From f712cedbc2e0c86ffa606018609831167641766a Mon Sep 17 00:00:00 2001
From: Dotta <34892728+cryppadotta@users.noreply.github.com>
Date: Tue, 14 Jul 2026 15:40:08 -0500
Subject: [PATCH] feat(mcp) [split 7/8]: activate Apps and gateway UI (#9562)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## Thinking Path

> - Paperclip is the open source app people use to manage AI agents for
work
> - Governed MCP access spans contracts, runtime enforcement, adapters,
UI surfaces, and operator verification
> - The parity reference PR #9534 is too large for effective automated
or human review
> - The feature therefore needs a linear stack whose individual diffs
stay below the 100-file review limit
> - This pull request is split 7/8 and focuses on Apps/Gateways UI and
feature-flagged activation
> - The benefit is a standalone, testable review boundary while
preserving byte-for-byte parity at the top of the stack

## Linked Issues or Issue Description

- Related parity reference: #9534
- Problem: The standalone UI foundation needs feature-flagged routes,
navigation, app detail flows, gateways, Storybook scenarios, and QA
configuration.
- Proposed solution: Adds Apps/Gateways pages and components,
navigation/route activation, remaining page integrations, Storybook
stories, and QA Vite configuration.
- Alternatives considered: keeping #9534 as one 403-file review, or
rewriting the feature to manufacture seams; both were rejected in favor
of path extraction plus compile-driven boundary moves.
- Roadmap alignment: this advances the existing governed MCP/tool-access
work already represented by #9534; it does not introduce a separate
roadmap initiative.
- Stack position: base branch is
`pap10341-split/06-ui-tools-foundation`.
- Merge policy: merge bottom-up, in order, only after the complete
eight-PR stack has been reviewed and the top-of-stack parity gate
remains empty.
- Requested review: UXDesigner sanity pass on Apps/Gateways flows and
flag-off behavior; Greptile on every PR.

## What Changed

- Adds Apps/Gateways pages and components, navigation/route activation,
remaining page integrations, Storybook stories, and QA Vite
configuration.
- Keeps this PR below 100 changed files and independently typecheckable.
- Preserves the final tree from #9534 when combined with the other seven
stack levels.

## Verification

- `pnpm typecheck`
- `pnpm check:token-gates` — all gates clean
- Focused UI Vitest run with `NODE_ENV=test` — 17 files, 147 tests
passed

## Risks

- Navigation or flag regressions could expose incomplete experiences;
activation remains controlled by existing experimental settings.
- Stack risk: merging out of order can expose incomplete layers;
mitigate by following the documented bottom-up merge policy.
- Parity risk: later edits to an intermediate branch can drift from
#9534; mitigate by re-running the empty top-of-stack diff before merge.

> For core feature work, check [`ROADMAP.md`](ROADMAP.md) first and
discuss it in `#dev` before opening the PR. Feature PRs that overlap
with planned core work may need to be redirected — check the roadmap
first. See `CONTRIBUTING.md`.

## Model Used

- OpenAI Codex, exact model ID `gpt-5.4`; runtime-managed context
window; medium reasoning with repository, shell, Git, GitHub CLI, and
code-execution tools enabled.

## Checklist

- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have checked ROADMAP.md and confirmed this PR does not duplicate
planned core work
- [x] I have searched GitHub for duplicate or related PRs and linked
them above
- [x] I have either (a) linked existing issues with `Fixes: #` / `Closes
#` / `Refs #` OR (b) described the issue in-PR following the relevant
issue template
- [x] Internal references are omitted except the execution-plan link
explicitly required for this coordinated split stack
- [x] My branch name describes the change and contains no internal
Paperclip ticket id or instance-derived details
- [x] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [ ] All Paperclip CI gates are green
- [ ] Greptile is 5/5 with no open P2s, recommendations, or follow-ups
- [x] I will address all Greptile and reviewer comments before
requesting merge


## Stack Coordination

- Internal execution plan:
[PAP-13874](/PAP/issues/PAP-13874#document-plan)
- Parity reference: #9534
- Stack: #9556 → #9557 → #9558 → #9559 → #9560 → #9561 → #9562 → #9563
- Merge bottom-up only after full-stack review and an empty parity diff
at #9563.


## UI Evidence

QA captured these from the live Garden MCP split stack at 1440px and
verified clean rendering:

![Apps
connections](https://raw.githubusercontent.com/paperclipai/paperclip/42512d030c96f678c379fbd97d8b7c1737d654fc/doc/screenshots/garden-mcp-split-stack/apps-list.png)

![Gateway
detail](https://raw.githubusercontent.com/paperclipai/paperclip/42512d030c96f678c379fbd97d8b7c1737d654fc/doc/screenshots/garden-mcp-split-stack/gateway-detail.png)

![BYO connect
wizard](https://raw.githubusercontent.com/paperclipai/paperclip/42512d030c96f678c379fbd97d8b7c1737d654fc/doc/screenshots/garden-mcp-split-stack/byo-connect.png)

---------

Co-authored-by: Paperclip <noreply@paperclip.ing>
---
 .../garden-mcp-split-stack/apps-list.png      |  Bin 0 -> 101199 bytes
 .../garden-mcp-split-stack/byo-connect.png    |  Bin 0 -> 103033 bytes
 .../garden-mcp-split-stack/gateway-detail.png |  Bin 0 -> 94681 bytes
 ui/src/App.tsx                                |   63 +-
 .../components/AppConnectionSidebar.test.tsx  |  231 +++
 ui/src/components/AppConnectionSidebar.tsx    |  141 ++
 .../components/AppsExperimentalGate.test.tsx  |   84 +
 ui/src/components/AppsExperimentalGate.tsx    |   10 +
 ui/src/components/AppsSidebar.test.tsx        |  166 ++
 ui/src/components/AppsSidebar.tsx             |  106 ++
 ui/src/components/Layout.test.tsx             |  228 +++
 ui/src/components/Layout.tsx                  |   37 +-
 ui/src/components/Sidebar.test.tsx            |   21 +
 ui/src/components/Sidebar.tsx                 |    3 +
 ui/src/components/SidebarNavItem.tsx          |   12 +-
 ui/src/index.css                              |   23 +
 ui/src/pages/AgentDetail.tsx                  |   30 +-
 ui/src/pages/AgentToolsTab.test.tsx           |  309 ++++
 ui/src/pages/AgentToolsTab.tsx                |  638 +++++++
 ui/src/pages/CompanySkills.tsx                |  181 +-
 ui/src/pages/Dashboard.tsx                    |    3 +
 ui/src/pages/DesignGuide.tsx                  |  154 ++
 .../InstanceExperimentalSettings.test.tsx     |   14 +
 ui/src/pages/InstanceExperimentalSettings.tsx |   41 +
 ui/src/pages/apps/AppDetail.test.tsx          |  684 +++++++
 ui/src/pages/apps/AppDetail.tsx               |  639 +++++++
 ui/src/pages/apps/AppLogo.tsx                 |   69 +
 ui/src/pages/apps/AppNotConnected.test.tsx    |  223 +++
 ui/src/pages/apps/AppNotConnected.tsx         |  371 ++++
 ui/src/pages/apps/AppsConnect.test.tsx        |  700 +++++++
 ui/src/pages/apps/AppsConnect.tsx             | 1645 +++++++++++++++++
 ui/src/pages/apps/AppsReview.tsx              |   45 +
 ui/src/pages/apps/Browse.test.tsx             |  195 ++
 ui/src/pages/apps/Browse.tsx                  |  205 ++
 ui/src/pages/apps/Connections.test.tsx        |  325 ++++
 ui/src/pages/apps/Connections.tsx             |  441 +++++
 ui/src/pages/apps/ReviewQueueCard.test.tsx    |  153 ++
 ui/src/pages/apps/ReviewQueueCard.tsx         |  196 ++
 .../app-detail/ActivityPanel.render.test.tsx  |  100 +
 .../apps/app-detail/ActivityPanel.test.tsx    |   99 +
 .../pages/apps/app-detail/ActivityPanel.tsx   |  278 +++
 .../pages/apps/app-detail/AdvancedPanel.tsx   |  274 +++
 .../apps/app-detail/PermissionsPanel.tsx      |  476 +++++
 ui/src/pages/apps/app-detail/ReviewPanel.tsx  |   33 +
 ui/src/pages/apps/app-detail/SetupPanel.tsx   |  282 +++
 .../pages/apps/app-detail/TestPanel.test.tsx  |  505 +++++
 ui/src/pages/apps/app-detail/TestPanel.tsx    | 1461 +++++++++++++++
 ui/src/pages/apps/app-detail/types.ts         |   41 +
 ui/src/pages/apps/app-tabs.ts                 |   35 +
 ui/src/pages/apps/gateways/AppsSubNav.tsx     |   40 +
 .../apps/gateways/ConnectClientDialog.tsx     |  204 ++
 ui/src/pages/apps/gateways/GatewayDetail.tsx  |  241 +++
 ui/src/pages/apps/gateways/GatewaysList.tsx   |  355 ++++
 .../pages/apps/gateways/NewGatewayDialog.tsx  |  163 ++
 .../apps/gateways/gateway-helpers.test.ts     |  215 +++
 ui/src/pages/apps/gateways/gateway-helpers.ts |  209 +++
 ui/src/pages/apps/gateways/gateway-tabs.ts    |   28 +
 .../apps/gateways/panels/AppsToolsPanel.tsx   |   85 +
 .../gateways/panels/GatewayActivityPanel.tsx  |  105 ++
 .../gateways/panels/GatewayAdvancedPanel.tsx  |  153 ++
 .../apps/gateways/panels/OverviewPanel.tsx    |  173 ++
 .../apps/gateways/panels/TokensPanel.test.tsx |  202 ++
 .../apps/gateways/panels/TokensPanel.tsx      |  395 ++++
 ui/src/pages/apps/google-sheets.ts            |   37 +
 ui/src/pages/apps/store-cards.tsx             |   50 +
 ui/src/pages/apps/useReviewCount.ts           |   22 +
 .../stories/access-profiles.stories.tsx       |  685 +++++++
 ui/storybook/stories/action-card.stories.tsx  |   95 +
 .../stories/activity-feed.stories.tsx         |  181 ++
 .../app-activity-lifecycle.stories.tsx        |  150 ++
 .../apps-connect-discoverability.stories.tsx  |  232 +++
 .../stories/apps-connect-name.stories.tsx     |  100 +
 ui/storybook/stories/gateways-tab.stories.tsx |  265 +++
 .../issue-thread-interactions.stories.tsx     |  190 ++
 .../permitted-vs-installed.stories.tsx        |  263 +++
 ui/storybook/stories/policies-tab.stories.tsx |  311 ++++
 .../stories/runtime-health.stories.tsx        |  246 +++
 ui/storybook/stories/test-tab.stories.tsx     |  395 ++++
 ui/vite.qa.config.mjs                         |   67 +
 79 files changed, 17681 insertions(+), 146 deletions(-)
 create mode 100644 doc/screenshots/garden-mcp-split-stack/apps-list.png
 create mode 100644 doc/screenshots/garden-mcp-split-stack/byo-connect.png
 create mode 100644 doc/screenshots/garden-mcp-split-stack/gateway-detail.png
 create mode 100644 ui/src/components/AppConnectionSidebar.test.tsx
 create mode 100644 ui/src/components/AppConnectionSidebar.tsx
 create mode 100644 ui/src/components/AppsExperimentalGate.test.tsx
 create mode 100644 ui/src/components/AppsExperimentalGate.tsx
 create mode 100644 ui/src/components/AppsSidebar.test.tsx
 create mode 100644 ui/src/components/AppsSidebar.tsx
 create mode 100644 ui/src/pages/AgentToolsTab.test.tsx
 create mode 100644 ui/src/pages/AgentToolsTab.tsx
 create mode 100644 ui/src/pages/apps/AppDetail.test.tsx
 create mode 100644 ui/src/pages/apps/AppDetail.tsx
 create mode 100644 ui/src/pages/apps/AppLogo.tsx
 create mode 100644 ui/src/pages/apps/AppNotConnected.test.tsx
 create mode 100644 ui/src/pages/apps/AppNotConnected.tsx
 create mode 100644 ui/src/pages/apps/AppsConnect.test.tsx
 create mode 100644 ui/src/pages/apps/AppsConnect.tsx
 create mode 100644 ui/src/pages/apps/AppsReview.tsx
 create mode 100644 ui/src/pages/apps/Browse.test.tsx
 create mode 100644 ui/src/pages/apps/Browse.tsx
 create mode 100644 ui/src/pages/apps/Connections.test.tsx
 create mode 100644 ui/src/pages/apps/Connections.tsx
 create mode 100644 ui/src/pages/apps/ReviewQueueCard.test.tsx
 create mode 100644 ui/src/pages/apps/ReviewQueueCard.tsx
 create mode 100644 ui/src/pages/apps/app-detail/ActivityPanel.render.test.tsx
 create mode 100644 ui/src/pages/apps/app-detail/ActivityPanel.test.tsx
 create mode 100644 ui/src/pages/apps/app-detail/ActivityPanel.tsx
 create mode 100644 ui/src/pages/apps/app-detail/AdvancedPanel.tsx
 create mode 100644 ui/src/pages/apps/app-detail/PermissionsPanel.tsx
 create mode 100644 ui/src/pages/apps/app-detail/ReviewPanel.tsx
 create mode 100644 ui/src/pages/apps/app-detail/SetupPanel.tsx
 create mode 100644 ui/src/pages/apps/app-detail/TestPanel.test.tsx
 create mode 100644 ui/src/pages/apps/app-detail/TestPanel.tsx
 create mode 100644 ui/src/pages/apps/app-detail/types.ts
 create mode 100644 ui/src/pages/apps/app-tabs.ts
 create mode 100644 ui/src/pages/apps/gateways/AppsSubNav.tsx
 create mode 100644 ui/src/pages/apps/gateways/ConnectClientDialog.tsx
 create mode 100644 ui/src/pages/apps/gateways/GatewayDetail.tsx
 create mode 100644 ui/src/pages/apps/gateways/GatewaysList.tsx
 create mode 100644 ui/src/pages/apps/gateways/NewGatewayDialog.tsx
 create mode 100644 ui/src/pages/apps/gateways/gateway-helpers.test.ts
 create mode 100644 ui/src/pages/apps/gateways/gateway-helpers.ts
 create mode 100644 ui/src/pages/apps/gateways/gateway-tabs.ts
 create mode 100644 ui/src/pages/apps/gateways/panels/AppsToolsPanel.tsx
 create mode 100644 ui/src/pages/apps/gateways/panels/GatewayActivityPanel.tsx
 create mode 100644 ui/src/pages/apps/gateways/panels/GatewayAdvancedPanel.tsx
 create mode 100644 ui/src/pages/apps/gateways/panels/OverviewPanel.tsx
 create mode 100644 ui/src/pages/apps/gateways/panels/TokensPanel.test.tsx
 create mode 100644 ui/src/pages/apps/gateways/panels/TokensPanel.tsx
 create mode 100644 ui/src/pages/apps/google-sheets.ts
 create mode 100644 ui/src/pages/apps/store-cards.tsx
 create mode 100644 ui/src/pages/apps/useReviewCount.ts
 create mode 100644 ui/storybook/stories/access-profiles.stories.tsx
 create mode 100644 ui/storybook/stories/action-card.stories.tsx
 create mode 100644 ui/storybook/stories/activity-feed.stories.tsx
 create mode 100644 ui/storybook/stories/app-activity-lifecycle.stories.tsx
 create mode 100644 ui/storybook/stories/apps-connect-discoverability.stories.tsx
 create mode 100644 ui/storybook/stories/apps-connect-name.stories.tsx
 create mode 100644 ui/storybook/stories/gateways-tab.stories.tsx
 create mode 100644 ui/storybook/stories/permitted-vs-installed.stories.tsx
 create mode 100644 ui/storybook/stories/policies-tab.stories.tsx
 create mode 100644 ui/storybook/stories/runtime-health.stories.tsx
 create mode 100644 ui/storybook/stories/test-tab.stories.tsx
 create mode 100644 ui/vite.qa.config.mjs

