From 7287f10c9a592cfb4151023d41bc9db9d4e35ad2 Mon Sep 17 00:00:00 2001
From: Michael Freno <michaelt.freno@gmail.com>
Date: Thu, 23 Jul 2026 01:40:53 -0400
Subject: [PATCH] feat: migrate Nessa auth to Clerk session tokens (task 03)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- src/server/nessa-auth.ts: replace jose HS256 sign/verify with Clerk
  session JWT verification via @clerk/backend verifyToken (RS256/JWKS).
  signNessaToken removed — frontend now supplies Clerk session tokens.
- src/server/api/utils.ts: createTRPCContext verifies Clerk JWT, resolves
  ctx.nessaUserId via SELECT id FROM users WHERE clerkUserId=? on the
  shared NessaConnectionFactory. Lookup miss throws typed UNAUTHORIZED
  (webhook has not run yet). Invalid/expired tokens are swallowed; the
  enforceNessaUser middleware rejects null nessaUserId.
- src/server/api/routers/nessa-community-authz.test.ts: add clerkUserId
  lookup tests (seeded match, missing row, mismatched id, local≠clerk).
- src/server/nessa-auth.test.ts: verifyNessaToken unit tests with mocked
  @clerk/backend (valid sub, missing sub, malformed/expired/wrong-signature
  rejection) plus static audit that signNessaToken is gone.
- src/server/clerk-user-webhook.ts + src/routes/api/clerk-webhook.ts:
  Clerk user.created/user.updated webhook handler (Svix signature
  verification, idempotent upsert by clerkUserId, lazy ALTER TABLE
  migration) with full test suite.
- src/server/api/routers/nessa.ts: remove legacy register/login/google/
  apple sign-in mutations (Clerk is now the sole identity provider).
- src/env/server.ts: add NESSA_CLERK_SECRET, NESSA_CLERK_JWT_ISSUER,
  NESSA_CLERK_WEBHOOK_SECRET; NESSA_JWT_SECRET moved to optional.
- package.json: add @clerk/backend, svix; lineage/auth.test.ts and
  nessa-ownership.test.ts: add Clerk env vars to env mocks.
- .env.example: document Clerk config vars and rotation.
- delete nessa-google-oauth.test.ts (Google auth removed).

ctx.nessaUserId remains the local users.id — router bodies are untouched.
---
 .env.example                                  |   5 +-
 bun.lockb                                     | Bin 482086 -> 485611 bytes
 package.json                                  |   2 +
 src/env/server.ts                             |  16 +-
 src/routes/api/clerk-webhook.ts               |  52 ++
 src/server/api/routers/lineage/auth.test.ts   |   5 +-
 .../api/routers/nessa-community-authz.test.ts |  75 ++
 .../api/routers/nessa-google-oauth.test.ts    | 315 ---------
 .../api/routers/nessa-ownership.test.ts       |   5 +-
 src/server/api/routers/nessa.ts               | 643 +-----------------
 src/server/api/utils.ts                       |  28 +-
 src/server/clerk-user-webhook.test.ts         | 314 +++++++++
 src/server/clerk-user-webhook.ts              | 219 ++++++
 src/server/nessa-auth.test.ts                 | 140 ++++
 src/server/nessa-auth.ts                      |  52 +-
 15 files changed, 886 insertions(+), 985 deletions(-)
 create mode 100644 src/routes/api/clerk-webhook.ts
 delete mode 100644 src/server/api/routers/nessa-google-oauth.test.ts
 create mode 100644 src/server/clerk-user-webhook.test.ts
 create mode 100644 src/server/clerk-user-webhook.ts
 create mode 100644 src/server/nessa-auth.test.ts

diff --git a/.env.example b/.env.example
index 02b6037..904a5bb 100644
--- a/.env.example
+++ b/.env.example
@@ -57,7 +57,10 @@ TURSO_LINEAGE_URL="libsql://<lineage-db>.turso.io"
 TURSO_LINEAGE_TOKEN="<rotate-in-turso-dashboard>"
 NESSA_DB_URL="libsql://<nessa-db>.turso.io"
 NESSA_DB_TOKEN="<rotate-in-turso-dashboard>"
-NESSA_CLERK_SECRET=<rotate-in-clerk-dashboard>
+# Clerk authentication — rotate via Clerk Dashboard or `clerk api .../rotate_secret_keys`
+NESSA_CLERK_SECRET="sk_test_<rotate-in-clerk-dashboard>"   # secret key (sk_test_... for dev, sk_live_... for prod)
+NESSA_CLERK_JWT_ISSUER="https://<your-app>.clerk.accounts.dev"  # JWT issuer from Clerk Dashboard
+NESSA_CLERK_WEBHOOK_SECRET="whsec_<rotate-in-clerk-dashboard>"  # Svix signing secret from Clerk Dashboard → Webhooks → Signing Secret
 
 APPLE_CLIENT_ID_LINEAGE=com...
 APPLE_CLIENT_ID_NESSA=com...
diff --git a/bun.lockb b/bun.lockb
index 932f37e7f86a401614286e0065d6f1b1eef666f8..d4b5ddb276ebd8a10f4f1a848e9979c6b92de9de 100755
GIT binary patch
delta 84769
zcmeFacXSn1-}XOqk^>nq!U2(HfPe^yAQ9>15JEC^484eO2$2K`>5!n1gkD4mTil>h
zBA|2$NEan23J7XcI;hbbDT*2q1r+>U*X(^X-VcxOy`JCu{PC{EESPJ5KfCumlOepi
zE#%w6kok=p47*vixMRZ6Eb*rAgDW%ZJT<EG;wm+-r|oXO`?WVRUaj}*khszYuj#o1
zYPzbvoSV@k>z3Ov?lO$*WcXBr4uV#Jwue@ShC)N2CbSmxTq(o24|*6{75X}q{?9`h
zej=3V#6T-U2SUq2uOJ`lJ;;ptrNySC#-<oujkjS{0B8_w7-gU}pbWST+=BXI5>v*Z
z%*$cl3wzq#D&v51D#Pz!Gou8NY*w~<A{(Z1SmeSQ=`jo>mpxeIo0YRh-=m7w2g(@j
zpiHrzR*%--Dk^?X>&MVa2)A47YfuEu7Fx5kj?p?mYlPN^m1bpE*B}UrKiOANZ|YZC
zKhnAfia*)wv@X^<Q){}`l*F-P(~}HiZw=KqE1>L)nNapo0+fC6n8UM->_@dnbtpUU
zCPKrR{e{-IprNprLfP4qwGP+*?VxqQt3zu;e@8Agp=Y(e4P|;Op!kzLP4hU~eF1vF
z!BNry%8nU`?qVm$C#J-Xj88RMG*C@j7m7+|-vdP-W(PvcL$B614D@^UMJPwnS+O{v
zURIE47#IcFa~@Kuj*TCYnmpDp4mVQ8$cHl5#ZZpzDNqi8u}}_x{#wJK?C3^Nc5rnl
zOK~?e80sI(ImpL?od89+-r4Vjsf0H|nLzp@D!_zP3|w3*!8s~>HC5G#gwnnSWk%;U
zZwh6GK9L((IjjO2hm{{0o0^t_RC?D_sm37`ui4F2wV%?OB2ET+txsDjdRT<ITV%b{
zT2*x;lqHLY-UWRe$|`k49<)2PRkN-QlvPXeVS1*gj7^OlH<EcpwNv5RKsh^OV;emg
zpOTu^MB9DaEC19qUs`%<Y-$v2bcs0b4$lhH^+<_LO&mKu*60<kMolD?t<VC>?u+xK
zCQcZKdUaG~tAlvt7L;XrxswWi70SAN1+56pOiYi7Lm5-h4h(lAQu$wkV$eL8eLPBy
zo>K~Bj~R=qA;Lj$W{^H^f-g0}F#3yvQV*N`MRBQm@!3dR`NbzBC8nf((^VC!SvQr*
zS=h`hIo&rdHFI1{1B7Q+rjLsqHy&w^fldF^w2_TS{L7oa!Tk+8U*wd2IBR4t)z$r=
z9N%4_?3Q*~UwTY+<9sNae+HCIHzitWY-)^etZ!s&%-Hz!c;x;_Z<TvGl;Pikvb%%(
zsPLI#Ez!`1k(d-qt!=ys542VG7AT7ypW0|b>R7`VhH9`NQ6f61X4N<QDJ!JEn*S~+
zC)Vp?c2Lc%(*soEA3~YgH-V}$+cb|)ZT{$p_%vhIAk}aFJVFL5+n;xAMr@1^rD{1u
z@rF>QR};#zB>B?f8jXp~tf=iEC@NVY`z8`%ZOaW+8IKgLteVypP`1@2;j=1dy@JB9
zpZ-AMNJpgjVq#O#*Ta?F7s`Hr6{;Iz)Y!xkMopB6;TH~5Tp%6xlpUj*;6Z2z?7N^`
z0xyqHgZv1z7VP!VP{Zh${VW^|fHa-8vmdk??AFlg&`>DXW;Yb8WcIhnnEq#>EZ9KN
zs!YxJc6xY?Oivn%_DW$HM`RktCG<X1ISXZ*eFkMUKG2$gps|k_M#C|xsj5TS@8_Wv
zp=Gu0Mc=cn4~c>@4_oyxNSMlKalOp2(1(&$Q=~u{w=|SZ@lc8?;bf6nwqDjKG%DlV
z2g*?O)6@_@gwRYmCMBj(Q<UTqx`*K|C#l$D6G!?|F`eh7t6co4$75Ep<Ay-l4u9r`
z^vlBT1<rKiQ++8ZzRWCR3KF1)(|v|vY|Buq{i{$G=p`uq6XM6kC;3uS7r<sgnod;J
znFVD=vo#NWO2xYe%BJ<tG5;K0@U#lA<|uaCf1jlO$yi&r-#wF6hFINWeF+)HQrN7)
zh)2=YxSoa0f+l6Dg5IlJ&R@{q&|(bl<NAZ}H83Vvp{N`z78u^ykBHFVdRhIasIDEC
zn1n7c4Bv<mDY0lQ|EBc&RMpTOr>V^+E#=YX3|ATPJV>S5bmd<Y$#RJJw+;_%wvQXi
zV*Hk^!i|U@H!^<QsMPS8PVuv{EtHGvb!q~~ykUF|5BB7|S*pBOB2>qmfO724pRL+u
zrq)a-GujV-7GM*U=`Ds<hIXB+3J?xu2TliP`ti{Fj5atmpfNaiPd%d=^azwaxL2!x
zLp_dg9LOVm8I3puhl`xMD`#zbRwd^@xsFK8a2Cz~(*N^SIR6?Q44d8IpFDxES-hAy
z-`Fu|hToo3b}^KtJBZv_&C&5`@oXl&QdP^|0S|V>LZOPi7&cE`<3(7xnpyWPRNWQ~
zW#Ml<uk<-6WBE6%v=>yXEe9_TJ{r4p46^wVHnS~+GS!WX)Vi|?b|~yu7pwK^d1wXL
zv!G6Qzv%Q@R`&OBur*IX?}2^@Wq>u%Dp3EiCDS){Y<y~((GCe$1J6M<=%1b*Ka%zR
zBS6I)zf@@~lojX)Wr0)2$73eq;bob!zlWAZ2WOv!g8{GT1aQiTAK7Sh>JQ6B*YY*8
zo&aY1Ca+NO9*1)HeEEus7PnIQ*8*oU5zwko|Bl{!l`3Z#I2&Ls;!&5ss`}Rg=P)b=
zXMH|~vb;G^4A-peMypi=bp&7o#iYcJO+!WA)b`*tD#5p)EWl<c8?YCY11LSFaYB4d
zO5$s4m7OpW2Q$Q90-F_!9hZh76N`0klyhu*9_ii-J{DRDGb+2k22G$Wd3DEw$IKj0
z<*d6ms^T4kGTXyYCX1~i!H2GSV3Ue9);Dfce0qX$5q53(e+Fecx;Co;BA}eU)1e$t
z`*ggGP^Nbe)PgpALshey(wJ-$4mNo47S(X4plncogdI8o|3C@R38kiGVnE^CmzX{(
zZgi^Af4j=qhH@sffR<;5+r`8RHM0B<lx21F=Xa{^80pJIWL)5E?vYJtpf7i;djGyl
zB|EZdqnO08i792kSwGlm@d>d8)Y)-XzNzZ>1HyAYd<|uL>TrEh;E465#u^3iU`EGv
zfWz9}rnT@b)nJw1Rt>ctoDKMj*2PdZ<osP?bj9|b9}ARs%089fHnFo}i>zN?SAmde
zYMd`A7RqzepQXJ3e>T!V9WHUd3V#{O!hHhHLG<r@uMS`8pzgE-Y80H&`tkctx>?x=
z0PaBoTcH)9uV|eQ<sh7_b*$DQP>%ktT34uqveOQ$=57tn-h5DNbto%vm)1;#XSdvR
z;$i!psloR;p)a&HgR*}Lw7psDLMRg$qjjj(URpas8E-RMfZ-Agl@5inLN}qD|1ZJ6
zGHX6M5uJ_e^8nQ`ABdbvmCFQurk20VPsJ;h9>`ksscNQYpd2lYkE!;b0HwVTk=fZh
zpd17vVp1}>kNb~<tH9a3SC6aa5wKaB4JTCmnXsA8Q(EJ6_*JK!*_xFt;9!JFP<D7M
zl-1~}0%Sh~tpWS`Ddk@dHV?XCE;Ze&LmBVJ=c=GZ2*>z)q1-=SgK~Dyh4MU`1g#G3
z>)7b0)^Jn<sNn!3I|#}IzdflkItrz|6UqcSq6X9lw3dZ3!5?*jj%u9-tqi^$$_l&$
zWxP>PR-iky`a^I8!oh%Fo2tb7w61}&<O`tm#~Y@~HM2YyRR`^cvSA;CFURfROR61f
zeP<XCz`psddRKBv>kepba0v~Cj@Q~BS_^h_t(BoQVP8jjEOv_@)dZ^u#rV(44updP
z|Jo0#0Ciw<xSiG!-h#4zU7##j&QEG&r1_G3BgV!W?ZL}}cSONCj(@(Q3Y7P=VcZXU
z29)jD;;L%*YfyIRoL^W0blBiu@qh`?1o|NK)HT(xv!HCxH=t~R3h-wQMj&E+C?1r#
zTpJ_fpL~+@!hb@^K!z;H85D#WrQq=o=L91*H7O-N!Dl@GyBb*uzESZpS@6Q26r3=P
zp721EWJf?*qjz-z^KPjKn_+WkH~&M;ojllVk@4|qu}`KO#tm@J=<lE`03S%>d}+oh
z*o=4DG@Y(-cGYGm5H{K@?zAIarW4VBRyv>~d>ddoBjqTRL-uX0KP*>W_B;x}4Cg@0
zK)1L}XL6^;#gB<ci!3N*I#a<1WlI>PO{c53XblQ7vmB5TJ1RB<5mv#2CGUg?)J!Oc
zY;P#XNOR2_K$&r+GN#i46DP!{@tw&9*sSS-vMSz0C^P;9oE3NrdJlBH4mbYEtauC|
z!}vB>CD{6I(-~}QV6!XkE~gSOq0I0F@QTo9psaB+l!NPNdDA&O?A5v&%8bA9s0;@q
z9Oqn5C}-J=x&Sk>bcvFnEMZJcV){4?mZliZtnmX-W_&M{1-f>R=}fz?pbWpQl1lgk
z*vw!zl;Kt)0t@&&l=cR2wrECWRnU=8wnSD)71e|{&<YH&0X8!XuBrn30h|06C>QRt
z2*>FdSY3ttp_)o?H*B`d-1}5|gQ0AJ#v!U;DX`g<Hk9ESD?2NDVGY%UrE02xr*wjo
zz?r~32*~wx1u~%hHvHM-F`+7aG?aaQS8WxpDQr&D%22M4jq9k4|EQ(nOQgdt=y*RB
z^S?G6wE$j2!pvYXlr^3J<qCJDu4;*sP!{AM`h*GRLm7T0lr46!o(lIseKlAytH<Gd
zX?%bdV*xilq-y>$ly<j9rg48395Vpem!qIHp;H>G0+nj0Y8VO5g4Bny>B~cz@elA1
zg%&|s;P;^{;OkKOFNJb_m=0yrM?a#{X%1xzjsnkOQ_aR`s{^g@s0ug<%7}-d96bMB
zpSDK=4d5RFWkD`Js0x@4WxAW89Fzy4Y~c}!6Zk_CL%?Q5hdzk;&yqF=s0W?ZN|pRR
z*sRIb28thpGQuV(m*S~yR1?mF&4Q2C+6BsjtZSzVX17-bcoe)6cr_@~eZs5Ki|}Tt
zrkINeEa591Q~{oYa+Hn&=O$un|NF4Zuqz&b&5TNE?n1(>$X4_<yD}{y2`<zWf5}UC
zQe)z4DASGc#W?=!(ErXn-4Us3q#lI~BPo4cW=!J9*yL0voUtuRjoQ|>8e|Vb*)?UM
z?EBSF4#ESSRgGP+IbFBG=3sjb%JpQC)_G9wF}0_`!GLdfRT+#*Od827mm&c!AXRNK
zv1Sd|>yhHcnh#{v>!p%m5c&>{R@v=^a>Nwi_`qyz*ldSKpltY>P}Vyb%HkaDquOzB
zUo~QO!)C`k)KAT=Rj?VqHf-keJJLn^S=kA`lrfpe{96UGKZdd${2BLy9}BProb56?
zDRvZ|osCBas)SZ)-fWO6cqo+Xpg%neHrp{FJ`Jm|Vf=!4EO?qPrO}hA=&gZ6RC|r^
zrNlN$Of?*RQY(6|^y8{wlhV}?NE{dAoSG-3_>z)P@^|3R45}g>c0kck)pDtcF=N=*
z8BeHw7zbs|KZQRl@-DO-^3Ps7Ob3WfOYo(RF@Ax~gwltrg2kq$r^Sy=HNJ+;1pLR1
zH;@2ZYE*1mqx6(`!~esXDkD_9xk!g|%>RBPDJ5|fe#DV_w=U@B7_1gtI5U0e6UU;Y
z{`YkaN2&zy?%f$V{uk7X(A2EyT&-D9#=jMB8V#XWW7SxA?n$*;^cthOq&1Xd#u%&S
zR5kdsiweeKwO|b%LI5@iju{Dfsy9B>39f~5IhqRPYVz_ZwK|kW0_;P-Jrw?2MIw__
zIxV#QD{QWd9&LXcr^4;mx-1T>1tVr^(8nJjRVCC&+d<H}2=_G#K=r1pb@gr7_roqV
zUbRG~E?|GH!4uT%X{v1xl&j4Tr~viDEI7FAe4U{(JO$<C^=0ZoH>y!uW>ReGT@%%y
z%1Bdvatr=!u^+X54Q1CPjcOD>F0G}pL8qGn<qk6#%4I78$_2bJlwC671p179_%A5u
zdm8$bgRkRcHQ3^{T?m_eWMWz)45Xy@wf|zYAPf8~l>XJSRl#D%C8x)y#HOsw7S--=
z?5a9tOV|59ELUq>e)ySltG{`(sM>+xW{t(0rxtDfsN6fN-aXT*&$D&bT<o)@%A*6z
z)}OWS>30kIzVl*M_kVq5&D`C*=b}NwU;U=aZ{BN34R@8kJS(bRxdY$YU2kkj^47Af
zvVn%t7+D93&_u7<Nu2C#n?4cR#Wr6S@witO`MA#&*Kxlf!n@k;@F4u)NZjlaVJ;Vi
zumezoc*h<qeBEsK5!gc<yS^xfJr~nXg})?ny4!9WH67siFBP61ws}Sj!o8Nr!+ngn
zh<l+3>uH-!MJDcvq5$^|!s=z4#UdK_`^941mxv<VYlsGq*=CYR#(kIAiF+ksM%!kj
z=z{wsksEDWyD&*wJ2mw6@R~o1(B4cV9`|ICkNXyJ9rv3eypL_R6SHxjCJOu5?vt2h
zy~Mme5oUei>ua0o&V8SAFDG*P+2-TUeU0$+w~;RIUXh3UEazV6+^dPO0k#?A+}Atz
ztIoZ>h#qL0Ger^ZA3FC+B6$$g<b8!O2eZ9-ZzOVYPjT+sd3Tq^d8?U77!qNADdLCN
zX1K^7V!L0)ay7`IS4H^aw!3RB_5(w$5{0mD!S3VO(ZV;>HaGI_E{mBI<Ir&;=Ly^V
zh<A4r93zH0be`}Gv)w<#j&<xoB5#;&?r`pvMc8oLorXEB@;xF7U_XR4LD|zqw2%F}
z828Ge2=~`SgAumbO(f&~lGus+d11!bXyGonCyCq`J80X3hS352C37Oohs9%^E%9;Z
zAoCXyI?}e9H#Ce#;pY+sBfRElkw22-^g8YbM0l)i))BLDm!c5&lcMUAY(w9Z7_%7S
z14PJ^5#}OM4ErMNUXI;T<czY->CXKV;fb@|Ax#XUi{tmC$b-EOb}LylG@#;w_$KDR
zL|D9S))tw#KQ0PzKP{}$w%Jfb<33p|#(lFW!u?m#V2o`J7s+FgMpMIRE85MCu<k<f
zA43fSM0B**dK^|)Sf(hN=`~*!xnphjPhhRZyx0iyArYEjTZ5aaI-8<+X$O&?V4Ekz
z^#t2frn!M1e;C=AUd|OLihV6G@@J28S^)RcqH3aT))c-(+ZxmYKXOHALzuB%GglNR
z+V1zk9u+-eBFx`JPLgdkL;!{f6r3qB!jo)UFKHIw#48ecV0Bxm8RZh5(Oz?y2urce
z1tJso1EL_s4!Qw<G}^!Q;DaJM)wa?x72%B@%<JVfPl=*b+iW5lq}k?pk(_2*J5Z&L
z@DFgxa6_2sw$-bxVYCM`9X3zog1ryMvYKp1^A8a^-gftHhmj*f5+hKWeApkuZYgf|
zj<A9dohi6P?gTITWcCD`tJehEIsx3tNhf@+*St^oGHiEWFUl{@&WylHP@KV)rB$YF
zekXD=ZFda}&4(PnuEI0XHYbWfxUUs?xc?z8;yzA<J!PApiA>zfi-M<Ys~;+)Ms4y<
zula(Aewux_8284a=xN(}6$L<b&^H_tWg_u0h*KhSoEKwk=OmWZoNT+xMR8=XTwO%&
zWUk65aX&9Yvura|#N$3p<l~+zuH$}8glF4U+0OpH%6r<2(NUOfyC;A(7fXB*SXX^H
zw)Hh^)s_rXT@-_L>!RYBP9I}_Ou={oYwqNKQ+TG@*25UOk2vK{&hlc{$eU_ot+|N%
z6%jVgw%T`7X;@CHXNZDnoEz43+x%8UPq(c$-BrFW5#G77*fG7nnJS9lyFoOVVPmEx
z&#<jpJ=AL8a`va;!klTlUj%C_5^hGIj=3{!S8z{pYG#z#U4+iEt>=2;REk2C5@<fF
zOfS4VfaQ_N!%eT14wLiECColv^KB76+qT@8j^SX~Il!Vs;cPo-GgyDHzt*7a1y)eB
z8bm>ytX32(c3LS>bftqRp2NZ4YOZau@7O3othChz7B`>L&IHdEo@Z?9127J8H5e<4
zJg`1})Rb|HJfGK`D#GU3?!#c6o#wtr6wI@&o_+nph(mRXh<?^~?*ntfSY>e5XH8u)
zxfE(@!{i(cbXLj<BKbKMa3}6wVa{hib-}%Y$i;oAIEni?5t@tkM%%IYhBM!Li+r$W
z!B}8ZnAu+QV-dc<w(cFIsvqc7thXoxdkGA!kGNc&FAATqttNvNQ!CtLQ4F>N?9V2`
zZjkf5Z7m+6@^Cxpofe*jwpIOcH9k}xeMBCZ0OL$n^}<Qv1<c8z_=L%6sAN&_f^BVq
z&GC#itB==mKcRAS3CuoMizl415-*CR9kdEw?47^5nOn^lB6*Q*RT@?@^B%%nY+Fmg
z*yn*xFP##(U{!`IR@xapBSh$nw)HyLU%h@&<byTvsc>rO#ftEkY-<@9D}$mXc+C-_
z5Nrn?h0#8mRS>?HZHrG5D5_?MMe)nnW@8Owgt)x4lgL?OTbE${6{557EVZqdpHzcb
zrT&x11M4(O%?`z07GcY5>qoFoNL|&SvnW_*n=^#9oZEaf?%#>UxZf{|mfO}7@v2p@
zRK;*9OU}at8m+c8)lL0``HF2xFtz|@2R61skqg#*jDI6b?!wJGbcJoM7V)^>5cw-?
zcek;I;T1O%BFs4=d?gNGu%pDDNfFq>3Rl`z?*uGANYiwN*DT>%Wm|88aVWVR_Pr<u
zYcfvd?RJ)~G?DYFZEXVM5^Oo){v|xG*;chgb@X+%VzaZzd(C!@PjrUIY7w>?djkS+
z9GM(BT+8uVAyP!I;mHzrYipA7FYT;v%|#K|lw?du#3|*(IVO_V+E(in{~p8jb+$0q
z+2;GA3+{i2+;z6qG*uO@l(WAjiO}`7`&F>kA_0x@rO01zTdmU6%H?+QnkvFK*w)8j
ztduh^t-y3uZD(1r+QVX}x}9=J;oE3iN5D9Iv5!8}q5OEXE)17*crc6rkvpY@H3<}J
zpI)1eh@97Lw`T&9;x=mb6P`_&g0Qg*G8r5bJ{5UjRtEYGEKqo+d(D9&EFbF^SYJ7G
z2%ahm@@+FtSetFLKtyl0t?QYptQHq(v!f^idtsu#mDt*+MDiBf3==zXPZj1Hm}pO{
zI6+Pq_7=Hd%fVPnLvTs_mk8ZzTeT<oCnSgH6Cxk%MKDgZQlemz7kh8`HrooBtkN?@
z*ch)lKooAX-D|-*I71HKlWn)%^|QFV&YKWnJ|&8`+t!D$Rn>Wlx?AMzu&vJ7e#W6b
zOL%tL=DT7L?n6c1PTTq@M~w)V(_HmM*e=_OpQ47cTJ4sJf?amdaWMAg-xedQ>{QiF
zfzEdFI4rK}stukIMZ0ZtuW0b5ZIzm)YVD+G^@Y_P;n1l#?<^PQ9*h<+?tP_&XSo;C
zITvjBbd@@`9gNKVBJ?dAXN!2;=ZXBcFk)t?RGpR7ZOz1Z7a@BitZ2A6%GIjASQNgE
zU3iwLwl@loP`<skwP==qWh;CYyCX>L**JnDN_nRlHi?`9tXg1PB`|7mki1`b_Sx2m
zIjTsdWZqD-gUH)wn?H$*xF?9PcWn2DxrpNQ$azul4$dIYV2~jRLvT@<Dx%-D%}Zi2
z?vIM1cWrC@JhiU`ikzpsSkRL9+txWS4t@0en_isU&G-16*#-BHMecjH<$6vnDo(AD
zPU!nQ*~jDlw#a`UBXPbew&l#N-Xi>fjkEh~+<y^;2W+cZuByE1-BjT_Xa{WsV^#mw
zyLdV&K8S^Af%0<>7G__ObI7*lgSB(YnB1Eq*7E@-nedM!_ExmW1A7IGPXQ<^X3|*^
zcGz|gc%J>V=eY>8jVL&5TbT>}J0M5@IuU)uc3%MN?(CUprz192r3N3`=0TDCp=||A
zRUWmV+rs?Fb_=kMPMV*K+>dOl{32Dy(jxhNuh~<Cer&rBfejWt=0~6_^I^Zc7@Lw~
z*B0T0Tmfd|?h%E!j}uitvCVwp`^0tyye!s!5{1>J_!D&S%g9_FX@pfH=Tkh5E#a5D
zOfyw@KC`Xku)|Q_U}s~gB=W$fELAg5ZA$w@*iqZMYnf^*hk5$KVk}cHb|XZ7j~3QK
z9mW~O)^%81BTSK--63!}_aaPuYdl;XfDNpVd>jqp<EThF9w_cQ*2%gBUp16)ba!{k
z;{kczfe33NT~1<HT&zvn3gGhN{svYv(W5BBm9s+ZIv(XYw8Aj@lqg*p5jLcSD`chU
zdLqh7S*fO=b8c{LTq#bShzhy}I2bYhHkz!_t4eIdLAzk_H1<~*oMACeZ=8&B_kESU
zkFC{O2N!FN1HlTf`y#CV+;v>u*F?3`QI>p7PjqQUnO^r7Fne+ZaJOEK@gRfinGvq1
zSButXqO8Lp+=}tUu-xmqwOSkk9J@xf&)qyPSRcWPKoDnQxGSv1qacT%^#ojA@VmLR
zTbp6Ebc#gl5-e3ftP!sI>$pE#gV&W@?OuSz2zZCJ*K2*KEoUEems*eYfi-duhO4*J
zIqS&~9`hd=7#q}D={)IJ-C^~1GG}&6H;Ar9QLf_~#DbzItNTX(Jn~KSx+lYm6bsRf
zUu_hlzlw6*|GL-=iFsYz_$tcNa+4l6hPq0L!euRk068oIxZrup<{L%=%b|l9qNq;`
zYZE9-U`gK)vqRu!zIoa3uL#%1&0_7pqO9O8YRe1amgkO!)m;RSj<A-%#Ra1**H>5D
zH^iZHQC7wqs$m^yZU39~3oJYisR&l&))LXJDX_Zv{ai=3iizi=ENh#8Gr%*7)gKn8
zR9UCbX2Rm~hDW)%URS|3@#2Lj&sD(YfPsHDLC%a8*2wMtJsWQvt<|tNft(%O`W_bd
z73T@U-Fyd{P_)a8u%^P*47|L^N%2}cU_A=Uc?;zFZihH^Daxv~)4zyfakK_&%V}t9
zHLNa91Z)DX;+^8gw^6RTyF|zDqO6g-)OQVdLYwb(J-A!!8WClU->u5%?4Ryku&|zv
zh_HUr+<E$NH-D4UoqQ}@9DxBM^t9K#0hY5zS?A&E=y2@AK@Ik(A@SFY#8P6#gQ~cE
zV9bNXHgj^ej>F>MS5~FBRD2v*F`4?o`pZvftCT2?^IE52wM9Ja>uWj$zKxBakIPmH
zT*NB5joJ$2HfCLd#U2cho<t10y{rPN=6YhUXgxQ|{Q`ih>tVQ9UME^mtpa8Jy-ou)
zRT;eri~Xgn8?YXN<-ED^Jg`p{Ne>YN<@dF)CWCfB7?)Giw_veorKPVojs%5QD~sh5
znglg@=ijsb@-?e8AlvV+^34C@HV_RT^x1z2%I+xhuD`H_uXn&fuJx}`))X*S*_4G|
zJX`OA$vp5zZlBllBdk`iT)GN(iM-A&tOonlxOOIlCj(X+gbC1LLY**MK%GhB)GG)U
z`%|6Yo4=>lC}*Tub6_!~bL6((g~gE0bBV|GzTrIhm)2=J?*ZL44`NSo#%2m!oXgHz
zJ!_A)0-SLYbV#iaI6cJTodGOP6Zq}(TJvFXE(SO+6kI0`iLSp#Sv5bvs^^5kDsPSa
z)565E)@aKagXZ@l|7K;8eY1%bc33U@n2d-s1(w%I0dEsr1&2k)TTzzlh<XX*y!Nvq
z{<JWd-P2%sIey*mIIbSQM_8^8)pF$=(JU`4CW)$};FJIK<5buUi$f_u7SuGo=5I33
z#LMXUPc^Yxf8;+pvGD1zRIymdH%eOO6&dD2q)omi?j|22V`nlY(B;%4Y=4KKKMllo
zpNG|kjqk2q=yy$WT-fbiaGQZ{HlgzzYgPJ0J&|KDP4!v{u-IA7v$(YbRufowmxb=R
z0IMUcvcj|3Yd!d>TE5FTo8Ed@jp3&r6HaMM4W-(j8OG!AGe!QK4(4ZabSX2+Is(W!
zsa|H8N0o(akx?^PTy5P>letIJ)2Z@OxE^y-VzBRFv1NmtN!sd|e^B!6*i=~bv$)Y&
z@4!;S7i+WY<}umYLJ?XYSD8BR2&{3iIytFf6ZdR}6#>i8S1^x6R_F=U<c26b<MkwI
z%hX};Y~Q7YYv&1hsSFM)H)Lj6({?pKDe>7;lso05Vc0x$x%Zyt&jRSGe1<zXU5~@n
zL+-iP>=X!Bw8L(|rNTv@<xfKp&fF+-?>24sZvaD_K>a`W2igEv4>Bv@3su`dK3KZj
z!BPo63s;O2s~E06j;qs`{9y@;ummoZ-Oqor9z}-H&+&Z)E+-rYaIptP==_zx2rJ-n
zGB$sdIThg5<!gVMulQXY_7&mP`(MaJ)srqJZ5lGV61;ky)0K3uhf9^o{f$49;c%(o
z+hy{-XxCEb<%^ZfC|A5v_u=!XlDu3IEqH-HTVa*P!8L|1>m*!UKm+)kY29~Gb-bDY
zk7>(!KDMU8YT<<B<b59&*H&j)a2uB}#N^E?$OEnpGNFnY;g0&wFyfSRBb+0Yv;5^h
zohfh*cc}S^^i@Mun|zPw5*6-QI3HKeOMf||e!%fs(dBRsbevZAAJy`xioFn4M~+aL
z+!iO}<1pKcc4s2om5NbUx~v{>aRqfExEI1wDY-Ah+22Xj74efCT?Or!`;#nF1C!#^
zPik+$&qtp2y31d|qNH-~1t+%<(>Y;P`dL0$6T^D{&-mf1Y*Z7+@E%v?E+EhPtNJ{v
zr^P&3oM^TT{Dr4qJQKRt!}X-&dgfQdn89Z&cZF+)G2UUnz~wx{xgWc37!w_K2(EDq
z=V^IEy=L_9HTYS9uZ8;s&=h$y)a(@Wn>rx}vXEA5SWQsmAm@NF8dfJ*rDa|vY@!>r
z=^O*BpI}A96OZu;Ue^=9%hva!F%JE%8Uw4^)eh!Oc?i(e=B6k!J<64JQ=FO~<=J{u
zcZ#lUpospig>?&*J0uRtnO>{ytrCe_FTmnr<mUABT!PgdmP^M+abjDzI{YEa)I$ND
z{zLnU=yhIqoMB=i#EURbAzV)9>sad4QqeS>8oEXF?_SRUSRBcLf2Dk@h5K319wPWy
zgy%Q7;^D8o4g9nmC!b^&@&GOE%#>BIIB!bvJ&yY<td62bbcCm7fayH{`TL=Qz{%Q`
z86ZbLh!NllG@WJI?^~TuyRP1W@&<gZ<?!v{<WO|N>%I&ticdwJrfyYw|8iQ^X~_wo
zZ4uges`I=Fi*4sGv&D0a>le3N`w#}>`cfud_-%N|jIhd;Rz)bou9wRjW6O&|JZDr}
z``}5-?Yy6_9HcDeHx$+*fBHQKs}n5sp6OFr@Gz!tIm<M9JK4B>aJE;@WpK7t&eL$V
zR^@o0jOo1ea$YoAH(;@GUC!aBaaq&pdYl^Kyg}<=4Tj%e2S=U;-FKPJPm`QS4QnW@
zzD|6enDb#h2CKC51Z3h{RyJ!ee^6!ZgvDw&uXL?zusB@Q5o`dysvY52+$nd$;v%75
z+&zFVYX>^<n8RdPjOTQ}wHH>;KSSPKUUiH*RCk5-1pJ&G-@GJ!%}m>B>p?^Lq4g{*
zCXE*f6FLOJVA=85k9@jTFr7z1(;0M&VR6w_?eYmMPLRLarO6VjbVU{YFUZCk2dbI}
zkD%5*SgNu4T=NU8_DBY=QO0>akKXh5aTMarx^ef&i7hdXs#QW)@aNL*G`KM0V<N00
zaB(D*;;gki_>Pwrj(^!+cRyHOxu-RDgN<;u<&QQ!mk1H0j2^2VXQ(!)EO)g=7W44I
zZx<Ei7@W3pHm+hC;f~Wvgp=hBkVSE(*Ru;Ir$L}jttuy+r+-!5cbdks8rD)!7S4Gk
zX?+EYQzn2fAYJ!Wlc(BX5_+ne&T5V`!VIsgdv!UwEhg@Vpqv=~T<}wkgcjDz_xVQ;
zUvhsgbG$f<J~p?B6&a!igj#I{EcUjt&cSk$VwZXv*3f>spm-aK^<q;ExwbtD6H>Ee
zI%8mUMLKwPyx?_jh4q-+&>kC%yOunJACQ`ZWOPTfvfSI=Y+|jcWja47#R`4E>z){j
zgq*<c18{ay&If8c%L0<HCc^o+Q%1b4bsvK@P%OC+;kN5IQyM|si{X4s26sb-7wgCu
zJED9&?^mm!+IVNc8t$*B`Hc*X#G25eu4%NBXWJlwG&o}&r&am^|J-6#dco?aJkG(%
zx!|;wyInogh*puGg|m%p)DK4txVkvd6;WT_h(tMN*Y}TTJb%0Qz=~9{3LZjZtIC$f
zXUw|ZiEzd_)H)6)CsBaRZ;#Pb2cI+#WA?f`T(YPtwrJ4dD!l7qe~(~|c0Km6Jk%Na
zZw2KN<$SB<D%V5~?t-B_ya|>QmH9q6u?DgkZ^4PRn9kl|{w{RC0%u2un*Wl?-O-D+
zx}g_S@d@-uf5O&rSp8wSoi|L4nxe~8LhIptQaKyqTWGAo?9*rA<V<mbTW4T#qA06M
zGc|P8+CCVTT6B0iSPP5Gnag?l4TP2AjD^w7{q=DjZtlz$cfA&-F;q46G&p-H=cjP`
z=<HO!rRhAdxO964bFRDNL5HcJ2jJ8_T(y;HBs$bu4rd>fz;ITPE3nk?aCdI)598hr
zr%vSFHl~rFVlITUgTI#Uqp(J)jM}#S)42l97)3v8XBw%>`9ynv`7N}b-UitmS75Pm
zRKwvtz0=jI501kc;KVl@%g_NB@4GtuS)sDwT)&*5-y6<&<=hRY(>M|C_8t8b!o31c
zU8Yhv`KtidC^$JfRc2dY_2pMI*1erf=b_SYUjAC0U=DJEMHhM9OJGGgFMzFI;ABra
zv&q#dQdS#eMg^osnzC#?GtzY^QmzH?)Q&QZhY?J7l7RyTR?BEm9&zw8ql?#?4XY8X
zQUZBc`(Uw|)x_^<s}^!zd$_m4a(*;t-Gs||o|XkkI9PV<tj3($%)Wrd!R$n`nsrf&
zvE%1Xgw@@7$-f&eu9oVgZgzzwj=bI}2o4Tyg{Q-EUh4&X(A5-kCq!ChyP3`b*Ey40
zZD6UR5+7YAz~VCM99>)m-DKBcXoH_X!$AFQP{wJ4I^9(ps7Ih7u()G5rxe%1?sD{S
z#N6Cdg$dA6OFLWUrJnKze68la{3-C6a~v#N-W+a5$m|##z1ktQVCM*#7L6)9AG66O
zBg`i5LfBm$o3GSd)qBgeBaqyP-k1wc;lqFRTH9f9XDQ{J>a9Mix3Lqy>2(e0BM-%(
zc)x<iu+X}APUpHN^p%50BE66MsuZveT=2R&_mh`Mm-bUl<dU9l=(r0oS<*7jn~=Kw
zwWo7}oF9j3@Ia+{E)SlMscOVMi3O|}wtCXSiwRGw0jNI0`Wx9f|H@7AW*|QA!NB(X
zhyb0Km=1xH4vyaK2b#`nJ-miL;kD9Wu{WI;)2>YeW!E@Vv-=>-#1ctkS0B^DwPKJw
z1z-2i@YTg?8INLh8f-dmG467HcsmnT6U0>~wnMO32AnLnc&+<~sIA3$pB01`|IP^b
z`|;`}(B_OUi$|il3blz@hi9CS$4d@?ez4k$MsG&odl`SGIFq?Qrsez$#2BhFbmoQY
z(V_CtSoFwvP!9M~&P%1AU~vcs@n?&kwoj-dt-puyGiV%6rh#@q7<KA+7nbTm{^-UW
zrkmM0AV<RD94jqz+nF7LU@@Na?Sy3xS5;HT(H5}Oj>41U8dz#NFwM(<hU6Kuj?cf_
z@Ws+FpWKy%TD%C#(SV;#;&A&FEH<0^AS`r*TI-zeGpqzyOxyW<#Ci=D_gDP%;j2G?
