From b1f16ab6117bd7053cba97cb21e3b67a95875322 Mon Sep 17 00:00:00 2001
From: Mat <158223041@qq.com>
Date: Mon, 31 Aug 2026 23:09:02 +0800
Subject: [PATCH 1/5] Prepare v0.1.1 downloadable macOS preview and release
pipeline
---
.github/workflows/ci.yml | 9 +-
.github/workflows/release.yml | 42 +++++
CHANGELOG.md | 7 +
CONTRIBUTING.md | 4 +
README.md | 39 +++--
README.zh-CN.md | 30 +++-
SECURITY.md | 4 +-
bridge/codex.mjs | 5 +-
bridge/server.mjs | 2 +-
docs/INSTALL.md | 36 +++-
docs/RELEASING.md | 55 ++++++
docs/images/setup-en.png | Bin 0 -> 126170 bytes
docs/images/setup-zh.png | Bin 0 -> 132497 bytes
docs/releases/v0.1.1.md | 33 ++++
native/CodexPulse.xcodeproj/project.pbxproj | 8 +-
native/CodexPulse/CodexPulse.entitlements | 9 +-
native/CodexPulse/CodexPulseApp.swift | 158 +++++++++++++++---
native/CodexPulse/Info.plist | 4 +-
native/CodexPulseWidget/Info.plist | 4 +-
package.json | 2 +-
scripts/build.sh | 39 ++++-
scripts/fetch-node-runtime.sh | 22 +++
scripts/installer.mjs | 176 ++++++++++++++++++++
scripts/manage.mjs | 128 ++------------
scripts/node-runtime.entitlements.plist | 6 +
scripts/package-release.sh | 22 +++
scripts/sign-and-notarize.sh | 15 ++
scripts/test-native.sh | 5 +
scripts/verify-release.sh | 38 +++++
tests/SetupPreview.swift | 19 +++
tests/installer.test.mjs | 157 +++++++++++++++++
31 files changed, 877 insertions(+), 201 deletions(-)
create mode 100644 .github/workflows/release.yml
create mode 100644 docs/RELEASING.md
create mode 100644 docs/images/setup-en.png
create mode 100644 docs/images/setup-zh.png
create mode 100644 docs/releases/v0.1.1.md
mode change 100644 => 100755 scripts/build.sh
create mode 100755 scripts/fetch-node-runtime.sh
create mode 100644 scripts/installer.mjs
create mode 100644 scripts/node-runtime.entitlements.plist
create mode 100755 scripts/package-release.sh
create mode 100755 scripts/sign-and-notarize.sh
create mode 100755 scripts/verify-release.sh
create mode 100644 tests/SetupPreview.swift
create mode 100644 tests/installer.test.mjs
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4799b9c..f55c7f6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,8 +18,13 @@ jobs:
- run: node scripts/check-release.mjs
native:
runs-on: macos-15
- timeout-minutes: 15
+ timeout-minutes: 30
steps:
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+ - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+ with:
+ node-version: '22'
- run: bash scripts/test-native.sh
- - run: bash scripts/build.sh
+ - run: bash scripts/package-release.sh
+ - name: Test the shipped Node runtime
+ run: '"build/Codex Pulse.app/Contents/Resources/runtime/node" --test tests/*.test.mjs'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 0000000..a755f17
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,42 @@
+name: Release preview
+
+on:
+ push:
+ tags: ['v*']
+ workflow_dispatch:
+
+permissions:
+ contents: read
+
+jobs:
+ release:
+ runs-on: macos-15
+ timeout-minutes: 30
+ permissions:
+ contents: write
+ steps:
+ - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+ with:
+ fetch-depth: 0
+ - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+ with:
+ node-version: '22'
+ - run: npm test
+ - run: bash scripts/test-native.sh
+ - run: node scripts/check-release.mjs
+ - name: Validate release tag
+ run: |
+ [ "$GITHUB_REF_TYPE" = tag ] || { echo 'Run this workflow from a tag.' >&2; exit 1; }
+ TAG="$GITHUB_REF_NAME"
+ VERSION="$(node -p "require('./package.json').version")"
+ [[ "$TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]] || { echo "Invalid release tag: $TAG" >&2; exit 1; }
+ [ "$TAG" = "v$VERSION" ] || { echo "Tag $TAG does not match package version $VERSION" >&2; exit 1; }
+ [ "$TAG" = "$(git describe --exact-match --tags HEAD)" ] || { echo 'Workflow ref does not point at the checked-out tag.' >&2; exit 1; }
+ - run: bash scripts/package-release.sh
+ - name: Create draft prerelease
+ env:
+ GH_TOKEN: ${{ github.token }}
+ run: |
+ TAG="$GITHUB_REF_NAME"
+ VERSION="$(node -p "require('./package.json').version")"
+ gh release create "$TAG" dist/Codex-Pulse-"$VERSION"-universal-unsigned.dmg dist/Codex-Pulse-"$VERSION"-universal-unsigned.zip dist/SHA256SUMS.txt --draft --prerelease --title "Codex Pulse $VERSION" --notes-file "docs/releases/v$VERSION.md"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9fcc512..679889a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
# Changelog
+## 0.1.1 — downloadable unnotarized prerelease
+
+- Universal macOS 14+ DMG and ZIP distribution with bundled Node.js and local bridge.
+- GUI actions: **Enable/repair bridge**, **Remove local bridge**, and explicit reset radar enable/disable controls (radar off by default).
+- Requires Codex CLI or desktop app already signed in with a ChatGPT account.
+- AD HOC signed and unnotarized; prerelease only. Intel installation, clean-machine support, and full release verification remain pending.
+
## 0.1.0 — source preview
- Native small and medium macOS widgets, with English and Simplified Chinese.
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index d02045a..4520202 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -15,3 +15,7 @@ Before opening a pull request:
Please preserve the read-only boundary, explicit missing/stale states, optional social feed, and small dependency surface. No credential scraping, automatic quota resets, account switching, or fake engagement features.
Good first contributions: clean-machine setup feedback, Intel build/install verification, accessible text sizing, and additional languages. Contributions are licensed under the repository's MIT license.
+
+## Release changes
+
+For packaging, signing and draft prereleases, follow [RELEASING.md](docs/RELEASING.md). CI tests the bundled runtime and verifies ZIP/DMG contents as well as the native build. Keep unsigned preview limitations explicit; do not claim clean-Mac or Intel execution results without recording evidence.
diff --git a/README.md b/README.md
index ae40109..e831f53 100644
--- a/README.md
+++ b/README.md
@@ -4,7 +4,7 @@
A native macOS desktop widget for **5-hour and weekly usage**, with separate reset countdowns — days included.
-[English](README.md) · [简体中文](README.zh-CN.md) · [Install](#quick-start) · [Security](SECURITY.md) · [Contribute](CONTRIBUTING.md)
+[Download v0.1.1](https://github.com/18637168668a-cpu/codex-pulse/releases/tag/v0.1.1) · [简体中文](README.zh-CN.md) · [Install](#quick-start) · [Security](SECURITY.md) · [Contribute](CONTRIBUTING.md)
@@ -31,14 +31,23 @@ If this saves you a few trips to the usage page, a ⭐ helps other Codex users f
## Quick start
-**v0.1 is a source-build preview, not a signed/notarized app download.**
+**Download, open, enable the bridge, add your widget. No Xcode or Node installation needed.**
-You need:
+[Download v0.1.1 — DMG or ZIP](https://github.com/18637168668a-cpu/codex-pulse/releases/tag/v0.1.1)
-- macOS 14 or later. Apple Silicon has been locally tested; Intel installation is not yet verified.
-- Full **Xcode 15+**, selected as the active developer directory. Command Line Tools alone are insufficient. The release build was tested with Xcode 26.4.
-- **Node.js 22+** on your PATH.
-- **Codex CLI or desktop app**, already signed in with a ChatGPT account whose quota windows are available. API-key-only login is not the intended mode.
+> **Unnotarized prerelease:** the `unsigned` downloads have an ad-hoc signature, not an Apple Developer ID signature. macOS may block first launch. Only approve this specific app if you trust the download; see [first-launch guidance](docs/INSTALL.md). Intel and clean-Mac installation still need validation.
+
+1. On **macOS 14+**, install Codex and sign in with your **ChatGPT account**. API-key-only login is not supported for quota display.
+2. Download the DMG/ZIP and move **Codex Pulse.app** into **Applications** (or your user Applications folder).
+3. Open Codex Pulse and click **Enable/repair bridge**. It registers a local service that starts at login; no sudo or API key is needed.
+4. **Right-click desktop → Edit Widgets → Codex Pulse → add small or medium.** You can close the companion app afterwards.
+
+The app bundles the local bridge and Node runtime. Setup only runs when you click the button. The companion app runs outside App Sandbox for service setup; the widget remains sandboxed. [Security details](SECURITY.md).
+
+
+Build from source instead
+
+Requires full **Xcode 15+** (Command Line Tools alone are insufficient) and **Node.js 22+**. The local build uses an ad-hoc signature.
```bash
git clone https://github.com/18637168668a-cpu/codex-pulse.git
@@ -47,20 +56,16 @@ bash scripts/install.sh --dry-run
bash scripts/install.sh
```
-The installer builds locally, uses an ad-hoc signature, installs into `~/Applications`, and registers a user LaunchAgent for the bridge. No sudo or Apple signing certificate is requested. It refuses to overwrite an unrelated app.
+Source installs go to `~/Applications`. For a custom CLI location, set `CODEX_BIN=/absolute/path/to/codex`. Pull and rerun the installer to update a source installation.
-Then **right-click the desktop → Edit Widgets → search “Codex Pulse” → add a small or medium widget**. macOS requires this final placement step. You can close the companion app afterwards.
+
-If Codex is installed elsewhere, pass its executable path:
-
-```bash
-CODEX_BIN="/path/to/codex" bash scripts/install.sh
-```
-
-To update, pull the repository and rerun the installer. Remove/re-add the widget if macOS keeps an old rendered view. See [installation and troubleshooting](docs/INSTALL.md) for paths, manual operation, and removal.
+For downloads, close the app, replace it in the **same Applications folder**, reopen it, and click **Enable/repair bridge**. Use **Remove local bridge** before moving the app to Trash. [Installation, upgrades and troubleshooting](docs/INSTALL.md).
## Optional reset radar
+In the app, choose **Enable reset radar** and confirm the third-party request notice. Choose **Disable reset radar** to turn it off. Source installs also support:
+
```bash
bash scripts/social.sh on
# Later:
@@ -105,7 +110,7 @@ bash scripts/build.sh # local native app build + signature verification
## Status & roadmap
-This is an early, deliberately small release. The local bridge and native build are tested; installation still needs feedback across clean Macs and Codex versions. There is no App Store distribution or notarized binary yet.
+This is an early, deliberately small prerelease. The native build architecture is prepared for universal distribution; Intel installation and clean-machine support remain pending validation. There is no App Store distribution or notarized binary.
Next priorities: clean-machine/Intel testing, better installation diagnostics, accessible larger-text layouts, and additional languages. Feature requests and reproducible reports are welcome; please remove account data from screenshots and logs.
diff --git a/README.zh-CN.md b/README.zh-CN.md
index 68b6172..815f9b1 100644
--- a/README.zh-CN.md
+++ b/README.zh-CN.md
@@ -4,7 +4,7 @@
原生 macOS 桌面小组件：并排展示 **5 小时已用量、本周已用量**，分别显示重置倒计时，超过一天明确显示天数。
-[English](README.md) · [安装与排查](docs/INSTALL.md) · [隐私与安全](SECURITY.md)
+[下载 v0.1.1](https://github.com/18637168668a-cpu/codex-pulse/releases/tag/v0.1.1) · [English](README.md) · [安装与排查](docs/INSTALL.md) · [隐私与安全](SECURITY.md)
@@ -24,9 +24,23 @@
## 安装
-**v0.1 是源码构建预览版，不是签名公证好的即装即用 App。**
+**下载 → 打开 → 启用本机服务 → 添加组件。无需另装 Xcode 或 Node。**
-需要 macOS 14+、完整 Xcode 15+、Node.js 22+，以及已通过 ChatGPT 账号登录的 Codex CLI 或桌面 App。只安装 Command Line Tools 不够。已在 Apple Silicon / Xcode 26.4 本机验证构建；Intel 和其他干净机器仍需要测试反馈。
+[下载 v0.1.1（DMG / ZIP）](https://github.com/18637168668a-cpu/codex-pulse/releases/tag/v0.1.1)
+
+> **这是未公证的预发布版。** 文件名中的 `unsigned` 表示没有 Apple Developer ID 签名，仅有临时签名。macOS 可能阻止首次打开；仅在信任下载来源时按[安装指南](docs/INSTALL.md)批准此应用。Intel 实机和全新 Mac 安装仍待验证。
+
+1. 使用 **macOS 14+**，先在 Codex 中以 **ChatGPT 账号**登录；仅 API Key 登录无法用于本组件的额度显示。
+2. 下载 DMG/ZIP，将 **Codex Pulse.app** 放入“应用程序”（`/Applications` 或 `~/Applications`）。
+3. 打开 App，点击 **启用／修复本机服务**。服务会在登录时启动，无需 sudo 或额外 API Key。
+4. **右键桌面 → 编辑小组件 → Codex Pulse → 添加小号或中号**。之后可关闭主应用。
+
+内置 Node 运行时和只读服务。仅在点击按钮后配置服务；主应用因需配置登录服务不使用沙盒，WidgetKit 扩展仍保留沙盒。[隐私与安全](SECURITY.md)。
+
+
+从源码安装
+
+需要完整 **Xcode 15+** 和 **Node.js 22+**；只有 Command Line Tools 不够。
```bash
git clone https://github.com/18637168668a-cpu/codex-pulse.git
@@ -35,12 +49,16 @@ bash scripts/install.sh --dry-run
bash scripts/install.sh
```
-脚本本机构建并临时签名，安装到 `~/Applications`，注册登录时启动的本机后台服务。无需 sudo，不要求你的 Apple 开发证书，也不会覆盖不同标识的同名 App。
+源码安装到 `~/Applications`，使用临时签名，不要求 Apple 开发证书。更新时拉取代码并重新运行安装脚本。
+
+
-最后：**右键桌面 → 编辑小组件 → 搜索 Codex Pulse → 添加小号或中号**。位置需要通过系统界面添加，之后可以关闭主应用。
+下载版更新：先关闭 App，在**原应用目录**替换后重新打开并点击 **启用／修复本机服务**。卸载时先点击 **移除本机服务**，再将 App 移到废纸篓，最后手动移除桌面组件。
### 可选雷达
+在 App 中点击 **开启重置雷达**并确认第三方请求提示，可随时点击 **关闭重置雷达**。源码版也支持：
+
```bash
bash scripts/social.sh on
bash scripts/social.sh off
@@ -48,7 +66,7 @@ bash scripts/social.sh off
开启后访问第三方公开源 [codex-reset.com](https://codex-reset.com)，它会收到你的 IP 等普通 HTTPS 请求信息，但不会收到用量、登录凭证或聊天。只分析最近七天、链接指向 @thsottiaux 的动态。规则可能误判、漏报，第三方源也可能延迟或停止；所有判断均不应视为官方确认。
-### 卸载
+### 源码版卸载
```bash
bash scripts/uninstall.sh
diff --git a/SECURITY.md b/SECURITY.md
index f1b0943..b50bfa4 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -8,7 +8,9 @@ The bridge binds to IPv4 loopback and checks Host, Origin and cross-site fetch m
Optional social radar is off by default. When enabled, it contacts `https://codex-reset.com/api/feed`; that provider receives the usual network metadata. No account data is sent. Feed content is untrusted plain text, not executable instructions. Only recent HTTPS links to the intended X account are accepted. Classification is heuristic and may be incorrect. Clicking a source link opens X in your browser.