diff --git a/doc/screenshots/garden-mcp-split-stack/apps-list.png b/doc/screenshots/garden-mcp-split-stack/apps-list.png
new file mode 100644
index 0000000000000000000000000000000000000000..f5b7eed40544d7967e59f3b3d6a2c9a39034203b
GIT binary patch
literal 101199
zcmX_nbyQo?@-;2RN`V4JiWe^q#kCZ7cL~Mar9cQ;DDJMswYWn<DN+dTPK!H5LkNLi
z-do@M{<$aX-n&-rIcH{{nLT@=HPsdHUQ)b7Lqo$;Qk2z3L&HG*eD06^95sMmy<|Z{
zdyS?fE3Nw_?<5~1WNwHegr$4GAIF#K?1x;8j7R2H%SV$^&7$Wm9b}{EFVjd}-fNd?
zwhXFx#B`JS^@<6%k0Vl*Z0(wtd)LFa&pMt0gFd^as4{;@T?SlgnEF!Huw%<I%F@Zc
z!O0}W!wj8Fj3>bhv*637+q9;?B%Q%bt=z$N?};Xl4~wl~#SYWXxlhb1Q5zoo&Gb=3
zzQkU8##5v?M{o*AM%L^3O4Md(*f>o_#bS2~2+w%+<A<n?V_R`c=D={1XByvbAd5T1
zaV78kOq!C=SbgKSgE78~sj+zJ_I9*4mkaw!LD)0jN(V1+x7g0Cms}`z%a<JeOPp~s
z;_Y-#)#8=5DKTx@5s|fpaWilRFvDNP<QHH5>-yVn(*#8o24?i{WjM_AGyHS2`Xc}8
zMF1N^O&bQQIy45DK5<G`AJfjl$jvZrI939HIh!+ta;o%NDi$WE9X=j<tD4j`p269}
zb*BMrJ|!Z>_7j=VmJS7z)eb{qH4_+aA-7^3XL~g(0k!nGNJ^nrPC_EFVNjZ9DMd^R
zl>oqz-H*VSx!Z}UE<=_4!h?Qs?;*qfa(%6H_JoL5;Uw+XzL+`lYch6GZH=X_E~XMy
zO9*v}o-Nzl6-mITIea2Bd*N6qO`j<t?#bXFD0jEJOT>77uC797(jg#QL%X<O$0hGS
z!+YMszIs8<)TiF&^m0A|<ocURV9jGe6EH`Aht&iE9mwNOe=mC7UH`CUl3vw4pRQ39
zX`1i@SezbgNKwt1>F|DEj9G!u@?GM^DJ@w^a(>HYfwA3|Wd_VSk+{=kK45fzCSxvD
z#R1%%8!DAqR`z7H$HIs`YLvI;G!1YB=jQ(8kecmsV009a;!Vh!yO1ffr^mL1=Ry6h
zG)I%Mm>Sh%V`$zn4~!@{-e62ylvVt;8AVzWao!N-dz;3o1z~Z0oTuq3>nf0cy<dpY
zX46$b-5YllB=2N4SqcM=Xt&5~v@Fo7MMqz<&M(S*r5-*ex-YG6#!<QY<Zha0uX!bR
zL*B+@3Z7`O2}<Il9G&dRc~`lpGhAF8rShS+#sbvvg-M$(2a8K`qVzUuf>=@b{pNi7
zI!|H!?CXCrmH1M6jU@9XT3j|0`*Nha33q%VrIt4<vvjZ3z_|>TNkGL<dG_nvmmEcH
zELsIjWI~4{{FMrgKrYVwcTSKNE=~MoX!8D>UDH^gkWc^#6ChO(8z>o_u8;=&VXUFm
z<(DJV-XdUqYT#7zon(GzmYIa<)POB?k8*BXt`+#(PY=qU$uLRHp~kL$D#<@wgil<B
zQ7WS1piv^74Pz1sVNXNSWU*J5GX=hMu>%e14u3B`B+@z!3in6D>C&i9NiYc5EY5d;
zI??=ORCp73yUnSPc2jb)#@foE(@s@!G=lDx#&DAsu<6nJi3{ZfKyb57xxPf|qK?vS
zX3YnimG>;CbE$gs$rpt^8|^w8TfkJ*V?bHO%n2}s=!Vg4`@h5c4~49jrB*h^Y0O8G
zfEkFR1V%0dTKyW$SQOUn{GB>G7*@5X5q#kSB>;-5r!&1$eM*DASl8ABA#qYQ-ek*a
z#%k3#FkNMpdRF$7(i|31*$~~-s0v`Gnv1Azl<=kFa-T0#vZS<Va7>mpvAWnXXU+iq
z^b#zC?9Onf2liD!@6`qMckQYm{P43MnA63+jtD0wH72ilKN}hYQP}Qp;3o~$jUELO
z5cS+=c8Lo80K9j58`i_Qw5+l3+yok|3FsRs_DKV>b9_DC*^Xy#U_Eif(5I?xZ>ds9
zXt_|~B9j|NBE&KUl0qvbK7$e*a#q76&;rar#f-G|{1mE}S(>w9Iq1e^zzq9F67QK5
z3A9@36Vp`(1G3$=7q?kCvjd+H@p_|-Ga1+|R9u|9Dj4L9rv}sNoq~EaVzDi?NQxc1
zCAyh9XN=Dd^C0Fjv#LvtLU)j*?koo&U})!3ZBFogljjR4P_8Czk|h1F6GJ|oNmglv
z?mCe_`)Z#dIIVnzJ3l!3e!#d)Z?j%EK{}`Nn>EIpH>Zn5JH(%6o0#HQZ`GIOZCI!&
z88R)3ZIrh)m2vl|y1qJ9fdM|&)eeH;HSnhSm;@#NTOoG`uEGTE+o?v+H<aX=8Eq*+
zT1DGQ#&7i~>!KewSREWO$i~1r&EqMR5O)qdhQbw!Z0`KBGA%}=Wt9kzQ_X^nzhbqX
z?ko@l?4f%q)`S*|N|pukSHiW$e(663?b@=h{?71O@gp^{Oy7>PR{AgCu^0`-B+L=F
zP594KRoY#Ss-_1pcUPQbo*!9fJ3tC#UG)@>;B38a6~Ky7)xiL;rAFB}oRR5BX=CU=
zLw5fa4uCI{bS!YUy^<qX=q6Z0&H&ykj(|Y<X?IwSxaS|hCdjkcVmR4m<U>(16Tjy-
zdabNo;?PWuFUygs8XP;cN&dRaCYn1`EIX`7{#m-pxQgW2FaDE*9Oq2D>O}<u+WNZI
zy2+^qRRio!5YZ;qbOY28$RrXoGL~`KES<{j1gWM{zqWCZi_vHFQpYD7yX@?9`59En
zvRZQqu}}}ke3z*76HN1N^t^|$Dv>8h0i+;Pv)FLKO)Il0C!n}e58hyOoN2msT7X>N
z@QIAK0L&K|0s;W0wZHBeW|bU920jt!iT8C)bvLxFF0afusJL64HL<1&X42V1TW*oY
zZsUnLTL_<>Qwk%5UOeSBuML_0ndwM!p!ztOH$K^kvFi&;m+wwywkF{g^{OU}1F=ds
z$(F$>-AW_G95mSdh0;Ng;(4)|A|yq0XnT}W1`qXS{WxMP2y)wARO#d#Dr%zT1mM>q
z;Bf=&IA`w}tzQ16zciTzG7Ncu0jcrNSVtFA_McD4GP@6HfWg<}cExuab*uW#dO;8%
z&I6hcP!?w*f%Qn;Z>Ne3uv~u`V?(sRUm0g)TMc`Yz)GbhT<k7ermr!Q;^jG-c0;Ui
zqy#ghA2klphTL>P?uz$vdQ5+g5QV|1ZJXmpRXA+n5hNvxs$uuw+*+9N9Y`(1q?t-i
zWA_KsVQ~gu?pJ49gN@W4>V$Y=r?-4sjJ2oyOf_Htxb-mEQ7m>85jF;^VTWD9U4LLg
zC7a|&G#Vt7)hziGB)^r9fO2G46GLxBTJ;lUZL*x?(+2;wujK?mNV~EU%x(W7T1lrm
z^MswuG~Pyup5r?q*E80c5Q6EWxTZN%{QNCP=jnwnitj<=4xf;H)dgx}AL8YVtsO=j
z<%A)PA7^E6*j8_mmu=6W{8z}A&+X8YPG15g?X3Q+<`^#XU^komc5vMPz&hFH{OgZ1
zr?#>Gg~=ZmPEud8jB=E_E)==V@a4w;-i;ky(mVawHZw<2+Q|97xvkGAt298_?Zo|-
z&4-<B_jR*N+z^uQIPD0riyWz@T{7E7Fbz1@G%K@%0m=RW7!$|Pid~`4X<q(;J$lAX
z;iJv(n&0QN1Ht?=x~B#^n8~f@nJXM>d8az}5*AkTo+_qhIL*~WPJx{5yQi(Bf)?~S
zLH#lLhK(<Xf4tZjQpF-}ZP1Kum2T9yazM|_I5UW5G>ELQV5u8`92%Opf|Gad^}gj_
z0@h(QCZMJVk^zudPcgwx{JaiOk01;5{{tJfu7dgngdo(fX-v1KB2^+?axXQllEt5L
zA2n3mmG2RoK!R{C_K5B_)s8oH?n%=FemtHxm7N<P5U$AX$=*{NtC|}mg>Z0v8IXP@
zN#o0A{h<B@a&-4K`(}MD!SSe8#!9_^O$%fJR`c5`;Ie?%!Czx}sEIEd%kTn5WW=@W
z`DK$k79jvFBjsyYhB>L6>0PbA*{m<RKpHz^93e>RcHF7qrn(O;w>!WLeR*&?m@exE
zyNrw@2%=P4b-wtie)>o(=6vz%J;>!i?Lp9-E0y%SKZ`+0y+aVBZPs?Pp6?RR7CF7p
z{VQTt1_L*L&is`-u&2ZWk`Y=ji|ZG*rMK<v4Pu@-IBUt+BdVLde5<_1P3>R2Fx0n7
zV`@4_!RCw6I;8Kwbe8G#CUpI!8(H#`hn|3*8iR3Q2z9i<_X2IZ)1om*b;hp(FM8u4
zWOe(elL0iS2ZSi#f}mIw%18}^R^ZKfmP8|3o1V{z=5Bxd@&RL7DR&!$!F9G+lwgAJ
zfB=p8htZA)k=1P)3ksg#n%pCyj6|Z7Atc+WYH%So?UR-H`_K$GLKu{QLt5;&^C0qa
zJ4Vt-J)Tv+`0Q$;jU0BYn_Z=+aY6FH<~usv0l<O|bO02N-k0A3!#p5Wh8iiCS2(Gc
z&gl*{R2%5dB?Vz;=dEvG>`nV~D=_;BI}b?2e3*$6bQGonCCvV4b&C#lI6|ibu5s68
zw^r7W(vsEu9-&)h%n^nwxQJryvPxna9tN3sK#GkV1w7q!OknRJWoDDmm>3SWCScSS
zh;s$N@8JQ_E<knwZhT4J=9Y0P#DmuAcRQ5#dWMIL`Sv7m2^vIoPX~~f@CaclSk1R&
zQn>Fn2p(Hy5}>iBdTz1CT`%RCN>MMxCbtszEFrNq0nxhD1dKm7uw!RE6eiVD%8N&|
zrtfWmqE9;jk4Vq{)~0y=ScJ`a_bh+wS5~GP2Z6IposXO|mvqUq9A}x$vstqdi3mMT
zp&Z!bt}Q9tyC=Q_@GcuQ`B+3N$y3rv2O!mg8m8jC1u}CUK*mrYicyv_V7ta$NSfB@
z$Z%%Bvz%Dt!FaalTt7eX^zWii)C1Bsv)}>2L@h<kxdC+zhuWQyHXS)E)&qh+r-Ryr
zIE2ruI7AS1FV&kI=7bx{o?2j&aKj`UOpV8NW&mfJ_m_%=gKidX{yg-_9wSHu9?e6S
z;t?b_+aNr_9pYj#l<SCx6;Z;VP=gVa4KXENT=cE@m^)wBa>&H2bO4w*9k)Sp-6)H8
zfOY`F!%<(fW7lcj+X2|pMSZybPO#BR`vO@@K!iOB%!#4y;Qj43$UkT}x&t5=MU;)7
zuDe#Be#_3b!aa-d-Ui`JFVgC*>-@Ra3>79vr_$gQ3KOS~?yaktIA)S1LwL}Qj(t8w
z=%okbFNEqREXE_|moEh|L)nf6t1Ss(D&IsnUprBzBj0Ag(8Or!x6bDLDCU~)et$l$
z(-W$yb5&<w{X*#h>5+&VLTkR+jJ_YM8Lsga@G_2B=3ypzW|@H4J+?-Gy)9J?SNI$U
z2Ypdfzy!F~T6sX8lVQBGNB5D-y*2)k?mUQgj4~Z`EuM<}w_2EX3U8E-mWQ*tytV#w
z$jLiwed{Ou%D~2XoyH-@QlXj(ALkf8R(b=Eas(K6{(j^JH<1X4pf)bzph9}jgOJLB
zc^u)YyEh&GjMTZd&~js@jqg1epnzH_|H%T2f`JuYe#|AdGXn>&8vZ~s?HM-W=#i=p
zfDgN<a4zJ3TmS(Z*Z3td6=fMSZ#F~Ww~^o+e%`(W$qLVN_6oN2KQpLv6Ms-Wqg($?
z^q((l^<@n|$Y3g`PHjMla{IR&uBIM8NzAM%?;iCv?nczU=dlyDzUT)!If4bxGKFbS
zID%39#MQxkX3#<cV>cA9-Qx^g*C&S6{Gi}u;dEidA3)~JHhqousT{H`nMj!!L=ut0
zpqV9<Zbd^#qWJhxKF;5b1D{eZ2=dMicAOoK40lc(IXHu)S8Uhn--)0so$YK<bV4@%
zg|CP3nUJ8r2V|wLwKwD28Z6c5RYTw46M0@NVmAn)3_Tb`D#Oq6&NJJ88&=Gpn^V+s
z)Ejqm3?W4UsQmf=oiiv@Qq5Lc)am=L7j%uaTW=8SSV{g3MwpA7E%J>cKt|aakLEw+
z*SMd$x$SMxm{kmikj8Kjb&|$X#)!Be%C4~%G<YjWL<DzHUXEH8KsoC2*IL(-vp#Ge
zU<4gn?f__MWbAE&qKQ#f1<Ax`-QNbK16NU#5e2ZE8CVCryt!wCbIona2=_*3SXC(z
zdaZFowI2G~7OiF$&lP7pAh(;;wxU%wIfe(NE98H^JO)C-QZ(9gzF3$vf44|?c?)xr
z3|U-1e6^*y#?8Bm{vwn;YW4CK^Axe$66t7ss+Ejd4dc>I%Wo(cf|e)U#C);gF?p*z
zx7yUQhK>I~WjI`e9R`BubO0<Jy0@%CPKS|1T;Tro@!xPzG#+JcimeAkK9qadQl;_n
zG52?FRL2GCw3vs3^L{pV0Ju0E4l(az<<!(2;l<1N%29DPrt!ar(XPI}Y&y?us~eJ6
z>1c6$|GKO_P0l1dk+SCA19E>Mcl1p;K+!=Vt>}X!T<Zv%9F`k%^9Jy<-m(ISf}{pj
z)TOk*(s7dIzfTz5d?k6Gx;$-AT!_}2eAF%nXUgSo+U$~T(w}9LT3vWja2p5{!Js?D
z^v8{)a-(*vp0V2ETD!!SyXPbhUPkrsTK!>LQT^7b<wOKi*JXiy#>E{_@+@<e?X(Jx
z-++Q8*^Cn1?2I6dCH1v>ZyIiuSkqTLl+r1;HNPj7A%?UX$M51<Yo1lb-t;I8>`Vs6
zDCoM4+xeJQX}9N~7D)L@>pBwRvsN!BUA*#$!d;;8A0G+0(<JGmc^RKz5QKs$b-h!h
z@TfEd_uU>ZOC4PGR07lANp~jLEio>Rr`3KN{qXo{@CQPo*o>@@esJw?t(wy>GgGBz
zeQ*mVbL!#sNC%Y6s!&{gEE`(pjFH#_H+_ZKP?BYVIQYCa1L*(D!J}ydb#-3rXW@CB
z<~#LAO}^v;-h3x_1ps|u>$B${7-ITiN_3VxGF9Ho?K7=Ta~0Pb`(A4W|1BXMd6`$C
zBrmdy?$z0^LAh5iJzbX8J~#;q{f<g0<J<4G?#+{kf({2g*o!36vOMy!#QA($aE_$u
zMQ2RSv~HYQo(Y(#%Z&;>W;r%bOJPZr4;B;Eb+jZ)X%B%a^di3x+6RJPsT{1I^0ur_
zvU_%PzHDh-mx$Po`kVGTKp7my)r-J-!*x_G{vjq_&8#q6KHyvVmEHCpkoNwe^Kcl@
z^s`q+eL$tjb{<NsVAazTQ7s_8>V5gWja?YF3ylEmfqOi8xgNg0*8pY0#1Q(mCqL62
z0`8aiOP^9JSucj=lpRL(CI*l%4E&kRnEYrApne2nhgMM~%yImSkjan`Al%FWry+=t
z^l1bu@#m+j<7x{bhf`Ju-8@km#A(+4b=m`lSs=kbZvD0V4Bu-&8Nc!^-LL*#5xS?%
zpybpcHoV;W5S9AL=PyZo_2g@xfmn#zA4z;p6vyh0FXUpnTaUL)%JalpHl~A1h6xDZ
z{&H<aR6iaVe6QWF?>@itBD2FA{cAh@h*5gWtviq&Z{FqOA+Tyx6uBMwmEYxXJy;WM
zhf0j<gYUr=lT%oeHHHm9xI-ufA5FQ9?$-m8v}XTwa4Q@)12dE<D}%?ja*o2>ywv(F
z%uzssQV8~!Q|x##;(U$t=AZeeQ2HOV-dCJ@6RGp@396EKC39)^D_!p||NYEj&)oXs
zU%U9bTh4@5(2QvySFkQoJb?9n=;n+4t+9`UQ|~@gg8-u(FR%22m(0M$FJ2+H8FX<9
z{+sXfk<IeKCHk$kfj7qH@wtJ-__oc~H&P%*+Xw7?FlH_jyV~I~RU}hQIJ~CsJ;uxK
zTSPzPqqGp1|E>|x#P)k}62o(%FrNBx{)6ycCdqQMjo()@g~xcBD}igp+Y{*@Nd$E;
z*g_>1jOZn)$LaKJy{?F#Amw8xm*rx@Z`9rIpSy#042oO4(@S^?6e1paOhxlIFvcW!
z5Y!@Xg02F97b#~xM}Z42f5wFroAo!)F|qmzv0%z2nF|pG-5xG?QetT}!BY%6RZTRb
zwWspV7ngFD75W69+a8dU76b(0;!e4RxSem!?q9uP)t-xQ^#Yo1?Zs;i<11`-RRMkt
z)`W+7b~H$3*5O^kq81ohBywB+ogq4<x?k2v9gCT)*F6iMEf8jvJ}TPuy1VNSA)3ff
zppjH$vz}JoeH*&cKO3;4Id)UyA*a&ebJy2yia{`rW@QFwNb0tgb!e;oic2B@tFQZB
z*7;&HC3f$t3xeJAFo%vngCQ+1>0?)$|5RlstO6Z*`o_MdW#>jxJeP7&{*qItxU}1q
zn~d|!93gR)suCCzFS7tOYSvoq7}S|+?bc4+R<If(2*zK>i@LCS)zvNQ0IL@0q2RwL
zb`xhRk#M;o>y62;zTDolx1hmkv_T?r_U^q5xb*p`?4RC!1r+Wcd)?Xc^|MO&iOPRq
zb`aqPFannz2~F?YTYsLNh2^4qDAl$>AAkRSpGf7K_^$zYYlC)7?OUfaoSG%~_IlaR
zeS<+?2a7$b@Wm$?BFNjjxnDY2!kjfxQAJO=2orpSSK6L2rhi5YapKU^%c=b?LmWR#
z0Wk+`|BO3nv8a^{TB(44Icx?(Z0kzq+_9WU2_K*R9f{5t0i;(tjV&h#feXHH?F2TA
zMo#1)8CC3`)Q6S~&u?{{+=apb=JW?O-IV>&IW}fTkrm*G2Gr@bsEKj8#azY+aBrl?
z@27eVQGN<jbml!Mx<?T2l*~A%ykcoJA;6@+jCgx2r4z~d+g7!peaVxCu&h8kJK`4i
zxI|Wj(_gZ)4FfMshcdd3-v>{rX1{WObT_M&(x+ypyUUZ>S%`y2a-sZ|F)(C&H@w`o
zg6c6ljPLK4B&)hz6E%ua>zsz&W{0K^#iiMw(kd{z@X6zFeip6ojh{EUcrmJN_NM+x
z9dY0H{q)!J%zfe11m}jre}qXfU?sGd*MNIa!09wqB=_%QegvKqJ%zv(*9%A(rZktD
zsO`URXdMfW>(i@33ciO0N(DhL$PD^>j-r`8kVlGHC&s<!?3`oldRkP1T)6Yb!3D&(
zHwR<%-9jTz%*$?=iT|)@_cnryeO;rE*4E|NX5|(XqwmJE#<Y1!>r_ue`=@xH746rY
z*Fxn#_=j?z>WfnSkn0Bw{gT+|;WC0>l6eQ#hgKxkCod$u_HiT`*Ut_GAh7NzeVwCo
zBsjhI9-QT?+P0>D@rD}3PbV`^bvVvl5|z~#=GIAvM`GP!k+(gOz>%d%A`n}$N+#t}
zef9>Pss%}Ub5U9$pHJBKo!w6fDW{IwkF^eyh2qKw*WbCbwlX-r;7H}s-d>lGayMY)
ziO{U>dj-=1ngSKZV5u@>^{+f(bk~6p%VOcc0PKUK%!y$rsTe%S!ZNJp!3~JbYV~vy
zm$C@Vu*Lh-k^S{YRgrN?Q7{r6Z&gT6J(v7)dvaMdEII?zFJB~<myL)>tM%xM(yj`F
z@>zHCv(RUeb;0uLPlDDPGbh^YgoB?xSf|ZVgmtMG?Pz2Kk3%T-&dDs6;AH&HzfZm{
zmvyS%-`3wjdomF)S--o!3NN8e6|yaqdkWfm?#<XpyqQhBsa0#nyH+FVw6+gEXc|wR
zWl=fh9=G?d7gatqp}n?we)lxtlFakxio{zlGQ_ln%7CG=_dTBEp@A%0)DJ^-Oag*`
zxJesNp+KQ4M?7u9%{csj*L<eJlwwYf<m3e_zGJemjZW(JKf`1$V*Y-oXWb5F13k;!
zpu1(Wf;833-mJS8#>QxRDu}<8^&$<}MeJTYFh|&J0k=UlXl5}np+)4wuiFPam)+IN
zpv@~g%L)zr_!z!WqnKM}=lyZ~)o%8#?I^H|=v_fNK6Y#@gL|`T4!Nk{)T~NK^+X=g
zOB6|%TF++EU|=N+a#~;PamOsfc%dAeV?eQU+3x%;@7Cq_8X){`hKP9NZ*a-6P{t9^
z9new;`A4t1;>6jw-b*d@6h+3v(-oA0;~la*E3?myOW#C&{kVSj)yur)_++*<YPGzT
z(91URv4vHPGPL$llll60LH=}ppmms-L?DWxxSOg}Om<7kH(|(azZl70mGe4V7xR#s
z^uGXm<7~z|G3-seM0jZVt_NK9QQM5z#>Ma;1L-Ittn_oPP2<uEVqJpeC-N+(nXiI@
z&&(EfOH?iHr|Z5)e(BOKTPd(Oei5#|@%%^5{cLYrmr1><jcBImfu?Twkfdh+cO-91
zxM4Q#J~-s|<UZLg^9)QjF&GcuTfTd;d2h1utLqp->BRfN(9H<f@7!S;avPQ5s<IF;
z>4nU}&Z>7@NMCuln?5+OZ*)cHe&i6dnqM@Sx>n%}c&f<$oRjhP%4JV`SNzUA606w<
z>u@AraO7cUhMRiI1KXBat?@yp;TGnuPfTi5^45yRyuZxLV=9Z6mvsG9H}L3|%=xgh
zty;O`BG^KsrS>oTK1fXBL!Lie`(dUK(C>V>Z)aiC-y`JYSc#0{f0s-p`Wk5-<kkT=
z=2dEcqWSiWngkR6S7sWIVzv3k-jVXHtLVMkD}V`FoRgY~|33Gh>bB-Vs`MSJvfAmR
zv7TWKYM<ldIVsVV>-CQPf8Bz%+WJ$WdgsNRSj%odkRmY<(ud0h|4FEN;uYk%QS;ls
zodtYcJDKSgWNmhU5ctlYNBb3Or8XCBp3}vq;lp$0X;-yN?yAbimS&<ms*H?n&^V-j
zZ_|eU>CDRn3V2{_Yiw+iXM=VfiM22@t7KjI!z0|aW9IdXE~5iTSG93QYjvt@jM?AY
zio_7t?D`$-+<i9EnR0c2H_h33Z?DNe)W=m)b2fS~`(_|ric68&s}b{+R)V-bxvwW5
zT4n+pR2S0Ea>{l&Z&+|q)SoXD*b|*+J&{gl?6&KNeB*E4O~N@--J+4D5vGBwoWq0n
zi7rF*n|V%ypXa>S`1YnHyF+lwEmU4|^`*Yadry50H|@5t6X{aXwCc?0TW<?FM7++m
zSew8ys;pheYNzFr=I#Khi31ipn|)h`srU?f$8P?Q3$VP;2s?U~u_|idO2$Jj-a|{9
zH+%Y1f=8r#9sHJ{{ombZaaASw%MR`F)il;lLW}zeLg$E2UVGkk=Cj1Lb6;b-V#h4s
z34A*^{LG;>>M|aKt<{Fp>0b9rBv(jIUOq?i;IAG3jO6yovpGsG6G;nPu%#p7ohR^X
zZZ0;cc{B5?%*sK(`NZqAOiMXvrV+-j+-rd|1FOcOVRssf&Y;_~1kBKoiSKm&jLb1E
zqSi$7SucwdR2)v26-)3{{}?rQ$;u`L6GX_$f1{(69{<T;&{k_=n03u=QdgeYbd)Zt
z82iQxUBgGV1Bd_gUnVmIjiD8X5cLm65=(R;XQCd)85J5tAD@+PehhpNJ{ucZdKUh$
z>4XhA+uDwbE@};Xu3Gpo3Bk9}IGL8=EwJDv8o2v1$lM-a^F=jo>3j2e+12-ABC>b8
z-QD4R$v20oUsy*oP^`tqH%tiom&9M6R1vVD9-zY|tfIjBnQXl0?z)VO+S6HLmDZ}t
zTer)gP!=8&U#l-29l;uk11h|!g+*h{o=zc3SraQWCJ4+yRjm%}oo@M_*90fA{)8C^
z`)>T%*o==GgcuWrg49eSMa~$04O9RyIiNf*>Ylx<6`;&rNzAnHl?L66IbC&CYHWx0
z;M1x!l8MJ8<p2p@>^okBf8H*)*7CtL*3i#!(rlo#tJA&2CG#3j{uRH>k=?887*BMz
z93H1v9ngOo64mCS00<b|*C-XM*PgGj_gD=3YW6cqW;Ll@Z<b-*2C)^(Lu?PB1*KJO
zM`a&;i;qt)(9FTdQ+pw_s1WqfH}+y5m4-bV4&N_zfU0UsU=Ur3dkm8vh6tXP5t_G_
zv&0Pvu=o3GH5uYm`IS~j<_P|XEh^3}J74Sv*Bl-%*-!tfJz*^)WVZ(`dCj7tj-RVZ
zO1FViGZqvg9YW>OR+|wo987<12ipVU&YXNczl&}NYVWd();|054(Kj~n)vHaGNqAq
z*FO}ZwQ2sOeessks{4@pkBL@MQSte=n_kJQD4NiRQ9X%Y{VjNx<}%z3Q}OwE=~4zq
zv6?G>1@7D!u^m6>9kOqqvHuk#S^pjo_=KsFE##ze)9L;-3L{6$l{kw@(XevP=GLh)
zbUvxgZvEaomJHnR15y)fQPV9@*;_x?+_5HoLkaKO_O}oAuHrkxf(=gnF8lUv;54@+
zAP5s(m91h;jApX1f0kmHy-#^DO3|!-;+6ikGEckvjWH>*=DmW+{1>fyCbO5MzR>jH
zyYt5bW1liXDNi0|KXZnMBPJs{&4#2JAIQNCxHnTurhw%iC%WJDwa4>=z%r=+ryzUo
z;I(0ho|r>MIExU+T#K)sY$_?(S@x&!3#r?PDkA}==87WC&q6$2Qy#3<_0d(9(S4J>
z>1-+l;PP&lb+GGyfd8s$rJ7A^`02_n<+&*;k+|b#XqSl-PYp#ky(}LUh~lI6S5(RH
zU2SLYa+PrNQ4I)rSs_3B{zkk*s0)a3@3dR_{8j5$THyoS&Ng$P%0ktCtM%Vl-qfbb
zQ)faAr>90sFaSiV=DA^|gT+`&Vxjp2%75D0$d7p6+;nft=l;mM5I*YWn&S0lQ*Fw=
z^*F%j-lPSoeoSzMW=g+Rc5NC3Ns6E{`8o^VnF1epk{GTAT(#P`sO+;UXfE27pW{w#
zs<AQV1j{(&BxuV$?gT;f9gYyKtf}|q)`^8F8oj|yQp+n*Cs~CVuoB}P6DW%>bS{md
zT2fxxOzJBP8IuPwkm7`c@RVB`iqUhw6`W@dA{~b?VJfA2(3{fT0~GIrtSVfHG_6+3
z4T3b8vK@XJm_ZdQutY}HvomP^3<wwBAZNO8=9)gv>VpAi(R9zJONkFgcUk~1BwaL5
z-zbA~qspnwHtT2Fn$8W<<<vOTNT_3hO5DxDi?#VL!#FqV6E+w};mX-u#<cZyE!RP`
zHzLmo8gfWwQ|(U?>8@*`eA|{SyX2MUiyt}7F?}%1=3y$x7@C5}KWkjDGv)!NESfb9
zV0-y+szNj&Vfku1aky9K7k|o1SL9Y14o!HG1=*pphc=Fp7kQzCfR>9|DGG?mej0mS
z08JO1F_rxMw&N5dsNh0-5EYNQRk)%~Vi^r>1?b#>E6VYoEkVOI4TLW2Ey;irgPRpy
z#x160az>!~A0ULIZkrfW?Pe(W;z2cF+gSYjO!z&Us2ZvUH7ANaWIX#lNDG|(!i~1-
z{`=(iPY$#4Foan8nnvL_rEfY`0=kLC{L;fp5GF9_`GYWTZc>kal%-6Hn+k{Sl7xoj
zpn*)_(IG=sOEJ@0rO!*?`9ETE!h$|$757)d@g_nY!CUrg?VEPI6pRScxI1X3l~8TM
z39J*63}Q0^zg?zbCS}_yV1XnXAM2S=xEV0?+^Qr-$Ee=<0r=NE%T@pVVs_A(l-ZL0
zz-{ug&XNR{I&4+UKpgGdo(hmoQdU$A*=%Ed?H<I3v*u3M+a>9Gv4PCEISa4IG`6e6
z%368jW}cX-k-R9ylhh5{`uS1^+?4Bh|N1`Y?bP?!dP`#ZF~;JF6^~IH>#J|S6QW~P
zA^@iLPpXfjuYQBaWasp-WLqJ|ZC9N^Vt<$Zl2<Q}E(8n)ybQiQd@R)q4|JiB$olYM
zfF81%nt^xL>U#Gl%Hf@Jv384hv0*S&KZ&O0H*3}AcNi{-*Vkc}12PTf#30aifH<}U
zbMv~frppq2v*BhZNnzGUHa&qFV$PMjI0P3iD!(Kl@Of`AeIgTiZPj6F{oIA=Uu^#~
z61L7+zQ1qC8xv{zpD{Zn7q5w(Y3!JdHT_7yt0PNx4>~=zYZUiM#80GH?7@0M@(Aea
zNVXicI(cM2V9)~4*$aOcKU5Jne*ccMKRFcnmFbhfH@uh(Z>-^yB9O)qUa;@B@uw=!
zv$^``yM0&mLMOA)C50PZ$(qG+lr>V+1iCMK0>z{qlScPc422YD7dHGXc&MUn_h&p`
zl4WvTjPGkO$NOW3x9J+SGcu`6g{jlT)@hDx=Z~JTBn&EQG_DlLy6F8-E6wZn+e)o{
z$M8;?k(5U2aB|PZ=g1BD$a3te2BxZIy1c1n_IsV>IguazOs}+dP1;*_y*HIkqK;&|
zm0Fmw$ZAnFhwt-`KX#bw9vCJK-46Ge+yepjgTv8XoJvrvVD1N^!2!mwET0`s@6!PD
z9OGq*nl5DVBH}i}2W(?6@tMYHbJ^gAMWxpioI>dob$OXeN#=Hzpnn?Vx~VLD@77Xo
zefy>%r{R`SpT;7GK*DByy{mmPkyS0w@jjMT3l)J62QOcqrEkn91djvzkCdna6*ue3
z<3^fCv%I&VggXFsVYIzpeokMgq+VsJGb()-uOmrciHu^o<XpZCI&2j6;E!BbT4;7#
zpP<;R55J<x6=gG+t$)f;OU_+T9vXL+=F;CyHK!GK)j9`3?_v8BFPRe7zr0;hQ?R0E
zAUYj;3R@;&>fM2y7up{Kp3#UF_PG>@PPDr`my()olL+FA6pnlYuX@yfIkw5PsFOM=
z{~p#|TbR-6?favzH<js$i&(BbIS8VAxzjruL&}+BgT{oaw#ZF$82kfS=t=%X=}(FZ
zGwQAyuT3o*u90j+t%_N+hSQ+vuMh(vYIYTbvWTvq=ECQ{S4_xH@D1+I#y`xBlYdtF
zW!j7P$||wj%m95jd4oFBG@xL>k>7VW=4y}y3J%j+D(^t!8`PG`ZP&=0S|CJr$5WOP
z3=mMmdQ*tfRIu$s_t{9X%pWV@u4fCouO&9?OLHs102>>9I4(0Yx{h%t@E_9nP@vc+
z$KHokt3)H(5j+HAkMW&}InO-w%X_rH-9*VlG6IV0T3W)o%4pd9L$=`^fNA*^#=Y@l
zOqxG^V;7xQ9d|Z-VH+6ge*)XLuXg>I#_$>2n?Eit@>M=clu^y2b0j%zM)ogkZcdel
zbDJp`gOt-rLe!~aF9>+f)=4l5^l;bB+OR^5A_79vFXLn4@znD~d0#2N#O7~1KCxP;
z++DUF?RdQspI+m?;B+u}8|LD0)c(08^|NbG{rALtati|jP&_?;C=Py1udMO+#Zvy^
zkOB>hT&7&YwUj1^vG}E1Z7$_|zz8w(7GSSe*qg3gTF0&YoKQ(1;MHpFa(wUoy^<d@
z*;?l=y6;aLr|@hECFBCT8T!W~EuTKzJ)tmJ+#0<o0$@(dwRt<6<?S4q6*x7lfq|ab
z_KCaJf&KjX*R@32=;AU$fAC%j-A+o?V63;Z>yODJh-XYSEJabOF!6vhcxD*j`l2eL
z1j}lDP3fz$`Nc)~SE*h!Zp~liVC|k5;0ycCQBK%Zs#WjUt=VDx@<#@7g3xTUO0{H3
z%_75@n(LE&ZpCmTxH`4a31{2D$uxcSxHg3re<4UH@s``=i9;KKm^IQ!sCjovk&8aL
z;EZQWW1*q(tfw}1A9AoToA`P#MoB>|889E2^NSU4>|}JGfa0u>lX48p(xM2rnQ2zg
z+U<nAN@?{)bKBe_&DoG!h22K)hx?_!2RIC$9OrMS_~}2ihWgn5n8SN%*v*+`xWZr&
z_+UR)`E$~KVy0E3$yQ)S=*=8AZB9M@Q_Q6p-BHU(U9E+QeT80pBGU}n($0*iJA?K3
zUf$TJWu3EQXXznuA;M_`XmzglDe($U=Q8_ux*|BlI*M-WOr1^t!myj~;a?~@k6e1q
zAHp}*AMSC_ERPb6d|l&F$@W;~yGcjLzQ~sdBBf`|Q+^+s9(pBSu5E8eN<^8VD7GfT
zgDuCaA9a)i(AlNd?(><i+})rZl{8xHWtMZ>tcRcsGqFEJ)9%q-HxiJyso4cH<=_2H
z>o${9%Lq>5BNfX3lav@tAVMYiHfr@H<`p8{h{<YTS}s1>_nd0Y>-jW}X2E89YHzcT
zUdXtGl2%@~8f$3EJsLWoNl_Y-_C=*K#m-45)Uyn96%@W*5&F=+bOZ@I{Bm{6`wt0i
z=V_!ct~OAsU~&i!HE~$x{#%hS97@7XZ~7vtpxko7D*Zmy2QjFAPP~d9Vi@@JB{6iF
zh~=gJ_~D_$!L3I*V88cd0oq@L#wq2{)yce9@iBRXL%i=~dC|N5@wA3Pxm^OjZ1HO%
zFF`jw;pt_%MC}knU2G|Kx^<;Qj2V6_-ouT_W!745XGsrtkY9R~m{v1p#kV%eZ}rQR
zb0IL2tfQfcB<QkxuCR+miy&OJUwL~n=S)VqpD-5Ka@cq6U=}Q@411u~>#9W@ZT8pb
zUU~bGb?B!jycPd+KQ7Q^Jof9hqAEsD{O7|nA&><?b=y|bw?KysPIKs0hhXosa3i8l
z>Hej@>iZ;X_prpBI+|w+q$5MB7)-hE8&nc4xwW(gD_tO0zG<m~*4#MA(sNMangA1N
z#Zj2k#(z|6G#2@FAe3T(x#wI39<}{HE@1I{U=(N2W_(hqN#6|2DM{e-QK28#S>`4)
zs;YnNTB7PBXys6*dUdCTymAzs9_aw&lzTv;QR0sL7P&QUNNdcqHd+|eEj13Y3*9M6
z{!UFq>@tKLB`%+69&u6gl~1#N`k?TzqD-k6+RtUDF>F1NlEnhK277{^{~(}c6c0#4
zYfh>DOzdv(DR`}uxKOB`eSVr&QuQ~*PX9)`EpMO2#d;Sny_YZg?8M>1FP($C@3d)G
zS8EL)SgiWcnF*Xx+N^}aH+7pBnRYJ04UewN<cEdJm0Ce_<QBMU0`K%ioql5nhihq`
zQlUON!`DY=f=%=H%?w;vu&}>y3{3CVxkMyl^=I*Mxw*UVGygqVwa1->w<*=(?W4>M
zjG<bZ*lmJ`O)lP+z%w}$pbf$&-WnMB(Dc&QD^5=KSvsf^OW2P_$r$26a`I;8$Y}A0
zqU{$q0D3wJ9W4lSNrL9oNPa8salg}0iJjWc-Rb!bp9(wpM{LBCJ@tL?gY{5P?PY+$
zUS~+9FL#yzxG**Sp9f*sr64xd)vnOv)Ztg$ZbEdkdW|MF>agwvCbJb*%h%YnY9<Km
z7<o>IPHB-+lZAmhLii02kE46dQ#1$W-Nml~ABaL4>*)|jSm%|BC)&3<_+|I>#M5JU
z(gTL6Njr=rOCx+@g#$BkuSQ>wei+RTdZt}k$!~)D{Bzs<IhnPNSf8^?`nfz>@N}dU
zJt~+=?#3M|O-|Qui4aSZKi7?Zo^qv<e({^e+Ilei6g)Oc7h|VBU`xOk@=Dn%ibf&^
z7e~o?b$TC}0H%Dze)4&Qnj^P=4&w(_Jf-QSZCxz&rHziHD>%k8Jjw5J?_jlmu+b+a
z4?H$dxW7{@d_S4J%G$2yy#b7|JKSkJD58?*b`y1BvpQTm?C6&xf%Qk1G>U}9Z)}KS
zB4&rnssrGx`^ubBnUsxr!<hFdS}PM(L$BSXF*(=6fBW{|!RLNjcKW{0OosQtaa^SV
z)RSHnRzJ+6&sSum7}GEBv>vYPnB95$gKIJ&ru^qN=g)Aa0%ih<HHZo%R9+C6bWeaO
z7b1TBkVGd6;(IF)Aa~ZIy{=9Z|8?4Co$dlhdGn{mQVZAC$)RDtzZ8vB0)c-9_U<n|
z3+|<md(gXHTHN7>2A*8kuLLL2p$g?PUN*%`5SD7K4{o=nhV3{9Xtz#^=@D7vM`bM2
z)7oEqd+x|VE=ZR{5^cYIo{$Nprw9`?Xjgf?gM^tG#z7H^SN|R^8g#(!X{_t&4=fP1
z{c+l&G&4I2d0s8{VJs_GZ>Pcwz5#zU>t@Sy`)n!F@}-`lk+-YK*6+Q}#OWsbw8aLS
z@tT02c^!%D2mSeWoNJZlSwt6lNZVLru$4)>R~ge-)}?r%XyR@ftlv3RsIUokt(1>-
z)hlm)yeOL|NeH#u=yv)s65wCiToGdEACi44GrPXfKB*9N+=iBmS8EmNqUW=DW^b|$
z_+Sawa(p5zl5||>9mxb*K)eqZ@X`S6?z(&!+AxRs)NtKX@w$e(^**odu76&3meDSE
zzL9)&!=0$uG+(s#SVN&IDvHPQ)1LEkJbIv{Q43w|W*^$|=9;O03;M<azg%}!P&3w1
zSs7*fRo=|6zL4h-fiB4NHy{!mgbQwot{)05bvANpXVzX)j9GI%$z(wcS`@u53vAZv
zkFZb*JvadVANH4-nbUCS-f=s07p6<%Ap2&%g${vZXuPrV4Kc6O-N7@sS$jcbc8U@|
zo}(~t?-B)amkxu4C-!UgJBS-i5LqS1aJ+S>VL9g(2;*ld5MiLqBKj6q<9c``!i*AY
z;dr3LQGa%TmgyO73B$;jw_BiAhd`7TXa%N%67*e~{NrU!RGV3;M~Q`OcMFaZfyQqe
zBPijrcE|K`QkSTkoApWw&&mPXOd?*LA*Zi<z&;dT`qg$v_Ag;=m07GhXKT*X4umI}
z78>iloYg*9g&}B}sB~xN?k#sGp{yik$H!+vPiVgyWg6$5{Qq?Ys`3jDd<=R`A#}CT
zAS&)hV`V|Q*kO3q>msU9Ns23gX?Wz+kno0WYj2-6=)^)bUeuf(_D9(Soy_mE<|(Q6
zyaV{MpzEFut=%`fsUT?vjF<D}ZG8Xu@eKO}#*SPAcJt3zRB^5NQnJ^yhF)&{=jzZ#
zbMU3`->uFLL24kIu4mM?w7XF^+t%{z0Ebb$bKeZPg-xX1Hppw&mt-FHh|!hP<4CLx
z%xbE~e8{k2@2I;!WvUd?PTDU_#>)wKd6Y{T?D`E2hJ8olwd=jv${?yCSrXNf7cu8*
z1<~pGY`{HSXGrxZ!rHiO%7~jP_S6gLpXt2p@PI4BFD}Kte2wYEu*obo!5ekFj2uqf
z<|>E}grsULUs?<Z<V#Rv#T;K%L}xdX!#gy8j&doc)oWjQ&^?cR_CtTY!71=fN0StM
zE^&qIgPpI-+?W%*I5QiF!83lcLI|I{Js{kcIBdqVGXrB+qqqxuIGj@Yrxju60&gEb
zenxxvUWUG4Qv+us4rZk6K0y$;kV?K%BR#=a>yR8B+0^6cMYQZzUC^t%!4wh6=!{@@
zJT9CuaV!>Z`!2x^`1bVK*nV>oeWU6GQ=fcFx3|Y0n4k2a9k)50&&20rkqS!U06|im
z9okfGE@8>SC4v=%+)hs|(`>P->T&|40fGLMY>?y5o5^qMV#QL(HI2ua9R5TE7I|*V
z3#lcQ*T30N?%TzCbY7>0jtO@vjY&$1sLL&GbB=lF&|nUY{X2rk5OFoHiQv*Ifqb)S
zU>!$kP5vG^WkkWw&g*j;(l+CAe8i)IZ(apd2e{PZw(Y8XIV;zANzEf%^dNRd_WcI<
z!d+te0yB8xo|eBhc(=O1J*zztEgpx7k~4g?&%mul`oNFdAt;1E@-kPHH^TjKUgeqy
z@Itp{*W<5gZ9CA%xVF_3qfgf3R@WJoYd|wHTar-p%#-2Ui)$r%@pSLI-!5A}S0a=%
zd>s{ceq#fqe&wD2`uKox>IbjqR>|<Vy4BiZ@i}(GJ3ccn%nmZT96h2xCfmq;v5L~V
zL<PO~nd+XGc<Od;qrtSzaO}R`&jf=bU+S&-xuiOZ1*B|Is3lo_na}>&Z-82O_NTe2
zKs%&KXHMH!e_fG~1`6YNuCg6bydF^YRsXM9G-eh{vW>#pLzISK1@SoV=x@9@9)R`{
zs(7_jKgIXyt1?Zuul!>(L%^M|#!B0t%<$fSJ7L-ehh_xs0mqVAJe@x0*$$UWufYY*
zRQlEZ1<x545w=<b>V8g|5L(xIi9=@#Xo02KJi?E7qA;PE_i?$F{=0u}-vq-)RGT30
zp}+~W!dul`lzX*Wmw?Am`_D{%H#`GHV@dgQ+`?@BS}>G2;hOl7wy^2O)zrCPeu>+2
z_*yq@aWD-{gecIciOmw0z1_#32=qQeQQU>JK?!{?nD60lKYlufXK%K+$!yjg8GTP-
zdCEO5wkw^=FF#vPUa6Kb0K9(qh$$RI?>ZjizMHu|<fYtbb6hGl6@4+Vs8OVU!nm4o
z5Krs$W%Jw#r7Pwf-9hTc;BVWbRFDQhh@&_gEv%9ZcHD8k=(<+_lM2Qjdo`Ljv_pH`
za-`RsK<mqVw&>}+ic(sSEq<BHk3-Dghvr8k^hQ<bM%%-Dwm~j+@Y;op*VQ@pC|02o
z6{hY4cLI+)0PExyWiD`mLN)whWOWzUUmvP?RGUKpe?Y2yq4vWFbF9aNn~@~yeRyCQ
zigbsAFxKsqQ`=A?Z`NV`wfb6G6}isek-Dt-98*tb(UVO67)tJ34tPj$xG5f2^#=1W
zQosK6aMx<-)_{@KM<mRQ0;=*c_6V_XvhKv%EN@n?7A&h<d2)96-hIQkEC`p>m)&R~
z=-0|`uJs^kD9JKnGi>YGLJyfbV{WCccf4o;r9-1Rrr_)HxQY)YNg}b&Kq+v)g$i|D
z@BvzP!0k=@EwZbV_o=~~gqGF{3JV%@eI-&T_$(eFkkzf%_~!C_nO1~V1ShxkG8BMK
zFT}vw7j=tjFWk(`l8A{|j;I`;x$h0$V3rkjlE@RV|FTD-Vy>S3`skFi#d&`ntirqp
zIo*JA3(Dv5v+?sLhirQv9DF3}bdjdKz7d*&MSXrA<}z*RdPWlwBo)o0(w5TpyTakU
zt&HT5C^&4xXWQ0&F=Z*Uy@;K)&tlkRw!lAP>{e=n3;P;*fa5~ckoC~T_nR?h%>5lX
z-XD$}n2aH`ZR6*RTb;LSVJK*-dbM4CB8L<+q2%-S^O}Wg-4mIqb>g(5a*9?7Ogw@&
z(R@dhttsW{MjLdjn^hlHCC7dBL$A<OU^MLd0gLP!;BP2t+o37*WaNzbeYIfS)7GZf
zM{uk)fRWZGK=lg!IUaNoBR1w#Kg~}f49spmTK8n|c*BH9{<!_kaqgnScRp~sr(t<k
zjz=*_k}(AQ?9*wiZEwyX86n}D6;uDXD1w0p(I<?!1NrgZz}uS=7hHkE4}AnZN`X%a
zk-dW|U7<R?>Jn~}8F$Ux4?k7W^drAYeU%OZzoqVzWc_qFEnV%{nBt0#i4bz$Qmb|8
z8vU(xc`CCRTjJ8>Y2{8uR)*7M-^~T~vW;kU+(+Mg7kc%S#=1+B2Q{p0$o=7zqt#tN
zM(#&Ch94XE;=CP7HWl#0TbWE+263*uR_xDht3eQMHr4QN?s(|%P!Riym1sWkg`?8O
z16L;ZP%~+z(c%?_sio`EiGzi>=UaY`DbSmP0!W!+L^)^A=i;Qj)io}<Tk18+`Ix}W
zp9hvjF3<5L9Ck5Q1xmX=9#V+Czap5G5o=2VzTai<3Vv*r+5`ZRpW7hb?<Ts!i@HA_
z-Fe!h34gX{Mk<!XgEBp1(!D2>XAK*YuGyk|0{ay=x<oD!@4tVI?MTQW$L=E5TC}&h
zY5edbOLzR<Z^%!S)0xKjStL{N&eYu0prg0+`C{cMj!1HHbnC`d%NZTGuPk`ykBSwt
zU%962`Z0ESwx8-Sr~|2ig@V?Ex@0L;0(RXcpQWWflxoyStk0ah(qi)7=O^wuR;qSq
z4$HBEs50E6QW7I(v!LJ;v;t(jex`077$e*A#PkkaJyQ)qoFoPZUPYfV^dTyDc@O1>
zOA`~N^M%qqe0Gu^DA!jMnv{uC*xPYglMsFivwE%kQ~G7CE;IdNvDzjKb(~LogmJ8o
zGy?G>?ae3<yYX^#+6b>UUJQm!u=-02c+pDZv~FJA!#<AHR()?K?YKu!8X@fWK2wf!
ztRuc7XIgXGuJO~HmtV-gVeLD~G=qt>PWn|7nbiCk{*#<7;G)ve_BFW=qGnO!^4=H)
zqcN!dE>vSe=DFcoy(JLUw`Y4gflAs3(Q8ov>w^kS^HGf?oSWRd6}ugP&{#y5{fEx~
zaRIwfCDF6YgOR|d`q)7NlVK#P8a9Ar%MoeJQ1RcaM=AY5$FkASn3YhP@>)2D1B4W0
z?6p?UOp_IhAaOx8{(u4I6J)|7g_DaYmG<nI0K?H82*rT<51_)=Q67UE>I_njtL$?F
z%^}X|ctjZ(U~9NL+!>IO!<}>|T$gCT$b5WLu#_{2>N)`CfW@2_XvYI8ySV1}!hKME
zMPV%Zet6!}lgtAfjpgP>!wjU~_*`Et+%^aY1)`AwKF@&+Ml<3=+fA@Bqc)5(H-LNK
zCuVZz^r|~hr{6)kAY)V8<U%d!T>EXbecS9m6Pt*t{46vuAfFr!x<o{Q@$CNpn0w2p
zEW0OslrAZ05CH}0mPS&LE-3{m1*Ac`8$nS(KuStNx=Xr58tE30l<p4C@Ye5t&N`pY
zr?VEi&<CFTzW1KF=9+6}_7gs*`py3$le@1$*6I=KZy5>ITY=&{m0WG6Io~yY$H-|j
zJM-xWo#!UExh!sckHO!PC?40DWIbi8C$U9$Do?hG7NRP;YxiPgG{!rAqUIjkcQI<@
z7nT=<)$NO(r`^Hyq2mlo=fRVC3hBdK#@#g!t(Q`<r3S*iho^)}l~<>9zNi-@5Qu!#
z@1nb&gZvfJHBKw9zuGFarLDXV10ipocU7>?%xJ(g=Hg?U?sM;`X_$E&;RqMFE3IoA
zueH&`AIK)czdT48n_kY<1S3mqd(G+$7|PvhFy=PV)nIVTo~f7NZJWgUc}0CiL~jQR
zj1nb0d479hM)E3liqiPLQ!j;wJBpI7*S2;<V~*wLtnrZZik)L-oy^XSb0?|b`EH`9
zv)9ECdB1t_$Nj-APIAg%`yRj?&p=N<Nv_Zm^U#Sk+0|x!ZHI^!8Vk<of5(1_Hn%<{
zS!MFqjNhBiXfP-^PaGnbKim6ks3Oc;Wly<3wtxDJn8|)p({2B0XKdkj>K9zCZ)=V%
z4G*=e!t$>q5BYUXbZkFzN3lPNW>b7yKYKyRY#!=4bDUTG#cG1PxIE+1e_Q*_K&Bw8
z{@8QN=oxx^%4*tif3FWonYt8Hxku8b%6ISn8DL=-)ABkWpy_wH>eWrKjV_3bte6>@
zAFZYq-Q;7}S`;hJEWdNvJ2w?y%!@E$pjB&)Pc38B^Qmh=a%$q&&3gjEX(;VfURg3Z
zFLw6dTo&ZDwl#Q}2#w@24XCeXD*Dr6$q<EQV~eGQ#Px9JDE}50>22&@=FU{VZNVlt
zUvbgKziOsbo)r?LdKY7|C8RVe^kgoBHmU6$U3@UHoOWIXWAd1{o8Vjd=XE?L+$*=-
z+*FDZtZp%Md%Q^#kqfu}`4eTGVA$m4l85#_;k=YGd#0`E5L-zPzuz~7A7!-1gBPw$
zTVsO^QYiK31bRQQ<=!cCb>7SrlV@vBS8_~I7fQJ8euV0PGlDMR{YxQBb<5SMTW+8y
zUvlHON!SyIXV$Ck`Q8=@tKpO96_mkfOlNA|>Mf}mOCOX_NSF470xPSMc*e=F9ZgKl
z70h&)e<o@jF^3-X6G$y_WhQ$mc_&(7!p_O-%;cK;eThF}v14n=eA6^Vw&;NQ{u8n5
zJ-OaH@;XPC1WrYs?Ry*P4~+dww_<sm7f@~ZxZ;RdNEKL)*a&rV9?zkD<SV$4UhsaZ
z5t&H;Y%-CfAYWX{xiG2Rsv@#N-Q2QxJmITn6ihfjqEh=#{VUlmCdMizlK4GY^dJha
z(pOJ6DY>#cNzJHBW0J#GtLb-S*Rck_8svx$RzI7(JDcsD)bXH{cbf^n&y)${Zm61?
zsYRP<=gN=)63oFb#X0ooGS!HuE~u+krg4joxD4Z1trzO}V-8FZu(Q=G(dd%L1xYG(
zi&{v$XSn(1f+T_)A9c&ELV4(fzs6KRL|chasX@ndkWo!D#w%+ot4}VbBrU0=*)}O+
zyvJlR@1=dWVvsvnO^k?1k>^Uc;`$+-d>*~t5AAh0$U_(=p+|-~lL>C;tgsw-PZs<;
z^BSkMLbyIFp+j$bJffhW3sXw-&(7|lUb#GFiYoLlK0Gh{6hqsAy-_vO<bCYM<ln_$
z^H$L^hB_bSU>=GZQR#GhYMxibxb>K;4M(M8M5VJ<4d0jeDoUK+{w6ZaL1QMWvNUDX
zA~1W8?$=<X%7`R;=59^e$2w+(y0kD)OSa?O$m(W`JlPGa^)(yW$Mjj|BuO?hecH<+
zE`F;RfkUMEgFQ!g#`|Sh4~R&azUq_zRxBDAazS}|{;^T`#Y5ZYr!dz3*=Luc=n+R*
z`t0s$p|hii<Vm@f4_zV^GlplwJR)DVMP0Uz&EomTcE*z6iuZnf#G^u0+^wa2_ejoa
znhq2-U9|CT@_HMJ8hF15cDa};<?1hD!b;1nCmgkKH`iWPH{s{Nw-Mr5f&PNC*i5hd
zl4${?s$}Ld4Ns5UQxY+q$$7RuWz~l-hELGVso!h%FV<EkEKn{!?m6Ndpfvd0!(H0@
zxFmDnQOO=M%jwQL@?p_Z9|K3Jc#ZQkwF*{dr{#^Xo@0d@^FwPZ@1rlq1=KE=)Z43d
z!UPT6%TZ@=bNj9=kafQpd4JwaKY72zqgN$v&fkZpxFG)ZZEk^u6W0hyM-}l)?d8e-
z-d;m4aci-hJ)Iz-h4z}u2}a^bih>?f^E~ROS1f0mRv)+X8(ZK&j;p*A@fl;0Htn6f
zaX6YJo_jMo%6Y9bcdg?@MSpuLhv8L&oO)jJJd4MgW4Fqqc=Nh{&wioX>}5!c>v8AC
zE8cX+N|?2*NKWiG+`VP}f$!W~(@p$6HA%Inj;5p)rpPlL@BR2unG8$%fpzk@Qt=*d
zL(BN~jO0|N841C+9qZW>Mf4*2sgc#pW4ly_?(bkK+}4MkEl%&9{lsoAjCz%^Rco-T
z>zBO2s3~QSjmhvTxKNC~wXn|yWB*D8=vv$>BKvWren~6QJ5*|Zx-qlMI~s$pUaj>H
z2!59o;PVL!>?VDqSFd<TH0Z-RBOSY*HykxYZk@?{Mr*Wb_*sm3LA6q^lZ3R*S-Re0
z18oV5@RlwVZ)4JJmPkJQcx<g9uhXA_nN>^JGJ)`wr`siSUFFk{kx8;1s-q`uZ)q4u
zZ>*j379sU!>E)m+7VliHeF6F-sUeJ|cN(8L;>j}0@rkTp@b3O)Zp^J3?x;6qm^mKz
z*nV2c4NfE+4;H<>dHSsEr-IV{sp7fG3RVw+>4%s{p>;X|6ETnC#<WY`#_#J5^CDor
ztfCdt(l;L^$*xeDv+}dop{esy<E%+AFlD$~5)}p$BU!0o4rP~vi6p-nD-Mp|CW?Gi
