-value-to-estree@3.5.0:
-    dependencies:
-      '@types/estree': 1.0.9
-
-  estree-util-visit@2.0.0:
-    dependencies:
-      '@types/estree-jsx': 1.0.5
-      '@types/unist': 3.0.3
-
   estree-walker@3.0.3:
     dependencies:
       '@types/estree': 1.0.9
@@ -5596,10 +3801,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  extend-shallow@2.0.1:
-    dependencies:
-      is-extendable: 0.1.1
-
   extend@3.0.2: {}
 
   fast-deep-equal@3.1.3: {}
@@ -5608,186 +3809,38 @@ snapshots:
 
   fast-uri@3.1.7: {}
 
-  fast-xml-builder@1.3.1:
-    dependencies:
-      path-expression-matcher: 1.6.2
-      xml-naming: 0.3.0
-
-  fast-xml-parser@5.11.1:
-    dependencies:
-      '@nodable/entities': 3.0.0
-      fast-xml-builder: 1.3.1
-      is-unsafe: 2.0.2
-      path-expression-matcher: 1.6.2
-      strnum: 2.4.2
-      xml-naming: 0.3.0
-
-  fdir@6.5.0(picomatch@4.0.7):
-    optionalDependencies:
-      picomatch: 4.0.7
-
-  fflate@0.8.3: {}
-
-  finalhandler@2.1.1:
-    dependencies:
-      debug: 4.4.3
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      on-finished: 2.4.1
-      parseurl: 1.3.3
-      statuses: 2.0.2
-    transitivePeerDependencies:
-      - supports-color
-
-  foreach@2.0.6: {}
-
-  forwarded@0.2.0: {}
-
-  framer-motion@13.4.3(react-dom@19.3.0(react@19.3.0))(react@19.3.0):
-    dependencies:
-      motion-dom: 13.4.2
-      motion-utils: 13.3.0
-      tslib: 2.8.1
-    optionalDependencies:
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-
-  fresh@2.0.0: {}
-
-  fsevents@2.3.3:
-    optional: true
-
-  fumadocs-core@15.8.5(@types/react@19.3.0)(lucide-react@1.47.0(react@19.3.0))(next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(react-dom@19.3.0(react@19.3.0))(react@19.3.0):
-    dependencies:
-      '@formatjs/intl-localematcher': 0.6.2
-      '@orama/orama': 3.1.18
-      '@shikijs/rehype': 3.23.0
-      '@shikijs/transformers': 3.23.0
-      github-slugger: 2.0.0
-      hast-util-to-estree: 3.1.3
-      hast-util-to-jsx-runtime: 2.3.6
-      image-size: 2.0.4
-      negotiator: 1.1.0
-      npm-to-yarn: 3.2.0
-      path-to-regexp: 8.4.2
-      react-remove-scroll: 2.7.2(@types/react@19.3.0)(react@19.3.0)
-      remark: 15.0.1
-      remark-gfm: 4.0.1
-      remark-rehype: 11.1.2
-      scroll-into-view-if-needed: 3.1.0
-      shiki: 3.23.0
-      unist-util-visit: 5.1.0
-    optionalDependencies:
-      '@types/react': 19.3.0
-      lucide-react: 1.47.0(react@19.3.0)
-      next: 15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-    transitivePeerDependencies:
-      - supports-color
-
-  fumadocs-mdx@12.0.3(fumadocs-core@15.8.5(@types/react@19.3.0)(lucide-react@1.47.0(react@19.3.0))(next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(react@19.3.0):
-    dependencies:
-      '@mdx-js/mdx': 3.1.1
-      '@standard-schema/spec': 1.1.0
-      chokidar: 4.0.3
-      esbuild: 0.25.12
-      estree-util-value-to-estree: 3.5.0
-      fumadocs-core: 15.8.5(@types/react@19.3.0)(lucide-react@1.47.0(react@19.3.0))(next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      js-yaml: 4.3.2
-      lru-cache: 11.5.3
-      mdast-util-to-markdown: 2.1.2
-      picocolors: 1.1.1
-      remark-mdx: 3.1.1
-      remark-parse: 11.0.0
-      tinyexec: 1.3.1
-      tinyglobby: 0.2.17
-      unified: 11.0.5
-      unist-util-visit: 5.1.0
-      zod: 4.4.3
-    optionalDependencies:
-      next: 15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      react: 19.3.0
-    transitivePeerDependencies:
-      - supports-color
-
-  fumadocs-openapi@9.5.1(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(lucide-react@1.47.0(react@19.3.0))(next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(react-dom@19.3.0(react@19.3.0))(react@19.3.0)(tailwindcss@4.3.3):
-    dependencies:
-      '@fumari/json-schema-to-typescript': 1.1.3
-      '@radix-ui/react-accordion': 1.2.20(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-dialog': 1.1.23(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-select': 2.3.7(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-slot': 1.3.3(@types/react@19.3.0)(react@19.3.0)
-      '@scalar/json-magic': 0.6.1
-      '@scalar/openapi-parser': 0.22.1
-      ajv: 8.20.0
-      class-variance-authority: 0.7.1
-      fumadocs-core: 15.8.5(@types/react@19.3.0)(lucide-react@1.47.0(react@19.3.0))(next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      fumadocs-ui: 15.8.5(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(lucide-react@1.47.0(react@19.3.0))(next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(react-dom@19.3.0(react@19.3.0))(react@19.3.0)(tailwindcss@4.3.3)
-      github-slugger: 2.0.0
-      gray-matter: 4.0.3
-      hast-util-to-jsx-runtime: 2.3.6
-      js-yaml: 4.3.2
-      next-themes: 0.4.6(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      openapi-sampler: 1.7.6
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-      react-hook-form: 7.89.0(@types/react@19.3.0)(react@19.3.0)
-      remark: 15.0.1
-      remark-rehype: 11.1.2
-      tinyglobby: 0.2.17
-      xml-js: 1.6.11
+  fdir@6.5.0(picomatch@4.0.7):
     optionalDependencies:
-      '@types/react': 19.3.0
+      picomatch: 4.0.7
+
+  fflate@0.8.3: {}
+
+  finalhandler@2.1.1:
+    dependencies:
+      debug: 4.4.3
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      on-finished: 2.4.1
+      parseurl: 1.3.3
+      statuses: 2.0.2
     transitivePeerDependencies:
-      - '@mixedbread/sdk'
-      - '@oramacloud/client'
-      - '@tanstack/react-router'
-      - '@types/react-dom'
-      - algoliasearch
-      - lucide-react
-      - next
-      - react-router
       - supports-color
-      - tailwindcss
-      - waku
 
-  fumadocs-ui@15.8.5(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(lucide-react@1.47.0(react@19.3.0))(next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(react-dom@19.3.0(react@19.3.0))(react@19.3.0)(tailwindcss@4.3.3):
+  forwarded@0.2.0: {}
+
+  framer-motion@13.4.3(react-dom@19.3.0(react@19.3.0))(react@19.3.0):
     dependencies:
-      '@radix-ui/react-accordion': 1.2.20(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-collapsible': 1.1.20(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-dialog': 1.1.23(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-direction': 1.1.4(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-navigation-menu': 1.2.22(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-popover': 1.1.23(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-presence': 1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-scroll-area': 1.2.18(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      '@radix-ui/react-slot': 1.3.3(@types/react@19.3.0)(react@19.3.0)
-      '@radix-ui/react-tabs': 1.1.21(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      class-variance-authority: 0.7.1
-      fumadocs-core: 15.8.5(@types/react@19.3.0)(lucide-react@1.47.0(react@19.3.0))(next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0))(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      lodash.merge: 4.6.2
-      next-themes: 0.4.6(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      postcss-selector-parser: 7.1.6
+      motion-dom: 13.4.2
+      motion-utils: 13.3.0
+      tslib: 2.8.1
+    optionalDependencies:
       react: 19.3.0
       react-dom: 19.3.0(react@19.3.0)
-      react-medium-image-zoom: 5.4.9(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      scroll-into-view-if-needed: 3.1.0
-      tailwind-merge: 3.7.0
-    optionalDependencies:
-      '@types/react': 19.3.0
-      next: 15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)
-      tailwindcss: 4.3.3
-    transitivePeerDependencies:
-      - '@mixedbread/sdk'
-      - '@oramacloud/client'
-      - '@tanstack/react-router'
-      - '@types/react-dom'
-      - algoliasearch
-      - lucide-react
-      - react-router
-      - supports-color
-      - waku
+
+  fresh@2.0.0: {}
+
+  fsevents@2.3.3:
+    optional: true
 
   function-bind@1.1.2: {}
 
@@ -5813,60 +3866,16 @@ snapshots:
       dunder-proto: 1.0.1
       es-object-atoms: 1.1.2
 