z)aNo|<meQn+BU}D!pu1h7R#t!vAqS$DWlBGLDyV^+0^mG>CW@$NSrE}tiJG48;_{z
zpp2r{w%1{CY^asw3s}x3DvNrcsbbZF=8PNH&{)|z9mQD&%2T=}&8LxNgVCmu#7smn
z`gt*|cH->(2-mUEa`1Qz%_qm8P2|w=*swRk$?06$88}tOs-qCzKgM}oNn_>22^i;v
zpw5KSWmYq!YJ%!sr<Csgu$pr|xt>XoFJ>T<-$BO8BlqL%7B@~ln2Cfw9;Z%g{;BqW
z^DNpVQSO4Tm6fP{rP&ab_yXpWP9^g2!?!+3a=}ETnw!L9N25$L!c!qxZ2|tKyx)1{
zHzHY%ehR4_fN!i5J^YN<)hI>Y0Cfqi*Oj`5r82oC87SnZsj}K6<lss3=U`2Mb0pJH
zuXRq-l$Wy*cwoA0JsCAxnXVq+{AFn5JXlm1FAu@j>M>r`NcF=8TB_CWo1lh2f27gD
zoFFe{A>)03Psp23;gnV@gU&sy<zzS?XBqU>)H%)+gSHdF%OkADnQC|iiJYEZ*Vs(?
zVh(a%2g;4q`H6!SGEvQ4HK0bp;_B)A%*MSKRwwRz?z4^yFQwg~PhpUWNl!(%W8lIM
zu_r{h7C$9VO+_iMg7kHY=I-(|l69PxfU_6UEakk8t~JSYUR>+p_%zHCqjM|F2!vI>
z?tsaBU<;XnR_#7nR-1v+&j#XrQV-K-w58@{wJcRLi$C+Xdc)%6P><xVz)~|WJRPs$
z&cJN%{7kuiwtw;AA}|(~Y8;+2UWdiZ0-e|0mtm>rU97~O2XfR2#Q*Zd%@yA21Ijt9
zKDBxtRvTE(n`_rcIkL<gR3Uzf+8ataug!xF!Q}Jr-xhJ#tts5F+v7umK<>bSSy(Qe
zi&`6h@m%0s)C%~UjK6o`?<D-?^?zA={w+by(#cLXN(14Zg1;{Oou>IesY?bwV?Lb4
zkaO^t(Vn4!i^}BZ;V;iH^YNG0?X(*BTF3W)q)z_-e-d!A{+|~><$v1(R6)}Fbj|+P
zROkP{l2LUO{w)4l`1_5n$iHjWzXRIr`|~<NNhQCaIkgo2;!V8a#$UYhb}njJ{Jo{j
z|C46@p91`&KgYa_rP9hl90;4pjT`OKP!8fUnwQl)7>a+FiGQT-IR36gcWX{%0v>JO
zPT9oOwEsUTgH+ey9A*F0L3W?^pt9sOv|Uo!)O9q!ow7yh!JpbthodsRMo^;0S|5gH
zF(BR*IM?ko7(N}eKb6jKZBtnwJo-7;|3I^x1o2epT(?tt;la@9f^IroNhQKln3GNq
z?O#&ybYVOX&K7t<`~RhAf7ak7?NL(M=SwxG(z#6AC6%*a6*$AM*8cybZ1MFv{Oi~Q
zo$GZd3-X4xsdR3|jV0d>y&Jk;^Y`e9i^_}-YP+No9n$=E%7SElhya|gC!q{`N=LYz
zvZi0cpZo239qx9@0$tMnC6(w~&9!DZfDyij2elZ=Fh6O%LIYPxWw>87FR4VoYW`2k
z_%{&F#Z%GmIzmY$x``Wi^>S=~t&CVf+qcsIIZ5Cb95Z@l1fy2b!Kqv(LbY8|8LqbG
zw^L?Y7yb<QfDTtu$?ItjRhvo);6$vi15lY@Lnu)r+?YUPtq*H$LQh;&`t$b;@hYhv
z*c~<hOI7~2@o?h*@AJO8#1Xn=RF2&)+P<A~^7YjIRMxl`lqi}iCoME9<0tU*7Mk^(
z4(_i*4PX#lw^Od3BN-d|ByKFlSSWK#Cj2*Lt|^*RIny$s?60SxjF-a>reg*GBg};I
zx}DN%w)QWnj5kMfDxJ@0yQH!JLUStPJ?}yX(}TariC0NwfR{D@CuK{#qQg<?T&eX{
z&8bZ9HLa^PU+r(wwHi>F;3g=WYKzuw+P|bS!R?xtRL0w-ITce`n)RHmZXZlWdq;bh
zRG#-g(*7Sq*)GSS?4UCYFE2~8a#cqETnGDt7#GzgLl$Adp!qdT=sE38<q~~S+yA6Y
z{*n$yWxVgTO{M=2T7QJHvR9yNwCnx_0}kgZsYJiw#svR>20=?BHWLhDDq3k<nwNpn
zD_HyAPPr1^tNrf{K>e9f6#!~AC=;x%1KdtokUH>Z5dH!(Y6IT>O_|Pvn*X<&g#ZlL
z5XvR3t&TvY(~BGZJ7`X2K|4arL8CSQC*{Bxh;R%#L@R$ICNJk#W70vukrSgmsLUu9
z$}Wi4_82I`B|&+WRPuCidSz(;e^OK|%gEFLODZ#dN^>fmleK+2Wec$-881hNE2%`&
zaHI0K;W7Ly8r-my<L}Dd_eC9HiH@*T>oO-IPGs8u6)0=|n&u^yd_6b|wo&_2>CDFs
zzn#M{Hp9Ut-llaIeQ{Cg+@ozOoqKU(g8MWtshm~^G{2p)<_EPu)tUcvFu@O?EXYSt
z{4qYkjS)W8`kB_FP}b}eloyp5f2nOM;}t>gfnL@2FHpw&4ay7ppcC+S02bhu_9&_3
zELACa<YnxCG=pF=B!4Xhum40Dv>a}X@6qx86J<Rr=<rbW)KF1_lFEcDf!BaGh0<;Y
zWdhB0cq;7{T3c#urTwXFNUyg4t2+I4`v6S1gHAA9Cs0!9-%<0DN*<v(l|9rM$`<Yh
zrGIyA_i~=v0D5VU$Dq7QDkDULGok)aw!}bf57ptR4EKcgAFgem_NUT+g!Uh)c{4ib
z5vu`}8I00APID@|Vg_wFX_;A5u3TnTaoTT|4s$zYT647jf1)hQTpgZD`x$MQRPuQo
zKfK`hQ|a+6Y-T)Pb1HeR)&*Jxl-=?Iloyrp7HRvRl)J#PK;+K|c{-t$IwF-Bu7cA4
zH7LE-X}+EYu9C`vysrH>Y5&_P)7z~5H*@?j;#M7To7U|*KuKkRc7XGB*vC3tA(RPz
zs_oCT9@TnG>v1T<oz(Uzt&L8@!2)~^<wa#iUqBh5NZVggWqO`j({#xtd1k#ZhPteM
zzt{SM)*rPNLz&7I+VUJ?I|ud~8vm~K7L<iBF-4fH3(DD28aMJXnwKTSMP<0Vv`s}4
zMtLZYf%j>C8&w1DHXev}`-ohCY9m1wq%M>hKcKZ9l=W+%?FXT}N-75$|Gy80YwA|{
z!@*z#&hKP2BA{hp_ki+1)ep)V4brv`%7Tp2ngC^jiQ0bxl;NM!d=iueovbwr$_h-O
zgV&T2N{{K<rm_I@phOEar!qkSW%w5~r;<ypi=eE?E81S6btRNn79BiuZqObZp)C1k
zZEu0{qB5gxP}clS?Y~F+msA$uEpU3hqr<(cbw89X^}e#Rj014+qSE7#@-RMtvgV&c
znej0wFDmVmP=-IPIh7fo(KeO-pKJY6`xj~b3R;Q_-UT@LqUQ>f7nKpOYWts*Eq6<Y
zXR|P#3(A57Kv~dIng?laX)ObF7F;?QFqq)qlnIv8yreRN@|sg=d$e6r$t!68ickir
zs_kk}=fHBG1|d*pSQE+u)rRsasYLa)e?ut8%EM5`3)B2jDE=6&dHZjaUE7iE&k{x;
zAm?RQC_Q>ZnP6Y7{h<suKr8>7BNlK7l)W@u+cDaIB$V-=)EWn6xCCt{LYdEmQhLM5
z1Ym+s>j0CrW<y!SY1*CvWw_Z;PAdUr!T5iRQ5QlPele5<cnOL>Mjmd=a1E4iE4M=#
zen*ye?1b{2$a_#`a8UC@P+nAgh;8scIir7|*3wWW6r}C4Q2a3};KmwPhBAo|C<_(}
zW%$}q4&JPWa4^BfTEn0$c~fmShcaSot^8lt=-&a#gu<bW-$|<tW%zE|?x{5z%6NUW
z_JbmRmeF5>flwwi1j-Wop!j3(KZJAo4$6f2-@x&rl8=WnUZ%DuYkw+vj@D^V#-9ac
zOD}Xd`hSu3co~X6#tPiHYrU@RZO{i`pMf&LFEsxK$`&}U^#YWA{G;~&70P%afUHm*
zDEmGP%5bf4E5rRK0uI)sGn4^)LRr$@P+nB>flxN#V9iS^{fC3IKt3HVMu(%4kAyOx
zc&+20&Ve}v4qjA_>ZhU1XtL(FQzn?D{izI}17!<M)0|2^L+dQ9bD)erH^^E490yFL
ze9iDO0`Q_Tfu-6msa3(ZYyX|v|36W->>h+?LH7nVR2l38pvQYqmh6442cW#DF4<@u
zJ~nN;&J1#HPSbq|52jS81C~_uzi~qI+bQFn*8Wt6{|d^2d;?`c&TD@v`}nfv-?QnM
zKrsND=!*9E8On>w1g=7fZsNx9ob?Rv;_Ux#l;O+haChl&RK_m{WdSQ%9J-F<FJ*@J
z=!o~~2vwoH{u5=wAqdZOYUp%o>G)LgP;G~1X;52(l3E7=Bf(iy{5mV=qOys5LYYu6
zC~MSP`%_tf{@T8sGQENDr)CY-5uVTysPq`FZ7LHS31x<{+K$)$R2E>Y)<o@}3S~O!
z+RlV>-cE)x9abFaW*JlAU;;A~Fy=rR@fmH;hcZGgl;NI-auB@;<wa!ymuh_l%J3_o
zY^k-{UI%6TjZj`xH>d6v9pDY^@t-IY+K%wdcsG>xTTm8!FO&s*56X+m1?gib3s$H(
zmCuUCQ4OdJa16?XPH0XgKdEgh{ZDJVq>`W2;Xl{<g$`e&^=l|Es{bdH{8-TWOAoqh
z<L@vUxTyb2U%(7@GPvERG_3KRFJPSJx$Orm^jWLC|3NvvaNRE8oiAY6GUs{2MdgsY
zKm!+*v-r*zF#IBhE5<*4`2ugppDpNo`QlfOzdK*R-0sU4G>k#cCcE<m%$+Y_?tB5G
z=E4I!!r&^YoFgSZcu|{L3E)hkJ72(b(M@+d<=Okr7cd-HfBO=KPY8FufWf%o6f61V
z3mb~|oiAXVFJag`7M}8`cfNqR-Ip+&Nq4@0x$^}Kzlh;1x$^}KUk>5&{0GVgyYmH1
zceE7Wq}}-fhU2E>moXe4cfNqR-Ip(HDRLft?|cE{G{c=QV4C7-r#uG4oiAYSd;#-M
zU%qhhpg&)4-uVLN&KEFuzJR&&1<ai<VD5YY^S3Wy_+sOBU%qhjAm<ayoiAWYei_3D
z-aB8w-1!3L|A{YPwx9XLG&gi;_x+WOQLnZQAG4~#vLma0zjgV!gf+1f+oa}AtMP1?
z)P@stj(t`-`0LY^_EmVJ%-;N0!cL!kdu7=5<X($1vd65L-{c(`lI^OJ<<5Vvm21x{
z(H}kXb8yI*RTti?yWyU_E!X_~`Ie<$mb?2*?PJr9UmKn@dY$iJ{pD}v-&pfrt%2u9
z_sIM<;L;<tA8Pyivv|%oja%hzL9g?fUtfXChDKNU<J<<HyUs7iCe$zcUWN9n2CP2%
zLePM+KeUhBJ*HLG`tRPVoP45c<dQk(TTJ^Ue&zHs@rV8x+u`xF`#<U%zw=@{c?8Al
zest$Y9arXeJ>Q~s<7cMbw?1$9^7997US3sa$Nh`fk9@UU#nIavcAnd%?XIIWUcRg1
z$j>W%6MKC4m`aa5mzq&+^Nl7w@w@r{EZ%RjFv~SS&dPBG%VycGZuq6pIoSX$rvRKI
z_(O)}09+tgnB(f^!awr(D#z7dE}9AwIRzxZB^OKq={ybODv0Tp;ZqUm8o{cm0HtLy
z!RqM%{iXp}GH)8dz!?DU=>TPA^mKrrnE+b}f~7eFU<X0$41jVnpCE1)K&6=g9_gD2
zP-Qm2eu9e9GYjAVLHaC!O0s|;V-7&w*#MPg@@#<ma{-PLRF$D~08S80p94@`781;Q
z2B6tofDoB87og=lfO7;jW!N(S7YG(U0}v{U2o^mH5IGN^j?A40(D^xls|0mr__F}l
z2v$7{P)`;Utey|h?>T@5GVeKnfw=(g`2Y=N^n8Gz1pr$K8c8!3U<W~LF2KVwpCC>E
zR9XNKCVdM4syq*{pP;Gq2!I0w=>njcEFj2O2vGNVfEF_Od4T#a030P~B|{eioFJIK
z5TK1LB$y=un!NzfPUgG-&~g#LIRdW?lK>Y87D|9{SwygCF+k)ZfC!np2%z(e09Oej
zW%y!%YXqwn1K6^dVD(D?{ays<BJ*AZ82B=P`z3&GGWsQepd|oX33^ELWq=(7u`dJk
zlKBL2O93h^0f?5qB>+{H0qiH}BRxw24iKa-1?VRW2r`xf)LjNJKqfB(sGkRLlwgny
zT@G-9VES@^A+nHQ)++$b@&Ja)oIHS*D*(<B43lB609+tg_zHke77;932@tsgAV%h{
z0O-65;3`3^3||RwjbPPEfKjrTVD+m2{Z;|Q%e++p178DhzX~u$M!yOWv>IS5L4q`2
z1K2?j`x-!^%qNIj15jx-K(h3$2B@+YU_U{s^sE6mK#;x$AYB#^WUK?IyB1)AOkN96
ze?7oaf=n5@4&VgA^mPDF$wGoz8vvTE2bd&t)&sQM2yl)dONMO#xInOQ13-=}B3Se~
zK;%Y%sWNvXK<7;WR|%%e@YeyZ5v+P0V5Tf4Se*~hZxg_5nYRgG;AQ}KKEPZVoevPS
z1z;<|JZWwQ*g+7x8Q?jYPZ0M8K&34Jxze`<pvqQ&{RBdK-T*j2kp2e1LRmnNu??W^
zRsboJw*u7P4seuUu?*b?aDrg^Hh`C8A;GL20L``oERi|e0b1?^I7hHdhV1~jK(KHJ
zK%OijShNcuawotFnY$C9^KO8v1gm8DE`VzUt9AjrCW{GHzX{N9H^3U1w;N#K9su{7
z0PAG*n*c#?0c<7MAk94hI|yR;0K6{q3F6)csPq;<zVy8XP-QQ`eu6F1^ESW%g7mim
zw#ov6i~@kVdjYn~<h=m(_W>Lw*eOE`08S80F96sr3khbu1JG<Az#f^i51{3{0Otta
zmSOJzTp(EZ4nTn{B3QH^Ao5*+cVzCn0G;0hxJs~JhVKWsMzCr>!27b8VD<X|{oVsO
zDD&O}7<d4{{XW14GWvahpo0Kg364nf0Kg7{*aH9`$$WyiLjaWy0u)N$L4YbB0PH9D
zRC*2p93V(P1aMRq5M&$%sQUrHahd!9K>Z^CM+r{K(8B;H2&NwfI4uhaW_<|I><GYF
znR5i7<wpSL2)>YE9|Bw;Sok48kt`xu^f5r>M*v^T+>Zb{7Xn-*I48qDb`8KU?_Nwf
zFN-M`WS2t7MVUvrB(GDxmC>I-zLRSxm!<hB<a;@Y@`KE${3xx@AjQ&0`AP1iT#=rm
z$nwB3WSM>xSzeU|0Ol{U>M_W#G8rQ4pMdw#WAMH%Lyv>we~qF1CJP~Q)=79bI|1*T
zGUo(9%Toa72>y^^Cjl-HEIi3$Mu7b4B##-VK_XA_m=PcsoZ>O#49Haw9y3lO(lvrr
zrvXaKVuICY0s5T*uw>pDfPtR_;QxDYju~eGg1!LQN)Rl~&jEH2#C{G?PUaKDeF;$M
z3jmMweF0FV2w*=!Md|qx-~d7TmjIPy0YS!B0CkH1D$C>|fcjqp93`kKL%#wzK`{L*
zfa<c4VAj6?ntcrrB6Ge5Xn79c96?PP_Ah`71PlKK5GsoZ7JUN{c@ChC%smIt`8>c?
zg1R#N8-QyBtG)rKCyNPIUjXQL9-x8DI}b4MB7pk>KtmaQ0U+oSz*d4r(!2<;gCO=I
zz{4`1Ansd$N|yk_r0)_ymG1!d6Eu~cZvhSvq<;(0OcoGiTn4E79Y712{2f63?*Wby
zw34Bh0ZtH1zYNeu781<*0ifCU0PSSX_W&(_1UN_Fm0>>sTp(EZ13<VeB3M)m5cwlO
zgv|XBpz}`vR|z6zcrm~=f>p%;wk#%CeFdQ3PXJwH-cJAne+F=00q7>9uK)yH1=vc^
zLz+JW>>!B!8K9TUCy4t6pwd-<Xz9BOP~}&E{RDla=NEtj1nIv3^pgby8P@>n{t7Ta
zCjSah|2n`?f<ZF$8o&vH>DK^;$U=fyHvpPl2N)`It^>6E4d5KXFd23O-~z$I8vs68
zM6l?0fXLqfVr1@b0G)3FTqTH=;lBf11IP+^@W`Hv84dP*GS67{t^3duXRciCKV;?H
zXTIt)G9c}{$wyph@cN4uo_TuR{i_>POZnyJ4WDL?T9noFbjP3msCsxOf1{WG8D|vV
zo%o+|CTt6x+v$3T9^OYAyfHGPer`a+ff*kL-FW`ouba*^p1!MX+kQ1R9bX?()v!z5
z|MS-Oo^6B2vL9O~3^U&SW$fk}?XQN(CAaVhmVM^FH@|v3a`UmaU%mH7OwLQ+9lk#I
zR+Dv=>qop$cIjtbzlo@@ugx(};D)lb%a6@0$QpAbc4bz;qm%kR_eyPd*Tci+mMC6)
z$>O~bdG)@9KOT6$!RzI&`=TB{_2D}k=hwb3Wb4gg(~jkTwxLhlf^G#DcRf?}NV`gt
zo_PDpt3Bd(r;8`5w45QnPx_(Nqyuwhk3aAT_R;TEpESOme>6QK_@2g1y_LVXUO3~;
zNpF7n;DiOQPW^6Z=#r1uTpVBcMXQB#u8nHaxYxAUH+EG1EPQ&eIVY<$-O+p&zmxU1
z-Wa(Uow6_}AXwh~9i5aQyWE7m1NMfSuoLBV*fP!p7<vmJS+2PSP{joh{0Bg)9P|gk
z0fIdQ=?kp@47Y%Q;DreRIK(a73A276yhBXbnKIr4I6-iP;3-+v1u)AEFv$flNggC<
zSqh+006><^3;?)5aF!rPHV6b*R2pDjAiz|4lAtr|(asGpUCwp`TqC$lFjKZF1+dxz
zSW*gLw!BC%una(t(g1Vi;?e*?WdUvy%#&S$0Co^;2m*LcUMGmV3t*@PkSo`)u2q5o
zg3AC1Ij9W40fIdQ3#C;SAmeU;gt7oq?j)#R4j|+%fW<QYE`SpRM+jb$Rf7R$l?Rv<
z46sBVBxvaYXmmHgGMRZdzy*S{1bMPSIe<kK0OpkgSRqdmbgl@{t~|ghIlDZ-HG<0o
zugO*(fYtW^Eb#!WkrxRDRs!fz0bre6Tmc~HUVxhf8)TP?06PdaR0MckUMGmF3^4Q_
zfPA^;9)K!U0D>z4Y>|U10URLML$Fm^_X1>81xUCTV7uH&P`?^LNM(SXGQKjv34$X8
zyJgiX0JEwCOsWE~M;;_-c^^QdssL}x%&Gtv2+k4|$OhE_7KH%Js|N6nJW0^G20**&
z0Q=?a>HyaWE)%>jTipk+x+cJq`v4Bgiv$B}0rUs~_&_cW0SF2OxJhtCcBuidgJ44q
zfRE&Lg1FiMLu&#Q$~83ss?-4pt_AR^98?S70Kp!DqtXfm$haRMAr#=a+(}TsE<i|a
zfRi%5HoysjBLt^q)j9yP9srnB2jHwcNYJt#K%@HszL1&s16&|DOHd>m)CE{nA7EZx
zfUo6Ag3b*9+C2bpPR@P+;2ObYg7dOfJ%H5@0xYQqa8X_)7}yY?M}2^A<>LAPK@S1k
zB)BZQGyvE^u%Q9K5Ar$yj&#uvLW<=Yh^*2W-oXvweMJsx2ylR455ZMwJp_>PFhIgX
z0Kdwe1ofK$gfs%UF5?>koFF(t@SCjK7+_Wyz@)|iH|0TsmX825dKlmjnfWll1%k5x
zE;CR**dzdFyQU!Xnt%iZ%2Onr9|dU_2I3BsbHYHbkz6Jz9VlBr0<yXp$dX5puq7`(
zf`kV)2k6lhpsZZn6d<Stz)gZ++2v7y9RwR51t=%46U4Oy7}^ZLBiA$osL~1`xH&*Y
zIjA|n0fIdQm88`IAfq)vLJNS(awkFkHUJ?l0jkRQmH;Q(1l%n@Y#GoMr@N}H0A{sC
zh)JywB19e}XxR>+QEPyjGP5<n1%k5#p|U|6fJN;A=CuK+BTo`^_5!qP3s6_iZVPaY
z;4(oy*{U7D>J9))+5t3>7YPQ21N3MQ&`>UJ4-nK5;3h#M*~JU6gJ6Rf;9+^4AT9!6
zXa|5Wxuyd^l}-S`;Q&qLpm2Z#1bYaYNvk73MkGK&M}QV`CqexvfRG4)Rx&;U-~_=D
zf;O^hCxBTtz@$z9?c_m%mYo3_MFMzbW+cD`g0lqSvOyHUqAmdQq5vY~NrKK@0ovIB
zk#e>TaE;(Hfh}8g23Xw<U`c0yF7hJ5!0rG&x&U;Oi@N{>^#Hg@&_j0V3b2D<Lsx)a
z@;X6WPk^D_0HWoZZU9w!0R(pk=pzSp2RJ~mhoGOddH`fR29VGLV1V37P(K<Vq$j{2
z8Q&A&1i=x4A+l;OfLXl(CiMasDi0F0>;ur~F@Rw*^D%%61ZN3+vOzS!qP_t0q5)#$
zNrKM(0NV8ih?TQ@16(7xOfX8e>I1O4Kfsbc0P*r7!N36kJ^BKSk&F8R1PuhZNsu7B
z^aI#Iu%RD7qP$KJHwa*8e}H7UrawTH!2rPn08-_k0RRUG_7J2?Yal?z5P*b%02Aa+
zg8GjGgbV`6l<|WAP7oX+cuH0sjP>bhnM|1^4^k$}&>@g4nMui(g_IoG;Bm+lnM0W>
zPg17Iu%Q7{-Ta+kWo7Q1fa=!x__SD_NOQNJ9U9;@(Rv}n0%Gt;oHHz7g4>O+iptBP
z<NzV(4-W{c^aK8(KYkrTHorcLO&yUQKX#<?$o37x1FE~+zvDM_m)o8{JfN&=dxx0;
zv&_Hl87BVk`an5wOh8Ko@muJd_)#bG=j}_z1U&3AcW)2N2uL+$hs1!Os@|T?uY7Q_
z637n!d^0;6tlaj(gn&d7+jU`5z!=PrcF6%lu#_%N4v4^#bT&CaRtmvCv#p5mF=OK!
zk4{w|%Q@kPNtEmv=4^dC)cI%1*;lvcqz3eI1@qUF;5W)-KN^RB4zH>qew_JG$f)>H
zv1!PEcNga$2RP*!mzk6RWH<$W$~52Ez5%B`)9k!Ge_{aszp`D~NL#h<mK+uBZ5c8t
zV1g@ps{DLtz^?6&O%CYn`m+r0ZqLhR;~$YlIRO(Ym8|;c)WmVkkX52gm=drBdvNH~
zfT>kyEmo<Ptl)1i;+Ig$oJ|3?Q@=GZ*=Aj(XIel^)%{DHf79#~{|}t=@$Ve6gO;L+
zRaMz82N<tRuQjS2x~<(_V`jicGdLq3|JD(q7eH%lFB%$9TJ`4GX#qj5$Zhib*#S#k
z<9BR-c1}Q<Ak_pd{>unZqoI?zAU;rTdNJVtYws<9qsYQ{@0npb1PKHPu^9+%2_ZT-
z1h)XeJp>6!umoLfli;wp9-QFr?!gvVV1Y#zcXqKw7KZ@e^K_qPLKb%K|9(}s>Q>zp
zKTh|1-s66{=X6z5?~mKoMx@K~9YsyOlon9RqI8Z*a1o;+OWN91Q&YIVJe{AS)eW`!
zF)`(s7^k?Nk-dAzMD|=*&xm^Lu`Qi9#iqjbw=G?jZoDyLVlyL;$V{BnOjKBt?q_9N
zOQRtNLz$w+G-+MBtEMciw#BbcH{HRMJY<{ewsaS+e5u0z8Jo}HvtN8xe2I8H*<3o|
z(`W6EGX0=F9#h0W{hn<HpJ!12Y;cYhj`~a;pNdicc#t1;=rg|cp#HJJQjfoC+KOlJ
z{3|16{MGI%O_pFND;@J8{tddoUwNrW9sOvU3R1>5!H&}h{8f}P{&+ttL&9H(lra&1
z$mL-rDdSIN?n@aD|5Hz1<tZ)vJw5-bN=5V-{Dy`4S53-z&}d~Tt1e}Hg|UW|)sQlj
z4nGm5{?(K+{x%;+U8{e!qzuj75GH^9ZKw?)Q_F)QTd8U|F+wWl#67-oqW(3KGFRLc
zVpia<v6Q*t+DFQoNEv@Z9w22+A!9M|NRwhxmcSzknd@jT25%{BA!Yo4fqv3RODVHL
z_M0rvR#KJ=vRks~T1y#E9jq<&^kWXaAgcoz#o?M>f*}uXZlmxSc3bH<FRs;C!HAHu
ze7LSI%UC}bF+XHAq>N`IG7bg6d@1W7Wd$Mgk+P0bRtU1L@?aSC97Q@V45mVXf1O}5
zyNUpM&I-lz6scDf<dk|bQdSHyCV-W!vy^$`x~i;jU8KwhG9Glxzpgypg@F_YzEap-
zD*8g^1sN+|tkf%k>%3C0ht%_fET5G1lzRS<>8J4bmU;n@)o1MS*GI|{0&x>2g?*)v
zZ5<yNQ~!RDGWO``depyukTKG1|M+|p2QI?^smIf!I!oC=DJun859xN0bc?UZ7zP<-
z{>MwjG7t`vj+rxb!wzMvbet$1<C`{yaZ)x!>aht=l(L~xRsk}8Wr2Ugq}z(PKA=i?
zEGF6??L)v}z@|1*I<AE4>#_#(j7;iP20S^RHGZ^|Rl#)_Dllt2e-S{vs-PictnvDJ
znAM~#4@{nkNxkX_-_TIjOrD2HVGXcJ%6KLwWi`QIz`qGnRtwiFVaZB6QOauLng`7C
zZ<3VN!L@!^{$wd*2gPHX6IjW3pe6&U3yMO>O2$^eGRFMHP!KX!vguNfJsHn_rc6j#
z7_Jq__{Re{>0bkIlAhpiCS<g32=o)yF%)SBvo(USuT-2X9XE!IN4m4(&6BbwxNa@=
z=1W;q$P~y}$&#cDpPe(DL=0G;7D!ohT<>SB@V8LPTCo0=gpd_wkrcMXb$O|{SjyNX
zTV(IZ(?My?E}3Oq1?EyIYlG{ZvgmkvDD}dD0oVLnE@f?TZKRClzd{NlaBY#PTPbDj
zAj>Uf`Z1*KA#;^79!1JPIsld@i*SvUb;R`rskc_jA|aa~W$PeQPnYQg;Xo<mFE!|4
z6zD8v8>B26GDYSBf5}0;7@(gEzX>vyac7VZZX;lBm3m!p&7biy0^6isSA6qcJpl?b
z!%nH#4c9zRo*wU#vhKKEEoHl<EEckLknwMil*QrNNk(w5lr?90;ji)bZCU1+vltWD
zp|Attp*uGL58*kEc76h!1e~ob0}H_tumY?Hi@-Xt5i9_kz!tC=YzFfIXEiIqYOoe8
z1w2hG2`mS59Sz><abwqzcUJ&sJUn2n6=)6GfO?=lXy7Pb&owVic!Al@OYjQ325-Py
z@D98OA3zHD2tI+&fCnp;gBbt<!4rs{f@k14_#5z`Mi-D1xB@p&36-}Z2mvJley35z
zPyrWZKrpa@av%tl1*Je~P#!peEPzun1(?7U<o;!|2$*lSB}_x*m<|M(0cL_7uxHV;
zs9CfuwtXNO><0(HL2w8h1;@ZI;5aw|PJxqv^^A3r^_TUPeGvPcSztCmUz6RyzJ+}W
zkL11$UW#|~%@%CFWlJ*W$oCYIXW%*b8}NW{{#ul0uMYx0rV|yC%!T-Mc6>54Cdphl
zfxQ_!FLq4qh}iM80PI89XRwdpp-#8KkGSTe6&~_-3~UDlAuj<qmE+W{6etZUgEF8v
zr~=9Yf553+IZz%1W<c-Zhl{G90;mLnferYAiXa4(1f1`2dKUzWg8ZNWC;|!to@&P9
zu6_e&!8yQFtS*CHi0DqR8@xgSI3?s1@Vp~>uM4<11$cHA=YY4tJ@5y(18#ziNckGD
z8tek=z+SKkYzFJW2Cx<E0NcQJuoLV9$zVTN3$}pWU=LWy-g6WJ9}U`rcAy2Q3pn`<
z1v^oz_kewXXD%)VOTbdF3@isL!D=uUEC4*baWohQ27p*F3GR7#WDHE6Qdt%xl*E4p
z08a?z;hyzDNe~2VAQ&W|>Ldaqa)MpvXBe-+E06*{g7@G9cmv*oci<&>0eCEGeoz1u
z0z5voCR!FI!wKr_w<>NzL2XbC@G#z)U>2AS=770i9^lNFhx48QzkxI0Bsc|r1*ZXz
z#N{!$KOyiXFqeX5U^!R;{6Gm%jK>;tT3sBtfE<8_F=qo7;0`=MPT&f%15e-v+QW17
z{{}}~??CSG`vCg@kN4-N0QjAOg@7Y4M^cWQ927Z_ap>oqWg6#*oT%_<{WzGN0cXXW
z1@{62!H*ywaQYn$x&qFKIRowwIDJn9oHKR<g8=>Igq9QH;b1V}M3^&k&LcSi=Dah3
z)AC4=3%G&YzzgI7ML;p&4cr0O3mzaZ$Oj4mS5O@I0Z&jA_<+J7KL`N6pa8G{e^3yV
z09MYPvg0Bf$OJM2Cy)hPL5^GnRR9+t)j)L+3hIISAPn$(6BPj$BtC#^kU(Gqr9c@_
z7Fd84<N~=t9*~#c4atWK9v{WCr`&Ko5oJ0PECRE@0x%6M2D8B=Fb7NrOTcn47c2$y
zz+|ux2(S#y2P?o7kOXFcsUR!Da><GR2+w=S3^D<4lQ1nc7fNV~2ywxJ{SiYe5Dp?h
zClCdqK@7mxTMgYnEQkYKsNhSc27E%)fX{>)1_CTp4EQXkVK5j4xE|s9V*=osV-lDQ
zcuEvs!L7}OjXy2|fFIx@qyQ)c4j}eFgFitidd*s(4yXzGgK2<gH1c@G5nvHm3?e{d
z&<HdEOELN3L4>~pe&y>hI=h2lAGpe{`5G>`fVlzqGl=_8dH{GXDi3Qtf{tV<D1_@`
zv`0tw5U9T}f?j&y2r>Yk!8{C2bqE*=8X>3OL(a9!I4~aE1?K?IX+OXd$CJT+z{Si)
zunu^`kq-#K^&sRxU(gc_1pUAdpg-sZ27o@GHz*D_x!@)@$OG~MFE9>v@nA66k4Pnh
z10dlb{yPK?gP*|>a2Hv&3ax`PUrzU@11?~=VtNbSf%o7I7zKG0C<Q8lx}Y9t54-Ll
z7IXt4@Y4o@K_yTDR5TfcSZ?-6D2bZ@P#%h0g1LYqxGn(Pfd}CCztoizu1(-2?q7k|
zfZq~&1h|Si0uF;?fGen8pf~6P`hp)oKhP3zk<^~MTQzY}4O9iyK^0H~R0emDWw*g~
za0}c8H^5DB59~yibHy|r2rvWiOMcTp9S{UcgHnJCrV5}UC<BUtT>P%f8q`i6?70j9
z@|a93@B~~<y+NgW4?chta2MPIJe{^9hy<NL6o>{qtvVAt&I}?@_ANmR@DMx#kHKHy
z33v*gu@XK9e}mrv4|Tr?c7UB=1X4K!Bq4Hh0Y8|v0L%vllr@)VCXf!8!3Pvi2+aC`
zpZw_odV*e{H|PiWxi+riyg-5n{>ufpgyRS3tRN3?1v!By9QeZIH=@pg3*Z6Z5^W;D
zx5f-Zz)&z8Yy&&McEA-IS7=QE&y%VR>VQyi4mos`oe)2qI2X(Yp`Z$=20{SOS6vS_
zfOTLa$PG+@%REQ$8QK0PcmN&(9vIBCfd8fmKf1$=109i@k>E9W1Kxr6oF9C^MGE)`
zUVxY23Rr<ya^1*}-h2f4aa{lu1|`4^zz=r)4laVrU^Ey7_<6A1U=WB0VW2*^ga~ay
zr1Jn*kda5&W&#Fa1U$W%-!<fk(E~s~&<FGceL;T^g~&yN&LATz9LNmJKmng2UxmQd
z0Ioj^f?MD=5MU~p1^CgrgvR)f3(^F590!LzKu?eb9vQ(F*f#=Mq2mm~p!Wi~F&vBl
z;fOm=pFRhE2di+;9aL_ZM&i0XDq=Wj3o1iD2yn~L734^V^7nz~+@gyFok1@!0N{hm
z>Q37jm|oy8JPStzczW>+Fcs_uJHRajcnLg$9yhwU=|TAA*Omx~XAMn2qI$rOM6d$#
zm7pVc*Fq7q2+$Qu{BmIs$N>uDo*Ne2Zz>45pOgWZK?>}D0nI>L&;+=_L;mPS!Synj
z+}_y^_5gmQGYN1f#|Er``tO+SPjSK6HkPzPOt*rei0N9`DTtgWJlzWPNYUi|AK(l)
z3(kY_U_aoe1G@kQ@*6k|s)NeF3pvKHb|Z{V8R2<)kPpgv=>X8<D_{!v5p)M`aI_L8
zH#ydVLSP!04rYMNu-^=mZkeF$xKG>;kMZYxQ($8wUjiqloTw%OPGFfZE@Qc@eFFXh
zccIVkSN#emfi9pEh=!a+*#a~NpApV|z!u4h%?f@K=&kY^t`CDl;3`0R!oM`rOAxTx
zUI5IsbAUN$1iJv6FFUbqU<=p;Hi8XcF<1l^f?|NJiysF4u+3?`+2WM&7T272@V8ft
z9Q~xd0p@3z9|5ZgyAx(Q2VG`7J6&hs1u_8_kQJCg7T^RNKt_-rqyr{Ed&+r_Ykc@o
z3U!4HxObE?D$)@HNbQia%z*Zk)2)7;LtZnYjG!JE-DCr)_1*d5M+$NRRwY-!p@l<?
z6<7f4GKU?adzLyv^q6v*dPHb4C)xQH0`i%lYVf`&C_;HcDjNzGfVqJ6_y;fm^aUJ)
zI7g`iYJ-}fI;aN9fU2M(r~t}?a=;s~y9xwlK>+XtoF8#S@CONg_>Ue?sWd1BN&*`Q
z2JBvVO_O%|broD!29-cas_PoKt_2uj`Wpq<y5j&FW;4(MGyt(I|Ax5e2D*a!pc9A$
z9YK506tn{ope+aotw3|o60`tKKx0r3gn_z%e(|0r17kRi<UQRoBK27Q41gZA25kTp
z8AF;3n4ZuBdaMUZH%wU<5Cft?XFzw<VM^&vj~HdV{)b%xgbb(;=mmNM#<Cw^`S%9{
z<@F$#)4&`s8_WVT!9*|_%m6<D0j7h&U@DjbCV>fHJQxSYg3%yh6#g3tMu6d97#IqM
zfJDFua!NqYC?5kDh#n{-L^+|peoejk;3T?|c`%azSCAdSa$K(jYgztlaIpd`0ZTz!