zY5#6#`M@4dPpBD8vM3@JnB@=|n{>8RR)AA9dSAB9=6%6oEs$bY6D!#3ai}y-TRGQk
z&#=hTN=9l~VvIRlJn?oq|FG0pv#niqVSK`}F}6SAMPr+vJfC+e4rcWC=^25lESiId
zo*&^5mj-o{FVDfC4s%yyQ|h>f>_s}K1X41jM20#&pU<szTBBa_99|OadprsBVF>Le
z1?tyy`DpzMn`h&}vEC2pED|yG;n+T}ke`ZBK~WY}oAD}R+7Gc1HL{QHd`&6MbIOj}
zVQRlF*I?imwF`syO>SQB9ysKYDPoxw%C4tFlI%-Mn$mzqwoZc@+*KT6L!R3F0fm${
z^+9S~i*7BQM@X?T`@IbYUzp4)0~K^30k_e-e<P)MFNXV$X&K7En9Cw}!DYRWP;?%P
zPhqxFDBl4$q0#mVcTv%vG_mwpSwG?Joy!ELN600k_cGbW)qxGMPZPbEy<yCP8;CJU
zDf2~g63_ir<HjiwtCnTzjNLx1i9>h2LEjYFL9Pw)v4Z8Jp}~=_o-#9&+FDi)gQn*A
zvXS@Jqs<rYVxAplsPNv7=pyV(qsgzL@F06fXHllHslS0k7<z(rJrF22LmGNMB83ZM
zz>{y;)P}5@xmSgqv~D(fVq@E)e{6i4p&>hGm6lLIU-<nl+LO8O1=D>b4F-iYd09Z-
zi|hjh(Z&al*E>Q85^t+HCwsliQE20C(?0SwiQvZk_mqrRx_9Zz6bCL$V-^lI3Ylz&
z%LNT4blTyHh@;`>nWV*v>Zjj~<sb9VpKaG-3IQF2c~#pStL3{-x?j{-6TiH-J@E!{
z^!@o#RZllek}6nbpjIy5|7>Zq{?X$8R;&Sk`(3ngzpn<wImvJ&Mg!v{D_`eIw3}~|
z$I+@Qe)S#2{NOU@LrNzWd~0kwm{qk}PjeTlXpPnPT^-lCRP$n8)ZEB#zhkY54kNJi
zvn|IgYu_%pQ;K2KUVrk@bdh0_v(nuy?ZsJ+6>IFbcu&o-NiY>r+F_bD!I^bytm)MI
z)MfpRi4M8EGK}6Pb`NU7peDa)Gq;W3nK#bcdijdrUGrw{f-`UF^IhVwwo7K+75L>`
zBb^DNQ_mblzjHpl$4~_2;=G<du3CPT2R3{A_>&>SR_tluQf=klC3Aor*t1lUz`aZ_
ztM8YS6&^;@w#=jIp0{^xN0(kq7u`3Z*Hb}U@Q#`|H?K-YS@6D{mla2~95qI9Z26R)
z`d9(Q0e}bcs?%97g_L5$`&(noo4%g&Qqx6gmy>#8ZQt6E_Ztk%&l7-)pR1`Pm%lw9
z*}cTdJvx_v)kuHi^l5PzWNgaQw*Ds5;8RQc(hT$7(vllcA;4|Bv^Uq`KD>PF@iy_r
zuXEyFiYWT6*r5!m58b2%2i#CRI2v`m>p7|8Q%-(-L-)*tyMwD8;nvd=>Y;tM70MV}
zF|hSzPZ+lsWh=GpcWEB6QY$7r?)E~KXObs6#D2y%!=atUucX7j6{}LFGX>MJ&$=1i
zQ4PXyT+h=aip`jngr_bBO1qR*7c_ZxF*me^w?7IJ9p{b8goI}0>Awksy2XmcbKg@o
zoPuAQA*{GkmIlM2Y&S7pZhzQsW?5IQ!?J$NXF0^7y*eRfo&eADiuW;gF=OuL_fzks
zqH<lWXoVZg<!je~#$D#nU@&U4=0fo#c1lq<jIsIb=J1o2@^m@d=zlh);)H*G!!u3$
zOOpMdvIr(jbZe>Xeyq2sx!x&tlLn=ID!HkB%$re9RYGMY_hUZhUg%qTHS)08o3qct
zfIPd*)2v5^r6^E|iS1;78Y}nZA%mi*+9JseIQ$EymAGL-o(2Q=uU>*(bd&iI@$iS;
ze#l>+KlKQA7<}2xCx<5s4v;ugzOrG{{$exDv46mLsJ5r+7JlmO_Eg7~&feApG8Yrk
z$<Yq}a3);z6!q~P>VCc#f>!1UFh{1NvPHeQ`;4_@q$v$2L-a;}M$PtOE(u}Zakrz0
zGkRiQN7iQktv23-$fEpScIv`!2*L!%3j4R;pWmwl8!OMPZU0?Y)tiM`0uaUH&hhd^
z@ve8Z#&{m+m^W#z%^W=)GCeDk8-xROMYd3W%Fx>^I_<G0oDZ?_^xts@+Y$|v<ZqDV
zfGz)2wP%6jIb9@i3;piz{8Pnj7RJqgwE(H-=9YAx4RE%>;|8x;judA;80|MoAIShz
zRvU(sDlVJghytY8<^6?)5iWD{ywNx3N}~xsYA!qWxVFY7xTEs3PR<r)AvwGh(*Htx
zNcY#l6Us5Cqdgw0#-b%*=b3V%?R85F-UZ$&(lYbjPCiA4;J$+M+Ou$0Lo1x$0YD)E
zzG^TV*eUjnb>9vSJy>Kcurj@u#RN0f7sWVkDq=9jt<#ed_WklL90)SdaXlLU&ruT=
z@quy!o<hynk_NmC;BogR>tJBqVaO9G$H4(7v12m%hqv2~yVr#SEmQ){E}Ec`3%`v0
zdzQ3=&XN2Y98Ay*#W{g+`hhhs_XY#6%MU8GwU~9+ja_<Hid>`mG&1wzA=7nzy~RkM
z*uD<tUo;8L`rb|BlQB23p60OCHsr%>JGNxm(uVS{?CU(&0ngl@1&33-mBp1$rrv&3
znveCJikF(^IF8O8$k;I6Cr{H%WIpjmoj^0CyFRvKc;?G_y}{4(K{(3dJtE&EB;MH-
z9D}y|I^#ECt&G;6lOwmnxV`QSu0?&t6>f3CSA&^;`KeI|BF=dS(M@=&?K07G8zF=5
zp8dbZkcn{uu6PsX?Q}r7B_Wa!DTmjWUk$w1=S|%TQ(xsK>{ra5-xD%8%hXkxE~<1D
zRDu%%z{vJZPP;Ca?}v(1vL|<$IxmSRVcSJQ0JuTGA)>v?Vckjcs!?lu6w{H|?4C94
zR_rmdu9Y-APdPh@8J&YLSJRP9j+tOrqWh7w8Xa!ayf?23{s8XFJf{q&N+hQ?oyI6j
zjxFtei^dvcotHluyLo<T)i1-@4j;8`i!#HsD@@m1GiM`zeJ}J>bLGSKe~g&G*SU<q
zYt2beeKd-fqpUNkY3vcHCaSI6y%b`R04GhRcX-xWsNOGl!$++%p(V&8!x^XBKhkU3
zZBdDdSvn%KDJX32;!-h&X(WG3eH^pweGVvA4$|G9>!0Jtg@5=W=u<lBx6Gr>bCYmk
zL;y$4Tm_kJqG?Ipr&Qxh_EGJr+o%$Y$UXZQ={7vprv{4OGQOau-x^>;zZ!|bJd)O7
zL4I=1V=jpMjix}=HsaYIsiarKCAlf|yZOoT=H-+L%T;R@IB91y+}0YKHI^Fbd^xn}
zR<iWnY`24#Df!!uS;l8`Y2|H1KJ2rF+B*iCG(0cUDCpRDQ>m;_R+(M?`EgitlPMf4
zX((!8LV}N?l%VZv9xvDX>~X_TWafK&p3`N`!z9KbeUT{L>oYKjq#5Y=LX%6i8}?1U
z9J&)+@eAi%xd+WuJ#D!1FflJmRu;*6+dJmBn=(D4Qv2^Ie~KLYZ#wC?e*`AYiYCN(
zCuPpcYZfket4!E3DydJE_ib~3RKScy6SGe2+ZI;RwIROUwASEQS+n<MLvv`k_Ukxv
zyX3N;E~mnBSeII^hOPQ}WaCM0mlK@GKxvt~SnEc%5k|PL73nH{+ACH4)2cI*ej=2{
zevd&x;ZIqQilXY0an#c-%}I%mDL8Ao@n<epnLBjf&6n&X`nygw!tD<64;DSy3x3}$
zC1MlH(h+Hq<p1nqVfTtSXY@-Li?m9Ka(f$r?vh!Ui<6wB?eic0#_4K@9F~`1V`J||
zYmz(n;-8y*pI`}I{zUMx{L{wjuw$q~{)B643Dz6a_M1-rZ37bG=#2Go4{kFC1c+LF
zGb17(EU2@u96o+xBFWXH^l7+Lx*ANe{{n@!LOSFvuiqD(XF9zqA!UrgDMU{iJe|yi
zWZ#X%<V<uWvH35(W_nPrc-G$~U$NI;>iHqA7u!9cCm*{zR3jdH4MmDt#|`P@kkr%c
z3A!#0M|`2`o$pj6JG8l{gXt`}Q5BD09wOpvF1@u`GPxnu{On7wH4@uUYV^aNs369b
zxF;0eh6K;0MiA0t#JBbEKPKc_cPo{q)!eht>5TO;m3ooZba<mgF|;m6PRn=cDDsPj
z_nGNJ%om*RQff&Dm{|yfTkXEtVw?%?314|G5eb*Fnv5Oqah2S4DeSebvp|bMzv++>
zy4M2Gm`JkN`BcL@4z+u?=*cLCnt`!=NIHi`Xz9SD)X*|D_G*=QMp-apLfk#o%caM`
zaY64Daonq1W6X6v*>c}(mnIQj+Bq$>q2n6(^?X4}W({-I_+z}3Fr*_AhVS3pyv?p|
zmyz7L#&oCi%D$mzI45hLw(IjQ$K{%!n(5$S;KetoU?+s&_4xdoA02%JhtzWfuTz;Q
zVVTU9>!T?ZM?>U;PNjI58r?3olL{Oq>lhPy)_DGS<g#jId|7hQvWAXi2k++(1}++=
z&VI%&W<P-$k?!H2@_TR6(irVSF1QPVD5aNT0;Qfql2dolIw<wnw_-06**-dTru-?D
zx`#y98x{E(^>x;ouNZ?NrTogjO+w&oPec2#<Y)5xnWH6<3etx@F$6`a9i4D2>K(DX
z(|)vN2Xo;k3Iq1u&+9y$r0KJ^ahUBJ>L|nWv%5L86EHZY)-$9v5tTK1<zn1X)ZIU-
z-H}(gNFaFrCKrKF!At5>43ez%Z(*s!dxO@JcSW@6rnR(F-i9mbaHPAZH0zArUllPZ
zB`O#oEI5==Pm9K@(YIn1yKfgm9BJdWGbdqZ$0-qUfQM~5KJWSnA4LMbBBEOd?%DnQ
z{q^5;dI4CR{xleWe?{IAM<u)dvA@1L@l%oB{ri%?F@`GQKW_rBa-(D;(EjsV{xsxB
z8ooFG`7MbEY((a!|6Y=PjX-Sp?@Rb}4}JeXUXFdy$>HK;Kf<ncA#3-?LqbQq4$8Sm
zkvz-J=lX&UUkU%a1d1DNoid)CvGM%aLlr84n^TRmSC}uZh^1fk^}HC>Rei^y|Gw~i
z=IFMEWO_Ow=6}!bpYZ^RF>{f3w@tf!pBU#g3Y$6+jOfIRoiAn~&)!6lTPHz5tdz!b
z=P96;jqDCU$MX*e!1T}XG30C|X}|x^`(#iS^&(%4EqkP1_QktV^2}71h5bl!QsjwW
z?h}fPBNKBO{S_EE?p79daFw4Q&B63Nl7+1A?0J(P%UBvLTG7W({I<AS<U)?W69pZP
zHm8m$3iSHy*GJj1G3oRhJO!QBG$LaJ9Dm~vZ;qF|pi3eoCl@s7iq6%{GyRcVFA;#o
zqFqR5{!S*GY9w1N;P2hbpekZR6A&7B(bx0vvLPEIVKWPvB~I~8>Y4X+mWJmu$Kzya
z(w?j1bkU`Sg%=)2EFvzW0}UzKTjy@l`0c+=LbcOEN%rny_}AHpo-Pum55z@8*!{V>
z)T?!FYi}RR(+<yIj^{R6n<!(DQ%Dr?;A3R`-4lQRBeUk+)fiF^eICnER(AG6uk#~2
z+OZ;oKg*wNlSRFR?B>KHb16mK%WZzv{74Zy-r4bW)~~Q2{@eQGMD#x)U2soR_TETf
zV{F32eAO1}US%FbYX90tlb(llIZxvJZA|A#nF09@^6_OIffuO|9jjl)L-FKK58Sww
zUiKzbSWT4T+~VUQo9WM;v^ylfZ>pFmaC7k|ujQ!Y=Hy435aJ*#VtXg2AgMP5_v-5F
zCD4_fP{}YbFldV2z%sHvEnOT^5$la&z>_1H<3-gg(Js<&yx3DvRK#X9r~ByI=0VPH
zL#bGIe!T7C5=%mwub!pcmnbOgyn%6M7e*;4n{Y?F@Y&y%Nq6XKjWu<wo<WL{bM7*O
z*G_Wb%F4xMGb_eV<M6FRuUjj*!R}Y5irA=L=^WX~>+=H+vF%{Oz1{Zow82rKCoWsl
z<f5J@6_#U>4+v0t&AF+4E_T5Pug=yv_P)PzaCo>$`YLc^qAVaPq5<_b71dQcwT~~N
z$<AD}*yX`cx=eV;#pprEO<Hz?hKtMN*;ZOkc*}+M@UkH#`k`bI5ATy-!A7mG{dR-u
zRdHV8kaI8Y{Ax}0y*yhliinDf`}(3iY;`CroKnz!qSPdHY<DDe+cbb<@@k1P!|qp$
z^jo5Me%qO!wJvg{0xnyW<=8~?3k%5RT5`HhWd@tb=(vhWLQcQ?KlkU}xpU_mx&D%V
z6Fyq<i1+20+Ggxvwi@kk|Keg!Sq3^f@mXG*X|m{F$Fn|v;7?Y&uLlV$t;g|}^;qHU
z4S#i;>90l%DI~lv`x5Du62wKv)k#>NH0c)v+XS5!J8w?9?JsZstmVfh%O?KnW2C*@
z6OWEfCLW6V@F90D3ad_e_M`U{bB}BW(ohwL|K6K#ZeVKD>t$HQn_%(%RvyP3e_o|<
zH};8L*;H&qtS+cLdOv=&BNtZ`uA6dY;*;z#O_y+n9TB#DEZrtWC@1Xu8xx5!<TEN3
zk=+IB4#KsKU!3kAsNj2o^<ztNehpdedNfy@#A80#9Dpt%cd}Kx?YuqH+lR`8&$D9N
zc<I~{hzX95w&X`8X4(_?kwx3T6w#haw(1rbn3(s2j_J8yzc_GY`~__O5MUrZ@H*pB
z|Dx!)D@c}dy!8`#md1=}Zr|88vqe_7-u+N`yKX2`Ar@{SKp824?PrC<in6Mu!bfIQ
zwAjH+h1QhRnSQ<0KfVOx<>u<DrgJ|EbgNpPZa19URN4F#r$#O^)rj^^Y)tAF3~4s>
z&1*uw@z!k5aqj-hJ|Z@q=niFjS>eb0y0uLW#YU}Y{V(oNv#NjMv%cH6!+dQ2=gRA=
zkgM0J;&01hB_a-e%E8oF|H_G6O_twb%$m94jSu-tXeG?itsOSTOE{Uul`2y3mhs|>
z5_m1qj>49EKebvRpK<==HR&QE(-Cn$cv9oYL`Gzo9nE3jJ(~Zt_=ZjZhakBo(*52h
zKV*s8tJ9T~`no#9*K~hJoWA`@eLpk<b{qsWbJyk#LVB(*3gMA|sOpAxFA02X{}d?&
zOA3~regA&1FUe~@eMVDi0L9(Dk%M`tOm-3>P#IrD0s)nahn(a7eSQqaaz8)6Ige^E
z(zC;LvGa}lcW<=MwUhCf;WHxB?D#!bEzsfZ2u2oH-kfa|GizBNEjV9E@uA=`6JO-N
zUuN8iv`0;eNx;YW-HzS$m$)&?dueU4Dkn@7#3iHiqs`QYL9tqwZ5tkn<{yuYi*7Tr
zt#xhQ&E_Fymi^8oAi&2*@+={>tECBf3X74>iWFPY4oQ853LzKQtAsr4f&HRvFz#(}
zIr>s<!bI1I99<UOSlT}E!|zMov8}D=BiaVd>I)~;b8qXMH+5QH<Cvp1HFwPTSE|F#
z&BX^L9?y8-VH0{h%K29dz_D8xjyp8n3aW9tytr^YmQ*5Pe}*A?I$EIHnqt?O+6ov=
zUHA3C7m$a`pusbuBmO>vhHsKt65bF|9EK4IQVQDzCOzI)MoP3Y%4bWl2HuEc{Be?o
z+66ilO<xegX1Pteno>scw1Z!xZrhaRq40^Cx%K-szrgc0B&+&AT#?nXvAr4j!OP_V
z{gjX4p`lkMTc2$iw1Xhtcw<e4bd0~5-CCb6pvxe=a?IUc*)A<>_&pSv!8b>Z{F$)s
z9!-~U-lc#41%Su>P5-x+G$aB3h?2K@QT*_vM5xK_lC7pHamv*@9yqNLnN`nm_`k3i
z&964;Cdoyp{rc5co80k*J9hSvhTiH}QA$w}$M2fak^Xw%Je;tM>6of6MpmuasXi?j
zh?;bCbc>x)3=kJk>ye0V)r8hOWHQ8t;Ehi=$61`4AMvaEWda+KETNsTqoZT9Kk8}<
zr>~L5!}*D_mo>b@_0PC>4i4!09L^5R`@6E!P?=dCyk6-`dZA!6k@IPbUG?ye&(X$&
zD$%r4DXnePD~{Bc1gAd<M{hnzT?{}CbVflXl2v^k-^<R(7(!oa(v3z)>LvY@{}1p6
zRSkY}EsCTsbIkqcnt56#@s1VukC66Rv@nOwi-mbChA|Ye0V>jxt^Z#5mu^W^hU0xn
z_pC`T93K<Cxbx~@CxHES7xt|ZUTvz`RrPSElhlhf1CGOuW1AF2;-OUZH~}Vi|0j<c
zH;}>-;Nt$qkM@56X}LIg6)`TZ9`wSDzGHNU;W`k1v?!kAMrv$_h*H3UKykxMm-p^n
zBqDqIvB{_6vd09nk6srdZEkJh+VF7Z^egsj0tO<cqn7ikYKwn(QfB&oYn2m8n)sv)
zXwC5BR_av2pxkexr(sR(E5oaHZGd(D6th*f23gaMQn(0cPF@`mcUap;b^7ydzS&er
zEY&)#lel&_S3S*AzO6bQa-Z&8-+rYJ=k5F(LWUF6@>F>U+(AP97M421rd0C}h6^qs
zc&d6(B4cIo5uq0Z9~frkqM#S)RA6EA&t(UTQV2OR#-aYr9YdlrLeRgu{BfCINb^ZP
z->w~TXl4JynylU+JXo#krmY<wE>`f>?CMknT|Pwu$+~)$^y6R%IvLL+e4%DcY^<z+
zBJlwI-OZ|53vP*Ry=wcVF$165WMmlnCY4C|9nQag{nC)g1j@Cuw}(_=d~vc%QSXng
zVSq0rq4|a2<&!6Ij}DA~>mzk`6l<osQHgqD^i{oD_&(t0c(n1<o8#S+GkXrD03Fn~
z=mKO$<*g49XOwH!XX-tA9<?G{+`?X7A1f*&y^BjJAa3A4B7JQC&B*or&1ms??9{U>
z@Ss#`G<5W#M4&jfQ<d*e#WshPTu3$0D1V-s%($&28TechKidkM?aQ0K@hsDNs?uS(
z$9%G!Nf+G`5ROyA3s}X~)m48$|4lYs=KGshm*>E&60wC*rzwa~%d`L*%y8dPlfB^N
zGmK41p%!SJu<S|A865juz@(b$Tc(MWbP7R1(|EGVcD7Kj_9pEkx*x-Tk!{&W%ZDDm
z5_g}T3^5H5F<`LE;EJprcz5beQG52M4|bVoi*2c!@3w@d;ASHY4%SgCcTL(;>>&j7
z%Q+e1Ka3(p>p{>X`c?s`QbK7KbGSa{vN=iY*#dF+3kO30C1xSET~@jI(D&BX1y~65
zU&Mo+YN@8a+4bf_U&3w+e{XMpcqra5{4v~#!;gj{+XMyeWy$llrsTAzE?DLCc4YqK
zOAzf-Q~Fg^`ptFA%}U%4*C37rl%nS@yvDiJ<Tst8&Y<+m&UoSb`>_ID^fgLsb5-2t
z+d7q2Pjx>I)F&?ZqTQfa$V%~E%m0p%DCR?zybEEnh4zsH76~iHAz~HhVZ$WgL?N&Q
z)@NUf!O!i^KG4cEHOxi3A2A;zy`vJLIIy-84yWM7$~RS|7#E;dj1!;zhQ=}l=!_Xf
zFpMK)0#TJy8h>T?-~c7ly~!8RZ~=KA>mBvZH$Jm|1S}MX8OSr5lW_I$*vdSPZQ}Bq
z8pLU%{s8UtCKDIz)51h!W;~r6>Wk%=1tNoHdSlr8uT)SDt!Nhcfy*dYf1A6P)~jX}
znTyi16^?`bVCvYb&9TrFPaTupmK%^K{n;(2AzP$X$$+s{tdL}{vx9gsAJL9dnwgs`
zh@Yvy^~c|T>CdcNlJ>L;y^Y3prmi&@54{n65l}a285j#ipgI0kvY3y4sj=J<6)#@)
zH{D7r#HS<|O-}2hsDh7=Z?IId`_Vi|MF=>?ewGAwiL8gj(*$v{tUk5G*Z$Vcn}{zk
zt=O%whcb%|Dg6V8zB`}pEv@cJkNVnjGBaao5ZPh-#~@YGsRlpctV7d{b--6`VNgnt
zifn^hYeH!%H%NOV|4{T&r!=W%b<3X|IoY6pz6lA{)W0uDnDC|RM~^#uSWh^kE>0H0
zIn{i%D;-w{fxj6!{T@h1@1ZiB3lIvB#}>i$)`(<n%EYEM>WSl0NfE`t#zvv-`1Xcy
zwGbRO`1Nal99;LhXVv!IF>C?O9SOYa08`WT9xh~@DLz+%EbSA_ko3KX#(sA%4tb^b
zlg!_le4<SMdkY1$_X!&{ZY+<LB|p$h5=e7N5D{X2c#b5ts{3l7&LQ>KKVo7#RNhYS
z%ViAH!k_l-3fWSG;~O4cTx`e$Q(*tLmko|*H7Jp3{T!y5^R5j*vsJ_{dEEAl*Q>tF
z`gaQkCDmjuS^Ogk$n8xwAU~`7dU}I$@00l>3A>vp+7fobaOj5*;?>5v8*#s%#Nm>G
z-un4d^8cmaG)z5~>b_!EvS&MQDEe6rF6+|rk!!o$w`(IH7rjRT_cIcXM*U}_`|SkM
z|Cze;6m1fl&8>fC;J2z{VAzZ{Kf3hCrQE$Z?f8``XD`Q5Bu*<EnQ_L_|Bo)QH@ZLh
zpsA_9NCE9cA!UE{So)q|e{9E<J}Sjo_vO=9n_c?`c<gfjDj}egEM3RPuK9aoW7c2K
z7v&UXWfQj$pO$`o*}XPUqghDx^G2jLvPe^hF0%W-QV3n9+a=b{Clq4C#RA0tL=ZW1
z{gwaj10FrnRO0`)nhWSfJgtyq{-@?JJ$$6?%WpMq2Vp2Kj_fRp@vT3NS=jE*PPRtQ
z<2<c`NLIExcRm|7`~OH53D^XdgXu3IcdbMHvy^lu9sO84kaprx3iLO4of9%B`_4>3
z9#QSE0(g_E`dRYA2u%NSAzUn1s~~|*m+u^v>VYeMxq<AnM(@k%Y6pn+^#9$E>?F;@
zb_6lc6Z~flPfLw|-7gSndRk^0)Jo~b?=)3uU2Hv5Cujwksp5Zo8Nu`L^$|jFU|<tT
zU4xYODfx6|1VCJHQov@J`4Ij1(fZgnNBrl9!KHdLGc!_fn#T0kS4Kug)Sf%d5qBQG
zdz5~u7t5~a-xEs8;eV!AY}j1mw5}Y-**r4x@jtbUMmh2`@f?UC0gWz`<>qo!g04G;
z0^?U)!0v#JXhEQ`7|#B+zV5L$%ye=e==23w>aCYQk}tP@)~2?%q}096ugwFxv+^Sa
z9j6)=7hcO;RZD;LpU#H=O>XDDY!S}cl|zNaNR!+7jK{VFMPgIJi|_Bq9p;++ARI`X
zRn2-U*pC5X8r3?i^oe*J`62=D9ftTr@Hg>;zrVSuB6?ecSb|zPcNJs}v@k@UjI*~$
zJqy<g;I>mMrLrOqu3x+fFa!?(N$s;b*Ih{G{#(?)-$Ueq`@wI(w1^V`y88NhbQpqN
zy*xh_^SMf_Ljnx~jjaY$pfpDBKbOb7pZKXCxc+AuC=!Y2#B*cFUQ>bq-%gspCkK44
zP8od0A?h2}zWhNozWgI)wzajjudt(|1Iz{f-?=|k0*vnLe7n(TY`gJ~^8fB<rL#ZO
zu>Mh{%}=Z;(3jrd;tyMXN5=IW<bb)xO@LkDce$m*+S4U3WExP`^&X|af>k@-o<$$2
z0_%k*q+9zm_@9}Dlo^|$3NSKaRLX==4tQccX&uT^G5SO+gR6@!B`vLX%qrmh)b#S~
zPy+D^GQhO-bP*8|^W|`{D~z{X0&i;_SN9Ib4EBSbY$Gvn3PiNOBQJy95O&!z?uyRw
z`Evyh!SKI}?PH`dMmqi@F?O<mcf5ul*bh~Eiu~3rQ~sk)g@v>};#tY;RF$nR%apV8
z9ddNCo?@@I-GAlUklWk<b_FK?y(h+AWk9Imo&Ww#j`R#=9p@%FdHg%Q|NgUM{qD$v
zrdSSxnXj*2SXr_D>$KOhF+=8qrn!*|a7*Pxfo6`<5l|d~%shM!krEyy2!*oDuo<aR
zmivEbo`KJ_gg8_3qP->P#=^ovfy?F5lx^ze(b~uj0`SP`S{IK0;|fIda0SqGay0Ws
zGvuOpP9eyB0>kk|L>6-1_-foq(9!vc|NrqDM00_GDCq;)or@I)c7OasUBT?zLP`I(
zmKc#Ob=8`w+WAiqC%1v~oL-%8KXjj|bK_C^pREA6Kg8lRs{`(8G|8dxf76mPqLHjP
z<6_4qE3I#t)unhHk(<>ifcqC4A}T#>2o1fVM@sR(r+6G4t%Evg%w2*<1I#uTVq}uA
z3-A(5vqoezY+s&5Y5_ZhSl|EY=rh<%nF#j*;OsUhEApR~DT9#mt0ide9MoOf|GjSn
zzrtI9Ij=LK%EqfR%LdQWN8waIi;W)sZ?$P`6N$8aVbO$P5g`pT?MsaR9~{Xte|U^l
z92%-1DT$;M%cTB&)M#`T>wotV5lw?%`s3tZEg+M~(Cz}biwp2U=dfzeQ+vSP|Lg<<
zv~s2j3@u29Yn?Z{e6Zy_i~@eO;)#8W0I7e5lf$6lS*da7?n3)NF*>ptf4u$eAT1u%
z0}NbTdW^^`zh>+yB8nfW8wF2F<^eH4#R?4%=K#4h=W!+oD5^#JA`<wrXz2iAK7TIx
z=?rx%EHwXlT4OROMMUsOU@<j8b_DqH2h7s(c(hRO9JaXg11)-|Y}2JbAsGRLmy5k_
zj(=~%NOpG{$`+A2-`d)E%?AU=yl;SZSn^!j#l_`p1;9<W%H}o!f#l4iI!*C`rF}?M
z^5y<nL~<0UaV!>G)8#DXq_kDYN>T(JmO*h%J@BuJcM}D9<T^ufyrd5)1K@wT*zsZR
ztWdvR=$~!mCSba{4eRqbsJOV8N&QQ|V{Za)ESv7~^75lU2Rl0mS!QNtzvtURfBm49
z3A@<;A$GVnLQ5V1dx?9C?_bX*$2&lv?U?EW00)#YcL(7Rnia9hxdSts*?I<V-n_ZL
z^22uMi_-3VTY$emcqt#~?5dHc4yRS20OqG43~A<SFnJtpY}X&p@XvbgUz|E*;l2PE
zW78?ecrbWRJ{mR&t>`dYExqtrb(-M2(PBvK?4HE1KJ5aQ56}zCYL?r6l?Xa}O8U9Q
zfn}W~4IP~^U@Ks9f$C?ZXteLBjMfk;{)sVinszr?QRE2gj--nr3#xeDh9yhH{_Nyn
zb*QGD5~2VX*G+=dNB-QHZvYe>H^z5iT}ROaNN|{`mF}Am;G!*^4y4Omd}w=144_9{
z<S;4r?#c~n5V*I6o@i_02ZA<zygC$owJM9_wi(O7%^f*=!+Q>rp~x|>vD6ZN>q(8W
zSZ?#dj2~iu693uK92DSci<>CVqIuLZ<%xCMHH!4>W3WfOUp#+a<G9*#Ag-dKVi#N*
z&`e%y+DoB?+4$#5*vuV7!HW-olF7W5F=fG!H-?)x+O2}HI>bY^DvtUSxP%jq$b$z>
zZCwqED7@1(PAqh5UB!_%h!|5lf4ObC;AC-blCEh%n&%8e{{;xz|CmUG1`_Z@H(^j5
zg_L|<#+uc=&o}ui%|=rt0-8A7L0Q?c0K1Ddg{S7Zb4S8q6kMlBuNF<F(4cX~jAyWi
zO}A3OiHx!EV5$xwyB2b0QC8$F%LGC13)gW_{u4(cs45}eJPgJqW_=O?7$Hbl>C;)P
z5YVa>6_w_K<Lz|z5+sN@vh10l8>HE}l+@IX0KNY>UIqbF{W_-PAT}roP%Sq-OM(Il
zg|KseY%FQUtlP@%N@F4czEd-!R4^E@ES$^2#{d!_<a;IjxcGrf1&Pn&1hA{`ftZB9
zyT8w&e8FNv5LyG1I-v-=#oyQ7jy?$0EW{tVpao<%r{?%a$|e4)n02bOn)sa}Xus&I
zBXJkVlI2*Ti2WkQlY8P0|8PNBX1_e~>wB}a+W}%mV^lvH%{D$&4b+I6tY?(#YUvj^
z_ih&F7)y|wQfo^~qR_i~KhL=)MBSTpb2cV6)=D_Dv3EM>D`pQN<CbrI-CUrTA^QOh
zhr(A#58effnECIBF@s^~q7VEHTpU(ZF``@o{?Qe~HkGMBDvaoEi*St-n{-eE1Cxjl
za6iZ{cmew*Ww6x?uG|@U@1dlmndn6)_4j89Qu?!TvrF^y&sS91@jNb0xa8husiaKi
z{>s~#+^zv0JeP0<wF2>q*MvT?cS@5V7<WX3i=Ku2Wx$coA3*js|Lsklb`iZS#X>1|
zhcpyfC`8;H4Gn4JaIQhJDhd>Xt(p2;1duI@IBz@w`oMz@IU{Le6px7O&KyWZetn91
zNfcRJ7ZJsdfNpYF5h5PW?yEqxNtrb|M!702PM9;k>A8Fqgwz}qjnBI-8{>#GC*X)c
zn8fJmzu3+;{N?Bo(MH4BYM@5Y$x@gCLx9h;2&VR?$+<2F?>QqSe+Mre!u!+2(G0p#
z<|_^5c<!J~P(~1^0QS^1uWO2&EG5T&Id_#1Ww_)J$1^2vUjh(LwDeIJ#@gVF73v8a
zHu*wf&X<(5TuED7d!DoCxbWe_hZ3u(dK3hy$Ua9CFQu+79)m1UX+4Fu3YL}jcM+TE
z8_*TCb0t#W&;|%9*Vt-H`3$8SDMCFMn|!aAe-?tmKq8<gUd$;Jy|R=(p@~wSpVILB
z+4lJpKw#RN&^AwebFnuHd<-<-A)ajK)OUb)@2|*j-xl#a*@0*Jc!lXb_m-GNGR>qr
zhGzxv;uchIPMGg_0XBj>60;0xc`ViGq){xI4^wt&s>q<2N}>S36mGwo<#0Ca22R6k
zD79s-c}YoqbD4!tM%8ki7Y{I*<j~7_OLypfxL&`Wot+K(6XYqj-$HJxQWO}ux(cw7
z7&_ee%T0@JSLV}49zFePcjwv$D(3)XMMXv7qe5UuJ-q>x0sG0x$gU}sx00TcXvYLd
zUhG==<LK0$2;Ow>M8qG*s)(LufGEm?Lp2A|ZVZGg;4-K;NQ|lHdLahXx$T?P0EmEw
zlC_$np4C#=1vRTYtxd>YcpM;Ks`M-?!eD%_*oo3h>DV_}VHvQd3rzi*TUI-?&(1cA
z`yqMaG&d#z!vhQTA36aG;Mou5Xn+HzqhtwpbTM44EkEXud5l4j&De4@97vOP+gn5&
zsfQF19^iAlQUcH4d^Q7nW963IIp=K8Ei_`o8{&xU&%ScXHZiCqFYe#TlKpUZyKW!1
zV}3X@{S%%y)m@)j)Zb9k02v6X_sn8{F5q)fyv9@JXn)pw@ax^CKuB_c@R=$;C<Yj=
z1;o*v`;zecKEUC4H3UAz>N_|ylh@*rQzRiFVK}uIZaDEJA<;0bPBBFcv*z37)`#ff
z%w=-#DFsWFKJn!%7OM<M0q>eV1e0{EFDkk$gskp|Rs>r6HmuzfoKO-rA+vs(zjjX+
z3t{iClsi({^<?Lc-upwG0Inue@ktO|=v}?VbI}TDgoGxChN3ou7}h`=qWNOkFwn9R
zAd2mso8o<j`E7b_BoFeJL>k##q{42<iW&edQ}wB!m<9}IcXu~cyk#!mpi$J7_WdJT
zp9ik2*Y1oSP~!?zzQ12}r`A6i`(DO@{~-i|>(okuG)Tb!;vod!xt1Vz2-1DJN6+sM
z+krc(wr);UJ;VV3z@e}L@M!>cs)Pe;dk$6y2-)&b-eFE<r(eh5>~N+6KwXh$t{tt2
z<Lj5tz0LV($4Cx0elK3+|Mln{mM9q%QJqo|j!3d*m7+9}X&4tb>Q`}#cTv#MqsG3$
z-B-aNpiv8ot3A|kM{1lbRi6XvYINOw?(Q2NuCl+}yBeBMxhD}S3c<lOLVOLC7m`jY
z6bVXS3RZ)Kf0|%A&5DmFBODP09(3G77iqc<g2>JxzgmNb#8i@mP_a0b0%qwIVp!+s
z2Lq8T_5iN+>s$xK(GoQvf}p-E{r=)#G6qB#3;4T1o$F1?jDdlHgC9^H_uTL0hgJS_
zKKlo{9OUmqCMb6HJDq1Q*$(&}aB2%!w{kPJyFOpsW*fXfS#Y!kLeKrO&&n%?{?GUK
zw*b%4#$ExVxU&i5@Yk>ZBM;yamuK^@aN9SnWM?S`$1H=iT+GM2J?u6sAua+nliaO-
z%_0kcUMVylqnK3zFnwj{!?*%E3D_dywwD3ml7OJ_U+zy=A)7;X&6BYFIbmhbUcRT`
z{T@z@H%4*aw8sw_-7y@5Tz)h%iN`nJ{nP*BCd~<_J?tK}BdELl1_S<`!l7T+?^X1_
z&LIhXVOtGEcD)*?K}=j%-~SvO99#gX{-@c=u7Nd$L!FA0>G5?14IbbVTp!REbB}ND
z5wYRUF>vXa{}PxC94JOU0eS}D%c@(M4<hJoVP{rgvXFs{`+v>phSmc}%Y>ePgEkf1
z$MT41dM>ceJrg&KA>`82)Atr4z5nO!WFMtNI{`=nXcZ<vPj*&-C0E+c;$po7B>18j
zFBwr426<c!<h8JN&#y~xWuVxayAhlHyKdYRbF1|ZE4U-xOi;pweLe$;Wi=(mbFULN
zkVCHqMR#YWq_v4l*m|-YfdA-ZcL4y2Qq=P+ZEZ-teUU-q6-0+~aIfo*lB+zfpEXWk
zUOxdw#T6*Hjb-7kKQkuay#ZOqoOyd`iPvhJGkXUr_2N}$&_F|(9}sZw9R;t&)^znX
zssgmUOz~RoC@fczXKIp=kN_1ZzF;t222TPX%onlti7B|V<im&m+X9OS$ikthZw989
zh^cHSTW&q&3|0Bm4#ngL6Na4csKpvULEk7QVbh_br*CNntlNU14@(v`eVzY9^-NL?
zwo%macfYoQ7pf5F6zW-SULFhO4tPHp51-{I_C-jsCB&SF)GneQ9Uo|$)xDrD)gL24
z3N>>ds9;m(BnRAU+Fa?0->=<<ggW#V6xS$MI|_M}<?E4fVh}hJrDSA=#2gkoN<d-w
zhlyV6raOm+ICywf6;*(5kUy>u=csFF5S^GdtDpS}rsj6x63~_i5BdfrClDKV`h>TO
z$Mmc>{f8uepy<U?X{Cz$#jxr6=f!M+Xr%@Q_)7<}XJk?q%4)B3=W*06vxNSg#y^*~
z@TjQ`k`$G5kJ;7IP^K)i+;L;@Nk~RPhztn{5xY7;-l_*x3v5@#UYmj;lV}cXfs{pS
z1G3UDKDcC@zI-hI-nJ|S;&d)V<H{q*rU-ac`epCnbj^VKt&J7^IGU+(3Z=IJEY)qG
z)U8bwmmMPg!~|Hv1C6vys;a9MzL<pc5g7<<<<RE>hSdpuJ8*Y*&?!5@G=4M_hzGr{
zH9hV-kJ#LhUjXGIF(P7admH$&TMY7*%fI&kONYQ=3Cx`*-oSGg)$BF!W%@*aEZ{#M
zv>)OJg6tNgk)Zgm7Vr{st{RUdHXkToL(CO)KVZyGh0M5IbHkFUS^1}a{nHsbTWA6Y
z=r*?H?5zfL3P8j8Pc4wOxCScl0cQ|r#4dJ_dzrKgry--cZZBB9LCUU?r`6lteS@-W
zPNG099c?i}dk$QqJ4u+|)m>UGP)ykIchlVn0D6NwEjD+ylk3hANWmw+zM>U*91H1W
zfk7h`vx+e~_baONdz>!x(;kpnZ%<b*fD!fG(nF>AJyS2-9f&OCv?leR>hm}N_Rj`7
z0eEIWrVbD~`{^=kJzo3^xC-b%clP$`fp}a%SyuF9E&#&)%kCI!V8@HZ2-aoL@TBSr
zBms21`;e}Hg$?Q1u`&9<UI6C#<#}H0w!^9gT(pN%Lxx`od^7cyrM$=9q8$9l`QbXc
z2Xt@Atl2nXo!=v3)-VI{2mC+40}l&J2g=>FwSxknoqfp@x8#2R=mo$YtR~Zsx#j?;
zec+|e5a=M(o9``ldcJG_v<Pg5vvu&0YKATtkNRr8sIe(|Z9ej`x`F#5&b#16y?J7m
z82jTxcLinP*2o!c2s$8pbgVRjtaEj7`tUXOHIK4oO8tBQ=_FV(tRDDb`p_Ok7sD~I
zvFoVbZ)rG*hldw@0IGclOR?EN+P81t02v^I1)Bk$^PY^$e`^xZ@EQtYlX=Vu%;r)b
z`^zgX-pgT7PQ<`nyOvCZUBWo5K^nP^%Y0Vj^&ZD_Qtox?;~a>?PCh<9I}u>5<dqlP
z+Ro0IuT-(5AcKLpPdH)x72+4L(!f98rdcA_&Kyb+Z@q-OpVivrzdY);q^oDFe_-zO
z#I!5=jdvij1pXqMY00~-!da92eZX<+brs=S-+SCr;ZEEMJxkm*?c0$?J|s+!zcmX9
zJVwGNCT?pO%xLZ_<iY(bSCL%dV9tm1hmn>=`W>WX7SD7sBG)oPjmYuw#jkB>vEaI|
zwKEmC?hB}O0CIPM7emAWK*f%yk1~f<hS=<NvSS3f>vgFdXfBq2Qy++#WW4^M=wKf?
zLr<Ub1S|n?%eiRa)LPM>(WfTb1nlOTu7d*zGn|T&=GS_IzJM1bM+bz?;*fi1fS&yL
zx=0*k`M~KS<@4vyhBu1Y`PkWU2kqd<tV@zqfNTHi1K|6rrofxQS+RA6s}%DPZQRCh
zSW^)Zp;#y1Qy|ejg^y@ETLZbSe2Y{#>*3hLd(<NCDD`-?vX29UgMrjt?k#l#L76M`
z1i}7ut~2v?$2~*VOVF~RW}Pk~3{6PcMu3`ctlo=)!~k%fNRe%aHH!hwWQAo5lv`#%
zuIyaw%7D6`{!R~f4EExdue={QQC!|oLz~XkX?g*%Yy(^2>Max{jM`e5z_baaOW@L=
zU3|eCfW_H35HOb1OcC*j;V=+2O9QVp-8sGqdk|4B2W05b8G!%+!!s-2x5qdzj#f6|
zIY2ov_|)`Qu52F2Inv@mQVP6yoGI`3Ot;3-{De@-^NLlq>UY+Z*y&=_bsrP~jZnZl
zeTe*cVi))*2K|Ij9N#ACMFWer8ZZ6~-kys2wYnMrS593He@NmGNh#n8bDp<j$ni}J
z-Hj?!XtIRhI><KK))qwa$@qpUlpWk*=Ogx@*0a2|)c~nhjbZwwPP6{xvfaWpc&6B9
z(T{4QZ%PkwI4c`~`GA#69QvCEf1d?hlY0v)cEH|HgO`V@_k#xy#(hgP-DKF+py~p}
z4|F^#d^b5o0|SFm+8qYHqX2>Xss-o_ue=ijy3plc05JU`(i+j`nCO!=Z5=#Y3w!rS
zCSjnjc(~r+u8gyvDekc)r`Zz9PpVlEwGRZcf2(S8nhJ7fU#}?-ZqEv<=)|s`IrRa;
z6v_i;kXK(u2BP7wLIV7eNuA!GW|gpCG5ZHI4b2=BmuO4dRsfd(z|sv`kxOoA+>ZDJ
zeQ@1<{#+_SPG>s2iAYydeAbiwnL7&6j2|K*5R%#PM>jW~XZp?I>h?3HK5_k$-$;Tx
z_~02vzA|)B`ik8_l&l*tbIh<4HhU`qosQWS<>Pd^zI?;rU`=9j9O%60)Twgcy$kZE
z9*}!|_HeSbwN+{y7rLDoICmd~l&gSl!=Exc<B|m0T!hQ<o&|NJJVfz|^NMV)*~8Uu
zX>Vr$zGJ9@jf>mherR#cj-iPVs+pWYzAhhD<CS@FXEEkx=sGD@Qd`VtPDZfLjiaqB
z>2&#dYik0oZC26#NhwRquGE$IJ?!Er1{H6313T$;inSSmdK9O_ScvTI7to&g7g-#n
z%0`$n9?X!N8$>)N@@foS0TBeyd({{U->ZbC4TuAji!cQRG#>YbcM!G@-A2U`l3MZu
zH>9kc^?SaeXr;VnGS1MW(m&l)#piKkHLh7^s&q1RMnLoU58OFOZSTXv(89F<aW)NN
z1<+VX=$uq<oji}SLKMJeZk^|oF!JqsI1hyT$kOEJa^>FUK@gm3Qul4Fe{@xq+v-$a
zQb-P!tUMnu`E_8RcxV4JJDF6eiJZECScE@|AaF{^0n4WN8e8<N8p+3h87<*Xb}0C#
zbLFdijt}pKewn^O7C1*)4KubJAGuBWo-W5!anHy|J3}yaCSa->kRDowX>n%-vZs5@
zRg6;v|C$eworKD`7oY76w%81Kec7nD9~3}91;lkU6oBtck3yl5t{=Lgl!oTS5SbS9
ziW<67#Kgcx(TIH{c2Ec6e^iC}n*7eCET<H%J&6QW0Mnac$5AOov|c$$2<nStiAZ6k
zKw<q_b~YyN?+B=&C(s5>1ry(pPikxw^P;<Lh3M|IZt8ZZW8ODd@TMS7*tO=c`6%?R
zz3U2u_Eg4x3n)VC)VaQT*?9PJonY=giqZynCJ)8~2veyo)zB_DY1+Lk8Of_^u&~<6
z{?vtzp_Yg0y!ZD;F^FvZi5^!MZokdu$wp&c55HfNj|d`=cyEipMlde|y3Zr7Ksr7G
z!l6Ju6!pSb!v%qWL-8OuD98_i=lQn~ARg(Sz8SoRAvN$hMBjQ6rLX&a86uNPut@F-
zpk{1>Ix|Qau?>_3Gi!XJO&PtKJlgMqdye`XK)N|Cqnc9o&(2rKI&rBK&v3IY*Cj<S
z$Zy`1pjLGK?P%FYs$jt7REIjZW+x;tF;0Yd#I0&eS#5$|qE4u*?Xu%Ij(R#rXYAs2
zx@U6!(G3I%fvV;;83R92k0VyOTyUqmD#;HD3k$ECYLalG*;R|7s~q!<{ZiKi$LxgP
z8HI|9b7u{$;6&!`xb35t!S}MK=VtyuZz%M*`_YE|{8|=(b)DWmzM<jkB;a{s2fg*W
ze}+irs&z`9qf$<1$Pq>o-BXCkD01=tcHJ5cxsLu<JH!XAsix47Rsf^`LIm1}+e8SQ
zi{~dNzAX8W4bZH!>eUdHn+Tu<euR#B|1KPF^N2L4#hmT7Q$vqp+4Huy5E&+6@u0BU
zY&e^xLTyo*mFf3~ypA8H0|KXB?bM6XwIU(8gEpg8q^}3%FG$3sWn^r}ixC4?!Mt{Z
z-Q3*?p58z*Af!ZNW{Gn$jB7?f=EX$Yxt5O=$|^$P-rhrGuLSMb_y9^ezTTNE(E&Et
zOTGc?(1HI_vqIAqQp?Y;cdV{kt*FYO&^0!C*;0o5gNSGfq|PiI1l)j^B!#%)Wx>Jd
z9hY;>Xqzn`be-{qc}tv}{(?Nm&+;FculcX?k7%YL!0M=B&EG6V;I7PC`DD;IJy_;b
zw-D>Qg|@i`<nCJav=3x+q%<>tb_PT_t%aTU5$}dJpB+?0TZu$QxqM2X-Q-U%YbB5m
z2z#y2x+IR?2jbvk-jD8eaH0HmsMtgA$Ez9^Zf*kRp*(Glzmf`bWZ1n_KgHCS{!cF<
zDCBA8kzhCszr3MufPV$x&jX?@1mWU<+bGz7KpsXhcn?xgFXC7i)B?nfgLxRgLm}_~
z;_R)Xs@%S)VY<U0Bm^X+B&0h<IuxW46p?O_ZV^f8E|FA1L8MDWx{*{sy1VmRNAJDA
zcf9|-pW}{e0OvgCdG=m0*PL_HF!_E%8VL^%4|Ia-B)y}J7^+-jPyp2YRU0l47d(M0
z!G!h`D^m(Vq=L8?sDKFFP$~(#ru_a0y^*gizSXh4y*;2e$iIW@g2QRPxE}s;k$j2n
zfivnWkspXW45(4}T~2+;2*WA|hD2S2pk?c7lQ#O@n`kzDMoqcRlUo&Kp(xSr@9u{q
zf>V&+YZ!T%{?hfcBW%8*B<Hkz^E5DEYzfAlFEL5*B-Er`{mqyPc;QJ$ym^CpHRJLi
znvM;r@iWwv=)KIYlOPlNy;5IaAMvwvcC;XP<A-F$@6(o^WljTM4@$~cnfZ-(Msk%Y
zIHmgxIQ@Xx56j@fQ&}PhnF2ZScmA8Jcou!N2duV>*T{`<0>{Esvin@1*zh;!l($SP
zs+q-P)VtrgJ-EK5t1x`Cy}eS|a*f}Z>lH)T-K83tP!g~GA6nm#Gedtf1|PWkp`c4N
z=LMh@V~IN=YFOn5z+M3Y=yiJ0#z_kIW~}y5RYkf+LN+WPdUPbo-(|gGsOGZ(zy}%b
zL3<l8ifoNevH_dhPmK!_k(#WeyvjgiZ!6Muoe&fbcDa{4)ZcJV+$q|Yrgs9LE`PAM
z94_=T$h>g_?-fiyK3k1lJK#(3%X0@t41mYzf*7%;c16A%)llwbrgCqRF)eN_LJ1~;
zNn%JYIY7V1dYhRieF~)>hy&1;jUWU~%-Gt45>9q=MI`iYwMBGfM9zKdWAFQ+R6}cC
z1-v|{Nelp>CntN$0ftW%Iec56t_&5-g$Ga>c}XmytzV5*`nb2-slUJRE9G`$DFK0=
z>|^71eK(9aUjm5b3XKU2_j8ViEbq;siw9E{%3Pw^-WWx+(94^fgcl@RC;lwBRKAcD
zy!QHKjXE)nFM$*E+Uf|?mhdR2=^U4eO)aj8SV@sWz>dZ+2rf(DT5%YSc?k4HkL%ot
zDbx3GS>-}dHm2xF52T}8Cq$#0rYNpmLnvT4%lsSMp?HOGcW<3kGLoP0=%pI63TfkJ
z;Q8ykSXAQaY-B|~vmyW*?-8J)o)2!9-zDS0xKUeUV`Gzvr^nG1!)vKI3WazgM&hpq
zpDC?ZZMG#v1~nw?ILU0TSWQ8-4)Y2?xWB4AXX^k>BdJAPV&V~mqJRMadNfatanyVz
z8J;I(;*QeDoy-7{C0CsuKXi)x?Y~&S*Lx2M66cM`+Y>mbB_H}$c+gjv_0Istd;yKJ
z#Hq8reS!8TT5V$hnc67w0Hm94)va^ql^o!kZZ!VDUH=3=PckIt00JetTpHvR6E31@
zKmdR?)b@;P9S#QgtZr#Q^s)!02^`uVk<iqxNCPu=<cqc5yMDPjMzV+?%9WkKX6VCF
zXVAkpQKmM598(VfTK=u2AA130&}I}sln3&bgkDc9^L0u>8Nt#GCjV?+K;>j3`B9jj
z1B6d6*Rl2D%`+dL%NJa*4d}~38HSfQCnY6?6|ITfKqIgY(?lG*0jRc7G+H67NVvno
zfHv!!+tODJm|UP=95!55Rafg$b9<j1!OmC75W7j)V5Dqni|)Gtnfy^-Y7?r`oXG=N
zDCmMt97jRF+h8+FibCU!)hqJDPd1#q9GbW-!JoBm2o|(FyT!lg<Z>E<Hr9#r(&9=Y
zwYc{gR4)G6_@yv_hQ5vcWawN-V&#rM!-lBQiCeJi`74b8e{?+28r<@jGFrI~Hh=V?
zLY?cMhXEJy8(_skQTH_`$5S-w0kjQDrx9d!|G<A>P-bNoSKk%`kLwMbB_Vgx#ZpFn
zBJCG0U%Hpe>t?~TgB?Eww-*RJ)2ig<odZUy{;2<<I#|&va)EDV5=q#cIk}yWfn>4F
z|FTiN_sroAaM(>S8zTM=DG~W08~tH3s^@HOKvIDs+`NZ(1t|W5wB72m3sGu4k9VfL
zPuWC7QhU!>X?udEE0F)=xkd6T;IK3Twwo;MVgtC(d##e5MT+mrw?@h@9>10F{twmy
zh~z$eC&YdLlvN>P<6(r#8QV)3dSAU0@_W|iPdN^?2BO>ui`7M21v~;6YD>RrD(;`6
z!^aL6SMf;_w-vamJo#9vifhYMR}bZX<Q}(9Ic7K>zTxa)zS>)Wl9o1zEk>{k4c<Y-
z0Qnmkz|sGGDk$^rUy+HbwShSu&{Aq(J!7JyH)X&YKuCoqgrQailwWEFrVdaZ1Cs~!
zd|ZtS=CR195?B4RE&nf3Df14_9zegZ&)W4*7GWvF97Jl+2m0__<rFg^;H3G}01)wy
z+!OJ5<#1wXOC&HcFcx~!C`9V^fc0?Z2n;u<IT>~a`V77HA3>YATnsb5rl$Y%#w5m`
z6L99hbxtqTLCv2HKhO;)*!}m(+>C3n(Qh2VJmEhe86Geda~2XQlbUavt=M8mTxZV{
zr~>`0-%16_kvBf$VxXr_e1_$J<!L0O=1&)~r2js$<tU;DzKCT8w+LDyW?I^>Jx>4~
zy(#3>hEQEv&j5qXPR$Z4QAYoNT(;#@qGP-PirF9H0chkZR#sNkHfVGBNGeAB{1rsb
z=(DDge;@J{`keNq%@=_EXB~vnW8Y9PLUg!){~O>Y(?!N8!kF^BPl@&l=X=mUyk)uS
z+tREcHpPaS5e6pSKNp&9IoW3#IdFTaPdasm?FJ{XY@iH>dA+@chK7~ZTFQfE1ATqy
z(`##M{r&wN=GuVSsrVRkIwt6(^~3aR>a`nq7+S>d`j>#~^X~-!mE!fg>{aCJR8-zD
z9R`pI6uhF)nr240ySw`<NIy&mgbmL5RjbMnadQAx7&JwISRWAon1(SOQ~Z0=NpJ}j
zrE6QoAWs@6&BT0iCQXNlhW7UjBApap0iBuN!JnoF$(>G~?4b?uQe~xpn(*dSLk5C>
zSLK+uVHz&^wi<>Z&>%osf0T7E_?atFlRc22W)>F{9K8HSQ5L!o$rS?w8j!!txJV}~
zmc|o2YB5hJ(*PZcBtgrGqiLc>rFDhvd0Qn_E)q|=THW_aB%nz|uWUdXJP`2)_$tUh
z`!hqd3Ldrqi*x&W(;IvoP9~#*58q9nH4@@sV5#{Uj(k}A8)0m(K}A^!03~3Nrd^4j
zAo?9Sf~p5F7&0h9;f;@*fj4s(D8mRY3%h<I4Ozfm4pKmkGql05gkS|Tm=n78(bCab
z{&+v1`J7;!<7X6feUc9;I0>Xm-V*#7;>lH`)-eeIoAv4%3XDIE1*@O?qoCtRTpaH%
z2BZ2??X)vy!~)S3iht-cAhim}KZ3=IsA*SbE+Fwie@ISBDjQjWy9MstRXNJ*q)eKH
zi61_!LfoVj6wt&dpW;Drg39CXT8b`i17hmf43O(SqL*;|@Mvmf#rn!ariVEJ2s0Z(
zTgTLhm>o9WtN@(}jCH<#fmlo*hjh3f%d8F^F_OO(Y%CzdzFDoQH}O?GhK3YSWjgaj
z(ANQ%sxL}Q5K>vGX|D=UosEp9p~ZpW$-fJqa0z)B*|Q;Y8)jB}NnPp_jZbRdX(uEm
zCIYnsCc)biwheHX&4Is|tCEIOJPlLa0aOV^GF}S}z_eF?e85cF>*N8EGeUrXkdd@D
zGm!J!)Pguf`1o@wzzhwi8#QV~L|8rpXV9)8I{FB}7)9m+O1Gh=fYAl<i@Mz&VYLsi
z>b~X_+}_kM@ddD5;<iBZM7gC4h~fOR$zX`D_R&Z(n(HO#9xg#GTla+k#6;A|JmylA
zNGxvKGcwUb^JiygoEwMbS3m_142;eMjtL<n=tZl)i{ba(goT%78}&EaWs|C9D%nd^
zVm_*Zn0E(r==l~lRD6jSV^EnvbB0I3w+1CW@D{OMgU6zvt4#v6E`R`G_h*5lwYGS;
zIzpKG0|px>5c@#>QUdhGvNPzonn_;jZhZmt8zuHxpTm<8e{|gZ+g*0=x$G<>^L5Kt
zKqWB;(zXsx$pH))VqkWL&aw~Ql78jOY76AOJDA_E&G|~cWH_3IN@o#@%rAuT*C{A)
zXK^C3$*=Oh7T9_3qo#Hx|C!noJxmzUAZD3lUS9hvk3RAMc~UCo`puilkHfW?F*hs$
zc!OzCvQsH8vg#3xRSiwn5o8iKSJyt$+26U|$MdAFA&@NuZ6`&>J7Lu54TwLKV=;F+
zCMHt6L;fL*W?$bTULwMz{P?jOIJg^+Ba09?6W~CI3cRgU>?jC;UWG${T`9vDjI=6X
z7G=s!bYK>to_)@Yhw3Ay&0$?53HpivaZ>;WHMEd>xl>U#^zEjuj-jS9s#4`k@32Ut
zPr<tOQyrCbq276pB;GJP&XL~%%_c&b4e}#=p;CHcyf46W+*!?nz$grP9f1k^fF3PC
ztQNXI;Mv^PA=e=0DTab+bt4B%j3Vq|910C45#*w5d<mCd<(68&O3*hjIEI^ojfb~3