-Local builds use ad-hoc signatures, not Apple notarization. The installer does not disable Gatekeeper, change global security settings, install system-wide services, or request sudo. Inspect scripts before running them.
+The companion app runs outside App Sandbox so an explicit setup button can register a user LaunchAgent and launch the local bridge. The WidgetKit extension remains sandboxed with network-client access only. Setup does not run automatically on first launch. The bundled Node runtime is downloaded from nodejs.org at build time, checked against pinned SHA-256 digests, and shipped with its license; no runtime is downloaded during installation.
+
+Local builds and unsigned preview downloads use ad-hoc signatures, not Apple notarization. Downloaded artifacts include SHA-256 checksums for integrity, not proof of publisher identity. The installer does not disable Gatekeeper, change global security settings, install system-wide services, or request sudo. Inspect scripts before running them.
## Reporting
diff --git a/bridge/codex.mjs b/bridge/codex.mjs
index 5dffda0..eefeadc 100644
--- a/bridge/codex.mjs
+++ b/bridge/codex.mjs
@@ -1,12 +1,15 @@
import { spawn } from 'node:child_process';
import { createInterface } from 'node:readline';
import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
export function codexBinary() {
if (process.env.CODEX_BIN) return process.env.CODEX_BIN;
return [
'/Applications/Codex.app/Contents/Resources/codex',
'/Applications/ChatGPT.app/Contents/Resources/codex',
+ join(homedir(), 'Applications/Codex.app/Contents/Resources/codex'),
].find(existsSync) || 'codex';
}
@@ -48,7 +51,7 @@ export class CodexBridge {
child.once('error', failed);
child.once('exit', failed);
this.ready = this.send('initialize', {
- clientInfo: { name: 'codex-pulse', title: 'Codex Pulse', version: '0.1.0' },
+ clientInfo: { name: 'codex-pulse', title: 'Codex Pulse', version: '0.1.1' },
}).then(() => {
child.stdin.write(JSON.stringify({ method: 'initialized' }) + '\n');
}).catch(error => { this.stop(); throw error; });
diff --git a/bridge/server.mjs b/bridge/server.mjs
index 242c169..eb2b93f 100644
--- a/bridge/server.mjs
+++ b/bridge/server.mjs
@@ -37,7 +37,7 @@ export function createPulseServer({ bridge = new CodexBridge(), social = false,
if (request.method !== 'GET') return json(405, { error: 'Read-only service.' });
let path;
try { path = new URL(request.url, 'http://localhost').pathname; } catch { return json(400, { error: 'Invalid request.' }); }
- if (path === '/' || path === '/health') return json(200, { app: 'codex-pulse', version: '0.1.0', readOnly: true, socialEnabled: social });
+ if (path === '/' || path === '/health') return json(200, { app: 'codex-pulse', version: '0.1.1', readOnly: true, socialEnabled: social });
try {
if (path === '/api/local/usage') return json(200, await cached('usage', 30000, async () => normalizeUsage(await bridge.rateLimits())));
if (path === '/api/local/tibo') return json(200, social
diff --git a/docs/INSTALL.md b/docs/INSTALL.md
index 19a7107..0669690 100644
--- a/docs/INSTALL.md
+++ b/docs/INSTALL.md
@@ -1,17 +1,41 @@
# Installation & troubleshooting
+## Downloaded prerelease (v0.1.1)
+
+[Download the v0.1.1 DMG or ZIP](https://github.com/18637168668a-cpu/codex-pulse/releases/tag/v0.1.1). This is an ad-hoc signed, unnotarized prerelease. The universal app bundles Node.js and the bridge. Intel installation and clean-machine support remain pending validation.
+
+Move the app to `/Applications` or `~/Applications` before opening it. On first launch, the non-sandboxed companion app asks you to click **Enable/repair bridge**. This user-triggered action installs or repairs the per-user LaunchAgent; the WidgetKit extension remains sandboxed. **Remove local bridge** removes that service while retaining the app. The radar is off by default; use **Enable reset radar** or **Disable reset radar**.
+
+If macOS says the developer cannot be verified, first confirm you downloaded from this repository and check the checksum. If you trust it, use **System Settings → Privacy & Security → Open Anyway** for this app, following [Apple’s unnotarized-app guidance](https://support.apple.com/en-us/102445). If macOS reports malware or that the app will damage your computer, **stop and do not override the warning**. Do not disable global protections or remove quarantine attributes. Managed Macs may prohibit exceptions.
+
+Codex must already be installed and signed in with ChatGPT. If it is not detected, click **Choose Codex…** to select its executable, then retry setup. The download includes Node; no developer tools are required.
+
+After setup, right-click your desktop → Edit Widgets → Codex Pulse. Placement is a macOS step, not automatic.
+
+## Update a download
+
+Close Codex Pulse, replace the app in the same Applications folder, reopen it and click **Enable/repair bridge**. Keep the install location unchanged so the login service can find its bundled runtime. When changing from a source install in `~/Applications` to `/Applications`, remove the old bridge and app first to avoid duplicate widgets.
+
+## Verify a download
+
+Download `SHA256SUMS.txt` alongside both assets. In that download folder run `shasum -a 256 -c SHA256SUMS.txt`. If you downloaded only one asset, the missing other file is expected; the downloaded file must say OK. Checksums detect corruption but do not authenticate the publisher.
+
+
+
+*Rendered from the real SwiftUI setup view; this is not a clean-Mac installation test.*
+
## What gets installed
| Item | Location |
| --- | --- |
-| App and WidgetKit extension | `~/Applications/Codex Pulse.app` |
+| App and WidgetKit extension | `/Applications/Codex Pulse.app` or `~/Applications/Codex Pulse.app` (source default) |
| Bridge and install settings | `~/Library/Application Support/Codex Pulse OSS/` |
| User LaunchAgent | `~/Library/LaunchAgents/io.github.codexpulse.bridge.plist` |
| Local endpoint | `http://127.0.0.1:43187` |
Only a logged-in user's service is installed. No root service, firewall rule or global security change is needed. `install.sh --dry-run` checks tools, existing app identity and port availability without installing. It does not verify your account login or claim full clean-machine compatibility.
-## Prerequisites
+## Source fallback prerequisites
Install full Xcode from Apple, open it once and complete its first-run setup. Ensure `xcodebuild -version` resolves to that Xcode; selecting a different developer directory is a system setup choice you perform yourself.
@@ -42,9 +66,9 @@ The second command prints personal usage values. Do not paste them publicly with
**Port conflict:** stop the other service or choose another port in both the native source and bridge configuration, then rebuild. The packaged native app expects port 43187. `PULSE_PORT` by itself only changes the standalone bridge.
-**Node or Codex moved after an upgrade:** rerun the installer to update the LaunchAgent's absolute executable paths. If another unrelated app already uses the install location, move it aside manually; the installer will not overwrite it.
+**Node or Codex moved after an upgrade:** click Enable/repair bridge (download), or rerun the installer (source) to update the LaunchAgent's absolute executable paths. If another unrelated app already uses the install location, move it aside manually; the installer will not overwrite it.
-**Signing warnings:** the source build uses a local ad-hoc signature. It is not a notarized downloadable app. If your managed Mac blocks local builds, follow your organization's policy; this project does not provide a security-bypass script.
+**Signing warnings:** source builds and `unsigned` downloads use ad-hoc signatures, not Apple notarization. If your managed Mac blocks local builds, follow your organization's policy; this project does not provide a security-bypass script.
## Manual development mode
@@ -58,10 +82,12 @@ This starts no LaunchAgent. `PULSE_SOCIAL=1 node bridge/server.mjs` explicitly e
## Remove
+For downloads, click **Remove local bridge**, quit the app, move it to Trash, and remove the desktop widget. Codex login is untouched. Source installations can also run:
+
```bash
bash scripts/uninstall.sh
```
The managed app, bridge directory and LaunchAgent are moved to a timestamped folder in Trash. They can be recovered; reinstallation is the simplest way to start again. Codex credentials are not touched. Remove the desktop widget separately. macOS may retain the widget sandbox's last-known sanitized payload after removal.
-Build scripts retain generated files under `build/` and temporary `codex-pulse-build.*` / `codex-pulse-preview.*` directories. These are not part of the repository or the running installation.
+Build output and runtime cache live under `build/`; packages live under `dist/`. Build staging is cleaned automatically. Native preview renders use temporary `codex-pulse-preview.*` directories. These are not part of the repository or the running installation.
diff --git a/docs/RELEASING.md b/docs/RELEASING.md
new file mode 100644
index 0000000..2156daf
--- /dev/null
+++ b/docs/RELEASING.md
@@ -0,0 +1,55 @@
+# Releasing Codex Pulse
+
+## Preview release contract
+
+The v0.1.1 preview is a universal macOS 14+ app bundle. Its downloadable files are named `Codex-Pulse-VERSION-universal-unsigned.dmg` and `.zip`. “Unsigned” means **not Developer ID signed**: the app is ad-hoc signed only so its nested code can be checked locally. It is published as a draft prerelease, and users may need to approve it in macOS security settings.
+
+The package includes the official Node.js v22.23.2 Darwin arm64 and x64 runtimes merged into one universal executable. The two official tarballs are pinned by SHA-256 in `scripts/fetch-node-runtime.sh`; that script verifies each checksum before merging them with `lipo`. The Node.js license is shipped as `Codex Pulse.app/Contents/Resources/runtime/NODE-LICENSE.txt`.
+
+No Xcode or external Node installation is required to run a packaged app. The app owns `Contents/Resources/bridge`, `scripts/manage.mjs`, `scripts/installer.mjs`, `package.json`, and `runtime/node`. The GUI invokes:
+
+```text
+Contents/Resources/runtime/node Contents/Resources/scripts/manage.mjs install-prebuilt --app /actual/path/Codex Pulse.app
+```
+
+Source checkout behavior remains separate: `bash scripts/build.sh` does not download Node and still uses the developer's Node installation.
+
+## Build a preview locally
+
+Use a clean checkout on macOS with full Xcode and Node 22+. The first release build downloads the two pinned Node archives from nodejs.org into the ignored `build/node-runtime-cache/`; later builds reuse the verified cache.
+
+```bash
+npm test
+bash scripts/test-native.sh
+node scripts/check-release.mjs
+bash scripts/package-release.sh
+```
+
+This produces the DMG and ZIP in `dist/` and verifies the app, universal architectures, embedded resources, ZIP contents, and mounted DMG. Do not rename an artifact to remove `unsigned` unless Developer ID signing and notarization completed.
+
+To refresh a corrupt or intentionally replaced cache:
+
+```bash
+bash scripts/fetch-node-runtime.sh --output /tmp/codex-pulse-runtime --refresh
+```
+
+## GitHub draft prerelease
+
+Push a tag in the exact form `vMAJOR.MINOR.PATCH` whose value equals `package.json` (for example `v0.1.1`). The workflow checks out that tagged commit, runs bridge and native tests, validates release hygiene, packages the artifacts, and creates a **draft prerelease**. It uses only pinned actions and the workflow token; it does not receive signing credentials.
+
+`workflow_dispatch` is safe only when run from the release tag itself. It repeats exact-tag validation before it can create a release.
+
+## Developer ID signing and notarization
+
+Do not publish a signed-looking build without a valid Developer ID Application certificate and Apple notarization credentials. The current project has only Apple Development credentials, which are insufficient.