-  github-slugger@2.0.0: {}
-
   gopd@1.2.0: {}
 
   graceful-fs@4.2.11: {}
 
-  gray-matter@4.0.3:
-    dependencies:
-      js-yaml: 3.15.2
-      kind-of: 6.0.3
-      section-matter: 1.0.0
-      strip-bom-string: 1.0.0
-
   has-symbols@1.1.0: {}
 
   hasown@2.0.4:
     dependencies:
       function-bind: 1.1.2
 
-  hast-util-to-estree@3.1.3:
-    dependencies:
-      '@types/estree': 1.0.9
-      '@types/estree-jsx': 1.0.5
-      '@types/hast': 3.0.5
-      comma-separated-tokens: 2.0.3
-      devlop: 1.1.0
-      estree-util-attach-comments: 3.0.0
-      estree-util-is-identifier-name: 3.0.0
-      hast-util-whitespace: 3.0.0
-      mdast-util-mdx-expression: 2.0.1
-      mdast-util-mdx-jsx: 3.2.0
-      mdast-util-mdxjs-esm: 2.0.1
-      property-information: 7.2.0
-      space-separated-tokens: 2.0.2
-      style-to-js: 1.1.21
-      unist-util-position: 5.0.0
-      zwitch: 2.0.4
-    transitivePeerDependencies:
-      - supports-color
-
-  hast-util-to-html@9.0.5:
-    dependencies:
-      '@types/hast': 3.0.5
-      '@types/unist': 3.0.3
-      ccount: 2.0.1
-      comma-separated-tokens: 2.0.3
-      hast-util-whitespace: 3.0.0
-      html-void-elements: 3.0.0
-      mdast-util-to-hast: 13.2.1
-      property-information: 7.2.0
-      space-separated-tokens: 2.0.2
-      stringify-entities: 4.0.4
-      zwitch: 2.0.4
-
   hast-util-to-jsx-runtime@2.3.6:
     dependencies:
       '@types/estree': 1.0.9
@@ -5887,10 +3896,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  hast-util-to-string@3.0.1:
-    dependencies:
-      '@types/hast': 3.0.5
-
   hast-util-whitespace@3.0.0:
     dependencies:
       '@types/hast': 3.0.5
@@ -5903,8 +3908,6 @@ snapshots:
 
   html-url-attributes@3.0.1: {}
 
-  html-void-elements@3.0.0: {}
-
   http-errors@2.0.1:
     dependencies:
       depd: 2.0.0
@@ -5921,8 +3924,6 @@ snapshots:
     dependencies:
       safer-buffer: 2.1.2
 
-  image-size@2.0.4: {}
-
   inherits@2.0.4: {}
 
   inline-style-parser@0.2.7: {}
@@ -5940,35 +3941,18 @@ snapshots:
 
   is-decimal@2.0.1: {}
 
-  is-extendable@0.1.1: {}
-
   is-hexadecimal@2.0.1: {}
 
   is-plain-obj@4.1.0: {}
 
   is-promise@4.0.0: {}
 
-  is-unsafe@2.0.2: {}
-
   isexe@2.0.0: {}
 
   jiti@2.7.0: {}
 
   jose@6.2.12: {}
 
-  js-yaml@3.15.2:
-    dependencies:
-      argparse: 1.0.10
-      esprima: 4.0.1
-
-  js-yaml@4.3.2:
-    dependencies:
-      argparse: 2.0.1
-
-  json-pointer@0.6.2:
-    dependencies:
-      foreach: 2.0.6
-
   json-schema-to-ts@3.1.1:
     dependencies:
       '@babel/runtime': 7.29.7
@@ -5978,12 +3962,6 @@ snapshots:
 
   json-schema-typed@8.0.2: {}
 
-  jsonpointer@5.0.1: {}
-
-  kind-of@6.0.3: {}
-
-  leven@4.1.0: {}
-
   lightningcss-android-arm64@1.32.0:
     optional: true
 
@@ -6082,12 +4060,8 @@ snapshots:
       lightningcss-win32-arm64-msvc: 1.33.0
       lightningcss-win32-x64-msvc: 1.33.0
 
-  lodash.merge@4.6.2: {}
-
   longest-streak@3.1.0: {}
 
-  lru-cache@11.5.3: {}
-
   lucide-react@1.47.0(react@19.3.0):
     dependencies:
       react: 19.3.0
@@ -6096,8 +4070,6 @@ snapshots:
     dependencies:
       '@jridgewell/sourcemap-codec': 1.6.0
 
-  markdown-extensions@2.0.0: {}
-
   markdown-table@3.0.4: {}
 
   marked@18.0.12: {}
@@ -6213,16 +4185,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  mdast-util-mdx@3.0.0:
-    dependencies:
-      mdast-util-from-markdown: 2.0.3
-      mdast-util-mdx-expression: 2.0.1
-      mdast-util-mdx-jsx: 3.2.0
-      mdast-util-mdxjs-esm: 2.0.1
-      mdast-util-to-markdown: 2.1.2
-    transitivePeerDependencies:
-      - supports-color
-
   mdast-util-mdxjs-esm@2.0.1:
     dependencies:
       '@types/estree-jsx': 1.0.5
@@ -6348,57 +4310,6 @@ snapshots:
       micromark-util-combine-extensions: 2.0.1
       micromark-util-types: 2.0.2
 
-  micromark-extension-mdx-expression@3.0.1:
-    dependencies:
-      '@types/estree': 1.0.9
-      devlop: 1.1.0
-      micromark-factory-mdx-expression: 2.0.3
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-events-to-acorn: 2.0.3
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-extension-mdx-jsx@3.0.2:
-    dependencies:
-      '@types/estree': 1.0.9
-      devlop: 1.1.0
-      estree-util-is-identifier-name: 3.0.0
-      micromark-factory-mdx-expression: 2.0.3
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-events-to-acorn: 2.0.3
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-      vfile-message: 4.0.3
-
-  micromark-extension-mdx-md@2.0.0:
-    dependencies:
-      micromark-util-types: 2.0.2
-
-  micromark-extension-mdxjs-esm@3.0.0:
-    dependencies:
-      '@types/estree': 1.0.9
-      devlop: 1.1.0
-      micromark-core-commonmark: 2.0.3
-      micromark-util-character: 2.1.1
-      micromark-util-events-to-acorn: 2.0.3
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-      unist-util-position-from-estree: 2.0.0
-      vfile-message: 4.0.3
-
-  micromark-extension-mdxjs@3.0.0:
-    dependencies:
-      acorn: 8.18.0
-      acorn-jsx: 5.3.2(acorn@8.18.0)
-      micromark-extension-mdx-expression: 3.0.1
-      micromark-extension-mdx-jsx: 3.0.2
-      micromark-extension-mdx-md: 2.0.0
-      micromark-extension-mdxjs-esm: 3.0.0
-      micromark-util-combine-extensions: 2.0.1
-      micromark-util-types: 2.0.2
-
   micromark-factory-destination@2.0.1:
     dependencies:
       micromark-util-character: 2.1.1
@@ -6412,18 +4323,6 @@ snapshots:
       micromark-util-symbol: 2.0.1
       micromark-util-types: 2.0.2
 
-  micromark-factory-mdx-expression@2.0.3:
-    dependencies:
-      '@types/estree': 1.0.9
-      devlop: 1.1.0
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-events-to-acorn: 2.0.3
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-      unist-util-position-from-estree: 2.0.0
-      vfile-message: 4.0.3
-
   micromark-factory-space@2.0.1:
     dependencies:
       micromark-util-character: 2.1.1
@@ -6476,16 +4375,6 @@ snapshots:
 
   micromark-util-encode@2.0.1: {}
 
-  micromark-util-events-to-acorn@2.0.3:
-    dependencies:
-      '@types/estree': 1.0.9
-      '@types/unist': 3.0.3
-      devlop: 1.1.0
-      estree-util-visit: 2.0.0
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-      vfile-message: 4.0.3
-
   micromark-util-html-tag-name@2.0.1: {}
 
   micromark-util-normalize-identifier@2.0.1:
@@ -6567,40 +4456,8 @@ snapshots:
     dependencies:
       content-type: 2.1.0
 
-  next-themes@0.4.6(react-dom@19.3.0(react@19.3.0))(react@19.3.0):
-    dependencies:
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-
-  next@15.5.26(@playwright/test@1.63.0)(@types/node@22.20.4)(react-dom@19.3.0(react@19.3.0))(react@19.3.0):
-    dependencies:
-      '@next/env': 15.5.26
-      '@swc/helpers': 0.5.15
-      caniuse-lite: 1.0.30001812
-      postcss: 8.4.31
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-      styled-jsx: 5.1.6(react@19.3.0)
-    optionalDependencies:
-      '@next/swc-darwin-arm64': 15.5.26
-      '@next/swc-darwin-x64': 15.5.26
-      '@next/swc-linux-arm64-gnu': 15.5.26
-      '@next/swc-linux-arm64-musl': 15.5.26
-      '@next/swc-linux-x64-gnu': 15.5.26
-      '@next/swc-linux-x64-musl': 15.5.26
-      '@next/swc-win32-arm64-msvc': 15.5.26
-      '@next/swc-win32-x64-msvc': 15.5.26
-      '@playwright/test': 1.63.0
-      sharp: 0.35.5(@types/node@22.20.4)
-    transitivePeerDependencies:
-      - '@babel/core'
-      - '@types/node'
-      - babel-plugin-macros
-
   node-forge@1.4.0: {}
 
-  npm-to-yarn@3.2.0: {}
-
   number-flow@0.6.2:
     dependencies:
       esm-env: 1.2.2
@@ -6619,20 +4476,6 @@ snapshots:
     dependencies:
       wrappy: 1.0.2
 
-  oniguruma-parser@0.12.2: {}
-
-  oniguruma-to-es@4.3.6:
-    dependencies:
-      oniguruma-parser: 0.12.2
-      regex: 6.1.0
-      regex-recursion: 6.0.2
-
-  openapi-sampler@1.7.6:
-    dependencies:
-      '@types/json-schema': 7.0.15
-      fast-xml-parser: 5.11.1
-      json-pointer: 0.6.2
-
   parse-entities@4.0.2:
     dependencies:
       '@types/unist': 2.0.11
@@ -6645,8 +4488,6 @@ snapshots:
 
   parseurl@1.3.3: {}
 
-  path-expression-matcher@1.6.2: {}
-
   path-key@3.1.1: {}
 
   path-to-regexp@8.4.2: {}
@@ -6670,25 +4511,12 @@ snapshots:
       cssesc: 3.0.0
       util-deprecate: 1.0.2
 
-  postcss-selector-parser@7.1.6:
-    dependencies:
-      cssesc: 3.0.0
-      util-deprecate: 1.0.2
-
-  postcss@8.4.31:
-    dependencies:
-      nanoid: 3.3.19
-      picocolors: 1.1.1
-      source-map-js: 1.2.1
-
   postcss@8.5.28:
     dependencies:
       nanoid: 3.3.19
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
-  prettier@3.9.9: {}
-
   property-information@7.2.0: {}
 
   proxy-addr@2.0.7:
@@ -6715,12 +4543,6 @@ snapshots:
       react: 19.3.0
       scheduler: 0.28.0
 