zC=e<wllQcvgVliJ64yDaaNP&jl+%xOU_ICj7DK)jW~#>Zc{}cRfCAt*a0Z+<iC@>5
z9facnbDo655F7x9z(KGdB!himFW3W&U^k#Ag!lS2O}f|Rye2=VlIgms-O*o=@WmtD
zQuj=Eqz6Fx#Z;d1I`zFC0o~nMshiql7`(p&7OD1CFo@xT7Jq=dfEM?_pWqYt03HC0
zgNFAo-+>q4Z}1#E6EO$PmV`pMd;?yCSKuvp2~x|bLujX8d%;@<gK=Kn!6*nb1^3+D
z;0D4+Tu;EYAI8)1FgYwG!{ioAUYNyU!VTtVxZu7D_gJ_f%mxeq?hO~<=o3t5++W4@
z6~L_z&b_%<JP*?dGqs+slMZs~F#WXW1|;q1Ulz#uUD#s=G5L@=dtFYup26-9K)<=0
z!bK_FaaSe1w0D5XF!k{0AMH7H<1UONa1hTAnR6(-%^)%yHkT;PRCyp&E_u00#OW#b
zZL$NV(gh}_s|HtGGo^YKXBRyVn=RG2O8S;ls?j;U=H?V5#np8_kOy!k%*`scs}ynO
zu-Pqva|J#>=X8_Tbi&yl)69I~l$48e$~i5ij4<!KabFB@%BstCI~HyU$mu8f1Mw<{
zd+wc;0%bq|C*-AZ;V*@Ono!+rD~W5)-nsD>ETJcGq<Wy6^o(+v+*P1l_mgr~{$`Lh
z1x-L>P!&`GmAPTZ-M$K-5(oiw)Cgunz*bZjW+<owYJzHjo>rG;4QWzV8`rhuJ+CPv
zVYsdj>Pfglp!^SZ&w3WMhp;UO2dzOXpxd?i#&tW$B0wSd(Gg|`KpFke<@!B!B2(G(
zo_cCy=S>uDIG1F9(HYk<AR6dh@F-l51S7ye@B`=uxQwBDG8EUe8vtleyY7H?{bBZ&
zvR*LbKu?x`EH0=(0nHxL<h3r>b^5`M9`^xyz%=^;T|c#)vefzvm@-{wD9e8cgoz*l
z(Belh2&7hwmv*UTx+jBSr@KvUujc?|3`4(XB!&Zq(VY&Nx?zBdI?U>{sifUckkgKy
zjRtxom}`0f$X3;J=8B$k<8V!PV*!ha38sDmJ<-c?46fB!!PFh5j?j3>b;nG#9tqt&
zQ%3i?TSjgIpdS-qo&*QLe!vLrW%=*H#cr?@>;T)rHn0USwVS~@unFjua6PU!fVE%-
zV5HW7)nGATWm^D}z<e+d%ms4*E9h*%A{oH)XI8LgGBtWiSO@fSnuY6`U^<uvn8GQ5
zHJd4&446VzPQ5s$rn;t#Vd!>@u#mFBEPp*vdO}5JEtMGwUB-JBj~)Tash8TVuFHfl
z0=k_ZVZDygUXM%yFH)BmJxMEL)6{hq;d)^z5131ILzbkHFHLp5OkT5M>bk6q%US*u
z@MeXyTq(^}($r&`+H=+ix=Ed_?5M^`IqL`OMCz1MpMEh{nTuMuD1Qn!ei3LDDz(SD
zLp`Efq5Cb5b$dO+beCFh8SZxhq*|^0wC}<4XJEP_%Sx|U^icPdj?#L_`>`Okd)5)U
zIRW!HI0lY_!(bnv8v$5%7`9sebik}j22{{3^^~M;vuvW<0GlU^fz6U`zSShz43hwx
z-#?q48u5hxt){0}#?-l!`kHlVKR5&q0@{%yxMo6s23kT<{>%nFrT@osK`;ORoeoIP
z1-;g%EjG&adhiRbQ`ZB%s1s6GhVSJ9D`(nVV)n6o8F2<ooo;}BumUr?Q%6kqJ54dU
zekr4~aC8Qo2B$=|(`K)P-*EXDJOCHKdB7zg3<IVrhKsoP9b5u8z*TS`TmhHCpMdgf
zfOeFpmHh!3U#+0tU2q5N!2RuXhFa=tF*hN&4yZs2n)d({zR2kbbr=xs8CV2j_z>nJ
zApFmm%Zj*-W+mYXZl8l^fKTE1(!)K#O;J9X=M#GFyYPuTpW5?j+kM!VglPjAfCJ!W
zCZE9YNerLJ7{ELD`4+qZufYrO3cLi&_fPC^Q*iTM3V8h?)isqq;~t9YGYH<3Nchi3
zKiOeA;+}70FhKPlCL^B}@L@Z3`QV)o;JMq&=a_r|4=*7{d!qs$*YhzxAMrZ_=D;1m
z$NwXdaXDb}DL$X(^SLsw`MQ7$7=?Rw_LPm5*VN&w1bpRyuNKf;02#yLYX{tP;A;hW
zxDV_F`0jwNfcFN}_Z0Zf0^c>z<$U)*cg%Mb=!Wkg@Lh$%fbSsWK(hGWLP2@W1siir
z_k-^`@SO)ngd_yx#vkwn2WDR&Oup0*1ekh0i{P6ZJwO>y15^aDpgZUWx`MKx3y1)1
z0Uvs_0j)qwP#rV}O+gdT7&PPy5)E(>2KdO1k8k-Hw+^TUs)4GY3MdU22qVFwsSL9c
zU}VaJa)5S(DdT%f6>!b9X9&zGNC@wBKQt5N&lK^7F{I;~(yR?LwVb)bhb5_H-@E>n
z9{o-mR-=S(2pLdXMg5+hG)of++ELyjjhz0Zjv#ZbHFR{pn9zi8#Y$JubA&p4kkw8)
zP8$K*bp#Bs1I*4K21J7>5D7W~-CsRS)EztkhlMWCuNiB~Sn+f_Rx(yBMv8KlJ1e1X
zpSmLIdVIy`2hbOA$EOd><1qWf><0#zOJV+ui^qsL+c5t&pt&$5Lm=n&(NLJNaP$;S
zE953_@E3h++pG)bSw@#p2L>J5-}vAxlQBHd*FV754=-d0--~8<iz}Qs8w`ol))x!I
zE>9_F`1|?#+kArxiFOyw9{6qNKo}N2lF9<T*E1eWiE^txlzP7Y@W>D*)={sWcp9d7
zSh_*4AoN0JkBiQ~)NPLzVh|K3i;wh(PxVmQ6MI(+dH8tU`LT9|132FW9^DajU|7sZ
zlN<B`o9ugcY`{EUyPic<YN&Vw`$NG3g(e@P3V&!3vevG^O?cX5IlbH|&)!_?>^4#2
zB>f&H{XQP?!DP%{-^;ErTNp1R4%>tUhUL8U=y?8~KKmvmMcMV9iTY3o&V<ZnNV6`_
zEa$#!aBjOoA=p@9Gv4J<Vzr`$L+v(|#aspvF1#Bl9>!>KhIa$SBL+AUt}?@w&#A4~
zCnuC+d7(6df_(#~2(K&9TOvwdF$WsAi*C5HaE8ezcmvi~8dk5|f+ke=4P>Dl7YnF<
zUF^DIZi|C`ELY8W@l)>dSK+Ex-x$6jW9Yu2($#y*|Jbd%DqRZBK8t2o%~8g_B3p!#
zvvh#3zyDxVBzJ`HCUnA6|GW94p<B{7Aiy_ReJR!pHeKFq4XW^W<&k!q?ZW9A!agPn
zUo)S=PvzfSLyZ3r-q+1_EwA8TM!4GiAb04qew+5IVf&Zz^+(uevM8<!YI+7mti5h_
zH)hANDrQ%+4a0}Hb=@2l?5|)*gJZW#74ywm?Mla}%5ZC_3>)U#>_I-ty@PLVY2F4S
zN%ce}v*ISE-Y|z5n~Qrl%v+2n#AgTOytFxS)BM=RHwrSr{iG5t#}(RAzO;++JS4dx
z;bGzQIevSeUPnuv4{%`?2e9I2bP!K&p#|wbpNxJtDA8PTOAQ&TKy)%V(FYkZK$L}H
z;gQp<D|6!wmD?;#>TEWmto(cfupkhzP_UhV0$av02k+sT5>FMhE8K$(E7RH%9S)u!
z)y-hH!Er`=ZzB?U@uWBxG>S(TR$7cxez$8>5YHKj79!IfM1r3o_k`YnUJ;?@8vRo2
zdM=_O6pTrt#T^vaRxyt1`;c^WGKtfj6DtL_SzFCyjQ8_JZS*tb7W=7QR9vCaO+0!D
zW0=T#7YTWcj)F}$qE?4Y`9?Rnj2uC)!)lo>tCk1vvPE|J6m)W?T24W}{z0%2d0v@w
znxUln;wHx5HCwf^ay26}Pl&^J&4HGdr~s@$y++skw0TK^L0U<(4s;ZcTBBI|h~oDU
z^O1-)V;-}k-0~oYZhx4K$m(G9eTJE$9TaeI#z5-rk$Se!6I&Nd-aNprcS@{-g6%dG
za=@d7E8;spaV+?oUE!6q8D(A_-8Ng9es&wj9OBbGl!^roUEua;`Y=)bezya5jS|BD
z4@9Dhr~|{&OzK@3+Nrw#^vnD0dR;^U6oM0^LVMSg3|YNgUfUI>NSi5TALs8pZq_Kf
z%`$P4e(!=pPQ+oJ#c$`?2OV146;2D|pNPXfVS!=!06k2@5}n+tKA5+*?-9FRHc=l6
z!G)0$Ds+ul`1!)59hK|~<)uwPwjZ0`+S#zZ-KLS4OTRlqfwgXD<X+!kucpWB3L)am
zpD5M3sNHNEyIfqex0x_=h}jtA8ytvU#t<#M?j!JFP+)J<VAhi-AxURG*%cPShHc|Q
zz^>2Z{%&Tp+w2qF;M8(WI^9&z+{W+z@Emr96tMsbIEi5w^~$6D<cCLZ!)L|^&H3fC
zT`xjBWgOz6kOvCR6AC<u9$U#|SC}VlN)}#ID&WKE>UNvGqWlB+eFF;YO=cduzAb+K
zzS?$$kD><@5Qj0;3xX08Go)IrGxzo$2(;^kiG5HA?gj<s<d8b^yF6NvG1RUwQaa6g
z`;5O&%5k)8Jqs5Jr-uk4SrmR~9&BtV>RXhYN|0}$LF-_}rHAH{IBp=@BPjI}-Y_hQ
zg|*gW-9K%8?WryY+3N+WBg<sb778^MK!HuXNY`hzY7}$r1ce~q(rn_}VS}oacy`#l
z7Rw)%dq$@Lz5zC0zbmj|1@i8(u<WI^E*o5MSj)ag=De0XMYOqv2p<!hKkUR*7vpoN
zmVm0S_`v8?kqXB>N?G1s^ev!v!huXe15x5JvZXr|I5G_HQ?=dtlgoCw7~4om0!;Q7
zQ9mSB%}_dXl<HI+Ge(OaAET$6EH==XBkn!M_;d~G?CvvV$v3`brAArQ?uGLu!vj(G
zFNE|83h2ZV2WI|UK6m}?W+(*tstV?!+DvL!!!f6O1yxmK&jhC~Vm6#w3POQhlJ!E$
zm6FZWfkJkRCB-Qy;E0$9e<3QbMXo0ZiLcCZ#+5J3?d8Y4rf?TyF^<~!%jl!oJb&f0
za)f!oJG+g$=<>u|H@F=Xn2HkK8zSpIjUSGvAj#<cg1W(mJ(8=fPamJ*PvTUYl1$%V
zapSq!LpVG&dm4Wdd7mOa%|%%lmMq1wM1`ADMVqxgcqmsD)eUAPXtE*}3c<ypKu^b2
z``ly9<d=W3d1H_Wz{&?U?0mWzGh7%swL_BKrm5INzq>+#bz-`$*T%!vpEubRhKT2k
z!%UIs8T2+lj~&FeQ7y|h&f2Q3UGIdb2n8Ja!01~RV<2F0Pkg;3X=ko<Ll9TiTSR58
z7)QN>V%am~aUXGocQ0^gCdP~#A}bsRKY$u@{B*EO;}%z6rgt$`D33V=Tn7efMOSkF
zn61;R+&TqsF{Nd;RTGn*n_Y7wGwMT!b<oK-sPe5>RU1ehe?Lvf1BdmjViey(kGX}`
zair>k6F;a?^g~_NiXc$VdqmN{%{z=e#lS*{;6U;5Z$x*rSXW4K6~$keOIrBL3(ozT
zL_Gfdeqy`V@P?BiMC7bUc!7qlw(dYn>oQvD9Z0BmEB3~&aC>kuB5w*xJo+U{e68?m
z1D|KUH0Me+<{lJhIIO20-QCRkSnX~M5vTGh9-`qZa}bVi8S@&dRmFl=<_BNhc^Lh~
zKG<2xme(d(rK&|PY@g1p6($n_z8L(mSQ0N@W8PU^w0eWGX)GqZG1tYBG1uO}Rkcc5
zi4I*Kd8%0H`a2MROeK6vBEv<tw@@D~x@<re#fY|VQHH~-Xt{f`Z3|ma;v6<$)O!Xp
z6E^I!(v{h?p<L(b*O_6M^!k=ItQTwG)N&XKIiN76VE5UL*LQpb1)DZ)xhQTy0k!1=
z^)gh|Ds|SO)2{kE4zofJ`OcirElRw@l((n&Orxkc^&Y7zFG_wumZ-TMrB7-ReOZ`0
zQp^pI^13cqJT-;SEYprIt21p4t@?>k)aLVTMa7Ti**JOU%16ZD8`E8Mv8;|oMb=Nq
zyDm5e4)gxrV$Ubc`xC{DPl$eV@eaZa;}HmJ`5e*iGlt&VxMiwWy1gF%Cf}~n2on=r
zwwPC9-Dl+J<!Z8DtD5dgxlWHdKmmouvH792dEWd+?L(gr&QmkOMw|EIBb;g(;eoyt
zAz?u<tq#)oeeZssmY~cwHWe15TAZkyZX(pE3^O*}cE+fbG|Gx8ywWMTw9NJRm)d<z
z^hl@s<0+P;Qvy>}?55%c1eQN)Yi(og!G+fsReUU$kjzJQaS*8IT(Fp6hWn=CpjoMl
z%AHMt&sD`57^148)cZ<Q7xn!E6()+D4hZC*)gFZ^t9=ItB??JFnYoHv4oH@|Ht|MR
z;hi2nyc5;ZD@{;?&J<Bx#Jco~VyRVM>)Ojlo$fejWak2`B3y|38=8nya1-1S3hajN
zUTbh9=C53A?^wvO0gMRKT2iijxAG@v$j6q1QJFRqMJ`7a&1@*Jg{+SC-`w>{2bL!m
zlgy4Gq5%|)0ip}_zVDG1(=uvR{EilU>(fx{2<nwMu+Za|gDwb1_NJ<P59?kiI3XhK
zdlV=ik|`@UCD^wircRASz6?r$Wm6-qrS!YMXsXwz7lEpVn#$cGHUr}LO$9YA>qNUK
zOn^$Ep6(Xee2^?{<zO*2)y9~DhnF@gZ0XFQ9c$f^2sW4aTwKX1@?=!ZM(JjXsF)E>
z7vd;E)C??_GAh*^lbdNxOGNyQK2=@vdW$@n6i4H)VpmbcM>NT#<i*i&8Hy?G#idNj
zdE+RtE;C}QAKO!HQpa8WdzEC+?BtMFo5Y>Ws6-E2YU#aDullk_6K(}TK^Dym;qQcq
zd=y5D;+h+yh+``)clS1oIcWNHb|O^SUg1{`kpR_TFDP(!(6?DYu5p9v{Q?Dckx=l4
z4fB1;^m&h!JQ0;t8#NlG#7QS5%96E>Hv0+5d1FSIeU3jufdvDn9Yy^tXdBbSzG7$;
zTeB#hIMWR)`oM1wRG9c6tAtlp#HVqDmTTtb0gX>OtUN43g~C$Uus<wTqGrn5RxW?T
z26Gh#=OwzqDY~?gS&{u}NSNuj(>!v&|H-$`gg!sp)gOtc3`uFPO|Q4yyWjlIr&U-*
zU?+nyG312}*WP&!Jxh1dzgh#kO&J``h!Sc71$E+`<;C)Aw}0DdSBMoopkN#?#!zoH
z^zy=^5{<8wK69lqR!MpgC&fM}1pfsEu4D!-oLjqJvrDNIGI!7x2^P!lp$m%i-fnkV
zOgLpj5H&>MZ0IkJiwU?3J{O~9&f2TH9_Q`l<B8O=IU{qf!G^`y`moP^j~@%ygAL{v
zw0S75!Koz^ensyLg)tqcZrFYK*bOMK7}4ijM7Hb*$y<15*Ynj?^vRCi_fN3~Ho+CU
zYL#bX`l9pdF50*ZPTBpGMxFbIr}Ptpf#DbNfxZ<MC33*;&f99`P;g|FHs+yIjdD>=
z>64ziIhElMoz025^q0u%ssvg;#AzY!K6WnhR+L{wHAFR?>3fJcSH(TpwTGsWueE2_
z*-3@DoyRyKIr(72>0q5{Bd(q_o@dpP&BjOUaYba*FkBU6jr0s-Rwg$@_MxcghMf9E
zdcAs&!<H7F2O{8s%w%<z<zdpDS;aCpl#P$b>JDe|J+(HN_ezQI!r^)U#8d|pVwOOZ
zSXUPltrqU+?2CvW+?7Dx3vtLDjb@0r0S{#GINUUc2O{%zSadMRLkSK3W+-YWSii59
zBU?u<*j_Dm)KY{m`x77W(E|}|1qDt576x9ZH-E{yl2QRpAx8LnA_DQEjweDMEfR1S
zJQ*8?Y=~Z_+u;qKsLKW{_BiF44IA#94R>zcwd*i^Zb8j^Mq;Tr38$8=P~Z%IW#$W?
zK36%<o=ZkW?Xo;fj;(~%q7=)ptiRU6)CDT{oh#*r^HBq|h&F3*u5O#Zk7+x5YU#U(
zxfUqo9jMji<^4a!1}0h1p19UwcZR`)3Wub^+xG*b4>X^;#AI9p3CFn+qMKFmsQ&=B
z%!`gK4j!17HAyiU&q2avO8~|pCcDYm#{~w&I=4XFu~o@p%rr=AV*VMQKPpz;1s(Pq
zxZ$*3^VIT<F-}e<%ZmjF)hP8QhH3ftxMRyE*UBYVMG&R6>DOfOlzKx%hFnTri%Yx~
zm7y1!7P`}?YBn_+)fzQk^vDH07cqv$Jh3E~5*X}`Cq~YQ&GW;d*DgA}scK&$#=(XK
z7TJ4V!j<KpQSxZ}>I!g&aAJ;sqpaodpcYA#Hb=pRQKHtiCM{1|QFY=>cFtVRq6(>X
z*flr$1ZA*R4<Em6f30l}M;1O8RLH>ABAXYYn@xDbuy{d_lhA{|SA9JA&w&M0J#3HS
zA)jbVz3SrH5sWL7y_BHuZMecyH*t%~i^T^ow8f^PLmu=jDIzd0dXvgxa9)f?p2M|R
zM}AyYCRgc%R|p9sJo^f5HS?_*rR*EkxmhleC!dlf|5A9vUcAysEuRznK04Q|wk^ek
zO<gs8hC8A`KBaB>H&9^pA2&+N_H#)UA6B}R(i-7%T82pfvlZ*Zv6skN5Xn(j4sIfM
ze#Iq&9<F9(=|5Vlx`A8sPFrtUf~OfsirSHn6tVf?cA^-aU#XU1CiGb2y~OYN74NjZ
zd}E0ylbkAO<5JP30A??h#JB?RSZ<=%7W;Xp>E#MEeBUcI#@-p4j?rQgBB~Tryy0nV
zL3o-hCNZTa#VQ(?#o>a=mT#?nJ%U{@bK&GALu|R9A2yh^ORXsZHjFY6<F&cT`IVQC
zjcVTjbCY;<1l*HaFFqDR4R|i<6o&5~L}X#K5c5Q>LHU=P`N?#0ssSF!p`pB-Vt?#v
zTpyRODz~pO4`fjl7AN6@#R*Q?gp|u4s&!j`a=jV{wbTQIu?T_~AuKSy-3Or5@g!K(
zPo?*bJ^)XBIABi}bEzlQwb?O_uYN?~LZK8z53No;14Y-O7(C>RGwGq(tS~<6th25*
z;oKtUX8L4l+7zt^OWCz!<QR`WElppxm&)VdU-;iwJoke!K~&;hlDLJbvSs~LZF&<l
zXxxmy2W`Br<qfjOa7Ijkp5+-7*qPS2-L+b={oA<6fNd!Z6{+UkpG1k`iigQ*nmFyN
zxTgCu5!ZGh%$PG+MKvF#n$cH`@lnct9S5vxKXBIm5C7!UT(mEatk^9Ybg(Nif-)h&
z;yA+om*)uTWdAGg<&?jhsOt+a<>QHXU&X40=$0<X@KuW3Eo*0J6V32T&wT48d2&&W
zD12E;Fmo4lhF@ANWk$G&#11&pxN`}`)6x(dpd5Lg9r`hD&hIDAs#Q$wTt|udB`_jS
zovH0e{cO$gY3_rp?s^CThNZB<UU1^0Rgp{P{WgEAZsTuQA^w6>%dfMvCKNci!+`yB
zlh9E1L&6E;Ws#Rf{zR0e@j*24Qv!>B|A~u!7H8~?Q(5Cjg$ie!FT2GL&H3vZ)I?<R
zN3fCew1w%6Vgu%R3`pXGU$jrQhQ6XA6zUJ3ul1$3JdZjB`%c+y?@O=2CL7{+wREHL
z`Byw>1gEl_eF7Uc#mh6coXUD|$syH7o$BIK2aS{*>CrLZFI;SBtmF_Q{FTP0r%B?f
zzY<`wEELWGio4Bkp_Y?dLZf<>JKRWp0*=OqcvXfChxFw>11bhK-)T}kw{fg!x=@7E
zZC7Y;qL7f@?`hegwS8pp&=?FGj%c1PAF7@3aL=XMsH^^|3&m=<wXT%m#x5E-vRk40
zT&Ky6m)#4+O=_HmhBN%QQej&u*FoF0xfS*f@Egj7A}m;OaiE9K7Yg4%#3jQbt!Ewg
zbW8Qcw<_#Y{o^B0Lmt>L`<6AY6#aYp!CEZ2dv5SwBnH8)wF)#mppiUy+SIo@;~n8v
zc80ANiS^Jh^;jgH*$^Th)#{<Mi^;P{<gvkC({piPc)C4@x9G(pGzj*PJr36N5^*2g
z10gbP%`3)QZx<aiLQ6g8Aq|&kkDQ}lJUlcsu$imLD5HYSt&>5DhwUb^g~=&;<LTeM
z3(Y&@tY#eh)wBs!ZLmF$_ktD)D}w)CrXwq~NV{9p`k_Wl-QClY=!)(MzRja=NlUfb
z_xNJ`whecO{03dQ52t5~Ot!T(lFN#c*Z6MV%9^jWN>-9ZkV+Fp>MFu)iq#~Awr|!z
zb)@-b{Zeh<cDF1M=Cmw1cWd$GS|g8{{iNCa31thb2~(R&s<KhbT83`b55!G*cVKfw
ze;0M@Rokf1GRrl$pP}Unt@Zr%u$xP+&O>g~S50T*3XxnA;qP4`E|*k7O><X@BBjvo
zmaP=6OW|HmII>lZ=gNiRdZ|=3MYl(0`;>+})qMo-Q`b1%PWpwHE70CO+_J3Ik{q0L
zwBX?LSsI#*e6=uxXj?|fWwNXlu4R;BR(~jEN6}P)$u4)Gd)fCfBOBw9mj7DOx{Q*?
zdIC0FMb0VEvwfyfZLKEbL8*IT?ewyWyI5aF$zI{#{Lw<Nz!m3$2XBp?-fcplgMCu2
z`D2^CPHVz17guTU`-w3Nk(r#FqAS`6n=Ejeka(i~th4KP!iKE^Hp%NmJ;cFw3>u97
z!6UYf5z|ACs~Q2NQN@0P4TIfyFJ0}U{X8$hMs5h*Unl02MUlK&Cr-l;6J|;ed7o*$
z$XyOa<g#9T+Jf{AE2q>m<ytS!m4juW^}?|{%(d%9x$<ZP+t+Kklk@Yw>KmdjV!VlG
z)Jow;3+qK3G;HUf!ODN%kbP&SCxy8h=IRlVe*l|&u$fjY@pPw-udeCKP=AAIqu5Kg
z!#8RPzf#5WF-wIKgH6U#+FZ;q1vVDAoqXWHrJP~ekSuiCCAr}sqitO)V^;ar?ur54
zYr@$bXyeA^O(LWM68wCVaIT0n7&mME-*|`Nd$LC#%!#3gifEpmo5gr&+PtB`PN%w?
z!=<Ya-NWn}E(nDgzcPb0Ycb#4cs7LG#c1!ZyS08_LxyjXq5O-c_cjrZnA%Ei)B4T$
z9j9k|5AU26g~?IW53jAkCM)8Ry_Vz5`;lYvsy6DhwdpponyLJ!Tj>;T#Z78##nhT<
zxsauF_v|_A)Pf(Sw4I}=JA_LJN?qpdwulgAr_nTVr?6IryO}#RcW;k{mdG&k@d=cL
zHt-r2?i69ru&ss$+fa=HLsIfrt&InBy2e)6a0nkiC@#nLUinb9Ih*I-{+(hT-JXyd
zy=G*%`>f~>n2_ske}@fM16xlyPBLY@^U-c|XQz0~m_3CCr#5)HT6zB`d=%=7+mxLm
zPZeln+@;kp*Idn9Prkf24dtf=Z*bow8dpJ@p}Dp?nn6+(G=s&v#WM;KIlmf;MO3V+
zxP8%xtEzaK5cJrp@c7JLEy?>AE%~ue&2e}_hq|f$x$P6lRh94r^L|ZZA|lCbcO7nX
zTu>lgXH>2{#q%(cDX?L?FTQU}t|;$B>~m*<8|ropEZ#e&Tcn}C&3V`4;YoP+%T3z+
zGeH6HjfvV1-<Z{B3tidiTl21%TTRJiI<Zr%tfqv1qwGs+u{Au~FS1ux0$h3?&~p2o
zQ@$-ZLz14EjO`DI=GB!vGBdv96tmzzav#|@u^L*S)clqY@ik!obf=h6Ln&sea7Y}g
zp)|HF-mNA7R@Z_Tm(=dh&1<bm8)6S@HapUF>sZ|LW)axP!T1=u$eO4}e?f!EA28^s
zW%>M5oGfyki?;I(x6)VX*7^;%QX}|?I8EOxAJJ-Bj@dn%UvG2nzI{PeA2uw+*m}9A
zL=RG`+ilt$5xHx@Z5OFg=+EZ9LFI;EN?uIneSc{a{NA;Dhk(r3|I%$n9ueW8sAkio
zM)7#B&3Q_kJYd&YbVMZ4_l?kC&#<+Dp-GuSdu?`&{n93~<ExLaw)MlKeckudN5m7l
zy&*L+e9kuBw@W-8+Ugolq|K!FQM;Nc>)+dLJ{}R}Y9nTuk80uGAN0qCd}4KWyN2bc
zh=Yc$7&M#_vt|?GM*d)P!T_!NUPjt%Nq&DQXn8%X^L3lrN5x*cZ3PYX$kUtMoAm1H
zFSYF&U17r!{lTs98&8rmjk4Rs9~GJFAZ8P#Mg`A>KaJ{Cpo?8&;ZYF+4bzsR;wE$V
zC^TK**XLF5b0#<G7-HAFdQ^;urtLX2IJz}2kdW@s@{={}8V<*_Q6(ti`i7@_ZemwU
zPlL=|Jrq;#6T%sxnPiDs|FhIhvetd^LB`i4WAzWY9zvTl!ndvxV2wSa)yaUY`3!yb
zG_cs)!pAdW5H#><5bRWYnEIa;zu?w1_N@3+7g3yXR=C$wI$?u2p&k~AnqlpKR$K0L
zcPmlu-S$_gVr(7$7~&nziC^m}?ox4jeLO8yx9MEXuv{!+>MK#!8F0-^Zjf@gd%F=A
za@ZTS?*;L=zT$5A;eyun^pDtCyJm%sO`*Xl1e)$O;T5KMShHaVk!>vhg`f5>SUiYt
zRRsBR+rjYachNXZ39u;_wKaKrmmz&lefT^GZvtV2M>GxLuwi{U`XFd^pY_)t!-kKU
z{DTc^E{fe@2tMt5xz0xIwcJ31_S&;;$0g14<`>py{v33!9D>Je1QTJydDw9FRdG-0
z%wv=$oYP60N0&r}2B<)emo<$#YtHm*vFvBABBVxc*zk3*;vZKBWUun;A9kBEm&I7P
zwKkR-!&lCqoP7Lx3A;wzWsywZ$4HHqnLay?Z`~r3U1J$+xah0lH*U&|TIWvNZIUmG
zEDe$DThMTa#%>?u$R~BT`q?$Kcd$+GE{oPsw0{3x?5tPBL}=K2u4uawtxCB)I(g+e
z_wi*SYr}@~xatiigk`I-l<&<*o5(BTI@|{T2n}Xo#~+SQFHpI4q+MeQY*=#lcHX~y
zz$dw{-9~%8+OkA?zU=PKrCx3Ba|taySN8`z_(ep%hOI3a^t-R@n8=hysKH;U>e4Uf
z`|BdUaat|i%~wvp7MiA95%rp&VM+6A+pi<02bM<Xo6-HEJ50=PiWGhw1u6Wd-PfAh
zou!>oYk*E$%bW}Ms#hL!Y5CZovUuJM+dKcIAR}O@j1?H`boJ>iu57=$T7gHhL}VFM
z7A=}%U-P;c*ZfPgEooaqT34oQ55(zM%+a#6z~<j|QM3gftnGRr!doC`D?AkQTBDZM
zdZ>*UU5mcR;9V$1s55n6f2>qmJ`}54D8({%g$C=>-iP8QT-vVSo_lG(J~+Q-_`+A?
z_);a-V{q|K+C(pDx^+_6(m1<~+auxI5^imewAV!^?U=IrWUm_O?HWy`&8SC>mu_Af
z8e+HU`$!CeTdROZUW7Z-sj0{QnlG~3HMTzz>*@PtXyk{+gHR>xFJtFqyT(UpbFA!-
z5q^C}HnQ8~c`QD)MBo4RsaBTPKTo<ARq#|XGzxz_0z!XmekOixh46Dc)5hg0&fUu0
zyg!srRM8*epCSJ<kq8Z2Noa7?%lX?~pZBNwZ&CeVXKMIQ-%UB5iTkavyo6u2)=DS6
zd@O0-wdWwBy&<nYU-<H(#^ArT*hN3x{Ip?E@1h7BPpGg^!ApL4jg8OD@DSBi)Ng}_
z$?D5k9;TmOh-YokJk=L_TyqEDx85(b`I^g54;$~FTXTh$0+g<QM^Qc;`%F)hwCT&^
z_rLlzI6o^`RZt(UEP&H&Nc{L~5yP`KyK@jW*nZ+ded7x;HXIpv2pa4;y=pWrH7#~Z
zPH6C*NMz5|7a|!Nrk5|o<!}tM>W?kB6O30;a*B`$#cb;LQrzr>xT>4VIYnGs$go!)
z5dql*F`+HCf4}{^j9@&6AMsM_P76P2X!W{va*>R6X}ka@uED8g0Tc=#Y5`r!wrw>w
z?=t4HKi(k<@c({P(gbfU`AX}NbDi!jI*;E2KYStKvSh?du{J_Y)~yJXgtkd9oZD$h
zz;?fj5{Q@gWOA#vQyOYT!Y%O)?d&dY!iDzGA*TZu^>1HIZ;#|_JIj{u?{N<nb=xC<
z+P}t+5D}dQm)a$lJQ0it>KpJs!G>E7e;&O)y=RlW1vMMK4WvErux5XwwfWtpjYocq
zy!1|Y8ffr)BTm~RVQTqCJn4Wq%@n!#s6jq2`No$1zj!(7tw@3&rp<3fTu0QK%Wt*b
zv1W$#e+^Dvf+?dOZyB2Y&_v|!i02R5V}!4sALw40G_PG0HtetTQax~yPf1k6EnOg<
zOR0~3&WMVU_7rJPOpGnXI106Qp&VG%4!sZuA~7|rk|I7uArbXbgmWh)(KIzhOzwn!
zrYIKP8Ijd@AMf-`&hzn%`a}*-!SSm$wT5?+wO&EvDXG?!x_X5<6s6?0j{Bt5sTos4
z4xQWHoX<Fdu^WN5`*nz&M0~VTJ>zMpdm=d7XYp$^%B8PB6?DTZQAa;(z50k+73wT{
zISRW3%v8R<aQU;a#vt1tLxZ!&HqQNTow;2FYbf;@EEd4;KZ~#!B_L;BgHfF<%}y+L
zsZZe3doITG27D$qM)A*I23Edstbb6hh&jf&MuzwOT#R#I6AT;m;aSe<ofY$Uo(v%a
zf@PBk>a3J9T``L8oz+&PJ|<c#cHwD}<(rKj{hm#4PDx$R%sQGx#xAN`Jil`h4Z0{^
z$mbqiP<Ap1s>zIY;G4Aj(uw3Qm}i|&XH@4|<$rc8(#Y`$`t)LQ75WG^Zb(S3NwvFo
zNScD#wQjRpRO+hx?3OM7F;VZ;(sU8AT@^3WCPhr_itb(;qH~tUoV=)mQQeh!xFpH8
z`bq^i_CeUIM9JD<!;(0Ban<ZGUH(P`&~2(ZOveCkZ3qP}W;YJMvfaz#+0U-f&Ot<U
zLpAL0Am&hWGBjBq_T=C1S8Ld?;dV{wl_9<6RsNV;4o>efV$q`S7)Y<g`)-P-bqUlM
zCC3Gu0?ry6_J^8W`fo}v{JNt7I68{>?g&{oWl9yKRF9Mvq$$m<l%~>`QOlW8`#jrF
zkEj#B6mIK@Fy#w3x)1-IN;xIsG$^DerbebXY)-{x6uILtevd!^E=bgZ_^bJ9#G9QF
zfPBm{3pUwdlj%|0Mgz-p$3eGQol$g!TkBrww*HQJn?27rj)8`JE$_FCA_*F%`x(W~
zIAqL#OyUV$OvZ7`TxuLiTy=iNh9%lEMP0t>k*wz=%JqQDmQJE+53JUDI2qMdLANdg
zp7-6<jN93AuVyT4*sFMCofe+C^G~V#n(id_(vKBR;v)Re6K;J37u*9J)?`BTtMo<L
zy5;+(GHa}5vKZB$&jk&cn78by{e}Laq5EYsX4U+PD(kpzQ0(y1(3CHPWq}Qc{7r@2
za*mzdVYS^x59RxArG_4gb-A<V*Z#ME?qB@z;57IpQ=jZC!h50o&O?LqFV82<d@H|>
zeQVeFzRe%m#A>)@DC)czd4IDP8s-`o;oBR2;%773^Tx#+gO4nW+yFm0=d<|+9)}Iv
z|GB4K>V}NTi5*x@+S!xeb`gW%*7VjzOz#c9w&oOf?Ph>!DxPTdh5cezk=O@gLPwl+
z%X-&lZ}!k>SH|{|Vc<ples1E|KG2jdtlx<ZG^Jm<rfHXp=-e0Ooy%R!V_15ax?Gwf
zdz6wrAppAqh__*lyH=11p?7a*7`cm$A5RK{(V719Ikev1J4W{C)2=HHt%wL}JTmAG
zHkMc_f$;4$eB<<|df}``AJwRh%`mnmj30*2uwm~}@ok*<&h&rb<VpNGhR<y=`}ENA
zqTY-a5ljDY|9~i99_#1lYwH==u0wBVO#JiWb&rXM@QbLt(B)9_&!<$n%@3YNbz&2B
zeC{EK>l>di3Z?NQIzPiq*f0t+9nY>7#fB+aOv^k)_aBf``#eR+Qka)L#p%&7pL&Yj
zl$$N$W}*@xoCl!G5Ek+45KXy4KbVUwVti^xnlh@DMLb)DVsNpF_)*aFwTkYmzIf(t
zs$mu56L8<sDjrXS+0!bLC&L_L6%hmAPRd0;2I`wjtRIX{tL8u@NQ;K<OjrLgw}=}9
z=X%_y<(@tWw=(L|bT>J83BQ4;m|x2SzU}NwBt_^TL_&9?=fLMYB7`Y$%PUSZtiZe?
zF8)iH?xqHL#l$4scgQQ8XCd-oKc?~|b3T#u;}_+CFP`gx_~sY&7X8ChyPlp-U0;vP
z*YYnZFy$*C!k5`2Ba27RZg*4V0>U{FtFM`!BF`}BeKY?8td|OEqiBiTg-dr$_QQjE
zd$rOW>JfNRP*{hiN}w#lFFCD6++OZ7mt+a)5eqOaE+i6J-(<wB8wzQiVQ{P^-v4|k
z_Nnw3=;fl9N7|TtU7g)c#|nv?<G!0EYIP6#66~?UTI&pnJbbEEy9=13d@oqN<o+vo
zy#eS6*K4w#F@=hVvBU8s##B^G@PUmpCM_*8?=~JB$!DIPMMc-eNI+0gk!1u-nN`+W
zaKZh83Li^ntukkJsx0bURJ4YsbsRLfU$EN0Uc!-!f5zKWv%aX9NWU%=6?x`C^A$7;
zL-Tc1QRe~Ge=K6xv=$TBsc9=Fo*)+gQZ?EX6FwuM*{7K34nIv(iirr^TmP+((kj!&
zVqz^_9xEo|mcV>aOgy6x4&EY#a=plNc?&;uGPVldMt(&z@wZy7<~tSt>5<xv2cj1@
zM8Sr8H~D{VU8P;R#n|I#2TvQ>LD_~wgR>IL-dzo<Uad4;YM|Gi2b*lL32zWPW9a34
zcw(cwUFR)MuyZ@&Eix~KdCPmc+Hrb|vGZ}Occ{)jBANGkBh~v%y{77Yqh4jw)>OSG
z(W{K!n2Y#`>*!&u)$r{Tu41SEXj)YE_eynTvhhRuC?ApZ6G9&0BYYOX)GON@9}&TO
zt(VqYo4aYPk0>_=y|3P#>fKA7;$knmSN&eEq<RW;xn3|se8u>&(AVwtMuC)FrCirf
zYp?q&Q!FNqL!YTD>6UuKO_M0CgZ)lO+Nh!Xq-V6AtgoZ>&ur3qNBc0LM_-T8*KJqt
zrS)vJ-=`V1Y&Lw#hr8YH#}|AU8RNk@mTcS&V8bE}=(%Ql-4El>$vTILf*!W44C>gV
zrEYYfcs40j=4KBP6*#2oE`AIWW9|2P*Bi<{E_pTdP6P?Rg&3$prXbUGA(Ga2iZ&jv
zq=|m~I!)cvw1Mi4TpvjEESLJiWg0wB)2W;EcCNQ)y?pdQbkDSV`_L+DfC!zg#aJD>
zq>`95UHQ^~f9WyOL`U!6za&S7WF1vn>vi*2viA7n^&zeju-V5o>A%M<;Cnu%8Tin|
zWN8d7D?(<X5uXUs=G%dlehKU}+4r-(pHG`x`cSH;<?9&PYwy>MTh8C~a+QVsCAwdG
z@+BGnGTweKcr?%Tvr$7F%8O6SQLPHWoQ(w5z~_AOph|!2<CHu)JgcL9D2XaBLRUa@
z49qz&SCtouyw{6e?@jc!{q;=CK1ZlgL7e8KNq6@>{qGE%`k-e@Gqj~0xW4$WSKI#@
zp5zc?{r*6r4<JwfuNgUHm#6hSX)4v%J&3GnwlP+182u^pN~gLv!b_q_$z^O1CK+75
zzUcK}`nt#mQ|;Ygm5L%BU6LuhqL{G|lc5PA_%J;*A8*Z=-B_m^-qY8oVfy4}AvCz~
z?l`%;>FUQe_v{+~RV(yn_Wx?p|GD{xK5*)J|G!#BY5Nu{P9)=SIqt#F&;3G|bg-BD
z_xhH!rTqW5kJ0<j@AXZ3%F?cf^*%~>pEmFHb@cagNFP_##d(@`X#IYZOVzN7tU+g;
zzN%=wMoBcvU-HObp*yWra^iRA`PV9CO?Rq_h_z^n>#B(XYn4#Tc6{-RJA<YEDl@Z9
z`jOetXt5j5ZM>1<)>@^S$*sC5vQ8;u-CEtKzLw|Y`nKh>u{ZHL6LwJ4hl8dXB7Pmb
z%v3|1UXKyNqlVT)^gT6kL1_JRXH`vgW3X5aaRQpwGSJ|L(F3Or`Fmc9NRb*Cmgm)&
z4lhj7OY3qda+mM%y7CKLwlu-I1%dLUGJ_1vB)v5K4;_Z;K?D!0sqON_#bt55UM}#H
zj0>h{<6x5sfv2A{=|ujae=JmO)D&ySQ&?v}f!o%;<qk&P|EW<^sQ{<TYKo){Na$8*
zFn8VO51ct}dE)@P=SOSe5LEnR9ch+{m4{yF5i{+pEy`_#AKwf`%}&jaFS#WaZp8da
zdh7*{znOd7Jko>Ii%b;Qq|~#%z(?S?oSb;mwyor0zl`=*nO*CO@td$PD_&PCH^<Y#
zQJF&TUAJpgk~S%>rY6hVAL?$mX;N2Qg<ETHXcUC+*SfWMJYs0Mc6N=Kb%pb0_`U@i
z96#nwYO<z7w@c0K8o$7Xi#q?O{wI9)ZyaK`xl>n!)9qX7_UsSy>oh&k`-NS@sh&1p
z`SnWeALe?T{Kallyq;JMx7IMJ@w9%k=&+$r4R(#Vdg3NDOk?Yb_nXnY3fC9DTa;h*
z7iMiSVOkAwU0UX?TZy$xP`q-}ytlN8DCXaP@VhdYC8;+4B@GE-B6KT4{q~^`EY~q%
zA`u$48SsOZzfq^Zi%olziO;IJ0g39h1UB6K8}H%se*IO48L$b!IvBQ_!o;szu_e17
z8myX`mgRb8K3;kXG%)eyPccr13F|h5{|Fk{ppmuK(Fmuj$;(Z~n~<=+r-X?xXxN+@
zXq7kac4p5ry?WP#AJ{s^(>j9}Y&d>bPj_U+*d}M$EN$BFO#>Q;d30L?8m`bVITVhq
zZ>v|F&uMUE6t-2{z=qq-OEYh3bk}0RV<)89*M?N>4-=2!)|A{pIBZ95FKHwy?7;o5
zM&j9anCBab?v(5IEgOs7_WJ;9z9!m3gaJJ_9jkn4$<JDR`I{KsC!Z#w`3`iC@`xbq
zw<jX=PBa@W(K-17n`UbYYA#yuL~yU0i-|iCe1;ZcCGKti%sAH;TE^vt$!^W7&&?TS
zGPc0(5~fD#$(+G0MD|_SmwOZ@2JC{LSz3v;G(B30+q)2<e4@i{yxh{fm6)*`kNM)n
z@!fd;t$8c0YnnXXvr^R!^VY#XRsgi$^sT4wfu8pJU{m(iqTU|F5YD3^*6*!pe->=7
z*ausS(|hp3pQk9f7vXMhBf9Rz(^dHrAGT8(iurr-y2PP2S~c4HQ_cS2TU+x*GyZr1
zF*pkwwF>TZ`g7KzB#s+$IJnhDge1c=Pmz9~QrFr&Tq_mlEKe3}n47Hu6<Ol`hJN89
zZXe!A8-s5oc_G{S-)eubMO3~z&_G>fKcz)aT-b+S&uvD4&d>^QTU}^?|Dcg-RMgDS
zV(o=kuY^y0b$s)-*fQ7McdU{+C{r0J)9bdPWiqk|kF&=klBPZpVma^cM2M@&N+`~4
zDY_poDtU@FFf8uvwE}SJbEn4cblXsiv9MR)76}xq_T%TLFT^|OnKpJ1z6X$Gt>##~
z@ntAJIH)=)*PdeKW?&C0UgpgQG4Oy=*Y=H{W6L)mFXCg2OhL6Dr&L&Mi@^`RO8W+>
zukqZC6rT`=?G-dQq_kS^*gP_3SXaaeM>VLGqLbDtvra4Cr>$o{yqXIeylaCWEp!s0
z2hrwzp}`*3J*Is~Ym}bd_bQ!4A~b9*p}~1~{vIp$jz2wB8x2)Idcp=L-X)s$lz7#?