+
+When those credentials exist, build the bundled app, then run `scripts/sign-and-notarize.sh` with these environment variables supplied by a secret manager or secure local shell:
+
+```text
+DEVELOPER_ID_APPLICATION
+APPLE_ID
+APPLE_APP_SPECIFIC_PASSWORD
+APPLE_TEAM_ID
+```
+
+The script fails before modifying the app if any value is absent. It signs the embedded Node binary, widget extension, and app with hardened runtime, submits a temporary ZIP to `notarytool`, waits for acceptance, staples the app, then verifies Gatekeeper assessment. It never prints credential values. Package only this stapled app and state that its release is Developer ID signed and notarized.
diff --git a/docs/images/setup-en.png b/docs/images/setup-en.png
new file mode 100644
index 0000000000000000000000000000000000000000..c6495fd67c0ca34c92e0b0732613f5d8f47b717e
GIT binary patch
literal 126170
zcmeFZXIN9+);21l@K^v95$Pzst27B+r1wtfNbk~1C<02APUxY7^cISgfQWQLC-k7w
z2_e!F=_h{seb46E&-eHIIoHm0t*n`>HP;$zmND*ek1UCYJ!R8J>h7KC}z9ZhoYUJ(vyVS!sB?@zFL
zk(>d^SfX1G?u-{sUR`HBP`1et0byEt2K7o)*&g1wCv}bB?_VJe_t|rVYzL#BzPon)
zFUG%r8C<{N`T73;rIG+SV_vci<;O|c|GXZ-jlVYElKsbZ{`|COm6BqE^FIC*^UwR-
z8~Z{356K8_OsKqjr=brE0k>dU-E@OfXzF{VILfu;bv&Ha25YX-ZQ(P%VIKE+u
z=5DTd-v8&5UI#1^{_{#wnYZqZDMIh`Zv9{S2H!En|LvIn9B2RSnE%e0|NqPwDZNaH
zYof@~n;vC_78q%gyE8UzXS)&JX((z2KXqti=CiF>tu){k8A?kJK4~>*;x%DM1s%%?
zjpmqINf5Jz{zG+bv1wE~eQ@yG@|pkO(c7b(mKaS;#{nkAaDquu+(2-}8tQe^FodI`
z^H>9s9*nxYkYyGYHbd8v|3jTxmEbk)<7!ZuziQD)@r=@1+|uhXzySAx9&hp*=3_Do
zpTyGz;Ywwj$%YUAkfW^(Uzwd!s6xrB%wwFfENK6x7B`ou68xL6vk~moqxe9nRG0{Y
zx*F^o)9_C<-&TRwvbkJF?Vi9gKkS-Tg>5j0W_7!I>{Qi!{o6QhT7F}_Kx~Nuec=x+
zHr1j3RINod`0AsLT)NGP0x;X`6#Mx>Xt6n^e&AlyFqQX*RTrdAE%CbDe^z7ESiPCv
zwCEPax#N@G5O9+Gifnz8LwCzFsp0W?PD-Wjs9SjZ|HUA_-pq#{@Q#UzkW|y(_o=3Z
zLt3&
z=Rht4xpCv*?UBCu($~ra6IhcDCMZrvbkCUlOBusK*=E?@iDXd9nyaL1faJsHWJ3=V
zTVXB<^OSc50=J@DULw>_Ol|IpK_Z;el+Ny~&F}CXoh)-&8#Tmifi}fM*FO&eo5l_Y
zjo7m`&Kz(0&0HQQHyh4#>+>%!g@<9lZ{~J^=R%_yPbT>=yZ{=8n^%p0bhwlpv8RBo
z+ChXV$qq+yb6^{Hpx;Ms|81A#B410b8sh-~NhL8mI^@2N=gXM}Wk3vRH>X4K8Io8T
z4n0vQCN(KCh^lmkq<>fpY?AJRojcUu5GF;f41JU^r>`wb9?FgsmnKPzkq*q15u
zU)&0zbU+pO?PKzwtDX5U_}k1iO%#eyf3mGtsV=Fw0KqjDTe1;}WwhU$UC?T=YMJre~EAjHL^fK?d02lOm%8q#)eX~xO4dU5I
zs-;Bj?wY|!G5Zup=jfCB_=^NlkgW%C-JXf^xPqv@JnHX%r?xj?T~#&!<CiP!a`)0;RTQvKl)_ntro`Z9)
z9b=lDRl&o9c4
zE0vw77C74&y?cipQ?%w-aB#I3#NOd@)#Hp$u51#tRclDnE%smZ3omHw6S^|&?ld35q@Gd6WzPR-!^qKiN>-T-|BN(N9o#&8?OE}I%xlJkVy&)e4HP4
zIS?WZaai(?CUxT+E`WV7lsHbjW#Fa0WpAZh`4qlO!)J}P%bHkuIM7QNYBkUFF-eku
z?oqmKquhmeoMp{}HBN=(h1`@EaKpYj{U^GDQNv-;7bBWifn}cEUpFo(1IAyD7C}B-
zfLruNH~kpBZ+MKvi=??CsYj;KM<0V4H@N2L#PPV__d$Pt9>!9
zMiZ3ys0hnD-o!PnXTW3+oWB`0RT;C=Tpr7~r}D-5=#NVohe`YNz!*dsH6GsZd|Wb8
zA}jqj*C2@{LDN!5U?WmZo4#z*NzVh*%Gr@464$$q1jRZn*CJMjH#rw(DwB$9BzY=2
z17rSb<9}jdiSA
zen(&yjB~A~n5KC)k)N%X$=O6q{gI^Pgv!QQtJCsli3WYWwQ{WzKO=rGkb2qtal_b&
zohv6DVlGqG5#G!oU(qXcBk5@#Znr_X?eoHmZgyz-RPDZ%eOw_Y1oUlDTQ#|e@3B|b
zaje0HOESyV(I&;naGh#e<`dp-%R#0c<|@<;#1+nHE9in#H+OVZcYU>#gy*|!qF0@V
z5|7E2pC+qIYFs?$x7-rw3@Yx;fW7LXU8?qbL%n?BYcOqXGjE9=e^8dGOPeFmv=YVzKIc(7QQjZ&~da2fQy^*@~Y~zf{8W}hfMPwZo&1zZWzEdVW
zJsbBoVDXJP;kmeHbQ&)cI6hMBwLPk!rT&-VBD;l7bBm?B+3G`gKDq^{J0yB
z_@|tZgfdncTlo)_$4%w5gL2v73<1DFbc@-P$yC`H5^a6XASqY1(LCN7{R(TAPNaZG
zG%AxVAmK617^upM&eCE;p4`}0zrz0JQWGzbT_m+9V6NW0iAp)0(lVy4d~0Khqx#5j
z%>~JhVhd!;vNdTVqNIFwm6;Nn8VY~omg9|gKVn$zU~@%
zh>huJlVLNo>Y8m4Ki^VOaf+)?o|S%$^KRd9?=JCN{adx7ZOs{!c!@V&WjF2Ck!Z7K
zT-(EF;uL%2=y=PHYbrs@iynBh48-*aO~$w_WK!sj`4634CIxNkAXgM6fz+@6J+uCd
zJMytI-?793X^4V#*Gl)(^~!;z*10oqP>bI)PFr-fqM9H>_L$T!$~
zfJkWE{$$Eb0Z;kGnn}^98`!TGLBY`e(1VNHD80}fb~6KH~qM8@Cg
zyPJl`)YOe8nBH;|wY2aVq~pze$bw#Ge*B5}kUHc1oZ1+OE)#g#POvWO^JZ$b+U
z+~{EGQvr-w7@qA=6L;FkxV!gRJ(}){f>%hC>b=`C(Jqu2y$%EN|L9i8syd3v1u;5-
zTAGNJD(cLXs-UMzb&pHV8fgqpwzYqr#WYA5^Y~iXeT!I9kZEp!yz{(
zqw;D4pH_{b5O4d#@Rh4-j>|p!ZOfJB5T{C$_bsbVI~->CEj!X0g*A`JN5Kd_m1hK9
zlvVUfdpVZUODlUhlt)*+$PCAm#`oSp*OFt|~WY&dann{PRJktd7Exd~C@iwUmx
z{<&e{Rfz$nqhs?3H{-a&(5ZdVviW$tGh3b$b$O!L#G6fH
z57hxYb+6_8spjUw-nnd%gtzeDP4CdREe-!}6s$EZx~*&)Bvy-qH|Y*Bp*t*LTYg%n
zp&=7z`TCW4uMYLxDyU>K=#fPmBVaX1(50t*R~n^00}w;T6bFc7eY9^GYlcap77^xx1&6I9d!&
z#On}xpr;Dge
zYn30(Q?Omv!wm_%)dsu?0=u(fWVsF)P4U1=_RVHhVT-$fLc{Ol2&>7DosfuI!LIx1
zuSNT!(ecq`xYxejbv0$~o+-p55cpDT`qq+<`$Rd&k_;
zXcny!NJKvZ#DIHj2~{Kc#hi~Mc;s@|$p-z6?E!(jALW|bEr^#t_GV#(EabQX+Y?r0zd{FRS*s#FDhpn#{n8{r;MDDiiEopS
zZ?*`OiW9U=^f3dqs9|VchXoFBXBxB)K-7)+p?(WX^m>##6Y04TNj;ZQV^u+rde_tK7#SGrz?Vm6`+t<)VE3
zk@KNO(SB+n?Ssl$f7DA{?4c>c8xP^?_y!R(5w@p7>(D1{{=PNWT^k!E1J+Hz7;E&0
zgAF$xtCO`Q>#ov;%GF8jku65$UfGe+Lg}=5N>eb#k_c^ZUUUFgvG0?wDmhk55;W%A
z4!JJ0t>VzAGFqUMlGM1ZTxcZs;iz})bx(yvu;{M@L4V^n?muX0^=d*Drz-t)LI)@I
z3d71D4tk?`v<8O@9_cjk<}m26R5i^!Q)~(gRX7RpWG@-fX}Z8Mygsn*NlFKTHh(X1
z&6`>*uJ{|@zC!58$}*nheuxxnLEoaOS0a@`4;!=7t<qlN(hq&*nqhTLqkf(}xXJJN%
zzq~62I(B^XA{6Oyx;NFGrI8|}y-mAIEVzI4o_Ob!}9j)8wb2{`jzeiA+`jg?L0p7-(=u^kgU+XO_fsU;`wB$K=44
z0c>8kIp-}0j1Er)e11z|wri~&iFlGX`gxCdJAq1wC}f+g^ZHUS1g4zmKYdLmtgFi}
zUf@Y95vNaDl5_ZDxgqtETy4-akAMsdq>I+1CJMRn@v+^5Zh3~m%{05#XBanepT7-O
zX~q>ofJn(q4AhP+rj->JIkH(qW)CKn9Lapr50qc-dvQ33l>fxhl(d-HX>&?}hSc`;
z&-gH36NGUJl-X-1-)qo;^;T~KV$_NrI2!t-qttMCa+|%Sfhry8i;dk1mQ<;5wJx;2r*}@?8)B{0k09n9F+}kMHTykL|iT+oL=*e$!+oIsUy18?jy@IcR?s+RnrZ^*
znu)|6v%TG>PW(rpF0IT{g=`LM*O7McdMlgOJ4$kupBmQ};_v+4(E`1M+~O^*Jl>rw
z)x|rCTI)+b5X?R93d*@OOgP$X7Uw&AtM2;0`KORq_xeA+iyN(c(bU)+5hu7-4RhP5
zSjUc;av~o%Be+~m0_|c`f{V{2A{6ily4pk_U1u+$&;*5_+C@o&PxR+>9bN;R>;k_5
z%U%g;;p7Nyz$!HKS0OL=0-<8*$Rw{tSjeFTlIGokqt!S$
z(^Dd?hKr`g3aj;mJJ(0MYMf0zb#+CTG;1}~{|x(Xq3pNdZgnBk=0Enk@l(i0PWhbg
z&5Do2UQFF6VLf%ZQzg(f)Y~js$7D|ZWY&HL;&a)kxCOInPOH?1yfU$Eu5g=Yc`n#;
z2H$v7p2iD4l(@xN$GmQe?d5+_h>5DV*yls|=nz&qcAVSEyB{7onnbX3;y$B_46d+6
zdG~I-cp4EWL91YYnPC#0@g)lCbTANG5X>@iG*Aq++??i_*bI-zR(%~{_TuZa$DIM(
z^O4i2o^iuECtM3aNU=JoHwE1OJ=HS3T>Nw5*>tI$d(*?AI0z)qF`HvYuiYq-+B`b{-#J(<(GDP3HV_|(gJg*&*d!^m_UkokTpi?~mZ
z7dUh-)$$YKX4AToYMER
zQWiWqHFN{hP5Ji@#_Buvaw%l-~vol5QDkm-qR;a11_s
z;V;$KkZe*>UD0R|-d=SX_~u)Lj=rUh1v=hrl`BtsaMGiHp_oB
zeLZ^LCe&O|y;H>@a}F+ac3x3=e(X4B7lb(!9<8y>1zXyIR!4PHcK7;i2OeE%7A?Mn
zCj<}{t=6c^9StP$#8L1C`z5K^((s~thawiZw2kfDIWiG{{*^b1YLI-WQvbxfy{iGO
zzu)BA90xo-<0>{@AgrS0R5qohK*;ogsz;h`i|1*V)l*?C<$h7TqKBl1a&!i6tVW*%
zofmy?MKVuGM_C-b%Uaol)Y;oy_`82g!j$e+#mk?c?K$1OU9wfFLqP`6DyIcGh`|lL
zd{*Ht4GQbJ!~)7tf4l(WrdAS`&dw2ii2{=GAk=QB?|wczfi)|cRb+#=!Gr&}NO09ByYG<5`<}w*#}YGa0S9RV~iRO0RE#
zM4`=Ep>zGU^yDhe%-?}MZG407liDw|5?a}jD~S>esH+ZJv6LLMY}}!FUM-8`jCyp9
zL<1a#qeeYhT=>52Dv@%t(B+^y&UNlEh=a;nF2gSOc?aR~Oq}(s?(sS4!Lmq5BfzAU