-  react-hook-form@7.89.0(@types/react@19.3.0)(react@19.3.0):
-    dependencies:
-      react: 19.3.0
-    optionalDependencies:
-      '@types/react': 19.3.0
-
   react-i18next@17.0.15(i18next@26.4.2(typescript@5.9.3))(react-dom@19.3.0(react@19.3.0))(react@19.3.0)(typescript@5.9.3):
     dependencies:
       '@babel/runtime': 7.29.7
@@ -6750,11 +4572,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  react-medium-image-zoom@5.4.9(react-dom@19.3.0(react@19.3.0))(react@19.3.0):
-    dependencies:
-      react: 19.3.0
-      react-dom: 19.3.0(react@19.3.0)
-
   react-remove-scroll-bar@2.3.8(@types/react@19.3.0)(react@19.3.0):
     dependencies:
       react: 19.3.0
@@ -6784,55 +4601,6 @@ snapshots:
 
   react@19.3.0: {}
 
-  readdirp@4.1.2: {}
-
-  recma-build-jsx@1.0.0:
-    dependencies:
-      '@types/estree': 1.0.9
-      estree-util-build-jsx: 3.0.1
-      vfile: 6.0.3
-
-  recma-jsx@1.0.1(acorn@8.18.0):
-    dependencies:
-      acorn: 8.18.0
-      acorn-jsx: 5.3.2(acorn@8.18.0)
-      estree-util-to-js: 2.0.0
-      recma-parse: 1.0.0
-      recma-stringify: 1.0.0
-      unified: 11.0.5
-
-  recma-parse@1.0.0:
-    dependencies:
-      '@types/estree': 1.0.9
-      esast-util-from-js: 2.0.1
-      unified: 11.0.5
-      vfile: 6.0.3
-
-  recma-stringify@1.0.0:
-    dependencies:
-      '@types/estree': 1.0.9
-      estree-util-to-js: 2.0.0
-      unified: 11.0.5
-      vfile: 6.0.3
-
-  regex-recursion@6.0.2:
-    dependencies:
-      regex-utilities: 2.3.0
-
-  regex-utilities@2.3.0: {}
-
-  regex@6.1.0:
-    dependencies:
-      regex-utilities: 2.3.0
-
-  rehype-recma@1.0.0:
-    dependencies:
-      '@types/estree': 1.0.9
-      '@types/hast': 3.0.5
-      hast-util-to-estree: 3.1.3
-    transitivePeerDependencies:
-      - supports-color
-
   remark-gfm@4.0.1:
     dependencies:
       '@types/mdast': 4.0.4
@@ -6844,13 +4612,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  remark-mdx@3.1.1:
-    dependencies:
-      mdast-util-mdx: 3.0.0
-      micromark-extension-mdxjs: 3.0.0
-    transitivePeerDependencies:
-      - supports-color
-
   remark-parse@11.0.0:
     dependencies:
       '@types/mdast': 4.0.4
@@ -6874,15 +4635,6 @@ snapshots:
       mdast-util-to-markdown: 2.1.2
       unified: 11.0.5
 
-  remark@15.0.1:
-    dependencies:
-      '@types/mdast': 4.0.4
-      remark-parse: 11.0.0
-      remark-stringify: 11.0.0
-      unified: 11.0.5
-    transitivePeerDependencies:
-      - supports-color
-
   require-from-string@2.0.2: {}
 
   reselect@5.3.0: {}
@@ -6920,22 +4672,8 @@ snapshots:
 
   safer-buffer@2.1.2: {}
 
-  sax@1.6.1: {}
-
   scheduler@0.28.0: {}
 
-  scroll-into-view-if-needed@3.1.0:
-    dependencies:
-      compute-scroll-into-view: 3.1.1
-
-  section-matter@1.0.0:
-    dependencies:
-      extend-shallow: 2.0.1
-      kind-of: 6.0.3
-
-  semver@7.8.5:
-    optional: true
-
   send@1.2.1:
     dependencies:
       debug: 4.4.3
@@ -6965,57 +4703,12 @@ snapshots:
 
   shadow-plugin@2.1.1: {}
 
-  sharp@0.35.5(@types/node@22.20.4):
-    dependencies:
-      '@img/colour': 1.1.0
-      detect-libc: 2.1.2
-      semver: 7.8.5
-    optionalDependencies:
-      '@img/sharp-darwin-arm64': 0.35.5
-      '@img/sharp-darwin-x64': 0.35.5
-      '@img/sharp-freebsd-wasm32': 0.35.5
-      '@img/sharp-libvips-darwin-arm64': 1.3.4
-      '@img/sharp-libvips-darwin-x64': 1.3.4
-      '@img/sharp-libvips-linux-arm': 1.3.4
-      '@img/sharp-libvips-linux-arm64': 1.3.4
-      '@img/sharp-libvips-linux-ppc64': 1.3.4
-      '@img/sharp-libvips-linux-riscv64': 1.3.4
-      '@img/sharp-libvips-linux-s390x': 1.3.4
-      '@img/sharp-libvips-linux-x64': 1.3.4
-      '@img/sharp-libvips-linuxmusl-arm64': 1.3.4
-      '@img/sharp-libvips-linuxmusl-x64': 1.3.4
-      '@img/sharp-linux-arm': 0.35.5
-      '@img/sharp-linux-arm64': 0.35.5
-      '@img/sharp-linux-ppc64': 0.35.5
-      '@img/sharp-linux-riscv64': 0.35.5
-      '@img/sharp-linux-s390x': 0.35.5
-      '@img/sharp-linux-x64': 0.35.5
-      '@img/sharp-linuxmusl-arm64': 0.35.5
-      '@img/sharp-linuxmusl-x64': 0.35.5
-      '@img/sharp-webcontainers-wasm32': 0.35.5
-      '@img/sharp-win32-arm64': 0.35.5
-      '@img/sharp-win32-ia32': 0.35.5
-      '@img/sharp-win32-x64': 0.35.5
-      '@types/node': 22.20.4
-    optional: true
-
   shebang-command@2.0.0:
     dependencies:
       shebang-regex: 3.0.0
 
   shebang-regex@3.0.0: {}
 
-  shiki@3.23.0:
-    dependencies:
-      '@shikijs/core': 3.23.0
-      '@shikijs/engine-javascript': 3.23.0
-      '@shikijs/engine-oniguruma': 3.23.0
-      '@shikijs/langs': 3.23.0
-      '@shikijs/themes': 3.23.0
-      '@shikijs/types': 3.23.0
-      '@shikijs/vscode-textmate': 10.0.2
-      '@types/hast': 3.0.5
-
   side-channel-list@1.0.1:
     dependencies:
       es-errors: 1.3.0
@@ -7048,12 +4741,8 @@ snapshots:
 
   source-map-js@1.2.1: {}
 
-  source-map@0.7.6: {}
-
   space-separated-tokens@2.0.2: {}
 
-  sprintf-js@1.0.3: {}
-
   stackback@0.0.2: {}
 
   standardwebhooks@1.1.1:
@@ -7070,12 +4759,6 @@ snapshots:
       character-entities-html4: 2.1.0
       character-entities-legacy: 3.0.0
 
-  strip-bom-string@1.0.0: {}
-
-  strnum@2.4.2:
-    dependencies:
-      anynum: 1.0.1
-
   style-to-js@1.1.21:
     dependencies:
       style-to-object: 1.0.14
@@ -7084,11 +4767,6 @@ snapshots:
     dependencies:
       inline-style-parser: 0.2.7
 
-  styled-jsx@5.1.6(react@19.3.0):
-    dependencies:
-      client-only: 0.0.1
-      react: 19.3.0
-
   tailwind-merge@3.7.0: {}
 
   tailwindcss@4.3.3: {}
@@ -7126,8 +4804,6 @@ snapshots:
 
   typescript@5.9.3: {}
 
-  undici-types@6.21.0: {}
-
   undici-types@8.3.0: {}
 
   unified@11.0.5:
@@ -7144,10 +4820,6 @@ snapshots:
     dependencies:
       '@types/unist': 3.0.3
 
-  unist-util-position-from-estree@2.0.0:
-    dependencies:
-      '@types/unist': 3.0.3
-
   unist-util-position@5.0.0:
     dependencies:
       '@types/unist': 3.0.3
@@ -7256,13 +4928,8 @@ snapshots:
 
   wrappy@1.0.2: {}
 
-  xml-js@1.6.11:
-    dependencies:
-      sax: 1.6.1
-
-  xml-naming@0.3.0: {}
-
-  yaml@2.8.0: {}
+  yaml@2.8.0:
+    optional: true
 
   zod-to-json-schema@3.25.2(zod@3.25.76):
     dependencies:
@@ -7274,8 +4941,6 @@ snapshots:
 
   zod@3.25.76: {}
 
-  zod@4.1.11: {}
-
   zod@4.4.3: {}
 
   zwitch@2.0.4: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 705ed34ac..37a9f6de5 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -1,5 +1,4 @@
 packages:
   - "apps/web"
-  - "apps/docs"
   - "packages/*"
   - "example/parsar"
diff --git a/scripts/build-core-distribution.sh b/scripts/build-core-distribution.sh
index eac56fef2..959a2b3b0 100755
--- a/scripts/build-core-distribution.sh
+++ b/scripts/build-core-distribution.sh
@@ -111,7 +111,6 @@ python3 scripts/core-distribution-manifest.py docs . "$bundle" "$revision"
 mkdir -p "$bundle/runtime"
 cp services/core/deploy/codex/seccomp.json "$bundle/runtime/"
 cp LICENSE "$bundle/"
-cp -R site "$bundle/site"
 