zT$J)$#yzjn?za?({>`ufi$!bJgz92i)%8G<>|*6Z2?`1dr~_e4IR*-9Mjdh|{H4a8
z$-nzo&H@U<5L8`cE6Ms1IG`0qKOar(onZB%Jt9dJ0m=6ZbN}jw#Jm=vjN)5Ap>VCY
zi%i-4RfCCr#ne2)E2nL&BNk$Kifuh|)iJcns6S2u2*vXCD%d3lkoxS6#_hI@`kvF#
z(n{>3n_j@|1=t*>m#%gPRDup@)hYA9CbR@J4U+e)a~T9C*zl18NCJMaKP)Xd!gyNu
zKLBN|@Npe^7%w?5Rjg;<cgaIkXY%hBh<v}8U^O3r4RJ*oV*1|h?g!v%vYNtV0R~5}
z7;)1JAitC{hN8Tg05TJLy}DgE%qYfw{qlm@U!*uF77%E8I#Dvlp@24~69@i%CV?E7
zud8AG<bCE}6+(={_|+K8$G>E9aPYdqD8MTaMt^^UA%b+PpOA$C%4n4~zN8L19eOBU
z&=-I$#P%_yc_olvvGLs0z5>*2@fjpLY$h}o>3@<W>Jg4p2x<>W<Yv?0R|g3UbRXs)
z)Jx;yN+*~}Kc=RrML567OXviy0}p1z5xDf&Kg&Fir@wfe9epa2N-e^xeBES?MT#Pd
z8G$yBsTHV9=WBshw>jN}z#v>~fOXNhOIVjQx1A{|DZ3l0NO)6d4;&wI;;$aOuz`dN
zc&8L)<H!gpi<M=GI*#3ZN1SA!@!gd$faMGuyz2nr$=vk&j%D%w{0#U}eh+}Wu31Y?
z=+5z(Si7{*1gC?|)r42eZy0rbJ4RIu`J9C67%~a3?Ih)n$KDchx?TJ$!KR)ZWNPXR
zfRvh+jZ&s@-!gJFZlS5NuAv7W0CVyeq-h)MGiKNV+(}AZZ9kw;04Sz^511E?*sA!L
zoF;yzi2_KEeE$|?aze<Wjm!i`&tMs#u`{b(rQo$dyZ8jvBd`?6>CH!Rb<tdvLA{3d
z&>Y6)u0~=fOLUmxp&jb^YPb5HNT6VZlX_}GQ|4rEkL-mJd!=#-xC>2>aA{8=8cG<U
zlajgSPZvTq+<B7PqlrO;q~;FH20TW88wmqbIbEdc-lhll4Ab+PCLwoIK%PLb*j8fB
z)s1k|<xd!06`C|rsHOpH-U(_#2G~a}hQ8V5?fWlc9m<rNz6Fb9At)oPl@e|hra+g0
zX%7YgWn1kG@D4C--xr-Bs^tcsjCtvH2zGR(Z(`d@9>hj{DsBdy!0R<p46h4#Hg>eU
zEPg$BVh_h{c&t|kc<?u#o=6>K$%IZv97$!`tmPt1Fj`0r)#ymOxYbZZ)`l6j@Z~1P
zPEPAG&%b65ft2`!krL^J&__FlDglu{a5Yr99BRnJe&1XDC2YmfHlPZ>_hKtL8)*dJ
ztO1_WIRpzy4)j~ZbLMuB`s*?a{X4b+f>mc^Y5PX60}%>yPmc-b+YD6f1XLo43%zN=
zr0n=YcK7a~nW5X^J@XHO#^$lz77U{)c+47c>>+{BQgXsrEHd(n8KzybUxacb4^krM
zQca;eRTVfds5#e1KM_1z?H*QB#N0m!DCLKW2(%(PtNEE|U(H<R=0~-32HLA5p`by;
z98ja=L+R4}HW>l3G*T0erxkg=XDCg4cCaHZppn93?f_&`kO<9nC0#!&hMwkkFM`(y
zg^a{{9>(n@^rt<`_YMEW0#Nl5a<MJAe23|FaOtWUd{LC<Hn#`FQBhE!=1O9J&+NBP
zplsG50?;(nNuUFf<(rih%&aqh_7^m?rOroMMS>DAh-TPQv;GHC#4wa3zM*jf5|(6o
z^Gfl*xtr2D<7;Ow(F`MP#Mn#=!*V_C7Q&)_b4&6j(@S5@;o8@7-HTAn##Nv*$N6~A
zmv8>{j{KAla1i;=uNU5kG&V#A^peBs5?D5wnVHZOih&Bt7w?xIboQX5z*S;{TaKQW
zL)Xdc_ui`2Ny;lsrH%w9rnnzxKiWE}vt6Z<@MaTIBe0%tR+pIDk1wF=)Xc{S`~oo#
zO3(lVr4#}wf+bK&0e9+_*{?o=J~2eSJn|upe7u^+{swsplJmQb6PN}24Wwjubi~tV
z9%2Da3~kLGG7}5bMZ$OlNaa&e^^Pm(&VTxoNDWMwjJVEUksP==osBO3EE;DE_HUzk
z6}&IxgF(tIS}2Ip*cJ+LmsFtA6?IxtgUu#+3$5tQ0#Nm^3vVG{EX`Yeg^kx0DI2{X
z6`-sQ;T~jOhr*Ree{4^+k64mT95DQ!xAm7`e3z*busf_NcH}Mj;N>ZV`KzN>ftw}U
zSp~%!w2lB$IQE^r?ICY@^L{B4BfvH_5OdJN5O8?iFx83b&l~GojHOCU$V$$3Z;Tpz
zS%Gkz!e(uPSxNHq=ICv+2Wkk1k>UIYs2X0?<epHy;$bvHIkBAbL*D-%Kd5C~eKcIj
zNvTFJ)5Xr}Fa&C!+gkDqe?wU<l4j~6c)A*`CAclUYlS7VUs45F%uwtSk&{>ZTzYqx
z&V4~LWObC&jj3fC1YVMVa>vCQ0ER#XhkOPK52T9;*sc@3o1ptjtq1WzrE(vq`E92B
zK23;Ez5!z+0iz6!33^};U{(zw+>czI8%P5NAPTS}4fv3%I#KnRH~Bi*bbfCV_aY4P
zAuD1ZcCMIHZ|%X{E<M+rkxIbM$PZ^};K73junq0zP9MQ^>(A31p!jMTT(8ImA|Hu_
zAbF}6!@nf27)0y$GLQ8U>eO|(E+DUyQhwa?=wWUGCQjp&090ouzsxP6DFi`cE>t>#
zYKeQ+xB4=41U_J>eF7UO^HtWS*JZ$q0`l-DXwhrMlNMo<!T#aVyVocNxdL?-eWmeF
zFO^No^%(`Po}jvr)nCBB-%P3MQT^i*6g(icF@hk(+|U*ce+8cQK?4o`#WS<x*fKGi
z_5k)8lTHV}Kecl-Mtfh01O?s^hQJKkvSni|(}NkHw!a{uRl$|mXMbD^9xdjlLFi~`
zzP*CsQ;PRd3xgo8=bwXP6!5g_+xo~e)h&x@<xa>sp>#p@;R-!aN<sKUf!xQ*{OKt)
zmoRs{Lf?(_t4Zw2UwA6|F$hIDy_c@pQ}Xlk%huz><T8O|T1x6G#CQ2*G!_gMgZykd
z%$m-=-bLC10;iXGd5j`NfBSoSgQ)%~WDN8hhA;0&qhZLqdm19WN09g-Q6WSt%7HZj
zy511%AeTz*Q~Drzd3lB3p9Q+hmcfz+8pbszN)dv+)8@au=rZomdA6-p7WIu!sCa~V
zVp1u&NG0Ymx0NLfK-Ec;A3=|g^aEkZrBMI{K@U620_!fM%(gZ;|62RZG0D^Y-Cb~J
zLNs8JP72VJCu4dlOviDxUqOrdl{d6~`h4=L>-q-?y#$~64&ob=!1u^(^i|kgUdASP
z6ur|JLriy_goK2g9A{nUvsu4ZtvVA<NMM%!qsgwiXFQEl6eTDDm{geh`+p{Bkxux<
zC^<;cJm1T1+1_p9f+qni{RZgHoSb;fvNNTlV=+J9?yCUT9B2_AgT!HEMg)x)PlGF8
z+-kYiwa+Q;8s~M?M8!<%Z4<J;D_D5xkKRhb<6mhrTGNfciyKj={r@+0`+xC}lSQZx
zpcno7O#ZAaG5cG8h$_9XBSGsMX*2$L85+!u_4WUW`y!ptSsM9*!@@)Was#vtIvHxf
zi2(6^oh1NpF_2V;iu7PcG{t66&13QPzn5P|M~)Tx&qq(53_$~f;)58PMnEf}b3Fj(
zmQqcC)H^^6ieN3V*8xeCzEkkup*1{5;4^?*kQy{4!Q6nin1TTov@!P1&J1l6Sm4W-
z`}1F8zAI>=jeJ!wtA>>`<*_L$$D#Y#449SxML`R73fviJL;-mK3~$!e9GW^1lW@~Z
zn7-NrL{cghndrFyZux&WUF5UfagrvSvX`|of6Q(WnH4P0h<Sd)8o##43{q*gB!Ha(
zs$~!nq2z*o1HdQzjd>W;NT6KMmzMqlUX$9F<=`z-n1dZ`{5plnDafq*hIQ1W1;S2t
zf$5|NUjgt=`UFx^Bmx@w4<u|Kt>r@>ow~L|0;_Kuro9LvDA6?3A*llP{`3ivk&(c@
zJvlj%O4?ckDG<Qtzn~yQux~VeB9MURh~1SZYB!A}imu-c9&S#Kj>dsY>5o903<MZR
zZj#Bxn)t1a2SEDt_V&(n{R>SYwpbXxHwLpgOnp#oCICPKemck%%3QZ+zPW*k2x0mt
zg7uj!^t|hamevSNC82}bLJYcktr0wYkeb3)iD{1oOaLL|An&P$AB7iby4BV3$ypN`
zp@4t@fCqputJW{6Ws0)}v{g$U^8esax$hXpzBf&PoOgM)OL$}e!_fPwLEn)sVP=Wg
z+EG$HP>C1`gDmgjBcfD*xcU7Qh^8E1HBpQuwiwNzNG0U-n#yRg5Fw2i(0eO|4g$r#
zQ3Q>AbW~f-7X&L(e>)`jKbHs)Oz2^C13mY-4+1EGahlUD)@eXurr$f)@~A!ieFV$g
z_w*1R6jXKX@oW@PkH$ciTh_ef61Os3Bn&kga8@BqG(fiT6nxQx((MV$ZaTAAqu`or
zz}pK%n|w2IW#Yf>K}P9`K7JdTo;ufU+S9?QsSLtzb<k8pPxU&+_c^X9LQFXDcOD~D
z`2zL_wofsTI)LW5cWwHsbzf!^WNOHXeV}5kM-w&$G=hNV$x#`Q*SAce(RyMFXp@(x
z=YQ`g_X^1Re4yZK2P$BG1<3`%#_q{PnW-vm&;o*&44wqv<e{<v84IWV%st&T7%s=N
z8=S!W60rhcxl?=XT@@|`5j|iNpl(-@knqjDqGw7LeqYTC!CRm*I=W8TkSV2Zazj$i
zDa`dW;^+t)8=vmM1A4xQzc><&T*vQ?+pZp=7v558FK(&Y%q&CWj&g3NB7{zv-PF`X
z-*SV~s1a}>AZh}~7&#uhdKE^5jZwnjf(QnW*r3!_j@qUqWlV3l$Nre)oD2KHn?5EZ
zvOU4o<KLl&yddqnZwbHW=5enbMAy1XDv(@PNT6pgSo4=bAEkmC19l5gFsxGetQ&7p
zl9E<HK!9DMk*|iF+MJ%Ajwbo|ItUY5za_s|yGBbZKQ<sWeCKa&1c9!=OibR)n4^>g
zQh~a<+#@YcmPUCat|Wv=0P3#EN_*6cI~w_YP&H2#>Tm}jH|Ir-$cHdBKH>P*aQIqG
z?9~9n>kq8|?DohZTCqu|1Cih`9-cy3uH$HghEWzK)FCujJXAM83Q%H*%$Fo_%0PRy
zBjH~KdNjrr)%2_37}DoL_pZoU_}VDRGV6Y3vS^SKk`nQe_dHNSn)=%&K;MP`l8d1o
zE;)ylJ`Q0}Iw|#S>Bjb&oAj|mL46m}KOlXgz5UgW`1rHN{=4+Nf4=R$&D5<8Dtbqn
ze=qg(%Sbj>dq;-DjhG<>ebWv1>ZUjiviHAtW`Ih{2&wAQHyh)R&ao{t!5;wQzdJ3G
zM^3``#x;e9z;(DfXH73eF8a5=qLCZFw{;jZ_hSf&v`sRyBC680iT_7^@vDCp%mI=-
zFME162ISEH?b-iF`_xFhj<{bnn;F9YSh{fGRpRgfXE%a7g)e=obiaR|)r}>#Wb~8t
z1<Pi1SQCdqjfjBHlc6MTdbUrCd4iHHq4RePlK)=OGrT_3FqqHIH1>+ylJg4P;>&d^
z%RTJPxGZwX_~3DH<r~KJj(GI)vEhu8oGvk+LUZ0HD1YxlJ14>t7JhWDy4=rg$LZAM
zLGvx?>Yg-Q!Mx$3e`WVOxs6(xSJB+0HOx-EC5rX^B};3LF)^F@_*kS4+upHircTrz
zk9DVv;gT||6<N%yq=}rJy<Tg)qh04d8AAM~NOwL)@S_q~`#<u@O*0_u$+$E<Sd-Oa
zuc`K!D^Pp8{QByKm{>CF*X5=h1x>SwjiHnMUfU@a?IPXKPsRqKqRW$IDST;DU)DE3
zgtR+fH2PM$YS?--n9n76CTiY})aSkkVZqQRx=-Qz-O1OK2UmxqEWMFghTR9|@SB4^
zi3@k98&qnt2`3EKB^)i?s8`a(65WZJXI%=;<1Z9%Frnblh?r^V<gtBR?dB*;j``>2
z(BJf<f}$w8k%-&^2bZoyDICrf=d)27%-m_>Gi6R&8Z>6rvdQ3L0Q0vU>+zT3Uezu=
zsqa{|O6ybs`uh6Cnt_5(>2>(TMFTUVW{HZ!NN)c-TPiXA%KP2=CY|t@O%C6bIe$1@
z>Uh*A;~3ArJhOl?PkD4~n(Si&a+Y`ZWkkF*-&*VSKRa>k8pYMCV5nLh-Td%E>D=(C
zKFZMI*Ms$5o5_K?{EhBvclV)<5yFF$=e-2Mg@HIbKK`V?E^?eVWz=u8y~M<MDMc$S
z)$zp)xy9zj-I?)=b9p|3Kidpw0r+mdpnJ2Oii;hO_!kSP#}5YjGI{uYm^`{mgarp5
z*|-mJDAKI|I5p0&t-tp3XB+Ev_stD)@tz(cA`NhNDLRa|8XEmIQR8|JBKgPj6JOFs
zzN~k@leO?VVg5z2edbp3=tC{HsrTZ+x}f!V>R9D+8o|xAP50xuU_-kIO^}{cyVki^
zb;b=A#RZl0wl=V#wk`;-3-?$Lo=obPxXoR+9LBnDyzcEK>gm~dT=l#!6BTB+rSit7
zH9c12Xf;AzXJRxi>96xtO@~TKJRa!r>wQqAR(s`D_S_GRl0@S((`DYd;_4)BHm`|=
zK)pLJ(Ww0b-X%bSo0G={k5-KvE+6MVS3V8@J9dq(m$OHAg|diMv#=5-r%R0k`}+Ez
z8XkgJ4LTjz`vWXbot)M-ynfTQGEDkRYZl?m-MbLrcs{tGbp3wKkK$XkUsp?_dNWGa
zro`{E*RQ6!Q6+KdP)`%zm|k8y+$=Tut(tzuD17VsQ{%D8JI6Z#A-KVfwQjf0*M__4
zUE<98riZGX8@xx^^rF7HbtD|NN6S<^y=ZFMD~IpiZQ@h$5<R`Ba(w!9W(9PXvaf#D
z#mp5iR@g}2lsFCitO~3O91_<T=da56Eir`?zBqCm;J(BOIKVZ}=gZy%gI*T&KOLQa
zw&X)Fi~)lI7%?Dxd?3#fiXCMtC2>W%0cs8k0(@Zmfa?la2OY%Bo?Jnbr+fYBQ<Njg
zH=9Wkp9|WnGScx~-s0U`R*dKg_b==DJl87T{_?mgX~*{HYn_hqX77o>>Xit$V+WZA
z?^`Y#FOqp#WrJs`Th~&>&bJ0~VA~THsaNd3#O`!ITsXw>H~L_wSCbr0nN;z##ly7c
zF%(yG)IR#+PWk)U^4|#J=U-=Gkvs1`cvndHxh!<Fh^6_Wd%Wo)=UCxNP`{?O=MR*>
znRkGkIUh+ik@Gh&T2g=r2u`ZaT&o>CfSMerz~reTmKiEc9_h6&X;-I|G3!R&nQ&Jm
z{}9pT<3D0n(d~`ctl@u8UAA3P8F2airT|({6%qSfe{Jw=V5_Wb2|4Fh|9oerPpOM#
z5wa~?{)>z|h6Kx31fBdBm%Az6x@`J}UVGv9hQHDk`?O}}T~_hh*zC<4qxT-mT7aTP
z>u{Z}C$e0k2?C)hn>JQ$c`n%Od>DDg@lc@MAZd5O&1s&csCQSd!s%Co{LjMsKR%xg
z_T;QT(evuosov|Rll{8!>s^V2G%87<=09YUS_4oCok7n8zJabl)gRja@D_;juwpM}
zLODRVfC6KyEA-ZpcKhU3s3Ro~zdtjp%VAmJ`}tw`h?i^_{BC&3s+IA>BGGOc$NoO@
zV{Ws)UxRt2L~YdWo0Ij&ySG{y9T#xc$IS_LyW{uA!c+7Zm3O*gmwzs>VUUKJD{$Tz
z_TE*F8h0+<_(ga7cDzmhonQn1kLNz>*Jo#0UMyWXpOHC=VYEZCf8{b>F(KeEHvmzU
z$7&0dsFw%pAAXe>PAbH$ZL<6-Y-tX?G~TyA+z-bmtYH7y(+%8*^R<N{QSl4yFU}u)
z^{aS&#;ZQx<O$rWu{c;k$JwfW+l=$05IM(>zcRjg<FB@F05^1(X#Vof_JfL!+52Z>
zXXi7&YDg@m;su&p4C9HcCOSkLGqPD9S`aS*=vxQMrs{Ey9N?2?o)j-=+R4Dpx;DN)
z`%(2IT5I8?Dc~czm+fY%;9i6J>WB{YuxD2yB|```s3{aL*DM5|)Yg==FoybvkT4%S
zt_x^jzowk~O1i#y=u^zOL2-Ke&F9`3MQXnTLP^r}D~h$xPl|4<(DbO~%7pU8FrF^r
ziPc(-rNuC^zF5;J@;Ib-d9*Q5b&+5g5}YgDaG_gmzN^o7TUwa^bkZ03w))IPAns<G
zpyhd9n&O0{I+kiW4)G-9qq&WnO9>xO3CESwk_Qja{uH`$Cpi+UB;i_YIhVw%{lpFy
z-r@{~gRfMGqpy%{PrVnv*yv~6FcFZ~LRb}zC<6%tI<s8WjK{Du<J~qVMM+5$GBau7
z9YGoaY%Bl-Ct4ViB9=h9fYxbvT_$pm0NUUB;%%#weSYb(@88^Lb9=%P`M5hT(rPh}
zbh<I7WxGplF+1N<8D%sX9^oDP*GlqC6*=4eLmrVrCbTP1_0Xgg`zBOoHWERx!q34y
zJy?o*>gRI!&1F!}W@1|Fqi<2xQ)wxe{WZoLFEJEJDqT;nFy6JEe15cqy7OKBD&ZE)
z&Y$RkZ(zJ5v^y|@f%=zV$S7VXTkfh_1IRf4rx%MHYUa01A2@e6Jag6=de^$Rz<y_J
zl}>n^W18xQ+GawPe}5%R>R#qE0W&J<#x%e`v_9Lf=WpN%C4Z@?;J0dS9!wgf{HL0{
zLZ9Z~J=wcOtz7Z5TI^%Cn|%L(m&c@bgSqM9B>UrZ6HHGFuj1P;6YUT3(1|D4LjBrr
z%Mc-~1->4Dwi4tu?A>6H*$5q-B>sY--z!w3&XTL)G;%D)eL4)IyUjfj)TvovLXNk|
zYW}G@@B0n2g*aKL4kqo)|8^l071^n<da)2BXo9iF>+Y_bG2!~-;YIIJ+iUK!MQs1K
zN)74sX_2%zAA^Eq0Z4_hMIwsQo<9YmjRoI{%0Fz70gUgIf<`H>hho&IYrjs7yPpKR
zY$#wZcKu_W7wHtJrFM{M@yN+VM%>%Me7kgdoR@>+xX87FJ$<aqoM2itjPT9qaFxeX
zB|Nj1_SeWNY!6qs<v`n;de`_njMxkKN0XtM0w&2G2-|L(2LR%LnA^A6+JKb;@SsY6
z%-I^1dWMvgY{HzL<`bATL+cLO)yeK|{0k)|CCa-`??FEqO2qusON8y&=*K63B0aB}
zj)f7{*J4oU1>8as`CV8vD$`_|4q`okLZ#!JEVDf5B_ro%9#+ysjZ`|6Xa$*kzbS;L
zS7GtoL-T9Shk+&;oPWBtIqTm?E`xRc{wo~GHJ=`^%8jJnZ5fV&=<IWX_uBiUaBMt|
zN{1_EPa2fDfYM&Th5#Q<PKzNX%bPberY_GneZUpjcC3^^UeO6OVIl(nA!}FI7=ULm
zY%6UsrqoC~XXhM2J9XGUA^=%<1)f6t4%kp+?yc_OR=qM{`vD3C#^cn*I}n$Eyn#~;
z#<|M%Txx9~#09Y_O1IgE+h<WgkpSY30OF(R))(G2wcFcyH0dRF>pop~nC=m4qIMUK
zos`txre#=@pnhlkKkh1RdQCCLjKw9t)I1IjF|<aw&QI4aXI8Tegr0qP#{KxmkBOS5
z=)lRUfiYP(g!UTTsX%K!$5DTj1>JV$2tqg{CPqcn0=2<8wCw=JB0O~EjpsTO2va`;
zoR1<(vL~O5H0XKJ20$6Gm=LUQmPQzxfD2}}x9+c5UIgw2gI<stdVzJ(>)NM$`u0G>
zszp)4MJ_`4M>rYW)nh251H~nV?7)wfEA)bul}C6NGc5^*vKIoqr@Oso=~JmmXSc3$
z`zTeuXx<E3R+9dgkA*I}q5mnS{Tlkj7yrw(SX6}_4_qJm<wzn8U$Dcj2TBX97l2WS
zcqYGnyGPq#q+e<GL@mrsnFIeJpt67_w0!&4C;s*;5Aq6orJgxB@c|1zBs4T21?6Tr
z_!X=<{hD<H7X~zh*-06tT!0Y1*51~ZQBt2-CS!nl^77{w3iTi<PhFj#m$@=WytUTH
z_jJ5#OJ2Pt-z?*80PrcTu+bjiWo#MDsqTim?Ye%kl}??T|1`_bs1hOI)3h|3Rxl$h
zW9ntQC+}S;*OeyBxXSzfAj5I$f#X>r{hQBXzP)1!q6z!V<y2E;Ww<Khx&`FtgCFFg
z3XAmSj-O^W>X0oV`|Yp9>wXFoKQwE3kInH_TUqLGy+PdPcPL%!&jA0@&t~z9p~x66
zhxE94KhqCHQ&Z}sYtG)?KjVL9)<4D_Oojb~gNj`z{&e?({!#xrimVMc`l@<^efbAc
z<-2!Z==PEfn~qiAd~s_Ak6<{YA-{iQB+se+siU`3@736_tWi6bqjj`Dt%i93+<NA6
z6N#uAx82-+Gc@Xg4aTSe^3Ty(OatO$p{<!e%8Y>l@fjvH00{c|<5+Muq?T`NA0V?y
z$4EOHz)&5=T_5YJ8CI!+Y1+TFFxah!e0-eYm&d>Hjd?0+sxqDxb!?kaB~bN@eWUN{
zNNLWwPr7ufXCypH)^qVoaSs>d;i1V^<g<o;HU<<DS`wxg0K~bh{;<>s6RVmUT)j`k
zxD=mSzOvtw%&w_8Y>jYn*&O};x*cPxx4CR_ZBLNGbkW0`u~68BrNYrtL1}IA824PW
znE9^9?ap_Vg{<5%tV`L}7GKMQFZYgj{be#p*_pR{r=msGV#BxU6K-6|H#O}n58kU!
zIN2nl{W+n9`ikh>QL5k(>ydl4?e~jq?-eJZ;moeK7-^~cVjZphVdsEr1bdp2werCs
zds83pj-Y;2B4b~$1rkHA)kz$`1_67-jw3_5+0Ro#?@rCy3?7-4#89qx(I-O4NJ#m?
zQ?WA4ClD<Lnwli(1~}YK57_3F0(@`{AyINLJT*3^+i3mzH4D_gU`~{yYY($Ldg1mp
z!)u2EOgOzWd>Ybxyu5LDE*}oxgct@RCI*hIc){l@WdQwYh~};cp|<g{1<k~hs!)XA
zOgfu>U>17tTl93$&}>zu{Y?hBDy6C0MYd)??VXtD=C9X$(1<TBOC#dqB)6ZcbS7xK
z$km`D%}dzkl}ZM^nJm%XcU#=}+<gAzL}_!N=M4p4c;#$2KC7J4nTSvSxxx=>ewz!g
z)1Ey#A7SsA&U)0qtU)C-d3i$;HZQfhgYypF`a6$rE2(HcKez@;OJ1j!TK0KC<tr`q
zC!5r}txe55=|SbIJ`<Hm=N|Xg_%plIo}G>M?NU8lXCBlox7wcVdvY*ENmaVBH$|pE
z{rp1RVL6L-_WtTP(Ga^@quXJ`-1PKZUmu<<)yLNLVn>-L4md@~@5k*kaLeC#?GD#y
z2!{L|T5EXGJox42bySpmsl;o<$~kMCy_Pd#V+|R%N9=lY25N$1HU(lsyie{l6Ed8i
zkow%suRqVXd52XZte@e3bfoG?+L!SANgBoztzxd6k+)s)B83ka`>e&i4yk@vA6a+u
zZGYr4)pmdD-7U|XK~jYJV)MMAB}$uc=k_hzs5pJf0&IESyzYrLw?h^U@1OZPZDYGL
zNl{jE4K{<^PAoc31K$!CIdVwE_h#lVa~UiR<h|1JyL)5usQAsKI#07?GmZ$U+aH%|
z{fh;VAt6by_lF6b2+PRG7y!`<vUqeJPp3Lyg8Z}~x9s@12z0>O>p;iKE>t9*h0W{c
z;W0=Ac00g#f-x~&`vvpr!zTTt5cYjAfof}eeZLLK;bp{^_CoVvF&AbG#$O(CK0`+5
zdp6_p{X#l|j`v2!#~a@sO^9D)Yb$zm36YT8&icwFAO1!ahoHdoJj8AGRj;t~JFkru
z!i|Udr+dBn#X)b%7U<8<bdE!0tI{UC(*<OrR2{mgO)p}WF1y_hUu-Ciyx}&@yC++d
zF814fM?0)!vqD)fE~&0}mt>igO?S56Ac$;G?Bcw)ge)}tT~(3iac$_t2F>AhBID6b
z2BNmtKLbw=aD<#<6=w_j`)`qQOgL?JIA@JYKX`An7%`LXCM2X$GZ^Kph*A(Wfxl*W
z{+2)PA|FnRewtWW_aJHDMF6JPk>&lfR#n3hYo>Dd!1T1VO4ZQZ@FYt4rY4M*(2+ea
zi--NZ&4e-wC#u20IkUHkd(*gzbOqOuUdoLp+}e_5I8i%TKXyB#?|kig*F=T(?iS{c
zE>@4nPLpNaOKqPTy)eC%WqR-~r=+@*rOULAR~Q!0Jqm&{-)(T2N=(u}>v^*i`c8XX
z7w1HNSJUP+-ZtxuS!SU+u3zuo+(_I9+@Z^TOQy%3?;K1nQsN7p8TOsCY!^=DeFWK)
z4Lc7D+|H|~T-Kf<At6=Wo6nQ5jE5kyy0oNbPyr$Pr*Y)B^(u__*nm4ul`F-1fG!Vs
zkBaiz79z{1;!aB=k88@xcEKm2+GSJa(NCDY!O*Q3?3{q15_{N|kJs9DZ_x^j{q~?J
zfN_$h=Or7`{5BgK69z>%bvIgpr=w%MD0|SsX^Fw*lkqMzAD<2@hUeXV*V1}>2M5@>
zUJ%W07fzI)S3j@&HSISPom_S9z{2#vDt~)UEJxry6=@1ryX|p@RGp6j(q@CV`cQK#
zu?ppU@J6VLs5(<tnpOSMGn`YHUfj{m>Po6Msj$u(8LAXWRyZRSFV0b;VY+Kdq8xic
zd69l$GKMpOd`=%U^FA}$+U!ln{L7)l8<)-$h2vi?8ooFQgtfA&RS@J%eO%>dBj?8x
z@{XQ)8PQVm<~9RY2uW&QQCeJ7r<T>g%hqtcS~Afdn>Gm{k+*Ydo~Qw|v#ou2th;a9
z^e;UPetms+zwZXl8>;O>WB%`6WDz$@E|%DDsy-PWmSMa+e*TRq_vh1&RJ5C+%y)eb
zF1@~;pD-mpX%Ea2lt0zg)mHNuQEzoBEQ-0u?-EJtcx`7v7I|Krce$MB$yv$+<Lndp
z1{(%>?@!?!@ytGJBX1I1w__M`bGm#e&snjrU5l1({u~yD^M<Sip11=c$`%JZJ3F9Z
zYW1Q)A;my$?)>PJ#8&?KGkGZI{O#l?ow~GmG<n<IN;)ciWo#M_?NS!6fr`HR-g)!(
zd5Z~BeKEmokJI$sZ8Aa;YqsLHB%*5yIR^IlgPE>(-yb@3e@?lu-qk$Mk~wmB*H4-I
zXxD-Lxa9)ZT&QFIAkvX4mMlM0fti8#cCuxGiCH4at;*$iJGnC|8s6BWhw=n2IvkxC
z_FJ4z4y7A?#Y-7JXNIP_x3Zj{3V-zJ`%Pz#eAE~9RGl%jW>s5Ptss2Zx2q=9gwx@8
zX&U9`TUT+D<j%KVO6Hz7tv6;h7Nn!9E?NxnaJ0V8(I0Fk{B9u3alJcFs($=Ny9qCp
zRAI%kz|^*PF7l8qT2Q=$BLZc>Qhu1Ba(SePew$SIF3t3=e+zZ43P*)U(A-QY^D(t-
z)rfh^fUiN#d3*_%J)0`;li3}1JR~F<ei|gy#?32-7hZF}PQRR=a`m5Eg<c3=xGhq3
z;N@GIFe}N+6X4D&SZlBjmR;^w3U<`}sI@&IxFL1Ar13t7Z+rpWEU5k<h17F9?L(Zz
zt-0>R?MHRRtE9}=E|(pT_E#ImTU!{=F&!oS#}$8JX%S~%D;EiLclP=C+~DO%T6RVg
zQ9wafPkCOpg>I3>5^=A8ns*wyGP=+da)2VcUg25WpdtbGv4~HUPB*!sR<VkYuwjR;
zf3_j9q@<_RNfY;(+Fa4)UL{AsToA3XLn#TjI`t>6DcXV(lcy3iH@zaq^19@i8rnj{
zd6QT(7Q#DvLPnya_tw@z!l+NPELGh^nJ%fd@?BI<-q8tMtn%luofcXCxiQn^Mo33D
zKZhy9ek7l<zbhz`I`B2mEmX-;L;bk~jx(QVjZboo?+!)_M#DU76_IirQ+<8<3qKSS
zz9QV8E;MJu*0+T|m8oSs-po5syGGW6=I?Sn&oh-*HrPCyxEu`|n~36!-|D2K{L8Ru
zvW<g-!o6>cfuXqj>)k`BKk%3j>u>V=4TovS6mPwLlJUIzyxvR8!HlW<%Vy?V-P^e*
zFmAOv+B&paC9pOZ#k}eK=D@Av-XrA>gFSn-G8;(>Hq-!H3V!u%L9kre3ot!<+op55
zoa04S?Q+iJk-j7yd{+HJR6V*@e#@2GwCAeNx1U;yNw!z{8J+Yc5|b6K9=eTCy-g@?
zOL02+a|7G;k9lkt@K-N|`@0HroR~y>rb@dT+aEk8RJdsExBnpPOp%+m+&ycqml&!#
z23z*%{E9E~v`gmKgtCd^UdP2LHuVedIC70Dmb&LT(al0V8Pd*QFn?HxulMCZ2K(Hc
zHheI(>$ktQu2}SV`}wyU8;@Hf953IN{ut!DX){Ku8XUnQVo^CXTIr}z)iCkGe6i1h
zj6xmxSbk9RkX19LaCVu9lS8ef*u|VQLvtPH#l|!KkK*bSpRX+m_*;uFE7|-gRt`Qc
zYp|YluSi{O*4+<JOH(X)^g^_g$bH#i?_Fz)snWZlbpf9ZMB=BrI%FkowRQfUHz4BX
z;<A}Ao8gYha!8)FaI!|cm#{<&bx7?#hlj?V2`7hy;Vm2uneSoGI->Zot^4T;HU;9{
z#_PG!#|@V?f)O`$JU5r{{m|A67Fh<D)fd*!RCE{Uxysvc+VqZ9I^&nL6Q@cv&L0GP
z*EyODxs;_EeouP1;gzIJL9|!cRn5ipIE>`XeD#2*$2YAeEuQT;A_u-?JPRj0XtPH~
zMt<?)1)juie?rn@$CcANqjecmxeTaC$Irw<bY^cyy&csmF+AANnq8*DKtjq?L0jb5
z!Q3}#xLJ%0e{WM4Q##e_ot(63Ydm_B0VS-(#bxg(Dtx8a4u=P-uk@$l4z7EHc`lTl
zBId&ioo#LQzxClKk!bUgP?03OvkgDzzgJbcz>kS+&vgCdAY5@5z9<KzL--ATwUNR?
z`12<kLkT2|wooT$Z7WK610*Ch>Cbrzryr`2k&iC3v$Me!1x!RG9uq>`HmSNLJP6F|
zyPdB<^#T4BJ0QcmL*ekO4s7F7{G##jv^9ACzKHnOe5UkIcRTU18ZQ?C&;bSI#nJY=
z`{GnO9nfcJ^Qn1*Gm|x-He_Z5>48<8LLq;yC;x4m-1Fxh4yYR_=RQm))s>ZS0F&qG
zK@n61`kh-_Tfpni&dn7P5^}JHPWv8q6=*Ss&Vcp<-O8hUwcnt1fZ;g^XaR3=ad3E=
zRmvDn4_Qh~tR8p=1Ox;_(ch&5E|0bWi_QhTE^sSz;@jKX0cOC(#pS+x7p$xFq33y~
zqIJ#084Oq~`UVEFqV)9iIw{}e<>g7x2>4uh0u_^ujqMPGo51m~!Q=4&@9)f4a0XuA
zS%c4Idh0ANP%J@4s!#Y?03m50LkOKfePpg_t^o>>!^6Y8VyEmzI8UH=(eYiDOl}}t
zTpaQbs`*0xB*#Q=6VRpWFW_8_;iupty|<80Z<_dcutZ+Dl~wcJ^l5zSpGP;Os=?D+
zh1ZGSP=Jye8#_lQg|B4r;9*YJb6Z<gzwqe9O3^q8W`HQh<C3d75K{Y=M^7y>nf7-V
zRXc)!@B$Wf^+&PBD{p~xsv!o>T;G8rQWXzmvOHJNGzy121}rMm^*$RoZGl_7Qh>0q
zusTgFzkxi+(x4v8jZzOe*xjAg&81ca!2vVn7xTea10}WSd2X4B<3NT=PMs_0$<58>
zq2U)G9WsAqY;3F-+_!R#gQ)v4442IDX7*TZF9v&`oWwEP2EJ}j!B4`ab<~LFzT>ED
zQA-=RjN6@MPXY@b8rP&YrYA~P;};e-YHsKPckgb)XbMCsIQaNE6`GowP%^F!6~v^c
zQ>k+kxic?35Ml!>Hxm{Gbs-^ht>@~2kx$up)%@MT7?n5iH864#Q&I*U`qg5u74YL2
zL`6kuNRYgVS&7+G5QS4H(k!Lp^g3P+H3SBtlM-MPrxxtUV`3%d6SS8ri5tih4KXXK
zS4D?(X;f%%Qkkfk$9jPCZleDrQ|5q(rDdL%wOJOxj(JwS&ZT8#F)KO?XL%XTd#o`g
zpJ{NO)1CXbQN+2vGAWi1&nxP7WM=hTYlbt^Ocql9Jl9MqW@eOe*&^+9^TnR_HkMQi
zC8e;M8sYgX@B1HMBb<|l96-<kq|jeLV~2$cW>HU56%)id?|lkkX@sv6H?XPSw=qb^
zi37q<UMWkCNysDMA!X~*@~XFk%&BB%vQpiV`(A+uxW6Zb6auj%EF|RQ;#@dR+S%C|
z*y)*Ft}khaQY2{FE}VOGZUl4*#_A^BiDA9BZS_omCCQSDa5|2e;b`a4(rL0`Q{dmd
zi~QTsFg;MP<n#4T1{Oi|WR!NWJSyl~U04_{HBk&{0#Xz^y%hdlyzWEB6+d_Nm<i<v
zdpS?{r+wf&$V6JQk>K~0KY6pDbtF1eeZa=V)CM-Pz_{Dvqo;ov5~Lv&_WHG2?LFAU
z8U#6K;K{3;qnON8o{e0fAP@5@Ke!<eISmLN<rVPL(Y*t03ix`Yg{10xB+b4>ON@^G
z%1c2`?jRb9`P=S#mKIA;M~2J7($djVKOH%R3j=qK7rJO?s!x(5Q#sfCer}glw&9hQ
zchMEMcTt2+2J*$c$^uo>@AfAh{CP@Mx0!<v6azoqt-Zg`l=V?R3n<(G(86w?1QH(@
z86_tr$vfvrf!WjS$>C;$<p}!<bdWnMc0o@<YJMue7XbFt?#@ou*UW+f=J_n3?bUl6
zM$C{s!m6VBTwZQ%ZB0i<*WKN{Yz>B;Fu60fwpQ-!R6nvG7zG__KBvlY5sWi_7EHqw
zQ^e=u3?6HN36QT^ymB+xWo2c9a#d#EhDqyGLzMe-3wS*t1i-jjji?YLjq{?qOhPwq
z=@8{OoWs@T`-$<QbE}3fFE6+6n;RPsf-g(1o%~>L!=FdL<F5XkZ-C?V%!78l7#x>4
zNGDg2<nKvp00xxV!8z!JaZ>xGC~?vGw=&0qZn~*8qC-GJ@)rKxYxKK}RAd+BjE^lz
zWkUoxu~}UP`2g&3AzFsLd6Rc#ph%B@dp))#e^?efav;jjuL&>$IR2`wl%9r$<~%1a
zQYX6N)vy_P9nGG}^HTPl9x;GfJeE5>r?AS)-QpLzzWQrrB5^->_kj@co-~_R@5`2L
zVVzum^=kX!!$e22$8L*1tM{~&7-I4yK$O!Dz3BtC4d^K~u)%217!LJdwgOG*DKHHY
z0Z(WPH1QzAG<x>z8<K>HtI&91G%Krmve!Q81=ft$DLb&n7~XH5k0Mq*4M*Rg$*Wf)
zinxzWv>x}<DjBkE_!mawaQ-MIpcX?6ULpR$X%sPE5!%J|^>uUIp>{A4>-Y+rZfIaY
z7pxmW$ex|PlU#uP76s2OV1=a-@iCAZAIPJ_5s~pY4Zz`EhI9tXL{MR#o$Om~baa6i
zF{oBU{I`K+Uw~f@5t{o?=7j`)H$BAW>)GD2Itz-2o12cFp87X9YvNsSFn0NyhzKz_
z6R~A>dU_hpv^fByDp-<tKBytT5<&f^IC!KkkCbZ<*}8dnIR0Q6?#L1t)LJ8~6$7Wh
z`)<p%7C=`u`^1BNR8&-4VwP{6D+V90`rhh=N&<1=YP@l1MgYx%t->BGN@(jfj==Lp
z6s8&sPgaINjR~4paxyZR`}ZM*JHef&;Ijh7Jxb>_G@~}|e<~A=@Lr8fn7YDfNE}S)
zz%>JA9~qI667ol%v3UFREacIj;55QL>F8nZ6SM?EJS6TYE64K_XNz{OO@O2nzM!Gg
zk7%C|(z390basaREqIt@8TgxKwq3y#@ok~U+UQ*umqQ3lkh%~i=Ni_NkibFHhL4XA
zwzhp>++=Lb>wbf|`?0pRw!S`PH&vaol2Uesj<Dz{fE{2@`yiKrDbqDPDLEMoHxmAR
z6HC~!O1w_a&a98#4}nGz_A*YLM$@}!TRFKla1JxiBC^WIj2DGU<!4>F!#CLesi~>7
zw6s>%*2|EaZJDt#F)`I8QzmiHP*#3JfdjP9cac`c#?2<PP(pxXO^_~FQ+$Fd<MT%#
z1oA}t`XVVRDzYnHFF+JDkfIR)E*}O4h7&k4zoCYKjr+x!VBJHCmGD>K;#d+NPqHsB
z+BXE+MOoXTq9PL&Ee9Pl3589tvf&|8?)mvMRW~<-NqH5H20S=87}|&GU~jm;|E`zq
zPb~8S^KB^Pir>9!R+gC*5(FYIZ{J#-+wLpPT=@B}g3c7xB+D=iJVL^Rm6&>spLy?G
zt<BI*xCSi=yfgmXC5aFP6~FlGyu1-$c(S0EkiNxJvMpdxSB%|&htSKbo(v90iIs!E
zF#%XwFWBxuq^0WHVqo9{g|$elBpn=v$`MBqX7uJ|@smCke8|RJ^Z*66a$Q*&cZ-U}
zE)<?13453VBA!sy^PDUm^fnmN7*sjrz^aED?j0qQZFRI+Bk*w_jsSz_wJGoUJpe0}
zgQIE)QpuSvJJ-S~ZWX11lw18pw_Tdru(GmpPWnwsN+^D5ZC7>{)ECI<h<Z#8l75dP
zmOc`a5sMJIkZ3V^*APYE-S<x{EG^Z4L_JTW)dyN}ivctBL*A6?hmN4;1}?9Pd{}aU
zr#l>|`@RE=DqoJX3Kqc{1QvXIYim$)LB3*1tZf07lKovSE-p9>;%8o59PtRD)~=F*
z!pyj-z%Q5(4zdQWz$WWV$q&Y2;|Lew;fZyRAERJAKTnz~y8f_OUvMKX!mBN%y7o9$
zRx(59l<3c8(ik2qBWu&y<!w61JiuuLi_-^vWk(xh|7Rs&o(}<sb3T{Xs1d21(sg-&
zfu%T}>485>7APaT?eNG{5<2q8RASYBB!o<AnB>Sirae2z#cOdPO5h*g+hu;^FIINI
z{O9c?>a%v#GkI0u=ocp02UXF+)Y@JB{oBA_W@cvAAj`!FDNu4M-UJO%SXdaGw4hh#
z?o1xCn)H=wpPBc0d%Q+|wgVF{s7MBG<lll~Kp|mB4E9R1sd{@#@zZ5S1*Ss`boArX
zQ}rFKz7!>{5$x8Hkpz!<cFvw5vzBMY-}g$t@csSZ4U*{E$q^9|X=yhZgbHxuz?1*?
z^0M1p+f|D%pFRQk7<;4)HUrpk5i_ErNWyfsG94nfD)BEw>Rh@0MzYidmJV#eONhic
zu0M;y%+J8n;nSBdeB9ifTf>7pxgWGog0DdWCx7(pS@scz2A4;S{DRPL;HulLgZ@2X
ztUsh(KYY1e54ssd`urQYulzRAw$d<#=5d)rDNw%xAt*z|<Z8n^;o{aI)&28L5-Ls1
zeSba(QY6PTky)D?(<KVx@4n<x=r{g;VFw+}=<lEYuQu<`Kl*wi^EaWi&7z@5!sxsd
zi<cYm&%RTydly$<gGa!Yt4RC@h`~Fhm6er1aTp)IK~8RAZr(o}^k>(e-PZ_^CkABy
zj#?(tdP3>X03^If)0XewZ!<8!i6d%EL|lJf@Mk0GTbz%6ev%+TT~CH^|4HB9;floM
zy>df^28~mh6LiG4IZK@8e0E6&Z$@hBUI%OxP6;adD_HPo%}&1}zK%2$oRp;F>gsAk
zY>v37OmNFkS6Ba&XEL8NoeZQyaSSaGRwI&|nu0<I#I%1J(9e0vv9aGAq}kD?M@L8D
zUfxAgOPZT|W^Mg*hTzXDUtKR4xM1nTue#z3=PvPp^&D^mIFZ!w{Ujn+d$s?(PGs<b
zhPhAN{40Gd#Bq`tkOe^y4#$Z8t#6>h!6i<oKZYa>MFm*FN<Md<7#ebd;1BgENJjbp
zK3Yi1kI<)~u-)67%2*kP<;S&o|3gWM?XzdG$;ll<RNZqBWUEXc!Kn=bf`Y#fr2c$(
zBy!nD$VVWqj`coVpIDrpj;vpW+yte(2<%vJbKowofW91hpVw0aWL(eSurvV55Wjdr
z-WMYi;NZO1D2VRbJDq94RcL_8{Eydro%epMK@fBc=CK+@6s-ULK=^x>Mkp$v@{AiR
zxEFj4mL_B`ljGnwZ+bz93`JyIWTYA#7X$*5A&`bhULy3-V6O>;NXUpc8aH<!Z9)7{
zYX%pKJ8W!K@z4{_lEaIvudRUr_Y)hN^e2o+zIU+j@IW$(R|ks<TwGs!vzx#1m$$N}
zXVWQt**<Q^yp*)63mrK04vKYg{N`#`lNtmN9+l9S!lCQj>nQ!Qi0X7>pbSr3bG%{=
z4nyDt^;5)m33NP2v*YX8ckMjXhX~)af-qVGw4TfBaH}%Jeb}i2#=ViV>pwl+(KI5t
z2%b|`+$oBFm*X`8LWK}LT^$`kA)$xJ*fp4$Vj9H0vSBxxctKRu1=$qrSbhfc-Pb>X
z0-N<57ub)n1^m|5>+tU^mk%9bo6p_8FAog}=s7e2*Z>O#^CwRv^(LUgg2bCV0OTgK
zcVA$UKyaf)YTmqe`EidL);+?+0en}3Ck6@bf!b!NvI_`G5!B-B$F?6buOmr3Py7EU
zdkdhd`>t(tD<YBxonp`-jf8+ABHbV*BGMqz-2#FVQqo-;1f&}jX{145Q_|ffeb)AQ
zpZCl+XXczaj5GH=BNG4kt+lRNVC;eFU3xaXdjuf{X$GxOhK<u!LzniUtU;XpOk8un
zRVC40f}fOcP}^y<GvEyHj6xZkfb$fLI8de`Q31U>iRr9Jx#&k%SMU>3x>9)O6cl=3
zUO5Nj4>)xO)fkD;B0&f;UEW+wv(`g6i;imkWl;9_+5fqY{jQ6Tk1w1J1`X%K4c%i!
zNP%G_$3obA#@W0q2XF-}+VO_EtklKrJ`4}2V*3YV9bhvMVBsTlETKII&ybPXI}``J
zV_%`yvU3YDS3xS%VPN=zMbGBa2>46N_e;0ae9hoJ16r5Lk`?wgNF|!ALavo3s=k-R
z4Mtt)YLG}IICEh}4J#_*w45^C@3+FB?#}pwUcL)o98RrX?;g0}g_<S)A>T7^3%HXI
z<%fdaXk%QU<A5g$L>|hbcB-L#mNYap5Tg$Qzf5tmy$;&s)C*}WtN`%en1!A4W^Tqu
zT%(SI4ODe=v^c<>zag=d!XahX0Sl=a>{5yO`}kJr=hR`yRS1gzKkq=Q)3ek9DCB@r
z=}<CXW1yp3URhy2DzY&E;|K!3@u~e6h_rbGDQ+ikq+YxrTfeL%98IA(TaVcBC@$Gj
z$iTx~4HzQ~ThXg^6)V$28D_foLATC@;7w^<L~M=}`Oc6>2^wbU3I2VG9d_;+gEH?+
zYX*CbiHsoNQD$M|O^maU2?HTUkn{4{0v$jNI2UK%=Qj8xW!X$(34z!S6KFZJGNj91
zuLv4<Q{_^s`~-iyseK<FH0_%ZoCVI4wCGa&w0xQ~4vs!0F_%n_7zh;Q=H?C><&tE-
zaSiUSL||N=DR&=rCk!UC*v{Z)BW6+0Sd(iYhZjIUtf$wC(p`gEVu=yYoi4*AMZ95;
zt+=>YTJ)=rJOa^SYj1xBha1GHz-|T_V&bT2k0<_=>_c)C#p07#l3n0rx|ux%`5++_
zyg?s}rPF5r@?71fRjvM`Wn*PZ+6nWCS@^Qma+;<d0&~iZnC*j4p9r9Hs0NekDrREL
znB08~orpnSIN2h{0S1%Mj{SI7S$BEL|Mi_HPw26G2Gw9|i(kv1Kd&~}s5#P~n8Ti(
z!|3uP2;Ta_)gunt9)mO)+R6%|2Ug>iKX_F}f48*wOP3AGO7cUWCbRk;w{*Ovadb46
z{%I9D@COnL@^q@W_zg<mf)Q0VUU(%rBu5DuO<)P5R={NrYMxAl4v4luq#v3<;!VLw
zGjK=wSQkuI=(x<_;A8zXLXD-rRK&65bE4yyB0)#QKu-^0QT^K6QKvl;F-t*+4OJda
z%tQo&D-RH$z4U`;Z(#PZ!>jYWILA5G_%^M)pK(XXX3Mve2=!$Z?9l5fN}3~+lP`-S
zjNC5~eHHt6nWU30Tfzz{UfSejb*uDTJPgI_xj5g08s>?<=Y&gLFt417O#sHLY#Qlv
z_fXwU3ZwPsPv4cCnF1U|&ghr0j;TtB9gjx1Qsy_Eeb#@mfG_MYERFys1rczSfWm$$
z*Rcx=7kU*N9)4Hg>PE~cI3MY>pFMjP7ay;poOy|fY;}3reyLX<>Q*Ur27*;&LTj=O
z86r0t(|7~}ujxlAKfPlqGOjmm@C0`!JzAZcd)i75hjk0BD8vI{)&bI@ei~grr&IE`
zBKX`n_|vER0m{AD2wD|bomW>^xBSNn$`dpU;Qcz<m=J3AWgL0eE`CBY&Z$RVEgKm4
zcJ_;(l(<9N$sa%*mNqwg5_e^-m{3s3y$=#2A6y<Fh@T_NL5LN?GKE`*VqK~TQ2xiw
z846JxVun>*E~%pBx)9=`%KxR3(p)J*CwkdyJTn&o0zRD%R~U4&QZl;@Ut%)q_picX
zZRn86g{-9bN;YH)9VT>;J(-3DrLHqg*n&aNko)i(gFjIV0z1Kb9cv=qllY4@u%?{`
z^HqB=?iU^?v~q@TD2V;kf^L`gW#5Y{{gH;lK{$c+WU`H^sQ1|}9Qsgz%qFUNGpC@@
zF_XF(S8fg=xN$J91OCos-+$Aj6pp1n$H}1~(C6juMb}f>;e9x`6GX(+NOWG#bUuoK
zP^39q8n1Vcza;~F?sDsgkP92E&+|&P)8W~$qgJ)C8WJX99a^Pr@scr5NreBJ;?|G8
zf;RZ(*KdpHz_)`j^w=w>KL%NMlfpMXo-&F&=eZcxF_8b_m>3&Wf<+)SRenvBJm1Q7
zF>%uM`t|E3>%@cmfF;c5f45-&@auvgy6^aN!Xp$ZFE1}~#i!ul%nqD&W=0jB%YPrK
zIuWumGr(r{2T(@<x8{0)p{`x}m`cR$FH}j>P8n^5jxDfdhE}o|x=M$a+Q&S!zH3Pj
zh(p%jmJK%%Pe43@vF706vFJ^?Bq4`NLBqY2436T$s4%6`XrEPhrYch_37^BbtO{CZ
z!AM0o@ddY9EL9-t?^)|&<@z<Xw@lb72@BHoaLcj_N_jKzgMB`OWrk4jRO;p-baG&g
zOyN^Kf!Zy|7U}CN4iO+}RvteSWhEq)mu^Q>T)BMdEUuqla@*rRLX047wh_dyDYrE@
zu<{^^J}5NR*z%`D#5+gF?Axzbl07U<Z>bK?pjbpr+XygkC%{V5b>2P^Y`PaH!!&Bj
zw+|$oOM9e<XW@ARw`JHtTqPEhb%hs6x;yuAB@7shA_kl#Q*~2o5!Z%=4O;LpSvcZx
z?`}4TZ=28=qfL@PR@|s4EiO*u>{Y@Zzf3WRr7&bXH_*VC`IOjwnJFcAMx>ue5oR2z
zzQmT>#KdK=tCu+<sK$n0KMP@MWhDv`Ch&kMf9-mg0C5|caz{`UO~l2JWstNm{@WX}
zFy0e5C_joV@6*wb4yqocBu+NPcp4E8Mty3D^q;Y%ywKPIa<dPBeur8(HnG#PSRzbd
zbow~I2<c^0ZlE{sVcuJmU(C`YrQpsq+z`|kOsaq-E`rjMtwcz(N1(JV_=MMh<vtp-
z#QHj#(8R*YjSk%i=j21<x6pCV+lj(msygU0hu;w7uh{ZSMO!R@E!+{HIbbrP&3->r
zUCK(ggO=UV|BK8ID=);q#`s9`E#|8s5iGL7-;m}Ap)wYxrla6z{WpLh!miUIIsr=i
z{&YyU9gHbK#3z#PUA1AAOP1-aTel#QLUP#=OgGD$>i?igL>R*~kx7-oLQ-t^>^9&%
z_iu09qNF@IKXZLsH;O{d6l{du`^WGh5U@xVQ>$(yux;(BekFYA|MuxP{{c_n6EI-t
z`S%g_03-wd{!gs_e|~NR;^^{aj{p4i9Pa=7C;ISVc-1ZeBKx0jaUZ_eoE)0JME`R!
zHb{N=Htwa8@*iaDA7A+I>%t&;>3=8Ap_dqLkk<wsF}&T<<zN+CfIc=S6&?V9r{DbN
z2SMa!qj0{#Cdp>qc0NG!(5WpjM69o_3c;E~$oT)yRYjz@<mMyHO-%#i_3B*aXVIw*
zGyv#>XGJ+4-bzITyrO*nJ6H`}eU+;Cybxm1U}S;K*F?OnO-)2FiRNPc&$m@mIkNSN
z2oLv%-6?3Fw=Whf6zU!xc7*&5=;sNqU4b?b`X%EyuV|lz1d4>jL|{Qc<%a$+p@_nI
z_29vSM~~1efY3RFld#nUUQ<5+-B2hLyy}V<@vk7X4NZvlriw#~?B4H=j$9ZyA^s)J
z53P=Zj}!q_N-yLunL>!Co$G&)?R`zfm6MZmV`BrLO<2Za4$~6!6i9UM4#&8(Gq3?0
zuxo~skI(3Tz5=%DIn}G&NI1))O^H$!D<N>0c^4uH%PdC2UvI%6fg7lZQI{D#80eBR
z$yNJlbZo3<qXEbVg(HDGcf1XsnVGFX8G^=V3aCH$1FnA|0RbqCH9U<FMEjrTrOkHm
zz(b0{{T>6cx)&OH2C=d}fRC<m`?V0Go($WI>R>4%Nbq^Mxg%C!iW7J{{xGN*h{m)@
zSRV_i+w*v>0?<=Z^!D^X6qheF@X7pEG%6^-<3gzfxF9PWCQxEPyq;wOe)#XVqwPu6
z(tuIEZpTU3#c(B{@tWZ)Kv3XJ4aTL1)&vdy@|u(66G4ziZXCOIxvVdZBl?*!Gjo9l
z@Ax6?;dmCSl8fc(c>z}GL|7)`5+PipeaYC^SX+Ax^0bts+~B6c&NC-4?gP}%^nBob
zPKL1C-*?Ap@asXQ;8;sb3k<MpFtVYsQTTLB3JkS)00*8HCHSWyWkM1t!=$@ZSqd}?
zCqcGWX<Gs{Z*6+|CO96!N_F$zvtE|}JeOrpkzDNTAqVSBhP~&tg2pn^3xIS%lqOHI
zzrTOvP^`bA8X_y#3KHtZ$H!x?ifp2nk^@wZM#+bCA@oHFW@~h|Ed1W}pCjdAZ{7Z%
z9~jJwuvg|QOb^gSvF=vprAt8<N6qxDs3>&-&NZNY226lug;5#yT|Dn1^8HB6Qf}Bu
z!h9<D@S$RyoM<`V2LbQj<54~2U}6fiv2k+~_Io4U2?+cWsPdsJV9XmR?j<Ahx^<;+
z^V%cF-TH=Uch{dEu{#I9Ju$%5pXO?8G<24`y3_ev|KDSMh5bzV%AYjvxPhCT92_YC
z;qo$K<S`=#c4U$$3N*6=LFuo!z6TjY89ST6&NJbu{D|&oEG0tIAcl~ep_-bxvj$@T
zEKSmYfHJyPs(*2*<P;e05|w;#6+i(_#QXQ?2vWg3p+>0E8KoI8!_$V|p@wFW)7GXa
zY>pA901-gg!&mK!5FtV#c;2sO<O=!eyU1LKLg+?jF$ad?v)67b-kPT+=6|1D>b!;X
ztCoLqEx2N9Wn=Jwu<V%qji8ea`a~1ETFITvd-qJb_}jOX_fPa+sL+t)<^F5jb5qR5