zNL?w#N1YDi^n(3KgIZa2SEBDA*2}R#4@a*J^0*21{lpyK+(Ew#GL_y)*~HTFtNLlo
zbyz?I9reb3@z{zw4*SS~a77+<;lS9I$xLbqh@|{j3#zt4r28bsbmMgl_V?$=wos*RdY|C>Cr3x37%R+ft0~l<%*<^p&Q21sZ$J3HYXHt2$249`y*`SlCVG
zaJ0h)q=4UJPFD7vrgY5;U^io(Z_t^=X)H(3wEeK-H=px*;5Yp)jx{7!k2Ax*Qa|uS
zu7UHp>tqp>gm{?=K$xDw{sd4s(Hk7p9Nz4leUa7%c}JD>^A_`aY9X1`0?JE{%|f*0
z8c~#97gUu{b1(I$<^$Wl1wHN~ujqY)Xx47{&=B}dkJ2}-CFLc_
z*IW~igtC_q_Gu`FX)Bx2GYy%NN-T#^gEYLtKU3*vKRwuO8yRM&JOkYydOp~+sJxAZ_2@R@M?p2Y6~Pru
zaQ#7lB%YVQ6QfpR)M~+Rrbm*x8D>zV^>z4m5n0;W0zD&*tx75jpBQ&0>Pezj5GJg+
zw~SI*uaTN{Z=Vg(UAGnYeZk6&ztMka<6zm&+(%+Rc@_}W(XB(Ne*D%5lJOeLDWYLH
zNKybk{B++o=wR2Zc{En9-W79_w>EDx_*ONgViHIxH!w7ixaKNOxi{8gB&0Y}FI(?5
z_vWB=OhxfRUCaOEnC_V!r~igTW^&0`^f8?w9zP&DwbpS>(F0Z5TfeFcLNe^Mv*bmW
zGsStqy6ZTgZO??(L(HDt#^}`ujuuP8eFD0k$!yx<(Jc(BR9w1V<<+utMd}CV8RSjS
z#{l>t>DW`nVRVH1U-vRQr0we@r=tc)eex3
zSf$6*>gUWtwrOjK;=?NOkkAK72!1jQKHShJ`1)y%hjt9LjsJ>Wv1j*sHN1}bJ#Xh|
z7i%e{k<_O%q)ocM)E>Qd#KW6l1^%jIw0^7o*)5w!h_hn>J|Ib{8Du-QFFKm%1tt~g
zr4D_pGwRw#+A=}aQj!y_6LKWxp3|3l^Kzh_IO3%~#r&z37j=)fQ?ldGMOCzO#MJcs
zo6yaeTn78|$vn@DM-bXr2-_OC;y)SlBdhjE(afTR$?UwREd*{eQ^_?CeJUyIK_%GgX7#i_u_VvO2`nu5_%UNisi&r1fNHa^Y@?cy>LfUX)>p)6+Ez-D;@lt0c>c)jM+^4^XYi=%Kt_>81E-)=|EegBO)1_My%7LKXZ
zu9hG9dvg@E?YJ?%6Tr!1H70r{H-?V;1Vty;KD#m#iUXY1wrSWAQot
z_)gOW#exyux|f5Md)ttvrlNZu<3O9+1(hdf@N`n`({?V|%O33pVY#phc?0do#OUUW
zcm@+)#QDCL`TpV{T|5rfQ5`-UN+ee9CEnczaPmW|o3$XSPSK(>^~{q`=hRAF{^}8p9BR}e8*XYU4-s$`Y93daO
zKiO^7Bg*%BmD{wnQsDDCvKEaBx$YM0UHl67^WjN?2mxJT+iH(I
z%e>QTiUkI1mLo6INaF*>=aygW>)p07C2Z2wPC`-Ywx*zJCzF>mK%QzGpt1SF+K?P&
z*!3itP(I>`Z;Zs5qf4%WHJ%N;ZSxr%czwNQ6N=en@Cc%Xcz;IIBv*DKj0gz&c0}i<
z9sWcC5>5y)DXDmh7oTYXjel_DHRq_F^$kkXy56nNdZ<3)k9nV6x|ufHd-TalHm6NxGVe1<8QM@?aF7t|XMv*vwfceKR^74U
z-mNt1?)z>GdSUt^%9Kh`O1k^tK3Q@ybqOd;F`-RpXO?A9_gPor@@re>JDl@vHUpP(
zz^)cC@}h}$Cc)7Tv68%`pzwiD44VsgNH)IMuS_kIxav
zt34W_2&SL;Dmauv+Pse)b3@GFsLyf&Hz?kafcNiKl~3iz2()7*4n!P4J{~+MolQJZ
zY;ya6zIil6|0*yxVyviD&&!MNJcHM1O|IVK(5LD}apa0Dd0wx!=S$5pBGr{SYkiYs0qy9IJLAzh{E36W#?(4N?t{TW;Nz
zQ&vq-1$oJG0X`fJl9?sOUY^lc8O}Q!UG}}^r#M?ocURbon50*>&cpyWb3MAJ6hjCg
zN%$yrjHav6G7X8ji&3*&y=syz1R<81Q7!PUZQ{_uGxckGA7rBobhWv(84JUWIXsa~
zw7{3^BcUkKw_wbrjOd&LLv_V_I$F1#Apd$zJM1O^e+{Q^^9;zu!0uH%dj(DDTYU3Rh&6ZV*>ue>oipNDQg>j|K@
z*;EtjqD7Y#!LqYu56bNF_zdg94VOT%uHX;qNV=DYN@3Z8s$_Lb)#;e2df^<^!9LFZ
zQ`a?OzME!HNUjp-hg}VyYDrZ$kL9iP&1(N#XR~I&aLKdXz1n2+n^(0Vdx9GQU8CvI
z@k0GJbdz7`Lny$;rXZ9vlZFW&XWV!ZysFAdfH?~V@GP(3Q!k%Ro_g}bSWK}?IhA0)
zh30{?2$#Eei)Q<>a9{2@K2C;ZSI*$M(t+$BUHm><&&rSE7azQIR3G!JI{(2xZfc;Z
zoYIxFja`PP4dN363WO4KWAzqbe_y}b_Vg`+3vB_m
z8yH%me`(^qyZ*~qHHuz%{zADg{t>z?Sz-K1;T?K9YS^uVxpO6M@q5#7pulIbQ*2NH
z?ltEiQF3J9mU3ZW7Vk&UBJQ<8)YXX4Eh{T2`G~aPmV?1B7BtjT_UDU~_`FIp4!y6C
zFG3kJ%E=I+);$Zy`DHtCkHhpK(_q&1?{Y6j$7^^{79-4xh-}s}-@Hl2!9(QI@UMKf
zGg3?&@62#2f0h1B5q4@EIB?PO`*E_yg7`uP=2kj*KE`$=G9)ARE?*DJ;kY_ObLXuw5CeCbQNHjnHJI-+r~c7>YZ$p%)wc)g?v!k#mt
z8^%)2%lJ8Wmn}-q(|>uc*~G;^cvY@K@B6~x
zlK`|&u0i)Vfv(z27Og)nr*g0OQ)t9d^M3TVg;XzR_^`!Et$xsQ_iJ0PLG|%3U0=t$
zE9qa=9h$zSw@g-ZcCmR~k=MtkJ<`Il4MK|x9c1RPF84ne;D<2?h`1GAeI6sA7j#x$dAe0mtGb|?bwIg)1L3@9H($76I+SJFt~N*KqyKl-~7SoEq95pxKF%a24tm?q9?x?aa-fL-};jwoE3OLz2OHYm(Ztd!7(!9)hTBh
zl++{>&)+V&F5ldB)gKGs;(=G{<6VqeeP9iMX=WHT5`*$+qkhY6_q}caZCSLRxJ2g&
zHzI##a`v^m{@31SOVgq#i(i?q8`o?lzky2o+3YatZXIg
zE(qW>cpS?bwfB)r4UDFliP#1#Z|WSyy7<0y0{Fwz1Xl*>J6fEwPf;KeIbCt=!!q~7
zf#+;~2=njZoxxy1)@SW!aN8>84WzdvkT((}mU@s!dPQm8e3Gz7KquQ|18#LzF&5|W
zl*svJ#GN_#t6B^y$Hb2c{Bv-n-{RNwFpJQ`G#lEQv`bg>e+$IqglosE;4m%zKh>uQ@Mqig2YFh`$$zEQLPk
zG4i~4v-#w^YP@
z`0?FQL@020sot+oXUSF4>>2SY`xV6euk}3%diYvTjjP?A$rAj}!G
zH;=^qng=%O8NX)KQU9A{_@B}X6Z~qJFLZeW(kPQ4Xo}0ki#(e*Szbz;9||!Es{Ao(
zFA(1(?t_^AoqzhTl2kdq!M-sXRldH(FFL)2xT_1$2CMmGe=LBuRtiEXct9u-pybx6
zm4G76KZPa03;VOZAJ0@LDMipT{aIW=LAGmE^1b?={vAMy16-H^c!@a2Lh#v@QI5f!
z|G51%`~@C-CKd>B-|FRIZu58Mu)na@ud#;B%q(Wp4gfo5_gte^xlQm1>F|dGL(1Pv
zccTAo%KxX7!HZvRH;K6>A$et{{!7>*h}2$#sHNKDe>B*={
z@jZ89!awp)8DALV4}~vZ3kbLZN&jWI6(sS}Z~4GqTK?nEe;@2`O~Ux!9=k#yT?_f|
zQ2aOW!k7NPm}B)5m=uwf*Ea@JIG9Ligc9Z(9TmZYU~BYzW4-6riwvQ_@YU5-<_XWQ
zr>4GLe(pbRZiLSt|A=6)?vHJLpXwJTrTNJB@CR|R^Mbg{r{9~UeQS*~%XfJWi2kNM
z6iU9hP>#*Hb_T9pfaE`aM1nAcEtg#pCa9ec;+ew9&*LRId!i|z`UCH8Ef0<@gnvl&
zi4dm#CW6U^7BB3X6g$nmuwbx9&wK6v=*#Wzk6-}D(g=TW=8L45F4s#O1ap2M)rH!`
zj)9Pj-yeQnX)-F3iIAzvD}r6b@O36t5SzL3J^EdNtQk3NRss*+3?ikycU8a_^5)HV
zHdQiSOmEw3L3^vszW{A>cvsAVbRY2=KlHXfJwh|-R_M4@U0VE%uU_*s+nn8dOZ9xm
zds!;(e2!DElF>FND08Q66#2sZyE(Akw+a
zLZ)yT=>dEsCYn(IwkFGd7QrAM3G|iib@}YhQHdIHmk7pVO
zM@CX5V0>OxlOMdD7y1)fXMb=9pNqFBNDc!=1ygYmJ}*`1+cCSPU9`5MJXkwkK8eeZ
z4fasS%}5VXjE`gpz{|l%T9w3UyK~Tn-Bgno0-&RMG(3L5quKu1Qv&-qQ2FmGF1$e@
zOT2l7`a354-;_MQz8tz`Q>vNF8Vji?3htDswl?woau+^0G<3%(H;!vCjgL=w$rtue
zn5-4~BDm}N(AI`oaB`JVbE}Ykg`RFWS=+Raq`vHvn#iZsLJk9OeI*!j`YOE$O
z!S4}U32|zWxFj`suZQTKJjM4jRc5x~Ogv!M&Qnu~vrY23S__%dj*fAp6yb@P3v8Yy
zC*TAKtb0=oV`ouHN#G(rOin7PHpvOXiU6COS{h4XQQ0joO@ofSn8Q6y{`Xw~W#*y$
z^0ed9SYeUSL+D4)9?S6|bQHZ5Xf_IfMojIm=Fc_QCm-&LN?n{C)Qm~sA3iC9{_~7(
zvu1a=`_6O7SAVXxK4wqGgAzZejr)8Vo8k&I{AV1VA@KgHv#j$N>z|r)Lxu3Uw&69w6O$=MuD&p!}n;gR|LBRyE$vGFk3T&dJ)KY?gy{cr(IYE#p(pV;;Z_4lQ84RhhA`
zBHv86CCh=-f8G^$R_M{1zj^n3zF?i9_`a#cO)(x9NRhDTpsk1vZ=KuL5TdIPpJkt_$(tkr9~p!Zji!WT-SUg%
zhG}NxZ6Pbe-QOcEnp+-dEG*b$O7*RBXs>=F_r7TsbncvF>^`^VO@V6M0NVC9&KRQ&
zH;fHjuREntDF>ELOd#&kO*&SQ*?W(pynhaezapz<+HGI**Jx};Io3#=uYJl5cB|eG
ztRb7iErZf9wwe4s)o0iRjC=Ggi8<@~fj!R=KT2TCz-Rr2{4?V;CD!A^8M6SVT)l5I
zAz{^x^!tsWL~mVa{FAMz?TJa4?{@4G9S?{tek#aDt~_jU>-Wkp*?{M|URROI#K*d}Iu9UACwvOVv8A)EFgw6LaKVB`q&
z+~M%C-+q~`%n|wC!3C=rKh{sAd$pa@tlGFV@D%=l-_azuL%%=x65fPo2&nU@Plq3K
zC9KSUH~4)}(`o&EdglGjGJ&pxS=*d@B!_aG)Ke{fo9O4nUWcM((D@^w5@dkFh^5_I
z-QeaXr@1#(7psLnJsC`BAo&;S<6os?yeq>An&-#`S;8c?Y~M^6`^KS|ay6B}vxatu
zBZnVO5%J|eB3nF8)z3A)tCFW9%cvI7C)M}%)xgnGH*2gG}n>t&J{iT
zjj0yJA)Eu7DB2BUVn{@nG{-@W$7|v}1;kCV@vAW|qPK2Z5_<@w@6Q%8nUL9z2<_l9
z6|lGXW%Q1=r_s6`e&XnqWMhIT1JZ(xb&_=zfnXBsopn3VN!qz$TwZc@1zI5`t2Ana
zRp@Y?CV-H^ztToE>vO0`>xdD4lFC+71%Q1T9f1sQ<;71D1Y8;lBLoEL69F+SXr7DBaD2JPZB){cC9MgyC0^3CXNO;C0(#Yq
z_jteHCSA16M#WYHDtwe1%;ONKiQ~sqZX3=g2u`Fak2BWE*|pyNL!9ugRp$@a~Tiw4=!3SeQ@y+;JzM5|^xAh^zHP
zf4P3eO_aFa=7lGNmD-Q6ZPoFCn@@;`#C^zos*KuPAYyx~{P|uuB)`~Bm+s}O8kj=+
zu?=+!x2kHXGfejk&Bpa*%Q(l@*J
z&sm>)Q1M$aby{O!3j^rprJdV3o4@KX!@tUMgO7C^BETjBb(obxd=}00Wuj*M(1i8S
z4jh4Ep)_FxoV||d+d7_;wN>!{9+HTCGc|LnGD;gb%QKv`j1Q>N3Cym+1&ecKBl0%=
z&uz&FcLH|CwP1#VGx88ee`r~!$IE=ZvG0BNBYfUYtM-Nx{lqT#Fz9QWss5Jh5R%c)
zmL<$k%@pviz8w(UO7&ucmf9ARM}|BZ%dt}gn-zIXE{mWOEz^jHaW$IVMA(9(%;aRt
zph=sS4$)R=!UrRHvnDP)mCdK&(#A}_Z+97NB
zmk@lb7*{NOFL*OQB9b&>vOuOSTNXq)zx)F>-w556-0%+UT<$mx*YlGc`o<7k-?WCK