 OAC_DEV_BUILD_REVISION="$revision" OAC_DEV_CORE_BUILD_DIR="$stage/core/bin" scripts/build-core.sh
 (
diff --git a/scripts/name-allowlist.json b/scripts/name-allowlist.json
index 05b6f6f67..85d4bac33 100644
--- a/scripts/name-allowlist.json
+++ b/scripts/name-allowlist.json
@@ -579,21 +579,6 @@
     "regex": "Parsar apply_patch",
     "reason": "This comment identifies the recognized product-origin patch extension, matching the intentionally retained parser symbol."
   },
-  {
-    "path": "apps/docs/content/docs/concepts.mdx",
-    "regex": "Parsar is an ordinary API-key holder",
-    "reason": "Generated copy of docs/design-principles.md: These exact phrases refer to the separate Parsar product, its ownership or historical source, not the OpenAgentCore brand."
-  },
-  {
-    "path": "apps/docs/content/docs/troubleshooting.mdx",
-    "regex": "~/\\.parsar/core",
-    "reason": "Generated copy of docs/getting-started/operations.md: A default install refuses while this path holds an installation of an earlier release; the troubleshooting row names it."
-  },
-  {
-    "path": "apps/docs/lib/legacy-redirects.ts",
-    "regex": "\"agents-api(?:-sessions|-errors)?\"",
-    "reason": "Retired documentation URL keys redirect to the current public API guide; these are not current commands or API namespaces."
-  },
   {
     "path": "example/*",
     "regex": "(?i)parsar",
@@ -609,11 +594,6 @@
     "regex": "(?i)parsar",
     "reason": "The examples guide describes the explicitly named Parsar application example; it does not rename the Core runtime."
   },
-  {
-    "path": "apps/docs/content/docs/examples.mdx",
-    "regex": "(?i)parsar",
-    "reason": "Generated copy of docs/examples.md: The examples guide describes the explicitly named Parsar application example; it does not rename the Core runtime."
-  },
   {
     "path": "pnpm-lock.yaml",
     "regex": "(?:example/parsar|@oac/parsar-example)",
diff --git a/site/favicon.svg b/site/favicon.svg
deleted file mode 100644
index dba271faf..000000000
--- a/site/favicon.svg
+++ /dev/null
@@ -1,4 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="232 244 756 780" width="100" height="100">
-  <style>:root { color: #111; } @media (prefers-color-scheme: dark) { :root { color: #fff; } }</style>
-  <path d="M 588.500 247.500 C 482.038 258.932, 384.992 313.332, 317.342 399.500 C 241.675 495.881, 215.170 625.903, 247.575 741.747 C 285.409 876.998, 396.299 984.807, 527.500 1013.894 C 573.849 1024.169, 627.260 1025.623, 677 1017.964 C 780.514 1002.024, 876.331 944.643, 948.289 855.500 C 967.400 831.824, 987.086 801.273, 985.647 797.522 C 984.937 795.673, 904.376 744.245, 903.572 745.128 C 903.385 745.332, 901.319 749.325, 898.980 754 C 892.404 767.143, 880.011 786.376, 870.305 798.499 C 861.349 809.685, 841.417 831, 839.911 831 C 839.456 831, 838.926 782.513, 838.732 723.250 C 838.422 628.124, 838.183 614.283, 836.696 605.117 C 816.784 482.366, 703.587 402.140, 584.478 426.362 C 501.463 443.243, 431.784 511.254, 414 592.759 C 391.575 695.536, 444.831 796.779, 540 832.292 C 593.282 852.175, 661.017 845.557, 715.796 815.117 C 727.188 808.787, 741.006 799.755, 743.477 797.025 C 744.485 795.911, 745.690 795, 746.155 795 C 746.620 795, 747 817.488, 747 844.974 L 747 894.949 744.056 896.471 C 738.990 899.091, 717.003 907.070, 705.123 910.599 C 657.494 924.751, 607.787 926.746, 561.151 916.378 C 448.026 891.230, 357.961 799.046, 338.509 688.500 C 308.967 520.602, 428.454 363.695, 600.492 344.473 C 714.005 331.789, 825.907 394.237, 886.008 503.808 C 892.987 516.532, 893.355 516.997, 895.386 515.673 C 898.015 513.958, 931.494 493.905, 955.500 479.665 C 965.400 473.792, 974.115 468.594, 974.867 468.113 C 977.865 466.193, 950.810 421.104, 933.996 400 C 864.951 313.340, 778.345 263.056, 673 248.466 C 656.745 246.215, 605.885 245.634, 588.500 247.500 M 607.585 516.107 C 555.949 523.638, 513.408 564.461, 504.530 615 C 493.290 678.986, 530.313 736.554, 592.500 751.785 C 605.725 755.025, 637.608 754.155, 652.500 750.149 C 733.815 728.273, 770.193 636.477, 724.629 568.135 C 699.042 529.755, 653.329 509.435, 607.585 516.107" fill="currentColor" fill-rule="evenodd"/>
-</svg>
diff --git a/site/index.html b/site/index.html
deleted file mode 100644
index a8bccd5ba..000000000
--- a/site/index.html
+++ /dev/null
@@ -1,102 +0,0 @@
-<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="utf-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1">
-    <meta name="description" content="OpenAgentCore is open-source Agents API infrastructure. Run Codex, Claude Code and MiniMax Code on your infrastructure, with a Web console included.">
-    <meta name="theme-color" content="#fafafd">
-    <title>OpenAgentCore · Open-source Agents API infrastructure</title>
-    <link rel="icon" href="favicon.svg" type="image/svg+xml">
-    <link rel="stylesheet" href="styles.css">
-  </head>
-  <body>
-    <a class="skip-link" href="#main">Skip to content</a>
-    <header class="site-header wrap">
-      <a class="brand" href="#" aria-label="OpenAgentCore home"><img class="brand-mark" src="openagentcore.svg" width="34" height="34" alt="">OpenAgentCore</a>
-      <nav aria-label="Main navigation">
-        <a href="#architecture">Architecture</a>
-        <a href="https://github.com/MiniMax-AI/OpenAgentCore/blob/main/docs/getting-started/install.md">Documentation</a>
-        <a class="nav-github" href="https://github.com/MiniMax-AI/OpenAgentCore">GitHub <span aria-hidden="true">↗</span></a>
-      </nav>
-    </header>
-
-    <main id="main">
-      <section class="hero wrap" aria-labelledby="hero-title">
-        <div class="hero-copy">
-          <p class="eyebrow"><span class="small-square" aria-hidden="true"></span> Open-source Agents API</p>
-          <h1 id="hero-title">One Core.<br><span>Many agents.</span></h1>
-          <p class="hero-description">Run your native agent harnesses through one API. Keep execution, files and credentials on infrastructure you control.</p>
-          <div class="actions">
-            <a class="button primary" href="#install">Get started <span aria-hidden="true">→</span></a>
-            <a class="button secondary" href="https://github.com/MiniMax-AI/OpenAgentCore/blob/main/docs/getting-started/quickstart.md">Read the quickstart <span aria-hidden="true">↗</span></a>
-          </div>
-          <p class="hero-note"><span aria-hidden="true">✓</span> Self-deployed <span class="note-divider" aria-hidden="true">/</span> Core + Web included</p>
-        </div>
-        <div class="code-stage">
-          <div class="stage-label"><span aria-hidden="true">↳</span> Your application. Your endpoint.</div>
-          <div class="code-panel">
-            <div class="panel-header"><span class="file-label"><span aria-hidden="true">&lt;/&gt;</span> connect.py</span><span class="panel-tag">PYTHON</span></div>
-            <pre aria-label="Python example listing saved agents from your Core"><code><span class="syntax-keyword">from</span> openai <span class="syntax-keyword">import</span> OpenAI
-
-<span class="syntax-comment"># OPENAI_BASE_URL: your Core's /v1 address</span>
-<span class="syntax-comment"># OPENAI_API_KEY: a project API key from Web</span>
-client = OpenAI()
-
-<span class="syntax-keyword">for</span> agent <span class="syntax-keyword">in</span> client.beta.agents.list():
-    <span class="syntax-function">print</span>(agent.id)</code></pre>
-            <div class="code-caption"><span>Official Python client</span><span>3.13.0 <span aria-hidden="true">·</span> agents=v1</span></div>
-          </div>
-          <p class="code-footnote">A read-only request. No model call. <a href="https://github.com/MiniMax-AI/OpenAgentCore/blob/main/contracts/agents-api/README.md">View protocol coverage <span aria-hidden="true">↗</span></a></p>
-        </div>
-      </section>
-
-      <div class="harness-strip wrap" aria-label="Supported native harnesses">
-        <p>Native harnesses.<br><strong>A shared execution API.</strong></p>
-        <div class="harness-names"><span><i aria-hidden="true">01</i> Codex</span><span><i aria-hidden="true">02</i> Claude Code</span><span><i aria-hidden="true">03</i> MiniMax Code</span></div>
-      </div>
-
-      <section class="architecture-section" id="architecture" aria-labelledby="architecture-title">
-        <div class="wrap">
-          <div class="section-heading"><div><p class="eyebrow">01 / Under the hood</p><h2 id="architecture-title">One execution path.<br>Clear responsibilities.</h2></div><p>Core owns the API and execution state. Each harness keeps its native model and tool loop.</p></div>
-          <div class="architecture" aria-label="Core connects to the shared Runtime and its native harness adapters">
-            <div class="architecture-node"><span class="node-kind">CONTROL PLANE</span><h3>OpenAgentCore</h3><p>Sessions, credentials, files<br>and execution history.</p><span class="node-detail">Agents API + Web console</span></div>
-            <span class="connector" aria-hidden="true">→</span>
-            <div class="architecture-node runtime-node"><span class="node-kind">SHARED RUNTIME</span><h3>Daemon + workspace</h3><p>One runtime contract.<br>Tools and files stay with execution.</p><span class="node-detail">Docker / microsandbox</span></div>
-            <span class="connector" aria-hidden="true">→</span>
-            <div class="harnesses"><div><span class="harness-dot" aria-hidden="true"></span>Codex<span class="native-label">native</span></div><div><span class="harness-dot" aria-hidden="true"></span>Claude Code<span class="native-label">native</span></div><div><span class="harness-dot" aria-hidden="true"></span>MiniMax Code<span class="native-label">native</span></div></div>
-          </div>
-          <div class="architecture-notes"><p><span aria-hidden="true">↳</span> Deploy Core independently of your application.</p><p><span aria-hidden="true">↳</span> Native capability differences stay explicit.</p></div>
-        </div>
-      </section>
-