zcRd7Dy)qj&0d|E~bOIg(IOtWl)fABfFv>6%0^#!#dJ2@HD{~Pux4agyjyQCWjPf7H
z;$vdo;ln=6H)*Y`)>cRyxuHL>=@UXT7-_iqQwAwQK7C?U$-<jAW^PtF8g6e#!il4b
zV}#hj77@{BaWTcLHx}?_ATmjO$+T7V>wKik@z-BLXZVS|+&(f}j>q=MV)R)I{ECl{
zH-CEbh1#VTvq^_6fip8OLgic&hI9gRbMv4|7=`D$Z)Yh&D7#2dD+C&-YED3ULV9{S
z*X-O|A2o12P^A8%sXVaz=2bKI7up&6yW}CUX<USuui`ANWdLIl^oK35>5qM{D(UFK
zGgE3h0AZdfOjt&=8rQ6-JCJ)UEf>dk_kZ8<|5rw7Z)3hfxoQ|K>ftNRq{n7Uv<+X1
zG40;<7)Za~)6!xDoA3bj1m_EE)HsC09nCdK?Lea1UKN^`ft~`&5ddn^9{uCkzi?a_
zA;=vtfC|g8XDWbCWq*?Up)Dix(J%v4>(GmA9~@*kXQe-YgEc)Bo*p}Rw*iNNm#Xi_
zk2`noUhX3$BK$kKkgVCP>h+8zX9`#175Z6rhPEuZXSi3gt{1MNd51(HGv4>ORrsgS
zge;-w#iU0t)(L~Q15F{`%94je5YkuJhS2m5oT~CeuX2guA@-hs4+XIAAuv)>tsan5
zCCQyK=cS5tu(ch7tTiaL@a!n4>6vNPI9O6(NI1r+F{{8Arz9sMy7AI+HqWS}nGgq)
zl&_>{j2t0GFOhk_J`{Ib;RBvrNT|G=?5&JqowUwjuD<?~K~6?9#gq(hKV-QG2BJ;C
z?4;=)ooVl{U7lm67I?L|SUXKi<r(<_*@+2hg1y^Cj+>Lw(a|#nP^XCe;kS|UQ(xf$
z*Z{wJl|P4VL)}<l-@UuB!T*(w{ds_-EbkS=)g96)sAAF|W#p<UmoIpZ1M-ssGec7S
zLcIOTy}i{7s4GJi<gjG|ugip7mkYs_{ZwG0lcVl^*I(;lF&;wT9`x~yjL(Vt77kMq
z6(}hw4dwNssP1b-lM=roXY2*!G6PONxLdZ+@qQfxr~@osN*w<WCT_#J2H}j@JQ2#`
zs@=3AM|kz8soV<1tdk|m;;XRB*y|ib7+Sfq5xUlucJBH_yso=je@yq(uEd(N@3#TE
z0xMqX7JL2rF6JLNK$WJy1a9<?LvH~r`ttHL)^!`@0u3)sNf8yKil$q^EyNuE9jT&L
zk7JU4-h$U=*<C8zSxkA#F@Kbr4pZhv-eM-^+Xa&$#12v}pN^$mPPl|q9q9xI(Aw&1
z=hMUD#;8(wq?qr%YV6d%ZL$9;FP_B6Og4VooP=?QcI71MTj(R4s6}oaJWNCi`QYC7
z-0IX`ZK*5Eq_otjOAn06+8c{g!C(!Yv=JiZ4$U)<P+6(3uV44@JT@d8`!?qkXM7d0
zHHKF4fbjy(moyDCqZBGY{@bp4hef^Z{`7G{^=dusG_(aEkAcrK9z`!^hogWC(R;-j
zDRp@FY&Dj2K-$q!s<5YUeGxxc_Jd0AGjd0fhSb!wTQjGPzF%}jqhi7n=9O+*(lmr<
zD#aPc*}`|F#HZjf0i!g4Ns}P#fNxF@&yn5I8Y7<0f3X0?tJ2?rsi2i$?%27H+RCWe
zVH@rL_-ht1)*re(aM;58X6Dy-G%ptqZ^LauLWu8q9gPpXm;wB@lg)l{rmLDJlpI65
zq1QBBPsTrJb?ujy><@PNxICkW)V)PwISX<|Hda;(c((y+fHccDX;|+P04#+92WTdA
zp9K)P>gy?$&msknIt-@LQ#3oZpgN#}VGGEA^o&*kXQ2fEp3ras{Wl0pVy@x<36Hp?
z?Dq@F$uhAwob0X^efN!@c?s%F6S=^u)P|$>#$hO?95e6Hhf#II_SCf{dWTs>t?tYU
zd#s{j%NOBcno&m0D;%jzEOQ;jcG-2%SoPlQl8T^*V5tQ2h?p4Y=5bIg%s`)%WhA><
z_dqEJu$G$JNcQtxi8y{M*yhXLE)Rh{Hya+omfN%Eus<*d&RS@1iLPClnLLLq2|%+n
zU%YTT{rmZn*juODq-L4%QLZAA3@trXb{PxRrfS2ovCh-9b@Ql()9tdwb2S27Np;Of
zer63b=gC;d`y&<M6di1oo^6YK!#f={+57z6U+W!Kwn-0{*1vuXps+fZ6n>tm7V+CT
z@r!`Hxo&#T_B3833G9l8R}+B0z%d=D%)rg7_L+^9uS1CEWPNi9hKE!`0iq2WY_t|U
zQ%@f7FqtT3y81Pl9|bp6Duuvi&x5kIv9?Aph=iK2`SLvu2jcmM*A_)sC;O_`FYQ(}
z7tk0*@RwAY7@0I46ugRVelg1RsnvikVL-Y@Jog*Bcr3@~sGO!}-Ns7#zXp90#~Z_E
zG-o${U2uQIH|P{Hn%>}m9*={cKO4dNwgd_S+VD%x^`5V*lo~q7=!ghH3H5?i(3ntB
zQ=7`jwLWbPrp(UFM6;Yo>wftmXjqqTECT=viADlYP2dB>1h%@S3Fy9(L;tejtE-5r
zX=7yz;(@P&O09|GH*XO0l_|AWW;F3u^kiPUB7@p9OuJ$JHLs!Y@OJ2_XozUp?sk)&
zkS!gn<+<r^_sOXA8kbM`Z#K8sAFhj>KEOCL=HINJtzTS;H?D~+9PP_IF2K_8d>TN?
z#p$`TKF|}>#y)QtaD&D2Cqth%USxDaf^57Aw8kh_TT2L}2T_}p>&oCb$W|a-83K{C
z%)-z+H{6d0dwajZ-6|dKKF{}bSn8dIYYsCD*etRT-*=+-R+*s*RBwhu5R9l0s1@OH
zBbO{0^0}Z<Gcq#bVRihXOVI()pE@laRgk!<@Z3rZmj-K&=&>8qwshH7n8VH<e3<GO
z<5jK|np;@lgE_q8J5<W-VIV?aWDcEYgW;3*M?w+%F>7E^;ECqX?zQh!>itoPs1^s-
z*PS6HEz~2kCtsaR`D&TZqKoSuyqIv1Wqeii+2Xt2uSNQ?^02biA1M6SZ)IZC?kv>D
z)g5#{InLC*EyyP&$w`;Y|BP}8Uix=J{6HIIV?=;+_y*Q1&_RHU4@L#SG%3;P(msXT
zUZyJYW7a6Plm$5Mq088SNo|Hr<m{H>&6rDK8&Ws!k1fS9E_vgWFKa9B)$MGI9;I@#
zpokYytPR#dxZfGD&Ls+!u&qC1TN4=?gx{*9VI&qJmG0Ey{TRhHz(03+D`h44W2`o=
zpT+lS`#`34H5?&STwJp2zLQCC7U|TnYViYoEBceAn6iR9T>==Hu|e;y$J{TvJF})$
z{H7g#ASrws*nSlB4wkbTLkJ>_fy=|*<%_bBs{oOiEGG3&K!dyc5)rMXF$afw=^zY}
z8ETIWzwh}bz|PH(IUpT(VTv8(9zryW_vsrlGs#R+Do+Ms@{-cf$YVXs&{CfFBJlk0
z?HYvqw_Hw+KFg;}qA;P|hGBk3@Q%Sng8uw!2{!)7aKP7>4}QPpFdvUyrY!0eqkpa+
zxczI>Q0r@O;2ZyFQ{R{vZVYjw)$ivo!X31~IzEW?CXkWS&(`2{r<pZmzckQi!u%6r
z;bf`a3fT1?!|VqD9q1NoAjXk!{qRFg|L<77?Lo1^()BEZvE|lN7;jJkVYT@@{MP~;
zs>l#?eBO;8>2qG0XPm57#%x~qWS&+Q7kh(RZnbn^4O`>BLno!DeVEd-ZqQTfn|ALP
zelXH7SF8`C9hWS_l4{T1?x`=ss_Cko9rAHs+~uwL3WXC@<O3@)8g|A`8dQu5XGG6M
z83mGvsmj?nZ8074?P6{v7Ci?HHs^iwJP)%ORD=($vwbX4B`;n|=D}LQ0D|GT4~lGG
zl=D<Y;p_tz&VT7JM5bF=oYxW+DeWUW4Hw(k(2$szm~JRs8SR~HvYKC~V5$;o3JxOR
zC=$kkt9(C$qkQYCZ9#i^x1qWOnO<_)T9<HWR^qAf1ugfDM^|MvlI@ckl?nU19Y~_&
zUg+TA?iuJmw%En{ox{Ll^0Qb87b-sR1yit{IRga)wGH3~z<gzhheLH!eHRz~X5vM-
zA|oWBkHKL^j>w_ASO3;Yy4E{-{4R&aw<t3ydo35;kz56-yo-a=(j%0WhexuF!)DbT
z?i?rA{j=TkfZs*3D?0Tp2d)~ESFviZW3SEK<tOeH9!TJBV+N#FaF6N6wMsl$I_dTa
zYkCxBwtQr7Wko5hU_I91#(b5u#K9u56d6erJ#3xl^Mv&<T3zDU1CHDS&|2m$DO(Zw
z4qP|1v}6<Di)A4h)B)fO1Z?+4{T*y_<e;5+bMT<b{Qblos*)=RY?S}kC)CesXww&p
z1SCh6)YcA6f7kMByZAh+Kh8`3YqFpk8?4>g=sOyWVR~5E&#(XS<Xa=%sQ>EMpJE4p
zxCXe}P<4f;XJ@dqkqa^sK~;s62h`=>vrj2FThIsK5;4*askzltoz20T_aex+S(e;b
zSvlUGl@z4a(!0;aRs5ppH6CKnKRC(S$>xbsKrw%biF(KW>1yleZPOl3)Y%rQzLmf1
z$c>tf%|(WDWOa9S|0RvGIQeSkgn1lJ?T;d*ofe($tmjI$c}E%{zpWV!4Da(t2hg?t
zyPiQckzMtk7yAzl&0voIyykt2Vu%@r_^OIKckV2EV(wtSRf8Z{TPuhq%ydb){R6sJ
zs7t1>mlsk1l!b}Zzb>qd6wSiff8WZo3`kfQ|7Apkl_v{sIs|}fLQI*;yx^zSQZb33
zsV8AxQPkOs;WP^;>~dEsO2zQyc&;Q8?cR_0xseBa^OWY6O$YL?^frrVFh{+DzLq?y
zDT`fCY|^6SI+Im6FKjsH;^E1V+hxPn$p&o|nwly<2fhLX@V&RzQ9(z4|AJz79yZaz
zy7ufY!Ke=dp|vn_K!XVTb3jhTPx9cU?7dVokSmr=zj`G<q#EtKDui!e&Q!dF+D<xA
z&%CCb&9nBLjhYQNIDcTJ(DsBrVNwEH-7E~Jy!lw&bgQD(Tjjw93z@Ct7m8ug+O<DA
zx{pPtnXq{l@rqMH*aa&}aIRg0)Tw<a{TaD0N`Dk;m94-Ohm@AB**QAm(bXb`)-_A*
z@sB9!`Ekt0%XD;fN{>z<X=5f;I+_(?4Wy8%-(K^QuJ?ml)Bx&Y>Fm>F+TmWAr{kfu
zy7$%y0L4XwH5oixMrFDgSEsEy*}q@gxOvbVuXN}BY1I-U?&$@Q<Gl+@Wao?MZmf*p
zhlCU1kBjLX-?^YytHXW-{<k_H#)bA{%)Q+MdUD8q6*TFkJ>G_FK7(VSSDbw$$sTLK
zT0g^ok{agHQbKrXP+IezdExVhrNO6!Y|FUhD}s?{=RE|@ma=<z3#ChsJ(b1ftor@V
zD~;HRRc?`7FDsQ3J)VtgX3L~kMWN*53x^7H)abFgEMG`l2+S74wE|c~wPG&GY8V;^
z7?YpxL)P#0>!F|mdB@Mv-4lwLmfQxdL3grfvPWArEF5%}WT9uyhOH(39(4PAdyL~j
zV~(r8gKahe@BQoM0lJ6gVRHRuGj?Y5HeHxGtN>WEyJiZv0{%p-J^uGZIyJH;X64W?
zJ-_2<<%p1z)H8DFLT=ispYsYbJBwVaXl^@AOjN**=^!H~my6|+*l}(^q@-?0dbrY@
zq(@~EisFvNCOGtLPONAfcj4hx*i+M$U|k|~d0$&-@mhOmFzJ%XHI&o{2ztStPM$-U
z+XI`K<_8P@Y)<i}ZAO6<br9QyoFJS<i6C1HLo916hGH%1ve-+tu3wWeg{$dTLx=D~
zf>(+iHC3OCi*{9at}a@udKE>>8>&!!#Ij%9*pMgw16nSi(x8!&U*YUT9Cd68VG43^
zgtg8}O~zBg;3syA*hA>W7kk`2DUu9jO||$h=8`M<!Lph1)zOiS@2}shKa&k2f2AQs
z9W;ap;sq@Z{IH;|CBpFow~F!?ic51W4fhb}R9^sw0T)bL0Nyi%=8@p$qbw@10c^Q^
zXQdyqy#3F*RiC?I$spP=@XG9tiEJQcW5;4^OwdRIcZHmjmoSoOm3YHABXeN5JS~-k
z#_I~j_l^!Tv{GmXe~p4E1%;6Z)qfM1EEtiNOd@JN)YqRw*;xD)d#`@<5h4de-&!M!
zi<w#gG53fb<>GFk+exOSOK|dzZ*RTs+64>-+dkuN9p)Bhx4M4TJ-^_-V^#RxgVESx
zVz}UL7X#p-!D+cT?*MxSn2c$gf{birbhHlMQ&2C0)DePe+o6^M#v}Iwf>}2}1k*8?
z*^fxM`vgnlU_1i(4ApiC!6hDAIMLK!6sI|TeLGce_TFTZzwoEyr2EeetDb%-G)&7h
zMj9w~H5EjDRy#gX#XxvH1AsLNdQgCq(DHj21m@=E#P5RU1D1B?f%7FkehhFc$PV9{
zZN2Vd821NG2w|F@A>xzmF#hfM>%>Xgtuk^(0&+RVO;#eGKmd}2EPrW8D0B>1f^(cA
z<KXY#e;5Y)0Vo>qQ!R_GVp#*m8AL;zAR>ej$Z=&b@Gd9j>|Kc<#rx;b_mq^Bh@~_#
zq|ZezEiJ*(1R&Puz$BH!*4v(B<j9Hr=ZMj!k_U;X+1vTPB`@R&_u|qGLp#sWyvtmg
zG$kgZv=k^xWCzgT)WBU1xs+UUFYwv|ky{2C>A=Z%e21|sJ^eD&hkTW6kRv!kPCt@x
zKc#z7w6&!LAbdwa&7k=`*xpX{2Wkeg|HCFBvvmRfs<M)5hb*7n6WiwaweI609If^9
zSMZ$?w6`-QgJhVXNh<MWO-IOb7cyOXQD%Pt(ga`-&S6pj8G_}=w>xD_09{Jx1^tj+
zS9*J)<Z?CozgPfNQb+|yI!wSeQD`2_q_{mHCK;%NBq7Ic_~`0l`?;-14$D80IwgL7
z5&(+l+?O|e=X|EJlEh^g1l|`Ka?FPKXg*J*<H`@uzsBmj??)dAiMP$-qU3s4xRalC
zqJLDeJ3*9y1?VjGvhs|<_#!KQ8bUn)B32;!Dga>u_7^&(y$+rqz*4{uJ`87Vdo+yS
zs;yc6K<|OVK>MhuE0(*pzdxLUky~XKt|7S>ML%~hMX8QrN&24^n#qdcS}Q9jPW@O4
z@7|FoFDgIv*5ef})8-dbyvxBwU$0@MBUKFz4Lv<kR@P5uMzXfOcq%5teSMEH|6Z7w
znkq3xsRw0cOi?Yaty!3x%ix3e2;TcoAt8{rhpFZdXMRiBB2F_j%U`IN>FJFCVjg7T
z<t+mR9;n^9`1rC802Dgd+Pa2=lU61jW#(dt5C~BC!J9W4#c=$Oewep@9C-O1K>O=+
z068yx;INMZvN1gTNuU2h>}8HFH;?PzrIQ+yrjop$Vm*g!W;s2R<21$rU}1N~pFDwm
z95IoRr9dwod!~e)!g~R%2*ehly>`HAp+SkL$p6q|CafD=uW%xWKF`d|<RG3|4({f@
z+DPi*NmflrkCexc3-^d!xs0}+0Xpgd3Nh#bvlOcKtd;S1fo}o$^v#htfG?H)5VG9`
zmp}HW09sZE@G78y%o+u<R)n{10ocI{1R>7PJ&@mI0Vt+Q@*hepWxDb%hoOwi(9lrk
zd+109xnK0xTGQ#BH{9^jgzJWMXn-0AR~MSPOn6Ub<k1?1qSq2YnhbFu`J+YO4I@<M
ze?#60Xz)7lcEB0uLM`f1`vx49ZLog;kDO}`-VN1rdm9_GsrpAzKL7J;a|L}?70M81
zBGO+8K75d+1aiUUh<E@8q8_0)_u<2+mVKE%KM~MtXJ=<#)BZOAZGnhhHdrYzimSG^
z0M<VKDVR{Z<%s_dY9#XX1V}i@<+Jv))?(AS4x!r0zQAFI1zzUJ)Ime;>2P`hX$HvK
z2b|?n3e%{UmG8VmZlP_R2t@C@xEN;M4`x<U5;q;sPmj>CME{%~gJ96C+I3p&PRv_a
z{zAl}4q{1-ooc|xpbJYdyoISj5%e3u`-M@d@%#7hU^Z%PU4+3CFtV_fs{aMkLxO_R
zDgd4pvYxqushfKSckU3RJn$rZ{P00+@1Kwtq1dun$-u291Vr5?J$jd=ODE4`C@BSc
z4e~>%y+lT`scQR=F0W#n7I&Fyl<^aunS-He=ntU&(8$h0^998~YU%=3;F;KiU&R2{
z9qvWv*6(SdF>>ro6J`R>lLN>f#rqFU9d;+_I9aDa3=*C}%B?~kln7-^4^~R6nK!dB
z)yT(k`QcOn2na97`}$vdaVoHm`NI6)<$5FecD-<6AbW?|6rM~XchIU;0bURCT*W<D
z)c6ycR{-Sd-n8Gk`tS1*aTvsZ@UC6)K@-t%<A6%oLoWycb{6h0esZV*R#=20+PRDH
zI=xqMprK|@x+LuD^A_tfJoZ3n%2j#&51X7pi(tuv2Km2iK1uiNe=gtu!KNo%#t-AS
zb{x9=@7r@;dF55x-re!x9|ND0=@s@On(}{C0#F+MKiK{MA2NUwT~JLe4>dKt{}0!X
zICW@9znl;k=K^nT_uWA;z})|ReBaF6`R8^6p(kWh^XoTWae-|T(dah~R<r-#YK1?J
zO3ny$ayI}PKrce2khA(v5<QT47l8c!6Q3gxa_=sFr29&aCqFuL-#wu2JnV>MpV#_P
z<rrGPo2y|+;m1IP6U#gV&j!T7fv2&eq9VHj?l<K3l|n2Wl(ZM+pi_Xxf)mm8--Z&^
z;2(7peI9yQoE&jG{RoeeoKWC;o^5>Ceeo;COkcm7i;4C=pGI0j2g`Rr#h^vy=H<17
z*F3Zp)^}Qf7LeFG7M0#hLr9pOf&~*90|Ud=u*Hm858_Q{rlBd(`MhKfW@eS2JF;?R
zA4vw7wFXn9Y}bqD(Ildme>|^a-*O2J-Wvh8z4v0YIu&Nv12=N<zen2p`uM<U&I_C1
zVM`py8FZ?4018La*>myt>{<Iv`R2|*ON7?M_`8GS;x(KQr8;=DR?nqBO>B}lHYQ?U
zVU=OzU}$iA?1@eKfXrdTXwZ|E`YJRg2t?fS+_LTSh9D)&TJbS;IST$)abjwY-typD
zdNTq}BtpUn0QgER$M~c(AZZPb+Dsn~dmCHZ^vRfGNOvXAoPu-Ni3ye*q=JJ8(%*e9
z&0#Yoi@XmeCtvj7>0Ca%xOT;QL$dLLOeVc+@SSnD?h?vYj5B*Dv3mcJ+up;@JI@vz
zY!{5rM&6KI)vyWMtLxJ?W7=TeeW0Sth9gkAJmNkU@`$U@dHPth)GqT)=ik3h@pm)(
zdnn!S=A#@l<<-o2<4%WJH;x=S6h1n=tW&B`k}<$Np{^NUV&h%>lMQcA*lft3U&eG6
zQ|m1}@1-xpR(V-CY=DIChgS~jBUGzhv|p*(pp^h88l+JkTYnydS{jtfuwZQ!)?{WG
zJrNgQ9-5pyPy0|i2@<#`g)naiwJxl$>q1HT{#^{or+U>m)(&JC6kAY^p)h3*wXM5k
z-4+%5eSfm@^YIyFrxH`LXunC+rsvOv^)swcyZk@J4)eDR4ASr1YsuGah@Cee?XI--
z930P+)M&3DcOb41F80*e&sC$Bk1eu4dFxDQBWnF@XWg)8HPSotn4Ht7F-9~Cp8itH
zfjD)xxD8ZIgZr1sqN1YMxZiW8C8edM<JUJWCrfYE>DIX^{XDjhbsH77ffqJR?zV`L
zn--%<ua<H<G7$Vl9<V|XdMQxgI}5)AjuqBq+JoWE3_8B7^z?iCKkd^dLA3JZDEP4v
zc<h4-7-4~TIL;a#EyMkWonRr4NF*Xyy-;6#{T5x+vh#kmoH*8gGOqy+ucO5jJ?&O&
zR=yC!C(7oXyyJbdkMX!;V^Z~9-}2sc8p%;Ua@uoROgg(4aNTHmX?3;1{c!Sd$b8Yp
zu!>JL;K8)w=~+PNj7JESP|?MozFEm}Ej}x0E1^>Ji7d5UdNv`8iK4|G(H2HgHj2f$
zz}d>rVP<M9=)=N3DlU%VhL@m9%Vi8t$R{u{Z}hWbj+M}Il5T+68r(I*a7wVUvO=a1
zpg7Wj6;S(CNzlyt%i4$g-+)oi$he<n1O|mz#y851s=bs^`pZKd9YKZ|YMsbv88w~b
zP1w_g)^~vN5LwsI0GQ>;@)9D-0c=2`uz<^E-eW@HgUib@Gh$vlU^qZ{3nSa0EbjrJ
z8zL@yIZ!ykU5HdlzlzcJ>Akr|Owb1Q1ELn!1a5Mn$L*61AK!lHs&d&bt&C;%Hju>s
z_%SrwLOt&pZ!Q&$pi4qf*!DJdqEM-J{TrI$F>i6n(8^@D<24D1;hnl_$JFAC!N1GN
z1?Gj9z*|F;9f}&uPGpnq3wdV0d7j>%DebU{vL4*J<5pj6+<Kp$zF?|!eK2<Sfx8|l
z<10RoU)R|2ZP3!R3(yw~EJ_PRtqqin{qc6!+(5oa74}n$P0S&aG2h?Qyv~jou+Xct
z%hdi75`M{P>c_qLj_8|M8p<Wl%A#aQ+iF+Sf0^cwRoWl_sv7+Edf(-^X2!bMA)jKe
zNdCz7G(mG<f&E3b*?J4Z;aeD6{+@W|sir?}n0!>eE=$?Iqqe%Vd9ql_%es+FnLVd%
zmSsTKqjx;HU4OCF%}b%+Afl;A+OE{trqDRD$;$bOu9d?Zwaz`qRnI=aY2-rUHrx2C
z$$L4D3(=;erKROVRmH<vn9iDhbNLH$gZ@Qn#AD3@xYb0H(91rAa~9BN6-1JteQr|H
zB%oDDTG<~l9Wk<JuulO55UJ4Bk{?J3B$I?0qE+zF1Dg={d3!-!0j22x^DP`dSdWpx
z2ZcZTQ6EShVNy70`+RSlHu62Xd4SRfN2=m3j1@U_`IDegLz`;=TLhY465;<#`snXx
zq-<_OL%4gn)tDI^e(N=RW}~%IHNV*)wUl*qe<X0g;2A;Y`zn*=ToH@_ZEel&L|*sZ
za^3jyjisS<nR)2~qA~x_q~1!UGh&&A8tR9_c5_a)yO+abgZr%l3fw)QGZS(2k!kqC
zu178GW)abX&sV4?b;n_4Zxo5V+)*Um&C%74!q@i4TjRIvc(3b9@GGvQ7nxyD!^hUl
zty3<God38;{m{)~ya~B?PcTLAL9~p=m9vbpJ0&X1%JLy}lL>;eoU?^ed%t&4!EJ4f
z$JZ)5?F0&^YRxB#V+Xys%xibDhN{H1aaz!4c>1lglRZ0jjc3Iy`C@`0Tf<YfaBd}T
z_qe$Vjg4|=JFN7ok2e%qw<sK-$_^3Kbg>)`M9n)E9>rlN$}{gpZ{z%Y$$>$cRFBDR
zXXLUVJLct`5$P07)*ar6d2{o{A4?;pB)xAG1AL$@qz#b1{4GD9txoyYD)^u!p5mCI
zt*<eX$iJY8QZ34ej`V=zkbOflzt;`Akq5@NeV;;4%7*lJgVq>E1hs+$hg-CUy1B7{
zQ^p#-0)yY6Ki3vCF5q1PF%LBjO*g(8?E2919{jVmCTkvw`yCKZMs2=)J8?-MqVsm;
z${#<<^ibhTH+me@f61w@R+Gq_Y2alY6v8z>I5*=T?LN4duGb#mGoOKNfSleXZCDpN
zw4wXaL9DCGJnXVJ5^#AdME8WTlUj5wD=$w*v)Uz*e$25t5aXSN1=WxT(^-<}QQm<}
z`KC>}^g`@xKu+w;@0!Eg1k~0VBJ^^JJoO5NZ&m+fF6?x7&olpa+V0n&^0LGot-Or_
zr`c4Id%Rg0<>siPq7h<&IYBn6!0DwZ6l*_m=SO=RqxR=%^W&Pmk?(>27|(h9sGX+q
z=e=LDQOxY^@#@nMN!&V@kT2Kz44FHXWpG$`LXh~-{@@guUYbAa5;58!D@QSO;flIn
zAP}F-I#)br@?&v8`0?GIdd?_*a@VDAmH)*8+QcQVEcLXpuUivg-)T&C#N<483m}li
z(s+Ie(UujCkPUPMWdV3ks=-=jVez%5<^<kds9X|>=*38IqO-vyFUJNIy}P+wI5f9x
zJa(uF%$_S1tn0BT(PevB5)<wYL%p)Y{?=Bd^DaI0Lq=HqwBEtp7dVg8qTm{&<Lmtx
z)o0BsTtqdPur;Mkj(jtBb6Wa9O79i(6Zxcv8`J3wdBc{Im4=efO-2eVDJu&WE<Ad0
zV`4MwNS?dSGY4~~9eHjoSs$_|R(itZ5lrzroso`4fH-Km%zTjmeBs0u8IPZc|7>!U
zU%2{4I{n@GQOVSHgmFFA6_=Ma?fvH`;mx|ML&)af;Fm~t_rbHsU!UI*%WrGv>Z+(3
z2t20Bx3{yawlfp8J$~ctey}>>dwC1~`A1Tg73=Mt-p6N|zkQ>k3<nzy-MSY_=S)XZ
z*r{n#l)>E1-B}wRLf6zadiv%LKizwr`h*$s5suEFPoaxBOmb5}dKpo)Ba&O&j15kb
zSyt`v@=&Xt6`*@P^jtl53bhW}atPQ}uW>+ayINUoR@p8p%ivf*z6z73GV)~R)F{`9
zfI}mHKCbyto$bXpT9AdcOLMI&G{7B0Z&n0It=f*MY<q7nqeB3rji2$yZ=`O-`7r^N
z$9dztEPh`4?v#<7Lgf4AoTobJT0>o94$9Usw<w0g&!=kammfNbkrZ}Q3pmWwV@T$-
z=~T#fd7ruPo1mV(OjhQ;CzadiyxzhVEnaCNx0;b=?!2)SBdmJMs_$$2=q@Qsq$8C2
zm7(;Hs@J1*I$bBK7=~;*%XRI@(u@z;W8<QQ_cY!9{uKa45+|pWwUsjdj!S1Z18&tb
z#v50446gdc*b`rky+3EVi=%GvBh>HGurom-`E}Ad48(JlX>T=VC&)eJe0>E|)cR=#
z8AzU+p-+TZoUDSTo=Xq{4({WI2G7EmbpY-u!B(eeIxt=V7)L-&1l$fMFE2VLCOTRj
z@{sZH2MQ)r%jRZh(V7s@d>}7XC3eEYt%meD!)Q|pinfatJ+ayl*2e*<CX++CU*zpt
zmmvT}CS&-80`J<vOqIzpoD*DWKG1@nt&q4h?{2kIs;L^!_M$gVt6Kft(cfj;y6UpZ
zE>*3|cGl`1K^qL+pUC)3hKl`I*DoQGGpZ+Dw?3Gs#8x>SnZ@>ZyyW?;5-I8&lSwzi
zju8-&#VaO>13`dnLs10ecocj_P`7>t5X_-!-48wb^|-6F9gH2cxYoz(HYd*lYAUQU
zu<bWS%H{G%WbHHq-iVeW_fC#iKOGNSO)`^d^NDJ<@!nB*FQrs_cl4Nj-ch~a$pvn0
z7{jk>W(=>X=8GxZdXvrO;o(EjC_vpL&0Qi$55s2`<$3;C!|c#+GS~LlP~eQ}RWm>}
z5W9c`>CPug{*XxmfJ9z`$5Gx2+(*v~-@bhdvg>e)pu3J>{V`=+3Ai+O=UxDQ9IxZ_
z@AVq1i36J5);Bn8GpnXioc8^H4{wVctO+%pH7#$rUv=L;5wz^^bWF~=eFvvyj4z+y
zdMMd$YvIW68p&Y>k)9U$7@OIw;Tglct9ayPM!std*QY%HesH;Q;pdl`IILUxT)!ue
z-(h{!b9qONB05B0ir~r3BAL*0m^}M`DUwA9_h{nx<(8M0KD1eT8u~VIz;S)DOl4|v
zVtM386BGB6Z7i>`esHxMi`rKXm!=!hgwW-la$EI{DE%~f0v$r)!}(1xWt-_WrvCMn
z3^m=i(Qp{dc{%^93io4lLG6sQdyD8U@h8P21(Lz%(h0PG@APEx&6-NtWAE0vmU+f%
zjAcocNd*SK9*s!cZo1gJuyf0&6;R3*=)5O&4ZBjP%ug|<PP==jG}c~De@k2oJOLiC
zz@`8X_9nx2S*PQ@WpMZAc$;zs?V&YS&IIiFN&?I-5H!+m4jECxT2IY#XztEbj6W*P
zQDmig=W}hCRp5Lt0;BD*@V$Ex*aP-D%saR-xQ$P4ZB7M_mIg7^iak;>I^|`eqqF}#
zE&=Y&GBb7UhgQG8{Wy!d4dFVuCx;f47mIpd3UtcK%hMM2LSyq4C;gPSPbE69Q(JEi
zrJHXiO)!?x2zgW=dZpS$Iw)R<;4XGW3fOea?J;<a)yXj6;_l*`M=Q}&@mrfgGh?pK
zy3u!du@NL}H23ZH<Hx=Mq4~;HGpHz;tN2Sl2V?5%MWURUejP5Mq>Qd>^B0&7rcA;k
zK7MeUkB2Aa$yu#uR(#yTF9VIN?ijGqiP5>3C5i0!K&!4o88@>Q>xoafA26Kg9lAO3
zj(NG#=x7FdIyT*+a;2Xx5$9y$oG&J?MP0mk?0zj>gp0bQwB}Lg_U<%Y%~f68NcAs`
zMs8abJ=y%EmI5CN(-}q+=07iKk5+xs{n>ed>=ec@Pc6s(c-&Uf_Pc~xmErz<i;K^M
zk443CMqeDRjy5-@Aux_Y5`_;B&ay{FD)0KOAKPu37}3{FL!^mbnf^)Rs0#U9F2H?&
zaVh<Tq<q+&4r5d6#4yPqjzaqC4oGox8R-W&<3XwlvQfzQZNzaofv^LBAs~!3avr=O
zO_!fuZ$Ptl0J5mH^nChEG+rIcRTtZ(o28wt-;c35c>7ZIJd2q?<R?+<hin+eO{iHM
zFqb|5dqgzwTcPGqO;9y^UsEvWO=$Zi{t0t-k=B9!1r*Q7sn}Q>51q)uK;Zt5&_{kg
zs;kU$R5kL0d>lrm*RjI~MEF+DKF<%noa!%E%y-zl&NkmN>uGp#XdXc5(-8YG(sAYN
z3)1)Fobc0=y5o0F5=~>0g7gdB_oB^~DMb<n5?57g&)Oasm%r;W3}8)(WVh`f7uMD=
zmA=>4&;4$VukV|p_4acUF?W`e3le7b<JoQAAECl!_;NTyX4+rZIcW4)&d6|v-ac?O
z^cR`OR(5Jeag~*t)@WC8$qzBtB-JdD-z4XK&A~qWWp#Sin6yA=b2PIqF~4gRH;KqM
zfFRN%1#$VCG%>T5R_tWX%aw(NgTpCLTPrBIzmX~o+rb`JA$0~eDU*_tii$Qs>r)7N
z_K<zsM6`_~F(EM#+z7Deu?zraxb=!B03e|~ePGRlyCVd$0Kk!(2?ZfB2UJ7Q%l&n$
zhZYK$dakudq%#EQg$d)AgBt>r)<AUavvq#*3LDW8ct8eHT#rRtuS+~1<)bKAd3nP<
zUPna46eMkj^{HY3+%E7q=EkpxD34}~RmUu^6-N)_?SqTMr!0^mc}v{$p+jO=9GT>h
zs=k?7thX&usb?|Ix=(t)yD@#M#8KkZkKp^~i^Gm5Bt&n2x7M!RCMr4We#<86Q8%YL
zxvrg)X*DNkYCeZ`dn(^^NXKRpIjl#N#3DOl@@6r|;7to}d~{CAtNy3MgT>=pbmw0t
zM3PZ2EH}`1>ifv%?WPFVDrXxTyGoTFWP8y~z3#W^wClarvd5flxZj0!arH+^K5h2L
z%0RXOP(kgp+Z02Eb=G4qkp<xFCuP_3Jf4Y4^?qE&TrkLR!ar+oGH|+6rj63lN*t?T
zo>%pm$GCd+IMSoa&r-GFcXZ-O)q#|hRB3clom+l-zHYX9*&c?!pG3lT<>|tNBzR&j
z)zv6@EcowKK3)Ai+}8WeIpP@B_|CpA`DITqst?Wl$>u#i2$%w=rw{1KVJV*|Ops^r
zAE5KpzrOfkuT}Z(PSjLR0F=7m+oB?LbcR6O0iTz|Z5#r548XmC-36em+O4g3K|jW?
zA<JbSf9dE11f3j2OJI}&r`p#_m8=EtbAIsD0SFcXhj{Nu<;U<HyeqHBRkx`CQ@*ob
z(@<`Jyo{^C(BSdeY1i!6!Vn&UHaml!>!%M_&AUUwX>-#rltqKaqhU|%FJ#=Y^}X+i
z4Ci$T7-`K6-&s~@9acg`4ktY^+9TDocBR;je`K5UI4sVAH{i2wyN_CYpWd-^4%aS1
zrbb>M$gCuA`Y}(6bsyJYORXI*^N2KGXFSia&eyIRzCNbc4P493?(1nw+K5>rvN+$1
z)M&a-Vn@u(_Zun8oJ5>xStFvUe4$hwNDW_AH(gcH#lO9`8h&GHc=Kz1M)HW=%6Mi*
z#++y?fy{H+anHZ+lM3E;t(Xp%C^~%%45sFPozgnLI&9^-7=c(*-q1Mu+~JZmTt^i|
zJPi<->*wG7O`PJUY}CTcvz)G~x)mG`IBZuSd-E)3k@F|khk!Vqw@z+P8ubskXOiag
zZQJ62ivd<=4nXbkF_6TfgO6<J52K|`R8jMd4EAXC5Rmr3iZOcqisM~H>++IjRsoyL
zp_N<*CxSKPRIR8`c`^M~4$1U~K@%#dlAk)2*Svklps-@{c-8n!MD;EtVpZLEd#V59
zOOYO@U-zkpI|QTh$PZ{D?WS0ab}6Kr;eJV8yTWDFd$bzFc85hVH%Km6-O8bh9c6Z7
zI1nd)@A#d3#Ra9DvQO<ndy#1-9>%JkhQRX0*sC|%jYTKPqP0D4`y-}0r54j!b!-Xd
zQUsLmW?!TXBbz?FqMj|qRrk9{5{yZzm9oVbd}iuvi&P7{FO*LIK0}u@-B^FuoSw}x
zA`Rx8k#Gv%guIZU^5c`+%u32>l;edpZ#qFc+bZ&av7DTevQO`07CyW4<Xj^e@z<Q!
zthtoKs9J;DoeBrkg6C_^EZp2G9XYb4(QZjc=Z_2%0s}eEl-L|ErX!Sn_ckY@0$+0z
zyNXNjzm25GHBGO^3Q2g4Gc52%+Vdv8RwkHSZ-86|2J<NHZOgRSoVjjZ$bnE4%baVk
zOBD62ce){+q~n^~4y;21P&P9^8r+T=(ViksB~A99@|rOLwK$;6<GM5dv*ttKJtzNX
z)oQt`6&pF)B}qs>wZBW3;5wg_;%mOXGSK};pr6iFzDg+5a4?&6T>H_-(tymU4bjft
zg9aB`1sTb=Cznkn7XF593euZ8js;yDnLCDE&bQBOX&xgW#ZjJG*Z%9)wRCli=HsR$
z@$UNBs%}Ycm&ogtC5oNBt5GkBf2Gz+ac3@TXX%oDxp68t%#$xjLAn>E?6~l@Fshs$
zKbAs9N@}$3!X!ACm|BMDiv`H%JAqX5x3<b>Wox|Wk?0|HDMpA?Oi~-7C!*#V&RpzG
z$BNsJWQIeiM1?9nufJte`Y>PJuO%&d4Rb+KAxTAIxM}2rYkl>g;tZ<B$DSazF_8nJ
z#!B8zKVeR@QHa)0<CX&<1^wnS+qeNiKOvSX<{9Gy^Ih<>VlN}YurbvwxM)Px$VlUz
zPFx00$z{WG)k+_N9|ap|Fjj%PKPT<vSfw2<b_YZVFFgK>1q7CjYv+b&shREVPR~bH
zmP(Sl?+S079p6lfj;=kpiusX@g!$a)(4wR0@!^BNdZ?el45wYbC)`4R^(INrk1s_z
zA5|ZR6V97w4&gCg4LF+I7pe(1Z=X<RnOok^Xj5!Aa*l|udKiuoq}@-(s!Lfr(ZINO
z#1<#jU^|A(-!*PI=O;A{M@cZXpaZJbOS8tV;#CIOv!Rla5xwS|u-<Q%jRb5fobmSo
z+OV@jNjNVoVCERDE?xwm)kIew+<$mq)hy@z`zu;M6H#SU+-_od3&EAqJN}J=Jxt@+
zKVcH#x0<Aaweg?>tvmqQ>Va~`H8sr#fibbMfvcs!H+}^jO6qjsPc=~cPj@RH?C<A;
zq<T1sxdLrj<71^P=D6;>f2RdB)M40-l@EOnbmg*pxM_I%EY77-bg~{BKOu<yy;M<Y
zb>^)#%6$&@ohf(CL`imjcCCe<eNiHvS8-KTr0vKHE8YD>`N&8eb|$#y2ex@<aLwUm
zS2{X`K1)Ofs~OY7hP+I9$NH&%Il*Am>)pKdfv(Q8YSFMjU+%8<__|$>@kcD9Utjfe
zksM!O5!sTLHD<gR9TqZn7b)wjw^j%UN!K*m3cuU`JG**k$KwVG4QGmiMnM`&U`MSQ
zi^fCu^I|dD6rwK<>~G85+}StwwI>;RUgDkJd}==1Q8w26F-sRi)*NXgL8>J~q%%89
zC|ua-am7g4=9U_&aPsd^lt1(Gi-Z<>UZUU5A==e;NQjBdkcz0Rfcj}?V}mL+RRJU(
zU|cy}AgVj<wHiF!fB0Ym-9HXU5s(4|5LN+9fR3xH>j`jc5T|qqDSU(1?F~o6{G35b
zVFT-zI9R(|oH1y8ucVOh%yT{$HXw`;J@3yO@LFCe8XU|xaZFQZBYO7U_#rKP4uV`p
zj;MB`v%>2BAg6v9e(jve<3DU3NRLm2orC>)B_x5#4QZft-ak!(G=@-_VdxhU&)Iu*
zl8;u9qMtu2!Heg5!oJ?}JTpOhZ*xdOPjr3nJy04Dm#O!+J~i>EfO?F|LG)hPleex@
zqMqAvNl9;qq=`2k?M+udd-~L6aw{zrt-6brlTWB(tjD!GwkJsV`siw4nh{W8u*+~~
zd4Pf5<%$x>0l=55faMM*J+ZpL&GOEPt<k~3J>bWH!-p-1B#r`ap;|E_A&>}^rYhH=
zc0~!?X|KQ$G}NbonXd#omC{1#v2u{tx4pwR=`aWbUFo1t)|Ef3DqIMKq&u_qxGW@H
z9jN+{+{3V?t*YS(tS*XS<Ay|L61jzkrdX>Z?Yr(ScCWV{#3s9v)Z>vBj#sXqd6_+2
z*WzuKK3CYfN3y`eI{s<<UAUGyHs;!xq0w?jNp2IG-^N4LFaB9uCM0Lfc!Rhqj75f^
z9bjDL>JliuO-kxHdr+r?{k<W$pn%;cmI%JOQ3D<)XVLK6$yhG^`;LSZU*|4fsF6JL
z)YtEcZN$3ld%3YUTbTM@QYH(=^VYM$qsvBF`(_%~39xr7-SSH#?qReUm*$Lg@u=I`
zl?GyWhx^oe{YOBsSn7%Y^H<^liKAFqPXx!xfZkCOGREQXM+80o>hm&APCiuKMb2TJ
zBqkHji>!%yUOKww+5R$v?Cy!ZYRSOHzEra0o-YDPzLE+Pu75L>F^y?L8EkWQNee~X
zPQUudXuchRGa5x)TvW<I8oJ&-K#GQ0U4QKU%zhy8aYV(`t}h552IMb=lgt)YGPaT6
z1Gy()Gs7CpAV8Pt)K_Yprx>GGVv3dAnk~?9_y@aek!G5)u+GOXjVY<-kMmxWfELE_
z)#KZuM^XiMrBy06#tUEkh>ZiNbAP#Wc&FQxbc<EDtR2<g*wO!Fa*a*5Zdp>1BmcJ9
z?#{jta)_9Or0Cs|i<y+WviNZ*?K+k4^`4)tJ-sHu!Fa<~qig~iv3CWyGo=MVxXJwT
zdZ>F+c19KvOL#f$PBi<OaHn<{o`w*=fQo?uvM2Ev`+BJ2LMQFQ{MoC{?z1PUTip`@
zb{~E;jl^iTdyD!+7oc=T;ib^K=qS_X@uwKt(ZdWqmyip>_1!3Lx|WoRzw$k{kud8T
z@;wb{(}TWPQ{-}cPgo6(mgXb3ozu4MlDz=~?VMK?@|LA#O4mET2Mtk@G3xI$S;wx3
z3bG4mq*2vxBf|VOzU#!wIF|_9L|aBGynb!a8ceoieRRA(Hkp~wPs47rvnGMkrV(;`
zB`wWtsDk6oCG(D<TjyHn2P%P#2c)KN2qdHohK|=SdwU%p%`7TJuq?mO5xy$@cq3c*
z>cO)5*POcHi2x$r8V3t*_x=~{()&o;FX7?g7gR#5cQ~ytrU_lDtH;HOK;gp_B2U3D
z%r4@wdCAdCuf|9XbA6tTs4RP1fr>k_Md7BB8F^=vb+z>gJK>`p&ig#9T6Ss*Z{85G
zJ*=SJF?ztq*WJ<Y*8M4vlhc|@<I9|M*wM{i6H}%c!dnD2$@-)BlE@*$z<{BrUHdvP
zLUDK9U#ym|{T?1DRBu+B>~BvncE$ybWQK?%eKl`hxZYLy3Di($v_p7p+-Gwu?Y1n3
zVCFqJ^Qo-SeQn1JvPUuV3MhZK*0(-A*|8UxsrGV7-n<xe*JeF%d^fq+{x90zGAhcq
zZTlWYP>?VHku>NKX=y~Mp<8K1x|EU*3qk2dQo6fAlul`o?k?#Zc=pljTL1gHpZ9*(
zdgGZ-t^tRcbB^<fec!g<cGs<C-SiYe-7Kc2M*Q~l><5Ts@$j?Gi;z-C5XD{yy?ZzH
zWlx%$1qVm3_^uh|1uV91<$2fG!xF2p&l*Zsb9J(pSzRWQsJga~ENXHmKHx8=(>P&y
zS0$v0YkY6t>8K=NUK{exWm0_^SjEFYw33!0Ar<=OY48U-1{6~Ez4-C31u-w~4iNhq
ztFT0I$Kzy_DL0j{qzMv{jTD(@l~q>_%?vA_(b6`m=$Vf{=3BT?z#u8HS>sA@axmmy
zo9FpWs3GGul~6ddVl=VVkJWAkS+f4bxuEh2YDKb0s&hQ*MTGE-0s68wtauJ9yGGFR
zIT_a=bAIBW2RqY~D>QWBQ%dv^akz?|3D2fr$C^ZKu6&>BqA<nv*6*UdO3ag_{?C7R
zdYLSUrPgx<1d+FWtx3v`%cW%g&DWVFqjA*0QV;r`N5FOLG3I|jE9h3Q@>cw3fv@Q0
za7nu&yEO5p$Ni#=a~%<dDx?0Mp5OWuRPd|UP~WROBK`dE2gQFV<jl1x?y#t*^w~@d
zVmQ4HB_|LoxJRMUn+6+kW^=2NcuQHQ(AC=z%etIQ=m4B6=d_QlT&XcLrqA2Cl<j>#
z`>1v4jIX|$xv?)lW3&`v&-ieO=gu7;(cA>jbD`lA?k8F)A&JvN*K?mlW=bm^`HPt5
zlx=&`v{YqA60X-;rAyK45KLnx^e|l~s^HM#+Y~5lcL{$XckdC-fc*#KaZ;YN8Moz=
z-wz|57tJV>lAB7+zGpGzr*$&VlYMew#oc`Nh8ipAphBi8V(IDcEXM72@~f_(27U*&
za+4j+qR;$x(aA}9(T%-4T~^&b=^hCQ=ZJ6@I-(y-Dd`9k(w#;<a7rDSDx{3180J<N
zP=V!hz<l_jm<kJvTlbwkC2cdcTp4#2oNrEbE0f*I%5;7~t4I^CWw(&TG!;p!N1}CU
zvF&zWUl37H)FszX1}OBpv%U@-`g2LbSA|ivVJvGqvrC^oHm7~qH6<mxsrdP9tG`Ap
z7|X{<esfugxvo42w>0vrgW$&-)OYR#k%nkhL`P|T&~N*BqTnF(y1URJzxIZpRTtY0
zEWVWXo>2c|-g7_%LPI_S#M{2*DNdY|!Tfwg&{t4u#3<sOtU;u{uS^L7fe>ke$~a!f
zy{|6_ROS+qv<6?k3G$7(&(;Y(R{Wt57B(M7Jg@VbN+o0R4p(+SKpqVfPY;uCuutab
z(hn!6iVzzR0YuRAsby<T?Hsnj>@}>AP-a-%Iz4nnTOx`S*45ML;;6In0ZBt=$3lsj
zT&?c+jq)gEy3Q4yC3VU4ApAJg2{2VU+GV645V{_pUiaTD;}>9v5NyblW+SzbYMLHZ
zYW|X$rC3Gz(?Kf%Gr?(hp5oX=w?^4;$@-;rP+Vn1knRWEm<KiqZ={FZ1S<s`k9sy%
zcxd?)tmjV*KulL&pZ^Zy?PryoBsK}gs~+bjZ`9?C71<mi_13QWVXg7s4_*3Ig4sVX
zU^&cdH!q4L#akH&S!E=I!-{(4YfI<JMJdKy21=g-uTBo#Rsp5!fS!xr+BnLtr0a}u
zUl>o!q3A{0s4QkG7cRdsSfLbjZ1f#y?(!J7{8dpJlqsD}s#^9eJ?%-B@zhP5FnBT*
znY?9Zs;WE+-@l#dV9$3E_tTzYX*COTl^Xk_;)L8>-L7GuudF=Q+vg3FrFoG#Op%4*
zQ_D(OnoZmxkqay!U+b9X`})OUj!<mnp|FKudsNNW=a@!=TXP{#E6Agx`v5Dj)fWG&
zP2CE0Qd4R%^saFrL3aCYQ>W6q6oR=KBjG>SrJ<bp?dJ#KOm&<W{71$V1EKqoGS;1B
zqTCV&CypvWV{oBm;ZQwdCOd!ry!G5t3xe10pG^$Y-7rik@BHKahL{J97tV*tx_o=K
zkR$GT%%Lrq!aH7tdI_IPYR0RO{LV&XW7JmGj12ZayD$)1>ul}}eF|HvU=Q%`T+n@B
z)6O-9ZR>;iu6`aFqP)iST}MYpfKr|v0g@?K;2#yG*{U3a!V~1_nSandTnU**oDOL^
z*~6Ratf_9OsI7i^5~9%btH1xHq*JPoH@OT-x(IP8Sy|Vk+EUXw9Ndt3w`Bn$xt0DL
zO7d&-uMRa#=!nMU$PtLi{mey;Z_a~qXn|jVe)D&?NZFcl$>MWQwirmE8Mn2$2|@t>
zz`$-G4yU8t6jjyLFrxbKFx9Wiw&e_k2L#-=8Q&^Mjxkm39Gy!%)T*l}{;BgjNfm^L
z+O47MeL0w*By83+JQM5(`9ogbORS||!^BbCa|9`9uuu7R=FH3t)FB+e!x?7p-WCBU
z5aceXvQ~C>cMDzGo?|kzbQr`gFy~e`<`)!@^yTuSU$7E%NIHVmrLKeHbrSLyP`LPk
zyUZU>8i$870%U)zYxCoiWd&8HW%#vHy$uNo;dD9p4b@&eILrWo2RPfHxCEOY<TStu
zhE&*1Kv^2z!xN|;#&y1a`BL&sKt^AG2JPkrE8`zgr-+b<l>AIBWm4)EVs&mVIW-k(
zQs2-Z=@GCYDdp|#?0~Pq68gB@R&SE;fO9^iC;bTpF|qhkID4K70noJ2t_rxEpcej@
z9Mt$cFqk|S#S8vH8|lMAA$|}<bIQ0WJ3_z$N~cs(Qlf7G_=$k><pNM~!aKj#ncnm7
zS^(N;1&UvvW8mAbfJhn6ET+$&i*|tdWu)@8)sZOYAl)F>{rd_6m*Bd=!^0L$L&6CF
zyPE;&$1N5j&vM+ewGo~;cQH7@97cItl4PFzx_13~u6E@BWH3PeQ^8Gbltb1MBp;l1
zruX11PV+KyNxdL*_ST<QL<Gd*VEl$_Rb5pDz;VE$H*q2XrfOkso+c;#D!ejq7lN6a
zP%9u#X5I!}b1aM+_(JmX@}PeAX{7gPsLIji>=c#mPzfc$`1p8m?90SN*_%Z}Zyny}
z8r0?iW}b3>18ON6CFTtHojWDaA1(??Ujd6b&BX+2<{`R%FZ78FaL9k()E1C~^;(?)
zOvZD4?1>$)i^j*tWo({kXecEm?TiD9?4CGiS~^#B2_HP2*Z$^Gu9mF<5+$^#6m0qR
zYtYU=14T0kPP;X}R>|J{)!%P7+Z@>EjjRl6*oI$L^b9xjaCU|YGYpiK<z*!sAUIK9
z3|tPTl?^ol!v<Q|3?tb;eVJ4*;|K()wSbVF^Ikwfl^Gp7p=AR#W}pm4MJ7CjAZa*O
zrhjgKTzU>D-dx4N#ZGypBm=|M0+J!qg28|9-^2m-d{qgnn3xz~JfUlGzVD*o%!-sC
zHpWHYuiM*S*!0C;yr8xNOoGSktv&@n#pZOv<faf8lJj@iiJYcn;M~XLZ817AJ=%6F
zXY%B|sq^E@IPf1#@R&7<(%_=QYkr-FKBdAjM3p<SsH9yPBvXwAYy{!wR4BQ_(D(cF
z35FUejgC*{){*%@*3CgWA|Hlp>RC?$|B9eztuitYpefvjQt$Fvl`aixcTks^3_iLR
zyi@o_ZLA0=_-sK50Mdz(U%$FWKzR9UWJLK9=!diK`TW>w>;+a1+%pPxF|`&j_=scz
zkCJM)pbB9%R?%N!XU0eQ<6qx34}90Y4&zoI4o-B5wt!oWc5)8nr<WZ;003AdyjM!M
z4h{}npm+>73tZ3X;rgZ~U_*rtE0bklTR|NJlpGZm6`<CDWPyZhY_F@=p&d}BoY(+&
zc3P41!S5*#4-fdFrR{^r>%n{jYHy+Q85|&Dj2RIAduuiCs~nK)?YhJJNTY1)mjj8u
zjFeKr_0VD<?#$26i@#FYVrW_d`FqRoFz9rar@3t(fUC@>hXHdEyvf~?^cc#FDGxeA
zqnK3Ex}f?3z4|KGW3}aB6J#M&Y?5A@Sz6v3(y_j>?xX9|+NV%#s@hujR}+70V#Z{r
zzg*>#s!7Ec4kI}vvK8Eg%fQRQv`80_-+W@|%ypHVd=z-Xpv<fU7ZYwDrEBC8SL(M;
zlQU8^@jovE*gEuLlpyz>Xi@-jmh86YJ4Ua60N~lm`ue>g5Pt-EBXea?Rq*aXZva3X
z6(+*~)^6^<Q8peIF6g0A8~~-=J=oOWoU06?*8v}-?y|}YJ3uPm2jW>&HGI^m&6-1E
zIoCg=x#EVHvx8%_HMBTjJ5^*x_s`YrQw6g@#xn2szh5!J6!RZy9?)9;JpKnx`~Qny
zwD^0kB9?FS^77Kse$Y8|aZ^&drYsC&;=HGbgaokh9&2jWU8DII9Z+QbI?j7w=Y_aI
zv_ZdsX3EERA3pTBfJ+ZR@F};U%5y8GbpKcX*y@Pc{F#rKm!YYG;qw-s5b0wxfq>8)
zP!Pd>09)%wR#K84#6Zf<!*{@50;IDYwYTi|;jc(aBK5os3wxO&Z-pA*Va}_U_MYaf
z>QT@Yj&Dbn;QzTu@BaaA!9vz^^%+Rk&m9bdS{=f;`~#u@><VAh-12fOLL|o3tubt0
z@0`_BzxYe8&l#Mp15x?mypt1D=y!6D@yyythy(A1p`kd3E-3bV>Cb1*-s^&e45*-;
zFd3GYf(#t0V?E$h0dIWah?g}p%E#3)j9UZ!Spxje-&ghETK}L#9<>HiVT}tZ*eV4+
z00WWA1z!w04eSH7HDDv*PsWo2Qr~Gea&mG&3tF0+w<AO-sx}Sj!Z}pqy9ZX@-$4`g
zJOn~04_&^^W9daXrrd^?V%Y3q3U@32027eKP{ACm9n)?wkL*LUmqt1a0Q46J$08KI
zt9Xh#zv3V(h7tKfNd-B5Tz2K`U31s$!D3&167xjttr6Qp4O$JSFg`3XJe&~Dy!-tF
zM$o5)2q+o-?)HThoR>~uf<vQ>UyuRm8+2UkvLfXu=p4gv?<2o<4bmaXVddxW5SZUq
zPT`vvzmM=}|M;Jfr)QY19G5LHFtW8Wed|+G-X+(AZN0`DubgtP{OhX(4NM;r(<LDO
zchNJR-3C}T3U1c=K@91Hg5MyJjdc0~a1PMJLGVrbA&|ttuntZGeT3s@BnKl5ju+y#
z$m#s}aPQi_`7pl_w@A|XRSO7;%rz42_#u_Ab5$30?M}r|S%mQlSe?4a8L_`lkGNxB
zcmsOd#ib>5wH)O*1!yp6b%Sa<7J@&N^#KV4Y~*_l4vZ^M-y~bQv6WILnZg$caC{No
z|HgD``qY|b=Q~WqjG~`DKBelcAhIp#;R4!K{B4!3$~!`5$1n=r+}r?@nhpM}WLtoL
z{Wz`Gdte1#)iKytXh1YPth3NnLLF?rHF#TE%7eKDg=m9k^n8l}GlDR_X9>?;*TFy5
z%QVue%gS>~(e>k=8Dv(dSL>Wb{*pk0oDig<#lkGGXG(*=6UlDy!X8?=>7Ww>f6~)f
zVq#+MSJU-iBxMG-?C;4RFc<+sih+UP1?ERD%&*|Mf!6=h@2NUwFDSl&h0)7El^CmY
zo{%V!t@ohZkWVXgh{%Atz_|NPOBmelz;a(Q`XWA_p~|$Z0t7eki2*xM+V35t+<+_A
z5Uku=>uwN?A;n>0Ze9ib<E)PRvs46kYa~*r)!6clqT&m@EuL5lbbyclU=18$XxY8!