z-WoG<6d3j&$kguFL1rKcnH_@)V28|xMwh-|~$ad^6o)%i_A
z6VyyQ))AI%QJswKI7kf_C45Q!`4Fox^=??xCVkxg6E39??iwv@ma;xLKJg{Ml}vI+
zLw^zz{JTz2Oc!&MtS&xz`^!tNY`2rL5!q#2rlZoq$Sf|I$k;1AoiuIgbUzc)GO`0v
zPUE!R*F^WntejV74)tABW?Bx{>~vnn9XX8GhKSZ$6G!fYVm;F{`A1XeFYn36XV+T~
z^-HieCqo0?bVy!(#nS_dSu`PFNWZc+>AhU2q4|TTj>CPfd^nvL8DHxU!~*8-(W}{7
zx5B$EZlzqld0y=;{+=fF(L`_j&4NDo*_{sfUz_kibXLoAoqSp4iJ{!U@O_QS+U6aTMgf>)}g`lUcho_3v5z>v;5}0(P+$^i_B{y>qe61Nk!9
z)X_Ec79Qa^O@LqO3J07nk?kjrnk|@!qK$tIRSEp82348fImr-EL`|>r+t-BYfM3@r
zi)|DuS_-DyUADROtLEo$&Bv^r<0L%=)1oaRGs6ae0?%8PWY$o(b{$bW7C#r+@Ndl0
z;6fiAeV2*vZ}mb|e(UG!+|N9Q_zF(!hM4E>v^(!N
z0cUWkzb2zIQF6&Z$MJUg6QE$}o6AWgo>v95cgN+G>W-hqn>xZqy|ONb@HvX7yTScP
zCz!*#g$(W9Mz@VnqA^j18F5cMCn$OGn@dMGVtfnN58MGc9Ph7LbZNECz=KX(KyT+x
z7eaEx>0o}IS?lJ8pWi0x@+3O0qKiGgT$}DS6pHMnViJ^3w&g9XSLSm*%8<`jdnR{+$14^O-P2
zlZS$39F>&oF<}LrKb5n+ueE%eV$eutrk&qUI-2;t7qX81!-Q6962X}XC+@;ZOoUhkDTeAPN
z_w9dmu3q4QuD7aYO&Mdd8Rc
zwhrm|y~*w4?R>?0Fp0jo+cYG8*RML1>UeglPlwff68zO=oX)ci$}*YtqtPwc&dOka
zxpH+)7sB7H(|u)diP?KuTF9LUPEuRJew3G2hEtTu7-YQo*!;8N2-K|OI+a_^>iKgS2P@rq+{@Ii_bg^F=
z6SPl$x}n~YqWQ@7>G$RVWMBNkQ1&f8Z!@!Qg^f*Y(JzH|r6wsAQn@Ddn*E%0i52MA
zu1gGK&B~poDJ&UDxz=BitJJ9eV3TP!nvzsJ)~$wIAvu%xg#v~h{4EskHpS|X9;Phi
z-tC@2g~?zs^GWO5so}~&G5m}@9osgay*4bJ+W2p(XJu8vZVRRLu-G-=_+7Hn+X<NjfKL2n14)7jEvIUQdKii%ZeRZyyK?*fC|=9%x8S_`GZRvP3|6~XkYXA4^jfrx#iP6x{%fJCWQnFSZD=|k>}{H4F-L4R=TCzXmX$gDXHq1@ua&tT3(Jv*9!g|
z&aRB;DUb@QT|RM}U%oHbY@-l})@7RN&e*L#r*q)}+XDD%YZv&cj<2DLug%ld%C)%g
zMIhH3rE!DPh6>?COV}HuS_&EIl6xeU-hpP_r{NZ`AM?FO_N3h{;Fe5Xrlq56Du>N9
zC9tMCZjkkdZ52F-107$&ZWp`{iAhhl)fh3c^qZ?kc;Z|O9$&{;I1p;}8w^2)E-EI0
zv^gM2r_221l4}BxtXz#9d2puid)_dJJ&@!Zk#61nJt6goL@9eYfyotSGnxG{1*?nOOOUjN
zoxHr3{_=QlWv)V(@V0jZY?RoXu|W*IGikT_EJA9P!eL2dr52ldD9aDRdXpl0^MUnk
z&1I+8?BVQOJ3MsgSEP$QA66=(^5A|iDRyl(^vqN(Rnx8o$1QLNiq5aO^gFm;mb)I)
zGPk+#JaL_m@f$;mYU6cX4#aX${fueA<9XBhoR(7y1QF(tO03c`WJyo&x_P(Lzk)^H
zrvqrj+FvH?cfcjQff_;sMT#+d#yNLT0
zQSMs|(fu$t08fIh{Ju+Tn9sqiV#a&+0f<9s7gW35DF3m#Or01rUxlAAXATDt9{NHb0UX3f+x6OVGA!7b4)a+SV$^Y6m>lvnJ)f1#z;X
zSW3;91W{+@+JX&(hT|Nr4&MQ1eM3Z;t_pX_B$*8woSySXdPz1z1l6
zd^cv=@xGMp6ZdKFd4&%o#n1^nRX2en;pHiE^_cNb0$s_4wW
zjvd1;$9WI|0^Am$}7d-Wy(rHNK0(Bl`jA=@&vTUhiePM$moA7inW#
ztVs}3$BHV6(BVBAK^JJdyGpDc=fxRn$=-9VbuVfjkPRkblQoAPbE~aam<;NQfY_1`
zwe4F!z|#@V@BYJ0L6zJBp^yBNp73?r^LR+VA5epsqd6aSQ?ZokoHks4D?XiN$-ot?#GWkM|=ZqJ(j%jGhZy5;2}K}vWSK2Q&$k|ib>pR-SfGWI+g07LajXIs;xDV%e+S0
z+T&?oG1sCSKas%+E78Udv3M_YS(!>9-3r8`E%glYPAlBH2W=_{e1A3HCI(S$k;q$B
z?$?$`Ouu!CaSrEa>qvH~B!@6xbDqIT1;_FV-Ij(h&(i}%`+SnZ3>&$Z0-j?;>U_UL
z_-AmQb?eJyvQf|qFq9Yg%vS-%>nEM>Rd(vn;pbgpwh1gHY-pga!TwASp{zXx1KeBF8(|5sNWaqEIVI2SuDH^tH+>kc
z93rPW14`Zp2+ul~+(=IMS_>XtbFMWUk^m?C3~%)_ybd+#3@e})4r2-VwVdf@Bqc!U
zeG9PwW~^{875HsLEA@I0=cACP(E5*#l^;EHkDbztNl1=T1VePMg!F?84?4aT%=7yyo45CSsLreZGFBU>0Xm1@!qi-*tyJmypwA!Okw4{&^l7`SKdEI*C{Nq&gq4lJd&sQwIZ;Z7xxCRW_u?
zIj9i_Z_dYZ*3cf0#~fF__780tXE;`D{;tMuM?8Iwxhjuwr@P)z@Wk3znGxCn-;>0_
zLEmvz+YwxaQ2kBCmMNui{X%DN#Yk+=H8=hG(C1MR`$m73>f_SdJ)OB0{e@%w?mk2@@?d}*(CadMzR6{Bg>T7IYM6DL
zcW)>%?+92F=X4WPaY^^gYP-;u^w4kw=&(L1OWkja*>|3VD{s{%9$_=n#^riyV@{FR
zZJ5d0RwQNVVgcdHvXG3d%|vv~!cUPZ5B_{0R+HP4O73LwlwVsx;e_2B3e3})untGX
zg*y%PkDK^M%sI37a9U$0f(Pg}3W<35}qnJRq5UUWCi)Z!SsNZ8uu2wLKP7y?&R#*R2BVH|SFz}@ewm{yU_
zW8<60Cx&Y&y^fjK<5h6x@50|!#P@F}7EKDE&UoHukt%Ew{j&j;u^rS3=jA!wC0CW;
zJ4FaXXd->|lRA1Gbaq2yENAuM9!mHw!Mxwyj*t&44xsZPI>*OW;5lbll(eCB&$zL)
zv(#RWtaPslKWN9V>gc0Uj_r!aeY)AwnR+isqc#BLa(BG3Y|Zoe#l7O(k@)!a#VZz#BPu-v#qq
z?*g#`^WkvLHCp?Q6HKW4vh0=KB=pZV#x-w&FCH*rgZf+&4_&s7NH8up52?rXJN0+>
zmeb}MM<>>Wu<~90rd2Mk;R3nStdOw;GXX(shf~ek$O>#`7-mk@%U$(IP|>z&cpwafToXxqrjDnzg&n5%uhFrw7|PJZAN(QxO27m>xvG*uM|=h?dN_s>V%iutJNdpP
zh0~tO*=oLlr1h#bA(e>6=i%1XB1xDYS)oTXQga?%W(wKUJ8ERSj0s@s+;(>@Taj`R
zV_p&3eAo@57xLHO*Kc)B%an2oUZ~BvZfR{~_e@yL*kznr_tlr`Yl|6ht{#_)B|56&
zJwY%OFj-!{QXQ{#+>xGpa|B3DnG4OgsK^V#AQ))9MU&OTgQ-BPk28k=0FimU6Bo(=
zJ&X2Ig0g9(HkX6>d7WXImHE@8vDM8d`MvpZ{z#Kns}EONW@bE(m{ty^V`)vyKCV_X
zMRt!M3wx5s(}OS#@cNh5y&~2x2W<`D?S>0XnIDbiCNm1#1goAf2kyCTJ4Za?E^eEf
z)iKoySW3Wv*Ms61)4cfaaVP}dW}6xjy%a|>NRSsH-GnHT
zwxB`dTesSQQ@*GFc3Ol9Dc
z-`8hPsZ$>V6LD`de)@lYh+rq`gh=6f8Mo4_*ZaT)NZYgFek>1eR*>37fh3B>XNgO~
zbPEryI%biw6n1Oc*-~{@ZnK7@2lddh?Rr+T2Wz?13U~8QC<};3bLF)$Jl1xf((|Qb
zMUQN303z>xYar^Uf*K`4ty)v}o0{(*O0PUgUvhOC|9s7V6ZZT~#zCeESCA=D%C!8(
z!u-8cw&0JyR9q+tX8%jX^#^<~c)Rg<`jh|AZJg#$xK!(dM#_KaZmR_ELi^ue(O3S5
zfhFF*w(=ieNyft)0ILj6{f9Q~Q6JzcuK%0ZKlbkbcI@Aqy#Jpm{=)n<
zxq6%$wE4=&{mjpEyNH5k2utAM(-Ei5C+Wh(I;UdQ(t^5$+@|9;b)I6C;+QhMHt`1A
z<%Bxu<+LJPv$b=I<2r!4+ANLgWG|P>Pa!axx61#0#c5|KKK33$OunkXrB|X_nt-=f
z4Qvs-y{$-dIUIBp>)@Zd{>gYTJ>D_Y7fu*@)jzl9yE~eiycW=))TpQH)Smj|fg9ga
zQ6BRjo
zkBuRW%chqJ3@o-wK=+%;{_S~v>c!G>b?+j}T660o@3r=}zv>uidHIM^`7c@%!CQK5
zjM4PCvJ0iU+6UlAx4%gE&?y=!AR}BS#)_4czSHXDDSf2IplfS8J{s@yoKCam{TvVm
zdKeULl4rM8N$ket>j6~WqTvnkK-wXI{?)JKlb#jAw-=5*8^rV}<=Rf$xA=N1#L2H8
zSSjyxE$17;i97~6=iJpR)l?Ih^!3&=$rE0X0M`*5!R~zd0k_}-bC(3u-Lyj4TL}_k
zb}h4{wO1V%yGKkiv3=oXa;0jOE~=CFUx#LjFP80NM<7F@$?Qi0^H5MCEP;ei{%d)t
zsnD~)cHHz>3`UD(6(8P;3G>WyJ%f{4zZfV{rl6zlyiMHZFb@Q}~)>!>nboqD~4D<-ag$H`>KJAI<%x
zwGZl85=-LpVCC?rJQj&A1`{GBI;@Wf-RB=EJs);E(;OBribufv8jUHr2t`
z_Ro*dc%gZ8ni{NZ&|YT6k^gB^SG)bxEPM2&{2oNQ3>Nyz{wng1L|w-(q9p{gr84~#
z0LgnO@=$s=B*As5LE0sXf{6D@d19mmA25_<=FVGB
z&|AEVfCpZ(7WJ5v_v_t}rW;*iN-Zu7i{=oQsgj)tJstqM^+Tw!-1>piRuxwrmVFEp
zHgNnc)I0V;LFYlzjfbmRrm_sK-cbD50=bld>V6W2eCdQY
z7)xtkml>35#WCFP7Wahj-PZo%;<8l<9E$Zj+HXfoO&`IQQOE6`kR_a%#oK2r9S6^Sb=LHJRj$)C1vY8h-L|Pk+^UGDf0H6u2Ghw-Cqw?b%-gRHZ-L9`1O?&)#G^~`cKEGS;E0v?s5JjV3WuCACtjM
zk4F#5=4n(Eq$E3KUH5NLjw4_?uajQq4a(kB>^n?dj#kOEJivUQ6^LU$4$(+oB7ISM
ziIaze5Pgb$peQV)_=VuWE>F3+g)&c6tQzI*0k);6w4k&Wg3!(LIQ&lav3KnyxP8e0
zmiE||p3Kv@o5}-gyC3}?TUg{CItM(6Db-v^`ig5Yu#TWoCTSR7Z`cjn$K^@|Ll#7#IvN{=ngwBwU}44u0Cj`iMq
zXtv|^A-hY^edV!0)page)OA_3?GVUNPyu@dmaC#`fFA$y}
zXm&gQa38=e-*J39Tg)A430HDt)g5Fgw}&*?uUST`C$pM=NWxz+?!aDlJyx-g(l_d#
zaMuSdHn;P6LZ|eDlHU{1YLE#~n&AH2&NkDLr2CSSR089`)thjs8J?Cccw@?nY%#{$
zXFtHC+bkN4^(=l5C9N{QKK!XVY^KJ)Qfas9`HjLU%5ac+_yE%J{KbCjEBc!3^g`xX
z#{(41=y!z^%6s#!^D#&h98DoX{I#mFIC3KouU#NRrrRFoj-JNj8sT!h(yOg*n{&LV
zpH;Y6_9CbMdxeO-)3#f*Qh{tXChT+-5)wKVT0U0U@8^zr?|!@JwK+(=fO_*{sm3|=
zv99?vZ!jjt9g^OcCa@*W31#Dv7|Rr3GTqvPDfF3P;kvm!$$n7Vb6)BiVZpMt5z6Xx
z-t3X8w|_>ao`cKllm>&bNH;tWN~AW9-Z3xpIjm#z9J*W&`Ue@9rKF;w4m^1y@85+J
zTCMR@>#TE=X*ZPpuz=gZd)w6pzO+at)d?sQOU7F^zoyUBk@a3>-WM8O{V4N|u4|x3
zkU`dtKR1_k!pIe`b&HOf+}rhs<;mP3%j!jE{XUuHhVn89mc^m-@eBh|azHb)I&gpD
z+wN$3v6o$^KJG&fgT~JVo24!OItKvoP?|1*k&0_(ye}d#mQv1Yl{4~NfE&x(R8ZS5
zDmc<_k{wv~6?nYB%w7opS5tGwbQ1+g4VpJ3yuB#}iHv$VFM=^y2Z3?x6a%sA-1J&?