-      <section class="install-section wrap" id="install" aria-labelledby="install-title">
-        <div class="install-copy">
-          <p class="eyebrow">02 / Get started</p>
-          <h2 id="install-title">Install. Sign in.<br> Add a node.</h2>
-          <p>Install Core and Web together with one command. Add nodes when you need them.</p>
-          <a class="text-link" href="https://github.com/MiniMax-AI/OpenAgentCore/blob/main/docs/getting-started/install.md">Read the installation guide <span aria-hidden="true">→</span></a>
-          <div class="install-prerequisites"><span class="note-label">BEFORE YOU START</span><p>A Linux amd64 host with Docker and Python 3.9+. For nodes, an HTTPS address behind your reverse proxy; you can add it after installing.</p><p>The command downloads and verifies the latest stable release. Add <code>--version v1.2.3</code> to select a version. For unreleased changes, <a href="https://github.com/MiniMax-AI/OpenAgentCore/blob/main/docs/maintainers.md#build-a-distribution">build a distribution</a>.</p></div>
-        </div>
-        <div class="setup-path">
-          <ol class="setup-steps">
-            <li class="setup-step"><span class="step-number" aria-hidden="true">01</span><div class="step-content"><div class="step-title"><h3>Install Core + Web</h3><span class="badge">ZERO NODES</span></div><p>Install the latest stable release. Core, Web and PostgreSQL start together. No model key required.</p><pre class="install-command"><code>curl -fsSL https://github.com/MiniMax-AI/OpenAgentCore/releases/latest/download/install.sh | bash</code></pre></div></li>
-            <li class="setup-step"><span class="step-number" aria-hidden="true">02</span><div class="step-content"><h3>Sign in and issue a key</h3><p>Open the address printed by the installer. Sign in with the Core key in this private file:</p><div class="file-path"><code>~/.oac/core/secrets/core.key</code></div><p class="step-detail">Set a default model on <strong>System</strong>, then create a project and issue a key on <strong>Projects and keys</strong>.</p></div></li>
-            <li class="setup-step"><span class="step-number" aria-hidden="true">03</span><div class="step-content"><h3>Add a node</h3><p>Open <strong>Nodes</strong>, choose <strong>Add node</strong>, then <strong>Generate command</strong>. Paste the command on a Linux host with sudo; it prepares the host itself.</p><div class="provider-options"><span>Docker</span><span>microsandbox</span></div><p class="step-detail">Web shows when the node is online and ready. All nodes use the same provider.</p></div></li>
-          </ol>
-          <p class="setup-footnote">Installation and enrollment do not call a model. <a href="https://github.com/MiniMax-AI/OpenAgentCore/blob/main/docs/getting-started/install.md#installer-options">Other installation options <span aria-hidden="true">↗</span></a></p>
-        </div>
-      </section>
-
-      <section class="docs-section wrap" aria-labelledby="docs-title">
-        <div class="section-heading"><div><p class="eyebrow">03 / Go further</p><h2 id="docs-title">Build with a clear contract.</h2></div><p>The pinned Agents API is the compatibility target. Check verified workflows and native differences before you build.</p></div>
-        <div class="docs-grid">
-          <a class="doc-card" href="https://github.com/MiniMax-AI/OpenAgentCore/blob/main/docs/getting-started/quickstart.md"><span class="doc-number">QUICKSTART <span aria-hidden="true">↗</span></span><h3>Make your first request</h3><p>Connect the official Python client to your Core. Run a task when your node is ready.</p><span class="doc-link">Start building →</span></a>
-          <a class="doc-card" href="https://github.com/MiniMax-AI/OpenAgentCore/blob/main/contracts/agents-api/README.md"><span class="doc-number">API COVERAGE <span aria-hidden="true">↗</span></span><h3>Know the boundaries</h3><p>Verified operations, harness differences and known gaps. Full compatibility is not claimed.</p><span class="doc-link">Explore the contract →</span></a>
-          <a class="doc-card" href="https://github.com/MiniMax-AI/OpenAgentCore/blob/main/docs/getting-started/operations.md"><span class="doc-number">OPERATIONS <span aria-hidden="true">↗</span></span><h3>Keep your Core running</h3><p>Service health, node readiness, persistent data and recovery for your deployment.</p><span class="doc-link">Open the guide →</span></a>
-        </div>
-      </section>
-    </main>
-
-    <footer class="site-footer wrap"><div><a class="brand" href="#" aria-label="OpenAgentCore home"><img class="brand-mark" src="openagentcore.svg" width="34" height="34" alt="">OpenAgentCore</a><p>Open infrastructure for native agents.</p></div><div class="footer-links"><a href="https://github.com/MiniMax-AI/OpenAgentCore/blob/main/docs/getting-started/install.md">Documentation</a><a href="https://github.com/MiniMax-AI/OpenAgentCore">View on GitHub <span aria-hidden="true">↗</span></a></div></footer>
-  </body>
-</html>
diff --git a/site/openagentcore.svg b/site/openagentcore.svg
deleted file mode 100644
index f12bf1ef1..000000000
--- a/site/openagentcore.svg
+++ /dev/null
@@ -1,3 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="232 244 756 780" width="100" height="100">
-  <path d="M 588.500 247.500 C 482.038 258.932, 384.992 313.332, 317.342 399.500 C 241.675 495.881, 215.170 625.903, 247.575 741.747 C 285.409 876.998, 396.299 984.807, 527.500 1013.894 C 573.849 1024.169, 627.260 1025.623, 677 1017.964 C 780.514 1002.024, 876.331 944.643, 948.289 855.500 C 967.400 831.824, 987.086 801.273, 985.647 797.522 C 984.937 795.673, 904.376 744.245, 903.572 745.128 C 903.385 745.332, 901.319 749.325, 898.980 754 C 892.404 767.143, 880.011 786.376, 870.305 798.499 C 861.349 809.685, 841.417 831, 839.911 831 C 839.456 831, 838.926 782.513, 838.732 723.250 C 838.422 628.124, 838.183 614.283, 836.696 605.117 C 816.784 482.366, 703.587 402.140, 584.478 426.362 C 501.463 443.243, 431.784 511.254, 414 592.759 C 391.575 695.536, 444.831 796.779, 540 832.292 C 593.282 852.175, 661.017 845.557, 715.796 815.117 C 727.188 808.787, 741.006 799.755, 743.477 797.025 C 744.485 795.911, 745.690 795, 746.155 795 C 746.620 795, 747 817.488, 747 844.974 L 747 894.949 744.056 896.471 C 738.990 899.091, 717.003 907.070, 705.123 910.599 C 657.494 924.751, 607.787 926.746, 561.151 916.378 C 448.026 891.230, 357.961 799.046, 338.509 688.500 C 308.967 520.602, 428.454 363.695, 600.492 344.473 C 714.005 331.789, 825.907 394.237, 886.008 503.808 C 892.987 516.532, 893.355 516.997, 895.386 515.673 C 898.015 513.958, 931.494 493.905, 955.500 479.665 C 965.400 473.792, 974.115 468.594, 974.867 468.113 C 977.865 466.193, 950.810 421.104, 933.996 400 C 864.951 313.340, 778.345 263.056, 673 248.466 C 656.745 246.215, 605.885 245.634, 588.500 247.500 M 607.585 516.107 C 555.949 523.638, 513.408 564.461, 504.530 615 C 493.290 678.986, 530.313 736.554, 592.500 751.785 C 605.725 755.025, 637.608 754.155, 652.500 750.149 C 733.815 728.273, 770.193 636.477, 724.629 568.135 C 699.042 529.755, 653.329 509.435, 607.585 516.107" fill="currentColor" fill-rule="evenodd"/>
-</svg>
diff --git a/site/styles.css b/site/styles.css
deleted file mode 100644
index c579f09ab..000000000
--- a/site/styles.css
+++ /dev/null
@@ -1,169 +0,0 @@
-:root {
-  color-scheme: light;
-  --ink: #20202b;
-  --muted: #60616f;
-  --accent: #5a43c7;
-  --line: #e4e4ed;
-  --soft: #f5f5f9;
-  --mono: "SFMono-Regular", Consolas, "Liberation Mono", monospace;
-  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
-  color: var(--ink);
-  background: #fafafd;
-  font-synthesis: none;
-  -webkit-font-smoothing: antialiased;
-}
-* { box-sizing: border-box; }
-body { margin: 0; }
-a { color: inherit; text-decoration: none; transition: color 160ms, background-color 160ms, border-color 160ms, box-shadow 160ms; }
-a:focus-visible { outline: 3px solid var(--accent); outline-offset: 5px; }
-p { color: var(--muted); line-height: 1.7; }
-h1, h2, h3, p { margin-top: 0; }
-h1, h2, h3 { letter-spacing: -.035em; }
-h2 { font-size: clamp(32px, 3.1vw, 44px); line-height: 1.13; font-weight: 600; margin-bottom: 0; }
-h3 { font-size: 20px; font-weight: 600; }
-pre, code, .eyebrow, .node-kind, .panel-tag, .badge, .doc-number, .note-label, .step-number { font-family: var(--mono); }
-pre { overflow-x: auto; margin: 0; }
-.wrap { width: min(1184px, calc(100% - 80px)); margin-inline: auto; }
-.skip-link { position: fixed; top: -100px; left: 16px; z-index: 3; padding: 12px 18px; background: var(--ink); color: white; }
-.skip-link:focus { top: 16px; }
-.site-header { min-height: 96px; display: flex; align-items: center; justify-content: space-between; border-bottom: 1px solid var(--line); gap: 24px; }
-.brand { display: inline-flex; align-items: center; gap: 8px; font-size: 21px; font-weight: 650; letter-spacing: -.05em; white-space: nowrap; }
-.brand-core { font-weight: 400; color: var(--muted); }
-.brand-mark { display: block; width: 34px; height: 34px; margin-right: 4px; flex: 0 0 auto; }
-nav { display: flex; align-items: center; gap: 32px; font-size: 13px; font-weight: 500; }
-nav a:hover, .footer-links a:hover { color: var(--accent); }
-.nav-github { display: inline-flex; align-items: center; gap: 18px; border: 1px solid #d8d8e2; border-radius: 7px; padding: 10px 15px; background: #fff; }
-.nav-github:hover { border-color: #b5abd9; }
-.hero { display: grid; grid-template-columns: 1fr 1fr; gap: 76px; align-items: center; padding-block: 86px 76px; }
-.eyebrow { text-transform: uppercase; letter-spacing: .11em; font-size: 10px; font-weight: 600; color: var(--accent); margin-bottom: 25px; display: flex; align-items: center; gap: 9px; }
-.small-square { width: 7px; height: 7px; border-radius: 2px; background: var(--accent); box-shadow: 0 0 0 4px #ede9fb; }
-h1 { font-size: clamp(54px, 5.2vw, 72px); line-height: 1.045; margin-bottom: 26px; font-weight: 600; letter-spacing: -.065em; }
-h1 > span { color: var(--accent); }