z>hSY+-zRhue#aEoQUQiF(BYP4!Bv0$^ylP>82J%;Y4%vZN*lihVXYS2@|{SVU}Or;
zw(TUWhY+`HQQF*Z%hTALDUXKXfD1fQQBximCBmR#YYGjHPtlhLxK`|7d7=7&hyFNJ
zSK4?t+VbQVYcgJbf?M@@%$z7Ok8bxtgD=Re_*C|f@eA>VEo!L8gxrA*$ED(#=l(on
zO0DM72EIB*i^q&v@o1x=5H$8J`k_sOdv9hT<#5b*9vVf9Jcr?Xf2nbE(EUb^Gk<TZ
z`k}^szO*@hFMFBowQk~PMtZ6aM~m)s`$%e}B)rL2a8VMrDDaGl8Dq#6qlJ6?LDa`#
zw{u}Oj6B0y3n!q*h~02&Z6h^omxmNw7adZT8tTEThM_Uy8GT;~4Q{2buM`|HKj>C@
zRYQGU<1B2vVe@Wpy|}xx=j5kN5FP;H<lz`m;b*iBtz6wruOdanQEVu+{#Ef5i+@IE
z>C;6dL&N5YQe}r%e%y<02e$8-uht3mQCyiWT1`9hMx^)+?B5MGNECgq-$i6O0^g;t
zG%Fv$vm8TLG4Tja0ovbHYv)<-Oe>Vnuh})#Pj$;iJ1;;g{v&#6qiagvNz6NwDjBE>
zr+-NmFz)mGhD4-oP|n6UoVm=wvs#?i$KA`5&UJUrpBEr1e8!9oSv_mg_$fO8)0;Rk
zhe3Tu?SCx)U-eJV)Bj5P;a(!?IO6vodU|sHLoKa0-^fvPM4WpVD)!MPa_g3j``D)0
zk{rlU)H-%i-^nUldQ>q^HNNW9)Dh^P<%UpH8;8DP{K@ZUzn-k`1gX|@tJ4o!9rz`~
zPm2c~FM}6EFqE^eF(5Y{%X+o?SA-(#(U%JSKg=z<PhBs+k$ZZ5yxdP4S9UqgF52wq
z?JE4;oZ6NRclwD>r%;!_nOi)k^M9W6rpx`rtkale$mvkK{^CAvO?UbWE0S-0)?aHJ
zhen<IwdKpx9vI~0KG3KBB8(Z7d4TAA1}@TONUB=OjI{o9%#p*EL1wM>pGB=_iC!2|
z^ItM=0xFXF=;%l$&$VUaXPS(+2N?|&P_+=B-RKCc-yeIS@eCSaX|vba*yTrU7M*r<
zwA(yIxZKm2dj4X!#_dPFwA&!gt<U{yxc@zF%a|p6KW1rj*B<`&<D53HoQ-dhPOc5U
zlNtq9dU7hqYZE@-bOl=%T<$$k?fN+nFdT^&6VIVWX|M7s_$A4icyS$BU@P2Rdn<5%
z_Oh?qhE6`N_Ouwu0u195w19tYnv#D{-uE10WHp<aAbidv`#cl1ig@QigNxm_{)yiy
zq90(FVpyCgBB1dvXWMCqgc=`+HRtgz-an6C*WZYfZNOuQNP&kg6&`9oI;;KmSXbrg
zqQ=ffzagT?1tpKMm8f+=3Cy_t7IFlC7w?J@7nJJ$-D7(9jK%$pS6kZ7&ro52wTkxk
zV(Wsrhix3x;B5w|bH*6f`%<~gS3+-Ch4FX1;#W`Pg^{gZGwr42rAr1R{{HjRC)q>;
zi2c)#(0*CG@b@jw8_rtebK{<6H0jEYS=KqDU5etKUFTn`9JBZ6cJD(uvB2&r{Jw>|
zgo*n#znf+*UHqp7*Y|bk)i<DbufB%!1G82+f7Q!nKI}Qqk1Vq)ZnU{$?vAhrhRyBo
z|LJ&P@2PLuckUJ2-KR|Xc3~qXS4`_a?E(-;+hs97dmb2*uw;#lK!pt<pNx;Xu22;a
z!tXt5zMI|U*2r(#BZjsCH#`2`U~Ap9_OPP=hK;*M<X238HcA^o+B1w-%gf#i8JDne
zP}&$q_KIuQvsa|yMCA%QKh$WIJU2yqGyUjK8&eL3HCVa^_k36FPVXTx&K+xA*@k;&
z^O7#D#&oJt$=VU+O#3$P+PID@bFbf)`r4GfR=~$9t=un1?Z-XsMTL)E`4i^MUUM9R
z5)fG1ZGCdg@sEJ_(!rwJb%(f}_5a|2bvfsslY?>`o;YPxh4=`~gZ?Mir3~r!XYeT8
zXM_E~ZWpTFj0(uq2luQ@+n*FXI_0@z%uL*K<&?E;1GgeGs{iJAPph0&qSG6;rCdTi
zbL!AFvS*hP?b~(e64|}uHqR?c^t=N2qCkn_CHP^1;#gqtRMp;51A6st*S%xAo*jRP
zY#$vP+XW|{E7n?RguUqOYrS6Zf{Q-*5CW_AT_d~3v`2WoB5gsP+V$#PyjOI)fMA>O
zui@a8Q{KRr)K&?P913})bqgKM6Ok><q2RW`{T<%_P~xk^s2Xarieqxiu7h#VR1j#-
z$c~~?Cx_e#Ouu%|*sB)BwRgwppmVR{9gy6Z$f&Nd?Th!0E#5OSDzaZ(2vUhCb?8!}
zN1w=^{h`w{G929&lA34Gpgi$BsmM1_zx4MF(l4<SqF-X2Tih>N9IT$+Qs^7rAvSiu
zi}O`7e=#`GA#dKVV*<6W1;zbDw)YPCbAE|AG`?JmJj)#liM1ac9EHOb#buj#?l2+d
F{{z-cW=sG8

delta 82940
zcmeFadwkFJ|NsAdzFvFHo-)iKryM4P40Ff`+idn4In8lSF*7#I&TPUqQ7GQ#ksc^z
zN}-e~IfSfIqm)&OO0`N!sa7eJ`rdAj$KzG&{q}o*-|z45^S%83_<3Hup0~&S`Zyn-
zkLUCC+{@SHO&@!%>8g(HHa@;EwMomQd*foy6k1m<_x<(5+8@nnx=Kub{il21vHI4(
ze_S<-$NZu(&0XKDF3Rnk|GmeuYFJi5B77P{Z-X|3c7`^A)`d2O{^)O6Euil~Z-5?z
zHi8yI>3<iL;b%da&M0UD=s@Uo&@;$~>W|ErUv^SvR#K)l&?<pd2cSuyWmSjPhBDw5
za0i-@n3g#kWnK;Ydf0Pn>WnWync+uJW;97;*bSTrWW!VriXvE}gDeZl6$}z3c7yy0
z^>oqtLm8tJlqohc>Na}5uIBF<eGyt8;kFxH2Sw0=B}OxhPBc2eXm_K*TJsA64Y-W@
z!ddX8(RYlN8hsjye+3(i-eWY+=yao*X|rbKq+8a`X1Z_IK-m|0Q1;OzDEp$H;`vrV
z8{-iOW#@f|&~O%%8{Gj7hP?{P&Q3Qv-1v8b-UuEDZ3+Drxip8qX|x2&^wvP}uV9Yh
z<7kfr2#156)&<Ir8Hny;C#R%kCQVJrvf8!NP1^v9N*4G-(T4>;x3#R=&@Z92pdUav
ziry6K+&AT4#_+%>D45?tr#dTTN>;`!%Q_gMi}47Qx!wci*v^J>0Nf7c0Eji(70Qlo
z4rK=iLRkt68VL1`<t*gGQcr>+-0*^3p*rD>P$n?Fiw-b13njyGKR8EaWLI6C9#Gon
zpv>r$;jN*}aD*uGYY^&(#$n~BCS_%3B9-WybgIb+#p8}!bhT5BP8Fy8!kxomnjRFv
zo*wzTdg-cegtBDgp*5gGpsZ3i<U#wE-g?%BKv}i)1WeDI%vo7Uv!^nzus%9m2$Zuk
zDJf)HN@iAeOJm3M)&5!83E4SWNm*gA(Iw(NPh|d$rXHC|S!uK8Bw3M>deroQvK87v
z*?q|gS!r`;qh9@V+3F)6`LBMuOe>>x_%ETX%RA7z(7d#q#AK9lD%yc%|E9n8{}75n
z)4t$Hj2=C&YfvzA7OI8_&x13AoY`{|vQjN8R+Rd8vSUT1|4k{GNL>4+q^753W}h6W
z3w6_NI+HhHGqa4GgxOhnvlE*jJi9VycGB!QNP8k|`e$WN4I%L@Z@vciHS8i$Sglk3
z=%Ko+y-<$tTcPZhPDWP@)7`iT%I437vgxwpv?gUGCd^8hnv^&zB_{>Bw;HZ<pAKdC
z9Z+`nA5g~23k^d<TUJ_n61AoE)Ck=~o1rXrN><3+tXY;7hib4OVInS|d84OBX{**~
zJ^z1#&52bkmIXA=KQ=}uehA9UPWtJ}Y%x3~>y~a)QnIaiV|Bmz@~AaV+rGS$a+4Ah
zP^$LhHE#-KdO=W@B|RZKIb>#1p2ygi5g(PTQ}CU36xb7W#-l|~r@3<mly&}4BsdN7
z??YkOPn9Sf>6FZb#H1|bHd)&-Q1<&;sA-7lv(lzmK`0T!-#tn5B}j)o)iY5y!41%+
zuz#PTm%xvqTpC}1wtzka4YsU)1qCKRf(hV-Hb#IB&?eBjP_E6tAVaK@1*f6(e-p}r
z4HP}AH&5wghS$`b^jT=HOqOv<o@ITA-e)RrLfK}oKv|6gMpF?qsSAoaQxA+lDCS7P
zDJbXCl^NO&Mc=cn_lwf%ot#D(Bur(3xKw>oaI*~E6jPy$dnsKvMYBv@!gP^$-A(yp
z(Ws156O^GEXX_!pAF-HnVrF7USCr&KbPvOQj8s^^S!q)fvM`<Vb964g)W>61vEv3q
z8Sc;AkUo09AQGJEreq~#W+vq2TiHl}9;*8+%i5BwSNpY47H9>O{;4UmQ_>T%vKGT;
zL0Zq#)tLunMt2xq_YNJ;AIhfn%`x8`T|8fhUo?#A;%fWPlhijE>zVfRU#K(0>YkL4
znrp3s%^FPUhOWj@0GkD!lCKLIU|P;s(DP_9hEL%7gYdO6CRm}cLM#>--UY2haNte(
zv5R!q&Q4257g$!plqs1>Xe{4F>DxPXLw8%OFFx6s-ELtx2l0ZCN{uDjKM2Wki1;oY
zZrE&}UkY?F&O_CVN|`-1W%l%}u6L{A=NJ4MrPt%ERLmnBC*Z-J%wMX@dj|g3!#)b-
z*j=<tw@aSUnNVi58~!Z7CX?Ph&<3!3-=hoA73#pA3(oY%LvOHd#jXL3!IHgxuWry6
zpzOh&Mtv95BM8SiJvAXWghOz+D6H8af742xoNwnkB`sGin*Y-Ot8_Ts|5$7Pp{wVc
zJU_!`@e-30X3a!1oHzDoP?qj_<j!i&NXbrNGntjDaltltup{mky4d%?=F*ZZLTfe8
zuenBd+aLGo!hdhH5XxA-3)ZyzbuX+2=ct;2t8^l=`4l#@eF@4`H?Gy|&L-Hwu-C5B
z3))@KI<V(KIqJ@@SG|^B@Ch7j&DWvzpogFg@Bp+S)VFQPOPDn)B`e$NgoGP|XQ3MO
z&&f%d%KBEib-d(<w2pzY0$wN!e8%`=6Ol4CWJcBt53|BzcJ0Rb!{EgxjNGJyc7WE0
zy`xws5%!4o|K8Yj;ok`UzKeFtM|Dwba8*Zyqo!}xU3dyMM_MVAMcxQyk>a2jk@*Ez
z9@A}52Y_vmn3*&y8+E$Z*zLFI1Xn^?r$tb<QFAD#Y))dw)Re@`w7FZgojMhJFT_uU
z&59+>&c>)n!qPTf?aZbkT~3+a(E6A(1#Jwlpe*^<8+8ke5XC_a@;`b~7w@s{I@<@K
zOcqyz)C9Et&rj)Cvl3=cPsvHO_CBqz?~g*+j&JSIV<53a&(Kj&j+xc)XKo9jOz(4~
z!y*3bPF>A&S`!P(;b4Q8LfLTJplncIgrz0{-&i<r63WWX!<ezG%(R^8$uqL7HqYsd
z8$fFzel;l5`*oLCU#D5V@1F4k6MgC)-5paC@(|gwj)Swgr*?&b<Lq8t{@0;36%R>F
zo0XRN{$F->N@|idwQGpFsANB{>-PfuIpm*#vK!&ga3eC|NJ_{`vWnorj2<@u9yIn{
zMvD*V2Ky4q@h~5p4VY;(1<Hn;yjLu*+c)UYA?@9-ROh!voT}R+|5aZtyJEFUNKZoM
z+#3B^+CA`RBds&x!e7>j9)PlNo4`4U{+X{b;op7LbQ+YS;7Ow!Us37i7pw)~XkP-w
zG$_b4IvH9A_7J1Jjou7pZ5tcS(g_trzowhNIyigtGC1{X<Nu-20nnP@$CQmL>=*+M
zngCB5^+4G_MaEuaGzrQCZZ#TWw7JnbP{vz?7GSvW<61+Ytk5wi=l@LjH(<?Yq@lBM
z95-vz0a0APLG_bw=@o9kTjIs~ZSs?0GVlZ_N6YW;==S%X(Dt*4%+B6sR<S9GnR&ca
z`*wU1oXvaqUEM58V6!v}-qZ2(U^CrRqvK5YocGmi%`ZrVgAoQp+2P%xtVUxUpy0Pt
zdU_v$(*I*9_p&#-^mGq|k{>;-3t9qy#$N>uhR%gHf{urB%NhaYg}jxr(NERkXbkY}
zNgd!MlnFi$Wk#Egz0CM`Lk*ZvL!(zrK|VG5s?j-6E+bo^&7dowj5ij_bo)Y^bb#Y$
zTL(M=Wr?3P`T(>M?8Q(fG)WXSXr5p3rS716&gzEk2Vaic_Fw6C{QjI}wSj#MdLwk3
z(WTIqu%|<Vp)p3=KwH4}H~J;g;idKnl*O+0ot|KyeXBY+zu+A>ICIOO?Aafo96?W*
z2rHqiUn3|B7FVf9Ms`Aa!jxG_R!wlu@NOu0P3X%%=mKT@h+9M0qoM4eYCq|ID1$bH
zJ?;W4fDUW_vt@Mwu%PXs+kVjv8xLiBE{3uNK1Br9pbNAu6!*ehuC1vl)24A=_%<Q2
z$dCnj5(QyKnYhElR=`TiO3zG5O|Yi^sz+98!t|8He0bqsCN_~)Gk9<*s0(F{?lTEY
zyrLs4f?WsP|98DYX252P%t^^knwDc(N5MIx_d{6#-g71=WLw){Gu{)Ht-3~CRlB1=
zxX|YFO54r0RYc!*XswCxyvtT2WiymR_#Z~~ZUmPC6o46ygI0&$>1V6Sot2z2GX*U&
z#bc|f5DH~W9EY;2@ATJt(%;TkATw!tQZ6Foz=I{Phk(=pP!8FaCZfOLmyi)NJ`-T8
z7MM3TC7X{$_Bghx>6Gd^-asfb-UQAHtb}rG%{SrZOv_Kf5W>@u8al!1fwmfKd9c|P
zAHik<<xplg4ZJRN0+cn5gmQ3gu4Svs#ww$^P{w<%w$89U!g0<ugL071Fa;Q$Z%Pya
zWeF1#({g5Gu(ZZ#W>YnUGGkO!6{xJPt)|^hD8t`XPbd5UY-Vr|lm*YOuM0R8N_zn~
zTQv51UC?e&wnYAUI5>z-qZK&KZbFXCunx37^dl&1{8S?yZUK}vi)*YiTmze3Gy}?T
zamL=$M7K=48+5oU4Rm@N!5O~?!eN=rFL(tR5PXUNY|6Wu=?K|Sj@nMm^&lDzyBX|W
zP_BD%EzH<}&G`F}4x2V9SZjZ13)n}IF8%jI*#hgKT)3{kku8Av|65C)!8ZU*_#G%C
zyb5JYeA7xd)d2Jfy9Bd!HujAcF663!<?VFMUx2c}v)kKh;n@nCU9=p^6>#&-x<KvP
z>Ix=<x6FsfZE&#ZyF!_99cVDr56TjsLj+z?-h$G<6v{5!0%g-@chWT)3uOx~2WLw?
z+1XZ0cK1*nZX=ZOzJqd1uuJm^{<%*RkU%@|2q+6u1Ihxfy-6p00?NVm4U|nhC2cOh
z->{y8&6*ZKS<tc2o1jnJqU~_ltVlz{FSWt^XN0%g*lLM=EKE1y4%ocdtS~wY%7VPn
zOBZa$t-1hXz&S|!K$&o1Z(V?CP`1QV2+sl@?xPE^6Usrl9GusN8ND!w7$7`cH{k$y
zFr#)RV(T{IT(f2^+ehlI_wT3UCnhAK^DXNMe7FpJ&`-2)-YoxAlpcB$qxFax3}r)i
zgt8-FgK|WD-Cq~KHEaj=DcBr2N1+^H&l}wV<%QsJD8qf~)#*=9OP|W@OA(*h_lBY$
zo2aLS^vKChnMF;Rot%`JlAZNdKk;evHu(bw>GT<y@d}3Ma(o8mIQV?9_MZWpBX<;(
z&D#&kX6p=PIWG>=t+gOdkBg6Bv-yV(*E6ULHskk)&3u|89@5V*NKMF`nTO14YEbYa
zGGqh!G9Cp#Ho&{!Y_J*WNz-xnYmFJD6Dl)2ezY!lG?c5DFTD=1*}$nO*;qrd-GR-5
zXD4KaOyfQH9r2=ia5Go?v7&u&v-~f{>fpWObvyfw*X@v%mN+vD(I0@#C8Y?;di*?2
z7wbzXi+OB<_Me@Uotls}(`qzPr?VEy{z}SXM`T(4x9j-6EB||lk80-^Oi#)V$;nKy
zeBXuKI!Q--3JG&w_#P*uXQoZZHwsyyrl2P#>x}afa^|t4eNV@RB<T2f(ya!F?{V<+
zXg9XYQ${yIYjEugo^D$=!=quM?%ADCE*+W4x`8J`IRb7>(G#c-{Mq22!)C_~g+DtA
zSNv4mU|T;=)9D?9as_z|$`#;+sd_@UM|^gOvbpvZAOJU4$*DS_amH>uThHKb#;$4f
zY?2QDqR|J9&M|s6U8gh5*f&F4BYl6PQ!@2h_$dmM-wGb>vUF2EXiAu8v~#xZ<I%?M
z2IXa=j?qfgge!&r9G&5n9NqMbVRO!=PY=n?OHaz`G*^$Q+-%(^!LZq4b?0L3qr)G7
zeS-)ov$Mmj<0j!XP%gR)pj=F+LAmJ0LD?n0PSFLg2Ah*tqEDG|(j9uR-D~WhV3SWx
z%MQUfN<U}(_s_@L$5C1`UkB*3K$k3Oc1BK0W>V&>3&fOG9bLWipIP1NjattXbc?@k
zXG9Cfxq=&&j)><cO47pZTSUqLuRTJP;Ji{?!r2j#1HJYFu?*+;MfpIlr)z*^O%f{x
zM%k-H!fjs91=uOdzFkzpegVZ8uk6O6aFExt0FzCJ|4;-C_Ii4v{9}~=Dp5SxYri4B
z!nuwJ9pbeoiaeZO5~Vn|7S2$wogm_Hepsx-`7=?0^Yx<LFt7a&k%4n<u@~nl!jALW
zPl^FJR})1z_YkLWP7}eyz0Q*u+Pzc_D+h<$Ux<?7Oyd&Hi6U}@*WN6a;ryK_$GMYe
zG}3F&5eXx`p4TunhKdDaqD3Xxbaj4Koox{`+G`I{=LbYF++V13s0bb7wdbkxOX^%h
zl!A;>=ZDn!OLgunD&oC%p2!&MwGXLtHDQlqnmn%&ML55&&do*ec&|NGowxGrxq@q9
zcX4HWl>L^t1i!8#a)Q^h5-ZGDMZXl~uzR;)FEEr82@}1Z?_rNnc9f``=(RWU?74zL
zpQz|$5j4qbm-6gsiL3QQMe{{5>@Q#^Df>1NI@xP)Q)fq%PWF1HVLs}7Ul4H#UQaX3
ze{Ihd6$$L!c2hWtGH_le_Tt<}*oj_yg&2VIDN&T@bsD$FH<;)lTb3@eBSi32Z@?Cy
z2q0;Pqf<VKbwrCd98ogW>$JVuvbw>?CE^mp?Fk|>i9>Z6&ih0;&h<s3X<mDoNWl3u
zu@&d{MddUMTa5BCV*9ixd$}l_?)7{Cd#JM8i=bq$Jy)Gy7RAY4Pp!_DH9+~ri_jFW
zX9Mh>vUsYyu2_}Q*?w1)rg-go!kNJyi^KVtSch{{QGs*1XgAYqKPobC{z~k{dAP7=
zd7TYiEvq*Q?iLxl!kyn?4O3P{T(~m?H5v%Z7R6cN_F55~>h*jM)=M-+ft!hvRIfcq
zT*A3PM9%iwN5!()Ugx*&7QQ6FLkd|m1MSp9G)hx7$N8ApigS>tO!GRo^}x5_2xf_*
zq;UIAQJC)a>;>y4PA5j$=S5J4*J+9X4C5y_Nk)lcuoZ^6RlK)FXr|X`&{Iz)mnfbQ
zZpVqzOs~CII9Y7{xGZnLH}FSeRq40M0|M+DL`9a@nT}ZqZ}eQ~uyFfzk&*4STZ+9n
zCks2r>uf_^`oZ6=%J7XS0*ge8^#!vP%NN0Oyv|-Qmem$$I=fPo%<+1n`(V6??P*ac
zP2^m!^CD~&Mke&IBLZMC6_*Ik4M%r0%Jp*b%Jn)&fumJg=oGuAs051%*L6T0(HV0@
zVICKkBRGE~g64Uh+8CG}RBH6^EsE!P?OEb0oF5dScX&~vJe((sQk-8A&U~+pu{z)D
zcu_e$a!Z~Hx0i|v_#74O7I^IzB4dHqS&M>jfLN@T^Bb(;s$@m8!!gVTEM%FB7J3~!
z=FdJr{<n(Yd@j%_IG++FIM)@IaE=p^1zz;_GMvjqd4bot;`PM~UBJ<jQ0VofVBXy#
zLZ(DviLEU3IwxT3wq=+=QMkzK^ckSzVQ`|)F;DJ9AAsHRXB&Jciot?0g1e~l+Xdmc
zh=eZoV)4nt`HU!C>~%Wdrqgj$FU$~eOE^u|;e1+DEb%%agLK|5Q6Aes#NO4`P7)b+
zaq-`a^Si>n+w0UBtk(sXx?BwxMPT=W>50X5Efc{@z0MzCEQ{{LzM=%IaEN8agZT@z
zXwYx4Fb4~8wN*zo5jU`hGkvI@h%QkyBHS(!<;%RzFJO@fSzoa*k+9qw@F?c)Xt2N5
zCyaCFGAPGc07s4!7N^VQuj;!{6yD=?_JOf|^&;>CES55WA)F9&H!oDx)VRwO#rJxh
z17MsJE)n^3ga}>Xb^4Fcqthcor-a)%q7>{P7#C1oTYnL^((6Qw^o=%->}*j1_AJ<+
z;hf)Ku?1W*IKU2fdSbuMsq3c}))Zl{;-nscbEqi7S&CCQ`-$KpuRT<x;QXE_DMFW^
zO<4)OyhMx0)n2CnjK#J^5r)Exq8uz>tZoiJRlR7DAh5)Mp&t;Ji}?ql60GGo&GcHB
zE(-6%(g5~nL*WV%w8rb)GhXN6QRy8M#bALGbo1&w`is!}z0MLac8abS_7-5ZCt4O}
zk!i3*5huOQW-#3~=z8ZDSj-Uv4TGwksE`fBj;zl1c#*Nz8z67jUG=x_x66gS&g)d0
zRJ9D@q6lmi7>B5z>a^EI@OrOPeX?fQv0$i;6eVEAV1EsP4@BexUZ+Wd4yT9Y7*P&Z
z1jahKgpI{vq)2!WZG^j6G?QUi$iXI0wJa3Xu!Ev-gV$+>M`Tm}WCbGVA+Pfx*k9p#
ziDIyo)ASJ6d3-KHAND%8OxIJ0EJBomd<ue<3WJul=q2JddhJ}X4(Dy60_TrJyJGIQ
zGK#&<uoT@gSm4mxONG4&lM4*91}($I)GLa>md((u;IG(ABKQ$p_GjwhYzuoJFZ(5r
zc<uG#63*X<$Va`NKDcuV7b|8*+4Ds??AKt&h`|e^a1l({>~*43^@3%qkv30Mf;|Ps
zKK3Z~i70#wqi?p(8>0$~-82#OxYyYP#)aEa;ocR+U^UY8zS*rVLcK)j7O#^GrpFBH
zvR;&e9R=g4veh`kg<vaprxiG-@$5XFuKlZt(jOv3#x}2$ouMbGzlu>N>?gcVhfLpP
zip%mHqUZ^)y;q#Vxl#l_>2+FX=@R;@%j6VM@}$?Z7Oa=JlFEHz<aV!fbGBaEJZd@0
z5#?Yng0W_5o;p9n;^@O-^Gk%-`V==4l}}+upMw!7n&w6Y{R)?wH+s#q+#>kS9!}aE
z-G}<}`hp1B;q|!ZqQo+FvK=jocVH62j8GYIe{ooZmUx|C!EmW%*DndT2a3`XujgQ{
zWsPK3xFLw!>9xm+bvQpGDt3CEuk&>A9IoGXH<9s-*I7Ex*D#!>uM7KGuYIE!fOC>4
zdKQyxzK#>1x-MD-@8VT71?P7~$u6%`Z-H+Ta!3vnk<a0J0>;UOb#!4kuF&ORwHE4h
zY*9Kh+#Vnjc6&V!f<>qy_MxbR-8df|r^=ox3io)OL$Gz7x$m+>&|a_8tH8%NMCOU&
zy<Yn{@fFTPMd&`SQ(EX-q1jH2MJd?$MSAG!g|0}%J?{-T0>+N}+XCcV0cH1Kk;e68
z$ensY*L7bgGWL7zonr5PuX7PTT#i(VPRwG<!lf72B<_x|$2fq20mcm}u0<QeF@1v%
zdY$1*bn3YBU=Z#WB?rCOeO$shUqrs(bzZnjr;7dJh;YxZu)@UlLs3rD-MUVCLBB^N
z9P+yUxLa&H6oajO<sq-Le5r3W<5i$c6qcf6mSMY&0@PL`dXorx5vvp!$0r61=H~UH
z7;NNnT_|)G;;t8=FL~|HMIO$RMCnUj&%^g1j_Q<CBJO2uQtrh7LmHM^M{-2P%U=6K
z(eAL<ZX+@dV-By-R~0`Q>W6y~`xUSA9uQj<eZM~(oBX0zcw2f3=NCort6t})m3rE%
zdLx;VS9ud~3Fi_KS%xvVN*5dVFBqfIqP)zDEq<dTUi+*_IO26~D$>>0{hK5zk9Y$%
zg0ZT9>tEc-6duLWvs(M9U4|Vaf?o4Fi@^G*GTK;%kBVZjU%~X%p8XXiLSOef_X&N=
zfU;r^y(vmx_j(50$DSIzD#{KKamT#Q%r(AcjN^ZUr~rE(jAKOaFwj(Qc(Dxa#rb(*
zzlr_U{klwg8Sg2I-t>BwNHnEN_qYf??sZ&ibv<#bTNaMCEjjM>><1esP9yK@MP#|x
z^V~XIh?HGVl$Ue<H+su!yF~)dlf_n?9}$&rd0iJC5WU`x!S$l>ZLjn2gF17Mx(1yR
zLGR!eZUe4fDxoA%{EpW-0y`8H2vpaUY9jOmR@#U3WYpKAXGJO4?_g{+#hjRjeIbJH
z<ZWnxz&6iy*TZ7pdoj)%@YLf1`*lyfjoe8$Jrd;%q)YV$)(WS<SZ=N+p66h7m#1sm
z(e@@W<5W!0`c0NKf`Ki4R2QY=d$`VT5|>ZKIQ<^cGfG|hT?-!(%ioU)C<7da7=IfY
zPOnF+Tt@?z!{WZ`uQ1<Vaj@Cm_CbuN)n;@hmo4WGxcVX#uI7)1d-lQ_&Fh7$)??!6
zhcQ9ZA2ajT6wSq=d7cIx!g=kf{y6$q9%ySvxduHh&Yg~N9t7#a%5c?iz45r1_fd?~
zdy8(Sn!M^e55tN=5WVz#3ah6o0XNJYx9ST*P0nR!5iDLg)s4Qh50)+~=Du?g7Bk{-
zj0o6Pbv2s?i_!2v>rlA!kg?RI$@4C(k*uPp{S$mij=eP>E-na|-BZGy<FGi+)xC~$
z!;|_R4B5;Gcg=oMT>do1_4t#b-)Aw-4cmQ1sGJw>83L=n=>J)iYv*>+`12UoPus;5
zNY|&tw$EdN0-iSG$TX$DD4f#6i3R0AaWna#4`8J-YZJy286$f*1v_*R)J>D;dss<g
z;ule_g(YI#7ctK15`Fy(;6nvZ@J@E^h8a;#DqLI-uH*9Qs_~4N_hpO|`;2a11)aP9
zX1xMys4s$3|Jf?ho#C)<^ZB_pJS*CN72})&<Tb?2Ev?gLm!4kNsjeFXi>sH5rE(SR
z5(Cf01RVxsZT<digP^;6INhGp6|i_i=gEZ?BT{!oIS1j=^AKaf<G&m2CywPsIV0fe
zj#O%kAdHx$u)3*?5X!ZGw^;s7jPpGpa}VHk%4xqxTdI+rTv!8CgrNE1uF^eX+xZyR
zg+1bj^D$1hz52esn#d>$cU|5q1}4ThG5d7+)Wy-W92S<!#3<)Q!_{4d$Nzawe)8UM
zarn7K`G?`21+diB$Jq^6KgDs84Y&j=0@h#iledpO_xs}V@|^*T?WJ;d9*4#8udOq%
z7$3V&%#_v#s`@1w3u7!L+<5|4Z-i94KIbB=fhry@MNYqizAj{b3yp<|1HXN+*oeB`
zKhaY4>-d7Nj2v*&VCi~4Xt;_U@V&AAUca`7d~qZ1iSUEbO&*(NM+d;w0a>Z%IYB?e
zVu3Al=&3TKR9D!gD!dXF3x}S<y=|F@ywE^&&g~pvy{I$zTebmVplry$)7e+0k6w*B
z?}Kufxn*G|I|9$A&s~fO8vc^b%r{@Lz|ZdCEC*#~wkUilJm?TCwZ56k)DWQqdN`Lr
zdErpgBPjM|b4fN~f>oG1L0Lr=##08XuNYhr9dKB$R%+Ne<6tq6dOGIZ2dl5L*nw}s
z>I$oxdN}C$?p0i8R1fwm)3e!6ROCbi7{jdw%Sl+_h@+nPISr2JxdOkJ!kx*mI3eBY
zX@P6Y5pnrSjPo66e-#5OzSHff&%*3-@{FYi;z3wZDkMv1zvi<TZ#XQIZvobe*TfHh
z#5ivOMyd!{!koIV`z(&?k+5_GB<2yc#FZ;i&RcNxQE_+=U+b6-<)<nz1eW$=3irT@
zU`Uw}jE5hunV@dLl2?Djw@aecAC}IHWnKI?>m^t^QLcj4n?8$m?DMC^RObC@Ar;SV
zShun}JU{qc&fw!ZSGC7-mcnAosvB1446Jx%6)r}~<+=;iO}DcYR%iI(xmHrRT;;L-
zJpEu^CyIB5JD1@(6jpV0Ih_BN@7o^E_-)407snr9P2f)1HRNsCIKYl^HoUEey?&fk
zZY*S)6z+K5(d)2Bw_h)qYKExAV>YZ|s<aGx5Eh#{K+Rp}gm0Acl0O0#{TyBb9RW*^
zXRO?=V<+Uf>L^C_cXit8ae&hoR<ueD*Y}`BusEtLa|Cja;#7jNS1eKZQFu_qd)o3%
zRNTf7?BQDWo?KtUj&U7*Pqq)VV{Cs}QN#9n`kk~auekDQlxNlZ{K9~)FX8I1Tpd2J
ztij5a2UnbO9feDW3;s}jZ-N*L;nLw=gA3oofVDa83%39+<?Fl+7c1<?+e%O1N4_*~
zhYR1!AXX_{_}&JtdLOHAR^Up7OXv9VpRDO8mNiO+%Y+Nxz#!afaOqMstT3gpvt&?R
zRPzvk4%FyVpDXiE*K2U84D6P&w4RM`s+4$+e}=&%PdBim{XX|qbv|4=r4w-Js&+o(
zE8yL54P{|m@1BtZ8=$>=excO!;1{N1_IJ{5fFkw%(z0gC!PpuHz@@LDynufLi$hCK
zgcfJD<>JQ1840Tg{M7R0k+6Eoz%*>G&&tM)?HJFHuQ0r1)5dm`=lZWLE1Aw{Ke(o7
z_{m?+e&66PsWjaL=k3~Qo&VE$JDd|V-S?OC`fsrt*EAi@c;$3%_)agKs?0%2u=;U0
znxi^bc+caYeZ~3HQJyn!h0*0S{oZW3xsCE9!O{tO4!}8DrR}O)sp{rRsFeGfV|r|>
z)K?sQt+F88^9ihQU5MsC==H=_yRb7q$oE^IN!I*`uWRM$7TC2n{YlOUwqt_k|7143
zrhF?z<d7boPe6zB_RTZ@f@Mupt_eR|)?K`-@_Y){9K~Mw#oWSqT3ocOd5W!vYqspu
z%8ssmNk3VvX3}oLov&vaXeQHfPQuki%>Z1=o$8l;k1V)=_JS1+ziKkB0oLe+##H+R
z=S5g?Y*ao1b#?qzo@<T9SpTbT4D|%Wb^KR3uMNiBb-#)AOJZC@e-kr`VuF_ZW;(|d
z$xqnd_Hf<+<<&Dll;?#zHLg@i-I)ff7yLY&ra}8)4T9w|@ll?n9<JKI%YAK8f<eC<
zUs3TyxF_rn3|FyYL{v~QTvZ2w-q(Bv$|`z<{d;)OO_r^Ov!5^JHMZTub35o@ap1kE
zpx59^L1^P`wN<wfk+!WS2ySXIU2<S?@~CeeJlkRQ6Q|>%g1&=m9JsF|>IiJVT?1UQ
zaR-$8EtjoU>}t}+SBb8cZn=#(-HognNff;w?l}M}hBr+?Za-TU+qa}%r<%|U+8d$O
z?O)Knu-It6!a5xFu2=lzxQ-Zx^F6jTQcmn>M>!wE$*Tn}QRwte{>TKD9?q+2iDPd^
z2UNvQNHtrH8g<7nJ9ok*kFBVlFnJz<XK$6X=VLgBYiDSHZS~d8G&oIwC*bU*i}5p@
z+#9RMi_TF;H>yi*jDCm3F2_zHB|P8`yok!C{M&}oIRP3Es_$1ru0#El#Yz>zVioZv
z6ZY%nu-K}ByytP2;Vn|m0QKzFDTBpfqP~cAZVI&3vwHPd#aRZ6TQGg^{4*@(r=Al#
zLu%@Hs@t7au!j5@@*`O67k%&07;m%Q4hvtieH#$~W4JQ7A*fNis&zXoT_J9!j>2LU
z)E6R7;~-mYD{M99QebhLtD9#NEH>8PnkV2}P{#k0u3q8<)bTYE7xUGyxX`QZi1P|8
z&PPiGr-cXk;f>d-g9%@?W6t%hE8F+NU^)k1JVnB8DjILlV!Y!<Yy(^z6aJjDPKB|s
zvn>esw8ne1;WD*1E(;6c?9DGggZ2?3LUl7>gVcDvRA0{MjVvZ!Z(9R&l*i!oYUl58
zMrvm`-b5WQSHxgIcWY>?@8xk-zbiZ_4c2W)*UzM@R)1GzLwPhDGwcPtwyFD@>!00N
zH<BNhY$q8Od(lr;WZ+9|SnMk87tlmc6MUnDt<sPta$Y1#`8McixuG8l5pjcwtdd#@
zi-Q|qb({-#oxDM=?}vrIZByO;9#b@R3*(yKRQWou!*{gGF!)HgX9M2M9io!<d<|!`
zb`EIHX{<8b0Otf19N*A*F2RbIed2JrZNWLnAg=u_<c$8Pbd6v=UfeQrnR>lLJy&zE
z6IV-@zS3`nHQ85Rm(x-%k3kK`wY051s+m0!&LrL9?QitW3{=mP32T)02xz6puxd1W
zvRsB|hMp3@TXh<IHG6<^22F#L3y-fc)Z;GaNl-l~ai{J11Xh0?^YeBHt{b5}-VrwK
zu^P@~-5!_W<TP;0;(l0CV{Vq!Z$kwR<Hh00Iz;OZzAnP*8k7YqiS_-nGeU>=a8819
zt-*aYra_kwTV3>gVf@qu;!e;hx+rJh?5&-_9erKn%IT<j)N>f9pFBSRor1TEhs)Id
z7%2C{In|ega~T#p-NRwy8P*wns*`&Y&S}bN50Sw`>;`g2KfAM25~`=E3h(>@iz|(`
zZtbGSwpz-a1+er2!m)h}7RR=}zirah#(rS%xhT&HxJ+HXgHz8a&%kcBHBq<w<8Thu
z&Y$5-P)^sF?(*DlwC=s#ZEKSD{Tj|Vd0-SOdy8$QDd@Ze=LlqrFRQT*T;IbtP&_l?