zRVn>jd_(f!CiJtP1I})L-V}+X-i!&QIuwQPIk55^1WQ%vBD&its;ht+7w;MS|8)$=
zP(%X-%RT}fCZDSXQs7X=R9X|-htW71y;cbZFPxWy>1q7lL0WZo3JM?PWgG3*YKRUu
z`|snVwp6Oe`Ss-=^H&d*(>6J|}AC(EB$S@KjXv_zuC79fjlp|j)ARzaZ-5`{RF
zLi*0sqeB3TebxRGdkrd`$K&2~HIBBjcjlCasf3f7R&1~(&h~rOJ7+uRYEktH}
z(^rne6_95n
z)|n$HLXx%gn~f|m81&nfNSjw(OufJ*mu6gE>oe}$k!H9^
z$rOp^FSplPxmoEiBk;%%{pk09WB+%{bZ1FO`@bDtLGXiB5wf&EX}Y*aE_
ziSTy?5e7z@&yRf(n%cEkc%t+EVVhqoAI)!hBJ_8vUrmz?3`}lWOl~U7wBJ^GHPy_(
zx-)1k_s^p1=z$|iPF>QVCxcgrh+=3cZ(F8ayyfi!9?SMUSZfNl-b6r=r&W{<`~iV`
zY)J)6FMGy+A$Y%uHWqM=%$>X@{hV}GChV1LF39p`AaTCrPo@`wb1k@G%3kAPq=Xkb
zs%08rYGLGS|FAz$F)ww(Fp|*hZ#E=ccnOk)MW1CW%8uW`iQ6w*1q>E*$L@@1
zGX}8b85F;iC&GHGpSDIkvD7!w?Y7I9jqW43ZfM+IZb`)na2KR8VZqW58sn{iso6@f
zAiHM~&r~Wfv3e>(`y=1Kj~Ef^B`dnSIu&B7#Uh|=-G}A9MfkJp4Hssw(aQG`p?3V+
zetwjik5Vy7y}YMKMPCMhcO#nhRTnCMgpRRs*ds&Z|{1r~`)qFci(-m+H_~^c;^LW9Kb>%Vh_A)cDL3&CL~weI4t5
zyni%nn${2^iR2_TAk*YXJIdzCZ_(p>9AFSusol{z^yk34YFbo-J-LiRS(g6g5`Va9
zxG+Z^+*eFj^%5<#m~*;V>5s`4AilhqJWf_79waj9dH6#>U?NL-v)heEv*u@hx>LlX
zakBgm5n8n8=fd#R{dxlX5``Ab^ltOB54|(=Qqdop@G1RcO%ZX6l33wOQ0ME8OdvTy
z!t!#-JeE4b`J+=5);P{CYm}IapXU2r0@q77PzE)g4{u~fBaYYvi&(0>3Fgu-v_Q-g
zEzbv%23YU>*1(O4ta^U0JDH%4#QMu1s(vGa1o
zkV>(1eM+3K95o(8Qt61;gvPa&^UQ~L5t8*Y#k!#c)se3mO8M{oQEM{yU!}(ViaTC)
zJt`J6Oc+VNwY`R@fNdWFr$$=EoFCy3j1|GFO|8~uQ1`dR;j#onTwOl
zP#&4UkTU6Ehiis6t6ynmsUx&CICDH{3$W$12Md#-lfArcfA|HHl=;3Xc3rWw`A*AB
zD@q?t64%wg@fjRJ=t)ebzWx($oO)zWuT<+BLF;pc2S{kl*QPEO2nE=!waZ!0S5n_}
z`};an1&c5Zfm99rUo1A=<6ASLn1mG#`Cnmi(VIWh^W1WOJBVtjS~hd)^imt~sP@@z
z%q^4S)=$PSkV_3}2A)cueF<`}*IQjWj&e&^&7+aX5C&|YMN`PGjH{3B3hf&`edEU5
zeV-&?m~m#>n&*AWT}qq;@Sym0fgaoGhf=3oM`Tc&TZEm2;Xf0+POv_XVHSnDNu6cX
z`(t9+c};1J`6m{cG3Pgc^DAboO(OX$ay=8iusiLbS#8uS$h>-r
z-_i>1NA22z@EPuh7hfJ$Vb%w80*!IEs^tW;@!zRO#0fdQGGCz+lw5S#SkYR46$*Im
zzmE9XZ*|zVz;Jr1M3t`C!jNmeMcs97sx?cvbBk-?&tph~0Zic#_a9yi$?xa4zv6Jt
z1zy*4XP9Md*;&m*T4!((o$lQcliueOwaFL``^7_Ljf)ahTFpeim-{_Z%H_sf-}$_5
zK8F+Yb!jbVP!qcth$A@)$_Q{sNTx!$>(7L=)HohrQ)Rzc!?#^5J|kB13r+)EBi}zY
zStSo9wFj@SAzzG_`_K#TT^+D)u(^W0aubGvedrdDjL)Jr=9s;*9)<*t3opHWsa}K6
zKD-X+L>g75QP#SC7{f6}j267R*(Eew($xq&{Dyv48~Z5uc;0Ur>h|@J0)?NUc6TIK
zDz@-IB>$~T;&Lh|XQ3
z9k$D^v`+muHeJfT_;Uqs%r7S1aJ>$uLX#8^Nha-yqCR(7Svc~gSdPSJtd8kdNGr=3
znKeK}Lwpv)!2t}wb`tfq1LegcTui8ev?`xMZKT^x!s?M&#DT<}3((`$#P(aLXJ*Ok
z-C84#uwM7!xsx~5fxslL$FI$-sU|KAuug=lPj*9#orf
z{ivE)k5vEbV})zx)1Bh=OEaG(^rqK7$Ppwwe&6RiiVZp+;>f){;_*S@OASXh$z7et
zI0Oz8RRIB3b(*DS;gaOQ4_hsxh=MME50ig;oW1ainok40iTgl~vL0-6iKT@rJhdbj
zh>eP>g&!h)u{vMsE)bS?9!Q#&f7qBgk&ra9#O~6Gb;hLTW2%7Z8rB;lwY!hL_8z1!
zc#5Q)<(xf8q|1bdGJ)iqXJp=?G2lt3xQ2Xy@ZQ1+l8QPFIx`u*6=zp7RHK6PcJi?L~-YEwi@c9QpLX6@#THG*~;E71gJ#(
zsCGS{qO4>S7nXK^CQTu5E45FAw4+gQ=zV6RJiZ+9cRg9U
zrqw4i7FEU0^XZSsJWC!Cn(p*aJ5H?jxF)c+o7fXPBr)1+#=Wnn2;r
z`g8@qb*!d+!|wc=oQ<#`5_xrJHKXH9l_SdcZ}EPVcCkg@+BMhfJfL*5(H
zpJ;g_0CEUM04D)Z@qUFQ1-`^etFjtJFKjg<$f-2=`bvn6&UFX+RfV(!U+GVQ{WkK}
zr;WxoEu})~d{=Mqt0{>jZG&tSKUCBZWNP>=Iqw8bKX(!Wg%mQGZZr+92$w(U!^q*5
z<1c2-K&JI4-j}mNgieibX?IpT5>l{Me%t+Vojth?}b+EU!aEt&ky)j1B92m8d|)%aBn`22d5Ozy!6~@TDT8b2
z7lxy%8TDicK9lgjE?Zc3;nYvt<9@xHh0O)2M;o!vYC_PbBTE$|@sIkt7d)f~K6n>h
zQ%7c$r2E;GuRmgD6?J8e4683#SB+8IM!}IA+?$dZkfalC)v1FXL*;s!$hBm^@{Q7g
zts{7Z-|yE)xJAQ$Q`^NrB(FDKMf
zoDb9hF@Go8Biodg>O+WYYU7DC|L@803OV*ld~1u^rX&E2*L{UZN^j=0HzpQOr&g82
zLS8NbW3(dQkBIw2MZ?BgDCDc_rW_k}E2?u$3oK3QMPX}ufu$UgCwJ204TT1ZHMjdk
z9vGvMecZj&(vWez4o~stk2Xn^yhxO{Wjjd0<1WWiyN0O9{xl7^@+g1
zl;n97Ur`~gDt)Ebm<8fg>X4A2^?6^J>K^;v_7=7Lp-E-KZmrYGC~wFQ`HKfsVPt=(
zARe;v${0Ba)cCU2UMcY(7!nyuj~r6q#P_`W2-2sCqF;N290y74#w9-v5$c^{g1(!euE*6@XGv0#^~wpr{7d8=F4xGZ>Q(OwMQ
zzFBDHuhn;PoLJR1Y1IsdVvQg%)gGkKkP*riHgX}$AqQeZRSjrge85Q&B(qiItWzUf
zGUS$h^A$6c(W1eS6tPy!o}#lDaq
z3Zx|rBh75tFJcv43F2LBIk~(A9L~su(59uFM)IR2xqR(Yu@?QRXyz9Ma6)*vQWZMK
zE2$(#cqeA2#=d92&8KKjc29$D+>6U>D%uKp6HP*)Cp>C+Nmk9)(`giKkC;`o3BI^LiBZ=JI*aLK#mL;W?HNZ#t%SffyG4AJag4<=+0h%{Cp!J#p&=KYiVPzcuq@eh
zm(8D=%<GS$(XTmwVKf-Mw1syWTUi2fAgf_Esa
zEDV~$-Y*Y~ol?W)O4GItiYjr^0^`>q2hw*#7`w&bA{|2Vi$cZQ8iJlp{e|Y90$63>I5Idl!hAC)`v6
zOk*Fos;}5U;osflk773J7fBsooUUI?;p2PP4-Ywr2WYZ4*s9owqX{I(3dlH^>JG(BeeT6Ina-eryIi$oUShsbNgu!WQeSciT~hIsh<
z!Vukz43L)-%0E#3FGEK`>=a#}G*H8vKeSrPBfmaa74a@nEk8cLU^PJ@2Spvg
zFBFqpg5fu#*3tezWC%7CLDu3|19nn{6E+93&mUA9mg4u^X~|bRDal!o6UY)Elj4ze
z3}9X6nkV61b#L=#WK(S4#bF~pH1RrrjW
z^|-r!CyQLwOyS_A1Bk<(vGhP=eNp}xO=m8TzgG{yY8bC#wYnj!-bzeget_55@o(+h
z1s;#l>al$A172NGTEySdYA0#MQOXgT#*$jWLEcmMoAyZ
zmY*8END8>WJ`kHOkj*0xK-M5grV`TUsN=6Cf(i**j%LH>q|Ky}bKk^#f55goa#_Rl
zJNjLTf|A`G(n(~p8OY4$AV?~`x6au~T%_-FneJTTUfahg5Ot0EAo!T2i93`;9w2`~
z>p%V%68?}c6A!0Y#`EE*U6I4oP4-H`Eb`p#LX{IlFR6A(_*)mA?N1I1ZVQGtMaz*S
z+`L4C6Ga=IDm9|aXg>miyYPtBa#GWiYj-uw*Hzx3q0+k@`@ifi!s(`W#0ZtLCBc^@
zgTg}Q?x^R}}28R2QRWV!p7qf$X-loSAV`6&9>c*Z|^0n|C|
z*;z+_1KNV}$0-4Uj9=kojko)XOX^h|8~b40o5
zg*!#5>(RVD_-Ow*BR&dz2ZP_T{#0I1;VgH))nC|73jM$>vN_r!re!hNiQdAdr-Ta`5DMCcOLi2|v>QtNQG
zd`md(1K&%}+*j`_duLw#INj?@WiGsD(Ei<@dWn&>SH3jT2GJu1VUQH%Fl{XT*`pxH
z=Lx$$Wa+pEF-W{Q6h+~|km$SI8&Qlf#k$-i0HI)G64`T)zNGUC{sj{kt$~xxpG1PL
zuHZnG${dkRvwtMb*?iWTWXb{77Qb+ib^IO3+mp`rO<;#!yHR{|TJ;vyl#QN--^5_@
zme?I|M=2txM~kd1Ily7TJ*;uGc5e&|*06|61t-q<;FB*AL-BiecM+;^P&=-Un^VvG
zc%?i9EYew2ry;=wV$;hXQ@!!K`g(lx{jeN}ND}#T{P1pp2>qnfW)K89nP)XSMyfyS
zF~Y+PQm5C>d1$oo!B<^)kdjE!YeE<$59!a^<$&cVVZrMwO$6zX?2R949XUt2vR(V)mxW$SaEn%6HKBztj