-.hero-description { font-size: 18px; max-width: 445px; margin-bottom: 32px; line-height: 1.65; }
-.actions { display: flex; flex-wrap: wrap; gap: 12px; }
-.button { min-height: 48px; padding: 13px 20px; border: 1px solid #dedee8; border-radius: 7px; font-size: 13px; font-weight: 600; display: inline-flex; align-items: center; justify-content: center; gap: 24px; }
-.primary { background: var(--accent); border-color: var(--accent); color: #fff; box-shadow: 0 3px 6px #4c36b21a; }
-.primary:hover { background: #4833ac; border-color: #4833ac; }
-.secondary { background: #fff; }
-.secondary:hover { border-color: #b6acd7; background: #f4f1fc; }
-.hero-note { display: flex; align-items: center; gap: 9px; font-size: 12px; margin: 22px 0 0; }
-.hero-note > span:first-child { color: var(--accent); }
-.note-divider { color: #c4c3cf; margin-inline: 4px; }
-.code-stage { min-width: 0; position: relative; isolation: isolate; padding: 22px 0; }
-.code-stage::before { content: ""; position: absolute; z-index: -1; inset: 2px -24px 6px 25%; background-image: radial-gradient(#cfccdF 1px, transparent 1px); background-size: 14px 14px; }
-.stage-label { font: 10px var(--mono); color: var(--muted); margin: 0 0 15px 2px; letter-spacing: .025em; }
-.stage-label > span { color: var(--accent); margin-right: 7px; }
-.code-panel { overflow: hidden; border: 1px solid #323341; border-radius: 12px; background: #20212d; box-shadow: 0 20px 45px -20px #24223f4d, 0 3px 8px #24223f0d; }
-.panel-header { padding: 17px 24px; border-bottom: 1px solid #ffffff14; display: flex; gap: 12px; justify-content: space-between; align-items: center; background: #ffffff03; }
-.file-label { font: 12px var(--mono); color: #e1e0eb; }
-.file-label > span { color: #b6a0fc; margin-right: 9px; }
-.panel-tag { color: #aba9bf; font-size: 9px; letter-spacing: .12em; }
-.code-panel pre { font-size: 12px; line-height: 1.95; padding: 24px; color: #eeedf6; }
-.syntax-keyword { color: #c1a5ff; }
-.syntax-string { color: #a5d3c6; }
-.syntax-function { color: #c7d6ff; }
-.syntax-comment { color: #aaa8ba; }
-.code-caption { padding: 15px 24px; border-top: 1px solid #ffffff14; font: 10px var(--mono); display: flex; flex-wrap: wrap; justify-content: space-between; gap: 8px; color: #b9b7ca; }
-.code-caption > span:last-child { color: #d9d5ed; }
-.code-footnote { font-size: 11px; margin: 16px 2px 0; }
-.code-footnote a { margin-left: 7px; color: var(--accent); }
-.code-footnote a:hover { text-decoration: underline; text-underline-offset: 4px; }
-.harness-strip { display: flex; align-items: center; justify-content: space-between; gap: 32px; border-top: 1px solid var(--line); padding-block: 26px 32px; }
-.harness-strip p { margin: 0; font-size: 12px; line-height: 1.6; }
-.harness-strip strong { color: var(--ink); font-weight: 500; }
-.harness-names { display: flex; gap: 54px; align-items: center; }
-.harness-names > span { font-size: 19px; font-weight: 550; letter-spacing: -.04em; }
-.harness-names i { font: normal 10px var(--mono); color: #777584; margin-right: 13px; }
-.architecture-section { padding-block: 78px; background: #f0f0f6; border-block: 1px solid #e5e4ef; }
-.section-heading { display: flex; justify-content: space-between; gap: 48px; align-items: end; margin-bottom: 38px; }
-.section-heading .eyebrow { margin-bottom: 18px; }
-.section-heading > p { max-width: 340px; font-size: 15px; margin: 0 0 2px; }
-.architecture { display: grid; grid-template-columns: 1fr 48px 1.15fr 48px 1fr; align-items: center; }
-.architecture-node { background: #fafafd; border: 1px solid #dcdbe7; padding: 28px; border-radius: 10px; }
-.node-kind { font-size: 9px; letter-spacing: .1em; color: var(--muted); }
-.architecture-node h3 { font-size: 23px; margin: 20px 0 12px; }
-.architecture-node p { font-size: 14px; margin: 0 0 23px; }
-.node-detail { font: 10px var(--mono); color: #747181; }
-.runtime-node { border-color: #c7bee7; background: #fbfaff; box-shadow: 0 5px 16px #36304e05; }
-.runtime-node .node-kind { color: var(--accent); }
-.connector { text-align: center; color: #928dA4; font-size: 22px; }
-.harnesses { display: grid; gap: 11px; }
-.harnesses > div { display: flex; align-items: center; gap: 12px; padding: 20px; border: 1px solid #dcdbe7; border-radius: 7px; background: #fafafd; font-size: 15px; font-weight: 550; }
-.harness-dot { width: 6px; height: 6px; background: #b5adc9; border-radius: 2px; flex-shrink: 0; }
-.native-label { font: 9px var(--mono); color: #666171; margin-left: auto; }
-.architecture-notes { display: flex; justify-content: space-between; gap: 24px; margin-top: 25px; }
-.architecture-notes p { font-size: 12px; margin: 0; }
-.architecture-notes p > span { color: #9a8bbb; margin-right: 9px; }
-.install-section { padding-block: 92px; display: grid; grid-template-columns: .85fr 1.2fr; gap: 100px; align-items: start; }
-.install-copy .eyebrow { margin-bottom: 20px; }
-.install-copy h2 { margin-bottom: 25px; }
-.install-copy > p:not(.eyebrow) { font-size: 16px; max-width: 360px; }
-.text-link { color: var(--accent); display: inline-flex; gap: 18px; font-size: 13px; font-weight: 600; margin-top: 10px; }
-.text-link:hover, .install-prerequisites a:hover, .setup-footnote a:hover { text-decoration: underline; text-underline-offset: 4px; }
-.install-prerequisites { margin-top: 42px; padding-top: 25px; border-top: 1px solid var(--line); }
-.note-label { font-size: 9px; letter-spacing: .09em; color: #747180; }
-.install-prerequisites p { font-size: 12px; margin: 15px 0 0; }
-.install-prerequisites a { color: var(--accent); }
-.code-footnote a, .install-prerequisites a, .setup-footnote a { text-decoration: underline; text-decoration-color: #a79acd; text-underline-offset: 3px; }
-.setup-path { min-width: 0; }
-.setup-steps { list-style: none; margin: 0; padding: 0; }
-.setup-step { display: grid; grid-template-columns: 36px minmax(0, 1fr); gap: 20px; padding-bottom: 28px; position: relative; }
-.setup-step:not(:last-child)::before { content: ""; position: absolute; left: 17px; top: 40px; bottom: 4px; width: 1px; background: var(--line); }
-.step-number { display: flex; align-items: center; justify-content: center; width: 36px; height: 36px; font-size: 11px; color: var(--accent); border: 1px solid #dbd4ef; border-radius: 50%; background: #f5f2fd; }
-.step-content { padding-top: 6px; min-width: 0; }
-.step-content h3 { font-size: 20px; margin: 0 0 12px; }
-.step-content p { font-size: 14px; line-height: 1.7; margin: 0 0 16px; }
-.step-content p code { font-size: 12px; color: var(--ink); }
-.step-title { display: flex; align-items: baseline; justify-content: space-between; gap: 12px; }
-.badge { font-size: 8px; letter-spacing: .09em; color: var(--accent); padding: 5px 7px; border-radius: 4px; background: #efebfa; white-space: nowrap; }
-.install-command { padding: 20px; font-size: 13px; line-height: 1.8; background: #eeedf5; color: #34303f; border: 1px solid #e3e0ee; border-radius: 7px; }
-.file-path { border: 1px solid var(--line); border-radius: 6px; padding: 12px 15px; background: #fff; font-size: 12px; overflow-wrap: anywhere; margin-bottom: 12px; }
-.step-content .step-detail { font-size: 12px; color: #686472; margin: 0; }
-.provider-options { display: flex; gap: 8px; margin: 0 0 14px; }
-.provider-options > span { font: 10px var(--mono); color: #5d566e; border: 1px solid #ddd8e7; border-radius: 4px; padding: 6px 9px; background: #f6f4fa; }
-.setup-footnote { border-top: 1px solid var(--line); padding-top: 18px; margin: 0 0 0 56px; font-size: 11px; }
-.setup-footnote a { color: var(--accent); display: inline-block; margin-top: 4px; }
-.docs-section { border-top: 1px solid var(--line); padding-block: 74px 84px; }
-.docs-grid { display: grid; grid-template-columns: repeat(3, 1fr); gap: 20px; }
-.doc-card { border: 1px solid var(--line); padding: 29px; border-radius: 9px; display: flex; flex-direction: column; background: #fff; }
-.doc-card:hover { border-color: #c2b6e3; box-shadow: 0 6px 18px #51437408; }
-.doc-number { color: #767180; font-size: 9px; letter-spacing: .08em; display: flex; justify-content: space-between; align-items: center; margin-bottom: 30px; }
-.doc-number > span { font: 18px sans-serif; color: var(--accent); }
-.doc-card h3 { margin-bottom: 13px; font-size: 21px; }
-.doc-card p { font-size: 14px; margin-bottom: 28px; }
-.doc-link { margin-top: auto; color: var(--accent); font-size: 12px; font-weight: 550; }
-.site-footer { border-top: 1px solid var(--line); display: flex; align-items: center; justify-content: space-between; gap: 24px; padding-block: 32px; }
-.site-footer .brand { font-size: 18px; }
-.site-footer .brand-mark { width: 29px; height: 29px; font-size: 20px; }
-.site-footer p { font-size: 11px; margin: 12px 0 0; }
-.footer-links { display: flex; gap: 28px; font-size: 12px; }
-section[id] { scroll-margin-top: 28px; }
-@media (max-width: 1000px) {
-  .hero { gap: 32px; }
-  .code-panel pre { font-size: 11px; padding-inline: 18px; }
-  .install-section { gap: 45px; }
-  .harness-names { gap: 25px; }
-}
-@media (max-width: 760px) {
-  .wrap { width: calc(100% - 40px); }
-  .site-header { min-height: 80px; }
-  nav { gap: 18px; font-size: 12px; }
-  nav a:first-child { display: none; }
-  .hero { grid-template-columns: 1fr; padding-block: 48px; gap: 36px; }
-  h1 { font-size: clamp(48px, 9vw, 70px); }
-  .code-stage::before { inset-inline: 10%; }
-  .section-heading { flex-direction: column; align-items: start; gap: 20px; }
-  .section-heading > p { max-width: 100%; }
-  .harness-strip, .harness-names { flex-wrap: wrap; }
-  .architecture-section { padding-block: 40px; }
-  .architecture { grid-template-columns: 1fr; }
-  .connector { transform: rotate(90deg); padding: 8px; }
-  .architecture-notes { flex-direction: column; gap: 12px; }
-  .install-section { grid-template-columns: 1fr; gap: 28px; padding-block: 44px; }
-  .docs-section { padding-block: 40px; }
-  .docs-grid { grid-template-columns: 1fr; gap: 12px; }
-  .site-footer { flex-wrap: wrap; }
-}
-@media (prefers-reduced-motion: reduce) {
-  a { transition: none; }
-}