z)L}gD!)em!8D?9lI_4fYBYai!T!b}U=QFA2pUzj{Ow{z3UbdB`orSmhO6(kmQ;jh-
zDX;IXTST|kMp*1=-SU@VjnVPr`uM8pISpr=yfOxL>dQrl%Z(=o&J^wZ2u|H1o`i7U
z?C`t-r!JP=PDaMt_{Jqdk4>G|yRb&`<(Z(Kk+ymp&<sIK&w=TnV^zuQ&%!;2V8y7%
zzD}clz5$FbbxrRlyG*cS-1qmh<@0Ur{z2#A&Fh@oB-e=hN>~3VS$!fFf$S*XY{z=x
zJP9iVVf_X2aL&MDW9yY5BU-nU`VQ4|5>~7T+!<~6m-}u<LP`DgFw@r}SBxIODzFm|
zi`Nb1=UEMF5N~mvkKkfQs0=)<ys)@S;~QP(8A|1g5q>b#(>wRKURyND?eBDqwbiY*
z+EP2W!_xa5K2cZ?i%YE9gamyKD-@QmC2R2MkgNUxxorxH95X=IUEjqlgvCOty++U;
zSiC;_VyYKYTqkamM-#D?4ICsdudw^_dkAOjAYUrHdn|(Gl~-2aJ2`p|9gKw%$prFS
zJ&zoMnyWY1WNeb%+4B?Zf%=U$JU9#LI}~xN<k^%x<tzam1&YT@7sH+RVe$Iouf}eN
zVY=&adEFl#G|yPRYiBi?(b(?cG>*f-Lll<`nrMdyt%u2R<l8j{aP@M21l3y*tliGc
z;kx@QS(%DGe<@5hs!L|{hk4xyU8(AVk3nK#DNnU=Tn(!WQ&;yvFT)z9D_oF*b*kP-
zeTBd`-AUoD2_xm@6f76VKw~)aU3Evv<ulMT38QTF{0<8QcDxc+Z$6I>dK)edn1-fX
zTC#;?ixk^WJ~`8lc3v5+S7w(i>SKp{8jSff`(d+?{dCw-h+c!eAtPpB!`d09-jSV$
zXEZGA9G?w$yz%;qqrOfISPY9}<IioA`UdJ?ygZkR(*6YBTj1-bZdxMn27H)GhvOj^
zR$p;of0XkaTsk*wvphf2QeS=CI8NuJrb^HlSlo&DdI!4~JW5#y%54~SnfN-T{&?Nu
z0sQ*VHEF!umyS|A4jQ3K!Ik|>SR8oO)n2#N1YI{hlapbw71e`V=M*f)t0pRbj0l*h
ztD^Up<6tpc{n+|-SbBnR`&|2WUr6p6V_@k^4)1;z!MYXkELnOx#>)Yi+%Z>EBg8XF
zM^rC>Inl6qeb)QuRj`<adKbiXbdv0qgAG!v$vU~eZkllS>P!OF?aTs5SS+gAwz?`N
z%W-qiCQTA-{c;uefUYqK@*L?}Q0Agr<1JY17rmOeruZttR_qIly`e`)fw62^yc~Op
z7pKVexkzr%blXZtAWIYu3HR)W)kmZjMR_j4HCi6X!<K7VvfP)4pykPWmQ_<D<<=Cv
zEy7c3tXu*XZ>2GFhO2KmW#>A!;|CfmSIoc`q4x~krK+HwJXp7I(s-VRD_x$?$3>|5
zOxv0z7qo%%9ypWbf&%3J<4n1HKIYkoS?Fom=We963C_vPOqO&&54lpYtx#16of+<$
zlPb3@z$*7_s+?B<?LJ%fT8MsFGTVeQv#*<4pS}j=j>!_0r^B6LX(o&;&PBq{{oTAF
zy{fNkQMx>rj|_fJmtB}qw+xkG(E1F$88Z1;db9p}hOAzQV%(9bhm6m+t-3{cHB+vq
zZ}%)cSX{=tmWcbThm#IESrw9fbexvz87Dkj&jt0BhGz+^$uh7IEp!G>bpcQn@kHgo
zRBh)f&XMomiRP>~hdsSvW0VsIS68GSAcBU5JO6;iTNqm=%s~^p0aK4tj;M&adhY7c
zwj35$OZ9z?XFsfHbz!t}eQOaO&w8R^^%H^fqnx|o;!1<{^Fl;z7~Jan+M%w9D+|Lz
z!d`dVF>=RZ+s_`TJNvmjeVd3!w>!f<QS)#oBsb(@U_3lejbP77peT*n+#$~`Mdi}&
zK;`85rD%yK;pEiPx6OYTOHEOy&wO1uJUPa5<Q!OB1=P*A>+pQJemMsHAE0__GR$oY
zd`l5;$^QXMHx9QSZ^2?nKlO0C_CnwNEEZ(ffQ544y+~~iXe7eum!)>Y;!2~QN(cP_
zi<cr_i+Ffv)5EzpAG<gPQcuYPFjLgc#9xc~_xO|10$$Pk<s&gBs19mNd?spBX&t!J
z@Tq~%9fto8>I{`+)dYDVm~S$o`r%W656AZ+e0cmjWw^!oQ18Nrhf*2%54#hZ!m{qc
z$BoZQe0W?<8-s6AzW<||uaf+~knn$)F7j`PpodiO{|{8x|NmXaO;Gp`@Nw|@+*IU0
zQFeX)855zZ(&G!mss8wUgO3LvJlIwT^*Vfh)8_xF=Kn_#{g??$#RJN*?1B=xjqQPQ
z5C<6U7>=iW>bRQX@6|AqO#mtrsAcS{DVw;V@&9+qAdO78s!G(@aH@;_e}e&4l}#ON
z_|=pxf~O#AHE3tTQQ0y#Ly0;V#lr{{E|d^QRaN7UAP^pXO#mvL;l`%2K)B^o$Nz~k
zD((=~QAKg_!$Ckl+zzTP7+?ZcRic47+48i&kFnxD$yyDQ6~4~|uc|EXI>W0fd-y@a
zsdR2Ic2(t=e*~Q2A2a?{RL|QgK(+8T6JfiFKxIL88k<VzGdQu}yP!3pFB$$aJ#kQ(
z@vFwJszhb@J4bbtnE+LlL*sRD&d&Fs406(hyPC45AHkoy>oX?Y)szJ~Yy8iu>xKbj
zUm1_8$_U?pQ@?{U$oEDoY2c`;4EK}aRh8(1;XcjxIjSlXxQKvk+RG+FRVDfrCtkz(
zn>0MAj91&(S5x}eg+Jrh)8YJ;!<Gx~$5`a5(A>nYstn)4@T)1)<!|ILTq_f<s*<-h
z{Ax=7HZDsxdER#NnOHjnX84<NqGt!AAx1mW69<+4os3;ogTNyU|1VSz$p0b&%kf`j
z!~#c}f>Akcy~g&s5}908pl9A76M)JD21AL48jYiYgG&G5#-`F9VQi&x#eO_+UA)$A
zk<aCF3jF9j6(<&E29&csjqsn8X{8%Z<z$-+Wv|VHGG4yX#ZZP{0_AZPby+SMvJOL!
z;g*_kR63U%yQ(t3BEzYSw;D>m&hV;A|MiCd8_ic0-)I6->D*-WQNyWBaI?|J45!k$
z#n@Cf<Wo>KOo`EFjek{Tdb?b>>Ef}=1fVkF9%EB!KM!Su{ZzUApncN-SXQYCM&*9~
zm<jd<lnrwN%8q#-%7e;eJ}@@bmgm>o4H}Vrj1#qjC!flu51^a4CVy%0zf-1u)`X)n
z-Z#dk(*L~CZ=tMQC6ul93zWxIG+&kL5&|$m{u)*Q)PvYe(4VOorCrVN04Tk#GyYdo
zE`9ZkKb2*;-Y9>4i|I9To2ykL6R@hXAi?1DYGw2$6RxT<p|*zqJ7u_b2*+itmkHmC
zizD5AaAJVI#)HZdM?h;qhZ_FxlmlZl!ZGMrqZ3TLs>*?rV0b<q%qS7cE|_lY6et7E
zhVrPY<XPbKnq&O`ow8zcO}MIxeDf{-#v2bRo%4--HKmuY#TLO}!greRS5sb2*TA1a
z)|&9^jIJl-E}IUzH{isYZBib8SMtZf*-~4LKb6iWabiKXL)n5QMt9K@2bIn}#-`Hw
zJWgtteZY8BRZg3i48NK(!<UVJRb>HR0cSyuLK);3P7MEs(Kn6qr~UF-vlDRepfckR
zj7??4525v--y561XUcd#LwQgc?iVNvaLMqhO8zT2)3;eVtu1|ye^EwoBcNMedC9&>
ze)F&$pcbp@VDzhD68TS*g$p#{skCbvyQ(tX+ThKg9ig;4oA9B294t8CPziJ~+SO<`
zC=V)Y*~{4fjj~|3n)G^`_<t$#XMjG&qpFhkHJr-siGs2xVxaW*8hap=2bKIbV^>x3
zLEua$4$77o!S*MJHxZ}|IMxIhZ|n)ipGyCU#($FGRPxEjrZR&mh9??MWmgm$JKyJ^
zGJ!?LgG&2OWB)hGjF*^r{~PsJ0c{zw$!;#AH`y&5X1WZKUGnrRX3w+2lw~E9tzTr)
zrZO*K?0=_R$=93k4?>yF!zLb;*={uco1pZ1jN_9YkJI`mWdhs4>HmcBznZdu+l@b!
z@phPaB}R7||EkJ#pYgj@KeBqw1biLJ1m7_Bn?{ctEjRiW6r09J?FIvw-zk_ps7&{L
zdP6@n_GzOZ8U5JkCq^rvF1g}SySeI~FNx*$N9~(z^b#_0nAi_0P{<Lxxw<|1&BVO|
z<p_7-#IksxEQ3FxQQFmvO+^&zIw<#P4GjM;R4*!5i@-&sDH3EsT0og`u+f%K)}xiN
zTSIwNRgR(#CR|73UsY?vzpn@RSBE1O0l4EC24#&#8hZki1({+r8On@j82?Nt!_P51
z7s`U>8J!1Z1r|VgR8{f<bp@gW0a$>gP=;M$B2by&N+=@~8BQf%ZB#&6kqyRv$mqjR
z9#rlLw-~+^%7W)_H{dBK4=OV%fwJbijsG6wUsYLvz2NjZXu`c<^bnLS^`fy~g7Tn}
zAJ#nIdIb*F{0%5GE{F1<(tZcZ2=5wBWybFrn@ayvMn5qA9~wOkWko)N^3lt;P##nl
zFKYasl6d?(Wz$_!5pW$hdIidY{0?P7ZREm&xS`~JMm@|O2bJLhjIEU8pAJT>Zak_g
z6S~fDD(xD^uBzmL#=j<%LFyU1K9uP<Fm^*@H-@VD-xLlWRh8&QoLJ&EP!5*%P$tv?
z$}Z~$Wyam1oNm1hkA^Z_jL}#q!woPx5Xy81`=kBQde(3Q_@7HL;Akilh&MV8%5am6
zod9J4Qj9$l$^>T{JKbm|R83D~=Rz6o4k%~K5`VNmGvxnrMZFu!2=_o)fE7^uvjk4e
z@Bt_v3~q%o{5GRcK>6rl50n`^Z}@&F4=UcoxA?zp(f?<om-69YLYED=0%cSB;lvs{
zP#~)olm+8|+r{wppd6G<p-ixa(Ho&Gcxz*~g)&|Tqn(X^7bw%o?+OPKxW#BsC?oVS
zc7)L=C=>2))C*+-vBn+<WjceQEbs^@{#pE=$yC=tnJ)i7G9Fa$d@C6aMx3dEm2Lu1
z$+L{kfii)4P&W15hA%gKB^3XxH8}BNRBY@m&^EB&fHJ*u!%srh_Y9|$16Nuo`}k86
z;43I2)&gXW>O<N0H$oZiW}G;Px<gsRUQmXMfU=;`P##qBfl#*KAj6e%{?ow#!=Y@_
z5hma$6Oc+i8p@2u8=VYgMpL0Ys4UQIC^Jeo{A$YdGT_hrm4gwo0N6xxOhhVquF-i$
z=R=vm0w|BF%KQ73hEo}Tm9eX8Bk-*O$e#h8FaiD(WsRRkcouZ0$>3Qi`5q_>w%6!B
zC=V+0*>CK>)I6yA3+RLnAs{n&$wa8C)nuQi%*N@M@up(5Snohtj+0Q9<CO8IvWGu5
z{1YgX{|w4<oiY3iC=V**e+eb}4kw2H0m|?{vEg{Y@h?jBn+f>4@uxBY8*2s&=;7M&
zPs$Aa!I?n-l;N*4;r>-k!&UWQ!nF{A3Dq_U)iDWBZMouY+$O-+s%J3uM%X=|%(tiE
zR5oY?l*vUxS)OR)Pi1zo#=e>|y@Bwj4l?0~IckPrqel-p_#JcGGRF9ihw`8@zuS!_
z82=<F)0=MWnNUv2bSTT2VR#Od@pFwmAIf+OjlBrU@OL`sNCvzMfFtByC=V(txXS2#
zP)1k-Wy3sZ><v)H-w5SFWq~#u|Hlmfe^xz^ECyggTcON&yRmmbS@NAw7H|)g2bGJ>
zi%=HqCBvzV|EjU6^e=-louh_R$zN07($HZ795Vr`DkHvWA{;kbZo<E9^aPX#l?n5}
zE!qF}rIGyqi*JpnLfoOw`mGce?4Mp5iLnX*S;Iy6@c4JiaEtMw-h~ejrPtmX!D}!W
z%h%o-;gC4P6AmiJ+!r)(Q2p___SOjBBH@bh@7@-HxAJETR()H9oHqHjw??kLHG*-#
z^>`Qb+FK)>9DI9(n~AD#i;&aCziV%eTzhMT!+>v#@SyUlbnUGXG{RETC{#MDzAXY%
z*}Ma|_SVR?w?=rQb?vQ@Yj2HQ?QIdR7391QUwdnWZ;|klQ}t~Twh(Quve(`kVQW-<
zn}n^!w?%kRX;*z)gq${8@7h}<e0zi~bnUH?e|n4L+FK(W7FFLCfvIfrYj2HQdus&W
z65xqFN5i$ZMh>ARctN@L*2uNDMy|aza_y~=NqEx1J?OQ!My|az!na4Ry)}Z#aP6%T
zd~tUp8sgepBWMUdIRF3OTO-5x-7Sv)vA0Hc7rtxzZI@>jyKb{D%FrdQF|zGqSD;+8
z1mLo)AUH|T|1Q^UuHS6A`YzXKxpWE01(M%w+3#+Uu)9Du-;GH4jjp>9=`6vhr2sBj
zycA&V-2k3t0DdxV89?k(fL#Rs(q0a5ksxU~K!7YE*s=_u{yhNIWx_oG@yh`Y6V#AF
z_W}gm1CVnsKuuXnu!o@a3V_-&V+BC+y#OZ&>d4@g01a0FELjOqPnHvu5p@3t!1c25
z9{{;40nQLKl%cBt+WrGz%_@M#vV!0wLH{Cv8)Q)tz|vI!7YLfk$khO0MF5*u1GJEp
z1ZN3G34oTeSOBbD4dA&Cpp}ff4<J?m>>_9*?KJ=w36j<Tw3Q_UTkZp>e?LHbnQ%Wq
z{2GA61RZ3M1PHhvAV&gpl%)iF2wJZN=qxkV0wha-69ipk@H&8oYXO$51L!8p3Cak%
zuLrnA7On@#T?cT6AWVin0MK?lz?ugDddUiclLY-A1n4b`9t2qW0Kf%;zA|zHK-hx-
zn>PSN$V!5<1fw1T=qHOG0$95N!1FLbw2XTgAod}ET?8@G-Ux7!AZa5&tSlke@-RUC
zVt|1%p%@^3Bfw#TK{99)KtM4-&L)5%vXo#CLF-2VhRKXa0FpNWoFEu3gC7NG_z1v~
zM*&94a)L5~?wbKd%fih7xsL*zA&8fuj{&sZ46x=gfN`>d;3Pr+#{nkDqQ?Q2J_c}s
z;C30g1t9EkfX!O~Cd*2Kvjn5I0!)#`TLIQ?0q|@Cm@4D80mN<v*hMf++D`ynBuIJ!
zAX%0WY}p1-|4D!uGT}*p_$L4k6U>r9+W`We1jyMAFk6-q>>+6V6hOMncnTnSJHQEo
zOd0$%K*Og1mOKrREz1eY2)ge8m?H~!0OURmaE2gPhL!-d-2t$s1Yn-5AUH|Te<#3v
zS+o;iX$imuf`u~j8Gx{z0GpoyD3Fx|X9-3<3$REQKMSz-834~NfW<Oy7eMT@0J{k8
zlJ;`|7YUM{16V3c2)673sJ|OvxlGs%5dR#&VS;;Q&>nz*-2gdz09MLUf;|MS_X4bv
z8G8Ye_W+zASS^G10W{nTuw);=eX^XOjG+7T0Qbwn=K*r}0h}RND?|4Kw0$06&3=IO
zvV!0wLH`2)56Yqg0894+Tp)NzMjiwRI{>ixAizdhNpO~6)C&NcWbq3CYYzf=4gowW
z;|>ADz5uX`;4x{J0$e0WDh1dgO9-|c0;vBYz&4riB0zj8z+r+XWzb6i0WSjNyae!+
zEG5`O(E4S79Wvu(faI3|P7v&r!G{4Fz6`MBFu=32oS=-L`zrv?$--9vat{NXA=o2B
zUj=CU3c#9I0rtrXf|CUO%K-MvqB4M`uL4{kI4C2J0ECqRY(4^TNLCV@B^Y%S;6+({
z6kzQU0MBaxFUz>s0Ah~<>>_wY+OGp#BuIK4piGt!Y<Uf!{xN`~GT|6N{ObUR30{{$
zZvX@w1IT#;;0;+yu!o@an*hgU#+v}iZvdPicuNK!2Wa>vz>?zt@5pk3GJ@{q0Po7e
za)8|90A~nJ%Fwp}+Li;Xc?;luSwV1;p#R$dAIhS)0hYc6aDm_>8Tk%C*xLY`-vRhU
zRuY^g7<B^RQ(1fhVC_2qo_7I0mvQd`#GU}yMev2R-*b(zzm#JsXJrZHE9snsoRbNZ
zujO9KH!|oH<h)Fwd@D;S-^oVrL%x?8luCJo@`DWi0P>^Eqx>YxDHmkB4<SFxLWs=$
z00lVnAqsF&hMoq$B$rVx%L<4*`60aff5dHuORoNi+l<p77f610$$lSmoAD9I=8utt
zB`ZHhq_YI0J^^sa;!gn9ehlEL0PvG>6#%iH0PG_0m-eRs7YUL+1qhHO1Y0Tq>VF1M
zT_$`65dSH_VS*Ym=yQO8&j4~h2dF7a3HA`QJ_Ar&W}E>?{v6;0K^+<V1wg|y0873A
zs3*$_$_ToD32?nE{1PDd3xG2O4Q1$AfVN)(tT_wNSXL06B<TMYzzwqKD}beE0WJ_U
zlac2D!oC97d=8+6tRy%~FzRc7ma_P3fVJlUJl_Dcl5yVv#C{F1i=d6P&jVZ}NIDPD
zR+bQK`39i=w*c*B!nXkN=K&5AbdW*c0R(&tkn<ftM_Ed+hoJTM0G(yV_W;S?0h}P{
zB7-Xd8h#J3q!OT;EGH-<=>7x1Ewb<jfZR%eGX!BW^hbcUKLD)x5ulf>AUH|T|0jUn
zvgjv(r9T2(Am}S2F93x71hDx6K!mI$I7=|<XMldP_-BB%7XUoJ07T2UUjSl%2G~Uq
zBkhX-7YULs0>sJ^f-S!Q)V~BUP$pagh`$JMm|&0$x(pC-2_WY(zz|tVu!o@auK>ej
z#;*X$mjO-?441*b0W|y-V99R)BV{>38A10e0HbB$6@c8|0L~D^%h2Be+Fk)z^E<#e
zSwV1;p#L8L6J*gJ084)dxIl3Gnn*XA;}2Khn$2!(GS*bWJPQ*)UJHAQ9P4(ES+mw1
zC=a+{PnC`z0>s(?seS;{<X(b{1Wi2v$uh+Qu*C&%j9`Xr<PQ+<23X(^FiRdG2=D_4
zsRl4x=2ZjOLvWfPUA7AVNcI4%2mr{GrwAJQ1N3nKvgI-dpp4)=!5rDMIzVnUfDP3F
za^+V9Z36%XUk5NxuDcH4B*7Je`Eo!FfTa$=_8I^S<t2i!>Hrf10Se^SK!CFZfi(dZ
z$+0y7)?Np2fMBt7Y5~O707$I`aF^UmaFL*CZGfdRr8dBpK!9Te%Vnb=fcTmK3xWXd
zl}88yY5|1Q0az*X>HzE^I8CrhwyO(}TpM6TU4Yf{6hXrvfIjsA?vu;v0hAG(C%9ks
ztPhY|2Vg^efVJ`~g0^)5244@bUaq?y;3UBnf(PY*1^`Rz0c>vo@Q}Pj5LO>xVncw9
za%)3?vjl;S05-|7jR4kO4{(6sQRy@Wh;0Cn+8E$5xtHJ~LDMDxTVzTTfGrIHjuC8=
zjcx#lZv?R527o8!5rTlm03l5Qo|1V@0rn7_CfFg{H3LX)0<fYPz)pFJpy3SweVPM2
zE0;9~C?hye@SN<~0wA|3z=jq8d*oLHZJPlM4hGmK*98NdB)CGbUk+#qu(UbA_Lcw#
z<t2i!7621(1UMwO-Ux7(Ag~p{i*jr$fVIH@2MAu4PHTYJmH?@(0bY@N2`&;eZ39py
zQ`!J*xe?$P!BN@hCV==>01IvccwHVL2xtuu(iY$inb#Iz55Z}I<FZ{lfaEp+E7}3P
zB~KAFya}LBdw_T3vi1OF1m_9fl|63;$ZZR-;bwr7@+*S2?EnUM0C-=n>i}?);0nQq
zazF^c()Iw`LjXRKmk7dc2AJ3p;1jvEBfwdLz)k?4%CVgQ)^-3mK=8SAIs?Rp0Hk&X
z_(JXlz!oDY6mnLkK;)K=@IDp_?{l(I7l8Oq01LVRd?Sw#1at-n=?d_z%<BrUhu}29
z_p)6#faFks72N=Skf#V5b^++q9pERqtUEv%!Fht8WzSmxa=QX-xW#>&>!MqpyTv_P
zw(SNoxCh8(w_M)?<Rr-zlHc5NU>L~K?jYO4Kz?`2%Oqj9fK2R(ge|$XClWqO5ZDXA
zCCByxSla{O0D+%$ZUu-914z9Uz+dhqxJb~nH$Z?)=?$=@C%`d+>atNEfcRbj3;F=m
zkVgmtZUqSG3s6($^##~NaGIdDY!?oY+#6s;I6xhFilAX1fIblb_2jY$fHH#f1lP-+
zyfWnW1=tV?&`^Fw&^8=ka6f>?a$P@wlLS`?Zjb|_0G37oY>xtHCNB|$MFLEW252F-
zMgyEB2<#8gQjYBpu(lt-0fJW2i2;a>0!WPkXe0L$TqJ1f1!yZ%yZ~FG0ge&0myKcp
z;`;+Ehy~~%j}QdJ0E7$x=qU3B0PG<+P0(4k8wil>1z0f<po=_3&@dLD&uswR<g(iU
z$_UOA+#-7p0>~Wzuwf8DnEZ;M?LdIRg8_QUb%Oy;5?mqZEe8w%Sb7`4_8|a$<t2i!
zK>!nn0z}BILjleb1P%k}C&vy0SUVWt070~L;s9cY0HnqN#K^q_7YUjU2Z)s^!vVGo
z1vo}9P&OI?5I+oH!3cms@(4jd96-oOfFUw(B)}em(*(n0yHNni!vR)|0vIk&5i}eD
z&}THjNV#k@KpDY#g3+?)7=YZ702{^t#LKS;+KvJk91k!~u8RjaNpOW=f*ddwVCiUp
z?PCFMmzM~_#sEwl2QXP~9S3lhAaFdu6ghT0z}k3#0|Zm0GXWrWEI{f6fN63s!9{|m
z69JNC%0z%I;{c8k%#e+42Z$dJu;6xpS@H-$zyyGhNdU8D-XwrM1g8noWxL4$$rAxq
zOa{o5rwAI}4$vn7AX_d=04O6kPcTRJoC1(L31Gt%fL!?%LEFgygA)Pf$#sbUCkd`3
zy61Xs##eXO$>Jh+6K76Jb`qc0-no0jRCl;-kC3O6+=*C&Bc~zYFZhwK+W0+hw~)i8
zy94T1;ID}BmlOqj6(A{VN>0kGsaC7qsngv}T&{1M>|VLUJ<xUkD);yQ^tl(m{_iIn
zX1c?SN0|>q+h6RSnCb51vbXQ9T<FfS@1NriXcRg`{VBQ1Mj$Kv?N~u3SgqYf+3qyk
z-Ykpex@X#*<dwPZ@wnR?o9m9UJ@`Ftx2#`l9R3&|;S*=2bexf;-&#=NCn0ZD5a%?0
zpBjH6S@7lV$a(Ieu0a0m0e*p^piMIV0CsoL4tH0VJigFfqyF{*>QB~HIcDdjr?R0`
zIq$ITUAt2Y+-}?MwL7EG9p&;oS%5@!n{F=D(Msg$JKb|#QFqFRrn>j-uD!$^>-sbE
z=XNLD%?5t~51-w0>sPJvjI6ZT-H}y-3|Z!W#(q^+EOXykf8IKsYSoIJmwC(GL!AfK
z>o)2w%a^+o8|~hpezH>)n?H($zq&8D3>L_`dD%g|+5Xj=Z_)K`vUPXImF}nPz}Ox5
zyD0>o0&TXtc&fXatvag1J?;Qk{ay0+RqlseF}rs^ROGH6pljaaYW?l&|K4I%il01G
z?2h(C<9Cm*`!j!EfPYc3Bddc<f5IK$iEnLNHUA~Tv#LB3cDOs+nY&l)aF20$4&!Q9
zTdp|hzL|cmfrEB8e#X7h4t!*!%^$TZcoy1-|E0!m6*qks5`TY;ZPneKG2Ja}S$ntp
z6HjQojTtdG&;8{;4P9Ref06|U(FmXA?_Pe;{q6_VJDVR$@_SI;_@G};{l~h$|Dg|#
zlMd#^Lkui+_-sxc^EcX7hzWx};{Oh<j*egq1L1#8rVihaec>e>YYV<@<q>M)@@u9I
z0p^c|yO_xQJA~7Ga|s83_=`@)^Zo2acf<H)%>kx>;}*mC$HUc`6OJB+u@V(5C5|w|
z_*)L28P+o&kfr7iK=6-ydH8-YjDLC+t_XgK#6;$g2Symi9}Hsw`NKc`4dai6k?~gx
z1{xM_7=J!*uwfB~<zve8KW0)#Bp_?cABP*Oku|^stPdM2ggSh`G<H3#hUR-K-}|Bs
zz?vDxcSl(m{t0U<!v=$~!u;a<2L7=)kD(?Y=8)CY1RQ2q6ENSe6~q~K1K7)^KZhIE
z6zpT>hGT?b{I#*(CfrEFnuGNLBOc|4{28YOKJTFOnfGWDFc|LN@!>JXu$FK~nm+dZ
zT-uFb{S4zzr!l=&_^dZ<oMElOZZgdG(`s#4{~7r3m|z0l1ouDS=HdITwYJ910X4~l
zYX>)9ROT_+u=a2>Lk_Y8!)}JVpBZqz-(>3m)(%XyKYy5weG-CC2NN*KMD7UI6pRCJ
znhDnl?&c<3vI*B2tc77ICR`{O78!NSG~xI=+=C69<@=2@&TIS+Me0a30r9`EStAUa
zZ5ZeJD8tfBCiq_}Ed0kRymna`CLDj6CfTq|!@|JQOx!FJw<qgA&%hiLuonU@GLh#P
z#;Lj7gqv$3_XfMiusjp457<h><{8!(jK7S|;|>!y9PUE|Z2tu&U<BMR;lru6(6C6j
zkDC$9wSwvN!-qeA%@JQ<SQI%1u<!Tv7%rM0u;x(TPwMqItOb-mtEYa~HwMOFGcp&O
z1ifJV=`0?61DXlO;==;-xXZ8saBqPp2kqU4apB?hlgCoSZiCzRlh^!-J*GE^$+bd2
z4zlG2a)sjWv2u{z1IB^L1?omH4zd*{+)%iK4O?m0Ffcb556&QF5{J)gOa#X&FnSNi
zNB>ANs>2Hs1CGEa+XTGNu#sS+z&P;M7&Z#-aVFgThK&YugK>~a!|)%0Sg#>rj;FPT
z#l!sqGsCftjLpfVwmTpP%6b!!OYN;D-~)z@2MaW-<Aa7x0An9VK{psS5$;{4>mD-f
zb};^4Cy$2>n*?|MZw78Oa5A9!kzr`DVF_^GU~0_YCuF&%;A4KG+<L^YL@;(IyYNxN
zro#P>iM!dbB(N2l<@1LQRf5w1^Grbg<{>kgj!&{-TMSDE`^C(Nt%jw5`F`t}zl+E^
zaaC=BxRasVO}LqG^Un-ffTvVAwErv^{COE3B_?1h+*=Tk3G-EV7G^d++YEcgur#pk
zU_72REFJDYOnSQv>&*Vb5%9Fu>b-NicIn%qTML=`zuNl?=%}tYa2K8#GJ)U{hz;%*
z;<!5{f#6PXcPO3&r^R(+1wsp@NRZ<0PI0HWySv=yJ;H<(+TZ>D>$`V-Yke%9>~r>h
zx4X<f>s->Pdh=Z#M9KXh$3gA`*^K=yuoYzBG94y^f|)Q6ra%n*29sbu{0>uL0Zf2j
zU>3}VxiAgn*x5vw0pma}HM+p37cJ+Ar3`-LWL_wQK{Y4^rJ*dyKu88YTVN|}gYB>b
zcET>$4SQfO?1TNT>d^w11yQ~{KOhkv!XtPLPe87BO93e%6{Ln@l;0vy6av5(3PUjX
zfj<<40uTa$5CnxF5x9Xi7(@L?nxA&Dcvw#HFod!(6o$cY7?D8LS?CfHCAlZLwFcJ0
zde{IPVH0eIEwB}K!Y<eidtfgdfPEk(NQ&EHSOU_zNNXakhqM;bI!J3EwO=mc{Tm)9
z;7b9Qc(@E#K!%LhRQf+$eDd7m@jg6&hoIf^iz@dk_k;c*y;CuZ>imaG4!gA5mDKb<
zTyjQ9gQhiLsL~io<0Ea2v@LSU%t`3av;2r%E|l5`i@*c@%pgNM8Or5>ybuKWAR`1r
ze#i<kwDW}mkR7r>hz#xgcnE}?kP9+_KLkK-VEm^I_i~{6Kw3x#-rxo9AlL8gg59tO
z<b2d2SV};bKrB2b0y0FDA>m%w2is+6FL(LKnD7c*hZ}Ge<SP`*iTPq!1nXfbY=RZA
z5@KN)tb(<$8rHx%*bG}>D=dLOVFPT0h0u=x^pE0CEs)#Ket?o7gV7SOgd)BSR)E~^
zHWd_1gXu5>X2EP22a`bViR%wh&=H!!5bVoEbq!JFM!fux8`41(w-H)8Kxz0)s6N3*
zcmdDh9lVD(@D^UeD|ijh;3>!riWwjyWCpovu`G2;2Ej7uEeRE&Jd^^twsSH}v6KH(
zc~CG7rh|-#<sQ$ya2O83J~#mT;ULKEnR2D(NIaj58Uyp-SNIL`LLQKtQDrop3sOLG
zNCHVA9i)+)P~CY*38^3%q=nQFf#cFYB;a`!6-e#^-vDx#x7_<Jmx})a(o;%@Cmo!0
zUee!44=v*j8B53*LvGQQ!EGyGKx>iltBhBFl;K(*kg=hRoLfK}kb!Gg=m{-B#)LB5
zlaaKHEoI!;3uG`W!@B_>gIF0=i<>fdl_6t$hyYJW4PM|4K9Cinvhybgqyd>HxPt@I
zLuN<?xgam3g=~-$vOosN54j;Dq=S5r3G#pkB!i^j3JD<*xWQ>s<V*tczcddr@hA)B
zpbAulPzVFLJia){L?jQ$+`}J&AOs3QVekTP@Bs&80GWSe0=c$EuDnUh^H{P}K@3d8
zf6E*mCc!+I4&z`3Oom@!0nCKoU>1yrxiAIh!!PhVOn})i6(&M5JWCB}Kt5iO7~DWU
ziy{-Ast~F|m$_t(VtvF?9~wauXbG*LHSpO+3!hZ9bbwC4_YJiv3ZEUc@GU<JU+J^-
z1(~7nF+6RsJ{(nMA~N$B12Wqf2jigvRD?=U0Q}@SNM9ag`jG{)!8XFb3vNOQ+Q*_$
z9Ev~(7y)uSoZRfz2d2POr~wtAJX8ev)`r}HwjbncJ!@&!R>KPT3y#21X@rmQZ~$&0
zbQ=cnEH^-|rzx2Ro;*81uB*HVa&e~>IXk#QLXZnvqo}NM-Ebs?lh|+2ms!h5_z5n<
z5s=HBH^WBQB$i|vvlJFVZY<@2{5<y~1$u%E*!sec&<lD)H|PUBpgZKnjwg1!zy}=Q
z4Wlp{0L0T`=Y10a+X$Os3q)<@&o<Z&JK!40wtz|^!&DiZPk@Oa^QGtT0$##17=nIt
z2!tX~2`WPbW*wmubbu1L83ch)5{f}_D8eUuUaxRT78SxvK?nvvD2gSSjHQMgJZFJ)
z-~oBjlR4BUR14}e)aUR5?!aA;`P6RM341~2Qr)0C^njkw3x0%pawoCOmm;77l!Y=-
z4&<Vg@=yw{;@=gx2$$g+{0*1jI;<lLWbQN>rodE?4|7d|$`AkrAp~UVR1AtkA(>?5
z;=u>zP+H}R!TES7H})lmq#*OEyA;9)@DLusX*dHXp$^oAdQcx4fZT~IcakTDhU9&1
zs0BCS7TktAa90Z9J-81K;2|6bxe@vVtb)}rlvqZ?YyvkEX22Zy1>TbtGFSTupWrjd
zhZ>4f9;$$R(4z}<g>KLtegydfQ<O~T(t`*1fK2Anfj49TcSr-CSjdMeUw}CdCqcd<
zBa^kUARi8jhCwg{R>N9Y12T7$xmqoddv7X1WvC+gf1D)R1M(rXnJ^uyKxrro@*z06
z>2V(X3Ni2-qy)JV^fkPLryzHaUVw`r_max5M{dAl+=xJJ4oykT2zUz5WF+u{hnMgQ
zUc(!B1drh~{7y(^2Kky4cmtVv&H~vXKl}|B;S`*PvoHdNgM9pF1N4Id5C)+j-$avZ
zD^tsjkcr>}A^Qk&>*;g23G$sXxt6vgw1+m(652usXinf-Kr4`+P`W}w_{_Tn^&RRT
zc(xd1CYlxG`#@J<3QUBkY5b87QPlvMnsyV%vDgthfg28eK>ZW*aIg|s8<aur5vdUk
zgP;+9a>uP@5A26Oc$c+QSvqaOb7Kl(eP{rskPm?LG7^w4_N0P5I4+BIEubxQgFX-q
zvgY;^q=%h2R-FLIwW&YDaEOJ)Z~_kx!d>KK$xD_$1Pkx=@I$_-^D~i=xp^e~F7<yQ
zhD`}oMQ8}^5t5IQ1wbmu&busK$jVbz$P5X=2JbN62eqLw)P%IS_W=^{JRkKStbvUn
zAKjY`vZfOR-m=Ih7VZ=3ho}<T3I=ru=?WM`NS9z{A#k2Jx(dudi7M|m;0PRp6EGUK
zf_w+89f%)CLB8@=4oX2PQY=b5TZ<=l9JfIxgfof-5Qopf1n3VP!3|3bQDwPf31ovw
zFd3$T+`hXKRqRTHT#zqhENzTusxAM%EOGQ`r@E|jNkt~;V_g{&%Q*K(kQVJO+=82M
zLqP5z>TVbb&7m!Nbx><VEqIT|k{S|`OJG*d3p}3(iO_b~22xee*w}tO$%E8gslz8!