zKgm?LMBA22ghK(It7J_gO%n(H>PxFNne@_Xw#lCw8|pPtnjLyOTJXVC03LEX(qDWj
zlDjrIsrHXbGPXnAsnL94>E8z3D|8^zv&uMcF5@MEb#BV!D~Vdo`LxApRkj-0<0S9dLYYPKd#dIk
z{zhN(b}x4Zw*;@6k*W5jHcu?WW7S=dP!Q&+g8fWM#qM4|7owKbT+$5E9wnyy=Weot
z-20|;vytM^7@yy{g&RM?G-{xMd`u6D0$S}G`d_Rf1qi8mJo37cEe&gILoDE0H46AaKjCIhQQFEiOmnAXfb%kA54edl)S!y+@w&Db4!sKBVA*>
zzr%@~CO^zD2y3uCX@SNmcX&ym_0?|5c$(>1)cB#$tLFTa4tilSjmi?DW-;`Wf})j}
zshgi5f1tL&X6eT{*0g%k?4~h(9V#MdBZm^I%zWoI7-K3O`syQh->G&sQo#fA6_F*WoS_=*CG!*U2!j^cgeYII(Hdq0%~CX8`AKnpG4aTY{I<7
z`M#m~6@5e9INHZ`WU{(H?JjRqeV*k)@tCd;w0t(shOfcynRCx)xyu8DA-`B``{)lR
zis^)mg@@C5p0&(qEY=t`R^*eoz744sNyBdyWPFGOgBlUyLG>TP&BD>A8&N@LR?J5%
zuxodl(IWEQ_T+xc=eZMYTFniMK>qnJ622#o_lCR5X2h<-l{jb>$XLQE2iNZOAypw$
z5%e2pGmNQj8!N?5u5Y1BAj~iEW@8yLFJ65sUR}O)1BgGv$yQ;CBo!eGTk6i6g|jV%
zL%k$SqtRBl`&qn*XEWM<=f4|I^DdXHSnz{oQ?I29g5g5GwZibj5HHqf1dXz}BAk(+
zFYLx3Y&B1gWY{nlOtn35+|sa?3_kcqlf#pvwAW}a=ff33f@Djr{F%e`{g=9xZ*;Dl
zyNc?fTf2;rU&2&FDkO;CJ+F@t1>%X0#xFt)a8<@UjE-=0k+{YQ$JZqt+H}9oGS$wvEa;EouWX!Huw2OF#xTnnZ6&>H
zZI{>I)zF<=RU5A-U-*_uy&7Lz2w7+fCE&C!&hX@WiblStQ}>o1)vl|~2wmnCNbzT0
zi${g_mWdgQR|=Di#A-L5WWfm7sz-1}Yfvb`?Z)bF$;V`oL7xp@o^n-ID(`iMhDGo`
zGwrzl>6D|J^>wDk*%Q!};^%S>YZBsXCXK#bHG@DW&s9T&wxKcV)Rgj7+n4
z+Pp7Ni|q4^BdM~_sP%a|xaR$So(XWKZN467Xm-5*A(r80g|(NJ9pLyAhN6lYp4O2p
zc_IGSi8dW^cVdW<_?=%N2O90adv`vGU82#Rc1R4?+8q6u^WM-e^5x5sDuA;^p;sE2
z@=ghRS&ehu`f#7>Zhug??`z#S@k)Yq_xSgbux;V<#6aQuZ1aqQ4-?1Yu^r^)s6MC|&z-hM<
zwn@^{x|`v)iAum>@<(qZX=a1nvJe`--nKIJ3kHa?F~14uGCW14!sfll*}Bh+&pP(q
zQDukMCt_|*W24N6CM6$;yNb^9<#=K4h6wVP<~mDDXqtPS!G=*LW3^Q7E0ruk{$^K*
zz#;fjq}gdNLSZKt;G|-32$Xw@KqzcBlGb|iaxb=w4JzS*=U8I!!uvaoZY;>{yC9Gc
zE2DY7)zY{`|JfGce(}cn2%I{m|8t$DMSZUsXr%y`Y2~a%5*IQXQ@g2(v;51(1dqkY
z)Nlcj{CA(~?XD42Kj}wIT^cD2KR>|)0H95z(KNou_S;>abfU8c@$2~_k$Vokc~;8{
zHm%zObGhKmZTeC@}mD_3jX!u2PZok}SPh`KFFg5LGXT$Y52
zM~FK-DD(!!l2&w01iqnBQv9(!xSEcch*?gKvxf7I^^QVpVzu2n7;HV!1ACn(S|+-F
zu`@j9tlQy|ep<_s5kiKIgJ?hNt{lxhfE@D(m#jq;Ne1p2cM+-9Ng5tbHMJccJ-iIH
zxK6bGaO?^+b6dD0#8GpFfb&y1?X@~kD|DI&zTi}jjVEyj>s6}7pWVZiMDkZ^ZFem5
z?%&c({^@0ms1d6ZCJw;$v0}Tt>zrEp<+tL=T9h&wVQ>&x0j|~}$L2`~G~~inS(6pI
z9Z1)h`aj*i&z328lwHEsB0YJTsMB!<&W&88FOO>vKc14aRfr-XShP@rc$xD}%F8O-
z?^5JWNl-rd`${0ekuT|TEjD#`#%jx5^UO+U(%Nz?vtfjEIw1ZoLnL!LU*^bmK9^yw
zdu}bn*WblpuY#{wI{!8B>EY#F%wC?sfWY%Z_fqh1k@GOtO|J@7$#CHIrb5EYT&rS{
ze;s@{s%k`;9Uul;R39!{_7l@xdkWA2$uiuUaLc8#_~{MBEAP-~=D1CurgJ;(O;4H9
zk#v!h>*67i$RpXUHp@+$kAb*&nA#%nkcJW%M5JP=zS#P}9s%SCxjT$KU~yN-)3-C!
z2CvbAO)?-EyHzV=pnMfV!rebyl3y^2pN7=FiK#w{!nwA`K&2Cs1B?Vx2
zg+ioMog-%P5IATh(ELOx8Rh#LpH{GpL$qJR33&`R(~}Y7?LcPaRH07>qh71z#Qv@6
zcqK_o674MORTtXgOzL7FD(+OZasU3=#@hbKVlBz=L99Y8s#d4}Esb%|)e!gb!E~YJ
z)_Cdx-01*9$F*DC8FY%s_!6nYo7>@>$z()&%l=B!CI75yl^{qu=@U66=g5+D+@}II
zpxvbr2*%_|bQIdpkM6kZ7JacZDiTTQ6^2Q~CF;4z%mD^^#28#JD--T=-(37+@7kd3
zgTPx!?vD$MPwp}-#~rpO&$na!iECPGGFUdGXM|A=x1H(9TnW^t=#@d^NXo1-&DsmM
zLD}&_8HvP7osDzHK+u*WndAqViM5B@OC_ky;-{CXm^#f@iBnlTJ+{lePc}O1=H&2%
zRHeuOfdp-EAsgl*Hn7PL2aZBW+^=wU0
zT$qxniQYSBaV4bYbN13Zy5>rm4LLR3-gEz
z(=q6-rmu)OFDX+8kv~lZ!#x@k_O5h@az|Smzp5YpvsbdZ!(%&iK9rHm?A%2b@D{qa
zIG#lQB3}+h^avx}4NOnqD1PL>yYu$h9noC!SFZ87>B`So>)xU`otsbwk2#KNkoW
zI1Wg6k6j;eY7ASFHFZx>)}CZpCq^KVzD3<^!DQ!h(P`gQCK$spZN<@9D|@fpWtz?g
z3X4x@6bzv-q4RTPF&hz7riv_#J6;=jV_}E!o};T=`4Db*Hq+A}=rPm8ess4=AeCqP
zGLfz2UDzU<{Zl_w`S4w6_9R7c3)j=!`)5-DOgL5wWTQmrWQXIxV%z%<9-fi-WRJ+`
zY6U+43>wgbH7ZV#-o&%(x8YMVX@%
zu!cC8N#8nFDy{LieX@+f4oCOK?3tZ8V77z8qUJ9#-(QJR
z2f+1Lac}^q6nfpUWIvMwmo*i4SGGSTc=#;*KlaWltgda_(g{uo?gZE1?ry=|-5r9v
zJHZLMaCg_>8r=A66tKKEADYdzIFi?zNn#~h=}-&&W;Qd}9fo}RAr#BAWV
z7-mWRIeyk27bMMuZUTnnu(K!AAkdf`=y>w#?Wwiby5~M>aAC&eIFDPfv~!HRJCS}m
zR`>4t6RX?A300zdLBb=U{c@xRi_IgA^Lp~JW65N%f7R9S%5%o9jV~|D@$ZBxqiJ1G
z=LBB>={ryHKk3hBwLS0a{U`hzoAuhcX(qZc(wo{{>NpzWe}Z58kN#ptJ2#aZ7bJ7V
zDxswd<)<#l&tRPva}Fnqux0*TTrPe
zcWY)*E}BA*Q(c=A79-q+3Hl)$ekM%Yd#GLE72WsHjSX|S3JuNHUpIP-@;gA8jT&FM=m(SVK;X+@(}?USTZt+)HZ
ziD0BLa<(?E>G9asOxuNH^TRb(xO~hsOOHWpG>v&CZd4F^)PUCg^$1y#+#Yi4NPv&_
zmXm6db7id#Dek-&@K@WD%&L;p3k$8_zY1@9xtX*MD)PdMHx2gZdotCLeR}oU$jbzW
zM%0)SJeC*v=b+do2dlJ1wTB24X%qN5(-Q35!0mckduud|fJ-Ht%A^A#H|Tujz9|M`
zIpsS^H2N8MP`jzi;p#wx=pTn$|TB0zOVPPV2nvOdPFe*UmT4Z`1ZS@v27>Nsq
z1kyQtZ`)FjfvoA-wK2gOn&i0E2YBo*5ObbI{%Q*PRBDyQ7~CyUa!GVW1U{?cZNGAu
z3ZzOr>?VH{~0&<`_pqs~Kc(MwyT9am!ZeHEJVo?KDzGiF!WO6A;3$
zS5>j()`PTW$fIU&c2>7Y#MH|S_;PG$8uffDN|`o#v}}UF^lp|g2QifWRYwLQl8{)&
zvwtggXlu;T;gtOLU~TB?Pq9Z?J>R8Pt0|eGD}Zza%9XN9c-*EzqN+X5c8ojq
zF=J=h-H_8%{QQ__5PRZAV%~k^s<6sQKxZH2F$5Cb&gZ4Ua=3m_=b;!!slyNl`=wN=
z6+>`F4z7PZguo~FQ#m$FEieTBm@)ue0cs!yPeLZGNpU&kN9bg=hkwJEz%?Nk62z-b
z_Ej-MG_MPNb?+80{LHsW0+@OpKXmF?qkjz&z;Gj@Ec@rUcByG6#GeEN;MmXwE&0@ND+eS_LZ
zPj(YG*k)yh=XcS*?OcPz?R7t*zH4i6rBL@uq*LmyKpn?#f1GT&;aC6pRP!LUTt86~
z%!aZ>A&$yL2r1AfppVfIi#e>hNdTb<>%92<{tv>|6oi0rYqRV^8cTt64_fMfmB1Ly
zs=(+yT(pIGeii_yBK||ts$$$z3vuYvt~8!zw@ND>@(`916FbRc_&^c9tv(JAJLz+U
zibiq2mzb(`<{o+8{Z#^R<=ivC>`h9(v?G0c7(=l)zXfk0@9v|f)(#@P*KnqMxvJXd
zF+OjAcpLT6kS#H~7gulc0hckIF2o8Y4EZ8Zk;+OVR3yI@kie<*B@xq9<8(3q>|knR
zjuD1PLZt}IfBA{*LnyY03uU~ypyyq=49-V*
z6>usCy(hon)1=z)%@?c5jZJSSmRmKA2SShL})ZPZV2uNVdwGwHN^FP0MNMqdTiLa(1J
zOpiC@X<`-{-3kLx%&@s8h-uydcA#-}1D*hpk#tJbmvNsCeLgTD=m|q0DW$m@Ck__w
zZ?6Q`G8a1hNfV}VN^kRYo52@s`(@FL_TrlnrqYh(&!RH7^l~)~*=hoUQM0@Aji#`!