zdz@}2E)E4hQ>O2PCjg>h%q>Ox7+H07<mJa$W4!_8s}4q0v<dX%r%!EtlOYa3PBT%D
z^%*bnmn52m%&r3W%q*a+lW-b$!N)-ZKw-f-MgeVT>-X=;55C^sPvKAj*Pek_d2pxS
znp6s0k;V&3qa1j0C}oUlRl_}iJ%BN36mq4aA{7(GyUjoHD+W3?2i)#6fuZ5;?Tst4
zyZBoH2CKHVHi*Qe9lgJKnhj(<I}F-7bcB5n*d1R)g3tTj;T|jwe|;Ix>m%6o7bR)t
zG<|-cH>Y3|DpjQ}`jO!K3*xh2?8%XxfX%cu`bvW#->6iu*?3hsJ4aTJ{>Av8(@MeX
zVn>4<tSP%2#VXHr;&ewk$w(uwq{jQQue*SCSB$3q@cl*BN;gI}8s4_VJ1U7e`f4Hb
zk@L~#5GUdxw^C#xm0(i_kPi^7d%BsTIk_U(AbPlpsdv;KF`VeipJAoo0wWZM>qW`S
zDQGxYT7CoJ4h+)np9W|!?atEO_2q>HiR191QXbHd_zdifC9_{%+q5Zt7$@k=t=jE{
zM<(tZtwNlrE#Ja+d~g7LYctqofJZ2~6y~PXuSd`^0ZQX*SWDqag9lc&Y0n|SF~rkk
z8BTVf5Mq*5ymhe491T9Xz15-Mo@Ti7)0r@CeK0idxm{8hS58-8q5JEjtPDS$)f;5@
zNA8K8hV@_hcPZLn@T9O$%(~=&#ng5u+#m={=rAz?!KcB(_^$HT$Ji}y#w(?;O98}5
zmv}l@oB_UHX9JSID;Lo@I53&V;S2Ppyk%bl)2@Ns3T&_XieZW!?VT*-t_z^5`gEDA
zcc8F~TQ6gQ>T1E>UirI_RUzA?_}D=2l6xJzZ`<Pq1K{q1{lCBceV{6lAYNdhIH?4k
zY(ZJ0VwR*$I~+Fwj(~(mUTK1FKc`V6`1$yHR$y9nnMLpSVXL;%mtNPW`SRucwfD+5
zk@D{t^C9bwQ5XwQO&JD?sCRp}fDb3*91t{!0EbbO{bsrlIVmYJw@(J8a1Eb;Al2OE
zPZ&_oPa4-kNGgMy9{Uxa>-IbzQE)m9k?#_V0UB|skdOkW1`q)y?iGD#5NxZP*)-0f
z*Fz^CxC{>sVM0t!Qh82M9;b<=IYdSvk+oA6dgdpTYPodV&OdTiUu-I7_0x0T@*?o-
z3VS%}0wW#>9j`iUqZfhi@%63{jF-em96Q?DU~zG^GkN<+LZsnsS4tc{iDK7R^&=Wd
z;ZsPDKt5M_K`j6AIVI|oBDGmp{15Q=bDT5<hWtUC`GCucm|h{?VRM>OI!GIAyp3R?
zN|Fqum5q|5_<qfKYZkkMk%f?gIWe&uT-%)bqe~s&uu1*!@#Cc&`J<RboQ&#f6wCn)
zTu;JsbfTt6Cto)F0t?0`qfpcGA}s3Tgbs*unlrZZ9_ixtaWgOw!twK4Pp+9dLmRvd
z5{e(=!BHuQ15IP+;3xzK0DJckJ;3l(#N}#Ml`hjChDDv79$O8|bazWx3Je``-X5&>
zzg*nY(JC01cztF;i%-dBtSG}QrM>E9z_|6A?&-m>%^9QD`@5N0v7*Jgug*F#P)@6w
zQh0M=zQVIMU(6im#(Iy)jMQ}bcMm=}@7NDCJo4o^yGxnWlOeTI^|LLyqBy5};ov1!
z<ijto`8dVNssZNPBZNia57@gRI2%GbNSOU`g9W`Zq`M)t(h?^mS{n)RjOpIFZ6@1`
z&Z5+M6hc@RCBpV{jW2q*eR`^s1e$qg&yZ<=65p5m2J8+6!G|bT1aPf6TzQRG+N+bt
zn1{uJUq{6WsHh}dV{*N_BuQtnPDACLm6-S_cX;@0%<qd?%H2dbnkQjJkq>@@ULTwt
zifr1ewQJl2=U%Lvo7V2iR1VvT(OWBb1_s`o0JS|Yr*M%L+@XX0vP^TJym=W@PeTeR
zskA<Lxbe?9!lG)!Yz;Lf3K_V5MRGASd(4rqzqsg>Ji{LHF{y$Qq`Ta#?x%-z6cgYs
zC!o0f75Vv4<=?e{3v-i`APW7QL`h$(_#nxh%15(^EA{yn%qBEVBD(s+TU`-LUpfUx
zKHFC<J|WnZIa`JK2vonODLFm5MaEYxI$)K47~0bs%A~w@1YnII4sfy49iagGp0q|u
z^J_<+1Vr2vgo$p(+{UM8hYM6kxv5xt8`wYqZtSaq<s0^Qz0V%B#(@};lQ(iZc#8B&
zVh1Y)e>@KE{y=YUa0yA!)9@;&TwTlU^8ml(D%ix2uJ$NFtf+Kx(!}`|gTRUfVN`3+
zeBcQ6&j_}+LRT}WQ+4ed7A0Z~gVeYTCe7WV0#@8;8#D}-5+r8i)_?Cga{xsSdv{pJ
zWu>rd`vC~6vha1ybT@>LR88)m_PHC;hvXF<ram1WbWr!tmyKq8$)byO)M+_B)?LuG
z{Ke#~fkHc@1`q$>YD}1UoXhbJ2W^4$p$2=ZWwHfH07=I!j<jXzW6B~kIev7|7wpth
zR0u!<w__v1FIU8M{dKbGIf`wk-;?Jo9DtT|M@SSWU_yZ=OO0iTMG2;x^y&kaHC_c?
zU;F#U3lFX79&cJD18Wvo$p(5y`$>Z^90~;_R6Ea|D!(%+gW?C!MiXJ*4)oM3rAfJM
zFxKf`FgkXRff@=_u`sPhF4hYl)pkVlDn}Zdf*m{;K-@bh{jUWP-j@bL)mU8{U@IW`
zBh)G0q5bi>2p`F5wvQWucRK;rP&W2@UCCk?Bdn^NbM2=!HiT)ADJOh5cfm~$KgWEY
zcW<4t(&qD8RI@dq>+Pj4@|rIg@w?n{=6H~gr>)r6SY)F(y-Cx0Bqv;sQsXO_8szxo
z4uMW(8t?w3)ebf-saDL%#zzau<Mj!C87WY{NZ#0n(n9$LcLF87P`4#97aH(kpPFWh
zJVS!H3T3W9n5v)Crv-tI!@<tLa_FEN48^A`udG~IS?PVHcC?=w_w^hGmZYy|53_;w
zJtd{(M0d`kgbdvpq2v7v`Z+v4jv+)0^WDGF&R`}*SIST)^g0+y#+959Y64Njt;r$p
z(v3&c6z`(lId!2YO*PhYI21Ev{PtNY$F+Bq+U|%;qtD|I_|TQR1$eMUn*;(*Q~{HC
zzuoZd`KZD}6VV*$|BAZ9di-A7aewusE0So<$HpRT;z4netgh(;-ur96kt(8EFGR`3
zh9Z(K<XqI(c3luPsmcD!yK}h_ZGX#3VYjiNJ^Q^V_vG)2`jA=1_Y@Yg9i7!q0!8A=
zIQ^lk(!ahuZH{I#(|!cpP~<0~sgmd<@Xf>KEqK|B8;Mp?mIgzlqt}VC%?}Fy#4ua>
z;Jx{!2ecHpME)0U=>{HR$a*Ez)z;QqLEN&z`aAm5>?8_YzNpT}ud|Xc=2Xnn)N?7@
zG=aXbjdkSKHBO>_MhKXd#IQc87DW5Pwux12MlqNL5`N1Z=N9Fw8O8-MY8P!IpYekM
zL`W!h4?jIj)aylA6LW8_7zjv~n4~AVVVBhvYX;K^6p5ksCnGCs!q{g7j*X;7Dd&pm
z>v<+;K^aOiJ0gY<atX)j^uoJ~XYc%KdI$*C277MPklx04!t)VNvrUWi{vd7E3hv&b
zz{oD$WtUFtkDi|ARL?^N<mC6%BOh_NMR2jPuex(IV2U465!P6<lyeZKF^fnA@rQes
z91t!nQb`C{uUkKF{l3#lV=47kLF(a_@m0L$5OEA8($w!#Cef7?F|!TlcfR}pC(+Uk
zG<R#MNhBfsv;#n$$f?NFPYqK~aZrWIJ@bv?X5O_4?T9P~JjtcOTtG5MIcnT4Vv_PA
zOA3oI?Vc`_d!cc!_Ay-{@Cn}gJ<XH(ipPMW?ES`EZMdeUQ^ZEdW3=6S!S2=-MyI4J
zMCQJ>?qmGD`(9^NOeSZ_=K@W{hPnBPCHEo&f|7Exox2wH@{PtHc3++UU}AJViBW*&
zo5#ap9tmArLp4!kL2QW};JXO384$W|$3^l)<q|I(WL&8RlVXkerO5DxA5M?=jDPGi
zP%Bz^w2LvEMDhvFS#M0$v=AxPSBDF_zg?;BIVHkq4u5efqRbdp)$pMz=1N0N=(Mh?
zrHbPgt^x=rjdce)JN@zb)Y23lW?Wx;4fLd_<+|3@97UYuuLDqLW{~gEY%PMi0D<yP
zm<{Poa<$5XaB7M)M@y}SH_g{+M|P09YK-GOLMspv326b3q<%r^b6L2EUyi>C&K*c$
z(Uz4(*qw{oQ4en<86>%rXvpwgDzabGctrr1*(XrgLLzZk4B;Gl6LGj&XV_<im143W
z%0tzdQEWh5Vy>hbmPlXIe>Gu4KoygNi~04_a}vw6+bVZ*z&^ZoU(qC_2W^ZBg)I%Y
z!*9JX8dz)K-BE=;SrS=-{djUtLMZiy-#(iB6GzYI1iCR6oD)LiQb1U{5X}wQbC_l#
zIH5mGO1EGc+}WVIc~eSJE92s@OL7e_UI!(G(_{%Yrz9MOOne}^X?8t0?rG7fu*-o6
zf2EHV7pq&Dhr%<y*7;QI@}D1b$zrcr#nY5tY9}&J)=-KG)45TytlYC)BPeX~ZSPCm
zL~8Vyvt=_b<G7CNS=CvB9dj^Wcy2ywJhb%3xs6BX`OEu42FW@&(D=*l`8R%f%Bmi1
z-)%#5m!A-=*?{_8>`GBC>$ivAW!FSBDL2J59Z4vz{>+PmH+H|-Xc4##G5kRmi#Gy>
zll)o8TTtgt)b1eK#PS24C$;BZEl#3PLw-RHFfDsa7AHkzICLuMa9AAC`81OSWRy)`
zK1o~XzQYdd7QK|<<9e&5Gfy2TQ}4<g@8F8`oR~p<tHchs(m7hNx)%Q(+c7)y0wIe=
zh-uI$17DG6N(>peyyh;ZV#uINQg<Z?6JST1_FTlGUK`Acd~l#Tvg|#*fReVpfnQcp
z0m-a^<JQh9TBIsqyZS>LoLqMmdnlKYd5|O&b@NDF_Do?1qQ)}1)H2n4{lwY26K56?
zEH^wH&(26l05rka)5FGW$+HQSA?9tfTY|{EkP(o$EP5Qoo_}r|;ens5=;;L2T&*uq
z#g>D`jGx!XVE(azBjlV(nVG;G%b5Vz3k_>a*0hHRBtG&ME|?TFe*7vxF9U_$9Qg8b
zdA%GheF}Sq#2v_TNWF5<>lZh~`cO%w(>rh0Z%3bbm+zJL^OxpI(@v}e=?R~Ad+>)8
zJWD+j3#-_|3mKI9Momvc6Ya=bpWJMT$wX7BVV+N1BcT|A5mk9`hjn-}VAa#!WU-9I
z;&%BRRY}Q9uUqAX-o3oc4kUtCzw(~JQTp1#lcW5wirxUYgHP0^lPJpJ>Lutk<wFY-
zDm%EhYP|gov&9R&kB27vS2s95=Qg-l<wrllRK-yTqDZp!BAm>P6PY(c^deK_Vvw5d
zjB-l%)*#XW3J(xRLc5Oij(UC@C8|K<DgLu~6-sS@;A`}wa0U_>>?xJ^!uDsUpg6@E
z_FdcXk@pyE@7z4;O?&c`)NvHFl5nLW!wf&TnWsHr<dQpDOPHeojXe}yKu!1Zc+cYK
z=`>#`z2Y<=zoyCZdYesfIVnjs0YX^DPibV2mn4xn*weEG#jv1@we`lhD(_NfFhkmx
z3ge$9U*ijXKSyEQ#ysqE3hMu&Efdil?=F?H<GYe9{IWX$z=yKdS94)>XwO}h)7}fa
zv;Y4P6SEdYlpK)f(WhQ|=;1&u9ooc;X~Y(Y<h>dbO(eet(793=*<LfVqVNt8TO3E#
ziBy(H-Kq7`XAD}8Sg*bk77`K);=gTMr72)8be8=X^GObzfwQj!4%R_Yj6}q((Eb)#
zxp)6^t?h2F<weva?#P4BbL2ieD!a+?Voj&u=q(0yG2i#}lgZJs2-tARJ4+7?4D`t~
zsHVFa^L%2z-5&{!mB%&LcQ{0xHP9@7EM&8aSCV%t`60{IP0b_T{JcCEK^Sw7hDl%g
z^9B0^5-u+)kW$1z8Kf1ecD=e0dd9|*H8P`bU5vTY@T*?Ui0AaeG-xuEt^>t7ea17$
zvJ5dqN0e}uK%Mdgf)D|R(lJaL@Ys&z$Sw)N%7M7fN74=b8#wqw(n|MePbYO~csg~P
z^?8&Y83~EP)7Yq`P@$`)kCa0+>^1U>n!#0-%$sn;(V*w}_bXEwXdY(jVddlMek^^o
z>YB0Wc4p*N#ZBvkWuvhZFPxr`!m}jmuEi1V!+`zCOJg{N3iYaEI!x(0qlJaU?yUXX
ztj^*?8?vx#nm@~!-?ke=z89*^Cbbg~0|DGYN`eZWZFP0}Aa*U9OIUkyL^ghY)@El!
zR=5LdU5OLMd|!*)P)<0kL4sYZCdS6}D8io2yTg@NCO%xR2^DA<R8HsRdl`}5d$;iZ
zDKyC<V<3Q<CYSwUGwo3UTQ|$V6S?Nr8gU6qpyHEOrJwVdn0K2kUC0;Kc*?gK>BECW
zmM!dC?q(Olv@ufQ7c}(N16xpZT%9{V+td_Vm<68rDCPC$bnS;|g`0AU<Ty&A-*}-H
z@?w>FI#lgKf-e&3iLE|HBXdrO``cHA8@vu5UsPjjnVXoH{FQdkIb1c5rKA8Q;)oLP
z!?{1ulWy*#4a_88&p*);%WrUMD6-lrFpsD&E2U>;bhH(J34KBqiHxyjVR(;CCGK(@
zNyza%Cy0+Q6O=VlXd3l%!@4_fBYYx;pgcbZ<?9`WStsVjxuMBYyLKPqK91+6wDb%E
zOrxEW(y6%?Vvkq^5ZH)5IdgMn3|=%&HR-X~yp4DIC0}xch{<0hBEt)Gfj1@7D%-#~
z(MU_Ov)&`l?3g7#T}n9k`P-o9ZeW9=p;KWi&NR}|3J>?r9D`m31tcwbe0<A@k%xgU
zh5J$JR(dDva~0N7O+Tt>l&JE?b0panlnQ9I_P(dv_E@@8sVP3nTbto-=FWaP6pek+
zVNZ8tz4ACRpCYfdy*g^l8dAVQ1URM)JB7-wGA``l<wHU(1_cF0N<OFYyv^G9HAKA5
zYV?!bav370PNNc<Kdsbex+|BUJ0F4dbtom$i1a-4olg4=NNv*Ut<{z^vQQWPG?lhC
z9RwJ^npz^@E=>{Bi$cJ!Q8Vuv#+*Gri7v~&?3>i9!hJ@H?&o-XCLtktEH2KD_qfo)
z*tnVVLJrWeuq%$T&aSB?-mNV0I;=q+f5PwRyA<I~!=&U#bgwN6_j$6}pXlJ`%-8$Y
z|E>jGQa_i1OHNE|`0Uva&Wj!QJGeWlQdB%Zym5;HC#N|F{u-j@a<YU_TrOy>uUvZb
z=1qHhdy!Z~1@dabFl$F4csV-+;PU=?(7!)VO{0^M(qjf+W`i^`6i&Y~s4jAx_o7Z*
z?Cf8MArw6<B}w;hYzbPu0f4z=q*JmAn)K#FS9^Bj{L84A(<w5PsBjZaLo(9c8p|a%
zIB>lAIq@T(h`%^14;TOE)T+u1@)?dtbH7g;IDG(66eRLsoag0!=}Sk!`pfS+6R(Tc
z;5v|8t?6!%lde-E{qy!bkjBq5`ff2g;`Wrsb>sBpQZKKW8sq+Hks%;MIP}7#tlOC&
zPjXhi4iN{2`gIIPLDplE_P-wvp&~<*DkA&|IZ2vv<35RU`yHw8*Dk!NK3!E*sd^Lp
zx1Ehpk)S#EfKlu_mu()~*c#QVyUbxxsSh-)n5|OV<oRPzt}@dPCceif5w`sEKZ^Yy
z_DpRT9oF2N)H!8yIIJ<^=PBVNRZ03D<bV5b+ZHid+8nchFxz%8<kR@~Q?C_UWb^*@
z=KApd{Uyv^&Je`p<78_Pmmld?P|v9Lja7T1#Q3jId7uq)nn5>gZI$7aMBj9k<J?Ve
z_Zn0SLc{>pDD*UeKu9V`A#w~2f8S?c3#`FDKNXkjPQP9r`~EhDN3@}l0jMV7(WfLL
z$=rs=SdMiNr-T{0;po%?q})G0LIiL@BdH_%vllU&dW!sVwl~c(RG-j~c<YP`EQiET
z+Gn-%@FnNIufLF5IT0F~qjsHXhOL3wj1VGR|2{HOYrp6zmSro(|0}>7p@0Eogug%h
z|A=LahoINL7i1Q1pGttwp&m74Gr?muk?)c#v!s+m6z#mfsFCQTnxY6Z(w{#$d-M<F
z?BE6kW_-=vCb_-U@x!>A$}G(7ksm}5SO@^499P7B`@LB>;pMM;=T0I!m-#u4-XOmQ
z=`i~7WY;zyqG<G-@ITPY1QHaQIo19m_b|F#b_`MmqmP7AQD#qW=C@1B$Y@nM?#q?l
z1v#MsL0l)*aLvLywnw(MFXQpxH97l%I3(`-rCuZf!?}dZWb~Hu+Y5grV|6e}Cc_7<
zCQ4U?UL40h8j`PhCthID`QxXnc$aY`EeCt)mr6Z`L9J57wmJ#_Li6TY5^AH#Qdt%2
zWt({>I~n!Ebijl?6eQF9wef4N5&l@;$kph>taodbT=P5>p*Il+bEEIgK(hGM&uM!d
z!?(oTgf5IOOXpjf<TK|mydkQ$!*VKz=`yk0ZSC!SsNdt(21xYHyt@Z3UaXtl@x|z%
ziX_Laorb+?uLztjW3K8;%xc-DbE5CfpK!l$$2H|woJ-w0t!w(QyHa944yV;SFxW(V
zlT%W#E?i)5meiZ{2O@e3Hh=;>IO#gI)w(Ip85dpjkBJmkPXA=|xqa>Q(0N(?%nEpF
z^qMKQot7~d30B+ekZ@UROh(c<7Icrk-Bb8(eiCuj{gjQiE}=P4pAMfw(Ct6LPeO5I
zrnO~?|Im~qB)k&W=?Exz-Oi>Gx9<JS*5oD=eEtza$op1h|Du`-I5MZ%=*uU!3~!-E
zw4L{;gzTrsjtSOAN(%1t=zcTRHg^y?8lvQJDg({gaZB%cPdzZ%_jxmffEMDkvqmmf
zNWC@vMO^GyJqK;^c_x+YySyCi>c<tnnyH=9(%R}-I`Z!70&)X6sx#i5g}j%;1e{Nm
z)YVHZ*P_hS?{RZ+86cu(>7UKgJzISpM$#ChA92gullnhlPt)!fZ+V%Rn9MaNKXas{
zVCWhc_-yQrRsySNB%yW=Gq(gchF*8&zpLA7*v2Op;<lVtIhwlJm3yODx5&2te_$UG
z5!fwl_5Y}A;x-x8+dc{<lt`6}i-}^4f82^!Y_{Q<pZGzRguk`6Hu{L1(_AL;!|p(i
zmi5n>p3hIW!BE`znLKQ!Fls2D!F!7vPi(u!b}HKSqQ6#^i>gkX<wbmD@)!=A;XQ3j
zn|apsr`4vw;~@Hc2)HMMwvZrR{U9a<>no0#)iz!wL`)%8{ol-TDYcLHmzK10aCZfs
zw?C%zmzX&_SlWhn4^rE~tS9Y=|L1rlkhMk9rLPkNW7NLKZt02HDSCQUT4y1HZ;i=}
z4Q4GW;f3G*HD^3qtZuFQ<|fak+>BX6>G?~nl(X&ieco%0M)8@r#OaKsU6SgUi-~Dd
z&Dxw!&V8WTO6J3^(?Qz*lU$y^vQpWrM1?}owqBdu;|piT*?y63vdMDr*1~3;C1B#m
zDr}k6!x+P9RM|2kDZT{RS5m|uE;Nb|O}28)jeF<6syiw)lu5v1EaeN!wmqBDzlV?z
z7f0@agrSk^7jZ!#5Bg#SRrTwX<+(oVwyS-=wzfQY99n^K9s|vdt2U!EUGJ}E!qmeG
zAP3uf6rJSk5Kqb$Er#RbM+EBT&}JI%?Z*e(Iky_)Ho82QB4DBp5QDXlH#EB{!1gDd
zst$oS!|J1emqUk1>gP0+hZjvZA%r3aI$bI32?<lJ`&zkjEUg-SBDua~{ld#`K4w-g
zUhMo=u#c1lI6FAVmwzNSB_uo(pFbOW5x3&2+>`&V?C`WsBE*>iWo>m9CE%HEsK&w1
zO(W=VkfiQ^Z<GWV7dMK_q{wDpDALs@JgV{q4@mNz&D5*1URaGT_4*jeSYw_}w9{*?
zDbep(j+8HCo|VE3HJGl=QFj+JVE;crKg#_fDOL@vJ;*DocMlvwbgS<6mI5U!zz^xB
zzFsA*8sJ8wXyx0AWBOoPM+<T5ZEQ|Xnd9s)?_+#&lc6e;F+Q$~KpcuUAv5>@;4?zA
ziv){pA@Rp&>L;fko~jy}E7gaaN^2L&TG4p12T(njD|Z+WtaBr5kLYWsuNe+!iPg-t
zWZ9_Pw{mo}8ZAiFjic1$&N2+J!p5xiFl&#$QkYYFEBKv&h0YIC=7aqElYE^C95c_(
za1bI<!0|e+J6lJnjryeKwn<AR2j#A|HSLc{<xHhDArOz(1s&?SsHv&p_9||#@mBzL
zqG5gB!^|+27bc~{XGyaPIYe4QZbveQK26g6{j;lwpNO=g4dhD2i!*NAbNq=i;#0q%
zQ)FupiX_tHw5qjsLVpiZkl5#@>mHMJdeouWA}2>9E#R>8_+;RC93xC>E9ZimVPg_}
zG5~<eNAsy?n<nG0Y4nbGD;tvA340@=bKeVGr4`%s=`##4_-{~~iL*fhTO`s47^M(T
z13l{8ul%1y?bBwvCXcCV3UUes-9-dreySGpt8_E!H>r=pnzQM6R0YJCkT(_kHy_{j
zVNBBkd;^ZNPIbOn=c#mfE<Oo667p>#6P)%JkLnkOeqk$Hj_znwnG@la8P*v__Qvp;
zoZP6%)po{v@M?KADV^g6i}u{{kuRg6YL;8@z(stDj+f>^rYgDC^P`wJ3+e*7od-tW
zUeGa?j#r)qG`^hb3FX}mcR4zFKNnECF)sb{$(fKK2l?Z}emQK%fzkJgjj|Q?DB_Mo
zi`+`W*qgJO46oiydI@|P{!E9`y*}@}Z+ga_TOu258hnkcp@5Em#`|pPZ0SJbq4if4
zn=px>E7xAWHocs1-?>s;z`{^lndBs3fDRBqi_orvzCLQkUpN+mlMPx4P4%Ka-$6ll
z|7mPu5CX6XjWs$Z*@Z$3pMFwj??~p%$5)$0oPG;5asO1Yq(LIJkBeB|KxL+mPJFrH
zFJDeYDriljKHc`P4vXME2L}aA-{$6{jm1p$`<lafhLQRC-DTd&shv@!4yWdzLoxWU
zJXSaYye~LJI1`XmSk9C@L>)87p82;gspYD{Rz4<Irv~VHtNL-NXk4GLYJ0{L85wgI
z7ts&;!9~D%DKJ0+=f!?zfFk(Rwdk5rmxs`b8Vepa-deZOOIzE|L8(+s`t8ln?Cswh
z7sClDTf6)nZOGKE)?E8XkLnUH+CxHP>B?yEe013Q?{6`<TTIXTBvSOl>`RS!-Gr(L
zH}|e8lWqQ(5Q-aTmPCe_{@jw>$zIiJ%$YJc?lXw>ELIqyws6g0V*C`t=WH?_#MP!|
zwYT+i=Oz<knc@EZ-@rbE9Op=08(M=&`?X;<1z`czzPXj3{tKjyT)pM{Y`ar*OBj)=
z<PP`tG@Ps5Vi?xAm_EsKUAlBBudq-b5#|41Tm*?Sc+)ERp6u0%JF-YQp_hvv0~4OT
zJ+iaFAx@g--R5vJ?l?~6iM$560qR7L43vM$aY{52lN{6ylw27U04VOKaKRckhZY2<
z*Y9nHl<YYBjZE7#xs^g&g%-+S49ki^Ef>Gk<c?yKyhG2DKog`(d+PO-w^YtJnCSzm
zQNSEYv(Rhrp}a<&>T2G1e77yV`dhL^g2vi7l}4*?(^>23#vnf31$T~D^c#K0tjb<z
z{8YDxH~PKmnCLxMA|m+xpJXIk9lVr#ouj<Dcef^bsFo|7qTqYZL-oku`T3y=q%x^@
zSgfahsrQHXKA$8+F_txl&Po+tbyNB0V!O?zTNo>)sf|3h@Y+1kSZY#8vv(e1;@Dx3
z52$4t2ur8wTqy-d+urK15Flu}@_SvKZSQHf2A)ex78R3b>Lu%!9vdBnG&igDH4r{Q
z=;iF}&PqiB^avrRvAdz6p|f)XXq4y>HCdEhTM`J2mFbL(765LDmQw?-7#rIJQi*VH
z_CVMLsMDZGwGPR);CLpMUxbPyNSz?%ZgTq&D$r0#Y|R5A$d9_Z8Q_OZpUYH92i|$-
zXEnq>92jrwa+}u|EQC5GsY>0jx+I}P_bDvv;5g2)`UwB)UE^#GZlidt0jpuPa>F_U
zroq_lvIi#1?Z8heHhJ%l#rgUE?T96Yir4uTsGqfcgf-hesn`dWk=HhlJoN{$@hQYH
zg})t5HRCj_#W7P5qUKbWzHzLP+9r0j6@NZE+#UOdIX`C_LRKDKn>{g<t)%Q&s)&{1
z_wQPO)oo0xK`G5Ovi;v<N8t$;*r_`1ipMzDxrYbV=q*cZE&gG|fQ>y)-Xeq?n+MD^
z9l?o0-(D{B7QYPEnaH8McF{bY?LMzV1#xYeNJ>uCx{&!`hDl(p{akB^>66@n4*vZl
zCrLRuA)8b7(2wd_V@|y*>VsWfziSrmIsaZ<0<Tb5*66`{bpg*)!~qH@vHJS%f<~YV
z!Uy(U{Np3Yx^-}N230{E7$OK?1I#4>{CK-p$jJquvJHwf#bc<<cY;W-X@*6oDgrAS
zl*X7Uo6Uf68L|WRBy_?1+(Bi<foAp?_oj4oC73MyctvL?El97}JGFEkb}qti-WXqe
zkNkn#_Z@hEckbLN-LSrV=~5Ea*wmwo_o8?{oih&Wdu;eb!SKeq>E&->_T^WlUBmDg
zRQ78Mj6|R4eeB#dwegD#qwg#}v~|%2XwPi1KkD@M(Wl%pLEpoUSl+%{lCu149nCo}
zeq?kkvZ4f3A{{-FwNuH(iihfd-y-cQGrno6uTw!vWKQ#CPBzNy-hko9hd;jd{WkBH
z{8r*O>%nO?{T|2FzVN8(I&DK+az|3w9^HO1K1EX!6`))KbMLMge*FV;VQFY=?AB#S
z)$LSddiwRC+Dk|Y70ve=uy==@`E}Q>T?a~ALTaXFp_2hE-zBo^Wc-%(BK~cIxf6TD
z{ue~DIYI9M35y`EpBdj<8ARs{hj5ga(jY_Pd)A?`RVD}6cIb^tXlaeYtpdiV-A(=B
z26X<&;oh1ibm!7h&@M-_>Rpv6BFO4M-Amu3R0k0@U<OGObw1oOXoz9wBIsKHt>>>A
zI=jLuw2r&r&ECm;M{Ig#=J7#`a+pnhXDkZu?@V{B&vE~L1i+F}YzSZ4E6oD@YlB3Z
zqH6IfL|;g=$5*4Yi~4WnC_i5$aB_W+I&$Vq%kWU=c=lJ3(g#nwXF0y7HF)ABG~|_M
zhjqv8>i#i}Vr|5h!y~ojVY7MXc>FM(VvwIN4Y1t{;ATy?jys^Y>d|`Zr#L*RWg7ar
z<E5zNF!#gG+WA2ljbU0bFYk>!8ZNA%a}ntq>Gp)r(+3`h(ywQOS+W@7rk2(HU3J={
z`Nn_!`gp3rY4NgUoAw4eSp+aivNaEVm;ZoTFcj!eViAk{E;EgIn@dgL9I!RlaQR|P
z%h%*-_VU%M1P^3Ourog>6*g~$2$b(ZwmB%`z>$#d@Eb@MFY!P`E2CoZGf$a#{&udC
z1;X#+bq&(Z)sAGIAARhMl=~Mhc1bphi*M+naH^k8O>Gn3dj@J|(UAZe@%wAI>$pk<
z3n7)t8se@_KdSo+B`bHTZO@*5C^;j-aMa+l9=RdO#NOoPGRP)XIihybsayG$&^Vik
z>)yD1nL@yk<wWg*nK;j{y(cch84*?+x*Jid7O<8|3<jj~r0rzr;llt1J|_EGMcKPa
zs|x7RzH7pCP3~i%TWk$1q3z$nrNF>&9o{CsbU_Qt&tJZ4@T^Aclec%W9HDD@sahEE
z)YY1w-;)sSG5GO`*<g%p-KuEeVE4PjL_Fm}W%mknlF+#YM+dW3S%6O($kDZ&k9u^V
z{RQ0zcCR2l1T`&w8qSfT&cOU_dAK}6*1`t1*JH2@lBo=@klg-d&GP=72NqINGU9;&
z-*t;{DghU2M=E`U$Li!w!WS)9KMygk%MR9meX%b*v3^X1o5p9Vn%>>%6`pRGX<>ZS
zv5k<I{^C=*HB3gx{QODU!I!Z@X<N$hD3T3#69S&t-#i4dIV8({W>JBzQjFVMcDpom
zt%JxBgRdmfL01-D+mj6jRVJ%7_pT7%vqRtR8uQbV`1F=i`gyh%zwOVyUW;i=s&6`q
z8PO>-Y2?uhr<TEy*Niij($$@)uRn19?tkZfueA`@uP2()dm`Q8IL7(;uf)YoZVFLz
zW_d(1w1r=><oa~*ZVId^1i(yzTT<99DTZJR7Cm%=PG~59WHKyo@cayxBixR#`T@|c
z{QPP(uZ@d~3xt@gt*mImvX~>NYKdMlEubv(jB;!F(Pvfb>si)&HR4}FY6rBCv2L7F
z%T{A^AxZArRt?X~ZSLMfG)IN>sdQ!zE^W-SuqNpunx$wPdX~eGc~*UOWzFvU26mL?
zqh-dC1QO~;%w)_mvJBk@RnvP!r@!>Hezm-A3jq|?N7k%l59Hj0Jl()CEN(XrS`7M-
zElpQ%4)ZCf`*h@%$n&tOZx2EcdvA2r5dTKgSYc2H4lRp*!kN1WTeu>Vj8CX*wavhS
zG8wFJwu=v<46s-k?!ay?bL*#pTude56_TB!wPUl=DyFiKz*VHdct$8ww2*sbM!jtx
z*V@T~Y3NOld0?;pAAzH+btSxgHeNCH2}$|Z_AF7a=b^zyWnM+D4wo0Rp`HL1_7*Ol
z6Rr~Mu#-*gp3pKJl29X>2bHd4TJ3MGkzw1(ki5WP<<+?2@JTm=YG#GK7-XUji@%n_
zb9*SGdh&F#xmmtQ3aSe6@(uwr!-!RvjFdzrb9y-5a`>SaEWWB_C9Khcsu?#$k_+}o
zsC}ZqN?_WP)RHQ1Qp!YiUrz*XB{bzkcNgvVvV!SHD{d4o4qPp0HG}F9m~~!-{sJ_&
zf)coYy#4%AC_xXxXd@bAMP%DrD*)C$ugX`pAbf`uz`!Zeu8^i%n<^^9I&MOTJHemj
zt=AQvIwQZxXkEJtGyfK@EcW-ODK8LVj`_VlVub}IiHXZ&cNsmL$6ULzUb*g#q(AR|
z;m5(iu=IZkK8d#$3%AdXdQNjjcX0LcHW9I9qr-!T%$e`b@2#;H+Ri;yeU1pQKw{~2
zg&?vZ=ZRsU#J=C!J!0#(vgzY!+rjf6vNW)>bNY*7F3&9BAx`VGSCbf;c4wxitwz6v
zGo3pq?e6avyB~aK+op3h91Q+@!yWv}w4aMgkd+Nr)wbNT7%wN*<mD~27u<Qvd=*%R
zOC+1j+EDsUO8isRw!4>=LN|`^pml;B&zxClQE?Gpsa1pEF&hod`&Q#lop0AJy$jXW
z*5EcvOHQV-`2|puhQ<cGrHSCqg*Ni#lZMQzfr``Q?Cwj$vD(A@p|)52r+{bz(6!py
zyFNFVWH?}+tag~gqRr4CSf5DLid6cC#@C1KtoeGwN+C660gqKsdkg{*xiWM$A39@R
z7HfDydR7>oYtjQ&>|hNMr1I&+d8{2N=hfDVj!Js9-Q}>oteWIZZaedlueJ;lj)kR`
zZ8_}8NFn#bir1z1OX}(l4%Dyjzu{->PLQ=p_xG4@ow?@wUqF3rTY;BbB5!gP#l>X%
zPVefOzmUAFlxvSi%crR{-;*2%oQ$9;(*@cErIMn)1-Xu?sjICnH|wjas9?+DeQY~i
zVyf{?>!u~m#nVf}WgQk<2UD0h5!&VUE4w2EGZJ`)hj{*-Ov4(#r|wJ3&OcRuE+CN0
zcHN<t@Zs<4#8mAz%kQu8Av|P$JpfpSw6skMJ1@I+D;-;Y{){*-vs%$_K$B>-1sk!_
zQq%fT2)*3tIz1=+hW<h;`CfhG<*BQIZ;y8;Da&u$(EG%H%bmc!aNhLvzkx~UrGBE0
z<>@56G+(cO`Enyd$RsN^mQpplobYiVEg$V3?76V^*5<cY=c+Htmpy~dt+4AMpULP;
zA94R!f&Fj$lCPW{FN>`ue$}V-yUAy($4Xk$#~#Ksv$JV4eEkeew?Ix1a^1Wxd&h@3
zTJwry;SDk}BLfp5qsGVlBclJNlRR#!?^42D?A=Wn6buubj%3iN*ZJY}(f3m-13uZW
z;{m9DQwb~Q*|IM@9e+d5QBDwd0(6qEC*hvTrS^8O&hS=HuZ{FZM7fL2R1&O)J0}AG
z*|xXX<M%Hz2{S{`q3)H&i(p8(zn(g|;uuEQz&fODLFI7)I(yJJxg}fPLlfCL+uZCZ
zK-n(|1y-{DT%s!^^^fHv_Z{a)zS(h@O5Lpd-&rIrL_4#11_maIe^DfTC#wxBNFpuj
zjpjRqIO!=jZcxc5Bumv*X!Dl@M&bDG<#%4rU?K$wUK)CTwJ~-56&><t-?#W;)h}Vb
zM5W<8&RWjPuueu~RH~STMtO>IV-^<|1B@hzMCREq5#2as%!ZK5y{BIvu#~+SN=%62
z&X8!Mv9Xi-%FQl(-ZICS0iJ0qkPzVT8N?{&VP{YB_M;rm4azKhlPoRVi9`IjrNy9(
z5NDq5QJ;<RlLODYbPU)dgix^v^TRgKOE6&|e(5X0cCb)awEb0i`lh6mpFy{7&p@X-
z0kK1jks2)vYMK~KQCm~(cL0Q464Gn2;U&XmJj*;nU-Z&j<u7T@JLA1d>lZeo^fD^g
zE2Sr-kvokXdpe%upor1kA5p#^Vs;2(-1Im5qx-ua<JvS$j{>u#y#_clq+@v?JcK(<
zGgybl`6FzqoER`E*I61U0Y29O&c%?JGQ-xKK*esH;kGY=mM7DvCMV1>J#sYkC;(w8
zE^=|+kKful_K#}|u~rdqo+e^~OM^VSD%nBwnm3a=@-<iRox>36O=`m2i<@s0mO{O8
z#%|t=afp3t_)VIfF8ns88UG_rD_^p{SHgB~2l4HKJ6r@kJu@R*dIO<P`izLTeZ{`r
z_;7Il;WZ2?7wr`N_8n#iwNOVxzmMM#h?}Aa=;(~`m5#ek8e3a8@>q2;KYH|bJ!bem
zQ9PUSkC)@^QX$lHyN_N?=Xxi;uAmTFnHoy4uxWUtnyvDzBZWfcaevSB4VLGu{l$j6
ztveFQlbJkK_>_WNcGL7NIU)9G>k_;^$oD(k)SRD}TeRqqYTeyzT1Z@cY@nDc{spxB
zAE%L|ICS4}Pn);rzut(;pq6!C`5cnDKclQ7ZtJ7Je7u&^FI0O=;SCz+ct$E!c7~Ci
zweF?UyK$u(LX4EHJw2m6wWBNRZ{Z$EN+G&-t>nd=xKr{grB|W+f=}e-!>#2+MbBRs
zYx=vPd3x)L0vRLWV3yib0WwbPWsZCIPEQ)lxb*gX#Qt3i$W&EAfAH=DCUx6{P35z`
zmhB4lBO;}Yq&g$vv!tXK02aE2FE;V*tX^MW{k%D5VXA{2gLonfVB|D$9Bo3md<N@o
z`ZE>XQpp{!(vRC%dELsajV~v+WphJ$t1Temy3swAmkcAhM&Wewx<{_4#>W?tKcj2f
zftVluAnc`HKwxVq=e#7^M|;9<E7ECgU_Gg2AY~vOzB&OW#7I92O$7^!wUiiTqkBn7
z-M`N^ikbe;qDiL79<-UUTJ7-_o0;gv3&X-olgaI4b(015;5G5ZL}I#@v-6nk$WK4r
ziT%~)R}IQ42v-L3@eJl2r3aWb3nK@x+IW2i-ntDtMR2)`HQ@XNd=NvSE$;(f;B_U=
zhCj>)^4QU#yVXbmwr}>MFY^+9amkltsc>F9L*2TW=-y9*n=k6iwQi=|b{Jjv`v57t
z&7rAu7_$$K*n7?7T;qCAxw1Y#nOF2R8=Dv8AH}!fdGr%sC{8%Z-CtN7@7jd6)ZHq_
z<EfKmv*1PoBi_g39KKw0Pn#mIT_GuQ?ffy+O9uiGkE-dV!W%3jb_Tbo)^@f36FySM
z^&Rn>3MUh`I>rNK>zf=mgk6rdre?x{&?DpPX=+SE@rj?0aAi1wD75W=hl{u_{wE0z
zKGh?}im;9G;$Fr5VBA>}_B>s~UaNa>$0JM#wYct88tMXuzumD7Kv@~8f;Qp)^EQB?
z;dA~GtQMm{Z_A)wp<GD}jo@2Wk*Ix@PBWg`+S;2*`evHO!y&>E^WOpVWBO25&hwAN
zCbDE>*!f`5J3j8m?Sj~bfQcuXnnVQ*zpBlep1r-8$J~;w9FNA9{43LKma3e{<JApg
z=u^X^`9@KB#r41c78y^;?oPdO7h((0509Y#jEi%;64xm&OY~Q&u=~h4qo}6U8Z<~E
zlu3z+!O?I2D60_5ANN#D+(YNEAb(EaBR4(6c|5n;KZ2pzXD#VyB&7|cZhd`zjb!F;
z4B>9=CqLOFlxi3mtgTzODE-yHkKSQs{Hr5L3+`%uU~^e|Sl6KZ+&Pk4R*)mz$HR&3
zi_{Z1`GS6*9;B0-CL4X<oBO_h_n5l|R(3~113kVX;w$8a&(ks!I|jR_%}j3pk;8nq
z3XNivlp{(?!byC79RftH*--50oIKwW)}teP@Gs?i!*<g9{5eZJwDtf|LloCJD3xet
z_QlLd=+kWk#_X%2P{?C2K>rYNNcq$2!k>TrM-Jcry+8lq+-uKMD(8ip)MEX+n`+Z<
zCDj6wX2lBbJpB5`LqzHd;SUe`5RweSaZxFsJIfb+loUj=&-<Kz=xNaM@B%f%!)H%_
zVBQc5dJ#~RRq*@N)KXA;yWMtw=N<=c-r0m#dMtmb)w1)?>V@d_Sb&#kRoE_BBba{U
zm^T9mdUV2_<=qw0OSj)$xg&A)5yk@!4i4yG2wXiy?d$q&L$irV{hl=X$LQbrD9Fa<
z;eCV-oR!}&k7%m*M1#eR^Zveo=*K75QAQq6q=|-IVD}MMfN%T!y79mM@0C0DkB1Q4
z`MOM>4zO=r{`a&0tEwxHhr0dR_7JjfgHS@2P}#E%Dj_KbSx1pA#u~CFL)NFVM@gjz
zg<;6PD@KKCM)qwa%GxBvd*=5%y}$SU$LG`MGy0nQd*A0i=Q`)QE*ryp?9T14tnsfY
ziU0XCs6P%CU8BjfvF}<8{PVH)IFDuqIZ~{dsp$yJg~rhD0~L!)%@M!&VYV6!+11yf
zeE;k2T?CBOHs1{2-q60WhWhjWA=$8Y4C<Q_<A8Pp!K)njtRN)eJy!n%KscZg0!pr|
zMUVIO^z;M@Gfc3>PDDSEj*0*GYjt8vgj$0)1>#g?WuJrm391DiQUVjhfFS@HULU&Z
zszr5peKP@aEU+NJM;bBjxrqOFT@A2;oF}OZJ0v1<DvTG0hxyjFmbD=G7=;MHpbdCX
z0J#w;rek=Yya$T(sDGCmnT*|4crPR*6v3}}S$&fTtY{aBJQ;szf`e5RTy#Ak1_G>-
zlh07~jCOy1iGU@WR<HqoZ+0E#e#xz^L|`Q3hFta;tLHNe(WhCL)1L%|9*kd~Lhb)u
zp<LRC#q!!*qAefL$4_TSf(tzK0EU2*3@b#H0;iIO%TNQe=gypY4l?l|>Ovp_OF&9m
z8bP0JAphr0Nire(Y2MzK%lfS|4;ak5Lft(uu!41M|MWonhRUNc@c&%nNdzsB&cmP^
zQ1xa9U~WRb#`^4=yTBK{ODq3pKN=&4Xz)%9Kpy-JZ?nv<rgwBU`AVNVSkZ0n04NSi
z?Nn}ea=R0xb1$3*4V0koqXR8c_W!H|*D-hy9*j0)9YNbe;nLstq>z_iNhK{msP~(S
z9kGCE`=h|Q2kjGi3sznk=PU7myWdxI_{=@so$!Y6jEv(nz?Qm$S<upRR(|=-?d28_
zdnIy9Mp7wygT-e+(dW=~5Qv%{(AkWx$dN+sV95$SWKo+`pqz^r{aEy`=adWwYZ2e+
z&cw_W{jjjD+KEWSU!m|%!1(RdWYuS2I@*`9UIQqXwcfsQlQ*rEQqkc<0r#6Ix{bsG
z{`az+B7a>0ZvF}9_FF8_M1e*O#o}P(<`gW}x0i*HTMJY(jUg;vp-W=@8?<bGjt0B~
z4*sv|TiAmH0?f%)dlA3iw{di-SM~Zt=-BGIxZAQ9`#?MB>qQ<hEPu;y3PNh=uw3^;
zmrQwE*9k<P)Q;L3)w%388wh6AL^yX-gg3@45Wpu@4cqXLi@bb@ep5JK@fPzG>@L`w
z9#b&sY%9qP{5n)qSk3*ruVLeWpiLR+E`86Z-serJ0)nl;c{*!uPR79?{;gAHTN6=x
zHx~w_w&k`5fL#ra-DCB(6;IUNnq9W6UtAu}Zp-9cMFUTeDs1tggzK%Wj#lte9UQa9
zaByS{)_MXgV}R{o^qa4z@FvAJ&}Y(%-u~rs^ESsEy6Z0h?Gv<7VUP9P?y;<ZDK^Sq
zviIHS?!4~an*y&G9t8>H#bLaUeLO3lBB;<lecu=&nnK-AwH^bYf4~Rt)r(XyWq9D!
zY=$pm!HD$0EiN#v51W4w@_Fu<UG*10c<_uTF|)4$1cHMQuW%&Q!t>bqhpqGnwDl^V
zCMl!4lZ8(noh32#D7g=O00A!yzqzYig?*6R-#`opZt}YaT59F4EsNQwuVxlP47#uc
zfp)oJSttK}_fL@v4$!(`;mJt7UIiVxpX1@z{YJ0?Ty~F87bzVFbiH>g`rY3|YPMTI
zTjI;7as+~LjaTt<HgcIV;&+Ywt}u;08&?qi{T1|Rakb7wM1(^@*jHJ6`;><0F=VJ}
zntsKqhja>ykbTbp7L{w?B657F1}r*`fCI=xa}#uPcX)Lyn;Hl~#m2%nMto{(t__j%
zt~V>w&sjUX-e{Of)e>>P_gK8He;nJfC{wU{-&Strz13-xQL<xb7VgASuqpLigI^}E
zfM_ESqvbCB9k}tulFgvrP(Hr@Cn!__+aC4woDjv{D2exx(23T{=Umdy&@X?7yhjVy
zIcP06=MCjtZCg*tu@LJ{?^B>hb!GwR{g5W7X>+>r6Tkvi7cTfV{jiSM@I63(sJ&ZJ
zuS7W-uyRK@EzMPh`uv;}0^yuBRZhZc67-f5<(hwy^Q`sw8h=wpyq!_SBFFa;4VbFg
zn~x8INLWIXS*gs|JI9*!u<0Jv`mnVCz4IC$SVTR1GXc>P>=>&KXPCbQBfyN;ZNMbA
z9ai2JUBq}9`W+hP%hs}nfrFnUblR%Wj$De1cRwZqd~QKHt7w`t!p`-Rda{aURlvOY
zMV`+c`E#nSQ&QREA4@Fbkkj`9g&4gUM}124b5n%fu*n612)`axDqX0#LJwzFGp&Db
zqMmS)Ima<_lJ_@#1*c^KyOjYA#}aZ{g250h39*qA(D8+Eu01&X6@0H7;4s25Q2g5u
zwouy~PUX=8VQ~UDJbjA&jbjgLz5;6j{N`E{!S=yAu(t41Q3eEP3;Hd}H&dg{lc$o3
zT;!j;Y@&P~3z=y0{CG4CnPeo}vh}r8zA!Wca)$+!gPq-H=rkzrg0!=!>+cIo;KV&1
zI+G&c7#j0!0l09ui&Y^eD5qhD3imk`Fr8=yq9#OEkhD-NjSo>!mA8R2){*zt)$pp^
zB#OORQU1F35s?7R>Fj<V&e&sx_FA^{2HmRDZ2t27<xakr0{Hyok_DBgGfc$%^Gn7Z
z$kE0a(MtDb*jU(8>^YHBO_XkbN|?=8nF9YT+g`S1>_{<&mn6^L5Tn4*t&NaXIpI5+
z?b7q5Yomrvjc2e2lsNKUo<ooPoFZM+y?eZoxU2OgW~Am$2}7BZEc!sd&EP(E;o^}+
zWJDVR%bskKI7h$7@z>_o;!E86&tKe<OQpJdJ3}IHG)1|(_k94}t+HdYsmOD%<5Q>B
ztLWBJU&XukDg-D|CFfeAbh#Gx9gJ8>I2g$s8S4xZ38bd%c;-zIs?hdSbLK3n^0wz7
z-v70X_<$YQ^9{OD-Nss13m0e4St8EeqBt)dv+~kI$+){L&RWlMlH!_PS?f;7cHx#b
z&&Lk7@+7R)3i#G?1<2D@VEpe7%8uR$#`(*-rVn{1k2^*E{)mnc8KD8<+u;^I>7u<_
z!xD#4RULM_stnt`$iv7FZDj_hT&%%Ud_Uit)c)d`9CTc~reRjlm-lVs;~GzKIxdeM
z4G%P`AMtl%vWW@Om+#V!h)qdZ=T3Z@57!TinTe&FGs`M2hb&LYm9g4Mg)2^LTl?&~
z46A5=?=7_qi*0hr3bFykO?B2PW9q@#2l@J-IbUB(W0QDXmbo;*Reg}&^lGvr|M6aZ
zDa^Ui?#G$V1rXF#Dtex9@_abTB|clPP7dr;&YKax<)o7q%;Zifknnw?LFs$!+3qXf
zan7M9@$1+XD|zlVqvF1MJeAK<0|s@)o;6&8EkO-V6=ew_o&FbIv3O_R9%E-ajb5E5
z&Ilp|rL%stFxgD@A!uk=X3rq?FZzXA{kC|U?zp}5P%V|Hh`1>*y+vzy=La2v#JcmX
z&;EK-e1||d%fkAN>jogjpH7FIfh#wk)D#}Fq_(8E5tqR@YF}5F{CEP%n_*T<P<7Me
z(b?Uc={yX{##tsUF&b1c7JtTs#w;?8&L0Pod3>vCPRh&u50I#5)f454%c>~a)p?$G
zp>X**MXVYT7ABoQZX#7}{YArf6{ppjsr!e@&R!nVrVZI#aiPRK-GSVU6hhHR%|^2v
z(QR`fgx)*Qo3h`3ZT5_02V}cfuzu>(ip9&mGc%u<9`d7a^~7iId`nmM+GC&0P_Upe
zW#*zkKP-5W%r7A4=l<Z;rDGubX*^_0+ae$16tI;2R)?*o25tnniMcGV4HPjJw$;E_
z-Y1%L6`3%-dpI7u&scQC<Zg`FVb6gi<ZD~x@iM*hpUY)}GrMo=Cy?HeZb`dRcrFU5
zxM3YKUX}J%YO0Bt95I#JUO27fruxFa)-Kj%Cy~S>UX($>be%;z30Rw@<xi<!4aiev
z(*0JQsBWlzcK>pg33;-Ty%3JSY6{zTOebFB?U}vM{O{J!ABT3^TpiP#R)5|ea1~7&
zE3q#B45h#q=50>AZS`@`XR~9*lWHX!PPU?DM#H}0;>Oh-8@x9hu!{_IEyz8k@rs97
zN7ss}Xv3%A?>f*D6?LSs(4e9d70oF*BLE5$-YYLp?`x?#!HGE$(*un7^zWI&I;urx
z;RG8uAzNHOf4&)+#*k}j4!KO%wAa=BpVt_3dhKzVPLfS3HV|Z(l;q<Ii<P39(Q@Y+
zgE~v0Ztz<2^G4s5s5?e^HFb!LGVog_IDJ$RzAEGW&7HSqWHYonCNr;cj@6EsFSxt>
zqVl?sj))+6h_!5=ycl_i+n|#zxYk1FSMjTI#wXomf?(?x;p)7B?7FL~X1P1Q3n_HY
zX_a9&e|)q7axv?RCs1-6jM`a+vWe3(BFTEvTIiOjlrL`yXdy>iy5Ecb(Q+qUVpjfy
z>^@(kU;D~adLx&cej0ozMF;uDtEZmJJo`4-WYn|LrQ;M(2o+iHu=;@0SJs&xMlDDR
zU+fRRG9wn;w}8{DU6{f>5HsY}5f*zA|Fh5i;}p-whQ6m6Z4Rj<)xyyIv4_O&YbLpi
zT=`T9<v{`8M;GZjH%aaz<EC!{lWra!>h6e6R@V>>H%ofQ@wqO=XS1eZOI8|rd2{h)
zOGP9|D-DB84%9Zzwo^&%H<BcJI`RE@tY6WqJ|gp>CyXt`R@9Y}8VGmd%L@w&<fm+D
z1SWI~*Wig=`CFp4xDE`1MoMx(bhqA?B>$HfdxvqK3c4d6V8H`Dz^*pP6rO>%gXagC
zkxDO&@VxNjQ()h|-r5DlowQjl(simmK5m;kV%}yGtC2a06=LP}u7ErHV4AA)*P*P?
zcmuR=e9_zj!nc5qR(-Ox%t^wPRm_S`6sjK;Ck+zNtrM*$nb<$bgdZElK<Vg;yRxSK
z^f6Iq>&qdXUwpsV_ZDNPX+M?QyH6OL6XRWk+~YmbJA&m(c9Bv}`pw{=CCclA7dYIf
z((-kqblkagbCg`@#9V8OcH-8$7^BTix^T~6^FO_z{jO58nrG};QM$o<o7rlUr!F10
zZ51>|MEy&p7;fK_QrcV)r|^4kfI0^^#w#S$+@u|+!4bO`%#`NSIj|z5(CDO-AQMp(
z7LsF3P03F)NZ~ABUkI9N!msi(n2a6`;(fQ-TV`@>htO2Q)(|6P5AhJHQIeXr)f!|&
zhGKgh*Q0;VZhWb+m{L(sEuX1bp9oQ7H|C>gG2W_E710dz0Do1ucc8<Lz=gn7NtU3%
zE`^InqUc8h2&arSgrEz|Ks^EKWOB1Dp$l|>XGYbok3c<m>g`SR`Fk>!MVDV;2mzia
z#1!E@tH3<(VJRs~syqmUR-=fIyL_@8%;3^4XNUEUWMyk><YM_9ZSszKK=mMv0k$u}
z>#U4)r*$#WdQuE6_b|6CnyasF*pB%UB%X!M=Ob6-B-%{~l?)~;8(dg$zK3et%-no;
z_O1o<p@x(+6NHC`QP-l>dF5o9{SwoRc6l_|-^Q9E*CUL6OrGt`NDRLYYGEEy_%QOf
z_wWefO5g|n?H2!;Zmv}s+p1X}3vDh(8wmEpM>qtPTFu)Sp~{&CBe#i0;~MyswO(x%
zC-=}pADF&-s4Ou@6;!|(r;40$C<_LiHh;OJrswJU4fSV2inl=*HmH<C;oQsTcdP_y
z8yG$@1yV(iY;o5NVRdnKYaatU%lYZEvilimPf?oNeDHK_gCNsX55o{#0b8=~eK;fV
zJU@e1NX8=UX@dq^e3hPgE7Y6yZ|6nB*%T?NcpGJ}cdJaXk$6P8NL+my^-uKmUr(@^
z5BM(hB9i2zbd#m~a};O04aH63B@9hY&jwx;-PQ8&6S1%Ln#V1tuJ^NQ+lln3^<zbt
z!)O)-0!ko}MCk|`WjD9Qv|%~Fp4jJY3L02Wm99qXHBcJ@57vk#gR$4-`;ygH7{|!h
zKxt~LAPS)Nr5b4Gp1i}zaYk*g-p%9vL)z&?<e^DQAG0LCARAe#z?E$Q0=D=JHLaq3
zZzGcfW!4PIl?GHzg}fCptO(VmOVuJRc<*5h6xml(@J@(NAQHUfx#c=udT__HG@UCz
zt}Vm8;0Du7&Y%n)djGt0$~wM2ddK3m9|b79>Y6tty|7qO8jc!}=wwg1VRW`^9yb$}
z6I#4YD<Ce>1_9U3;BwF9ex#9h%g$O~$oP$(df7TlH_8!2umpzL9`D_D<v8duEY*W5
zbCzS6Y-+H%wQ|%>T*Bh*P?A_2k96*hx$TrL_^QUqf~%lB*|X?093)r8DY*^Ol-vy~
zLK~ctj&A58?mBVaoQw>YUEu+a!{c8r&#Q#vI2t%L5+L6#)C^*M8HT}N07~%{U;KGH
zj<g1Wbf+<7G7JrF_nrAOSAN@3L8J^HsEO49kJzwL{eF&rIya*!@iUYd5Oe*e@5|YE
zLI{3hDzMl+zm+wdhattkwsa;zLF^7ZeL%(1e;}-wt=!?r)(vS!^XUfeujV8&63P4?
z|G+~SmH&fOrRp*LFLEdn!{+=4LDHZTYW)M<VHi}R|KM=5%x-YX{y~RcbG@eF|Mx=~
zhtmHG8kvay7eD)d4`|y1Y<O>P_oy`%09qz$zDG~<qn^uEH~6D16|y~JWR84c;2iru
DAz44-