zvx6>a3V$T<W&^ewZK(h&U>U@M)Tp^I2c%Wb0n#+QS=)HMi%+sB@n77Kv4|9h_wW|v
zV}O#t(zqrEX?&&8O$yQgCj{w$lYj*hgB#eu6{J{w#*I%P=Atj}@@xfBd5_Wr?7X-b
znj$Ec#DlmNMK2M0Vs2Re@|?oZmw-wDP0z$mvUu|D#=F#+H1fHl)I4~DbTLwHrHe@i
zQnUoqvA6*ehs}UWtV|h6Nol{bfUzT}De^82u@u9&`q`q;_ywjzU+4ipLU)k<r!!Q9
z3Q!KpKxqhpQcx6%Kw&5ZIUyGmfP&x)(q!cZ85iY;d?5BkCMuXeK@bSil=y=Tu;f`(
zF*Bb_@>~LnL$Nr|WqB?S5@2z-1$2Ur&>m_+QwW6)5C&4)+e*j!0}sui8AL!6r~!?k
z5j2DbP#0=J9jFcAP#vm3Rj3T&mb{B9o{2}*jCZjs0TFX?U+mYD{IAc02ucV=6^}(o
z91w?1PsNhNtPQk+me3l+p2)NZv1bNM^yK+lX5vpb=n}=Bt{|c836lT4ptted2Xz8W
z0|irI3XF!aFd2r!B$x;TVLXh3F)#{#hM!<041=LC1O`LYApS(l14M#!|NWsKh-0EZ
z0>l&3Qwfmh3nFhmi`+~&ObwlZIt%JhBV@+-8_x@15&Qx3A;xBDt$hKpDFT8B{R;Ao
zp=Mzr>RjGsj`BOty?7Rf#F53Y1eU{Z=&wYLTfJ8Cz8W&AZU>pk?%{Da?1G)J9k#$W
z*b19r6KsSHupXpFuS3mbAn)e0sA6AK(U)goM;tv<7W1et7R6y9j-mE!I%evNYC3u{
zj-&D%_g&=T2JDC-8&~}(g9y>M408;D1E^y08tN58|0?Qrcn7cHCeYDYUZK8($M6Uq
z!UMPu_uwwvf!lBkvcPkA22bII6q6?qS5t(97lta&8SzX!r@PnIFS4V);e8frPXhav
zXITf4#THpGk*;bRsw}`{MwP`Fu_NC;l!X_W6UyRBm@ImHz%u_Wr?Di<iAmAB$nynA
z!n53y`U!zks2@?|%9%2s(dSnme;sy77iBJ-?8mLlhPzhmUI7d4$>><t4a8kpXt9F0
zDMK@vq>8x=(ZoN~FY!mr?cfS7ATpvaLvoRmXUuFCyK429O94(^6Ir~JajGop$l{KS
zSCfOpHzjHcNXN6p*-ZH4>hNDKKILWZ{4J{@Cf3DinOlk1GRl+%ELq5s1ua?Fl3Mph
z<v-%$5hWuDhRoXfmOP6U8IWozi!)hx&IF<_gH*`{K~hZyuQ@=*i>AJ5CfS@9eQ{H`
zMz{*`UJ!yH1bk(v9?V02L$iRcsg2_UdG-St)B78UBUsWLFja9(^hK4$JJC1Y6n&{2
zHPNd9;ZPl9u22$6$Ok-SaiRzmhhiX>WK16hS9q?BS_vvbIVcU{Xc<E-Yp9}Ef#>qZ
zyF81YP?hH&po&4LVRlVwnVCdQ&};||KqeM-!8EJ?jpxSbHG(X-5rNtiL{Ho>_04yY
zX%@#^-bF4-9-?@Ngn`f<Izvln0b(xn<5|qQftZU~D-bhT1L$Dr$wa3Ow1d_l=JGCT
zTSJv+LqF<^P!|lv;f`Q>EUGLznHJ*ei(XuL@mTas83}M-=nb+kA^JU`2RP-(|6Ycn
zQ`6~4AIwb4am~#X5Iyn4e3w8B0P#dpM^d0ah@6R}^p{9V{+l5lgn<}}W6@yhOR||B
zNV1CKk}78M4&_<w4FQR@#MpGh%*Mg!#SN4h7%l(B@-Q$hORVENATbjMOiv|n!$BMx
zfw~LU!#a=vt%g<bC#-<wunb~h2}ooYOZ{KK!y+&X;qN>zg!wQIBv8M>uP_s&uuTI6
zQ(+2BhDjg=bRtNWNI{j9kb)_ZF;hayfSFAbr2dabV+@Q2iQ&&+=G{*`OAMuOn%OZb
z&a>!=C#IPMc&wo(sc3pCZit-diL3-d)00?>hUAYK05OPf*>pf+A^|WRHUn%HGBGy;
zBWm325;x-OMM>Q>g=X+PJ&psCOkzox6-WP<IM1_<XDOJbtdyrY#=AVvHJ)P(b)KOT
zn5cg^F6BWi#Z6Y}uZ9}>Qa+?i#Eq%QOUxu$B^4zgrrsZM-X(kDx*I9^FBVM;OL_j5
z!=`y$*|>7Ev9}T=)@DGZ+KOkUoMe?*uD+y{<iA*w(3*m#XG747>wuIIG24l{1Gd3d
z*aT}p+!zZ|cH%Z#5}>sp=JCy<;?`NIqp=|M)2x<a>04D&s-Xg@e*d3UJ+0<N{iEuc
zh0#m}Nu9XQQkd4kM%ZAOiTM_uC8nF<TQU81Dv<wT`Tw<4ko^Bv17xOxS(xJIo9LV6
zU^~xo%Ym8K|4Uhjl0p~1ut@Sr{z}s+9*ay%kkT(DSW+x*z(im41hFewCfQ_W(E*<K
z!Cu${vhjaY#+DSJ6X#f}+mGgTxB`da5Xejr#lqOpa)gJ!;3%Ai6L1-h!!fu7qJI*^
zO!VXH{f(ZSr4YFba30q4elCHfvgIr<XW$fwfEb8+5fJ#IFOG<ecqHcHSp*@xih2#y
zit{c-)wYc;_Nbe@-hta7+v{eeKk+VG@v_A(%P+E*FI(*e;11sUqRLLV%;G*G`vKm=
zJ9rDP;R!s3NAM8t!2`Gtk_j)RVSUcaQ$s_ZpT&6=p;x>ksO<onxz`GR-=LRT{6|KP
zYKVvO{uxyQFWc`fAhHQiWr5cUa<oSld=WvPiX{R$(2#QhviC20_LA+_LH6=TkZ_4n
z&3$~?UY2Ls<4*!3d6$-7^kku4o<&B^79@uhh8lyO_$B8C=JG7(3OwZGf*c}{lM1GQ
z988dd2XZh$PAr)EnRqrWo2MJ(WP_Y=kb?<w!XX9Gl7kF#ph2ExW+tg-x*>-c<dA~|
zM2M2p3%MXCNb<=k207gzrynHtvdP{CwJrEV2?&AK&<a{Y3kU$&l&uSOpf=Qk8W0Y}
zp&EojRrmqew2jhsZ!7Xr0m?%;C<CRS7|2eZ?DG17cp`z2tSO9I2qZ8;AiKe0CP>WW
zfKo8eGRZ86D*K`GZn~kX<iEs7UL=HKxul_%Mvbd4sZ%zdUR?9I&)<?0x8wU&Me;ws
zrg#)z&wLk0!r}!&%tXI>JbiH|ZlEO9Y9eF0B@vDKR;Ww?Gety3_OI$0mg5IN%w+dS
zJd{1IW)J~Qp$RmC#$dW@`bpV|`jXsYXePacT7;zFnZi=Yq+m&)MBglgrg_|gXv(!m
zt}}E3S>)-6DqB)rQM*7lmqHAtd64s$Qg7woQmTu@q%ZoiV$@HBv2=^-wCyx6{2Oq3
zt@jm|8P+ses(ZZnxW(4QW^Ll<>mSVjMC$5Q7cYKg`X0q6I~G$|EYWAS-W#+1Xo7O4
zoS!8~6}W~#83a-xkiSTp;IWz44MZTw*Uz^gS*4yfuzOjXs(~Um6gdy%4y2tE5c}|_
zd&mX)`Xg$Y$)z56xJn&FambQSX5<E?X&+N|^78t~1^5Pp_y$;BS*Koi@eEEzlxP*A
z7yX)cMrg>9noftZV&a2I?T>A8zOP>@)@f2gg<dBN^$|#qK-;8c3T-c6V2D%TM>Plm
z>ligt<YW~!19GG4JR5ko{FFIPxxMNL0>Re|pN{NpmPB<rGsY<(t78&|8Rw@L^V~Qn
zgVV%QrN4pOLF9r1feKUWUs!i>iQOqsU4<jSuQfY}Tqop`A~(L`>s15yW$1~Vzn^bV
zux~(LHAe)7AwV`q4?c7IYM$On-->{5VbaN>)QKA|fj)~6NQ^+?#C3l=Rr;6Dnm|w>
zDZWZ&zKKtpRZ&rns@gYQn)0ji)i+%-`$&H({=V;Bwc+kGIXtoD=UWI%mZvJoEtfX@
ztTRPBds=&dufKl}Rjs4;7;G7(F6+9%mPKm&Eu7t`F5GfCV%@J6-*yS)SM8T?yM*%d
z^89x&d#bv4+0$j9@V=)!vdb7<z2~`NNiS5rjCbO)ufLy*>Mx>c)s#E<npKTUhz)<*
zO1mDwnFI3KZ|;13Rf`rS*UwT)`QJsfikg1cWi^)sRJ(_LP18d~-*b6TO-^tm!Ltbk
z8jQ)Yx_DuC>t1vur{$a466?ryy?X2`bSl7I5;MRbM`iy!873Z6^Y#6E>BoES);wAb
zVv$L0yiY#Jx1gn97p&i|_0t$%Ul*&tZ=j##Lr3)(fnfP&vlNM6A}wVa&zsxcDG-B+
zl*h=Qw%oX}?oD5($re@o0ani-AcZBiK#QHHMs~6|1>^(GnK1Fnf4t_x4Kp`5P12}Q
zSoM()D2uNHk9|JTyW5erPJtiPR&iUds`W;oUyq2YE*1NHa0<AR5|S8hU5f3w7d~U7
z%^F$I*FS{Bn5dFHBr_MP(ho`66{;bMPfC(UQg!I()wADwrtPd{h@X@gA2m+onks7{
z@-CPWaB{6bi|+e$_1Oz0H$`fNE6_I}*m6nzjcD*o1SHgNQ?=^wDd_NY&8;BX3ClN4
zB-brJs=SW~)E3qB5uR;PedVpHS}JdK)Wg=aL2cAkdF!j*qxg)X+DOg0J+<evn3AtH
zx>(6Bn!W(bFRH*}Lb1#c2&sB#P0Ykq{hR{ZF-e0}zcMqLu60debDEq~1I6lXLtv!K
zlD17#73t#?cxRX-N>w87I_u;^PLpKnAXa@c<FGq!d%k<;U*kYXE2luP`Ydi&HUusV
zX<fm8>iO+XfyRbOp47Plt)s5TI8C~#&?mS(%n+DV^g-74V`hwW3QSjn5U?&)GevF(
za%l-ez78G<pYLp6!6|n}9YG-YAp+9+Ci5tFcXsTLdz}Ia2)mdpuF$S=_mVkhIZeD&
z`lq;Ezz_&XHL%Xr4K<oO1<I>%1o&Bc2T=mJb;u<!xFiK%io!<sbg3JUn?BgZ8sr-s
z=u0VTfQi(K)t?_cOYD6hyVK-H^-z48VhEfL*!X$Ov$|HNzzUW58D1PwMNxbnA(s({
z3O(sxEqTfj$DDG>R2Kw-3s5_=BJifk^vIxD2R=ImYG5J_$F0)Y6TK{3ZkN-ftJ*AX
zk4Hc%Xu+II3kAGCN=ll+U#^}?7>=nV&yjm<I8^J>)|e4526;Q>lBtpi1n0mTiS6L>
zm5<%rvLnzbPzDohN2l*s&3bddsc5H3Q#D51?rT_0aqXCYz7Gef;$|48sO<=FUCV{%
zE`zw+pz#adTvTyayO$dO!X?NjG$&gdxScrXfa-TW7d+D%M6DZWr7j~J+#LZ*bhKmp
zl;u?>yYCc%Kws%yhGHT^hE5}fSZ-8VH5HQ}UuiuolT`kfE?)T;AwV&TJ~4E5{e}07
zJrS!~AMbY<6DdP^yUi<lF4ld8JAG7-m-I@hb1@geKs6cFC2RFVlijV?5iNjDCbbMV
z+XWi}2fYgUygBQeO$%>ekZ+)+EGAlqmcV~vxo(5{xLZpUr@qsoMPMRBmtnoiHCul8
z_l@q>YKBfXROvd~^o}m)Ryb)J%{9hH%)XTWE1H*~s+A~X)$~^`p*}|pFOnqBGPXhK
zn#r|RD?nm=L0MmuvbU8Fiq9+LQsV5!8l#T(2r4IiKRunuxvFXi1bgH*67}?l3kB=0
zu807GBoWAsi8K!TI%iIP?8KVYn9xs($r1I-Yl3n|9m56NJBxbo+Qrl7LtZ_>p1#bt
zXt+zvTW7bGSY>=ePh3-VdP9(!=F{Cx7t*U&zG08L;x2<XakqzxdBZ4T00Pqg-M>33
zk9*@GGSmss1*)jWxDYHqFBO48x$8FCxhs8H%>_m(=wc#8Bs_KgzA27&C?OS|@k;=e
zP8ENP=Ya@FYtzZ<c6!9*7IU2fl~gwbxR+v-$n``{y4c=X=cT+ndO$~~+$gmbf#6>e
zkhWs&$Oc7grDz!H6xf1^)Sg@|OU6_<(J;ViqQ%dP`<Xh_r-zuUO25Oy)vDn;60?mO
zCvP{^)w7r#Q&Cq?E~vlJ^vNEm$Ex7=QER4_y?TWB%7B*?E2vVv$5v^TR}}3noeQx&
zr<$VSa}SG>g_QZd<zf!?#v;{)5~?S)ms;}P#oMfeSKhm<;f{?0et6tTt@wb0{S`Gh
z)MpC=5*aboj(G6--S}p&v<%VGd$)R@h5B3dqf1+yS^bfSgsCLSaG{|piJ}~z@L;aW
z+{T_xg?@5LZ}gcytBdIA+rYYNQ{|l#i)vXYLvD-Sb-PH{ExoLl&v&|E1On8<Pn4_t
zQ%d4th^qbB<*xn`98ydlAnY%B{?L|@GgmR5pyW!#vlQ1&LZ@#jcs=oGM(mMP8>wgc
zr;NdwLQ{UXx8Z`96jpm67p`!rMW{8mnqbAKpjs?SX|)@(;QnRwLO65!0q<^|)+HeZ
zQnQFb!?Jn-c=K1{Jk!J0oYvwd(+*2-mEUG(G=P8<t^`H?Tv4q3)Ju|{G<3d&E%Q_}
z1gvXSe~~+YoRqPmn={6Y4Gb$OUeKx$jhkwj2)su?N^^=KQ!e@^8tO27q9UYJ*KPJA
zWamLQa^X+{`x>i{dYY8ySuXZ4?(MkmV!x|rlDB$nCz5(oOqSPm)e^v(fq+y}KB9!H
z=dSjd`iPkMgfViBGaRNZmH7FnsFY;%xrFwD*2XGTB70NrXz7;7p4q2+IlXb{v9|8n
zW!KM1REUQpdlj`5Ik#v-V5~~(M(UpAH4QOa<ne0k>nt08lBnYcse2m}iSv|U#S*W4
zQSgCgLM>-)Q4J)rJ{QaDP2SUbm#gghymPkZRfq^YP%98H62)gM4oQo<=VI#xle+D>
zXatEevQd2&Io&;`6M>0|d?j@xF`8Pr_L!Q)KGa%i?XV<7)F{&GbW*#wk;q0R@HtXN
zuQ<t4S%>!U7(_ArQbweDgqkBrJ(<<EWVmovU6A@?Od^sdw>$nN@p7uN$tkCX{qf1|
zK|c8@`chd}Exgt*MZwq?_$dXP+zC<5QcwWiB)5nCmsF@Vi&};-x8Chffd~23M|mrx
zJW^6Pv}~5)uS|E;(Y$sSbu^_tx%Hg7oD!+~>TODUZOT|oYP-8@fYiF8Dtx;=ZAL1H
zrD8R`uU^(}@u@>;wxlz{NA}cFzoa7n`c&8RC4H8wS+}`mS&x7edWy<mbqoQf%=bmE
zXSgocz&h(fh1YYWA7OAVa@kbI)c@+xm!Od<eN-nAZc{^V7s3kcnCEq1r#r40ZLB8j
z#l>?Qk+XfSp-!i^2L#WrsV8%vJHJlO`006|77dA?B^HyEWI(^I?pNGXaVO-L44AKq
zry=|?YDG8Zu!Sg+v8tQs=yL|27q#{Jo_+U%nmK*iyI`}RHf*q@P+LV#7xx)fS5Lw&
zPkNV2_j9cTnh#7_*e+Gc+{rFxOYZjaiB=+~4PnOLrWMxa!+G7L1WIMyrn&^$^C`Eq
z_RQA9YIC5yxf+w!e#)m`eZA&|CB3O$=NZ}x$4OKvKPl9}bOd6)Qt9yHqB_W%&&>vU
zF64T8>2VK_Cu<Rxri`#WR-X|Feusd})wa}Vx6}6N#CQY<s<>xws1K74Cc2xWO4xxz
zS~Rqhno5Ow;C6Zhl3{iJ)Y%X0nIcLfAUTZHJZg}Ky^W8xv7Qj6(q5icWNRW>2{Ouh
z9hJb7`ZYp@dlFV{^6#Z)d)mE&zuB2-Es-Tck4o|9+g2P%8Qd1v7_v!JDyWB^gl8H8
zQnm6FsPy4YL-%KzfDz!#UL;KwRn+T?cOgfb>B;YT=acUb<9h9JivNv?Ooa1>-n|yN
z{N#QYYXHL(JhHrQrnY$5J$=$N*Qc$Sc0EaO*1vqXQzD;wDqdAoNxTVCGvs7Gak)rX
zNUf)3yEx^dRY?SbXCsgqfdaMuE`01lnbJ;yt(eGkq5jHyKQ&FUahTKOvKk|9e?mYe
z96mmqhQ#FRxy~uzP}>o(7FHL$$%W1B^knfb`CIk@LsEGYPZ^d|?f0n0J~(s)0m;Wk
zyYt=g8kjQ-0crfnN3JeL!1l4dTH-^jlXcLm&enW0&lj!jSp`99^>Hb^y6j`7Y&w<O
zLA!fSHFFRMf7Ktw=VN=_>Zq2JS8O`JpH&?x3A8GfO=_9L9_ZuMSr6s*)J0!5tvc}_
zZX1QE(b|s=JNHNxQqDf_2>s#x3|g}<J)oMK(H>;ItWIUL2Ra^h)ywUs{U=*pZR4kP
z%X+bV+f_wmv3qiFU-3+Y$-SFipnjM#{NiEjsoh$_Xyqk?>V^OgjzY1S)>^8qnY5a<
zGz*5CRI<z{`Vi}jOmfvQGijcoyI!_79>3LmVUJZKw3O14w5$4CtkqX5>e3Y_%VJN@
zZGCyO*aHnG0=U0yLN0qc7cKcUpQ6-W%;Wha;(l4}Rk;xDb5?yFtn`n1#Mg|7Sy#Rb
z_top8Djdq7R%FG~P<0T+ry+7O>^xYsLQ&O!el=r^g`DPApilokdR}bv&hEOgX~Y#R
zVYIQ+P!*aD7senUjmEH)jXHK5YMrG;PuA!x)6^gYXyImxqO~#U>>(^WH&92j+4E$b
z-dC?$<(RBVU461^VAok^4xJDen1fO1va9sj@uFWpJq7EApA2pMY`?y!r)7?-3P-@2
zMs+|5E<k@Jlev!_t;@S+DR&-+sH!p&S<_!Ha&O-CZ@Z)3<oP!19CT!0*GFZ}ffpBe
zmG-w~{hd2zr<lv+YY#eU(aEMBN*F%!Diy;&@zeWxD!9|&-$h4~PIrM>K~Zt&n_<uz
zSzRu8aCJSs9<*#w`|o1gWX+s)SqbFO0eTqf?+K}KugY5)F6qf&>8Up7pow%<Npj*v
zbfg}cF-?*roR~FtQb{kpP`j#<2yhW?{hSn%#A=L)H)j_}GN@J0*-;l3elCc(F-Kdh
zwu|^sbwLz8u~qV13_A7kg3rTfy;e+EIQNfo<EKk2Dl<-6KdoST*<MGhCAnw~!iwmr
zvm+|(YM09!o9I=VI9U>?%einom5Rw{chAJ)Cw=}PJ>dof<-gIkRN?JffVAu^r1Iw`
zo>f%;+}Lqb;q@u}Gz?SKvfK=2Dk+aVjFca#+j)=*Qo(tNWl}Zn0K(b?!;8_}FL`-$
zj(1YKO&g}SyMgMy7@bn~d<<gmj?fnqqEx4R=yp|u>M;V+Iy)__GJG88OLLOc*Y0#f
zHwy0Xlb%z7Ycfw+Zkzw!#;R@rdBwI0CQ_Emo!&Y9##YZ|#4SkA-NCAOetUVhQ3y!6
z(-TC^$#3`g5<<gcBMx!==UU*5zI6V9sx(0|bEnuSy}0kc_v-Sq(J?2rP-tC~Zq-Z-
z-C1=}B2o!E;(dU6?Q74AyIBh`<X<^j&%WP(de|yQvs|*WV2r4?s-^|-@sR3Uz`pwH
zDW^|=>ax_CJ3nV~`D0@2b8LMnhXa|K`qUV!_xYz5o!>vQc{qK3BsHNh6?>jq;YSu;
zSD$4H`%roL)9Ae#r^5UxOy8(NjIE>(@=}BRWnec>%@V<EHT1-;ed0m3eqB=5CjdAu
zf?8dZ;>PnghKtNzC7lYW4gq){SNI#XleS1(xKiOFY}heIn#0r_(VVQ-2T&BXv0R|a
z6sXM&*wWC4a1tVI2p6i4-d5{l9b==z%V)$SJ@r3qTt8xzSFZ-PFPjJj)b=2pZ>x?K
zvU?=R?>9*G58-{HN)b%*&YP@{7lH<inf7eJN|~E#W6%K0PF1>#Hf#;#Mv=zI#vRB$
zQ4`RyeV(kgb*2L}#<lvyUn*O2^)}dE-kM3346zrre&r=o#AOnIIKyJyHQg0&<xvpR
zSmiH@E~Fv~+FeXna;hjXF_z!8k#br)12;<?2aWJ(YYSf7*XdJ;l+`pn5(HVk3VgZ*
zftI=ImqIuh$1N?j%upE7bXVSm?HPi<(bGr=K~XU8i|jJ(NQ%gjRh3o)0%Rp%xaw4x
z#GW=?A7R~J+-m;p<8#)SiS5r0Weftr+h*vsF>qpwe%pVUOJV;L9qBR-p-M+_zi6{&
z`vbz<u<9>MT_J&2)MKnt{@scYNj+K8#1BeJYhBf@2(>?cX{e~S7Qy4Xv-O3_X?gn1
z_UboxG|tN`fJn8)MEb*BbM^;2ViTq^OlYQRs%DMtX;kN;c2{nd^>4!S$fEXIwyks2
zrK0u#$Njl_=hvi5)^Tg=y!jcMjP0a0kyZJM**zVpWAsQZ%-64EV7(1CEmGR5P>vWC
zfka3#B%}k4O6d2v=#VP;GzqqII5B}q8ce+1-<Ln+<(XbH(I!PLV^plz?T18aB)a_C
ze?+Go)nq0jqf6|LHvE0NVruqR!>dRqNnB-8FgHehkdQ4$A{BOXUw-_oXO7v&bi3mG
z_88??9M{hwA&uae$Ez#+cD2M-O+wo(dScl9y<X|IXA%z5!z}B>7VA6}iCssUdHQI7
z+n_0v-)x9Xgk91_QYPO#RjRbz(^h((IwX?c4u^<7iJ4jgLEVD88ei7#@*QbuzzY4U
z!bE&|jCxd3x3;{j?$0dreX{(fFUGfhes9;1z`D%RjR3L6bEJgbD<pnEQfi4QEnxiU
zY9{nooUfm!GT@oxI~hTO5S+24>7J>RF{+~xFcLsIY;4aJ+g;}yW1X{+YggPDe4NBG
zmY<9yFyiFMN2*F$$!vYQby1~Pg|r+gDCzDL#5Ye>tCZc_rt5`#vj}Qg@y!CJnGn`3
zrJRZAD2>M{@wi^eE{<!tM-A6J4wPj7xIiV9>@<RC<d&!5xg+C3J!&7`?pPJk*IkxA
z<h%kFu^>SW$%BNH;fMD+xu<VG_?lB<FeXwjyN9i4wBk~1B}_<i`8Rf<x>(v?)z;|`
zm8Xn7z}EW@)uasX&Jv?#eZLrWrA(Z#8O9{Luape^_1kgNy2Q98FP__abKvE1X^Gx=
z1<&1=ebA}oHEdQnhUcc5m9wX}-Cv?S%h~fdtV{JMra_faPk+y%@7j&1)!N<4mSK}}
z_Dqghn8?cAtZdzzCmGq4WzR{5?1H6g25!{*H#c<G?-P`CxUuu<=&7B?1-d$SD;D6E
zB;@O7p`Ch!%-0s}C}4rUAsu3sqdX;WaI8K?iHbhde8!388%S!Y9W;*PV^wt|LZ%}j
zVc)qoWM#zEQZm`3kt$5tn}><`yYgm&D*O6)pToph4p|qgW|ya#+-ulf;Z?hS8draP
zcY`IHK+Dls^#BRmg;<rT0vUKCR&}mmZ*6-Rt4>!y|5dC?ToE;LnJQ6{P>furr&HR`
zTPv(+dzS7cQo_j@h>4g;F{)nR2cN4oE;rW(QJ8Tcf0-JMUB`MPvLG=fPxR5&EnohP
z1i8#P3Cr>2YMZ!Tdxf3~7s~p4OkSeEAe*(2KA^I+z{Cf;6L;)5m$o`z2cq%tFDR37
zJ;a_Nkw(bMT-{VMAn(#9(ng5$ewIZm^=9;3t@+)~T<?*Z@uwJ2X}7ObjVckcV@Pm9
zEqbi$u+6F4?o8{HxVKV`M<V1s64F>#@NhkM@t$XOr^F2-Z5O#YQsnW?z)lK@&-ljQ
zV%T+jU&8R;_TQ54SF4E1gd^b^y&Z^Le{^QvVeM0p*V2iS${v`cAcUzaCz^hz)u_yx
zi8dO|u|~yWH~61+4XfX<YfR`Y3)TC|48mHjQ|YQu42;BH+q{Z>gVh$XUS+6CpxUk1
zi{_jCRSURHe{hJ*(VGcNcTA*OxxG1Zr{OlQyd;icGGM*xh+W5UBxKe%c0kuO>w09N
z;D;Cz6V|J_;`%H@qQ^A18&7igX0~j){yQd8t=1e#G{Khm`bVe9pX=2lvAY$CWJq{f
z|1Pur)0D?fi9?tq$0YyO)#=;hjb^dcboKmtRV<X&>CSppCzLoJTCbK@r%9g|Y7evZ
z+^C+3CV~4TnkB+$=S_)S)p)_{v0+3kX0smk?Z3_+*sIc*S2in!Rr_~)v)U16ZxVHK
zt1b~iP^4z38y1o%CR>8`l&wtpGf8m%8OTf65!sf3`FpnO)XLH~B<045!{*kuS#KLA
z=Z%P^OJ6tL;TJcjFvZ0+N%jetNK&83abbgRr5h?qxIKw&)_S$1n!T!HAqgoCpH5!5
zbLzA|RJK_Q>Y=r4+os&B+XLLoY}Zr!ZL%z@)0Ue11c$e)2G#AEz9dGKaA#sjI!G2c
zzMlm~8k&;dbtXET+}OHa%?P*Wu_fQB_JlJ6BqJO(aK7X&J>2UPbZVL3`${f~z0q|~
zr{P2*WHS;H?S2FH`7E4sWS1tPb+X^EtG5`If3a&w*!SoqYlcgY0dLoB*yfxJrQV|+
zNXRlGAtkI!ScXY$2iPk(CGzi4nQ9WUqJ~6{+x2{diVbEcp2tY@%7#hsyL6pf1SDl8
z$uz0EM@7`Z^;U*N{>Y50G8H(y!zs~YkIILHZSWqo311u&kd%g@Rm+zjU#{&#<8Qh(
zcaM4^;aFx!xP4AF*0)1sL#M<R!(_s{HXG~Om%nqG9Nwc!)WYsXL*mYWTc@+AB{Z(4
z>-P<lKTj5ZljY?j#!9BiyFF?&b{&cL>W$gzZSQskEezv`mMP)AS8Ws5^CBV5?$o+B
zC%n9PfYn=5q8KL9-Q2y}<np6!Nk%$N!uG1<wXqvvNR;rN_w&fs**Z8Sx?_?CyJy_*
zZrt>`Y$>P7u)Qi)Qg<2>G8Ou~_+8p<wOhuKSh81*7uUBVAtS+h*`gBcT6mbH2s31-
zG4aAADB{wJ$D6NYbD9|GZ8Lo-cTg`Ol^-XnJ>!A*3a6xzhmQX)2j4G;hA*aXHY4O;
z-v2uk`Hw2Ux(pvm9@WDckRpqv*XD2^XAL@hR7E18FAaOyDj!#ec(pY;KD8btu<dc>
zUC-WHU$ipTuDl$TkL#)5*`q+Qx9eVp(A?>x0L$6q>L~UMd1b553ZJ&PW*l&6<7kUr
z$(QgCyE``<emV^yG3w)|lj>1@W*HSv>8(`Xhz(ULm1tQ931hA0h|1i6No)dD6vejt
zw5rp<9uRWsw7#?6+<kDbBkw;C;E)VM101#Zp3zI#zPmw7dM&^7027XsaJJYo@Qm8h
z0KfV&(v<!u-;p(!CPo#Tk<zLkZVfa}4cmS?tCBXPIL$w+kI+hPE}V3fz4kl;#qdRD
z?HkXkQb>fHH6(smdaO_V-}lH2#E^J|iJbk&|8Yq`>au^`a+)MQr^briZ0B@|VT<NW
z+;;F%0jESMOk~uwBz;YPx6KEroTjS{&#8+NvffBYVXf#lX416ECyzQM#-CFu8{zs2
zBs`JWl+QZiQRo^!r^NTqFz-L7nuy)+pJl#`t8(h=*1ig{D^{*)?R53SIkg144)61N
z*eisOtDdUjf^erq@OgCwiQrHq(&0wS-Up{<E7M4}6^%4&fr&H@H#gilza!taADt%p
z@noM~hU35A*svgDV?GM}#j3XA;Kjir79PBeNrw6Mm6?r5eril<{Yuo-{h}WDTSYgC
zFJ;>K%Iepewif4A^`=xJL;c$H>wuY_#gqAFaKFg@sA3|B;nzVhG{0%~wWR*$Q`4$f
zfn;lnoNSUYtT>}?W6?fHZEePS)PD(>0SHnJn>!O+dkf@H_c+ls{EA-_@XN?=ZE48M
zcJ;Qp@}oViO4foMs-r4z3l?if-BA%ONXF!M)!fz;E3dnHkJ2&sbGN)XKCpl$b0z;m
zYyjU?u`TR*vK2!@3eQ+nDWbu}f<4RL8UL%CJJcl?-&G%Q)3F~3+0AS_zs{No)faSi
zO5DDy{8~~0T<_@{q7&9n+H|-_#e`0Y9EQor`?VIVT2Qr=)1<;Z6)ASxAdwl@rzfl9
zwY}2w)J}<!n8-vbn}4`(*#;ZNIZYPbQ-`qYIE+MAB=#2_7~$7zL`|o}lY3KJ(WLKt
zr03hE&lCP`ll@2@Du6!+;{5rw+9P$e72aP*LRK8grtDPg%AFw@k)ZM8zvVe5(g=_F
zd?Vk@lFb4%yV7D>5<XV5u>0Sx+pa%S_gXREeEvukYR!Dp$R3~gN7$uv(9fakr@zc|
z4dGAq(6xQM>T!*rp1BDFE2M>()M*REUdE233U6Z{W}ePz@Jt_X+aE=BdU-Kvc`e-9
znKSKVOu7sK{E!M6nJ~Eje6QB_U-<U5q>Jnl`qxn<+p<Wtb&fuodhqTqzwlEtf(=Ko
z+6}8RRvG(u#IO`~ukXY}{}F&?@G~{GElD~V3290*R;*QMN|#AYGf7fyJ#UF&VjK2*
zj_akOW;jiDJyRFk(!**$STK%jq|F$@jJwivy;nY9O?AH7;yaAZ2&%S6t}Q;Nbrm6f
z_1xVq&x6#2cGM>Q_YP`XJG+am&U3ZAy*;f<VSXqszkTrX>4vM>2xCBpqD>o)&iuP%
zfIq(>2=M<Z1eyLl1poBbk?@7yTBkqSQ?(zv8HYdNl^b5^fiR+&)*i^uZnSlF50{WH
z;TKKT>pQT!rXOQU5Nt7i!%>h^n#Q`kEC^_u4rw#W<37BU^iJC*<)!L*s;ni2jKeSb
z67|0<mTQUR6&&!A-{s*#__=1=3LXk3(54FwFp)ZVd*7w0-D_vguA9gK9DNt0V1B=A
zh)DCWsjzkL@mA;FnwA6kIVH^vCdu8d)XeZ`V`HafJz%yxuhf%H^ctg7#!h6}myH#D
z%fj3&C?Xa1`@YnB&0;UUoDOTU)$4HQ1x{avzE+!X-mwS?8Cz6xTmEp+w)qTI&FC2c
zFn3>6md@-I={pvt@2=vz;gYT1Yc*PSX}%KqvT0-Nv}lS4n<2&y!A{x!i4(go+b-io
zTi+^i4dx8v<Y#JE7si!o-cRjLTb|*)^6qYLt@?CjzS;7<n%tEZ&4+56n7G_{u)%v<
zrjIPANBVJKn-;Cob9JpN!%%H=M*GcAL1WLSPd9rZeg7xW(fFfY8mCPzwd>@%dh(N@
zV5$=p`zv3UB%X_)Hy*iuQb!4mUNh5XlA1T|liqa<uUz7XUtf%5K|<0~nwUkORE8d;
z_$DM|QrI|U->b*2m1WwdZT&OXKJZD^=wT1=eu{*Q$Yw?tJJ&1l@lAK@8Fa)$wLFr}
z?av-;u_gX&QHObO>-d@9Q(|V6dR7!IbEoN<+T`35->|vfKk0#>DGH8NnS0tpZHq0c
zYfr67VY^Na4R7vA#g`x8No9Fmb=+hB8(G_G)@V^fsCQ2humxFF(q5)DcU7~OJ)@qa
zY)3oAjP0~c^5eO2Hmf#3OFFT9tyDwL#+f6{x2cQ07(p}T({?!0PpHzl#oS4~oiiXU
zv)o;^dAhNy7NDPPGc>g<bXVPev}d#paZwY0q&LwA0G=UlU94IwesBKVkR=yNct|70
zQYm@q%Eir+{=3gEo;j++GfKQ^;%-;Vd(%i~K|-d>D~DZJm(j<&k5j@Q6G@@yDp@i;
z+#Ds#;q-^nBUZMn*?q~~=153RZO*#gukz5L!<=>v*BwU<*R!^}>YD6rVkST4a)rNL
z-RMm@?!~pz62e3=e+Hbe*61s~;0e9!5LXq@hgxvfRYmuq8knjPYsdG)XZrr15;jB9
zOiA-S<YprMyK6(d+8jENv#B?sl4(^CzYP69NEKtiW+!rt)5Z^ALCvKfb-I+B%G8g%
zsN-hUMjA1Z7qe81bV-S?#-34oOj46dN$xkT*}u3fkeDU|+*D_=JJzsUZT;+3-luA{
zLqeu+cr_0bnKv}9bt~kzy$A1LA_u!LS?8uU^&^F=Bvwyw!_l1Elcg^1jb40e+KT!5
z%u17t6Y>m6Rf+y&N1mjrUVki?PO3)p?r4<Msx?SnDW)_@+WzM_mRl!P+r&oSr0Trb
zFyijmhz%Kh46Qw`?aPF@rExHhHy9GO#K}}6QpvPosv*ac={DOGO|)!4mtlpmDF<AM
z(j`o!(EgdjBkky!EtWV<Okclm*Ywqt?2|%wYx|qq+kgAGlchy7;l`&>5d%r|`ADS2
zH}6MveapP+^2RCgeUmjQRV;SDjMR;!Rj&uy3)%*zQGSs)JSq*}1H|DAzpV`3`+F;v
zN~G>_bUkn;CLWlaeB2?l)Tp%QF=199?f%L%DiXW4eQDIRNLq*C?&_9P4REwftGjt;
z<g(MXo4d)(THK^t>zP(%h^8(ErPIq_<1MMHPPs6;hatgf)Jo~p(I_(c`)-U%qdG>@
zyc$mZmtcVHVLCN8`hRee@}fB%;F#fI)y5!g4*s&s_0q~mtYP~W=GSF@mQ5b2)L`5?
zfQ00Ju~p?_U4AUiKCvlr%|m6HOyYd>P)DburuI}})3qafIX%^r5!A%!>GmMo22Yi8
z2o7DtAz4WnyENmwreW(NNr@m|S-`OD@l;n9#c{~6ZoA~EF0P?)7xYr4)?gm)rLN$T
z%`|WCr841-ZJ?L(9f~@IpN{;38tbL}=3~#$SFuBB5W>CHtkHz2A1~_3SmTc=^Tp0w
z9~C_eH_S+_^HGtbcsHZebtG<?0m$u88OFqQ(=<_W#q^i&IB3%&5%9H5Bh74CGN_0Z
z_+BJ~dJ=<LCxhy`&>0$A&kSn7V%~>mm^z&Ze-+3A8P({KPT6k+=_~Q@Ov-QCKfU;d
zH8Un(SvNx(&(MgTr>%TuwOkLW>N*y0^t?6m%G1^=v-<EevpA#J+5Rov^)P+NGL`)N
zV!`w{T~-w)`d@|4$owz4Y8ZYgF~dn$36+tdUrNK?tSaKSIG&u$s^*g6W|{tyFY!J9
zM^&&r$f^!aqb?gBeI5O(T7fj9;&_lvZ!=1@+I^&9v(t<{%qnM=3$r|!nfBlQn{~yE
zsaZ$Nl&G9t^%>75PWBvnb>Fda+JptUW?y5^$=E+Fo<m(3Pd%=Sgf!64d)%G6tkvDg
zP6;!$I_6Nm6KHYAASp`-g|?=Dl&gi><c!C1!(@qnSk&ILw`mK^7@o+X24L6rHit_3
z2dZaIwOrmy=2Y93q1Ml-N{POn`;O?GdT_&bx!tdOJAGZJL(_7q=s5_k$*GbrC)oel
z(%DYsRMqEV<3Uc<2phJfxzt}1QFG@~5en5z{8G7;V-hYl%Vo9XCVIy!H=L6!|Ihce
z22F;~mY;K}>PVOkmt!H4G6?Y5vN62e#nMwXNfx=-KF+0Pi(AK$kXE)$)(e9t<h+{7
zkie~bxl|Kr99?p&2O^m|w^duyd68!K^(#X!E2pH{9tY-DOT>m*CC%pbOQA8EQM1te
zv#^@Yidkrk%Io+6zhynE@bO}+rer@aGgdkBNk`c>w~AbepFihTpQM`qky~Yw2FomN
zTXU<bOL+gf+<V%N<yN_-(sG&2Zroby=**W)WFg`2zNzo;Ug9Y$+TtCF5?9Qu>0c`2
zSB6IBIp*_)lT5hPvd#6Szt3MRCpZnaz9fs$0P4vRuK|fKWL6s^rPP3FbPJ}CX{guv
zxQU^)(q^TN?~&G9nr;}G^Dk)-&-y=-T5nMU;<tHUHRxX&y06mA41fGK!t7@aeMkKQ
zdXN5YZ1#Jt+Ih){%4jTl7Eq;Tk=<W8YxHz_TerkdU5qc`2=>?ONywT%_jMmJv6eHF
z;yUD*i<m5vrEa!k^T*d-7o9DT8FGCjP}N3n5;>o6JoZ<AEuom1@5JEBTIslFlWjz6
z>TC?@Bo2rg*Du?*!f7+x7PGT5GcB&osdI7KY!OXCvxzaA60-`%wJ3p<k(U{cFP*$z
zr?g1KHCMx97-gB3%*N_lLHZ)}E$<wQL-ZynYiUQfTd#J>)IpALFysASLa7%kGZf$Q
z;F|^UU-EK6A(fB5*YTL#mT`Mv=>vhSC;EPN=63wlHG6q8?(xF?rG|Xn2*ocY{~S_$
zGdAW>;Cr4?`DZPlH03U$jxL}xtXxEIx0{^(D>{SQnF`LHsy!ysG=1!qY}-#wQY3Pk
z{9Ht3_?;w(H6(KQ%#ZeM@k0xz#9u{J$5oUSBjNw0nKN6Rctc1%-^`S3UsP?1bvkGJ
zS4;o<fWYj`<9Fg_Ju>=eGZz1IPi#&Mj9%1c^p*cV-bd=qYy4vAY`pZwOdC2&BWA0c
zLsef&DQR6yZ;t05zFXmtnkF-NW2s|MF*S54gS(Z*`Mf<P?ZKMFsjWYBvN+3;Q2-pf
zk&tmn%ZbHp7e6+>>69?5_P-X1|9?3$rm|+MU`|=hrs)64v6k6=o0;-|D+i5c%klkY
zt7J))L7JZby^)I7y8M5uu`<*8Ut2meG0Y~!%qX*Xn~wZ5!}Q)G;2(XvY18a2wBa1y
z#2J8msk8rHSKZgqZ{#VhDy_3e8^3_kf8Fk-KCH8+=BMl_*4vBPT+67c>&bxQWmN0+
z_NqP?xPnd=Gz&c}GQDxa5i*Bh^FfyI`l`e0?d5Gn$}0B__9C`(WmWYJSj=8dCEtwd
zTTX4-h+3?invH%)XgR&d&GDxD$jYwuU2#a(j~V7S#zgjQ?<Q-Jwfnh<4~7Y2gze>2
zXK}-H^I$oZN!|^&9p88J-)&YkU3C0j-m2~Ob?urw-KAoIpPZpuUS5^hM7Y0y`Nc-;
z%8I;iv7N2%{9IFx^sv4sF*;CQjmECy91@avo^$$7AG5HQz9X&0`F?q|4T&$|_`WYj
z+(WKav}%WXRxWd$bke`VC}&8&84hicRre*Wogf*`sIi+FK^ne04wCY+u=`+H@fi2j
zwR351YG<R(6gN^@rQE_H({xo-#1@jIFkhjQrOi%Vl4ePrqiV48KzVgcBr6jg4Q`X9
z>di||la^Iftk~^?L`Ebw$Lt9Bqt>DqP6>rcc1-^6RR6*7A;p?GO*U0gAF%5<i-ar^
z%$`ttX^T$h>NzDIR#ARiaozO?U82S9zK0Xfo!Qwb;bWMb=so9$Iy-tkcbfS9pd!U?