zdsv|k$$#&)R!rVPo3VUFKDNR5tp(isw*8Rc
z@*Xe^Jq}vB0UZ11Tn&cND4lDq|0%8zMiU`X%T)5L^#a{=C6(LY_ua%kgVizG&(3aC
z$H#y;Wz{=7(GRjb-Ye(Vp)1)aGtbwlLxXMw`XQ?
zoLq?O=@SgZ&=&jok8LxmoPDF;H8KL`2aV@hYT?r5-+EkAd09GQlyT(t
zkXyjQTF}bsc>eSe&H4Nx2Z!Ef+4^`J0D4J3laavlu#Yhzl^JO}#nneRRKVn8*Img(fNWTi%h{e9%waKS4i0
z7H-s_-Vg0kRI%`*7KC1_3$OOnCw5zP3kFCQRu4O{iS$g@cIVOx>W}^DrxSJAD+6py
zmGoTu=vT|vK7>Xn&JdR;$9y97H#bk~<>yBYWk(DW-zg}4o;mJ(#)E`z|9X7>91#NP
zkB}D_RwXP(N~pAUgK#!+gGe-d2zY!ajYr(BuMHT7x6(k9x}KtB$8lenMcHoidIx^o
zpk{C)t&#zytHw~aFO9FFL4V@vc>P87doxEPiVb&IYW|qgGz0cK
z=n`2lCP*;ma5JSMgeG|xsvRqwdhPUIJVvl}tT5^ELb-Vx9)c0KImo-D3za%~Gq`i4
z!jJo$ii>qr!lh@^oik{o}sGN4d-6r2tujS+KtQ<=P;G|w{pT$&LO#_+jm
zf+Wy|*xa-S7nBsQB{HtZ
zD9BI@xx05;se%Urn+rxy(HT^;RdjH5=z0)2nb3$QBSb%>?iFc1yT@d495&)3H2fKnmbMj_%PS~^@o*zg%dA1aKNlENx4bb;#-{XqIZ~xE`#Ff|
zP6aIEU(3$-rT<2B|9@Y0uZ?4_F~(SqYshbW6#v0XgnfeP0}w!4cWA^TTTcJrJXs3n
z?9iK}UiRTo>AjQycGqOks2}q*TKW6Dp?AzN%~_un!ji&4g?C%Rq7e_^ibYFJx9nGE
z^~Tu-V7|N;PYxg%mRv1huQ%C-BBMq-;8_-2}v1rH)9*^asqA*1-WGp49c5zi_RmAi)1a^?8dbs$2jMolna|-_tOX9bq*-m(lPTez7X1CJ!E+q1_BJ5+l^E1$
z$9~JogihKW4-bQjn4!a3L
zn7tB8j2fw8_%tWt5FwX4)SvooTY=w
zrLhPdc0+~VU|$#SXmh7wf*w!stmem~DSUf6=P%o!>3Am@u?OqUXS4K+4mqI-}PtmYN`tpApmD~L!%ZPB8oRelPTmmb4e20CG_6$s}4OO^Q})!9f5WPU*Ce@dJlO(0HIy
zE7w0w<7UuHNF|4w|o$NsYAy=s2p}ScyG-Y0x+@ydkb9pKxQI*DF@N=Jq?{XPO*#aFVBv&H>l{jsH6
z7aqKoC%?At7QVHw4EyLsuSYIkOHf?o;O@8Hhee(44Mw)HoHd88QJrq$oPV`p2FfkJbZF;Xh(MzgDanLol$)CR89P*&2$oxL9@F3B+Jb=%zt;#()uKfW9zYpQiLL&yp
znTXFsM{Q||#Xu@u?V3d&6b(RDVuLY37p8T57{sP6tU}LVbG~%byj#Q3?7Tg;o4~mA
z6Q2&K-Yj%W%?sc(OS4(Nld0n>a%YM?u4@Y35!g=*dpw>s6|wM-9umlW346piaDQf-
zDhyDo)P=3*qWlj`5|I+DX8IQu=TmD+zb5R3efDnm8;8h4_Uq%MNd#oi;FM7!B@{+|
zFBGD3>CIpQp%0iSL^ImO_U5UFGtEBetk(DT!Sau+y>&*nV8aYG9gsE2Ys@qFZQ?9c
zZV32ZtT>o+E0-$!qXd7k4=?V?mx%woLB-(h=bKc2IE^w23xt3xHIB)A*FW%>UBJfD
z8AXx7!!+v*mr#~lY+6e(ao|-JrKQFC{y=S67{RX~0#?N6AZ3}`#C6RCa8E-x+N(
zNN?@E1g#Sy@1C^;$b)PPhtv+
zFGsd3+ktv-+H%9WG~C{VBJxsoSgB%ju9V9)Hk_9TOr6wUTO_h-YqzGJWwg>xSm;PEc6jcS
zXs7l5&2chA
zA0!Y&VrcHi0UF#obxm{0I9TOe_$(C|@{uA^Ar{?^Tq_Kg!%JFl$>#-HV?1Fi$b%%U
zCV@&p+eEmv5Y_k^76)-1#ottG{etL}1f3ug6V6
zFx=kf{mm}*(B66XE%`@sRQBbeO4$Xi6tMTcB0RNe3tgP&g9=6^udTK-)Ci^#3XFx%
z-9T0h319mc+-Hz>+su+=kYeYngWZds^dqqv06wEbWufpTVO_O|;WY_C{#HI1@diuBUvFQ3ZhofO`4aDKztfO*h{q5$N>*W|SSzG`LOp2y;;)v#cj?RUt1
z%i@Mj!myduGS1)F3ogS55)6&k89dXwl}D`v*CZ%>mj=)O
zDgvA!4hkh=_;t?}D@~(@mT$mdtU@{+Pt83w(~z=-%Bh4B=3@I945thd>IY(K{uk+B
z)cJA$t;GejD7`^%c;*PZq24>}07y{B-J_TB^@>tfwcqJtGdHbH2NQ1p0qS~wll5Ar
zeuyz9&3MZtn8$C55oHL%E1v%Ic^mG7b|{&IEL?AdANA*x!5DO!xh#ZET#f&QkLA&K
zK5CMI6P(sT!y>Oastj&rxxcJ=T&v!#gg$K3b%y(lvi=B@9dJ%T@
z`>pO*>l8MI80*ULOg?Cf~F57SS!ovaK>)HG&qytKXo?GCsPISEL_TABBexhxu;$XYGd5FEPK4-mp(%q-jq3YYm>t_^~MgA*R
z5I_n`gW>tkF{D&kmiFVD@Q<>P9m&D9*1MjJh#}YuQLuP&Yq>1Wom#BB#*N8o|3-u(
zzb`Ped=?4NOXl15M;<
z3;{PYy^GN1&AJk$nY`cl1<)s2hbLLSnh>Ft8x|4l_mi?+V3RB28nQR{sUd7xW@EH8
zU7HCH&kt~0^^9H>GilFQ%o9xg3~@r&`CMF+y^`1iCZ#HnWk6cb6HjL&415ghzeksTZXDMwJx=PIOdxJ0}yoXg2;ba(=}0ft@L~cXZVt)A^@lZ^-$t8y)NJ#DK)%nl+GND$dX;
zwQA)P`&Sgc?gXpyxInpT$W+WY%D6dOSMUB@%vZ-}ucKK4g>{zx
zNctTpO?ep{R(*DcnBoq;-+idzv+o&UhmvTiZ;ny-#5Erx70lA#ME6oYKmav`1!uOq
zK8nH*#43U#(64Dg$2@P8e~nZ9_D+)+$ErJ}j-&_k>H}Y9-^Q_{ni=6$IQxt9!dH>Q
z4sEmQEFehPJ9TG1d6_O4X{RNB_^X8us5mi*0TpM>Md2_Rz?lfxA*XQo)bB!IvI_UU
z|Fr~QiAu(P%A5$sLghVIl9+
zB$SBpVBa?awX2V#NuvMpJ!iy7^nyKoFFR+uBZ>b4w2&CV{@4)h8Gx8fl|h1=q&qMg
z5=&lE@th14mP@60Kp&WJ`vaL+q~PZLH&o?peV+jE{ba{|#i`A&!H9}T8`bZD<+fi
z1ciqbk09^wxO`qBoaG_lM}rL1URd@Xi;w9b;nF`k>Z4o0&PLhoI`kALzcVgEK-&HG
zc&zM3`KuZzfVDClt4M(RhlcqZQu`O}=l>%B;K%HDWk;Mp{9iaUfpS3rty6cT-WB@i
zS^SL({tGoDtRw`mIql{dhm8OEGynQ=NLGK4xcODdW~6@(n*YJ60qA57s@hq-cF|v-
z`tLj(Aaum}vofqrigf?cVfgRAYWo9#sr4mt(=Jf{-xlxxFU$Y&Dg8fO79{>k?a!6W
zHp~0KYh>&Mm}j+kKe}~krI$zBnIXV{P3vym>9r>~`}%5(-BPi+*5sf&@J->(
zU-+P^^Yw#dyMoRTsvHlXvig{P|9fW!2o21;2O`SpAU<)+*=R(4nU;4vg4)bY6q&@+z
z{_V`}TT(>a7g`7ufN1XjxQ3c}{VM-!&mz%4
z81m*Q<%<(p0{y21W-|oIabtvE-GR_fm$L-*RtsNo*nLo59FJAyFUl2OSdS(H@le)Z_018-c6zySaaW
zJHWX<@iK?Z={wH@X(FA9qRs$tQ_~1hFjYG)Bz4|(B|8v0UcX4D-~Tozamqyn*SiRp
zaaXI*mK=%?9aTZrSpbH)%2X{B<0-HuU!C=1h;L}~$O&mSJo+Wk=!^$#^Cs86;_?hl
zoRlVJeMZ4}snD%McscidgHuDtI4I_A>g
z6h>mB(R7WWd4=NhIEA?Y02iChx+Ks`W{`ufr{BPP-%SzxSLfh;6>`{I(D=&Dk$mzv
z9_4yoWs*tErTv~X_8f)pYujvx@IrRmZ>cz9$O7@qRoZ)wP!}s@->3_h^S~q<9Y9fZ
zN4M7IK2zE&d;gMmuWE0}
z2HZfWj_4QqG9%#HQOv{J6$X)g^p35UM(oOl2uiduSVS0_v62
zD>qgPhp#VB^NcRf8Q@627$@P1+q7hiMnm-$YMei
zL`F(K7#Xal#3is;pbStk
zMg#Mp1-s1d!=~y1bsX-M1Tpd+Dy?j%+{I}7qojr9LLs{I;e5Q$^PyP=;F0z>SA2m)
z2vmqN08OFjTB}Rr*Y28~0gI6&8>gLqnc;L!RFz_RS!7-fCbPo#FZ}uBW15=ofi+kA
z%~y1`t@yq?$R>lanSXlpD!iked*dKkcpTO|{x_bY=?k_t$AwJg0!2tJU^=n)!`wpm
zfu#J=zd=OnL10EKzI)$qcu#qp%ewC=kr`RZ*OQo18C>Y}>vhG);>mQU!oIw+nDU^k
zxo+^M5+zh}nH)|>Oh66IZL@NVhd=UqHNlTR@#KIK0pO$*g$d=|cjyzmlg2DRH#pzj
zSnnSftLL%0d`W=b=^C}%33Yj+~MCej+!DYB81>2$bWb>(F4WucSuz91kHIs2@d@5cX!xIAnL
zrcYC-=+SD9=9ilHEhIc1-}Fzf%@J0;GIl=(+u`_q6UpzS67m}i<9gMxe{@hcg6I10
z7XgE?0-;x+3a%7wl=C{2cbMw{pJ3|Ha{GidMw4SiT#K
zE(k$+ai-8S`W2|A`;@iMD4;^U8rpeVEV)|*K>SYR&(7d>En}YpF`1Cw3eq>nZ1nG3-)hAup4x-w6{m88=d|YCV*2w)
z#9~T49e;0=WgT5Zwdyw%aI5~XBXUNxYx8{*Z1H(%;X~h2jhay;yQj6#49AQ)-x-Rp
zkALB^K>Z#@)wK;>NHNJF1!98i7DGMi+Fq*EF_?#pM}Kx3Ky=^qZ#ou>d9AD`XE^gh
z=Z1oH=P}uN)H9X&K)a;p=FjkzP%Ij^p`Pm6T^p_+r*fBa9?2hsz_P$rr;0a~nevPEvR0|roB8lPa**QSV;C(78rNeT3*PovR_Rs@^oe^T6LTeSqmMj~%
zk`aKN1k_&Vu{lGne+K^NCa=vH_U2`%n4>olLItyIy!BolQA#yxo
zW&6fsx0%g{K8ev8$n{@#m-kk^jwz8coPyCHn{D26lpbe2R(rm4IQr{oHGvh*F3grPwMlp<+-
zIm)H|7)rwTAs;^(Jdkw7(6%`@jQr`Bky>0+_&FixjXO*UNMr1IX54H_u!^xhBkF|xWit`_tAvK|tiY6H1aqsHP
zeEq-puqZ#U)|zpQh=}jgtsOFOhd2DOTC+IV^v6A=Z97L#sk%OyOZMT%SnvGSj_-XE
z^nS4a3;g