literal 0
HcmV?d00001

diff --git a/doc/screenshots/garden-mcp-split-stack/byo-connect.png b/doc/screenshots/garden-mcp-split-stack/byo-connect.png
new file mode 100644
index 0000000000000000000000000000000000000000..7f82a03ff55f81d560638e5c3a3fa89399b33d38
GIT binary patch
literal 103033
zcmXuK2T&8=_y4VeA}S!gg9->p6ObnDqX?+<PG}L3-UKA{V4+v(9i;abIs~Hh9zzKb
zAap_xJwOON`Tn2z&CcxIncdmBd(S=Rp8GoQjnLLqrFg*d;MT2M6d&Hd)4g@;F7fh?
z@BKT(2K?v&@2y*pZ+&?8M&BoEH=FF+WY2X!@9e_dP6*l``{c=;AEn>&!|(dn%qZV9
z+4ZCEvc3TImMGK~=qvN<7KMj@J3-ehx_r1^{G71sEZN>X-9iG+?T_-TAKcwtOC78k
z5pmZ7%DqoW8%pa*D;LYF9D;Bo85t`e-29P0{FE&(8EgPLF@EHDfsyruc@BdF?gEKp
zMZcJiU4e1a|73+z%b9FC*rx=Cq3Au3qbkUL0?3A>bo=WVHoc?x;mn5()!<^Vr?(-}
zgc3zf2FZ3~C5H3-+@5j1i_Ypq3`5x!TA;p31aL9?aDQZ63HK^VJzF`>PX``n!1MfY
z!*{mS4r)Ph83Ur5Vl&NR-(%a7=#u<f5tItnw;xvJg0dZCV$9uC*Q-R8ZJ`n$EMJHe
z<RVaigOpA$n`U0)H+;4|crwL`2fvjQ9&8-F-_Qv->4CJY)AZ6MrwbXIw$Hc8Z!l#*
z%5!Ue&8uKb5K<Ne<#~P`qqU1nE;|B-J~Btp@Y4iI)MaUT+va=C>3DF=5oD1UKoCVC
z{7R2NBYrNG&<Lo;juER(y^ZZMuB<C9%G9<(>)=6HZx7a56h*zW>PCAWIpuR1QN^40
z$OSU9s$DEu@jG{2TCWZz5|}yFkvqa<zz}zpy1J|CvY7bT&8VU&x2R1sF6p9B>~b)+
z?|%(|`Ivkk1=TnNGgggwaex<-TEI?dttvkY$&*rhoDD<yG)jN94a@3%6)wr%9D7Ob
z$2Tdx%?l#*zbKgV%Ut#Y2l&xhTVAF~Uw1ys-2Xg{8&MGVe!mzc%zHVLL70qN=h`Yv
zJ@Rw=A;{sB+;|f*O?D^2J?S?tG+U%z;prR7EjZLoG6q#ib(v;0L^YkC&K+{%nWyj+
zVXw;gkpW;xA^Vo%{6v25?8gh$8GgUaOJAMIFaAAwy8@Ap*rkUpv)#?}$a?;jmBvpl
zLZ%|2=6!n#Muk-+(&oT62A6tTu02&ArpcnoS<2*M5$2xrWXG}Rh5-E^feHqaI|iPd
zPQ$@|VGaTwyw;MFHNN$4#bEFx<!;JpTjMyow%T`Gx>ijO$FO=M$ID;tioF@e`BZWW
zB4r<ux&{}Yr-xQKUem2sygkhyvbuU!r*XRqP;!{WLo`&lD#f@r`T69)aX$RchL6~)
zi3hK}QL*#B&D2Aiz55H7>w#}%)!kHc^`fo2w`pn4o0(3VAc7I6mBy)j1mpVL^0PT#
zip3+uzbasRT&VY?Av{cfsuEar*Fq!{Utx<c#ihA~q7WF$iV@i{f&x@UviBY9ZI>~z
zz6l=I<IZBT`!OcCpW3RUkPWTnRl%{eVm6i(VZG6MkucKt9#GvF$f7jfa&<%%4I)qB
z(?K?3sZvV^)LOslvY?BtWs9~;?r)U(T$W`M&i5X4jN0#opBA~)mtO*!#0^$1j*^N;
znfCN^!6xQ0s@KDyGwYMYWbpfn^4xV9y(y4FSu_|@;Qs%bp>(ZB5@MZ_-6neMH6nX3
zTg9SMoQ)p&w`Ae@)b7fHe}TEC*H^Ke=0T5#74%Yn3E}nJXq$>Y&lA#%a+zL7e3rBZ
ziND3@G=N$<KkqY_a1@n}nQt%zuS~`kVcoNbgtq<b*4|B=0nY2p7}r;ww~C->r)?c%
z>%;7a2Gl!^ElIywGcW5wozABgah0K`V{AeGHLbR;ebsM0)(_fO(zVXN+hpQe{$juJ
zH=(>(ET>;Gyv{^k=RJI(zQ#qW7WV{lUxuoFcmy&x`Zh)UhJB^6v^>Ri`<P!+7QvSF
z5+4spjQCP1@t>GD{N3j34I9gcLAS=*z{(Dy78)#c=FdkUpOJscC*yRxn-Y`&$7Fxz
zEZJE*cHLPO)gZzX+UX$xSg%T^`kYuqGgnfhU)60uJ(yxgpGj{O@=#z0SyKt@h72{g
zG4{O3ycVz8UG7tab@fId1Wiv-62;9mUlt1;8@WQJSq+Q8m5$+VNgn^<UOE_+wc1=7
z;=Th;P0~$a0oOJg^sG9P)-V%Uh@_|J=tDkcWR3Hrc;9dvZ#46@=7K7Hftguh^X~&m
z37N?u-O^CELv!2R=_K`f=g}qGj{U|Ju`>8IM4Mr|HOYiAdn$IBgmwsJcr5bKjIuQq
zae{bp1-4FVWi)%xtEr@*W{X~~6ywgtvs4+k86XSaw_B%6q%~?_A;Jl^jH3`^EKco`
zJ;a|u<6;tA;EZ%yjjjR*(c4yRZsvG__q&<|^NU|)@I)bEje)O;kH?hc&ZG#JGpH&K
zBW;sU>PPHefbcoGO#lLZ@I;4rcU=ZAiV`u%G?;;V<dkj8<m#&^&LX7$*9iD3P@6Ig
z>2B%;(i@xyPF#S?{Z71m>#)O64!<PVRMb9}8W(6lv2a+hNhN9CRUF2|qWoSl{vF}n
zqzfs5Tm9zynDsU~ArF)EHqJxXl!0{m(Ah7e6x*tFX+iGs0}T0Mj`*iz@CLZfQsYW^
zy_s(Yw0R4dI^k2ZqnysQG3{_AWcW#YB8w=5Q2$2m%9}md!X(rxpa1*NEOi>huOE6h
zZ@7?dE>`<gLWBp!mC{jAgQ%U8NV(d<A2gOiYzeRDG|H<gO<_;*!?VH@!zrf%D8G@x
z{bTxm7ey0Eez)|H**q1}8R~0+X9N(UDFBtQlGfgZTI=Tda3;xR4U3=qS7h4*UImyJ
zn8J!Ze*%k<jI6NvQUp8;AR@CX+<P+rUZ<}M(eCVG!*7_0xPLyCFc!ZYG_IAX!y97$
zSY7T%KX@u!V!Re?uFgQP%-|h)dd7O{9Z|P9W6HEG3H;q{*obGO=eW&4i25NS{>mu~
zXr>O75TeZ23MahKA=RFOspUQ-WlZOmR_wh#N`{Ywcc{izxj6NKdl}x{jsfNuj(?=1
zD(Ux}s#uS$NUGN`yp-9VajqYN(|!2=4}F7desfP@wam6a8ZE^O-sRG^WQ*|*^kHlb
zs#9-LfYki$gDOkPt<wBHnsKd4+pN$JV$<zgAUES(Bl5-26FzY1fq8}yOLcw7maXWi
zyby{yH|yQ@uQ$m6YdfdeXhLMcDDG81Kmz&Dqz<UsVN|JgFtCi_qbX2$Z2pnHF*<>2
zs$s+^k%b^u3oMD>h<6Nc)yVJaQ4C;>B!tddQGx)*yHdJu7##!Rn{u9pQ96a~9qu1Y
z6!lBSjH$g%KNP!%ipFgl-4VBj<%zAjf0`Jx%}ak?S!rT3>eL(DQr9y)68%Coju6@T
z{QyFbPv-th_8U*%<M+4!NvuTFf#u6#x4hKWTrJ6JmxZvW=Ozu1x&u?1Kp{&oW5tLy
zY@_n8(YT2Mt3jy|#jFJ3Kg7^H>*r%3=K3aXpR@+BqX39BD7n=j24p-S)praQ!X`1}
z=~oAB*=C%g2x1IJQ_4v(Gc}INemqaN1yW9vU-s4ID=OqyUc5P-{ddG4+GN%7+@bii
z;=x-wX8gK>n({%QBaTGPu)BF=)iT8>S^3f_q-wK<;`p|>1Rbs9RZl2y8o5xof~~On
ze0P^T60)4jFbvT~f@|VGxQ3U|6*#ZKWPB|4>f#}N2FB56!<=|8XPElo0|tM#A!ZU8
zXM+AP>upb0*oliF4lHJ^ueNV@F$SJIQ=7F-KCMr(+a5^MdQp(OYoGPMW_vk9D}Moh
z=UV&WN}%`=c*sa6z5n%MYPU7)4DY`d2sGZKw{eOi484U)nJMZNZ1P&|N;y0AfKNfj
z?{<xv!`M$tzwAggNc1go;3ZB(c?01FkWM@2s4B^-`?b_qn>LFVli_th0jyMEYUtLV
zycxGw9n+OsFRfq+LT9W^$v(SAG5@;RPdul>C;G;Zs~}G=sLy`TLAavpA9LV^@`xs~
z1jQ_%MXg}29QYV3sR&aT`ng+I)AMQDnptZYVmNQ6=IMpU064k{ltvCJrL#@!8@hdl
zUme9$Xa(4Sf=QxFGd>kWiN}wEFddH?nE=SRmq*~%wK5Rr&rSa??V}tl;Jfwx)HYmL
zBPP1ROa6S|yPLTF27Q;GOw6}qd4VCSAJulq8doZ8WszQElLt`XaY-$c%pX5=O{m`W
zPscGa9t<JUCf(oF*%wA_@gEwa%@Mv?{E2d18(qV_Mi?rd?;FF@4?FUa&G2KVPXbLa
z?`v?}Y3|m6BK)@K8qu+<>z<yg+<%EQK6p!CSpKIEpr=tOIDsL07~~_5j$u^nbbDhF
zbWyhvU_dl4wNV5@VV%%7`<!^1&}uBl&<^3Ny1<a3TrEK%5tB>=ikj<>&LzJLx~35d
zoNCkLvX0C16TqedIv(c~(o^Ht_exXV(ngZ(*l>`1vO<es0fpsGl2`%Blh2!yZ<PN9
zjpRk?#nE_vi>c=n!WvOHR0&&3c&*9MH(yOgwdLnUl^X_{`NAw$YhJuX*BCO&VyCZK
zLt|Z%yNmi{uu^8#L(*6P#4yxXMDUJtq+>J`SeH}Ratx-B5UW%me(|}@M#{}|%i=h3
ztWg7J$OnxE&Y0%~8@KRLT*u(<Cc_S)vz^-HXb60$^mEZDKE{yY2n;xZ0^I{;XjNoB
z&JN)lk?qG~xDY0xOdH}mUjElT)b?xBMgVJcFcCbYK7yB!mum95xqMk+HOt9^HF{x<
z7NI=?7pyBL$zYA*pB;nKmC!Y^AJH|A$0B{1xZ(T_q6G(kP4W4{5@=*=p65Upf5DI`
zH(VPevTFnt0o4t{5aI|-banm;!}N&y!X7?s>JfN#v*e>MED6WTnS}FC8s$~}gm!zy
zou>iT=bKIy#bE63`@;INCoKb0=<!~D)nSjxY|n_%A`16WkT?w6SvUbzgjSj!x+d@V
zeS$T*rWBaWgO$oqc)me0mwQaJKC=C~&=HQ87%G>?8pWjJSS={w_~g|Qd`z+8j*#p+
z0iwH3?6}g+bR*%t|6f<tQfgnA&QNGJjVy6wy+6j|oMyDkZIqIUU9=>Whn_mk2FCir
zqGjgdiud@5-qN!&a{J5^9#g2s9o2X$Ehu6c+cQQYY8yK+Q{ylx8%?P)i%rAr)Y1n&
zqLD%teB}|urq*c#tl|~QXT&R+ZpSJDdrix6uhLW_(!1m5!Y4k*`jt966LgNi%0W!<
z+f6w)V<S%J`NflpkRg+?(2BxGzldHjQ?dyge%jpgBFwI;rQm<w)8i4fI*d;a7Q8>0
zQ(B>NI{l!4PKa#gDb|SY9lySC%)7y&WIn_3MlBgH)pwZ&;9@?tMD9r9QT{rM-#m)A
zz<sp0F}xyt4!!QK5^1-f!^gTg8<=W*MvGXF*=)+W^5<AWs=QZU$5~U>(yd?c=LvBN
z^oA3N#up$a!gR+pIqcn@-?)f27LDUGb$TjMAvTai9Ni34^U`350cW_@|69%AlMtXr
z6Wfx{+b=XP{*MLJ=n-~V!&tH(4=vCAqOf7F%r!Bv(Y^A8Ef2Nnp+#^t%25QC66MD1
z{DVc|ja%XtXT(VbF(%H9x)<W6pA4NxE1NL{$oVn27t)h8{bTM3JZ0|-)1B#ML75D@
zxcI_0^a@U`TH?54p^Mr8+)DuO<VL-y-Qf5-L5w)*o%=->|BT>mBsmRy0OOt!MKs5p
z!80{4&d1dObXSgs0RNv~C!xSrL0_2QGpv*tyk~?I)SrzrHEV(b@si`fVf|&opdn=~
z_u9=s(J-Fg8rC-;y-sjEwRn0a;P?62@P@z0`h9rCf{2<gtjMkY!DU&B)SZoaVi-y(
z9!<dW>!3x5mu;g3pV4|1RtnVE!1Xaag-BE#uwwMUr-qK`gHWs*i2ctvPuDS+%L?Yc
z$%{me`x5=G++9wQM_=+}W@s31L+J~%$|RoD|LFh<J0k~Rhk}{o#Ah_y8q#pX#Q7}H
z=imBYvI2IxG%g1>{A`E)2y8H{xvT>$K##7<tJh}w$S$YQJzOW4NT{$$UmmAr?a3N?
zpxt&GyHhk+ENm?$%jC&sL^`oXV%rzU6e>0s$)soH-N#@h+3+UW+&3#jc$=p|-?+*5
z?wcYOKLLSb{`M)O;^kr`(8XHFzeiCyI93I^HuGhvV3{r*tLw@y@EE%Oy(eNo<%F!c
zW}-)aSxinNVUxwCl3&oHNmC!=ZFB;hRfsXm>w}f7rK#o`eo-GG&pi+)gq>a{cz6W(
z!rlVv$8Es<E5f|>ff8$E>(6L&j0z%U{#X?xaNyUiosJP=dCq<h^j(r6EE?ye0IxB;
z*O-VHPx<F~h+5Lxlid8IK9Y5Up{3%KM~{J3gO)GMz3GE5?C?adYWpJi2wYK{yL&Lk
zo7Z0P&sL70Z_xPF7q$`z@M;ku0*YEF5UoD5@=B*BoEJMiu9fE6A1YDCX}Kw+ay&Ar
zW&93mwBAjBF=AIQt25kN93~7xi+E1rCV$29BBOj^T}URaIsb3Opk&j=VYA(U#0Oii
z5ghv?+8SQ0-7=*q1i(VCowHI02)>H1A|fBZSAB+&FHQ+Wi$BZPga=5j4^6g>LXvS#
zk2w23T>WnWV9^~t^d2Ctm<jefTW<c8Q8<?D2o`)Jb2?IlYRWT{u7&yGVAk1)-99${
zv}%|So|TfDTk=Semwr8Hnm*`M89kt;JJ)c$Qi^?!X_McLrgngm^>!}hU-aHopJF!n
zG%{NKvws;^q^PAVtLhvbPfGQ(uP9cjP#Dd{?%(Du%C|_c{3~#AvAbtPHGdfdaBzUo
ze9jH>yH9947=P8Qdc1xm+5QQ=`_{=U={Ks)yla+Ak0&+DlkesAl(T{^0H7N-h6a-)
z_++;FzCbmE%J3++5zs8qkgVN5J0dowc8WX(ofom{3r2bG=8hyUB%kUqjOncbKC>e6
z`<*tNoI9_**3rD&<{+=O-SMjrWK?`o=8X?ag08~6#Kjhn_Sl&X*v>}B)vvZwvwoZ!
z)KCAO_{PWKep|U*nNmKzPX6<ii7da<1rex)>2X8ZP?OO2n$7|9#_{QfR=b&lr2P(P
zZCT6wl^EAezuR%ME9EQ4?bkcd$=g45dy+Xk!9qTVgFo42d82)+B~fpj-tb7T@BDzD
zo&f{8?SVK9zl9s$S^FXIW|I|X9JoKBc$lG+o?_k{1U$%yY6M=6@e;c!C(V#>fNjh7
zca>5t&I!08A2c${-0*0f=csCwRoSDinZnvhjCa}umUg-Z8etV8j23_8nYN-@=o!iv
zHOI{B8hrK?uSe7`_Q@cxK_A``HYl#!U1#z0Ehdl25n2&$t%S=Cc!x=a5-+yzv~$kw
zevB`+)8yt<{Mj)&()8r&#&veOqXaj|=;Y}DJGx@$%}($*joIR>0h&hJ_KpR~SA7Rf
zqVn6-KRn(sFql1Y`*fm#!gf7w#3ubCNMmIf3w=8h*89_CB!Y&TeKV!*IZnm<bL9H$
z#iT=``oZje#@Yj&*UvC<JgBKK_j4GTc$}<4`l811G5!6%guBZ4vwQ6z93^W!s;pu<
zBk$<=#|>T(7pIIW$!_=6QWS4g!jO)Tw2Z4RwxoL3xbz3_%R{-w)HH^_)bU-lBfW<k
z`y9%R7N<&p<5LCWr$83M$b(bqLhQG~9k;<H+N>!QS?+YjqIPC+WK?ogD7I&-6O+fn
zo0Am0AXzEWX+4Ry>ql<S$WT`i#0r-Bu}4kL4<;*xaJ$)G302I<X-n>)a}?8{MPNd8
z2Y>f^f@J0KLcl0TxOZj~dB6zb+z7ZKXsQqOcB@sB!aCR$f8EZoKcy|XPB(Hqz9%B<
z-Tzxpuew8q%LM=TR#bd^owwFEAPeVB4LHU`xc@etD#;QzSVq)wF^AQZ^;vLsv)l24
z&w5T+ZY9F)6J*LZ&H`Nm1Z}pS#%z9Qk0oF5^MP}ur#yN8+oj#BUJ>=7^`?%6XtEK!
z%!Q}M46+)rc5togwB)xYWK7d5(oB2lM6;q1-KMZ8Sx%f-xBCrW0U(VcluN-<RD^Sl
z>mXP~ZfOvs>o{XptMyEH5^>CWa-FUpu=ifL+A8&<W7|4NBOnS>*qS_d0X}WmHE;~l
z+Z%6v$0a##W;{gMA7`J6VQ!IY_vM1Kqo5lr*(CRPfH5+Lif0&y3q^1Zc|aA)BMzNL
zFD|N(`4Sd0Uf8C`ShGi`^w#g>B*)W|g_BGNZ591F!fr^XuLm4Co|EzXSoFgF?bw=#
zM=uD~fP-FYnp?!OB{s3Y3haK3#|D@+gO#XI-&wq8TV<mnC)+tkSbRJp%Q2IdWC2_2
z7zg0xtkmg5!H9{WS;%5lb?5uJn*x!YBD<De_dg?7BQrF@obJvpc8e&J0-_I|KFRf)
zSCO$BpgcT^KzcUtTWo<9{WteJd|Ut8S(GKlZ+T={my9{|SV62ayM5i~U1!(iBo3*4
z4o^`?3gxT4Sj<9(TECoWR4)IVnaN6eWQPXd)1T@M`XSb>pc3VduBI#W_Thue9P}N<
zp-4S|jr<ua2q=lFd&TEjv8Cg_w$JS66~9uN_|7#?HMu~eI?A!G=s<EWG-5Wk!y;-T
zk|DS|rJ28V*TqEiSnL|a-&ZOYmeR<(a4;h>k*i_7-E892ByLj$`ic_EV>{V$;^rFj
zT4P`cE`o=-goKA9w5l|!cS6T>v_+iawJe=GA`(7HLhNlgSjKa5tT`&0X(6s7RXW(i
z`@GV&Cck0E5td33d+iH#DC!#ih6qCPZ}&>~>g*x=2}p2vjRsHXJBN?a<ysG~WIp{O
z|Ip-?De0}1od6#;Z6?*7SQpA9shab3pWM*+t{3`zN5~$8YEC>tMAWMk7ZwgU8RB`t
zzx=nRwi>tJql|abaRsh$b&X_6my??V12ExUZxxDrvp#O^?BJBdM0QbqOz4Geszv(7
zxFNf}1c~Oy(9uvGpZ$oRjKFkMt<H}N|C10p^$v%x&v#8rxfV6XDyIJ|KpIt@CaNyH
zTw4W5aN>AAr_$Qyi3thSxK>+p?~E;~bBJ4Gd`L1!mb|#zu&t0j3To3e_%l&=!tALO
zqj-to)WMLMr}gW}o?aLu;Xng?Y?yORlDJIBz&U~U+N$&4+ALpn{Vgdu@)9&b*MJ50
z1t?hC8Ak-JTs^?UNOBS_%?-~c^m8I6rOe`l38fwCf$^H?pZK3*K<{Ncc=Rl=Bo-fm
zaSFWAKznL&`1l6w*^Vw#CxEaIpl9QG$08pBHwQBkuQTy|!(p*I*=Y$YR+k1w+DzvM
zd%K0)RlYu5C&*VjewT3<?63W(*p~KKPv<X_)9YNr+7nz`gbH-HaM<Gq?q}|A5q5-a
z8`#JzFh6)~$x=A=x#BMwf*m@`q9)!Sag~pSjXBNs1s?sP8$58V(`mMO<+4F}0Uw!q
z@=rkrX6=8A;D+e)9RK~<JYWCHaee>}liq_k&3gt31zeYrSm#tsRkrr8OJaRi9Game
zKc1L*tNC@SFdY+LJmgk}10rn3QA3cr*t@bd76w;yB6oQyKN^mL-tPRz)V>uP{d`nn
z+VBs2x{VKd9cn7hBIN~`E|jDaBk1iFoD`4JEQwwOSP2WK_ve)L8g1>Owt}|Of0j^b
zfzJmsJna}e2`Zqd6mk+x%@y&2eDkRhR6duMA|z;T<ImmHA`7p;*Xn;6bL7r<r5Q<Y
zdEn1U@XaoVzyM{xQIl$*EyH{e28{t$QQ(1$Ae#{a@#ZP;E5O81W4cC>QQ<3`7<a4h
zB34qSV~FEozZ;4?TJM?nx;YnZ5_~STn2so|BNI+`d%is4cP}S_?e$NcF+s}j!?y71
zrC~Um{Q^?l{!8Q(OAiffJ)vS;C+EgAuZglmyD^qNAa^@w;k!|etPd)EkV?*i)?d>{
zyxqVQURL6uv4>*zIV}6xJ@(OeEj`0Ch(BPbahIVgIxg+{j!Ql7b|MwC((Qt;XM&G<
zJ4=9NAr;?niMf9EXHB_mv)~EaoWwBhuuJB;Z1MKrn(}+&=Yg)v%yuQHdoMj+J)wzP
zV61Sn!m9`97mNXeUgNTU9*_T%>%F<!3tB77hz)FdrH23T;h$!t`!jv7k)X3~O%=r&
zD5aJ5`AHf<t3$s6P)}OnW|sfb{J*y-(0$nj_gKeQfR#N}%B2q_+#1(z9Kv5*tpzQN
zNfWKVDKs9nb6^ctZTEkPCx%R67ueZwU2iIy>v)EI@@?ODO_gv+j%B;3e<B=Fcdz>n
zCT~gCGtJ=l=kZ-med`X{vMq@|L6s@qdq=P%=<@?A1q;u8w-9V+*(engr+r2IL4|JS
zX9dJ_W-vXTgeSUi)h#ZR$6C&8m2WSNA(TRE{Zwh}{q_Rf^j8hxYPkBt&mEz`SGDYY
zpHD1wP_(o~i(p~sl7|%PFMY7_gGZk-ldfM^{MHOK()liiVZ`(FiLSh`RYdrHh16=N
z<4l(wy7hY9jR{7T!~K#?R0=xcC<C~u5(d#6C9Kswdt;+Avrb!uNqHxF%+_()bvrE;
z9#fGW&#yXGBuM$Mc-1#z-jP~)Idv>oFZ^-1OMVkd@DOV1x%J~B1QGh`EIqPLgYV*k
zzx-eEmr5{iNT~IkV^id`G1hS_#!pn=I{B2ivBE<T5O57+GkG3HJQ*62h-g_IM*5jp
zP}WR0*z2)cCX}YnG-Xg|vlTC=`B91wMV1|Jx~Q=5k3hh82_Jz<B^aumlple^bJG(4
z8U1)HNdvERR4nOL=zaa-OtKUJo0p<~%9;Z2nqMh)>vQnZ7@2fy1iB=*_Eq#J7HRKJ
zcS`I4w5LaGtOMJpez3GoO<yu!LIW#8lSzmLCW9)2{XEF$BqfI6o-UWiC1Ul+wT%AI
zHAUwNKv2f1(}zyC7n&>o#{wFYpEa3mR3<KbcIJ`)QQBNNYh(3$(bvfsrm#S1q-4tT
z5dhm^R!wit)dtM7B*3Gq;z=qogrWH?eIk5dl>l{H)_S&c+K|4OYtov5BH{|pc2Bs(
z<|{+0UCOpQ7yicVkl5v9N8S>F_U_4YH|+hYb#{-hQ<!5DzH*u!H-&w7f(t84KpvjA
zBDg(JRKCPCRJi3GPB)Xwwb~JB1v4=W{e`O#vH17MyLosD8dCCx3%AdH8{o51za~8t
z4S4v5h{r<I#CPTYh?g*45mKr0oUcq9^L_dn?l7<bY(>P8g=Hm9-a=oDN~$0Bk>JvW
z(oBPIQJ!QjV(7Mx8S9V0x500lIU=OcIR?!+P}i8a=?Y|}%LYNxaRq!?^qS)2$)j9a
zBLbkoyV>K=z~LYY=xgrxvHX=$RJv1tm&D7BRu+s!Qc4d0YIJEITq3}Tb`h@jAyJDh
zsSpTPxmGH8UQLW(da(G}P78Sb6K7w#nLOpF;Oc%J^jCk1o(IV5y=gCgjj;ogWhi!L
zR`#a(*#f#g=Vm11)$vzsP5?n8U7D0yO#r9lRAqDLt*Ln%j}@!o;<G##SuFogy#tcz
z8uEkrIGEw(0roOeT$3~Bhe+FD(+G&2hL|HCPf7H#i>%eZ3j8Ff{`j9*=YHQ@gD4Qz
z*MDp=86LoNO<AQ7n1~LNWvza!#%ZH6jFNFg)7Z(Cnfq702?UFNZUK0Dr@9VizxHqc
zs-_!)yR}*%>C*8fEZ5upQlr^M__D)(qR$F#KlXI*4{;M{JN4f`g}n>+MxRGLKA^A0
zV+l~dBDbjroB^bE(eHQWr~EO20F2qMAyZ>QNzgiEB@;U$cbqlZNs@pKl&*NAG%a;A
zyiO84aFHtz`PA*-#pQ`w=gzhIeR}Bo4Jxaawsy|cuVWVuQgLHu(wqy&b!kf{Ui%q7
zwD;;2g8$lSCM0~ZO*|2=nDU=jkrz%RrU$Q_cLB$#K<6qaD(o)cE;RaWnC7LNoef!f
zdtO$cHmzXKpwr|Ru3y6UcswW_I8XO?dR3V|9CCqQrHbB9kfdw2A#RF50gHw0oCD>H
z|4s>OauqkcCu%>^zt1G?@y?-wHr7qp+kIj<LYvep|29U{(j<ZTknto;GAzTXbeVx_
zUb~qyU~YsT$9<;7a2d?}!*RD39?!!&dvt1|$0t3BM{^<}?6P5W`!K`vC(cp})u*(u
z{S8?$%ZAFEevz{nH9Bt6JZ`2(f)7?oa}?y9^-mT2NdXBxXIx~pUZx`RTE{^Wmsj|#
zw^tGEX~|l{{=KFXHQKfn{ZmhKVwq^@)3t`zKXN9%a#ugk|EOTqd@y|6Q;6q4h`>cW
zdp)I=V|KglC~GS=q<EfIv`-&Kqyws#?O0c7UEc8b6{^<s#HW4Ue_3sX*4mI;{MhBD
z73?i`)D;~(Y<!mYyDB%Op}_yxmeJ%?Bh#s*Oi6XL&2jQwyH1ls?vs!463@LCL_W5w
zr0%1ELHtX5BlyPJ4h5l^LOSHCdq<Xt=tdGwHV&9z4&AJBVaqpHh_!CFNmM-YWBgxC
z=K&Wxr^Z>sl_SO#Q=bRM*MHWbW-IX8_Uk!I=fAq*jG}a#IE21O9D^@JI!=W#0#agF
zDHA*orNeo;m1v({Wn55<ACWBOT^_LI8{7D!Yl_X&F1nX}VdU;>1QSy(Jc3vNs8k?g
z;<9{OtGNtcSb0GXtrl9OerSXN-<UJl6}&rN8}P|!9`5TtfH%mOQ|<HF5Vsx~I+b`u
zn%U{tqn~~XwO?R}jK{Hp1!?m;SCITzBT#^FTnXd|+-oi5AFPaeUPnZwexlgv+861M
zvD8gn{+?ZX&pX(=87P7_>g`iyQV2xMozQ)p^AT+KSlktZ^bh~qZB{SUcwTZQD7b%^
zFv`1`Q3vd>&`?iUu3v1DSbE4O+eC)XO1ppKXORQ(^?ZEK&Lfh#WT9T_7eGn#BSJSy
z0{DAm>1Gb5IA9G;skt8#bR&dr<uWd*W?%;K29Lxi3q+;}2`L=!(!Dd}+VjcPTCRSy
zu#aJYQs3^AEG3n4J$TAw-28pc=7K4$VH5Y3^d9C~w|2uVcWLmSf{OFmH1owVhK^9*
zrd=ZyK;Ne@@BjC0PP7m!$;zt-N>M>kX#VFZz6wHcmXH!jDb>ND@oFB@m(w-Jt7pgx
ztrcL<B?x;ImUAI!U)}C~&jT_wBA7nyDLRRr4W%l>yGJ-|^_>iNyg8UCn7@Mt8fbj*
z`g?|Mm;Do`p^+%-t#OIhTC~RP<9EB+TBZ^c&E~yNv9A{=Igi{r#1r9|@*G5@&K^RX
zUtY;RH^fk({tJu+mT)RvugGgUI5KW4l~tBKcV}n%((>2IeqxJbk=wK@Y|C0)<(@c+
z9J@4kMd*4r(#QKMFATd7CB4><wT(KxJp+Anmzd^@dTkHRm$U@7gH+m1PhMOtz-ZcU
z5E(ziii}m6#U&nI2*x;e>`qjAbxRRb@6mw-C9rl!PL0HuOn8u@uf5pY*&71iG#yVT
z&EGWJFM2odP5HP57`DKh>X6}FhZCB3JkVj)u}p3odSgsWWM2}=Hai=)QsE3$3wy79
z`sBVWp%MNinu8VQa|R{V&efZrtk{?e+Po?xDPI=qQ28poDh})qeq;`obQ@PkuAcNA
zn!7g77x}LsHEtUm8&{Y%ouA%TUvlx26VtzNF}>qx-zF}%BkzNg3^BhGPfGG4uD|R3
zKX@hL#}`}Nrd>(|`tlp_!p8Rctm@j2qMJeBY;$h`!e49ab=cYQx9DNivYn;vqu>zL
zZ`3ZXbLiu>ZZeK@nEXWX+O*qdwb7z6$+x(d32_TSOF4603P*T~628=5Ri=b1R$shp
zGwB{@iIP|#XGu<V_GJX;+6)*nbDiXNy!7S|)Gnt$8*ey@6jEsE)|3{d9wJ042HfXG
zu{6Zo+tAH(Gm#a}bK8)xZ@}8$kvYri|F7q87ok?aa#AnSSGns>zf-tGXZ?UU4GJCI
zW`2{K;w)4YpH7Es<%qrFDNIZ!$bET|R;6}7>W4(R_hOsfrB<GfO{k#FL&)coiAaCd
zNZQM9_rK`G(>y8<XQq@>eyDGPxeL89lr&Mw<kXPnMmkNTe|8hfco#waGSh6!I)A&$
z!P?{U3)k~j08s1e{9zx{%2DtZM7d>1^R)yyX1_kpqX*H=a7;paO|G$oJ39Psl$1;g
zi<GLynHsJ8Qy#l)s$UR>pfY#k8Ev_LiH>Z?6XuK6WcR&meGP?imbQGNy1cREnu&aS
zSCPH%!W5?~`TJtL2D|e2FB_H^4CS2{c5g6lH-~}QB6S1d&%jHlpsN-G_8M;*gqNp6
zlJUvIMHRci<=34kP)F3!@9aBh-;!Zo2*$Meycbm4-E|SdsWs4g0BK;TqUkxiV3Sym
zQMzgM6uAyOK<3#K)^xXhES!&%>GAY`KdD%>HqE&0o~?4~21<Nqv6eGfrtDo&8oqk8
zpj0(egN&_0J5Gcj9?g!IRnEPj#@Sf!6+Ls8{~J#5=rD_Zp_WIivlud1!^&+`L;AmK
z5PBNa-#P_y4XdxT_9V2HBa1Nu(43H7Fu)i(U1wJ5gjbQB2ffVceui{93pwlrJ~y6>
zw;`CFN6(1VEBmGENTSwGH|l%R3SwWRoX*tbV{k9#$3<8E*zTq>+f0QMKIXmGGM14$
zt9aJ~PJc03s$&IvTEkGE?7M3;uB@tvJdhqxVUyL*U5at;Z+PA{l+pRQ4;;f=zwP#N
z+2*>oTwC4>Mh%J~rj#nXMh%(Ve_h9owvODW;t1uA(GY6<lwpY}_0r3BEs7{Y=v)M1
z2t_-owD%GnJ10V{2<Z$(q8c3TJc?tHAjD+0h>x3xFFm~vb*YD?ySg(gka+eeIaQ{+
zk2N%+E~x_WjY{R$q-8lB9aVGB+vM}S=FZ`qQBkOd<Et~zW#v?V!Ju25)cfSCso9R}
zH1@-e5~fyH#zJ;XRj2!j(M-Qjhhu2%bCgX3UzREgT2vsg`=XxT<YSq&RfdtqPBz!U
z76$_a{Dno;oL{KDVfrg<^BuFg7K3i+J3{`2a*XiF%fVNJ%>GL^(E&Qq-L>_N21>-e
zssG_1iCIH+n?iy2;=9#mR<{c4$mP3}!y9@v#sf@JNQWod|0<L1`p2H!yO^9vpgyIb
zt8WI5a)31*^|(Ue=WH(PFO2uBh0p!H5K&qjYk}=&8_{6i;!@j^8_yC1rfE;kE-Txx
zGPg|TyhwPjdZa#W<Hm%T?74PeP&rg+>*z;crAeb&yhkJVCM&CEG54Q-EEdt0U31-g
zJfDE4QdjV@kKDLOjNz5%OM&Z-2rUDjgk*!JJQCd%OFO5Pys^!FY}EQWWe`7u<zYAz
z40mZNeo3XiOxA9;+tgmq0d-pZlbFae`b1)1G$6wPHE-VDl#*@;`yQrNMt$4Wvc~At
zOMB$tnUm1_PzkFBa)Wast-ls4_|hx3C|hI0%Uv6mTfR^p!@7-lsI@Pp^=^Zl@XGgP
zuujm%F%=LKBrC%iM9Gry75-Dgc(d(uXzljur_cW#`b`~Nl(p5U(y!3}V4VNuJ+^Jo
z3zu{JYCY+aPS6r#s9%us1IpPMo*)+kD^eK4IDN+X2V2zB{@ZCHA2s!{g$tH0{>e^y
zMzno!Uaj13Lp$xCqCQt4CZ1saZ^(0GixMZ4C&sta&{V#7&Eta>Om_#fWyvYwM(yEN
z9;!J0i)V10^(#fc7(Zf+9cR0s=*Kz23wVFtfC4u4;PzQ(UvhK!mP-m>NK^#E6)hhj
zPNnsDpC5|L+JT-5Q*0uc(@nTwV=r0`ASd<(e@~O`1MB5PR333hGBC}0?l`m|>yQcL
z3%w#$76vCj6!w;=4zEmj@4A;?QUnf4^Ak58Y?-5TUpMV$B-P)3QleCplE@G|)X6@y
zzTIHwuAkm5nAhk=0I9mOyprDP_V&0o*3U{3TwgB_#PfzYg;fI7wDwRfiaSQ7TX&oN
zoScNp-+jn)Cz-a)Vf#fR^E@6D^1??ko$jn;SZLA1XrmjqtLUx`amOI%+*{W~;nP=M
zwof^8wa}w=qzd;o4A>%jCE}O{nPBonu+ZCAmkZk(C&E8W;nKz!BRn-+K~?nlqf}uw
zuGJtj*miUwT;LfUIeBpA>E1M?*E)#M`sa{F=_VK4v#F>kdxd*OQ?XE03j+gl@M_Dx
zj70z%`n@hj(P}+U=K?c4D%VB!HBcc|9wT2TMxrB5=nn|Cgk@$)ZBDL@2sUfvn=~9v
zmKRXGdaiC^Eo;-E_0l$P;Mn7uXREZ?kHdHQSRjhrNLY3FSwsuEpb?8SBJ_wC(x>8B
zt26)uRCJJ_3r`E^3T=6`f5VHOvPv;HJ|?BW_zb#e^;Dpd<`|p}XHR$gKNirG(0DXE
zxwp6e&yYyF0i6iXZ`uE=@iSwh6)^z+7aCUf^1i#&_tyzW;`x9s$bJ={Il88Wq9+%(
z6Ej}y>t$+FF#79?sdd&+#&`${<U$j*68H9eVU+8{qOCh?{Qv6AM)N6YIDsa9TP|z1
zAAd`IVJL&D*Jhbrh7nJ7Oc*ryR;5e;$g5F-RK}@FdgpO7Q+jk|h#e;OPqq2&(E{f_
zq|+3L^K~Jc9FzKo_|}+CPov);_U1;k$++h?+Qb=uH`|h;L6hB7z)pRm)U9lJu}0TG
zco_EcjY7@+jE?1racdYV{oyvMb%Xwk=?*M?-?Po(Yq1pd=!U&i?MqM9?WukzqUHhd
z=*P*Q{;V8Z1$9lUcwd+yAjm2cmETC_uJ0t)JF2o6cIf$M*wB@H!t>j5a)0z<c_Z1`
zqcO4{RR4l=z?1)efpg-6_Cp-<b2lzc#WG$^P<}5DQ_`Mjsly=KAwFc(VT^<iSEfF#
zAoD$i`asj)F8+)wa8pVAocDNt>IXdTuD3JJdvmShGIYdK<i3UPb#?E<NKLl1N7L6R
z3GjSTj?cfaZvi^-mt&b^t}QadLqSV>$F09VBnHc3;VTR8W{+aFnhj27Nrr1R+Jm0}
z30+BxK?3?e9#P9&tJ%Rv6tP|UqGU`gC1>JuzH<Aug2iu?5@bPVk+C7)aw^W&)Ec*^
zycYZxI9fi@B=QhUC!cFH0tpz%3Yw76kYaOsNOndgEdv;)ZwUCL8@!_gR3EcR*pm5U
zPu9E)+N1rvhv3c_U2Fh!?cr><a=gmi_2OOx2S3i2xoB830?I9&dQc};YLQWBF2kR#
ztQ2n!M>JgO>7l$eYi;GNLk)yPARx`W>{WR2s2ubj^;SoFvbahirHpy6gx4ZF-d1DS
zX+g4Hhn7*3lruLpW?|lK!I<j$idZuC{`N4H>6+N{{YsXMo$pi#&Zq}?iuXvl-?wen
zIh98bgf1`EbqZ|MA|HSGk3zUkF_lqby4qc-t+Hi^SV%L$jgX3;9Or~N9f<XXiLSmn
zg#MkeLqfn8M$mH=7t(*#u&<1$zmt}FfO}a9Cv)(-?Vx-3+@v+lC51b~B~E`<(Zu>U
z5qW_&W*>EXVM^u2!9$p{TR*7$L3exOiV45GC)feyzFSAgj7^x;#kiHZsm=9&U#5<%
zf&o2aUuA`<>!RG@P9^9c&5ECmxBpq1;BoU!jCSQ3?Uj8R3*H3YDC|UOgsPbQJdwRG
zjr$zjJgWM-F&R*utr{EJbSFl6FEhp8O2xs$<EPm}xv$!$<SQBwr(i2My)r#K%D|%O
zUE&`i@t1v!Va&$Z<>mt8-zX*8!3P#wyJMV$-e7OVUCmuG-+!ScUuhnvjTDMlafn1E
zPN8@Y_=R;-&P(^_8Keo7la_WNG3672miB){d&*qpwWc}9zsPg*IOtV?l*3eIwU`s;
zJL{#s3j8xtRCW>yeRt?C4pyVpT1y)cK3(?5S-$<lRzv_1CKMUy55rQHkIW8Lb)r&G
zX-914E*)BNJw$-sad`A5OSS^u?v2M`$&U^PhmGESkNex@i!z8dRZqG=G9}u>77o?j
z^G|6N_}}BXaLnVe#(oj^UUJg<gmD!uB+Ps-dG0jvHqaZEn4qh>H%=KfeMsZ<?~jYD
zEK~#hLBa8LrJV*Gc0N?A`P$-~LGGFy4v}a=R0nFV{f{DV4h}?3yv6kP?zbsc=rso;
zq;><Xck{^lCX>2W8%iE&ki)U}Wo@K05n~Va<Kt5c0rK9^1FjmgSUQf(7(}OiSs%yv
z1EM4lSxloN`K+1TLQhAVYo)`{SSCr$nW$XKov`c!D<KvVntFR}$7(+hpEhDhShe7y
zs~stl`TVtpfJK!-ycgdpUFLQ@cj>q$(ycCSkr+t@Csjv@k`om<88j3qbe3sv-xcYY
zND&c|+I<A(`5=lWR3!f_A}R};Q6J$4W{YV=ky1E8EKK^P2wA1siuR*)<)lUzqUKAt
z5(@N}F+__*MH3)IJ>iPskx%q+@#mdpI$zk+RRuA$(|bW$?pzt?g^b8CBf%MKSmYU<
zeKPDrvV`;68Q$PspcYHzmSNhuou&}q3vCvurW`H`){(m|{wUl<Np5mh)^6zY4p8Gw
zg22SdoBQjx{LN@q96aqX-ZH`nC#a6f4)6Xm=5*n>%xrhib`KR~d9}tAZqoyf!9Wj>
zg-kgf68?Tv*%TN38}oaf$nV(O{b*aY!kyx}&RG_D)GiCQFM3N9muJHR59Paa&HL<>
z0$-6i4Fii}ZdN{#$9m51ri&s2H0}f~);NX|8rYU7vuS<Z5H}P%fpg9G+(~{;Fi!7X
zEjIAdR{@RY%NxOD|4Q7?LuJ37ZI?`i-&q>^u3_^T%mRL5eOK-M6Pq$6Uaf4uBVO$K
z|D-m=O6TaPAwDN<U~aal_hvH?@7Bgupmo!e+c`ZRsjF+YX}8d}|4>+C-C9@QI4iNL
z!G4+k^PiCzM9tY69kNU<UxsV5z6#)qe)iqeI~1P4e^X82JjVjXf3IA{^ZxCZ4AMla
z!P!h;$mw#8XNu-Rro6`RHxw?XASuEQ)jb0RqZL*{hBpA84SDf5UzP|`-JY*^&AeBe
z{sDH8<^H<85=g9DebOE(=NGcjhJLm@T%Rsv<;|^&VI{mF+`edAA&N<?vo1mgx&8>5
z_@F=s+pEk+z-PLXMNawqWQ}7r>n>K)u^(X<+Y7T{lL~<pH+sK~@s__RuKwF^cU+`y
z`=Qp}pbh&Qc4Kn-VNiI2tzXrIDo+bWP?5}%(8y$#%B9#L(UNPxLY%}xDb-9a!Z<CW
zStQJ*`GiIn>gw4xs1mu~zb~mKuYm>dJ^swhEcOT$vqLDrPMvUUDw((WF9xhXo{T?H
zpPnR2LfjsrJ&YJ|!b-Tk`6>LF)46_c$wbK-c7`MPK7e|O;^y*S$AT;g7MioLL;4l2
z9igkcF1$c<ccF`kW3x=9+IA*Axl(-CKp?<j^Hk?WfL(PxTr2xzG0W1f<g;ztyX3pY
zck+WwrO0vu@=|<rYggXhD_w;0AN2ghSF<FGI{OSkdQk~m84?uqE(8<U9+yHwF}er4
zgJQ}za_jKBf9F?9HAU~)-e1`p>!5(KQz@JIFTKL6lMnZRV3$6J?gS&j(><v<Esf--
ze<Xvr`#g6xmVU-fOX~#PdNkQn!XZ<;pKGNg-K}bUP)nDk5&rX^R7#5QapwZan}O0{
zW?-VU?%}dVasRgB#S>m}HPEZz${gJ5oQQZ|u*KOfWhdSi1YhmY$nZJYG2cfBL?|z>
z{T<|ldf5*b|Eb@YaKG?50>^Ut-;aHH{*3WP*dnfP3z?|d{na8<(ES>)7j&r;rbCY(
z@k-j?cs4$>5^PM%R+Hv)sM8YQnCtqFb+Ux4j3@(|2bj6?n>gw4d>rqqsz3YcDp341
z!dkaJ<q<7ix5t!MpSYVWNaN4?MW4WB`sl9`aBAG}@fcpu7c3^edORIH1ie6+%Y;p$
z10P*1wkZ7Rw>y^seUA$U_7Xi3&03SaQmjGyY{S%r`)Reh7#kt>{{?w?s<q+`V0EsE
z$7hiX(6YM9$~Y#{P?)VuX1&6_C!zmF@11sr*25IiP;QJHMy(QXOiI}0jyR@i+POY-
zS)hU5#IppF*&`6Gunk4r`QHIe6^nB=w%EjwPv4}Q%F2Y7QBoTM99N$;Q{$>I{WyC6
zl?h%l`P`S`fZpV!&9+rE3oZ^VyW0Old`vS!4gnp(81E#J!|j@KQ!ilj3i$KyLDQFC
zfGT)|@YR4os$Kl%bZjv%H}A0hQxklq)a44BuDIr~KIZ<H(oW|(;BjZ!lrc`b0)0}<
z++@#pM*MM$NQ@=BvBTxetZP{5Xy%d!Q>=bT7iLx*sh*L*4?n;(TDwLMg1SSPjgoje
zbH@BO>Z`|8iMV0NR$mCp&VQ5+H$>O4fHk>>qH%h_3Cw|i_l^s-m!*sTXCnF7p(EQM
zOdH9nxTwzOkKPjZ2(5Zw!>ric8{GXr4*SlGcnNM*fX`76fe4CE5qa$O&b{E6I{Ms;
z%Cxg^=QQa)Hw-9pU#qUhf!>A9bT<|6=L||5%@JD}{Fs&{J7Xh9)QHN!QT4f5#2+SB
zC2R!nk#F~mr*%rRiTdESz)Fdteg_HB5Xbg?&LFN)w;`5S9-MNI-_2`*GGp(_V{y^c
z{EI=^xXWRaSk4oeC715@q$jH#;^=Td7iU2pBq*G9<Mj9UQ~u(;YU4A%pZBUQc)0_`
z`LWxq6Y1q9J5BUY?>JXIl(OK8avG@uZ7rLh_&>Fsd-F3<LnP#+Pp$8*;knxWWt=Sy
z6Zm0qET`StAh%!RU73vw$|%C~gJ!R-s-oi7vDZ?`AG$sgnJv}#>rS9S(;9r>Hf2@4
zYX7HDFWIqSd8z)>k3G4><cs-U?TZoQMs^NfkZYP?YQd)9bIv8yO%ZZlR6>dN>2)RT
zuHi^V=O?E&|Fmq~&1ewe-H7E(rC2}zp*G=nGTB*YW2&_SBERZqm;PdpIr~Et9<cmO
zhu^xna})7HWRx%L=zF@uQzsc#npJS)1#I03)=-j)pE(yHilKEXB+2FOu<ch^k0enX
zq|~PE!4@Zfiu_#s*9ymGJ=C?mPP*9&3v=bj4)IG>YuougQU_-bICK!2G;8kMDNA*d
zbn6v2IYss{S9xu&__{i?3*{_H-7}TUA?>S#GRnwt_W5XKvoNf#gOMYGxa4WO&daVh
z3W|={i3!E*0~NlqtzpjXb~DOTpoZHgdyh*hu&1-6*|`gfH_Q9YwhU%xBjwsA@RG;k
zE8sG2apP~<cLb}C$9OuX@O}J+@+FfWt$CcB!D<0{D_qh2)<>F?-5dYkDixBUb(guK
z5;?4%-)dwBMv_z)E967_N4%|Y3Rxite+%HEYhZcCg_~PvepM&3&D(NYhOt<bR}lW%
z^8m|&nFiUyvS<IWR=1n^_@cBHF+t~`vrW9Cak6xiiqJ*NDy_FGRadpbmnVPH{&lvp
z-g`{FJ6t_>4)#Ekxj7JBYiajkG#aJwV><xpTb2@R42h`^!g2vb6ufSIERm!G9LZDJ
z0;pCS2L?RMJ*_tc;2aH(eng$+Aw4Sn^4#1X-{k(EBC*D!(4qOV@;==GW)~15Idzcr
zP%r3G_$Cntal^v|%?+zMnRySZ@nUmcYZ)x8#{oiScm5rvUkj%bYsJZ%Nj2YdfbQmf
zP9hwUaw3~d#dpFN!{f`K3Qe};?WIP!h3s=A+Tq^VBU8-6Hs&~vb$WF|WNW%WL2V{S
zgPr94<RM|V;PpJyRDw-}OoZOe_YYr4)-e@?d(V{zcxk8qX<pWWt#m7q&v+tnG0J_f
zNLyE|b<3huVgJVhYC3mXjhq^tt$p~u&?_FafP9Z8`irU?uge^Q9rp_DhKxeTvXPxG
z0mOuy)TmB!aI@rmH@?hJ(S<95vs!WI=`R0DEMu`xvDFD}ynzNPPHQc`&3@dK#GRhk
zL8>r3h?V>CL{~NYoA*oK36}hwv8glgiHAgQS@Ky-FYrEUS?z#wSYiqbmEyCbp$9T<
zFb2scN}L2CAi~|`@Q7L#?oUbaz4@Dacdn;x0dJlxiyN~-1~sM#dV|d4=zv~@d>)ZQ
z7y_WeBPH1t@tC_3wR49UHyGW@y*++QiZ}On$hVP=6M6NZ#26&_|6}eeyrTNPw-FFQ
z8bmsk?v|Do0cq(jC8c}lE~P_38U}Fa?v@Y{>F(}ki1+aM*6&Yv7dT61&As>Bb9X%Z
z*)d-wnS`Z<BQlJ}lSR&T#X-x7^e~)Y8?<=v&NhG+GPAivu7im%gqahFMrf1aPtfO~
zlG6pzE(E0zZ$VGd<h!2$Uo+@#NW{8mUv&b$!1xTbM&*mLY!+sLHoxkP+q7$Fs{8~0
z5rt+w9IM{3T$R;is4H3qiW?%14A_*vlpCrHCxbQ!t%HOM=A_c}&}|$z!3o4A9K2w1
zVt0FW*n9<TE?rtdb1#b|M9X?}bg0o)ehuXedVW|J^@`FokGO22pW)8T>4tQ3843-q
zjoQ$wk8c+Y3Nh-;v(vQ248KnP>Mb!&Vx3&<OpHGGnN;8p<vMfB**tv)l8qNkod<N7
z)qY;B8!xeD&J4b2m2<4(i=Kp)h0GI4=Ig?ndZ4nX0Y%he(RJqUy;WiU6pIN+I2pP$
z=?CkH%l%rv7u4x43AO)5J>FnJ^$9vFW*y|W=!SIO7%%DGL7M)o7o*ybp?k&Z4bI}x
z>7g3We9FwLTU(&L7GK#bpv^nlD1H-AA~RzpDsMY4GgwyVfUn5D^n#e~-ULg5=gRV$
zcy#Bi$&i-i;-~w4*6j>0W3*<i(NUCYQPUaAvLckTCc7u3GW@q&PQKmkJ`swj4!joo
zt`XTb+>>!SsxnhYd4EA`FF9*SHJXX%V`i*&>|I1I*DrPRT4FDC>_DmR?-jI68GNRw
z-c!>h?=4#eYkx9{XUFvO6%S8oUdEdO9xDs}{maDwi^kyBU?Tj30^xH~d3J&tlik`b
zTdm#Xjr^VhX<0kg;yRuK9KKVJ+l`3QZkX(plb`AOZOGUQReHI+@f;dom~C+{Bxf_P
zDTC4EeVVJfoDR>#P?W2d0O$?TWh)P~qs+hGF~yowNM6O;MKy?VUx4Mds__rL3y-@X
zeSW}O@|N})Ji0doZ$@3-GqenJyy4E1va~#z92s}|?5oC&jS|RdCU@;{CugkLRCd-S
z(*2?3^?-N$S6%MuDDO9nhORxiVSH!xKlKdv+`pX=_j^~ks_*dd^oueZu#cnbuWp*h
zmLE?QPP8aKjU5fK&>B0s=zo7dWGk$+y>YHv#rL9iSvSEXdz*p|lJJR~WUb6|CtCK)
zLJ`Tqfl8^yZ_qb&cf&eWxMU6=&nu<-ynH1++0pued~GtVn)fy`NhrMNCj58)@E<5U
zpRn<@XXqg-%x%j+VMzA?4ZhV8J=}6eP@Hw3I>fnpf#L8q^$g?n$uANoj2qGC=JPyk
zgrdJ3<P+3&!sC`3Pvu$jj;Mdpm)B<0rHfoovy2tK?@1L@oi=-^^6=B!B*j@BW$T#E
z5d#U?AIRdXmRuoWRb0VrU17$0k1wXiqQLm&rI+d8<?pDwV8-r>&d#V5`l|Wpt%DRa
zdxI*7v`B=tNj6_z(6)Yd%f??t>z&cF=I<o(qm?!D$cz<_gJngpuDEupYw?3mRa=fz
z?X}&T5u=kS2_+BK&OrMuzc5|b%YubGPrOyUTs2me?5}w|dK5X!?%y0g#_UWdONj8W
zBm4M=Nal3ht-t@B&0703(m1($W#~w%@~q@8)qDU_bwB?}AR+kTHl+E<<Q}Ka@(Otl
zn4hBgjKOMiuf4}Bsifkl=&WVox4_?K@vI8%gUb0w-CC<&nOzs++T*a7QDMp!ahs;U
zV+rO}%`ro6McO=flT$OdTeUKMq9PTzGT?bXe;7ubQ?O<k7*-FHKaHbOKd(4SK5H>N
z(HawWI=}FvJ+u@}@9kmOF<_n(9IJ7he2=^RZT?~)sN$KyxOY+-p`te|?Z|>J%OIJ-
zmT#52&TN)deJ06}<ja9C{=(Js_b}boj`A-%&r%jE6FTPI3Q!Lk@prDiwSl<<-;@<U
z>_mEJ8mz*v2TLbTk-68)KwrJCqEQR?XD^1qiYo(gHI%`!*xbn6XE}olUc^@!lA@v}
zKD)|sVP`Lmk7fljM*n<F!aazO8iz3Q)F`KyUu%y)%t*;289U@AD8Btut33z*8KuHn
zpSdOkSD9fqPuCb9R?T4K&447W>}oFjXNU!K%te%O%cqs)t@eyyv*aWMREM92%pbR9
z&+e2~WQf!0UU*J592Daoz!f>1r$67}6lIn%T!#~6VZsO(E=Yfz1ocC=b7h0)+uLmp
z9=UqFJSib=u<p9z?Qd~E6R{mwxUf#fQOh)w5IFW}tvJhHIK0+6fMde=d7T7I1|;ke
z_~tK|lMCZd90le9hi`Kwnp-!2Q7qEdi{m`-!=b`0>f#nkJ<w;zuYE>wH?N!+UPBaV
zlAO5g(>h`!($iHj2QdpEX9@<A5{594PYg@TAicfV=IS@W-7;NtlFl8n9V{D9so?O^
zuh>->b>(+cv2`#ip9fCVrYa|GPpHfNtXA|b^kXx(_1~}k6wLWnx9;I+qsD~>!*G{7
z9Y~CAM!GxdrG~?4)B<x%fi|V<Xazr|t8<&TYjx`Vcb^_70-H0m4CRc#`L}(P`60*5
zQQ9&W+9WMJq71kWMmZD{DK;57ldX~R2`1Ns`uUb4o0W@hRVJ-X)a5J##%JB4V@)Ti
zj&?Qp&<QqMxzoV3%2t84C39fpC@Ejql_Xy|p+`C3FSiL}OKlbkKyeK%t`WP-@oxG%
zh_>xj@Q`_~6QN?ozr`Umy$k2w>qJ_j10Oa<pzM}<v^wy-XiX_=*%EdojMY!)YOJz)
zv@-CFKUKsz-?m4Uii?l>e5Zavz(|un*dH~{)L7kef0f^IRcQ~w|2;<MCv?F(8*08=
zK=3GLUg@W6D<7PZ0n_+mv&@m<+<F_y;;xM8@5v9Y=Zagn{n!1L^OT8V+~K~NHpJ*G
z&z{8m^>}uIpnKx5t)k%TA+>9Fd`tTyHQn<Y(W7;^6qu24MA)y&&{bHw$8Xx|{WWJR
z@2T%V_+6iktiC3L^>mBAuSE|w{toDMH&J@=xH#&>;7xuu&WfP9iIh4X#RZOraCF76
zWkgJ;sBwRJ?}{?4BE>b8m~r(UO*it##l&WT5w{HU%&x3Ov}DTdhrX=+#y=u#AqNq%
zV<nV@ZYk1JGU1>Nas53d?k&Tpta$>hZYo-hkZAz+YX)5)Z8uxL%UvlY89EGX+;Lxa
zdbOLjCN0pE>>h<sjG9G#OsD`2jwxHRBcrX7=9Qu}=hli*xaMOKw?G7??Im!%CDsel
z5-E;f3fM?y9@j>2-cEjA7+{G!OFFYAXV%UrE32Smy&ffzXyLJt_Q8Z{70%m=B7H`K
z2(2%!jak@+d%<6}6BZ`Z(p?kMCev4?d@Ev+sjurxQ2Lp0^7)=iJ*h4sq}NNMJ(DRZ
zGBU_g_-VOexA&iKTd>5SNp>;5KW?N<*7N2)5=RD=EV|||oWgrQMq3*k(sCDoF6sDu
z*mT{~6lGKQ@c}%zi*W3FpDWYWn7w3b1Kh^UwOD_$8VGbP(qGDYK@A`RUoqkp185vv
zJEM{^=N2@&2S3a)&;WA`Y;50e{KuS7P@jaeoT^Q}{bf!8H_vj>QqYU1{ab9ZtBJQi
z60=q|$==#3)D7`yqJMS(dRTGSfGK&oN#8SFTPPT7HO?&`tD3#3GWh-=Mv{M2Rw?rK
zZ9oit59DEVLk|EDpO<fnM0TY9igli<su=Q?EWEiL&l==CnY`u({rY_|p6;v9Rjsy8
z6n^i~W|d5YnzSb68O?y!6kO1_T#y#r9Tct69~C@{H#jvvG7}YbAvmc_5$j%J#a^tk
z%N4A><5XJ6?z<BEaVK~x+@T91$(J)oV=HHi?i&GmQdt!^%X40j9KTL6gN0i%t!}h~
zVF3-Id1VE>hacQG<02Xe#*-sOQ3`&@uHGJJ995j#O85vDpGVWzB>u5vlrQN@BA<>r
zrhT*lIWA5^&vgja)yDavn=XbC*X5Ixzc8R<jF)8CKJb3tKD>1Rw9uPlJ+!tDuyPKJ
zBMnqt{FOGli4fq(ru^&98B6s(hP--hENBfuK45lxh3q+;fFz>sZT7}3iC2)LA5fX2
zHxG~@!eLMCojyTLQIZg%YgE<GH`)LC31U?nn9L{9NhR<Vi$3_vZy}&=Zv%QebJh@q
zHg1pEQQ4htrBvRkN2i{6^8ciM@~Y=VO+xoadVSs-pFxKbZ`^BxC^Dm7kmR(Mt_R(@
z+6fhAA}6UwmUcqbB)kWj-gfV_us)G_w9@H_jd8tgfy&s{bnX0&KuF%7-Z=jLlxC2o
zd+P3#%!!%P3+oezCC0~XWd!$@2U^=I%J<H5JhV5J$|DmbMWGJsw_LhDVA_dGAH3S6
z<CjP4yEVYttC~%zfjETe2Roq;h786O5e74Uirf+Cx2_~JoQJV=LAtBYSek6YR2f0X
zYD{%Mu1D)2rx>-cy?-ynywlM9y0Z&7b1*r`YWF7M610`uZXH8XKN`ziKI`@@Rg`n*
z*9Uc!?*uqN-DF4&b-hc>t;{eSv+JK#T*G3*Zb>>;pTW(ck{NNFqADj4)9Yr2gW9L?
zqW4mFx@Pc%3*9t6`TYVZk5+SG_*iXb6c|UaQ{ee>ke(pzf^<F~^h@U|YgZ(K4(V<<
z#9cuv0=%sfBPqrxJr6U!?eT_0(5xbX4sBcAcF?K5F(Q{4)dzP0bv^lKx<5c%px~PX
zD#3{(K_Mn82;P8|Y}ScrGE6L=1lywrx|UOG!E}z<%<PGvZphf@ZZnX6VPVuD*d9Y|
zWC2oEVkyj7PWDkuW(eM$)S8OHn?+`noOowBb+zOaqd_Tz9VD0KSpa53l;|w9PXwfo
zL7#yU9PUpNMiQWc0(IFX?ED4%x>KA7nk>4_G2Z|>`og*UwEP=G*qyZYQ&OgxSF+6?
zrPZGddK2hE0?yP1FA}>!8}Yg9@zs?Y>@Of@yG?Bc+Ln_F#={^|%-CJ~hR*%0Us4ti
zMs{!$qnQnZv5R=EPxv(juB1Fbe>TCfRTY_$25+xo*zLCcN9=<_<s=Dn?sMz@T+T}L
zazpFc!3!R(0%0owz3kjR`QPhkmGbfN2`cmU1i<$h-jOozc`yI9h;oH0i4lX*91}{_
zvnss3=Zpun>b4Y2)|K%8Z~=-Z6vgu=Xh21V%M?0(k6Vq^8P1rtHkCXz&l06M(6sM$
ze-~}Gg;&Dk(V7IIAuj%MHJ7P<9iCMSMybrFe-e@9#4hWGT<w>iF-S*GE4H-0Og%9O
zYUy=hN~icR0FUOn)3MI$hhqx4U3*yv^O2uGO5eneQ0C14y(pQ470L_AWtTCjx!mYy
zHRs4d-sB@MH@z#zH9Vo9(X;WGa-XQ3Qd$x_zYW$~Mr~h4GBZFYQtjof&+nBAyVa@5
zI73HHS7GUOw@cvoAk%zg<Lcw~;>oLwCPM>Cdyw`5lS`5mXPWzr=W4VpKqDD@<y3P(
zEOr02V`=#@h}(&&9z;H91PqL+X$TFU8s7;8X2o1-*HRRH#xGW2o&F6$JP6`Fp2b`d
zyaNLP1ggd|$Em;sj&ot0pG&F33g$~KGIZm;$rr_Ay)m~DYY!6wRJ^Nd0B9(N0u8nx
zd&PC2iPvw^ykOsNRtKA=KB!d~_I3qcNCb>2s2RcoTI79~UIT`zT+T!lJm?O1N(r_U
zyeIRxT$xhqx5wF9_|p+!p38+AFSxT_cr_U0fNp*x*b6iQkPe^){~yiTNY}c?M&A;a
z*yX1X>Hm=~z4=jQ9+o0TCcWSUhQ8DopIA158fc)5HrJ)Bl&^#jG-J3ACT!xhb*i+m
zz=gPgk>dr=++0;Fwfr-=3Yq;sLt`S&-{dx%c0r`QLLGL(Id#b<L9+3AMR!*P3Db^>
z95{$hx(AYqGh*i2ILvsyV<Q$}ZXfV+I!gz6lH5EZJPNTp{z=E_66+iWvvy_hZyhPJ
z$t7}Sh3W~S92=m`w@;IlI>LbYhbMN-(xt8R!$Pp4>!bDb@uT0wx>V^+;q4=Lgwn3w
zKGiHrRkR`}6O@SVQ<DazeLhBPbg~2RwL8Avi(A1vHn5alG9xf;1hv@pp2nBoK813G
z@qkd*%^fQ$1&PH@TI|Cr-?2y=7@s07%S<`5>Ct*#>X83Z<@HK3Ls1o;dAweKQE>;~
zn4@f4%ojf5{|v55_{W8mQ&g`)NEYxz`fX&pz=qcD2OXNy>MHZ9+xsrCJGqatFH9dp
z_J(%MGmyw$9Pq2db~LjRhu`lzn4ReHM;0ASIr_<i8u^;v?pNhKR~5BnNf)H$HSd;{
z{Q3I9l#=dOpC;c&CtVD{@j?{2V?jlY?%T0XjLc)zFep<b67#`?>toKwSF*yg)5gq4
z$~LQMvs$3CeD2!i*@w^#nc(Eq!@t&?=hn_w10RtTJb1k<`k8%`qo^9Mlb5GI)8-&G
zm2B=KRI)Ut%)|R4|7L;8%?7cbd6dP;XRhj%gYL~Uc{-d1+(oGuT?Vl#G2>XUFRQ;%
zJ@K+*N^D6{Hw`FH2D=%&n%A{02f3zM0>5dua02nE`{6EhQ_>elV7h8fone#FrmX!T
ztw_8zwIGXRh4CcGJS(F&zM4<tq$%`=Wp9N;zIuD*hc18KgUF6&l`QpmDW*b~ux7<e
zLJydkJKV-x1Y2r619Z`5`C9yXm0u#5oVu`GFhXJ<n%rG_RfRI9S3CG*>~5CVPK7yt
zwJkI^$iAK|#0oEJ686l?`fY-!Clp8b{n>8Vp=YP%N6#;%%z_mqL(@>s5E-Ego1s@0
z&1T(&(b})$Y|KXx)@_q`oIalAjkDxbnHFP<XtX}F?b)`}o+$}{K%qKMqgi(qx~={_
zzv?JM|IZau?^Nt`%Sl7U_QbHNenH4EKh_od&J?WW)=YNATb1}$Sals=TBWp4D$0wJ
z-P+A^&*0;>OULcshR|cK3q_&X<a&etAg<*q(NMS$d#F7oDb=!@fDQQ>z6jI;=GK@~
zjh}zANFT&=;(o@URvc^Pvt{qidnPFBqcqIR3x-Utr8weETamz^FonOptZ4?&O%-H~
z-(sZ|=dFj=Ms0uN6F<*eM+Fv%4Xi^IHVny(50QObMfBo!Jw<C@2#3eTXRs%Ld7Km3
zXFGrGWP_&YZj$@$V*5+^)P7(H(N^p-TZ~MX?;SWK8}VyT1gz(9?!n%`-&IZMfstr<
z5Jhd<Ym@5Eoy6}d?|#4dRx`THh9!V)V?fRO?A5Y32PGjQ+xMG+)2%ifEJ!(Lviwt&
z7uk*@gBK>I5?_vT2%H=_AqeaPO`?m-EvRFMbcYoz2}9R@>?Pz5s%6_}_7nMmM&-?l
zGw;Qwn1uP0+B;`f2}|wNNeN3eU=^R!+vWNsddluTGfDH&Q$a?y@e2(sdIHl3Gz@>Y
zU#`*!dX)rGj+IQX>5qLai55*K^s^$-^ez^wd7UU>D>H}Uo?bD6g|7G<YLKI4K5K+1
z4c+qN)Lm@VSB=g{Gi6q&fYzH^0BX#h8_LXpwh<hhtT8f{OWJnr{!tD3%1766V4#Az
zFfCpbAH#@l79+(Yu>4F7xBmtue_PXk`M50GMB^3T_PBk6zYBE*;uiF7QC1o=k=DoY
zeKcw1Gq(E>%V<s~YPGgrLiOT?QJtl=-<Xn(goWPc${O9r$Z2kDYF!=PW)^?ECaVVr
z&cTS?qhgkaDX}7GEJRU_+L<IuVk&HE>9kRj=BM~ityR8|xTUKK-?EIR#=R9b1fy`Q
zuC+bGBjoR@8x0tzS?V(ju~AlP9xd-%roM!(o@k_TYb2h?nV(jcIH?m1(kG4#bICpY
z2Wm2V(goMAa%_V^-}Zfdeo)ZU88KMVV!?aulN!7o2(f5vm2Et*_Eay=@{O<+wBx<)
z;!wd5kup>u&6jm(ro}N^5{zZq7JHxi5v5GuFhVjmZjh4vPw!ym_pwX)KVY0}v0ZJh
zoH~oZl40i{1R9sO@d}LiG$8$k+N{odPx#~LZAb>oX0!2irFJYQDj4`ntr|JL69~DT
z!Tk0WM#^*Qed{3HkoAN8hk8okj8KBcC<0d6e(oos4lYm3BIRn?8zz4f3z9aLS&H)H
zYUDo*=UCjP;ohXE$EF%|HspJZz79WKiEH7jZ*-L$8d{uLr!DAZreohK7l)Q=>aqO7
z2(Sz$FW;Rk&k+wqiK2?}rW%}#6UIjt#{s`mYq$q5KA{Fs{rh)0ECj>oe}AR;{eSyc
z+YnP4t^7G<U!vQ=*?}0*r`arvq((birC!&cm^)s?|J>d`H%a!Ki3{;-CS}vbo!B}X
zYs=ZXfRb>-YmG7fUbdLoeW69e=9*8xe~#u4i)v{Rnf+^H9$r<h-f+Cte$09OgLY_|
z?{&M4+M1S7)7kc)^!-gnIlLB4xSgEUD3`-z5wDi^RJo~aAPOdtIN8<flyX`Rx_|9x
zSbt6jO`Dj)6w1!UP`SL(Q4D3R*-c${M0ONqEeFwQEM+a#B74XAwQd7=1N96V5nCl9
zyTEsmdG<JpDlEccXS~$fWgKQ`sHN2hO~54OTU}dQio3tPSimNG)ds~U$`<iDFUxt1