zbtGhAVc+yDnRh+E+R!P{0}~lbJ+4-_ZS^6KEl!h3Kd3|4wJrNW-P%h1s!~;XZ?pep
zo=0|!4z+4$Jku>G^2Vb;?0gc~SnOA!D#Lbmn&u%PXSJGkx#hQV(WM9^*bpj2Dbg;I
z@Uq2*s*VUcHX<l_RkQW8JX2mLkqv(7h{@W0p=vG?w$q_%!*&93BUC-&J>)qyWQ^<4
z(3XGy-Ck~5?rP;Td6+)eNl|%UM6!$97TT-{(2>Ka8N*bu9r)(QyOi9n*OGc4>(R54
z*p)K@ftE61sw)y9wULm_xO)Fkvli9sR^x!Qv8K}=6WPbGx#sLrEhH?z>^5nK`Yq96
zYKypjgOEwhN%DL8CoTsIPqNuMHtX4{M^El<4O7o{$T^Vex*JVSul37a>-k^ugIH~C
z!*Z#*Dz%f?zNxMn>?F44`@nFuFwVPrv6F&czJ^M<3lG2VT(ugi+%8%~<2E86b$J)R
zpwCDYQW3z>ms*um0h7uRec6g3v2{6H-P)?sZhZHuqXz6IH2LbNsl12$Gi3|c(Nne@
zs#J}Py{=3vlDIzWZ#b!4Pf@Rq`m|flnuMv=dvMdgo|++Qv3lySJp|2NRolynq5k#M
z(7kx^&EF#j%a&LFdU|6vajbXgaw}#p!wX}qmZ!dYfL(q8EkAH}1lQNY^!!GOdNEB)
zrFIr*JgK$M9^mtRiRLP1AG@x%>Z?ur*u2($J{;(Crh#780z8)F=;uFR1YT>064|>}
z-S)FYSx${Yaok2ua(>ItmHIYW(<q51r=8Jx)j)0APfEHpRQV3FeXTpJavZRGJ0>*L
zx2#eoe-yLgmsH`{GIls;HdKucP>o_6>CH;ttIc=TZ<FN*B$#JPQ>M8SYCF?FT|$s^
zn-UzyVdSOSty<fq$R*G9i=E*${I_{ERuv9X5?j94_urR4y7beCgbmAUF7t!AAj`DI
zYBCZw*CuM;L2eK5QE3mEKd4TpnjYeZK1G|V$V2#=U8zI-UiYTDiG<Io2;K8c8Cs^R
zJY@1%7byyb<CLzjW-9D3)*h-hhwY(`p?&lqWVBst68=cLM$9-n`o6h3ieN}Wz6~km
z_16kh#)b^{<)^HLeS@@PQ=XVeMQ*q}QN32}hIW*s!!I^S^0ZJH{=#l?B&1*#AM?D^
zj&+;oXc8O(4X}h`B30b8UGq|n*!y+5+Pa16h+W4(BxGctwcDaCV~<YOyHCzV`CF#6
zP;-&6t!$y9PjII~faNH%a&9d9;@dypo;d!5jSI{8F*9}QX$$p8LXx_rzHc=7)Y(q8
znvZ;;g+y~L$S_&`xJ%j(_lI(=27A0({OYt+#f}h?zDP*x-S&LHbR}E(uoOpg#UTei
z`p{B!MIvOYA<=bQSjdwKuUTRyCAh@S&vFeDSrYu?Q_)*v=kXmwab3Hl#I=>$B6jn(
z()*@1%eQRqUoe*aD#EU{2h}mjf!(dY_HG=0^R<3LDoD<E{Mbq*Jxa)C84_0p+^Lyp
z`kAKAu<vN4N+A()$B>vXu*aFsD?HmcC6c$+UH=gEI!pFn=dyev_s5ZBmY~*Ztk`W}
zNMy*f?nL^;6ZUF$wc{nxhDpfz!P%F!Emc%ZI1qv51+CRZ3E5#JWUYC5>EMVtL05}w
z5}MsttyRinNMvqfwd6(OS(=r{Jd-|S;hvP?xFMUETE4QB-a`4Evj?d0$7pV=wN*>R
z+Bb`o=5^z?>WWBoZ>tX>-t>BKYJJc&4uhE4g@e^kQgBdxkFz_PwVfJpoLY9HomzgJ
zI-%Wh;ALo=<x3OSti=hJ_D(4uf96X$<o6maRqR>adCi>nzfO>j@#{%S>!gl)Q`NSU
ze(>RDrUdCWrQH)lxsly(ZcR1)isz=$mpHsT>r>~`M}1Sz{IQ^nt~kOizw!N!MWeF(
zGmzhr|3C1-Oy&Pdo;zLD=+h+Ef5;h8{x7lk=8k`+I(3qcgWKY}t4sfqZ;m{)CbH^~
zVoLsAO}+cb5po%PW0R;wki(ALJ@i&~{nOQ1GM*e;S%whYWE>Fkz2r9|@r~4$BJS|x
zl5pv}4!HgN+kk^bI01u$(!xknTIz4STuGoZAdz)%67Sfek<*=}+9+mHs{f~A`5)>1
zjf69c>&IT|=y?jX>yLV|?NYtduaTYVy_C>$@JtKsH<FG^!2SL!(QUXr`~t%WV-Pg-
zM|G0d5ZB)N(DY{5qd$(%zDhq4DN{Q}Bxx{_Lqoepp8Tu9i=$qc7)M$%_g2L&Qm_j2
zR&_2?z2iqXPC{u(`_G<6JAg||WF+msB#DtdQun2<SN~_JGZXKh8EEfkwUi(R|FlDS
zD@1Bqj6PVh_9BI#ef*M{(mED5QsKrFiihlU*)|t=*}UAaQ%;lkJ)hGgey^qd#9ZsO
z%)bAdjqQK*-$q!Yz8}{3>Fo^B_hS)1^-@}W`s)MD@5GPez0u!~U@I)k$w}V?*&AhF
zn72PwTpLpsw%qHl23)2b>eoAE;Fr2D43A2mxM1;&=)4qJxtW6IK)dtAJs~|`fMvx1
z_31KoW77bApgjE3{s-+JRPKqiRAmZm@qv1Qy?!_RZ09w%4{6Pc*3s`BsH$FJr1||j
z`}CVkgD=n`NSQwx>|U$>#TN<reU99|h3={Z`Z%uN^3p@YipA7+o+{KUly9*py;s~7
z+q+C^YdK=9T?a@kl5?bA=4Vyj?C)rQ{A;b0)|yeu{i;0^7f}UYwFf3XDj#I$-;;By
z`&D~|V0rG`u4nfysFz=^ZaT-UM8D)^^<$uovS%2&azOZ-_}9ZHS9h;+c(RmoyJpXr
zs#IP5MEQdG{i4t8dHg7WDvY-O+hO{zmgk*WopQwqM`X(3ddMbRSU<xt>nC>~-lbuF
zxHwVjZk=wv_f<b(&2SWDKX0~(ZR*}Ndj?yVZ7T6~UCkpZ`c*_7xJ|V;)SnG?k*LTY
z5LN7>X6eM>JSCp(`+4Puoz=q^4CGyk%=Mmw+ofz-`ND|zD$fmjhN!bu^}e8Tz{j!;
zJ<qqf!Mn(*5+5^Woi%gmBi;+}?r65=(f&lY0@5=<mFdB+*Fpz-obZ32n|B%IO$<u2
zd;Fx4C1M)u_WK@Q_F-_J+rf)@mm1!`)9G?o+5{w-#=9ILU-u~czDZ9L`Lx@Fh6FT4
y({PVm(<&U#bY9P{$Odb#-QaGLwW)5|+ssy1?z!66&Kc(VqW9WTpIsNX`@aAp!$7tG

diff --git a/package.json b/package.json
index bf87f6f..5eeb5a2 100644
--- a/package.json
+++ b/package.json
@@ -16,6 +16,7 @@
   "dependencies": {
     "@aws-sdk/client-s3": "^3.953.0",
     "@aws-sdk/s3-request-presigner": "^3.953.0",
+    "@clerk/backend": "^3.12.0",
     "@libsql/client": "^0.15.15",
     "@motionone/solid": "^10.16.4",
     "@solidjs/meta": "^0.29.4",
@@ -57,6 +58,7 @@
     "motion": "^12.23.26",
     "solid-js": "^1.9.5",
     "solid-tiptap": "^0.8.0",
+    "svix": "^1.98.0",
     "ua-parser-js": "^2.0.7",
     "uuid": "^13.0.0",
     "vinxi": "^0.5.7",
diff --git a/src/env/server.ts b/src/env/server.ts
index 879a5a0..a5ea05d 100644
--- a/src/env/server.ts
+++ b/src/env/server.ts
@@ -56,7 +56,16 @@ const serverEnvSchema = z.object({
   REDIS_URL: z.string().min(1),
   NESSA_DB_URL: z.string().min(1),
   NESSA_DB_TOKEN: z.string().min(1),
-  NESSA_JWT_SECRET: z.string().min(1),
+  // NESSA_JWT_SECRET retained for backwards-compat; removed from nessa-auth in task 02.
+  // Delete in task 11 once all other references are gone.
+  NESSA_JWT_SECRET: z.string().min(1).optional(),
+  // Clerk authentication
+  NESSA_CLERK_SECRET: z.string().min(1),
+  NESSA_CLERK_JWT_ISSUER: z.string().min(1),
+  // Clerk webhook signing secret (Svix). Used to verify `user.created` /
+  // `user.updated` webhook payloads. Find it under Clerk Dashboard →
+  // Webhooks → your endpoint → Signing Secret (starts with `whsec_`).
+  NESSA_CLERK_WEBHOOK_SECRET: z.string().min(1),
   LINEAGE_JWT_SECRET: z.string().min(32),
   APPLE_CLIENT_ID_NESSA: z.string().min(1).optional(),
   APPLE_CLIENT_ID_LINEAGE: z.string().min(1).optional(),
@@ -167,7 +176,10 @@ export const getMissingEnvVars = (): string[] => {
     "REDIS_URL",
     "NESSA_DB_URL",
     "NESSA_DB_TOKEN",
-    "NESSA_JWT_SECRET",
+    // NESSA_JWT_SECRET moved to optional — removed from nessa-auth in task 02
+    "NESSA_CLERK_SECRET",
+    "NESSA_CLERK_JWT_ISSUER",
+    "NESSA_CLERK_WEBHOOK_SECRET",
     "LINEAGE_JWT_SECRET"
   ];
 
diff --git a/src/routes/api/clerk-webhook.ts b/src/routes/api/clerk-webhook.ts
new file mode 100644
index 0000000..8dae5a8
--- /dev/null
+++ b/src/routes/api/clerk-webhook.ts
@@ -0,0 +1,52 @@
+import type { APIEvent } from "@solidjs/start/server";
+import { env } from "~/env/server";
+import { NessaConnectionFactory } from "~/server/database";
+import { handleClerkUserWebhook } from "~/server/clerk-user-webhook";
+
+function json(status: number, body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "Content-Type": "application/json" }
+  });
+}
+
+/**
+ * Clerk webhook endpoint — receives `user.created` / `user.updated` events.
+ *
+ * Configure the endpoint URL in the Clerk Dashboard → Webhooks
+ * (e.g. https://freno.me/api/clerk-webhook in prod, or an ngrok/dev url for
+ * local dev). The signing secret (`whsec_...`) is stored in
+ * `NESSA_CLERK_WEBHOOK_SECRET` and used to verify each request via Svix.
+ *
+ * The raw body is read verbatim from the inflight request so the Svix
+ * signature is computed over the exact bytes Clerk sent.
+ */
+export async function POST(event: APIEvent) {
+  const svixId = event.request.headers.get("svix-id");
+  const svixTimestamp = event.request.headers.get("svix-timestamp");
+  const svixSignature = event.request.headers.get("svix-signature");
+
+  if (!svixId || !svixTimestamp || !svixSignature) {
+    return json(400, { error: "Missing Svix signature headers" });
+  }
+
+  let rawBody: string;
+  try {
+    rawBody = await event.request.text();
+  } catch {
+    return json(400, { error: "Missing request body" });
+  }
+
+  const result = await handleClerkUserWebhook({
+    rawBody,
+    headers: {
+      "svix-id": svixId,
+      "svix-timestamp": svixTimestamp,
+      "svix-signature": svixSignature
+    },
+    webhookSecret: env.NESSA_CLERK_WEBHOOK_SECRET,
+    conn: NessaConnectionFactory()
+  });
+
+  return json(result.status, result.body);
+}
diff --git a/src/server/api/routers/lineage/auth.test.ts b/src/server/api/routers/lineage/auth.test.ts
index 0d790b7..01b13a9 100644
--- a/src/server/api/routers/lineage/auth.test.ts
+++ b/src/server/api/routers/lineage/auth.test.ts
@@ -50,7 +50,10 @@ mock.module("~/env/server", () => ({
     TURSO_LINEAGE_TOKEN: "test-token",
     TURSO_DB_API_TOKEN: "test-token",
     NESSA_DB_URL: "libsql://nessa-test.turso.io",
-    NESSA_DB_TOKEN: "test-token"
+    NESSA_DB_TOKEN: "test-token",
+    // Clerk env vars (required after migration in task 02)
+    NESSA_CLERK_SECRET: "sk_test_test-secret",
+    NESSA_CLERK_JWT_ISSUER: "https://nessa-test.clerk.accounts.dev"
   },
   validateServerEnv: () => ({}),
   isMissingEnvVar: () => false,
diff --git a/src/server/api/routers/nessa-community-authz.test.ts b/src/server/api/routers/nessa-community-authz.test.ts
index bd81684..3af514e 100644
--- a/src/server/api/routers/nessa-community-authz.test.ts
+++ b/src/server/api/routers/nessa-community-authz.test.ts
@@ -201,3 +201,78 @@ describe("p8-003: join then allowed / leave then blocked (integration)", () => {
     expect(await errCode(requireClubMembership(conn, clubId, USER_B))).toBe("FORBIDDEN");
   });
 });
+
+// ---------------------------------------------------------------------------
+// Clerk session → local users.id resolution (migrate-to-clerk-auth-03)
+//
+// `createTRPCContext` verifies a Clerk session JWT (`verifyNessaToken`)
+// and resolves `ctx.nessaUserId` by looking up `users.id` via the indexed
+// `clerkUserId` column.  These tests exercise that lookup path against an
+// in-memory SQLite DB so the contract is guaranteed:
+//   - seeded row with matching clerkUserId → local id resolved
+//   - missing local row → UNAUTHORIZED
+//   - the resolved id is the LOCAL users.id, never the Clerk sub
+// ---------------------------------------------------------------------------
+
+const CLERK_USER_ID = "user_test_abc123";
+const LOCAL_USER_A = "local-user-a";
+const LOCAL_USER_B = "local-user-b";
+
+function initUsersTable() {
+  db.run(`CREATE TABLE IF NOT EXISTS users (
+    id TEXT PRIMARY KEY,
+    email TEXT,
+    clerkUserId TEXT
+  )`);
+  db.run(`CREATE INDEX IF NOT EXISTS idx_users_clerkUserId ON users(clerkUserId)`);
+}
+
+async function resolveLocalUserId(clerkUserId: string): Promise<string | null> {
+  const result = await conn.execute({
+    sql: "SELECT id FROM users WHERE clerkUserId = ?",
+    args: [clerkUserId]
+  });
+  if (result.rows.length === 0) return null;
+  return (result.rows[0] as { id: string }).id;
+}
+
+describe("clerkUserId lookup (migrate-to-clerk-auth-03)", () => {
+  beforeAll(() => {
+    initUsersTable();
+  });
+
+  beforeEach(() => {
+    db.run("DELETE FROM users");
+  });
+
+  it("resolves local users.id for a seeded clerkUserId", async () => {
+    db.run(
+      "INSERT INTO users (id, email, clerkUserId) VALUES (?, ?, ?)",
+      [LOCAL_USER_A, "a@nessa.app", CLERK_USER_ID]
+    );
+    expect(await resolveLocalUserId(CLERK_USER_ID)).toBe(LOCAL_USER_A);
+  });
+
+  it("returns null when no local row matches the clerkUserId", async () => {
+    // No users seeded — the webhook (task 04) has not run yet.
+    expect(await resolveLocalUserId(CLERK_USER_ID)).toBeNull();
+  });
+
+  it("returns null for a Clerk id that exists but maps to a different local user", async () => {
+    db.run(
+      "INSERT INTO users (id, email, clerkUserId) VALUES (?, ?, ?)",
+      [LOCAL_USER_B, "b@nessa.app", "user_test_other"]
+    );
+    expect(await resolveLocalUserId(CLERK_USER_ID)).toBeNull();
+  });
+
+  it("ctx.nessaUserId is the LOCAL id, never the Clerk sub", async () => {
+    db.run(
+      "INSERT INTO users (id, email, clerkUserId) VALUES (?, ?, ?)",
+      [LOCAL_USER_A, "a@nessa.app", CLERK_USER_ID]
+    );
+    const resolved = await resolveLocalUserId(CLERK_USER_ID);
+    expect(resolved).toBe(LOCAL_USER_A);
+    expect(resolved).not.toBe(CLERK_USER_ID);
+  });
+});
diff --git a/src/server/api/routers/nessa-google-oauth.test.ts b/src/server/api/routers/nessa-google-oauth.test.ts
deleted file mode 100644
index 761927a..0000000
--- a/src/server/api/routers/nessa-google-oauth.test.ts
+++ /dev/null
@@ -1,315 +0,0 @@
-/**
- * Google OAuth ID-token verification tests
- * Regression tests for p8-009: replace deprecated `tokeninfo` endpoint with
- * `google-auth-library` `verifyIdToken` and enforce the `aud` (audience) claim
- * against `env.GOOGLE_CLIENT_ID`.
- *
- * These tests mock `google-auth-library`'s `OAuth2Client.verifyIdToken` so we
- * can simulate the three verification outcomes the real library produces:
- *   - token minted for a different audience → verifyIdToken throws
- *   - tampered / malformed / expired token      → verifyIdToken throws
- *   - valid token with correct audience + email → returns a payload
- *
- * The mocked `verifyIdToken` itself enforces the audience check (just like the
- * real library), so a token carrying the wrong `aud` claim is rejected at the
- * verification layer — before any Nessa DB query runs.
- */
-
-import { describe, it, expect, mock, beforeEach } from "bun:test";
-
-// ─── The iOS app's Google client ID (audience the server must accept) ─────────
-const GOOGLE_CLIENT_ID =
-  "test-ios-client-id.apps.googleusercontent.com";
-
-// ─── env mock (registered before importing ./nessa) ─────────────────────────
-// nessa.ts imports `env` from ~/env/server at module load via nessa-auth /
-// db-connections, and the SSR guard would throw under bun without this mock.
-mock.module("~/env/server", () => ({
-  env: {
-    GOOGLE_CLIENT_ID,
-    NESSA_JWT_SECRET: "test-jwt-secret",
-    NESSA_DB_URL: "libsql://nessa-test.turso.io",
-    NESSA_DB_TOKEN: "test-token",
-    TURSO_DB_URL: "libsql://test.turso.io",
-    TURSO_DB_TOKEN: "test-token",
-    TURSO_LINEAGE_URL: "libsql://lineage-test.turso.io",
-    TURSO_LINEAGE_TOKEN: "test-token",
-    TURSO_DB_API_TOKEN: "test-token",
-    NODE_ENV: "test"
-  },
-  validateServerEnv: () => ({}),
-  isMissingEnvVar: () => false,
-  getMissingEnvVars: () => []
-}));
-
-// ─── DB mock: NessaConnectionFactory returns a controllable mock conn ─────────
-const executeMock = mock(async (_req?: unknown) => ({
-  rows: [],
-  rowsAffected: 0,
-  lastInsertRowid: 0n
-})) as unknown as ReturnType<typeof mock>;
-
-mock.module("~/server/database", () => ({
-  // Connection factories return a controllable mock conn so googleSignIn's
-  // upsert queries never hit the network.
-  NessaConnectionFactory: () => ({ execute: executeMock }),
-  ConnectionFactory: () => ({ execute: executeMock }),
-  LineageConnectionFactory: () => ({ execute: executeMock }),
-  PerUserDBConnectionFactory: (_dbName: string, _token: string) => ({ execute: executeMock }),
-  // Stubbed-no-op re-exports consumed by ~/server/utils.
-  LineageDBInit: async () => {},
-  dumpAndSendDB: async () => {},
-  getUserBasicInfo: async () => ({ id: "", email: null })
-}));
-
-// ─── google-auth-library mock ────────────────────────────────────────────────
-// verifyIdToken is wired to `verifyImpl` which each test swaps out. The
-// default impl mirrors the real library: it throws when the token's `aud`
-// claim !== the configured audience, and otherwise returns a Ticket whose
-// getPayload() yields the decoded payload.
-type VerifyOpts = { idToken: string; audience: string };
-interface FakeTicket {
-  getPayload(): Record<string, unknown> | undefined;
-}
-type VerifyImpl = (opts: VerifyOpts) => Promise<FakeTicket>;
-
-let verifyImpl: VerifyImpl;
-
-class MockOAuth2Client {
-  constructor(public clientId: string) {}
-  async verifyIdToken(opts: VerifyOpts): Promise<FakeTicket> {
-    return verifyImpl(opts);
-  }
-}
-
-const OAuth2ClientConstructor = mock((_clientId: string) => new MockOAuth2Client(_clientId));
-
-mock.module("google-auth-library", () => ({
-  OAuth2Client: OAuth2ClientConstructor
-}));
-
-// ─── nessa-auth mock (signNessaToken is a real-ish no-op) ────────────────────
-const signNessaTokenMock = mock(async (userId: string) => `signed-jwt-${userId}`);
-mock.module("~/server/nessa-auth", () => ({
-  signNessaToken: signNessaTokenMock,
-  verifyNessaToken: mock(async () => ({ sub: "u" })),
-  NESSA_JWT_EXPIRY: "30d"
-}));
-
-// ─── helpers ─────────────────────────────────────────────────────────────────
-function validPayload(overrides: Record<string, unknown> = {}): Record<string, unknown> {
-  return {
-    iss: "accounts.google.com",
-    sub: "google-sub-123",
-    email: "user@example.com",
-    email_verified: true,
-    name: "Test User",
-    given_name: "Test",
-    family_name: "User",
-    picture: "https://img.example.com/me.png",
-    aud: GOOGLE_CLIENT_ID,
-    azp: GOOGLE_CLIENT_ID,
-    iat: Math.floor(Date.now() / 1000),
-    exp: Math.floor(Date.now() / 1000) + 3600,
-    ...overrides
-  };
-}
-
-// A realistic verifyImpl: rejects wrong audience / tampered tokens, returns
-// the payload otherwise. `idToken` is an opaque string in tests, so behaviour
-// is driven by `overrides` + whether the token "looks tampered".
-function makeVerifyImpl(
-  payloadOverrides: Record<string, unknown> = {}
-): VerifyImpl {
-  return async (opts) => {
-    // Real google-auth-library throws when aud !== configured audience.
-    const payload = validPayload(payloadOverrides);
-    if (payload.aud !== opts.audience) {
-      throw new Error("Token was issued for a different audience");
-    }
-    return { getPayload: () => payload };
-  };
-}
-
-// ─── test setup ─────────────────────────────────────────────────────────────
-let nessaDbRouter: any;
-
-beforeEach(async () => {
-  executeMock.mockReset();
-  executeMock.mockImplementation(async () => ({
-    rows: [],
-    rowsAffected: 0,
-    lastInsertRowid: 0n
-  }));
-  signNessaTokenMock.mockReset();
-  signNessaTokenMock.mockImplementation(async (userId: string) => `signed-jwt-${userId}`);
-  OAuth2ClientConstructor.mockReset();
-  OAuth2ClientConstructor.mockImplementation((_clientId: string) => new MockOAuth2Client(_clientId));
-  verifyImpl = makeVerifyImpl();
-
-  const mod = await import("./nessa");
-  nessaDbRouter = mod.nessaDbRouter;
-});
-
-function caller() {
-  // googleSignIn is a publicProcedure → no auth context required.
-  return nessaDbRouter.createCaller({} as any);
-}
-
-// ─── tests ──────────────────────────────────────────────────────────────────
-
-describe("googleSignIn: audience enforcement (p8-009)", () => {
-  it("constructs OAuth2Client with env.GOOGLE_CLIENT_ID", async () => {
-    await caller().mutation("googleSignIn", {
-      idToken: "valid-id-token",
-      email: "user@example.com"
-    }).catch(() => {});
-
-    expect(OAuth2ClientConstructor).toHaveBeenCalledWith(GOOGLE_CLIENT_ID);
-  });
-
-  it("calls verifyIdToken with the id token AND env.GOOGLE_CLIENT_ID as audience", async () => {
-    let captured: VerifyOpts | null = null;
-    const spyImpl: VerifyImpl = async (opts) => {
-      captured = opts;
-      return { getPayload: () => validPayload() };
-    };
-    verifyImpl = spyImpl;
-
-    await caller().mutation("googleSignIn", {
-      idToken: "valid-id-token",
-      email: "user@example.com"
-    }).catch(() => {});
-
-    expect(captured).toEqual({
-      idToken: "valid-id-token",
-      audience: GOOGLE_CLIENT_ID
-    });
-  });
-
-  it("rejects a token minted for a DIFFERENT client ID (aud mismatch → UNAUTHORIZED)", async () => {
-    // verifyImpl enforces aud === opts.audience; payload carries a foreign aud.
-    verifyImpl = makeVerifyImpl({ aud: "other-client-id.apps.googleusercontent.com" });
-
-    await expect(
-      caller().mutation("googleSignIn", {
-        idToken: "token-for-different-audience",
-        email: "user@example.com"
-      })
-    ).rejects.toThrow(/UNAUTHORIZED|Invalid Google ID token/i);
-
-    // No DB writes should happen on a failed verification.
-    expect(executeMock).not.toHaveBeenCalled();
-  });
-
-  it("rejects a tampered / malformed ID token (verifyIdToken throws → UNAUTHORIZED)", async () => {
-    verifyImpl = async () => {
-      throw new Error("Verification failed: signature mismatch");
-    };
-
-    await expect(
-      caller().mutation("googleSignIn", {
-        idToken: "tampered.id.token",
-        email: "user@example.com"
-      })
-    ).rejects.toThrow(/UNAUTHORIZED|Invalid Google ID token/i);
-
-    expect(executeMock).not.toHaveBeenCalled();
-  });
-
-  it("rejects an expired token (verifyIdToken throws → UNAUTHORIZED)", async () => {
-    verifyImpl = async () => {
-      throw new Error("Token used too late, 1716000000 > 1715000000");
-    };
-
-    await expect(
-      caller().mutation("googleSignIn", {
-        idToken: "expired-id-token",
-        email: "user@example.com"
-      })
-    ).rejects.toThrow(/UNAUTHORIZED|Invalid Google ID token/i);
-  });
-
-  it("rejects a token whose email is not verified", async () => {
-    verifyImpl = makeVerifyImpl({
-      email: "unverified@example.com",
-      email_verified: false
-    });
-
-    await expect(
-      caller().mutation("googleSignIn", {
-        idToken: "valid-id-token",
-        email: "unverified@example.com"
-      })
-    ).rejects.toThrow(/UNAUTHORIZED|not verified/i);
-  });
-
-  it("accepts a valid token with correct audience + verified email, upserting the user", async () => {
-    const userIdReturned = "new-user-uuid";
-    executeMock.mockImplementation(async (req?: unknown) => {
-      const r = req as { sql?: string } | undefined;
-      // First query: existingByGoogle → empty (no existing user).
-      if (r?.sql?.includes("SELECT userId FROM authProviders")) {
-        return { rows: [], rowsAffected: 0, lastInsertRowid: 0n } as any;
-      }
-      if (r?.sql?.includes("SELECT id FROM users WHERE email")) {
-        return { rows: [], rowsAffected: 0, lastInsertRowid: 0n } as any;
-      }
-      // INSERTs/UPDATEs → return a synthetic row id so the upsert path can complete.
-      return { rows: [{ id: userIdReturned }], rowsAffected: 1, lastInsertRowid: 0n } as any;
-    });
-
-    const result = await caller().mutation("googleSignIn", {
-      idToken: "valid-id-token",
-      email: "user@example.com",
-      firstName: "Test",
-      lastName: "User"
-    });
-
-    expect(result.success).toBe(true);
-    expect(result.userId).toBeDefined();
-    // signNessaToken was called with the resolved userId → a session JWT issued.
-    expect(signNessaTokenMock).toHaveBeenCalled();
-    // The Google `sub` (stable Google user ID) was used as providerUserId.
-    const insertCalls = (executeMock.mock.calls as unknown[]).map(
-      (c) => (c[0] as { sql?: string; args?: unknown[] })?.sql
-    );
-    expect(
-      insertCalls.some(
-        (sql) =>
-          typeof sql === "string" &&
-          sql.includes("INSERT INTO authProviders") &&
-          // google-sub-123 is the payload.sub from validPayload()
-          (executeMock.mock.calls.some(
-            (c) =>
-              Array.isArray((c[0] as any)?.args) &&
-              ((c[0] as any).args as unknown[]).includes("google-sub-123")
-          ))
-      )
-    ).toBe(true);
-  });
-});
-
-// ─── static audit: the migration is complete in source ──────────────────────
-
-describe("static audit: deprecated tokeninfo removed, verifyIdToken present", () => {
-  it("no tokeninfo fetch URL remains in nessa.ts", async () => {
-    const source = await Bun.file(import.meta.dir + "/nessa.ts").text();
-    expect(source.includes("oauth2.googleapis.com/tokeninfo")).toBe(false);
-    expect(source.toLowerCase().includes("tokeninfo")).toBe(false);
-  });
-
-  it("verifyIdToken with audience is used in googleSignIn", async () => {
-    const source = await Bun.file(import.meta.dir + "/nessa.ts").text();
-    expect(source.includes("verifyIdToken")).toBe(true);
-    expect(source.includes("audience: env.GOOGLE_CLIENT_ID")).toBe(true);
-  });
-
-  it("GOOGLE_CLIENT_ID is required (non-optional) in env schema", async () => {
-    const source = await Bun.file(
-      import.meta.dir + "/../../../env/server.ts"
-    ).text();
-    expect(/^\s*GOOGLE_CLIENT_ID:\s*z\.string\(\)\.min\(1\)\s*,?\s*$/m.test(source)).toBe(true);
-    expect(/^\s*GOOGLE_CLIENT_ID:.*optional/m.test(source)).toBe(false);
-  });
-});
diff --git a/src/server/api/routers/nessa-ownership.test.ts b/src/server/api/routers/nessa-ownership.test.ts
index 19f1a90..e4ed7b3 100644
--- a/src/server/api/routers/nessa-ownership.test.ts
+++ b/src/server/api/routers/nessa-ownership.test.ts
@@ -23,7 +23,10 @@ mock.module("~/env/server", () => ({
     TURSO_LINEAGE_URL: "libsql://lineage-test.turso.io",
     TURSO_LINEAGE_TOKEN: "test-token",
     TURSO_DB_API_TOKEN: "test-token",
-    NODE_ENV: "test"
+    NODE_ENV: "test",
+    // Clerk env vars (required after migration in task 02)
+    NESSA_CLERK_SECRET: "sk_test_test-secret",
+    NESSA_CLERK_JWT_ISSUER: "https://nessa-test.clerk.accounts.dev"
   },
   validateServerEnv: () => ({}),
   isMissingEnvVar: () => false,
diff --git a/src/server/api/routers/nessa.ts b/src/server/api/routers/nessa.ts
index 6e618a9..7acf7d9 100644
--- a/src/server/api/routers/nessa.ts
+++ b/src/server/api/routers/nessa.ts
@@ -1,13 +1,8 @@
-import { createTRPCRouter, nessaProcedure, publicProcedure } from "../utils";
+import { createTRPCRouter, nessaProcedure } from "../utils";
 import { z } from "zod";
 import { TRPCError } from "@trpc/server";
-import { jwtVerify, importJWK } from "jose";
-import { OAuth2Client } from "google-auth-library";
-import { env } from "~/env/server";
 import { NessaConnectionFactory } from "~/server/database";
 import { cache } from "~/server/cache";
-import { hashPassword, checkPasswordSafe } from "~/server/utils";
-import { signNessaToken } from "~/server/nessa-auth";
 import type { Client } from "@libsql/client/web";
 
 const NESSA_CACHE_TTL_MS = 5 * 60 * 1000;
@@ -244,45 +239,6 @@ const bulkSchema = z.object({
   authProviders: z.array(providerSchema).optional()
 });
 
-const registerSchema = z.object({
-  email: z.string().email(),
-  password: z.string().min(8),
-  firstName: z.string().min(1),
-  lastName: z.string().min(1)
-});
-
-const loginSchema = z.object({
-  email: z.string().email(),
-  password: z.string().min(1)
-});
-
-const googleSignInSchema = z.object({
-  idToken: z.string().min(1),
-  email: z.string().email().optional(),
-  firstName: z.string().optional(),
-  lastName: z.string().optional()
-});
-
-const appleSignInSchema = z.object({
-  idToken: z.string().min(1),
-  email: z.string().email().optional(),
-  firstName: z.string().optional(),
-  lastName: z.string().optional(),
-  appleUserId: z.string().min(1)
-});
-
-interface AppleTokenPayload {
-  iss: string;
-  aud: string;
-  exp: number;
-  iat: number;
-  sub: string;
-  email?: string;
-  email_verified?: boolean | string;
-  is_private_email?: boolean | string;
-  real_user_status?: number;
-}
-
 export const nessaDbRouter = createTRPCRouter({
   health: nessaProcedure.query(async () => {
     try {
@@ -298,603 +254,6 @@ export const nessaDbRouter = createTRPCRouter({
     }
   }),
 
-  register: publicProcedure
-    .input(registerSchema)
-    .mutation(async ({ input }) => {
-      try {
-        const conn = NessaConnectionFactory();
-        const existing = await conn.execute({
-          sql: "SELECT id FROM users WHERE email = ?",
-          args: [input.email]
-        });
-
-        if (existing.rows.length) {
-          throw new TRPCError({
-            code: "CONFLICT",
-            message: "Email already registered"
-          });
-        }
-
-        const userId = crypto.randomUUID();
-        const passwordHash = await hashPassword(input.password);
-        await conn.execute({
-          sql: `INSERT INTO users (id, email, emailVerified, firstName, lastName, displayName, provider, status, updatedAt)
-                VALUES (?, ?, ?, ?, ?, ?, ?, ?, datetime('now'))`,
-          args: [
-            userId,
-            input.email,
-            0,
-            input.firstName,
-            input.lastName,
-            `${input.firstName} ${input.lastName}`.trim(),
-            "email",
-            "active"
-          ]
-        });
-        await conn.execute({
-          sql: "INSERT INTO authProviders (id, userId, provider, providerUserId, email, displayName, avatarUrl) VALUES (?, ?, ?, ?, ?, ?, ?)",
-          args: [
-            crypto.randomUUID(),
-            userId,
-            "email",
-            null,
-            input.email,
-            null,
-            null
-          ]
-        });
-        await conn.execute({
-          sql: "INSERT INTO authProviders (id, userId, provider, providerUserId, email, displayName, avatarUrl) VALUES (?, ?, ?, ?, ?, ?, ?)",
-          args: [
-            crypto.randomUUID(),
-            userId,
-            "password",
-            passwordHash,
-            input.email,
-            null,
-            null
-          ]
-        });
-        await conn.execute({
-          sql: "INSERT INTO workoutPlans (id, userId, name, category, difficulty, type, isPublic) VALUES (?, ?, ?, ?, ?, ?, ?)",
-          args: [
-            crypto.randomUUID(),
-            userId,
-            "Getting Started",
-            "strength",
-            "beginner",
-            "strength",
-            0
-          ]
-        });
-
-        const token = await signNessaToken(userId);
-        return { success: true, token, userId };
-      } catch (error) {
-        if (error instanceof TRPCError) {
-          throw error;
-        }
-        console.error("Failed to register Nessa user:", error);
-        throw new TRPCError({
-          code: "INTERNAL_SERVER_ERROR",
-          message: "Failed to register user"
-        });
-      }
-    }),
-
-  login: publicProcedure.input(loginSchema).mutation(async ({ input }) => {
-    try {
-      const conn = NessaConnectionFactory();
-      const result = await conn.execute({
-        sql: "SELECT userId, email, provider, providerUserId FROM authProviders WHERE email = ? AND provider IN ('email', 'password')",
-        args: [input.email]
-      });
-
-      if (!result.rows.length) {
-        throw new TRPCError({
-          code: "UNAUTHORIZED",
-          message: "Invalid credentials"
-        });
-      }
-
-      const rows = result.rows as Array<{
-        userId: string;
-        email: string | null;
-        provider: string;
-        providerUserId: string | null;
-      }>;
-      const emailProvider = rows.find((row) => row.provider === "email");
-      const passwordProvider = rows.find((row) => row.provider === "password");
-
-      if (emailProvider?.userId !== passwordProvider?.userId) {
-        throw new TRPCError({
-          code: "UNAUTHORIZED",
-          message: "Invalid credentials"
-        });
-      }
-
-      if (!emailProvider || !passwordProvider) {
-        throw new TRPCError({
-          code: "UNAUTHORIZED",
-          message: "Invalid credentials"
-        });
-      }
-
-      const matches = await checkPasswordSafe(
-        input.password,
-        passwordProvider.providerUserId
-      );
-      if (!matches) {
-        throw new TRPCError({
-          code: "UNAUTHORIZED",
-          message: "Invalid credentials"
-        });
-      }
-
-      const token = await signNessaToken(emailProvider.userId);
-      await conn.execute({
-        sql: "UPDATE users SET lastLoginAt = datetime('now'), updatedAt = datetime('now') WHERE id = ?",
-        args: [emailProvider.userId]
-      });
-
-      return { success: true, token, userId: emailProvider.userId };
-    } catch (error) {
-      if (error instanceof TRPCError) {
-        throw error;
-      }
-      console.error("Failed to login Nessa user:", error);
-      throw new TRPCError({
-        code: "INTERNAL_SERVER_ERROR",
-        message: "Failed to login"
-      });
-    }
-  }),
-
-  googleSignIn: publicProcedure
-    .input(googleSignInSchema)
-    .mutation(async ({ input }) => {
-      try {
-        const client = new OAuth2Client(env.GOOGLE_CLIENT_ID);
-        let ticket;
-        try {
-          // verifyIdToken fetches Google's JWKS and verifies the signature
-          // locally — the token is sent in the POST body, never in a URL query
-          // string (unlike the deprecated HTTP lookup endpoint). audience ===
-          // env.GOOGLE_CLIENT_ID enforces the `aud` claim so a token minted for
-          // a different OAuth client (or a tampered/expired token) is rejected.
-          ticket = await client.verifyIdToken({
-            idToken: input.idToken,
-            audience: env.GOOGLE_CLIENT_ID
-          });
-        } catch (verifyErr) {
-          // Signature failure, wrong audience, expired token, malformed JWT —
-          // all surface as a thrown Error from verifyIdToken. Map every
-          // verification failure to UNAUTHORIZED so the caller cannot tell
-          // signature vs audience vs expiry apart (avoid leaking which check
-          // failed).
-          throw new TRPCError({
-            code: "UNAUTHORIZED",
-            message: "Invalid Google ID token"
-          });
-        }
-        const tokenPayload = ticket.getPayload();
-
-        if (!tokenPayload) {
-          throw new TRPCError({
-            code: "UNAUTHORIZED",
-            message: "Invalid Google ID token"
-          });
-        }
-
-        // Validate the issuer (verifyIdToken already checks this, but we
-        // assert explicitly for defense-in-depth).
-        if (
-          tokenPayload.iss !== "accounts.google.com" &&
-          tokenPayload.iss !== "https://accounts.google.com"
-        ) {
-          throw new TRPCError({
-            code: "UNAUTHORIZED",
-            message: "Invalid token issuer"
-          });
-        }
-
-        // Email must be verified for email-based account linking.
-        // google-auth-library's verified TokenPayload types email_verified
-        // as a boolean (true when verified).