From 677322c276d1db189a0a87178160cce6391de385 Mon Sep 17 00:00:00 2001
From: SaladDay <1203511142@qq.com>
Date: Wed, 30 Sep 2026 07:23:15 +0000
Subject: [PATCH 2/3] Guard contract routes and repository Markdown links

The removed docs app checked that the generated contracts publish exactly the
registered routes and that guide sources link to existing files. Keep both
guards without the site:

- A Go test walks the chi router the server mounts, with every route-gating
  option, and compares it both ways with core.openapi.yaml (/core/v1) and
  runtime.openapi.yaml (/api/v1). It also keeps every committed contract path
  inside its namespace. /healthz, explicit HEAD/OPTIONS 405 guards and the
  native release content tree are not operations.
- The bundled-docs link and anchor check now also runs over every tracked
  Markdown file outside example/ and provenance/ in make check-distribution.
  Three links that wrapped across lines now start on one line so the check
  can read them.
---
 contracts/agents-api/README.md                |   4 +-
 contracts/agents-api/core-errors.md           |   4 +-
 docs/maintainers.md                           |   2 +-
 scripts/core-distribution-manifest.test.py    |   7 ++
 services/core/deploy/mcode/README.md          |   4 +-
 .../core/internal/api/contract_routes_test.go | 111 ++++++++++++++++++
 6 files changed, 125 insertions(+), 7 deletions(-)
 create mode 100644 services/core/internal/api/contract_routes_test.go

diff --git a/contracts/agents-api/README.md b/contracts/agents-api/README.md
index 3311433d8..7aed59bfc 100644
--- a/contracts/agents-api/README.md
+++ b/contracts/agents-api/README.md
@@ -322,8 +322,8 @@ upgrade the protocol.
   reads, live streams, metadata updates and new input exclude the resource.
   Existing streams close on observing removal without an invented deletion event.
   Creation keys remain reserved (local 409); the owner's repeated deletion returns
-  the same confirmation and missing or foreign deletion returns 404 ([batch
-  record](official-semantics-alignment.md#session-deletion-lifecycle--september-23)).
+  the same confirmation and missing or foreign deletion returns 404
+  ([batch record](official-semantics-alignment.md#session-deletion-lifecycle--september-23)).
   Qualified managed Docker deletion also reclaims its owned Runtime;
   broader physical SQL/native history cleanup, immediate native quiescence and
   exact hosted error/retry/overlapping-stream semantics remain unverified or
diff --git a/contracts/agents-api/core-errors.md b/contracts/agents-api/core-errors.md
index 774123304..c81975b22 100644
--- a/contracts/agents-api/core-errors.md
+++ b/contracts/agents-api/core-errors.md
@@ -54,8 +54,8 @@ from a missing console sign-in. `/console/auth` keeps its existing
 become proxyable operations. Host, origin, authentication, credential stripping,
 path checks and the no-retry rule are unchanged.
 
-Existing operation-specific codes remain documented in the [administrator
-contract](admin-api.md), [sandbox deployment contract](sandbox-deployment.md),
+Existing operation-specific codes remain documented in the
+[administrator contract](admin-api.md), [sandbox deployment contract](sandbox-deployment.md),
 [executor credential contract](environment-executor-credentials.md) and related
 resource contracts. The following validators refine Core operation failures only.
 
diff --git a/docs/maintainers.md b/docs/maintainers.md
index 34e277bb8..a25d557f6 100644
--- a/docs/maintainers.md
+++ b/docs/maintainers.md
@@ -35,7 +35,7 @@ The build reuses the Core, Web, Runtime, SDK and helper builders. The manifest r
 
 The control archive carries no Runtime image or node execution artifacts; the offline archive carries them. The [download contract](../deploy/install/README.md#download-contract) describes how nodes obtain them.
 
-A distribution carries the docs listed in `BUNDLED_DOCS` in `scripts/core-distribution-manifest.py`. Links between bundled docs stay relative; every other relative link is rewritten to the same file on GitHub at the bundle's commit. The build fails when a link or anchor does not resolve, and `make check-distribution` runs the same check on the repository. Update the list when you add or move a doc that the installer or its output refers to.
+A distribution carries the docs listed in `BUNDLED_DOCS` in `scripts/core-distribution-manifest.py`. Links between bundled docs stay relative; every other relative link is rewritten to the same file on GitHub at the bundle's commit. The build fails when a link or anchor does not resolve, and `make check-distribution` runs the same check on every tracked Markdown file outside `example/` and `provenance/`. Update the list when you add or move a doc that the installer or its output refers to.
 
 ### Native installers
 
diff --git a/scripts/core-distribution-manifest.test.py b/scripts/core-distribution-manifest.test.py
index aff1cb625..49be23787 100644
--- a/scripts/core-distribution-manifest.test.py
+++ b/scripts/core-distribution-manifest.test.py
@@ -6,6 +6,7 @@
 import io
 import json
 import pathlib
+import subprocess
 import tarfile
 import tempfile
 import unittest
@@ -351,6 +352,12 @@ def test_repository_docs_are_self_consistent(self):
             self.assertNotIn("@SOURCE_REVISION@", (self.bundle / name).read_text())
             self.assertNotIn("/blob/main/", (self.bundle / name).read_text())
 
+    def test_repository_markdown_links_resolve(self):
+        repository = pathlib.Path(__file__).resolve().parent.parent
+        names = subprocess.run(["git", "ls-files", "-z", "--", "*.md", ":(exclude)example", ":(exclude)provenance"],
+                               cwd=repository, check=True, capture_output=True, text=True).stdout.split("\0")
+        distribution.docs(repository, self.bundle, REVISION, names=[name for name in names if name], files=())
+
 