-        const emailVerified = tokenPayload.email_verified === true;
-        if (tokenPayload.email && !emailVerified) {
-          throw new TRPCError({
-            code: "UNAUTHORIZED",
-            message: "Google email is not verified"
-          });
-        }
-
-        const googleUserId = tokenPayload.sub;
-        const email = tokenPayload.email ?? input.email;
-        const firstName =
-          tokenPayload.given_name ?? input.firstName ?? "Google";
-        const lastName = tokenPayload.family_name ?? input.lastName ?? "User";
-        const displayName =
-          tokenPayload.name ?? `${firstName} ${lastName}`.trim();
-        const avatarUrl = tokenPayload.picture ?? null;
-
-        const conn = NessaConnectionFactory();
-
-        // Check if user exists by Google provider ID
-        const existingByGoogle = await conn.execute({
-          sql: "SELECT userId FROM authProviders WHERE provider = 'google' AND providerUserId = ?",
-          args: [googleUserId]
-        });
-
-        let userId: string;
-
-        if (existingByGoogle.rows.length > 0) {
-          // User exists with Google account - log them in
-          userId = existingByGoogle.rows[0].userId as string;
-          await conn.execute({
-            sql: "UPDATE users SET lastLoginAt = datetime('now'), updatedAt = datetime('now') WHERE id = ?",
-            args: [userId]
-          });
-        } else if (email) {
-          // Check if user exists by email
-          const existingByEmail = await conn.execute({
-            sql: "SELECT id FROM users WHERE email = ?",
-            args: [email]
-          });
-
-          if (existingByEmail.rows.length > 0) {
-            // User exists with email - link Google account
-            userId = existingByEmail.rows[0].id as string;
-            await conn.execute({
-              sql: "INSERT INTO authProviders (id, userId, provider, providerUserId, email, displayName, avatarUrl) VALUES (?, ?, ?, ?, ?, ?, ?)",
-              args: [
-                crypto.randomUUID(),
-                userId,
-                "google",
-                googleUserId,
-                email,
-                displayName,
-                avatarUrl
-              ]
-            });
-            await conn.execute({
-              sql: "UPDATE users SET provider = 'google', lastLoginAt = datetime('now'), updatedAt = datetime('now') WHERE id = ?",
-              args: [userId]
-            });
-          } else {
-            // Create new user with Google account
-            userId = crypto.randomUUID();
-            await conn.execute({
-              sql: `INSERT INTO users (id, email, emailVerified, firstName, lastName, displayName, avatarUrl, provider, status, updatedAt)
-                    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, datetime('now'))`,
-              args: [
-                userId,
-                email,
-                tokenPayload.email_verified ? 1 : 0,
-                firstName,
-                lastName,
-                displayName,
-                avatarUrl,
-                "google",
-                "active"
-              ]
-            });
-            await conn.execute({
-              sql: "INSERT INTO authProviders (id, userId, provider, providerUserId, email, displayName, avatarUrl) VALUES (?, ?, ?, ?, ?, ?, ?)",
-              args: [
-                crypto.randomUUID(),
-                userId,
-                "google",
-                googleUserId,
-                email,
-                displayName,
-                avatarUrl
-              ]
-            });
-            // Create default workout plan for new user
-            await conn.execute({
-              sql: "INSERT INTO workoutPlans (id, userId, name, category, difficulty, type, isPublic) VALUES (?, ?, ?, ?, ?, ?, ?)",
-              args: [
-                crypto.randomUUID(),
-                userId,
-                "Getting Started",
-                "strength",
-                "beginner",
-                "strength",
-                0
-              ]
-            });
-          }
-        } else {
-          // No email available - create user without email
-          userId = crypto.randomUUID();
-          await conn.execute({
-            sql: `INSERT INTO users (id, email, emailVerified, firstName, lastName, displayName, avatarUrl, provider, status, updatedAt)
-                  VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, datetime('now'))`,
-            args: [
-              userId,
-              null,
-              0,
-              firstName,
-              lastName,
-              displayName,
-              avatarUrl,
-              "google",
-              "active"
-            ]
-          });
-          await conn.execute({
-            sql: "INSERT INTO authProviders (id, userId, provider, providerUserId, email, displayName, avatarUrl) VALUES (?, ?, ?, ?, ?, ?, ?)",
-            args: [
-              crypto.randomUUID(),
-              userId,
-              "google",
-              googleUserId,
-              null,
-              displayName,
-              avatarUrl
-            ]
-          });
-          // Create default workout plan for new user
-          await conn.execute({
-            sql: "INSERT INTO workoutPlans (id, userId, name, category, difficulty, type, isPublic) VALUES (?, ?, ?, ?, ?, ?, ?)",
-            args: [
-              crypto.randomUUID(),
-              userId,
-              "Getting Started",
-              "strength",
-              "beginner",
-              "strength",
-              0
-            ]
-          });
-        }
-
-        const token = await signNessaToken(userId);
-        return { success: true, token, userId };
-      } catch (error) {
-        if (error instanceof TRPCError) {
-          throw error;
-        }
-        console.error("Failed to sign in with Google:", error);
-        throw new TRPCError({
-          code: "INTERNAL_SERVER_ERROR",
-          message: "Failed to sign in with Google"
-        });
-      }
-    }),
-
-  appleSignIn: publicProcedure
-    .input(appleSignInSchema)
-    .mutation(async ({ input }) => {
-      try {
-        // Verify the Apple ID token
-        // Apple's public keys for JWT verification
-        const appleKeysResponse = await fetch(
-          "https://appleid.apple.com/auth/keys"
-        );
-        if (!appleKeysResponse.ok) {
-          throw new TRPCError({
-            code: "INTERNAL_SERVER_ERROR",
-            message: "Failed to fetch Apple public keys"
-          });
-        }
-
-        const appleKeys = (await appleKeysResponse.json()) as {
-          keys: Array<{
-            kty: string;
-            kid: string;
-            use: string;
-            alg: string;
-            n: string;
-            e: string;
-          }>;
-        };
-
-        // Decode the JWT header to get the key ID
-        const [headerB64] = input.idToken.split(".");
-        if (!headerB64) {
-          throw new TRPCError({
-            code: "UNAUTHORIZED",
-            message: "Invalid Apple ID token format"
-          });
-        }
-
-        const headerJson = Buffer.from(headerB64, "base64url").toString("utf8");
-        const header = JSON.parse(headerJson) as { kid: string; alg: string };
-
-        // Find the matching key
-        const jwk = appleKeys.keys.find((k) => k.kid === header.kid);
-        if (!jwk) {
-          throw new TRPCError({
-            code: "UNAUTHORIZED",
-            message: "Apple public key not found"
-          });
-        }
-
-        // Import the Apple JWK key for signature verification
-        const publicKey = await importJWK(jwk, "RS256");
-
-        // Verify the Apple ID token signature and claims using jose
-        const jwtOptions: Parameters<typeof jwtVerify>[2] = {
-          algorithms: ["RS256"],
-          issuer: "https://appleid.apple.com"
-        };
-        if (env.APPLE_CLIENT_ID_NESSA) {
-          jwtOptions.audience = env.APPLE_CLIENT_ID_NESSA;
-        }
-        const { payload: tokenPayload } = await jwtVerify(
-          input.idToken,
-          publicKey,
-          jwtOptions
-        );
-
-        // Apple user ID from token should match the one provided
-        if (tokenPayload.sub !== input.appleUserId) {
-          throw new TRPCError({
-            code: "UNAUTHORIZED",
-            message: "Apple user ID mismatch"
-          });
-        }
-
-        const appleUserId = tokenPayload.sub as string;
-        // Apple only sends email on first sign-in, so use input.email if token doesn't have it
-        const email = tokenPayload.email ?? input.email;
-        const firstName = input.firstName ?? "Apple";
-        const lastName = input.lastName ?? "User";
-        const displayName = `${firstName} ${lastName}`.trim();
-
-        const conn = NessaConnectionFactory();
-
-        // Check if user exists by Apple provider ID
-        const existingByApple = await conn.execute({
-          sql: "SELECT userId FROM authProviders WHERE provider = 'apple' AND providerUserId = ?",
-          args: [appleUserId]
-        });
-
-        let userId: string;
-
-        if (existingByApple.rows.length > 0) {
-          // User exists with Apple account - log them in
-          userId = existingByApple.rows[0].userId as string;
-          await conn.execute({
-            sql: "UPDATE users SET lastLoginAt = datetime('now'), updatedAt = datetime('now') WHERE id = ?",
-            args: [userId]
-          });
-        } else if (email) {
-          // Check if user exists by email
-          const existingByEmail = await conn.execute({
-            sql: "SELECT id FROM users WHERE email = ?",
-            args: [email]
-          });
-
-          if (existingByEmail.rows.length > 0) {
-            // User exists with email - link Apple account
-            userId = existingByEmail.rows[0].id as string;
-            await conn.execute({
-              sql: "INSERT INTO authProviders (id, userId, provider, providerUserId, email, displayName, avatarUrl) VALUES (?, ?, ?, ?, ?, ?, ?)",
-              args: [
-                crypto.randomUUID(),
-                userId,
-                "apple",
-                appleUserId,
-                email,
-                displayName,
-                null
-              ]
-            });
-            await conn.execute({
-              sql: "UPDATE users SET provider = 'apple', appleUserId = ?, lastLoginAt = datetime('now'), updatedAt = datetime('now') WHERE id = ?",
-              args: [appleUserId, userId]
-            });
-          } else {
-            // Create new user with Apple account
-            userId = crypto.randomUUID();
-            await conn.execute({
-              sql: `INSERT INTO users (id, email, emailVerified, firstName, lastName, displayName, avatarUrl, provider, appleUserId, status, updatedAt)
-                    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, datetime('now'))`,
-              args: [
-                userId,
-                email,
-                tokenPayload.email_verified === true ||
-                tokenPayload.email_verified === "true"
-                  ? 1
-                  : 0,
-                firstName,
-                lastName,
-                displayName,
-                null,
-                "apple",
-                appleUserId,
-                "active"
-              ]
-            });
-            await conn.execute({
-              sql: "INSERT INTO authProviders (id, userId, provider, providerUserId, email, displayName, avatarUrl) VALUES (?, ?, ?, ?, ?, ?, ?)",
-              args: [
-                crypto.randomUUID(),
-                userId,
-                "apple",
-                appleUserId,
-                email,
-                displayName,
-                null
-              ]
-            });
-            // Create default workout plan for new user
-            await conn.execute({
-              sql: "INSERT INTO workoutPlans (id, userId, name, category, difficulty, type, isPublic) VALUES (?, ?, ?, ?, ?, ?, ?)",
-              args: [
-                crypto.randomUUID(),
-                userId,
-                "Getting Started",
-                "strength",
-                "beginner",
-                "strength",
-                0
-              ]
-            });
-          }
-        } else {
-          // No email available - create user without email
-          userId = crypto.randomUUID();
-          await conn.execute({
-            sql: `INSERT INTO users (id, email, emailVerified, firstName, lastName, displayName, avatarUrl, provider, appleUserId, status, updatedAt)
-                  VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, datetime('now'))`,
-            args: [
-              userId,
-              null,
-              0,
-              firstName,
-              lastName,
-              displayName,
-              null,
-              "apple",
-              appleUserId,
-              "active"
-            ]
-          });
-          await conn.execute({
-            sql: "INSERT INTO authProviders (id, userId, provider, providerUserId, email, displayName, avatarUrl) VALUES (?, ?, ?, ?, ?, ?, ?)",
-            args: [
-              crypto.randomUUID(),
-              userId,
-              "apple",
-              appleUserId,
-              null,
-              displayName,
-              null
-            ]
-          });
-          // Create default workout plan for new user
-          await conn.execute({
-            sql: "INSERT INTO workoutPlans (id, userId, name, category, difficulty, type, isPublic) VALUES (?, ?, ?, ?, ?, ?, ?)",
-            args: [
-              crypto.randomUUID(),
-              userId,
-              "Getting Started",
-              "strength",
-              "beginner",
-              "strength",
-              0
-            ]
-          });
-        }
-
-        const token = await signNessaToken(userId);
-        return { success: true, token, userId };
-      } catch (error) {
-        if (error instanceof TRPCError) {
-          throw error;
-        }
-        console.error("Failed to sign in with Apple:", error);
-        throw new TRPCError({
-          code: "INTERNAL_SERVER_ERROR",
-          message: "Failed to sign in with Apple"
-        });
-      }
-    }),
-
   getUsers: nessaProcedure
     .input(paginatedQuerySchema)
     .query(async ({ input, ctx }) => {
diff --git a/src/server/api/utils.ts b/src/server/api/utils.ts
index f0de7c5..3dca1e4 100644
--- a/src/server/api/utils.ts
+++ b/src/server/api/utils.ts
@@ -4,6 +4,7 @@ import { logVisit, enrichAnalyticsEntry } from "~/server/analytics";
 import { getRequestIP } from "vinxi/http";
 import { verifyNessaToken } from "~/server/nessa-auth";
 import { getAuthPayloadFromEvent } from "~/server/auth";
+import { NessaConnectionFactory } from "~/server/database";
 
 export type Context = {
   event: APIEvent;
@@ -63,9 +64,32 @@ async function createContextInner(event: APIEvent): Promise<Context> {
   if (authHeader && authHeader.startsWith("Bearer ")) {
     const token = authHeader.replace("Bearer ", "").trim();
     try {
-      const payload = await verifyNessaToken(token);
-      nessaUserId = payload.sub;
+      // Verify the Clerk session JWT — `sub` is the Clerk user id.
+      const clerkPayload = await verifyNessaToken(token);
+
+      // Resolve the Clerk user id to the local users.id via the indexed
+      // clerkUserId column.  One indexed query per request is acceptable;
+      // no premature caching (the row is created by the Clerk webhook).
+      const conn = NessaConnectionFactory();
+      const result = await conn.execute({
+        sql: "SELECT id FROM users WHERE clerkUserId = ?",
+        args: [clerkPayload.sub]
+      });
+      if (result.rows.length === 0) {
+        throw new TRPCError({
+          code: "UNAUTHORIZED",
+          message: "Nessa user not found — Clerk account not linked"
+        });
+      }
+      // `nessaUserId` is the LOCAL users.id — router bodies reference it
+      // exactly as before (club ownership, membership, row scoping).
+      nessaUserId = (result.rows[0] as { id: string }).id;
     } catch (error) {
+      // Re-throw typed TRPCError (lookup miss) so the caller gets UNAUTHORIZED;
+      // swallow Clerk verification failures (expired/invalid token) the same
+      // way the legacy path did — the enforceNessaUser middleware rejects
+      // null nessaUserId with UNAUTHORIZED.
+      if (error instanceof TRPCError) throw error;
       console.error("Nessa JWT verification failed:", error);
     }
   }
diff --git a/src/server/clerk-user-webhook.test.ts b/src/server/clerk-user-webhook.test.ts
new file mode 100644
index 0000000..4f47a2f
--- /dev/null
+++ b/src/server/clerk-user-webhook.test.ts
@@ -0,0 +1,314 @@
+/**
+ * Clerk user webhook sync tests
+ *
+ * Exercises `handleClerkUserWebhook` against an in-memory SQLite DB
+ * (`bun:sqlite`) wrapped to match the libsql `{ execute({ sql, args }) }`
+ * contract. Each event payload is Svix-signed with the same secret the
+ * handler verifies against, so the signature path is exercised for real —
+ * including the unsigned / wrong-signature rejection cases.
+ */
+
+import { describe, it, expect, beforeEach } from "bun:test";
+import { Database } from "bun:sqlite";
+import { Webhook } from "svix";
+import {
+  handleClerkUserWebhook,
+  __resetClerkWebhookMigrationForTests,
+  type NessaConn
+} from "~/server/clerk-user-webhook";
+
+// ─── harness ──────────────────────────────────────────────────────────────
+
+const WEBHOOK_SECRET =
+  "whsec_dGhpcyBpcyBhIHRlc3Qgc2VjcmV0IGtleSBmb3IgY2xlcmsgd2ViaG9va3M=";
+
+let db: Database;
+let conn: NessaConn;
+
+function makeConn(): NessaConn {
+  return {
+    execute: async ({
+      sql,
+      args
+    }: {
+      sql: string;
+      args?: (string | number | null)[];
+    }) => {
+      const stmt = db.prepare(sql);
+      const upper = sql.trim().toUpperCase();
+      const isRead = upper.startsWith("SELECT") || upper.startsWith("WITH");
+      if (isRead) {
+        const rows = stmt.all(...(args ?? []));
+        return { rows: rows as unknown[] };
+      }
+      const info = stmt.run(...(args ?? []));
+      return { rows: [] as unknown[], rowsAffected: info.changes };
+    }
+  };
+}
+
+function initSchema() {
+  db = new Database(":memory:");
+  // `users` table mirrors the Nessa production schema — note clerkUserId is
+  // NOT present here so we exercise the idempotent ALTER-TABLE migration path.
+  db.run(`CREATE TABLE users (
+    id TEXT PRIMARY KEY,
+    email TEXT,
+    emailVerified INTEGER DEFAULT 0,
+    firstName TEXT,
+    lastName TEXT,
+    displayName TEXT,
+    avatarUrl TEXT,
+    provider TEXT,
+    appleUserId TEXT,
+    status TEXT,
+    createdAt TEXT NOT NULL DEFAULT (datetime('now')),
+    updatedAt TEXT NOT NULL DEFAULT (datetime('now')),
+    lastLoginAt TEXT
+  )`);
+}
+
+beforeEach(() => {
+  initSchema();
+  conn = makeConn();
+  __resetClerkWebhookMigrationForTests();
+});
+
+// ─── signings helpers ─────────────────────────────────────────────────────
+
+function sign(
+  payload: object,
+  secret: string = WEBHOOK_SECRET
+): { rawBody: string; headers: ReturnType<typeof headersFor> } {
+  const rawBody = JSON.stringify(payload);
+  const msgId = `msg_${Math.random().toString(36).slice(2)}`;
+  const ts = new Date();
+  const wh = new Webhook(secret);
+  const signature = wh.sign(msgId, ts, rawBody);
+  return {
+    rawBody,
+    headers: {
+      "svix-id": msgId,
+      "svix-timestamp": String(Math.floor(ts.getTime() / 1000)),
+      "svix-signature": signature
+    }
+  };
+}
+
+// satisfy the inferred header type
+function headersFor() {
+  return {
+    "svix-id": "",
+    "svix-timestamp": "",
+    "svix-signature": ""
+  };
+}
+
+function userCreatedPayload(overrides: Record<string, unknown> = {}) {
+  return {
+    object: "event",
+    type: "user.created",
+    data: {
+      id: "user_abc123",
+      email_addresses: [
+        {
+          id: "idn_1",
+          email_address: "jane@example.com",
+          verification: { status: "verified" }
+        }
+      ],
+      primary_email_address_id: "idn_1",
+      first_name: "Jane",
+      last_name: "Doe",
+      username: "janedoe",
+      image_url: "https://cdn.clerk.com/avatar.png",
+      ...overrides
+    }
+  };
+}
+
+function userUpdatedPayload(overrides: Record<string, unknown> = {}) {
+  return {
+    object: "event",
+    type: "user.updated",
+    data: {
+      id: "user_abc123",
+      email_addresses: [
+        {
+          id: "idn_1",
+          email_address: "jane.new@example.com",
+          verification: { status: "verified" }
+        }
+      ],
+      primary_email_address_id: "idn_1",
+      first_name: "Jane",
+      last_name: "Smith",
+      username: "janesmith",
+      image_url: "https://cdn.clerk.com/avatar2.png",
+      ...overrides
+    }
+  };
+}
+
+async function call(
+  signed: { rawBody: string; headers: ReturnType<typeof headersFor> },
+  secret: string = WEBHOOK_SECRET
+) {
+  return handleClerkUserWebhook({
+    rawBody: signed.rawBody,
+    headers: signed.headers,
+    webhookSecret: secret,
+    conn
+  });
+}
+
+function getUserByClerkId(clerkUserId: string) {
+  const row = db
+    .prepare(
+      "SELECT id, clerkUserId, email, firstName, lastName, displayName, avatarUrl, provider, status FROM users WHERE clerkUserId = ?"
+    )
+    .get(clerkUserId) as
+    | {
+        id: string;
+        clerkUserId: string;
+        email: string | null;
+        firstName: string | null;
+        lastName: string | null;
+        displayName: string | null;
+        avatarUrl: string | null;
+        provider: string | null;
+        status: string | null;
+      }
+    | undefined;
+  return row;
+}
+
+// ─── tests ───────────────────────────────────────────────────────────────
+
+describe("Clerk user.created webhook", () => {
+  it("creates a local users row keyed by clerkUserId", async () => {
+    const res = await call(sign(userCreatedPayload()));
+    expect(res.status).toBe(200);
+
+    const user = getUserByClerkId("user_abc123");
+    expect(user).toBeDefined();
+    expect(user!.clerkUserId).toBe("user_abc123");
+    expect(user!.email).toBe("jane@example.com");
+    expect(user!.firstName).toBe("Jane");
+    expect(user!.lastName).toBe("Doe");
+    expect(user!.displayName).toBe("Jane Doe");
+    expect(user!.avatarUrl).toBe("https://cdn.clerk.com/avatar.png");
+    expect(user!.provider).toBe("clerk");
+    expect(user!.status).toBe("active");
+    expect(user!.id).not.toBe("user_abc123"); // a fresh local UUID, not the Clerk id
+  });
+
+  it("upserts (does not duplicate) on a replayed created event", async () => {
+    const signed = sign(userCreatedPayload());
+    await call(signed);
+    await call(signed); // replay
+    const count = (
+      db.prepare("SELECT COUNT(*) as n FROM users WHERE clerkUserId = ?").get(
+        "user_abc123"
+      ) as { n: number }
+    ).n;
+    expect(count).toBe(1);
+  });
+
+  it("falls back to username when first/last name are absent", async () => {
+    const res = await call(
+      sign(
+        userCreatedPayload({
+          first_name: null,
+          last_name: null
+        })
+      )
+    );
+    expect(res.status).toBe(200);
+    const user = getUserByClerkId("user_abc123");
+    expect(user!.displayName).toBe("janedoe");
+  });
+});
+
+describe("Clerk user.updated webhook", () => {
+  it("updates mutable fields and leaves clerkUserId unchanged", async () => {
+    // seed via created
+    await call(sign(userCreatedPayload()));
+
+    const before = getUserByClerkId("user_abc123");
+    const localId = before!.id;
+
+    const res = await call(sign(userUpdatedPayload()));
+    expect(res.status).toBe(200);
+
+    const after = getUserByClerkId("user_abc123");
+    expect(after!.id).toBe(localId); // local UUID stable
+    expect(after!.clerkUserId).toBe("user_abc123");
+    expect(after!.email).toBe("jane.new@example.com");
+    expect(after!.lastName).toBe("Smith");
+    expect(after!.displayName).toBe("Jane Smith");
+    expect(after!.avatarUrl).toBe("https://cdn.clerk.com/avatar2.png");
+  });
+
+  it("is a no-op when the user does not exist (no row inserted)", async () => {
+    const res = await call(sign(userUpdatedPayload()));
+    expect(res.status).toBe(200);
+    const count = (
+      db.prepare("SELECT COUNT(*) as n FROM users").get() as { n: number }
+    ).n;
+    expect(count).toBe(0);
+  });
+});
+
+describe("Clerk webhook signature enforcement", () => {
+  it("rejects a missing-svix-header request with 400", async () => {
+    const res = await handleClerkUserWebhook({
+      rawBody: JSON.stringify(userCreatedPayload()),
+      headers: {
+        "svix-id": "",
+        "svix-timestamp": "",
+        "svix-signature": ""
+      },
+      webhookSecret: WEBHOOK_SECRET,
+      conn
+    });
+    expect(res.status).toBe(400);
+  });
+
+  it("rejects an unsigned payload with 401", async () => {
+    const res = await handleClerkUserWebhook({
+      rawBody: JSON.stringify(userCreatedPayload()),
+      headers: {
+        "svix-id": "msg_x",
+        "svix-timestamp": String(Math.floor(Date.now() / 1000)),
+        "svix-signature": "v1,tampered"
+      },
+      webhookSecret: WEBHOOK_SECRET,
+      conn
+    });
+    expect(res.status).toBe(401);
+  });
+
+  it("rejects a payload signed with the wrong secret with 401", async () => {
+    const res = await call(
+      sign(
+        userCreatedPayload(),
+        "whsec_YW5vdGhlcl9kaWZmZXJlbnRfc2VjcmV0X2tleV9mb3JfdGVzdHM="
+      ),
+      WEBHOOK_SECRET // handler uses this
+    );
+    expect(res.status).toBe(401);
+  });
+
+  it("ignores non user.* event types with 200", async () => {
+    const res = await call(
+      sign({
+        object: "event",
+        type: "session.created",
+        data: { id: "sess_1" }
+      })
+    );
+    expect(res.status).toBe(200);
+    expect((res.body as { ignored: string }).ignored).toBe("session.created");
+  });
+});
diff --git a/src/server/clerk-user-webhook.ts b/src/server/clerk-user-webhook.ts
new file mode 100644
index 0000000..8f26be0
--- /dev/null
+++ b/src/server/clerk-user-webhook.ts
@@ -0,0 +1,219 @@
+// ───────────────────────────────────────────────────────────────────────
+// Clerk webhook → local `users` table sync
+//
+// Clerk emits `user.created` / `user.updated` events (signed via Svix) whenever
+// a user signs up or their profile/email changes. This module verifies the
+// Svix signature with `NESSA_CLERK_WEBHOOK_SECRET` and upserts the
+// corresponding row in the Nessa `users` table, keyed by `clerkUserId`.
+//
+// The local UUID is generated here ("shadow" account) — Clerk is the identity
+// provider; the Nessa DB only stores a denormalized copy for-fast-lookup and
+// for rows that reference `users.id` (workouts, plans, community posts, etc.).
+//
+// All signature verification + DB mutation lives in `handleClerkUserWebhook`
+// so it can be exercised directly by tests with an in-memory SQLite DB and a
+// real Svix-signed payload.
+// ───────────────────────────────────────────────────────────────────────
+
+import { Webhook } from "svix";
+
+/** Minimal libsql-shaped connection (same contract as NessaConnectionFactory). */
+export interface NessaConn {
+  execute: (stmt: { sql: string; args?: (string | number | null)[] }) => Promise<{
+    rows: unknown[];
+    rowsAffected?: number;
+  }>;
+}
+
+/** Svix signature headers Clerk (and Svix) attach to every webhook. */
+export interface ClerkWebhookHeaders {
+  "svix-id": string;
+  "svix-timestamp": string;
+  "svix-signature": string;
+}
+
+interface ClerkEmailAddress {
+  id: string;
+  email_address: string;
+  verification?: { status?: string } | null;
+}
+
+interface ClerkUserData {
+  id: string;
+  email_addresses?: ClerkEmailAddress[];
+  primary_email_address_id?: string | null;
+  first_name?: string | null;
+  last_name?: string | null;
+  username?: string | null;
+  image_url?: string | null;
+}
+
+interface ClerkWebhookEvent {
+  object: "event";
+  type: string;
+  data: ClerkUserData;
+}
+
+export type WebhookResult = { status: number; body: unknown };
+
+/** Resolve the user's primary email address from the Clerk payload. */
+function resolveEmail(data: ClerkUserData): string | null {
+  const addresses = data.email_addresses ?? [];
+  const primaryId = data.primary_email_address_id ?? null;
+  const primary =
+    addresses.find((e) => e.id === primaryId) ?? addresses[0] ?? null;
+  return primary?.email_address ?? null;
+}
+
+/** Resolve a display name (first + last, falling back to username). */
+function resolveDisplayName(data: ClerkUserData): string | null {
+  const first = (data.first_name ?? "").trim();
+  const last = (data.last_name ?? "").trim();
+  const full = `${first} ${last}`.trim();
+  if (full) return full;
+  return data.username?.trim() || null;
+}
+
+// The `users` table predates Clerk — the `clerkUserId` column is added lazily
+// (idempotently) so the migration runs against existing dev/prod databases
+// without a separate deploy step. SQLite's `ALTER TABLE ... ADD COLUMN` does
+// not support `IF NOT EXISTS`, so a duplicate-column error is the expected
+// "already migrated" signal.
+let columnMigrationDone = false;
+
+/** Test-only: reset the module-level migration flag so each test gets a fresh DB. */
+export function __resetClerkWebhookMigrationForTests(): void {
+  columnMigrationDone = false;
+}
+
+export async function ensureClerkUsersColumn(conn: NessaConn): Promise<void> {
+  if (columnMigrationDone) return;
+  try {
+    await conn.execute({
+      sql: "ALTER TABLE users ADD COLUMN clerkUserId TEXT"
+    });
+  } catch (err) {
+    const msg =
+      err instanceof Error ? err.message : err == null ? String(err) : String(err);
+    // "duplicate column name" (SQLite) is the expected success-already case.
+    if (!/duplicate column/i.test(msg)) {
+      throw err;
+    }
+  }
+  try {
+    await conn.execute({
+      sql: "CREATE UNIQUE INDEX IF NOT EXISTS idx_users_clerkUserId ON users(clerkUserId)"
+    });
+  } catch (err) {
+    // Best-effort: if the index already exists or creation is unsupported in
+    // the test harness, fall through. The ON CONFLICT(clerkUserId) upsert
+    // requires a unique constraint; in tests we create the index in the
+    // schema instead.
+  }
+  columnMigrationDone = true;
+}
+
+/**
+ * Verify a Clerk webhook and upsert the user row.
+ *
+ * @returns a `{ status, body }` describing the HTTP response to send.
+ */
+export async function handleClerkUserWebhook(opts: {
+  rawBody: string;
+  headers: ClerkWebhookHeaders;
+  webhookSecret: string;
+  conn: NessaConn;
+}): Promise<WebhookResult> {
+  const { rawBody, headers, webhookSecret, conn } = opts;
+
+  // Reject unsigned / partially-signed requests before touching the DB.
+  if (
+    !headers["svix-id"] ||
+    !headers["svix-timestamp"] ||
+    !headers["svix-signature"]
+  ) {
+    return {
+      status: 400,
+      body: { error: "Missing Svix signature headers" }
+    };
+  }
+
+  let evt: ClerkWebhookEvent;
+  try {
+    const wh = new Webhook(webhookSecret);
+    evt = wh.verify(rawBody, {
+      "svix-id": headers["svix-id"],
+      "svix-timestamp": headers["svix-timestamp"],
+      "svix-signature": headers["svix-signature"]
+    }) as ClerkWebhookEvent;
+  } catch (err) {
+    console.error("Clerk webhook signature verification failed:", err);
+    return { status: 401, body: { error: "Invalid signature" } };
+  }
+
+  if (evt.type !== "user.created" && evt.type !== "user.updated") {
+    return {
+      status: 200,
+      body: { received: true, ignored: evt.type }
+    };
+  }
+
+  try {
+    await ensureClerkUsersColumn(conn);
+
+    const data = evt.data;
+    const clerkUserId = data.id;
+    const email = resolveEmail(data);
+    const firstName = data.first_name ?? null;
+    const lastName = data.last_name ?? null;
+    const displayName = resolveDisplayName(data);
+    const avatarUrl = data.image_url ?? null;
+
+    if (evt.type === "user.created") {
+      // Upsert by clerkUserId — Clerk may replay the same event, so insert
+      // ON CONFLICT instead of erroring on a duplicate.
+      await conn.execute({
+        sql: `INSERT INTO users
+                (id, clerkUserId, email, firstName, lastName, displayName, avatarUrl, provider, status)
+              VALUES (?, ?, ?, ?, ?, ?, ?, 'clerk', 'active')
+              ON CONFLICT(clerkUserId) DO UPDATE SET
+                email = excluded.email,
+                firstName = excluded.firstName,
+                lastName = excluded.lastName,
+                displayName = excluded.displayName,
+                avatarUrl = excluded.avatarUrl,
+                updatedAt = datetime('now')`,
+        args: [
+          crypto.randomUUID(),
+          clerkUserId,
+          email,
+          firstName,
+          lastName,
+          displayName,
+          avatarUrl
+        ]
+      });
+    } else {
+      // user.updated — mutate identity fields only; never change clerkUserId.
+      await conn.execute({
+        sql: `UPDATE users SET
+                email = ?,
+                firstName = ?,
+                lastName = ?,
+                displayName = ?,
+                avatarUrl = ?,
+                updatedAt = datetime('now')
+              WHERE clerkUserId = ?`,
+        args: [email, firstName, lastName, displayName, avatarUrl, clerkUserId]
+      });
+    }
+
+    return { status: 200, body: { success: true, type: evt.type } };
+  } catch (error) {
+    console.error("Clerk webhook DB sync failed:", error);
+    return {
+      status: 500,
+      body: { error: "Failed to sync user" }
+    };
+  }
+}
diff --git a/src/server/nessa-auth.test.ts b/src/server/nessa-auth.test.ts
new file mode 100644
index 0000000..c8878f8
--- /dev/null
+++ b/src/server/nessa-auth.test.ts
@@ -0,0 +1,140 @@
+/**
+ * Clerk JWT verification tests for nessa-auth
+ *
+ * Tests the verifyNessaToken function after migration from HS256 self-signed
+ * tokens to Clerk session token verification via @clerk/backend.
+ */
+
+import { describe, it, expect, mock, beforeEach } from "bun:test";
+
+// Mock env BEFORE importing the module
+mock.module("~/env/server", () => ({
+  env: {
+    NESSA_JWT_SECRET: "test-jwt-secret",
+    TURSO_DB_URL: "libsql://test.turso.io",
+    TURSO_DB_TOKEN: "test-token",
+    NESSA_DB_URL: "libsql://nessa-test.turso.io",
+    NESSA_DB_TOKEN: "test-token",
+    TURSO_LINEAGE_URL: "libsql://lineage-test.turso.io",
+    TURSO_LINEAGE_TOKEN: "test-token",
+    TURSO_DB_API_TOKEN: "test-token",
+    NODE_ENV: "test",
+    NESSA_CLERK_SECRET: "sk_test_test-secret",
+    NESSA_CLERK_JWT_ISSUER: "https://nessa-test.clerk.accounts.dev"
+  },
+  validateServerEnv: () => ({}),
+  isMissingEnvVar: () => false,
+  getMissingEnvVars: () => []
+}));
+
+// Mock @clerk/backend verifyToken
+const mockVerifyToken = mock();
+mock.module("@clerk/backend", () => ({
+  verifyToken: mockVerifyToken,
+  createClerkClient: mock()
+}));
+
+describe("verifyNessaToken with Clerk JWT", () => {
+  beforeEach(() => {
+    mockVerifyToken.mockReset();
+  });
+
+  it("returns the subject (Clerk user id) for a valid session token", async () => {
+    const mockPayload = {
+      sub: "user_clerk123456",
+      exp: Math.floor(Date.now() / 1000) + 3600,
+      iat: Math.floor(Date.now() / 1000),
+      iss: "https://nessa-test.clerk.accounts.dev",
+      sid: "sess_123"
+    };
+
+    mockVerifyToken.mockResolvedValue(mockPayload);
+
+    const { verifyNessaToken } = await import("./nessa-auth");
+
+    const result = await verifyNessaToken("valid-clerk-session-token");
+
+    expect(result.sub).toBe("user_clerk123456");
+    expect(result.exp).toBe(mockPayload.exp);
+    expect(result.iat).toBe(mockPayload.iat);
+
+    // Verify verifyToken was called with correct options
+    expect(mockVerifyToken).toHaveBeenCalledWith(
+      "valid-clerk-session-token",
+      expect.objectContaining({
+        secretKey: "sk_test_test-secret"
+      })
+    );
+  });
+
+  it("throws when token has no subject", async () => {
+    const mockPayload = {
+      exp: Math.floor(Date.now() / 1000) + 3600,
+      iat: Math.floor(Date.now() / 1000),
+      iss: "https://nessa-test.clerk.accounts.dev"
+      // Missing 'sub'
+    };
+
+    mockVerifyToken.mockResolvedValue(mockPayload);
+
+    const { verifyNessaToken } = await import("./nessa-auth");
+
+    await expect(
+      verifyNessaToken("token-without-subject")
+    ).rejects.toThrow(/Missing subject/);
+  });
+
+  it("rejects a malformed token", async () => {
+    mockVerifyToken.mockRejectedValue(
+      new Error("Invalid token format")
+    );
+
+    const { verifyNessaToken } = await import("./nessa-auth");
+
+    await expect(
+      verifyNessaToken("malformed-token")
+    ).rejects.toThrow();
+  });
+
+  it("rejects an expired token", async () => {
+    mockVerifyToken.mockRejectedValue(
+      new Error("Token has expired")
+    );
+
+    const { verifyNessaToken } = await import("./nessa-auth");
+
+    await expect(
+      verifyNessaToken("expired-token")
+    ).rejects.toThrow(/expired/i);
+  });
+
+  it("rejects a token with wrong signature", async () => {
+    mockVerifyToken.mockRejectedValue(
+      new Error("Token signature verification failed")
+    );
+
+    const { verifyNessaToken } = await import("./nessa-auth");
+
+    await expect(
+      verifyNessaToken("wrong-key-token")
+    ).rejects.toThrow(/signature/i);
+  });
+});
+
+describe("static audit: signNessaToken removed", () => {
+  it("signNessaToken is not exported fromessa-auth", async () => {
+    const moduleExports = await import("./nessa-auth");
+    expect(moduleExports).not.toHaveProperty("signNessaToken");
+  });
+
+  it("nessa-auth.ts source does not reference NESSA_JWT_SECRET", async () => {
+    const source = await Bun.file(import.meta.dir + "/nessa-auth.ts").text();
+    expect(source).not.toContain("NESSA_JWT_SECRET");
+  });
+
+  it("nessa-auth.ts uses verifyToken from @clerk/backend", async () => {
+    const source = await Bun.file(import.meta.dir + "/nessa-auth.ts").text();
+    expect(source).toContain("verifyToken");
+    expect(source).toContain("@clerk/backend");
+  });
+});
diff --git a/src/server/nessa-auth.ts b/src/server/nessa-auth.ts
index 7a76d29..cf370d9 100644
--- a/src/server/nessa-auth.ts
+++ b/src/server/nessa-auth.ts
@@ -1,39 +1,49 @@
-import { SignJWT, jwtVerify } from "jose";
+// ───────────────────────────────────────────────────────────────────────
+// Nessa auth — Clerk session JWT verification (RS256 / JWKS)
+//
+// Migrated from self-signed HS256 tokens to Clerk session token
+// verification.  Incoming `Authorization: Bearer <token>` headers are
+// verified against Clerk's JWKS endpoint via `@clerk/backend`.
+//
+// Public API is unchanged so callers need not be modified:
+//   * verifyNessaToken(token) → { sub, exp?, iat? }
+//   * NessaAuthPayload type
+//
+// signNessaToken was removed — the frontend now supplies Clerk session
+// tokens directly; the backend only verifies.
+// ───────────────────────────────────────────────────────────────────────
+
+import { verifyToken } from "@clerk/backend";
 import { env } from "~/env/server";
 
-const NESSA_JWT_EXPIRY = "30d";
-
 export type NessaAuthPayload = {
-  sub: string;
+  sub: string; // Clerk user id
   exp?: number;
   iat?: number;
 };
 
+/**
+ * Verify a Clerk session JWT and return the subject (user id).
+ *
+ * Uses the Clerk Backend API secret key to fetch the JWKS and verify the
+ * RS256 signature.  Rejects expired, malformed, or improperly signed tokens.
+ */
 export async function verifyNessaToken(
   token: string
 ): Promise<NessaAuthPayload> {
-  const secret = new TextEncoder().encode(env.NESSA_JWT_SECRET);
-  const { payload } = await jwtVerify(token, secret, {
-    algorithms: ["HS256"]
+  const payload = await verifyToken(token, {
+    secretKey: env.NESSA_CLERK_SECRET,
+    // Optional: restrict to specific issuers / apps
+    // audience: env.NESSA_CLERK_JWT_ISSUER,
   });
 
   if (!payload.sub) {
-    throw new Error("Missing subject in Nessa JWT");
+    throw new Error("Missing subject in Clerk session token");
   }
 
   return {
-    sub: payload.sub as string,
-    exp: payload.exp as number | undefined,
-    iat: payload.iat as number | undefined
+    sub: payload.sub,
+    exp: payload.exp,
+    iat: payload.iat,
   };
 }
-
-export async function signNessaToken(userId: string): Promise<string> {
-  const secret = new TextEncoder().encode(env.NESSA_JWT_SECRET);
-  return new SignJWT({})
-    .setProtectedHeader({ alg: "HS256" })
-    .setSubject(userId)
-    .setIssuedAt()
-    .setExpirationTime(NESSA_JWT_EXPIRY)
-    .sign(secret);
-}