 if __name__ == "__main__":
     unittest.main()
diff --git a/services/core/deploy/mcode/README.md b/services/core/deploy/mcode/README.md
index 4768e8cda..9ef896140 100644
--- a/services/core/deploy/mcode/README.md
+++ b/services/core/deploy/mcode/README.md
@@ -158,8 +158,8 @@ daemon does not protect it from other tools running as the same user.
 Multi-agent workspace execution installs only the existing authorized workspace
 MCP entry in that private native configuration so children inherit the same
 tools; public MCP and Environment-origin MCP combinations remain separately
-qualified. Complete the hosted [acceptance
-checklist](../../../../contracts/agents-api/harnesses.md#acceptance-checklist)
+qualified. Complete the hosted
+[acceptance checklist](../../../../contracts/agents-api/harnesses.md#acceptance-checklist)
 before enabling hosted execution. The standalone companion uses its own npm
 lock; `make check` runs its lifecycle tests and script checks, while its
 exact-source Linux build and native qualification for the actual supported
diff --git a/services/core/internal/api/contract_routes_test.go b/services/core/internal/api/contract_routes_test.go
new file mode 100644
index 000000000..265b1ab6d
--- /dev/null
+++ b/services/core/internal/api/contract_routes_test.go
@@ -0,0 +1,111 @@
+package api
+
+import (
+	"net/http"
+	"os"
+	"reflect"
+	"slices"
+	"strings"
+	"testing"
+
+	"github.com/MiniMax-AI/OpenAgentCore/internal/agentdaemon/device"
+	"github.com/MiniMax-AI/OpenAgentCore/services/core/internal/nativeinstaller"
+	"github.com/MiniMax-AI/OpenAgentCore/services/core/internal/store"
+	"github.com/go-chi/chi/v5"
+	"gopkg.in/yaml.v3"
+)
+
+// Registered routes that are deliberately not contract operations.
+var unpublishedRoutes = map[string]string{
+	"/healthz":                       "liveness probe, not part of the Agent API",
+	"/api/v1/agent-daemon/install/*": "public immutable native release content, not an API operation",
+}
+
+// contractOperations reads one committed contract as "METHOD /path" keys and
+// requires every published path to stay inside its credential namespace.
+func contractOperations(t *testing.T, file, prefix string) map[string]bool {
+	t.Helper()
+	raw, err := os.ReadFile("../../../../contracts/agents-api/" + file)
+	if err != nil {
+		t.Fatal(err)
+	}
+	var document struct {
+		BasePath string                    `yaml:"basePath"`
+		Paths    map[string]map[string]any `yaml:"paths"`
+	}
+	if err := yaml.Unmarshal(raw, &document); err != nil {
+		t.Fatal(file, err)
+	}
+	operations := map[string]bool{}
+	for path, item := range document.Paths {
+		full := strings.TrimSuffix(document.BasePath, "/") + path
+		if !strings.HasPrefix(full, prefix+"/") {
+			t.Errorf("%s publishes %s outside %s", file, full, prefix)
+		}
+		for method := range item {
+			if slices.Contains([]string{"get", "post", "put", "patch", "delete", "head", "options"}, method) {
+				operations[strings.ToUpper(method)+" "+full] = true
+			}
+		}
+	}
+	if len(operations) == 0 {
+		t.Fatalf("%s publishes no operations", file)
+	}
+	return operations
+}
+
+// The Core and machine contracts are generated from handler annotations, so
+// they must publish exactly the routes the server registers. /v1 is checked
+// against the pinned upstream set by TestEveryRouteAuthenticatesItsCanonicalPath
+// and the contract tests.
+func TestContractsPublishExactlyTheRegisteredCoreAndMachineRoutes(t *testing.T) {
+	admin, err := NewDeploymentAuthenticator([]string{device.HashCredential(routingAdminKey)})
+	if err != nil {
+		t.Fatal(err)
+	}
+	// Every option that gates a route registration, as the server passes them.
+	s := &store.Store{}
+	h := &Handler{store: s, engine: "codex"}
+	for _, option := range []Option{WithSandboxManager(s, admin), WithProjectAPIKeys(s, admin), WithWriteAudit(s, admin), WithAdminManagement(s),
+		WithInstallation(Installation{}, s.AddressBindings), WithNativeInstaller(&nativeinstaller.Catalog{}, "contract-test")} {
+		option(h)
+	}
+	contractOperations(t, "openapi.yaml", "/v1")
+	contracts := map[string]string{"/core/v1": "core.openapi.yaml", "/api/v1": "runtime.openapi.yaml"}
+	published := map[string]map[string]bool{}
+	for prefix, file := range contracts {
+		published[prefix] = contractOperations(t, file, prefix)
+	}
+	guard := reflect.ValueOf(methodNotAllowed).Pointer()
+	registered := map[string]bool{}
+	err = chi.Walk(h.routes(), func(method, route string, handler http.Handler, _ ...func(http.Handler) http.Handler) error {
+		if _, ok := unpublishedRoutes[route]; ok || strings.HasPrefix(route, "/v1/") {
+			return nil
+		}
+		// An explicit HEAD or OPTIONS 405 guard is not an operation.
+		if f, ok := handler.(http.HandlerFunc); ok && (method == http.MethodHead || method == http.MethodOptions) && reflect.ValueOf(f).Pointer() == guard {
+			return nil
+		}
+		for prefix, operations := range published {
+			if strings.HasPrefix(route, prefix+"/") {
+				registered[method+" "+route] = true
+				if !operations[method+" "+route] {
+					t.Errorf("registered %s %s is not published in %s", method, route, contracts[prefix])
+				}
+				return nil
+			}
+		}
+		t.Errorf("registered %s %s is outside every contract namespace", method, route)
+		return nil
+	})
+	if err != nil {
+		t.Fatal(err)
+	}
+	for prefix, operations := range published {
+		for operation := range operations {
+			if !registered[operation] {
+				t.Errorf("%s publishes %s, which the server does not register", contracts[prefix], operation)
+			}
+		}
+	}
+}

From c127e4bb96b540ba9cda76fa10af0256ee0357ee Mon Sep 17 00:00:00 2001
From: SaladDay <1203511142@qq.com>
Date: Wed, 30 Sep 2026 08:25:24 +0000
Subject: [PATCH 3/3] Tighten the contract route and Markdown link guards

Compare /v1 routes with openapi.yaml as well, so path parameter names match
in every namespace. Key route exclusions by method and path and fail when an
exclusion matches no registered route. Require the repository Markdown list
to include README.md so an empty list cannot pass.
---
 scripts/core-distribution-manifest.test.py    |  1 +
 .../core/internal/api/contract_routes_test.go | 30 ++++++++++++-------
 2 files changed, 20 insertions(+), 11 deletions(-)

diff --git a/scripts/core-distribution-manifest.test.py b/scripts/core-distribution-manifest.test.py
index 49be23787..19d755fa0 100644
--- a/scripts/core-distribution-manifest.test.py
+++ b/scripts/core-distribution-manifest.test.py
@@ -356,6 +356,7 @@ def test_repository_markdown_links_resolve(self):
         repository = pathlib.Path(__file__).resolve().parent.parent
         names = subprocess.run(["git", "ls-files", "-z", "--", "*.md", ":(exclude)example", ":(exclude)provenance"],
                                cwd=repository, check=True, capture_output=True, text=True).stdout.split("\0")
+        self.assertIn("README.md", names)
         distribution.docs(repository, self.bundle, REVISION, names=[name for name in names if name], files=())
 
 
diff --git a/services/core/internal/api/contract_routes_test.go b/services/core/internal/api/contract_routes_test.go
index 265b1ab6d..58b38439e 100644
--- a/services/core/internal/api/contract_routes_test.go
+++ b/services/core/internal/api/contract_routes_test.go
@@ -15,10 +15,11 @@ import (
 	"gopkg.in/yaml.v3"
 )
 
-// Registered routes that are deliberately not contract operations.
+// Registered routes that are deliberately not contract operations, keyed
+// "METHOD /path"; the method * matches every method.
 var unpublishedRoutes = map[string]string{
-	"/healthz":                       "liveness probe, not part of the Agent API",
-	"/api/v1/agent-daemon/install/*": "public immutable native release content, not an API operation",
+	"GET /healthz":                     "liveness probe, not part of the Agent API",
+	"* /api/v1/agent-daemon/install/*": "public immutable native release content, not an API operation",
 }
 
 // contractOperations reads one committed contract as "METHOD /path" keys and
@@ -54,9 +55,9 @@ func contractOperations(t *testing.T, file, prefix string) map[string]bool {
 	return operations
 }
 
-// The Core and machine contracts are generated from handler annotations, so
-// they must publish exactly the routes the server registers. /v1 is checked
-// against the pinned upstream set by TestEveryRouteAuthenticatesItsCanonicalPath
+// The contracts are generated from handler annotations, so they must publish
+// exactly the routes the server registers, with the same path parameter names.
+// The pinned upstream /v1 set is checked by TestEveryRouteAuthenticatesItsCanonicalPath
 // and the contract tests.
 func TestContractsPublishExactlyTheRegisteredCoreAndMachineRoutes(t *testing.T) {
 	admin, err := NewDeploymentAuthenticator([]string{device.HashCredential(routingAdminKey)})
@@ -70,17 +71,19 @@ func TestContractsPublishExactlyTheRegisteredCoreAndMachineRoutes(t *testing.T)
 		WithInstallation(Installation{}, s.AddressBindings), WithNativeInstaller(&nativeinstaller.Catalog{}, "contract-test")} {
 		option(h)
 	}
-	contractOperations(t, "openapi.yaml", "/v1")
-	contracts := map[string]string{"/core/v1": "core.openapi.yaml", "/api/v1": "runtime.openapi.yaml"}
+	contracts := map[string]string{"/v1": "openapi.yaml", "/core/v1": "core.openapi.yaml", "/api/v1": "runtime.openapi.yaml"}
 	published := map[string]map[string]bool{}
 	for prefix, file := range contracts {
 		published[prefix] = contractOperations(t, file, prefix)
 	}
 	guard := reflect.ValueOf(methodNotAllowed).Pointer()
-	registered := map[string]bool{}
+	registered, excluded := map[string]bool{}, map[string]bool{}
 	err = chi.Walk(h.routes(), func(method, route string, handler http.Handler, _ ...func(http.Handler) http.Handler) error {
-		if _, ok := unpublishedRoutes[route]; ok || strings.HasPrefix(route, "/v1/") {
-			return nil
+		for _, key := range []string{method + " " + route, "* " + route} {
+			if _, ok := unpublishedRoutes[key]; ok {
+				excluded[key] = true
+				return nil
+			}
 		}
 		// An explicit HEAD or OPTIONS 405 guard is not an operation.
 		if f, ok := handler.(http.HandlerFunc); ok && (method == http.MethodHead || method == http.MethodOptions) && reflect.ValueOf(f).Pointer() == guard {
@@ -101,6 +104,11 @@ func TestContractsPublishExactlyTheRegisteredCoreAndMachineRoutes(t *testing.T)
 	if err != nil {
 		t.Fatal(err)
 	}
+	for key := range unpublishedRoutes {
+		if !excluded[key] {
+			t.Errorf("exclusion %s matches no registered route", key)
+		}
+	}
 	for prefix, operations := range published {
 		for operation := range operations {
 			if !registered[operation] {