zaj@JS>Ez_}?;FPz50>`3znE)za**zOvYBBYqwl@4C!#Km#^i6*24i^iOw8T#YK-4G
zUf(Wx;CB8}%)Y6)HkW$kUXj#eSRjXv8UNWMx)>5BVZ@v5Vwl}jMfY{3Ts&Q}o}*l;
zPPLZCVc(0`C^CTx^MRyT(d*6MS&~n%DF&fWNcru&SEBhjSS}WP#e_Pp&S&g1-Iv2#
z@9)y@1<d+BZ)Ezmxa^FVY+v4-4DXB;yZw=)=ln<F!nPmQ?Bpmp)x-fM;6>f36&INZ
zyr0-w@@lZta$Ebx@AhG|3;&SNkQ+Lx3uEgr@ZLZQMcnN(>j*-F?I?VG<#4t=w)@Hd
z!+g4ZOE_Z3`&h9%cUM=w7pU|o7(|E5k?bvp9q9KLzW2!q38zz*ndMBhw6u?Jix_q;
zGJWqn7X6<{y=cW?(Ql}d48;mdqcQpgO>n&Xn#ina;JKBTBNKhS18c>xF|4*q9NuW$
zZ`jdF<oft0x87-k>tA<Z6}VI0OJPdTzLq@n{+Y{Bz#i&-%h`4uEqbl%RuZrMdFw{3
z4gAkQD{P_8zW2PzY51d%)3oQ*%GOxHh!BkZV60&2(m~$yw8Zzu;bV!y>iT+qUgFW@
zhu4pM_Ukv&_-u7@WYB*8H1s(e`z{_R=(3GmeFt`wje+6ANcQ7m?}*4q+--k?FP}gA
ziOtm578hvX%kp^-Sv~GQ=?F&W=H{+<|2_o{Q^*v(y<CY^QcyUB-(EWRL=l4r<i$Z`
zGg(GWnB}(M!_Ul&&PToKaWLOphit^Bi%C=U%IkdhG5Yh>jSYUg*-62d0s>bPhQ7hy
zoMs(*Ienx#7cfzX1l#gXlMNyM-?VG(^mjAAeDO~*_0<$!{A@c@qnOTD3jTeFPo$7m
z!O0fBJsov8q7Zg3^MRj_%W^gluH=0E`c=EqVrio@&82a!+Ik|U5sW(%xR`S@ocN*7
znQ1!cVD-DR@|Pg`(YZmhC$IH5hR`BeG^H5DI~*-ID*DNZ<4@XTqaTu)xXcDsA5=De
zeN$6YGyNNw%5B;4=;ElC(zNR^y28d?#RHz{eT;@u3Aw#aA%L~sdA{jxaM^*}9QBUA
z6B=@bL`Fo2g7tx0x$49g3&L4uu9ND%+;)!%HiKNPCBs^-nM~jex-W=VUi|aqV;GrO
z5WR0%Mar7DVlwQT8=U`^&cW)-2cFooi+H>-RnIpo#J<}o(001}HN+|kpM8JO+AM{J
zQjU$-Jt<aLwvCki+P?Yh`Lo}z6sPDE(~LIeo4qo<_UoP22bU62f8HH-Vjr~Li`pPC
zSQh%zBFvb=&-Z?l81o%WS4SR%doqL_G+)gBEmAX9*YYxXA_a`%d^AZFhyA>86^iZ5
z^WAO)6JLh!Bh&P#=yrv#)u~iCj3Ds6+8A=74j*pw{$~kSqUrqhA>ydqC0?L&g3rc%
zD=+zcZ>Co)K>T<_ma^SFL>kljd82md&4KTIAS-gtW8dr|Y|+cMowIBQEvdRR8@cC`
znUS7R2NCy#`VQR$bqL08iL8)D&oiqinMT(=qrOtDa>Vnp$>9%kkw>^cM%M<CS86+(
zf^6SIKiPReu-@(PFL*nRNE3!99(o!v5xx3EHJV(!s791m@YV6Dpn%OJ$DJvstjOhJ
zU^<^IRHOL0LO)RH6iU)k$ZVZM7<WNI0eGrEVNJ*Vd$kL{c04?3!vFg{0`SY8EXh!b
zhF?Ml!e8B9Ng0iq#_dkPC~Iq37XyenO^_js=VB{S+!T<@CAWDG`g6@*k6qT<*#Nb0
zG~!?6-t0DWcw#gUMtwOYy8~kpIFEV{XC*0T6$tz+?;!eq<xjEDU|J1@@13aI39%)=
zZnL+WNu1ZuY;sM#8Etc>^LAP9dn?3*cMKZJud_mQjH6%q8zYcEdn_gP{l)X=&(AkU
zkV1Bp#BRHs&z>2_v$tGkdz`HMzh11KFbHgKb9Nzq&%A4i%wynt3(8)+m8AT?zoH4~
zy6|rZ!RZCsi#~)Gs%seW%{Zy+Lnal=-Q^1QBr8ynARBB7;mh@Odl?@0Hor$@$m1p2
zrh6#GE70N}0b7p1R-0JX>8DUIN~_~14IeIbf|BJ}Q_UZG^^jXn2rBYr!_JRD-her(
z&m0`TgijQBV&;BJL=|ufKs1XMWnR$K);Y>si*ftha+etLAjT6+lq8Dinp}{H1^j$c
zOjKjI(BdN-L*{WdrkTuysF#sh>9p}KC74yW#`)$MK6-XhShDDG--~2@SK{SzA=h2M
zl|Wz5?V^H?kgk%)_$0WRJOrf_dy7g$=N~rGtbbhH!4K$_GB5};#_lAsMUbi6?^43f
zcc%i|{ppW_@ZVhy``(#GE}J+u!uK0n;rl|nzMYu-v(BT6+!ljnqS51d?lIl`*`dH_
z-sQ^0>r`6>|K!Ms{l{6qa{W~KRKoXW3{T2=fvj;8_++?G@Ig$b@9^#15l{jmwwr3}
zivv+D1nZ;QqXFPCu}5F@ys|nitklw|bUQF$_@*q9rQU6SOVbgboZNf5=8Kx2^*JE{
zxf=HFo1lW`-#Y((XMDs6&6OUVH?wPw)XL+fy8M$Ulf=Ab_L-jBj9SlthwsV&UN*dU
z#kfHc3;k-|>p=0{yZy0Z!T_S|M=W?#q5&_XUe$>6#66+Lbr$)wh+xCVHbXAx{8~gI
za(US#rDAzny-UJFJnm)K8qgBu5S$Lt+5Aqi;NB<ZTDS}oFvCpEj*<>SZPvDRe_Wy*
zub2f5l(&tpX@Ltds2ms)2@XE(cm@?_Xe>+a4I7uZ{X|;GtV_6UeQjjb!6M9O8yr4(
zpGsseK3SEZJ%ZqL`5RYte)AVQ>huuFZ0Eo~#wXE^b>|wKUK4z;_L&kH(tU1x?t3~S
z%R)!Q>~6f6aJ5@GyvTC{d}(DxMTt_53uA_9som?pOJV-il*6+B!fZn7DUUFOl2UQ!
z&|vpjh20E;8TD7|JD$y#e_&hM8TGBU_J5n!eZ>sihN69bH0Jfr!0sJJ$(zgXhjP5i
ztt3Bc41+FjC-PdA92v{64k)9E+*%}Mp~gcJlxLpJ-b#O+cAoJ7|1nLfE=SacdUO01
z+24U`xMy{o-LEH{<ip0zu&56Y>=A#xtyIl$m?^~@#AM>ICsGNK{4e){2@MvLNUd<5
z<G-*;>f)N~m)85THLPE`minSC62;cA*DZ2k+v(<qs=xg1O01YcqbqBNU!G6f89+-o
z4bK#L-D8Xhbekhanm<sscl%jrmS{b~ezpz#&^56AW&QU8W!Oh9DNZ)^q=ycRJZr0~
zZN!#}FBA;PZCUZkf3dJ@$&bI-;WRW3>pEXr-29U#Zw99gki0(Ic_R5thOuPx?iPN3
zHeonkFw*dBxZLEqkA+44C1M#7CGNxSI_xSR;VvGnJU8^+aS%0J^0L2!^yApd8F)r_
z(f8iCE}74LCpC1DgkjU)@NU<v06Cw~h21^csZEpe!>#uF6Hdi3IB=Q#+R%AKy5?g1
z=4vAomE}9d(WLMFE#U~70XF%sKc%?Uhudv+<h)i1?sY?T-J-(A6;d=amR+3KRX2RL
z)00fN=Rt+Sr@tjRQV%zP*?URSc37{qq?q7gQwp3r4u=+b8NZ1)`2yyVp!F8Jj*NL#
zXcaIzH(~49Yq#N)uflPRc4ul~8iC_REsn|JyZh2`)QJNJK@N5>I-T3{S6;F~|8kD7
z*pqjm05a?V|47PZ7N!w?weeR?srw2b5?d;qw#;#oE#JE<OJEvH5?&|$#)>lds#Z?X
zBCHDscf;Sp)59WY+JiA!j;iRC^8gwNq9-T2L|uo{c!ev5oK*;AxqAL9vu0Qv+%MV=
zn(lg^*q55c!8eGfbMzpYjT_6%vFWD^m}v8>u?xD~+vD?WQ@7{VzK3VSWnZ<=5Uz35
zl^DJ&OXjfBvEVYapw1mWL7Y+-yh~uIYBFjM0A5-mJ;(!L?n^2*uZZ*J=ThF?O8W)T
zc`O~sda9*K(`nzhC_uTYYHGOUs~t6_y;woa-AaUPdVPCK(WLxr+7+u^_)2EiZ#5?)
z0Cpt6z|L=V*jNgsoNx7QEj1^48TO=O3kfNGi+Wtsz=Kvsuwlimdl(?1Pu278E79g<
zW;lbhWyYOo^k09=AhbGc{mDCW9zJ@3@he_QG`u)=YYUqwNL6IC5$tvpF*k}~G!D=D
zqp!1uzPAK5{1`@ctlNK!kdkM8?@lQ94Fk=wR_^2E*^Kj$UD<Cu9|8qm(S-y?wKRVF
zmXD)!y6^?>6HJsOSW+)F03|UtPucL0jjkGDoUKbZ&-u$^Zvh&*lHd9iBYL%pKhjC`
z9}q^)M2m>gczvzw)pBy(fi*|MYtOq>Q7oi%vk0@c+dcV00snT`^HeU*z9EOu@Lo@m
zrj4vH<9Eb71a8aFE8JRMMRkcZhTqTNY*_vnx!tI-<$Aj~Y?IG=yhJvZqOg830G&=D
z#ZROb?7j1*a@URxu2I+K_kssVxZra^zKe<M!NtXu&FWuMJ&f9crsX-;=;nLWO_+MO
zO)j<FWr>AN!m|lNx6rX|$NG1oS7ywlCmrbQWMYsTU?+Y#8%ySvTMVUriI&WDxDp0H
zhru+|8rIC$v(uIBqxtpwgP!m(<3~PceJdwd9^4BM`PI0teY<B@B2lAP3}w3_hx_5;
z&v<&JG@kIS*sxydq2+vGu~6T+VX=E}u*7e!(;u5q3I;uY;S1w#e06#^*Wi-6U*Lxc
zp04D3&z@+~P}fTdYoe=I;bT<aUc6~a0mqm2tpK5OyuF$}(6y_7EUt;ci=ubhPkrYN
z?(F2_Q?aibr#(}llfCmE8{bm6mlWT;ecSP2akuLP_n#oV7b}jn89Im|;xpc(=v~g1
zCUwbE2z{i1N%Jxs3LeW*`;6~fyj@$uC^MqAq_dek`So1(x6MScfmD9Bj~!hQmUxjx
zz8mTgcXMbP<F$eit}s-CN)#tiOkjNH?0CaMAi&3nTC%>%G0+x3pI54jxTT$R!@4y#
zM_1lqi{aYe!ggr7CV=hLZ**<<EB{HliW8G%#1U3z5LNx#oBz`8P}ig>OYq!HLjXh}
zjT?uO)UPAnYK3SV2kav~!J_&VZeL6LkvXEn5RQ@aMHgxw2;)RUMyzplhkKX5{wn4@
zRbl>VlHB*^$ov&NrniGD6u-=Vp#?~dfAApTRr2M(_u(1A^G9|IqMbZ`)d*jp4bB98
zS|+zkGsUz&omTdm=OMOJx?pB`W;x;gX1;DiSq?gb*+_P;_s6QR%R}ggLwcg}S7A1p
zRAk{tpXj=F$P5dS1ftHfzj5t8hc`mez|!|}Fv#D#P^|*3zVGwYPJ*B9^!8&;<Kh<#
zj6yE<=d`uM9av=A%0tWljbw?kIvo9A^*W=Ehk^{`_#KRqyl~Dy1S6_2a~^Uwptx|f
zl5|WvT01*c`3}?dZ~W)apZXaK%HHNw%+SZ+F245H@5Mq7J!$NJ9ks7<l0gaB(NX&8
zIQV}Yje?4?{P*_ei~FOY+8f?1&S?zR=s?V`wZ8X~*v=N_d7f<kbYWbdQj%Z)n~&<^
zd;>Uu_S*~B!T!Gnk33H{4Q}>YJeww7!_X=r^!ILK&2FQe5orGeT>!L&b&5;N_z6%#
zP7gE}Z00HpHrpO$u3%MLdF=dsC+sDaQ~ZO)exFj>FFXe&0^vWTm$}*z%HdKFhS74N
z|9=UtLK`MWG@k#_M(VnK2>&K=z=dMa{(t&w7EnW0oxm*+{b#+2o#l22z9&Qc@<}X=
zOiatZP$-jJoNZ=TR~K-m(L|itUE@#D(FxfNq9l^p^trgXiNzD*P%uf#A`n8HrFo@s
z%yTd#-Z;vuKk26m4aFkQP8U_FP7p_xvkPY`fCe3=@cDt5Qp9b4_GDPh7dU`2uTTtP
zF38Pgd*G8=tFgDUwty>$r&APM3c?509=}mMWpqN{jr^%;PgFes<NssiRBT`6JNbb#
zg@3jOTvAtmAL^&Q>FRP_VQaNkU~x}RPxBSi??9YsimW32T5ry--;N4Ogi0;Nd3Oue
zV<quXny^lfO$JBfEpgE2)ucj4=v&m-kG3mq{z#KF+XK#XI}5(|;A`AYw>Vv6+Q9-X
z2U8q?<hCI^1ic`(naYzV{JXKXrVkK|&-JOmR&KoL&7q`LUzos)3^MqOGKZBOU~8Sn
zpc+L*Ma^CpGB&CCOf(dWUH-yP5Fc^Thd~jSH&Rsakm7W+1(i`o%p0EKVxVkMD5?`g
zWG9SUcfPR;hvwTj>Qa-9dddK>;1KTx%%%M7$$sNO&#&@}D}aA*A-?x_w=-2Ak&xW~
z<jTz=^vwOkp4{H_klI&SjctRFzo+1!1-{=+Xh^n_lbxNt)ERm(Q+oiMhF*&|z+JvE
zIHxI`rbOah{=F;yJaN?G>I67qsMO4~FKeX|)%Zq&(ZoZLRe}=~Zyr{Z_q03KAW+@7
z4WY*saCX4Db?rGFul~%|MDm{%ySp^~^;MwE-PlD8zFS!?Hr?RDOw-mGf(b~y+1;s1
zL$AGRz?g6bgkjsg;Rq<C={H5-4k#4tr)xNzejWetv=VIhFn+SCRI4wgv2*z`hX4oI
z>1_*QKp;{8o&b@l03Lp_Y8;EhaAyJ*D*-qf6@yktb9MgoQ4a8ZydVFp4zRa2-JZ`F
z>tsT%w?4$<N_iVev{!YYW=Hs4CJseV)zd<gD#CxT3}{q;j-^UzNg<Z#dyDpP*#t#9
zX5@$K0;+O}<qo)7MnScFg{8!C(ayQI|EUYWA|@uTaWpnIj*9(+bO-27w$__t5NsRI
zfOyF=!y^P-@g*&-cyx{ti3;tdx2O~W9zMP{BlW|Dxgy!@rXsRG!$S)3sN6r#RIoNY
zydS|eU>p1z<x@9;DZ$JGH%N{Db;Q2)cKpxk`x348fk`&Q7P5<p>1ylVOH{SEi5;Ki
zaQY-R{RYpoZSX35wHoi?;Soi(3}{9YTG9GwDyG1|C)gI|=H*=CKrN})aOYN6%?4nK
zIHCBc6cX$u3ZG~3G^9ONYi@p5$}sr>Jj<$8_8qwDGR@L{5cpFe3foRsflz?^mimw7
zH<$55O@k}IfdSV<p6@6jAt5d<UKRVG5Ti<BKEJ<<UvksaTLPjDu&9#mL0}K+=IjPp
zPSd=WIgq{tE+z^ThXP$=>St`IU|E^ROpMw8+qINiScn>+x$cttAaBa=>RH8ls~%y*
z<IM!46HXgEwlM`(Ve*(qU-k~ZaBl(_t&NC806efT9$<<S(j~y9T_0P{r>#{)0sDeO
zQ*-Wo^8tYI+64%l)V`@bGs*=p#3DC`ou|2?+3LCZ`RnWJajfEGd{j0m`Bd&DWMCUY
zGoRw>!zR#6v3}S}jS-2fi{kM0u_DJN0`*+xP@{I#eV6+}@Ybg{h8&ZG$7pR45X9Ob
z!u@eW1b<0KcfLJl-4%vgqOe#q4RBD9lQA~CK~o)&A;46#9=-UrKi7B<lnp$m&ou6T
zk&Jt4z8>$sF)%QIKp@d1yilf*fLG5Cue<>TE`?C~l`iP<PgV!_!cQZt<NmDT?58wL
zv9GBRm=T{cb$lqH0rHE5M8H;SzOI#gT<J2ogc#ynBnmC=M9n69UEHbXwAl9Oaz>cW
zIrK$8wyzPvVr)erphX||695tSP={{PlswW7j-!{0V;T5B%%vC1d>fX7BCQf27=cCi
z^JxMzut{-+>h-MLxeDrnDN?}7{{`Has*e;70qV<Az(hz(ODkUjci`mc_$f5!i5TA6
zBZ)jHQ>}cwvzD|ZkT#T1ap$ag@t=XS5*w01#DbLJY%1^E@yPfUaYc$T?5V&)mdH@*
zSxI}Z@je6;(y7nmeUSaMw9?aqnq8tEj{0R5Z!I)843K3+1^p(!0Tg;j1Vlzg0xu9s
z{^vf-QI(cP%27UnGL8m#anrB;5mFl)8vwR`1g^y-$OAl%f(%clr}*^m06G?aI=S)9
zZ9dBq_HP#s!q`Mbb7{W<rA$%d4&>Ga%BzurOvuxn3t(1djaPc2K`hPu;vZV)A-5Iw
zHot<Vjrn~E5r<J55O>?+`_*_Qfcy7m>>BrgHNDx)iB%r0`lu%JkQV#bZ=!-Zahv~Z
zKe0=BsVWHWopjhGxCx*>BLDZq>xUxI*OkMffoEP|jTwMDWN1Ab*KHd7@5NEGj|CJ^
zI9TQZzd2d~DdqY<hj&VVYgCYVHjO`!w@34i1FU84z!0y1^Mod=9Jn@KIc5D9?x1F?
z7L^pdW{xmvM%V&=SnOnw8xV!dAOnLseqdWW7s9m-461yr-~W&c7IvaJf-cDanciNX
z0ZttP+z>s8VkQp&jnVhNMJ^wzf+-k){Ovvu#1{Q9UNZF}R+!7I59j~vNa(k>{C<GT
zy#{n5AIKE|dmZ(k)L{S>G_0S?Z_dt*3TJT*sEX7K>#=_Oe|HmEg;+i5QB>Q(<<W|L
z<6aFByhOWl9h}JG|9s>Md_)*zi9jL%Y=Wf9vtDvD?UtM40Y=&saG@}K4Gmg36J!-E
zs8qxo=Ws^}8X(hQX3Zs=Z_NI!+{g~A4+^TfCV+#A?4sP}^X#z<j(ISBS)KFZ?^Ac-
z5=RCWmY}X{7pmI#j+o*Jn6)#QL%pVPDJgwSPw@1!5d~}<<#Bou6Yp?Xz&(*kgD<W)
zF(;puYBpfcTfkqVXHZsGPl$^{d}K=S1S15v&^nj6xVS%~qbf$oDt0W5Ro}l;(bE?I
zGfu#)^Rhw8TzTr@gjmjNI9)1OEcmnRSwSP;;tI9gFO!qAQrmy3`a6Wr&gwCE{61u2
zuTdbY)XHb<PocOtSirtew6bC<Mg_O}Hd}Qqi3;Qy{^%;<NVy=5!=TWQA3vJi;w3&s
z#xOxK4(uy;3|tJ!W&k#e7C)fShRXCakNYPomy+4fn|Pt25sA71ug0m6QmA5d>KHqk
zyOAA;{L0!<*x1-C)({@?@Wg%j(vG_P=}T%VS|=|%J20Mj`u`YDuy`sn1pKZMG`k4V
z%-D>0aWV@dB+0{Uk^5FDoZk!#3{?05uWs6s`i6(uPjaAOwM<!GAMTm%Ux%re1J5M`
z6o0Y}N9;Wv7TGK192rai-yWG^<Ms6;1LLBRAZv%VJP9y)z^kW6@Y@^z;V3FBAspc_
zLt+}d;Naj_NpbYyP{fKSXe^QxLg0wt1Z{9cO7K5NprHg3z$Him7zoV0b{Mg!VVEk_
zuMwACo8<*bB^T=S)72t73`#I@iIWAlA>{Ml;%T6EVLyO|XRji%a5d0hmSKcEEaL${
z{P(2PNGXLnR1kA_tmoReQi+l%91brfP&mXBo^tu2EpG-Ty~fvgLwv&yg}#lG+IbTW
zeT;`H5X95tiwe%PmLLw!q!qGm4Q`0>ME(P6b~eKv-eyG}CcacK(!=Lk#lYvt8A@mI
zy2>%S!~Uy^VWx-?2%!!DpV4P}t0t|<Qu^?KJS8t6tVo4iS?+m6M4HtK-aU9xZ<~>A
zLRK9f%U@psNX@PQ5w2yX4_~Pi?SIZzi1qmqSr4EHNB{is7G0nOiA4ZBbj~_Mv0=Kk
z`w;}p>%*A~fC|qL@e&;8x1YZO=u3FNZsiBCpdh*Xz_kDuw>{U$|39+@CE@bx^c$N7
zF#YDn`<WCHk*m!>5-aY=EkLAz+%qF?tGNbg#_xC|MnS$$u*gv3iGUXVN72=h`Vg?n
zfvEw@#UvN3DlFUtiJZw+UtfU#y2+K*l$HH(%J*IuQ=ESSMoa8^GY2peFAmY=UpZO^
z6yDiPHMvY3uffmvXKL-m*q&I3zL)$X&!i^ldmO7yH%{scW#MEjdS99b%-t?v*hllD
ziN)3FBC?SYA4$vJ3o-01u-i|)w4Z)yJ4JIaLr)IAmD4HLgwm;ABQ}(lwwTwNxq7=W
znuIBulyNA%_>)OLSNu!u-aS_}EOZB=OH+7=TruSSqHW*z;@}q>n~^zfXZmb~#oT+|
z?QauBO0glV4{_NNGI1L<KzRKNW^I+eM;o81B`;-HdSf>pPu8OD>4Z*hXEDur?vw&H
zM+ewc0C<GV`x8Kh8E|0vpil$n26A7b-O6(5lXcGbc&={DMlbQmQXU#-ymcJQ6FK1t
z=JKJPOmJ-Wl<8?Hm$}HdC$Z`R2rs>W@0sbi{qr;*Cp+$N=L4-qV#HG|yBg<DtxcA-
zRi=$qPW&v!N$CR-ky;#m>W^zU(fcrxJ{e@ZY^+WWxk6GcHxx)IwJ@)Ua_&wqtTRg)
zr68BVNtDc5xHya&HcS<hF8WS5$ud`uJ7c-w?WMWEok8L#hp1Q&9xv|iK_Zi@<F(&&
z3tk5zcN?H4ffdR9@^Fd6A*+$!dRzemb#fczqudwU{PA5Jotz9k))GNd`ST+MGDhH|
zRtDI?)A04%TK{3ZN0L-}9%|MdV0^XBJH2K^(lmQq&4=1n^!|eu=C5x;zH<#{8yRk{
z|5RP5lZ9P8CnO9t@GE)@x#&wD|LMz?SZntMi^3%M(Yjjhcj#0z)D?k@e>(GyD$1Zn
zOn0h5@{A6enyMOj{dVHr+kxjL5Rvt_Mh*Iy+><+JsthTGpKvalH&4oUuy#!dFxNK-
zH*Ps>=OVCW=OwZpYGg=(UxgVoUxNfO3k%DtZ^zpv5UPEb6TZJW0kXZ8C?_YUY3Snu
zGPT;gMknh-W%}&Rr+)yJ<Q5@zU+xOmt+iY8XV2In^++hCfCKud7nB|BO~4k?c&(3*
zj{%bis!6Czw2n4feBfuwFgy9zmq$ut3PyIihrij`p2{VOO#9}3uNhazer|mp`VpCX
z0H-FqodgI|k0#hrb(VIc-xZKNB%w7Q-L+`zRmGh=R?@uN&|E~Z6VB&lcCK+-6)HSO
z=TCU(W5xQs#j9UYUEOd&Po5I^zAn|5ANozP?ALQd0E{@nFJH~UQjDF6<zW%sf8IeB
zpDbiSa_>)IEb|8>?XP>Ve9DKAc@t-}KxyMS-DvbG2;Yj*h}z_n*`%pzO?zW*lt5Q`
z9IZSEc?f)8=r=eEfT#!H6(QSc9<q6$te`@PGvF28WSzrklg9~9<7<8keYWI&MZ?D-
z0Y?S8uI=7_x&;Pvo|B&V%^Y7MeWXLN%nzpPcNVh(D|VmK^yM>fMA6c9O2~MXkp=i8
z#4-(k6N1Sn|H34V!&Fems4FF6&U9IAPS-Dn#NTVP*)I$tvh8JVTg1tGZ8Tf`u>5=}
zfnsC6mq|CqW}DhNJbb>Jd`_lr#Md|reOZaI!WeS-R1eV%37??Po>a4y$Np)t*&zX;
z+ny31hd55q8vx~|rlvTYLBR{!oh1nEfu#3+JB2l$lfb+;vqF`BLZ57GYx&Z>d?^e9
z?4}z~k|MJoI|(zr1?0NXHh`ARc5@900y1RcEV?xc8r4w-lT~)LNw=V%<+EAxV5wn3
zI-m8QMmKv@UmYFj(N}8n-PBCOGN+9gKzNXc@UT3U`=Vjn{!w{M@!4e{qRxIE9}<gR
z-Qld$uraa<?&}73@%|aM4Vxr4wzvyef;T)>*W6K=+i@vk<g4J}Kwp}3=j<4ZfzMV;
zcI3;8(@(-^EUeLEumZl4VJ>bhWn;F^&29pJIO2=2r_1r?tsxX-S|1mgd)UA7EzPDs
z7(HW0EhoP$8E*aIb>EIRH6j*Qn+QD!EXXoAvd@5A@({8YLt1O{fj`Up{{3|vhx~`~
zS&*VTLVunQ8{Uw7WWl;^Ok}hXgsjB<4S>Mfc~9o=kKp_%319WJv^LeArHaYOYXB;<
z7d1QJH#w*BaiHTqoyUyL#E-ROf8N1Ngss0c&2<}X`@x&_v#5`Y!%#ZIT<AaeF1MLv
zk|ew&=;5d-i;jG0mG>VmV9v@UTeY_4Po4jtI_d$1+7iQ)NYv~Ot#YTzlP3{(Uu!sC
zDw^0LBMn-J$){n+*3?=YU_E#;RI>L-bxs?<!XoEgXKZhVb8~aO4w{p3kyS7!8{J^f
z(N<zx{}>|0r>F0nc^dcC*v)ya_I+u}ILO)l#GNv6g5;p?=y<H}Hg^Ur{|~M5KWnZa
z0P+;3@NrYj3v8*eU!ah|Awb?$WlUivIQV>W|7mSFKDU{rd-#S8rSiG>A{EOMZMh!>
z7Cai({OT3k6|2vZ7RSc9shst8<Il-IpHn8(9GEm-K#7S_Z<yv9p{2TI31-h*7E>{d
zvQ4fm@89)aYx9fxn5?`X&%}#Af4<7+erl4GLNZ;%U_Y9Z$)hlYXWA$4YPSzxzx{&w
zBl=hx*!NzR&@lv=%MXAu0u<!7tcuDP^96|sr8jS0-#n+Y1LjaBipbwH1EDAl+qcGb
z9bOD(tk%_gfz*IUvmB^WXv}!Um_u%J6&L|59B|51cSw%&PX+AjzqUqkV#~iZk`~|F
zU;m=6S;54wY*nj9;_`lnUt^nJB|a`?qL`cj^-Xv8pC5C_<9n()4GAf^<Io~L>k?<H
zg7M-3hPmWIGsg&Y@*M)&%`f^-BA@b6ay=i|W$qgr-wUm@SojtAxJPfAAxEY(SDiN^
z)<Ow_^?+%RnFbI-N`<V)S(qo$t;V2_F&n2vAE!~pIFuy!eWw~=%N)iQ;>S5W+ntIR
zdpxlwkvF{OT1+=s6<QjgF<j++If_Lw+iEdHl3Ww>Hw+;%6i4ducP7=NcUNsJjQ22Q
za}&S%S?E{jUn_hYUag`riJ`*YxHt`alMjqV19=^IKQ!4>zEJbpv<aFQe`Hj(KpE)g
z$&8c6(P%qyYS|ktdn|RB>qd!g6-%Wan8J-8*WvnBK?EMZF&np@f5hBwdl55yLC`9A
z;q@SwUE<~f^&loRIlB4@=vRGUUNuW~czv#&i{r!|rvdpC;TX~!dX0%fP)o`OvtI5R
zuBfcUofsMz=*$E-I|4zhiz)1!gNeOilg8k)LS#URVYbN^M6cC0*Qxv1+<g-?rV}O>
zZR3yPyaPErcEwe@MOE8bJa#$bKML~mt%vI>BpN@<xjU)G;a+N_@u<$!s_61*ZjWi;
z<NrjUgMKFVW%sZh8650dt>+h3(Nq7dsi(Ec95Gwkrx_Jnrtdz=T^%=Sp!4cB(!BD4
zGsb<ANbu-~CTu<@R@ACEh-3)5qxKywU=e)XW$%jU{S7*(c>`JVQ&1<N56a@SwY9%s
zcMwDyl*es_w?kU*L4*kbytv0~3a*s&3;4KP|8qG}D%$5<a^^p%oZ#AiMf0adC-{ki
zK8b$?2ft}aFr%SCdrg}z)2N`&<sgndzV@3Qj=j^EGA=?}XJQu8KYaO=18%3Cw^R#M
z?7m+HXSSMAus_Jr@^`>70ANlo?Ec9&9)#zaHu?dDzrs+UFMo143psE8&XZ5ZeIc_u
z*LVTgjGse8Yp|~>-xeP&eaB*N)3LZl?_9)MS?gn`33H?&fW;xErxb_LGO&byTv~9}
zC{>Xy9n~qFQdKM-77nMSKedV-PW*XI3w<1?zQ{~+HrIGaZ7^n^!cPr_=hyIG)wdIx
z);9WH^S}!I9@73tD%vQA0gurE19_456F6N!ga1SgC_F#Z_zjpx5H*w+78Zg$XPLk8
zZOh&D&ZMK-d#_%VOQsJ4DC^_wH8*E(uCA^?!q7B-%0`4Ol8Om=>Y{*bHe1>U|0Rk%
zwY2$1g`$x+MI+*JcHcc!Q>9`nX<~THCIYGl0-%n1ffha_wc$0IIcaAN{2xL(V8w*e
z(RdGh4zBt*-iOVW)YMeK7S~$2?}mZw270ZExpv5-^e<nIKuiHZe61$Tpv*{wVi+Wf
zK^FECDC^11%Ue>S*i9U)g*&b!p&c3L!vfarRni1qpl30(0flc68^;!@QyHPT=?!Iw
zX0>U5wB)RZgo|Qi$rwIAw{zSZ45yAZ7A2`2OtW~rlMC&wHbZuB?_*~>d=ki3>#diQ
z)M}@-RwgX2(a2|$`hBKZphe;z9UC(CdCD^pTiOqj>sS=RDGyfPulp%!QtK>(h=}d!
z<_Jh?-&cJcy}1Ka=Iu<ib?DATF|5TCFhq7uM?JZ@FIyK5fL}mza!Mv-Ax*KrB8{u4
zs4#kGX=$lD&IR17#MAw_1n<Phskt6{>b5(oYUvC`w(6P@E7VVp^C&eNlWb!tI0HAg
z`O2WY{Y`d!Wsi5X3_-;D%I4BsQ`y(?&Y_x=la|QSvpyJaH%=pzF!IAY5EL?C0@P{<
zGPeQ(0`PNU`|=ef{}3kcwM0!F>nvRDhRy6q;Ks+0<o?Vbphxm^bE6X;0L8nWwg%sU
zbW&pUdjU{xAkN5e`XvC;%n(qU39DZxsh!c+)3cds@SdvtfOLYW!@|Ju`Xw<62Y)!w
zc_tjjGD8iYxPDC{xrQUAq95w(KTRAFnVF#@X)0_OZ$l$K+#)($GMo}zkh>Am4el;W
zY^)7c?5ue#_@4F-D|qF7!u?0T*2_d6Pp>)Z``(^Ccpua#t&|eB$u=Rk{mBY*dBBte
zG(Qvo&el8O?n>j-0V3pq_69|&AemslqSHe#q@bHj+Q#CI#<Os&#mVYV$ArY2!u)Z7
z@L723@TVlR^|z{PW<Da$sY{AStjt*b!H)oIfhp};DqN?DzxUz)arV|>S*F_;uyn&q
zcQ?`q64EIkAxI-7h=`P=(%mHzf}|qS2qGyhQUaoY(jXzBl!Vl`pP6%h-}(Oi=9+7+
znR9f8_j&Jo@3q%jdp#uF8804098clzt}Q%(gZnZfmsklE9x?zTi<m)x+#HGgX>wlP
z#qTzH!Nwn{bmC5f0Of&Bk6!G=miyhZ2h2yXq#N+Y3cYW98)=<8<d;`OF7RDA$W=HC
z@$7;Z@(e}p6J6OevsX;DSQHNXc2ny{jG*76Mf{@cPg!sa(*V_@!ZC!yK(7e8?b->-
zOl8wLA5A4dZYyxyy12N&oG~o9L`c&I;G5U`GO#<K2A1V#q0rRksnvJHhq18sV~Gnr
zlAqk_D~bp@4x6+VbR;wWnC3r(?cKR-`#Of7UH`hz(JL-L!zA<6JAD>t6<Cwgq7TQE
zy<@tfwbF;Ty!x?vNq){X$vo7i*Z-P3Bx8+py4S#WUz}MH7%n{8c9;!97GgDAZ{B3n
zwy2tDcK-Hev`D=xErO`Ud+R&EI+%EKK-y{c`K`t<x$NP0jfqRer-yUo^!n%|$UU6-
zO`@EpkH6Pa72SH8UwZU3m~7CdU$OWvBZ<3~)0W{|eX5IBSNieS&9{ah(P|pKaljZ*
z+NX(h3ypi3CR>onqIsi`Kj_-&GoerKZ46h*>!Pex3o(Trd?f<2e`z)%`9|MVc;djH
zKcYM%#9!BD&BDw38obGGw0~hNu3^5Jf#WpU4t|L<#0u@Z{Tc+Ymc!Y{bKr0QooIP^
z*$ZS1fa=t@eHVW8J&}hwMoXxbBC4HmWuTxU<7^jq8~7B|RqqWxI;XWxRzB3%TihQH
z20G4!1Hz(@O9zEcvRtzbTV~ns_P^=MPX0`0I{cx-LA)X1K5dg(`_*?EX02M^{q+R*
zwbF+|aNP>kZ`{a_dPf?Sq;lP3WBC1FuL-Ud$-Di#ix@I~BDc~>5Cb~f?T?od@jER5
zG;hGkV33b^AnY>Tu)psK=o@RXE9>mM9R~8p`)i<ua<i|?fPI8q_u3A4L%=e78PWW}
z>JGz+Cvfl}IIye52NT6B?0igN*T=g&@%wPEMCe_h4H@u8I{s*6vRKbb6exTwBPXkp
zu)bIa_x12yHabmpt!+MHmMW+y4{+iZyUsZB`M7mo<{?MWh*yc;_dIUX1-p+fsZsVE
zFz7jRaB}$FG1hNy^EgpEBbp#BaXzm96M+_#I`t$s=Mz5fP&o3bcqqu90=eImpO5G^
zS@a!nqlxy8vhL=_)bfUZlpD#CbYEQmTGn@orIfW)!M4z+H}Uyjf{-y#8$*w_U<&|u
z$$PB$2DOD78sQ9h!7I();@7)?iCD0C6QRriHW*hwK8{N{Itf85pZoFS2XJ2m`c|`|
zvbfJmOblIL1(&&#?l~4$l~TQSDxe$u<2uA^VM#Gbskdt=Ua5|0V<fm=8>Z^~IPuLZ
zg`ImlcO*T~OJ4|I@6)_Ve`lm9GP*0G&|-Sk(=;`3cK@)S@zZTzmEeirb5akNoG8@)
z$j4!wAv}6CiD>ZiEKz%W!kJ#C$K^&9W+{2&m6neOGey7$-r=%S7kM-ZT?GWi9pH&(
zp$8sLKP1__tA_eYX;S}&A6&K0AlHJtiHIlVbASWUCAPpP;PU?1LB)r4a3DiSy#NdW
z)gk&M7sTGmH()&?{*KGWqG*kg3h<IeT;2p+bv&tL1X+gpJXodAs<7V#m=jY~_FtYg
zp_qIn9CU3FXG5a*)vtbo`W4>C_!vD-EIjTQl55_tO?fqov{P*sg-7AdZOYuaF`af|
za_T6_?=Es}uAA3x;5C+>#1M(y7ekJ!+{a7a)-WL>W^GDii_zBxuN+V2i?jqAF`F5$
z(HO4}!A1!%`X}JmZUHbtK*gUa7tnO{dKljM;qv?sw{whSHf7)NuzCqmeN;staHF^*
zAWY*06+|BEM(`5!xi?xQe*pV~O;=<`al|MAJ<TGR4M|=W7k`4Qd477FJPX2@1sDJt
z+~j~ZW7yd71xZYQ65L%tmo}pDgWw#hNB;dtcF5xe-D8tQiCZ(3B{Gy=NrjvHzs;YY
zjWsD7kQ{p-rFBjw98ro-yyBm>l=Lz`C~ogy7%u1xpSINvnY#rs!ex21gW5M!uW`KV
zwo$~B6Fyq>OgikcZxfiS5gE^YbN`@e*;OF->B^4W)lI(Q5is)rm<%Pf#<9+)qNGGn
zZH*5iDOb~bJG?9aI;EPy*Ny+`Rq)ZAGy89MfHZjlj)D9YxXImzx7|9hfZc7|s-J=>
zGEtL;vO4cr#^L<1?P4JrE_mT7fRmz@JAGtnAn1#4iaC8L5&I-*2U|3!&8YllC<QiI
zu-fARFlJ4FJ-Vc%Q=W>Dui6f5sv)}}7&z8vxlp{f2Tq}@0*rtv(zp;wPj}UYaHmVI
zr>Ez}vnx_?E^Af+xP4-Nh_!RRoMB~sO|1WflaIs)qi0NV?ZNZkrL9)>Cx%|GsEf3j
zkZGc0t?}hg-%Pew4+@8HPI30au+YRyB6A-_q?*0JBtDLNM@3QD|LH8i^;77Xl+4o{
zbX}K}GU53H-d_p{b=GCl9p!h#LvDwuFi^Ry%kJ;GoV{CR@U{OyE%0P)>ZQX%-kIWv
zX7a?l>qB%`_XaGbaE5>To~{Mnl|skceEwf9Kwjt>+(O(arqE>tAS<c^HY(obj|Khx
z`3eJ@aP4c^M0X6i&0Ds0g1E!x-|xe`n(POt?yr(5jzEL67slYy&5d`kDK=y72&cK~
zk~6WP%CQBm@vV`9E@%#hdV1TSIm$tmt#$@yR@8_{{49`xpfqPPqbt)b$Hx;I!apAZ
z72W_R-X^4-E=&AA)uL<kj4TL(l2j>oCj}4#VCXQ?mB8=WkWkv}z+sw>9>Nko8yf20
zpr0u7s{w?7uNCHpX$CqGp1|IxEp!ckZ}tKG+A5gf$Kf3H$2Vo*6#%AP9u$N&fJRUy
zJb;glCSjINdmfMbY<Sh9aY?&}Bl<IIpNr2~+82Xe3i->kKknX?dlGBdi2LC|wVO}J
zcdrnk``ljla;95tY`eH(5}y1}sVZ-K8}~Ypv!S-Z`k~^l*f1=uLuzNql1=>nz`m{@
z9PiRT3M?0!mh0NRbt&zqd09ms6-MxgaQ|av<WF&<=@aa#Z%^_J4pZVx3b!>LS}hEk
z=RL?w=VbELPYSUMx=2Ch7*0j(Y78iJh(pA+ahYl|-DlbzN9i^UUb66PZCJs8S`0O!
zB-|3;fLzT30MXJtavA8?^!n4_t_RZ+hrE2A`iFLCAm7SO#VCNIk8P(bpQDq`fITn7
zqxvOZ9()49qXbhlC;3cM_bVH*vA4neI{&$2Ve%o=nqKChYn`3iS5x)F@~XkmQmmf)
z>PEI2wlHbJmoHyhTCSZ*-HPwMPpMiP0vfwbKQW!>E|9n^CD9neIZ}JI!(7NM4Q%_}
zf4K^Ae-38VPP^zrN3!NfVvr)6Ws{5<p&(ur!lA0L@+W1Fj_um2%*ye!C=AM&c;^?i
zQ>h%1qxAJwNq>a)kijnT->b!cr|JDW{?4}kAwT3CxPILumA?@^_E{CCHzm~;51*OW
z$i;+WP{FW4_qEiVHSaRPTc6x&%$OSeh~9b$q-Uv&3+Z=!xqdy$p58Q%d3%{6O5pqO
zAId48)E5?3DG%QH2Z_Y(sv<oK#ey+O%X0`DQ0w5X3EJ)BjvM_>@6r%Lo!`xFh7dhH
z-{zrqA3t-Nq^Yi~t*vGD`$2l1(z~>Ph3QdKVO+&@L0*qJHuN3zp&Zx@#O?Ol`cBC@
zhj_FR8C^Uy6C@}3_yB8xE<?36nvScO(~%_1fp8ap&9yNzo6dFe3JR)~WRa?1{@IvV
zjafT29dda`kYXP0t$%47P25p$Zp&MFm-T?0JMduW>Kq|_=O=Ss6P5r3j)dAy3DJH{
z9b#_cg}{)~t{+>7jV_nOt#~DP2R<JkZgf^@v0v+hmg~)A=qCZ|pE1tAMhse(G}R30
zw>*BTV#Q)EU{=v@o|&_l(sEmhH-z(q;-_A_6-DwHnoo+*Ta6p~%PKuvPtz0>@Jrsv
zUrzASIjpN(uFUAS5M2sX3oYSk`tm^fVOL(tpVh#lw77`nct@t|u9}lNczrXyv%C?%
zi&act1Pj^1Ne{n7+s;`FWI2o#)zx|r-*Rzsb|iwCO7`;QYG${iyddf61E-1c+{K3b
z6M{^))VgWRP1+`5Ys&}RWP7W_zrU6l0~{cYJ^?RX++VqXzuR^;FT3azt9@VzXl={A
zm(jS^;l>x;+-q6%pD{_Zp&^!AHmBcxwP$=}wqtIZt}h3EVn7_AZj=6eFj{yFSi*WE
z7Z!9nthdw6U5<~Ibd5IVbteZUF$F$8`xdMg>KMh1y$3(PzT#TyN+*!y8`#>iC0xJp
zn;xE>)MEIlmU64#7&K^A6~6m6!+f>t&C`Xcl$JN^csw2j{pe^{4O&VIo$A9V?o{UU
z@%Fhi=5jaQzj56C{a3oFVA8-58?d74@BV(muGV$$r>bdH&`FJD@HQw4_-91KTuZzy
z3Wl!`v*7`r)BQ2s^8IawdDS?oR;Z{jB>4<7{F-hQ8=L_!Km7ZUUGJLvVmB1shZqe|
zGOBZcp?vJJ!vtDPbQ?nVRdHFi1)hQHzZK{nlTYAQR3hqZ0p+5jhMY@V0p8a<hgh0k
zzsj}6B#n>@NK|jhxQo6waljY5bGib4y%#T3&QDiB*AcL2aNAoE5cafL1drVwLIwcp
z+}qpRH_2K29B=i&cGO(YZ*w9xw<B3@AzThQi&}M`TZgh=kUU5Wbb9{feQB9Z{j<!0
z)ZMS$w&J71EsE(S)tIVYSQJJy`^%RjRGkV+|JrAEi=H2IG-`M(SQY%>`>0J^SGFMa
z{`O+lkb&8Y<_A{bm*{*etGn~@sh}Y*({Ha<9h-lSnrg5Xmy8U3<Qhx_A-l>XvWAh=
z6e2URD?&t(RN~g{!O&UQJ(wr4!OrQo5J3$`C0u^zC1T#cz*T?l)`<rTR%@UVk72aI
zZk1GL=cxfrE2y{hvX8Fx<DMd5HTqH!;<JG><oz+3RohB0A)QuH1&vJ9b8VhED5o^L
z@)_;mUPzW;;NR>J@meYy%MH}I4!cPo%F^X*H-JLyO2I4gvXxx3p?j~0mgN{jOHeEx
zOi4JqeHZ0R5598-D1??dsCE4HijW})P)*hZo5Ucc8B3|=huTkBY^>`8bs1-xsq5*M
zw7*`Y^NLFsk8fs~mMK4qrSuF7H^9s+G5P-W-qFYW6q4b;p|`l~bfnrIY(@T4^-Ab4
zOwPP2cYmp`x6$jRo7E>*HQ%J0%)2Fqnu*={MU~6lw`d1~Y~mj<Wq>R|c^`!dO*`qG
z^S96u7ZA|9lbAj)z{?>X;IOqLPS7qRMD2N50>$qS_-!U%j=eVEewTg9sKO760Y8=p
zj6n_+a~T~UBnkI3y>5)zmP&V}BnY&7(a;h-;aV(oG&#$OKN1yBM})-++#hv5L$8-q
zpUHalmqJ|eR-L+lhW5?Oa$9d>anq-qL+b1uD&9+Nm4<y&ppCXURKS~<4?dQptV`s6
zy3|p;Eu>F7ebu`A#jUog$<~Nl#Fpz4jc4ID$VbP0h0o6h8|WRQhmq$N??rt#E*d|`
z2|X80zQqk2A_vfg5#RCY5FB#G&T&4Z(aKc!7l3=NeE-VlnDVMuU~J>C)`({c=+%|K
zaR!S?jiwvXj;m%Jw>O8a3MjUc0aOyxdrSM-MC0Rx!gBVH37co88>L$n6RHQ}+9mHA
z9p@qo&&=Z<dLKcvBk%}SJ&vv7p-Hyy6KEt`4)-+He3o-_%Cb4J%zN)e(+%?bS9G*1
z@-oxbL@~b>!GE1>yJ4nnZhxO$OfJapoZ_XDRl1<o=jQ>#zP8({OwT+3Z?lzzX6gG~
z*!5}}i;D#VSMv#4g$HQ2)l3zcrMI9)_?&{RDw;haJUpC~{nPq%<5;0;oX-XY1;vNS
zIl@zE^`IwDo~%24>G<=xP?Z1_bL>IG?t7&8kp^4|FJCo&rstAyO7*Sw?x?Q|Wpwe&
zFqeLDl&OpN_r)bH_aq40&*k^I$*B7%uAA;b>blqU`y*_x)j~H@-x}N8Z?{suoEM|X
z+4p3-v-+~yAEs+}m*!+Vh&Kmi(^fCr+H;Dt)&!b4ob8vR4awA%st!+a<A%C{VY!`N
z;)AK_TLr6kH{HP3QW!zZ9?gz_-r!NgB_LJdW%Ohro~2Y=*r@L|aD$T0hLvbYK}102
z)vLzkr>w&n{fjyx9RD?wKp;Ur8PPmaB~Oobs4YG9p*nUy@*8}(Y4y0p*l9H9p9Qmj
z40I|l^<%KN!MpMW%q1|le@j<>IqUu82*sc1KSYU~tpEJUm(c&Hr56kyAXPjDR#!z%
zQAOH5f8$Sv$Fr+L_NA$*{9YTO@?}%(K>Ppa_e2-P_s3ppgDMUsSsL8i4DwI052{3}
zFE}$SK7%a<=I8kT`B^v(c(J#E`#^{q*sPud$?m8YP%uy>Wq*FcicP)umKg>3V@`gz
z1&y2D{j)Y2_CLSf{wA+h{?!NHyZ4P(cI6Sw3_hBajG&{1D3JUUGr-9#bp11MF8}Ap
z$5b>FeM*K_3EC!@5lMe82L(cA12XNx!|mQzS4IE{^yVdIfU<-#$V~j7KTGcL9m=-n
zfYF<Muo+fx(}v|voCp5?pP>hK9zHAx2X`>~On3bE_W(7xUP6J<0F6%D>Ug?Dzlf&!
z!M8V9Q$Qj78?NxruY`Yf&n1`HmSbRa=3uX@rKN?Y83tkmi^9-`G=l&9sow{j{MxAW
z|9nlQI8S%!IR5A7bV10-|Na&Ra)#npu*IQ&2AluSdzbEwmuH!nT3B3zd<6JvNoa(F
zNmaxhVB&|}az_vm92~gHt{7EXWTmH%gVujUqJPT^yvNXmD}Z_ewr0j<>k~aLCb*N5
zo<YYDU7TD2d;i7xiK~5_%e`;!17sfAmpPYq!6!?+!-EdIXa_h8fy5Fsx7XJn1*L;Z
z==LCPVbku<S9w4?zJ-Fs{oL~=JoMpfdxOw}sx?_;WKLjdxM4N-@uECt;7fq$^-f=%
zzzYp6{@!R|4}4kSf8jBKW%LaGH4c;=aG>`G#fF6!H82cZ-nq=o+x#e$0gxp1aHZNq
zPv<&{<N_+9ZW7Bb6Fg1#ZbdMRp=v&U{MY~|rLy^#G;lSk;Oh^B7kNe(BrwVT1)->I
z|Fc#Q7_ngtUz+a-E2ncC5}#mkL}+<r4dOBE;-k)6!3IfM?m&reaY<M1n1el$houRa
zFj<vD_}7N6DG9?IgO8?0bougf8s^S62u-IPZh$e0-k9~2z|HB$2ErScjVk&Q@aGfJ
z6^gV<elYXHlerI08i<D=?Ogv>%gyFG{;ABU;x7#E`K>k=00%^*q_Td-m8=eBzjI$w
ztD2aqvFins7bxD_#b))+co-+ZJ6zkU8*|pG!ee7HycK|W9ge_P57;%L6IRNB=tYzQ
zfK|Q7u;%2j4iht0#}x9>fsGnp7?rz8VGp9R-e0f^`vKHHUzNX5T!7X0xXpHO#s(cP
zQ`e0Ysgux%N$j<+?wx_z1o!m)@k(|J_QWTs!(b(<kVUpzO1{IFh>%7wOEh<<vv1T`
zLQ;gB(i;8B7;I6*4-lmjR`$Y>24$ctWZ9#UM*n%W${`e}j@R>l>IVMH1>9*`vwh?b
z7rgCgF)rJsDMmF#SGxsD-e@0pUc6Mg7O|Z4MtSYF{tFIa?hw;@XWIAnFhu(cbOE%J
z2Dx>z)wN|Oa?1_#rJpNnUox8oma&C97U&p~ovav>S?~-ObI};lm*Mfdey@8Cu563!
zcfqzIV5^;SZF^4IJxaijHd)7%)XPUrMYXv8vA-XFDK*7w_-y3f{BmcozNweAfsQ|p
z&*+c&mOk<qXbt&?ARq~uRA0gtOB0@@xY7u1Yl-YK4-Z&VAF-H0or>ZcuCV%aL%QV@
z(1|?IG~!NQ9A{gkHYcfJ(tJ<vqS1YXOMZgG?0>1xc_hCBOu7fZW;WLH7X-eP-Xies
z^pOUjr=hJ~=dA&%f0!`e2pviO^TM!Bu$Wh$Apt4nKst*A;yU{>%mSB2BOo(A^$6=X
znKtjFD#DlVE)S5JO~dC$_EtdtEF_RgH*aGYOxWi8kUk7P`7o;8J=hUf(@Z2%4+)9F
zO+AJSr=Y}fy;E*Y4X&K+{s9b#)9^jpCCOqRa{lv73phuJ+kZX3a*wR#T(49|`X`6)
znavrpy;>FV5bz0{pp5O(4`W>Ztqos0M&Yu}6+(Ot@K<hUN+fn5GgsRolWMo1?;x5!
zm$MBe*tmvqw~-hSM9j0#u#D8gC=lo-vd*%2I3yn3GXoV|z^pFVCSG&)3&QqC`)+sO
zfXv&DTe#nTrKcVkiBnxk`#>?%Mi0(Al%oQYR>0=QJ=<C8?c)E@F-gPxV77(!fG<8A
zl&YaTd1iglUe4E<Qlp(PKVNm844y$2Q!yWtHrH+)fUg~hOd_n&+7x#6#bmHuZWx4z
zjt+yQ+=*-Rs9I2MV03-KZqXQ(qZj@C!AujSkI2#8UJxiBA2?4}z;1YNv=g?2yz>JC
zD>Jk2!DtvLoJ7{VoaZt=@Styy*+#E{@pIF=nR!GJEl7>YC4kz3Pq+=@hX~$AK`Uf9
zPDb0jL}=JuRQ^<cG<cP=d10kn6a6Ylcqd3urBIPD)zB9&K}U9VcNZzUX<gF(U~mAp
z8!Jpv4dp%pEeZH72Qx;C><f6DHsfrW!mynJA{Cyy<?WcvTL2pYKItQC>&o}+n%)j(
zE3MHOp|MBrqLHu*4dzIVJu)MizM}V+)fvGZH*b>3wf;!eLbY{r#CyaiS#wy&wewpY
z3EOt#_WtQ=!7@!pB7HE&&W~4_Z{M3Dk_{QV3y2!w#haq^W}&j&A9@Ge|MJ3nh<r)-
zN%AIf)FWpu+S&_t*yi(88R)4QrG*juyP=q{xoCiC!qO{|A5WHeq!JS(@d?8*b2X!J
zzFe~4&HQTW3El(Q@E}$ligQlf#kJsc1)1O&rj9b$ElB94LeWJ?TtG$ghw4`^yWrUS
ziBsYTVl2QcL#J=#>+OCSiYTooiz7G0%{0CphGyrMH_+ezhB2<0y^}PhYC77e?ZK3U
z@53IBt7QRI6PM}ek=@c-+6dT`1H12d{lnAeA!oI~Lk;k-B|d7H#by~CtdniHLBKf(
zs*NrXR@qruG0&jQ5m&M~{=mIZ67_RHi)tf@Wa%fg%7Ptp^z&7F>C75d=gbron%&>9
z>7!TGb|N!7Z+k`LLI+auNKQgd)GWR_htM#Nb@liM2|JGD!w9JID<-{aqT{POTn0c8
zct*X@zOwvCMfS|*jScG3mrm6tw;Y)Z+CVky@KhXvxiUPPn7x$T!t)rPj(~^qG-ai+
zv5`O4--Cg(SIs%3#^_IP;5m9?z`reT=L0=>K)UtO?&T4))J;`dHbdA_dIRFEt9iH?
zfckj`>vX7dSwMikH^3HF5XZ9Ck6c`NNbXsNYqgU!pQgG^dsV(+3v}vdyavSzS<vpp
z*KPDw%6e-+4+(-Mdt`p{=wK5sJN@#5%f^)|vaZYl3jA~q!l(VhPvIhNClG)4->m6H
z<@4OSTRjYL(LvxC;mHdYL>4n&fYV=_L^H>4C5uO4H0q)RN;$|iA%7mjn4Aj?mv+z?
z8Bll_iIjs~nUxE7yBT^e+nk74(uq6~6Du6>)UpQTi@R0Gu*ClU^e$*`r|jAVi-q<(
zWi_(UVjz*mrg#ePRG@oN4s>6F%4lQ_n^m$nyBMJ%39WmvwVeI>QaNkdNR3dZ2HS?6
zGsm!2g_P?yf?C<>Dz~4-#l@n9-`n#jK4xr~yPEb2{7JYv>x<Z8)GCYoKVW2p)37zc
zKnk=r{hN?Zz?SZvc-+x~u7Q$5$TmyEZ{=Xd83jOl>TGqGO`jE82<ly6kF>iVMz>v=
ztl`ziknnLl#tVj=hnYmS!c?&nuyF#)yO*ODGkk#fM|FG9aF)#9!|b3^x|48}HqrHF
zc}w@XwAXO1?6t2ra}l_BgQ<Z1Oo!6z#j4$`&pOu-%vH_3_+k9B(IPHZD*O9Gw)2eF
zN;&i7S+b8MLUry>R6Ymo56~G=5Ppy+1H|h;Nw_%_gTLCinyaOy6&4b;Mpdks*^&7=
ze;EnQstytPh6o{N^I;?`|F{beRzu2Zm^=7?j=dt01H~S)A!H+XKe@j~Kj^sHX%VtT
z^bLU-kN>P=2^BPu49>uC@g4>M=$yl1!`H&T(bPL?YT~yfhy?1_rQ7+lzq^f4{IGx5
z&N$Ne@UE{Vq)V)VksfeX8DJfMP67Rj_AMHB%cBfksbvaDey|FV<yb^>ZhofOrKQ&=
zv&ALEBy-qW8!h_X{9A5tZyX(M$E~<(J5&bGtOM%S0D^d_c+f3=x@8ML+n}IAkN*tB
z_3KC^@gnvF<<#&72$hi!($UkMmDP!{<xyU-MX1`Dx_jj3;heA&c;(2a=Rluih9D)x
z(Nf^SUEkXb-U`CBkC+yP<0U)$`ua%4eZ$?B{5RM;vGf`iXhSx_g+7F7utcLBN9}f7
zt%PJw0dsg4YaF*wDL8W|Q)H<FhdErvb+k}b`zi~JSmc%c%3M_qi})_`)@ET3z>>ke
zhfx%OX%o4C7KS;2UhERS#9(z6I&)O}99AT~1@|ES=UX%>dw0P6rO+Q;lfhV_NA$!$
zA)bkU0d7~!fa#L6)Q79Kp!6XVV!K)=Ln5Q~0n2&3valWdC5<Y@(n$EoXp1}T7$nvM
z89QCrOjlhP+HUlsW@sikI`pmK4U4-2LN+8_`k|Ws1g9(2O{{$NUA;-nBr>#-(h)&;
zp_0#7Fd9BD9AId7!_=f2*gqCukp_dxhUm--m670|8_T}3E>VlhrED9=7{W{d6>4@M
zZpZwj`mTwm<`nI8sts$~-X|H@TNK!Df$?q0=s`s`TcYIAda%Zk6MFIeJ)^9jg>2`2
zMQ&JFSg^Se<-8sKkRcQo<5bkG=u4Fqv-qjKux%}-zD|B`5WwY3Y|?s74Gol4O!#$@
z^>bKbhV=}>;rypkv?uJi!u(F>i*q0~(3JU8>Z++lHau#CF-IQOm_gKSiMrv*b}|kj
zaWUlFwi0mgypRQrouxkw;?XzWLOaP#FZv1<Gy7Ggo3$N#!y#b!{3-Xp)zN$fVAXC2
zQSwA)E!;aGN|YxR_T6>vtGOOp)Sd$g5{s-$UJN8{=KtUV%Vac*pGcI>Bl&APM#RG9
z>Lpw*?@nOZv|}jdXVtHH-SoxbPYDl-r8^T6ke$!6ubty^+7^ycqq#=6B0uH0f1rh#
zEX*%#l3@C4^lz#6vB{F&!9Dl2!op|A|7B7Li#r^DpY(l>*<)AL*O6Sn%q)jB+0ODK
zXuLL`SNgURt<?nF&j?PDedD_?Im`xj{Ov3m)fn&;Jd2)>&=k_k@8A+bBdNhyzGN&N
z9eo=D%Bo3hehGeUginb$;U>PYx}gz}<EPL4R?k5TLFc({FC4tU^g$otc~6NRP01ck
z??G|+_B~25E?9sK;}mk8C>qjx%4a@%I{?p#?A-*C5;`!=CDyzL9dR-Gl3+G$@!>q-
z3vGuz0CBD+_$BE~AzH}Ltd2v0<{hkF2IcT%()GjC8+(HKM1t%Ggv@f+#KjRtP$4}1
z=le;7$56*WB{2f%CJ<_Yw#(um=bQDEsc!FICN;h7H)&!}UEjuzCFpo;uFU$5n0d#n
z)$IUgQ=q7sC%FqgxVt??>bgMG84>`uhXoy3O-ytXJ_!J2^PdSnx`?=MXU1I}9|E}C
z{D0aWhj2=Hts8FKP)%$vW`s>YBu{P80hkQ%w?oua@auagxGPuaek7Ihku-aPl5^*=
zGw*j@P0hu)9IY3I&%eQ{QlKHQXFY_{g>~Dj0>)|An58|V$u6QxUlJ;r_!&qmcI(pq
zNQUh!4-H&Awm^tih;~AwZSU5{hQE;F!(UQx@mLkRNg_7?AukYu1U92!_3FPI#Q(p4
zVxt0y8h$dne=)5#N+lW`Nw><35Iqt4>%huT_P3NS@RPu((O(*^`S*ZkXi*#4gMw?D
znD^KJ{kPh?wRT~6<XkP4V(yD7@idp2;p;J}vBkQ4^=rj*Usy2ohu&&x?;#na^9QG}
zIp`t~*511Mq;m`-tqq;C0g%y)IS_t01)vX3Hg*Q&Qwaz2VUJBLd%Oi-5wt;oCUa1-
zFEhjN5db&3%pYdl0@62p>uQ^>RqYNH%&9p!)3C7K-L2A#L8%%ef75;PlRhUJ@7A|k
zWZ8)2ot__(fM!Gt`Dg~LMee@eL)6}bQe>ov8P*|cvHNmeS(RvD6itm@QPqgc?Tv)X
z^v6=7Ws08u<h@wR`kpvySV6o<QD@@a+8DwMEs1Pkdb}y(-HpB_EFh3T+MPlYPCFHw
zx(YIfW3m1f!&|C@)zFcF&{DYyW=5xp%2o(3s(&!0H1-#GHQ1kQ`3ZmUV4{a0K~Ybm
zl^yQffgSU@U`Gxoh&WBs)#ttbS^na*_VJ+$196eGxcJu{9{Ncf#TGbW+wv3TrePTR
z?fSs@OB}=aZga9@wR(6mQDGjHv`u+*0E7gL!0EO0DN#kiF7xz&19eTFj<Y7txtztm
zNif-T=wS|341Qz`PPyXj<`(zOq(_7lbQaCt4}iMf=3S)JOB=<#5U6*V#KvK0>PY-A
z7odZRmp|yp1#n=!oDZkBo)_73gDoau3kf8z%^R2tB%^Sw3!z43v~39up&*cxk?G+@
z_^u3QfgTXC5Ta?C?q|I47t!>wFM!IT$pR>0wx!M#n!fXL@&U3*V?%evv7J6?l$cmi
zcfPjzuSJ=WKo03<ygssUE4<RM)=(!?PyUU_qFQob5@(fkbz<kx3^5--(#0fN0+P$=
z?yt88L%6MQQ3BHs%%^J~plz@+t@&LGh?Z^nnk@R!CQJ1lBze?hh<wcS75Uge;~rwp
z?ppSPn;?+czX?h|EbiMHHeRc}*>9djQd1ohvZNdRLiERU&5)zA6S>2RXO@XPYRuvG
zZKm(tD5+dx|9hI6{jj|jN7t)g>a4-Z6@65I3#1pFo{aTgdw8`|zEci}WFztoQis4-
zE&TdKS&obY<)JlboJ&YrC>pjs7Cw1eFxa@;3(em;QM#g?D8FkDNmN($4l~al&lAQf
zh~6gVH+_SNPn+0Dy}Y`*WWaMBTBz%nl2N#?HZ)?g>Sfnv+#uQ!Z(L~5Bc6;nq_%x$
zs>e#do-}Tz{7AVwL}>}A$M(jq^O2Z>9Mh<It<}M-F!#7|BJ=D?G_EV&!9(#b)$Bwf
zxd$+uEpfNE2je2D;dB9*=p-?}f^9Cu>Muae9a&_zEj|d~FN@vCZVxsi$wI$ixm8Ig
z7*SQ0EI4fIx=3oyyRV1T$7-&PfZ0|RJP0BX1b;y1>E7$j(2O?3#D(@Fs#ycxsdu#H
zNS=ZKL!c6(3C!cqiUMLaC$W*SylU2e@5a7Vu3R?_6&qRn!s+pzjMsX24IM0jezL67
zB<64f{tlraNCryzpSC<bM#X7}M30-N;AcFfQk^U$dVM34QHXp4r}Jry9~rT2FZQtl
zxEzU2B>#HDeKs1orHKm1=ErGh_d|)2tsUw~9tAMUxjHg|9HT<({T&4JkIE_FeF=^Y
z)}%3<mRRzpra)&hi@#P1KQO=CNXSy6Okyv`C>Nn!!|Fm3lApQFO(;>x*FkQT>mteY
zY2O6x3LitFG77KbP-!OS^k6rM<{*9)zK;=>DisxU2?2D)Xt5=fNvH7rW54iH{D)1j
z(T}^LzJVRs{FQ4OUpRgg*V&qZZGG%3LpRtN^=wE37Z$7<Nb=t!3^tE)Zvccv&f7bV
z6%#of{YB5AtNdlBi+S+R%z;5M2WcK^&a|XQAC)tIElI+<d_js2C~hG*Ozo4l`?huD
zL^<U!E#~z;6Q0Mt4FjXV8^&IjcCHTAX<@h1R*(pm=R!L=UPmdgv0!WAdHiZ<TfXo(
zrMQXKwFKZp6^&6DlQ2xrmRYzg&Bi3r6!v_ah&*7Tv6&aJY@#r}e}~h7!(s&re%O#V
zP*6*CAI1V-v><^zby46<7~D-P&_ZeH6EXy$<JT)QR5g3_H`--$62Img6mENv5hISf
zh7nqp$-S`W;f#9Tp<oFSw@gWZy!5xg?ahKq<VY_ZSQvnRV_?@w`64(y_=xp_TwU=`
zFYzQy%T$UQlYuFMZoNe&)A<4SRRzDW&|GswRX$>xtdkSCd$o`;@zMJiL{>Ow*ay{1
z?=phAHJv4(uP`v6Z)9Bb{jv6Ev>N-A@uqig3N5s~I*PR0F`r!!r({KeGvaMhG||4H
z%cZXR-ro@}{XXp^QLip3#|ni0(0f);v8&jXdsH)?8MndYcjE_ZOKxwG8%v$Hq>Al3
zaw2!#1|}q+wAZ`PtE&@gSe{a{H3zad3AFqs<kC2E_nuXV{W{|1Ad*q|x%$+tyn74>
z*PAwSIny3gf^inR29&ExFtr_xX`etP5Nb<Bk`-1f9Ip0~n0LSR*Qwu~ufDv)t-^GZ
z*5lWtLyU62woPR12k$IN;%K`tNk*P0f3#5Q_^{cCS%8*zHO<$AR5;7`hK<bv!h^r8
z+rs;bb~3q68XbI$W-NVeaYQLy$ckxLKSd!*&&!waNfrMx7LBt-tAhL}oh^D{&nM%z
zPiyHpnOqi*wnn4jDSj>g>RY$Ew!bmq3gx-XxN4=ZeJ2N<0lk%cN1GwqL=&L*x0Fjw
zL_O4KvtZ})fgRcE9|h9N*OA1;hAAMgVj2!rsV&2!$Dya304*jayXhJ+mL+(=$+W1k
z>7Abz7y3Y;MV&~8*?6BcSgE7tIa%|<(PPz0@Z<acM8;IeQUd-@>3-5QbI2l1MTJG9
zX#H6KP6_2@BPc1I*dO#5?$A7TYn3wE71g<{vj)y7-<5jR(_N!T<$2vk07P1U$k|9<
z6H56wi{-Mut+wPsmd@jT<AB{bk%tEdIe#YV)y&}M?q=?dpg#pA$L-a-+)`V808g8n
z&f#I1OsW>u)`}s-X_uJD!(^tv(^4@SzhFp;-Ne2^W72pUl83t&Tg+&Su5CO3K=ac5
zsJlOQ!>?Q+pilkz*VM0xbZc9Kp-q-<C&?sc$V^_vnZbJi7_!X3aqu8=*YW?%e+xwL
zZm&hp(Uwv65$*ybLv+4KD7QsGxFF4zz1CME8n5U}P*fQ0amCc0lCXF#f|j!nz>8)Q
z(qDJDg%Lsev;;Ox>~!DDk)J#isdc;7oie$_q8WcgX0=AV8d{<-oFx|ZGc-XgbmWPh
z%xF`{fCLIx<)n4or6li~pXeukr3g2td6nMTxg7(;PVUY&#xr1p?jEsw+a0nVRHG!0
zSoYreEflJuxoh-l=G@T!lzd!P*%T|!rRmHa=y!RTm93CQ<v_yYqCfdzuY?^T6mE7Q
za;ifq@BuOC>tVu!#^}Z?xVz0Qwj&SgB-D-cgkPZex`3NSIH|y2fmu^WC$b-%XcK@|
z6u!M|7j3)w1^oS0(BFWEPEi**n;}D@YOLBI1fU-$4X?x$oC>gWlYW=+PjxROc|^SL
za8wB^Ss>9=Y#@0?t8H5>U;4s%W?n_+8W{uA@xSNVdHgTyc$e9zFYvX{0Auy&`4^zh
z6uMs~47K?|>w=3anB942{$N*O2V|Rt$YACdK^Nz17>j{4bw?8>MgmZfSAZG9A)>=v
z_-~*hoZf4Yr}$-l^#W*aFqkO56c45ehhh3Rc+Av&8QL;PLL-(~6T4k-7Gp=Q?0ZR4
zyO~vRKQ3Z=hOE`#KQ02mEO}BA<IHV#RodqlvWvV_0=%xk?x9(8M@jnuSa>2V6bIVC
zMa$xqa$-(u-K(n~1Zm;^|7JJNKu*#y2s-ic@xFgib|%q)OTO{VK^)8W{I=o;)!6%P
zU|I2JbiKo=LuJK+5u@~RAIzM`Z5Jo<8!vi=T*u#KETBk{Ivz^YyYVsy$_`h!)Q9BQ
z&cU<bMf=4gEk^pfN=CRhxE%K*7E*BiU2Fd6gd%B$EwQP0Gq2hQ8ndPaL+70zXF7?%
z&y=2*jOrL<Uh3ZOg&+%m*Sd_`l1zW#taeGnwT2U}OoJ;-*yD$WBcI-l?u?D?KTUc*
z<>6Cryt>$OyX^cQ6D~5>+!Vhrp7<ouz-W<GBv1y&Qpvvo=#=HbyO+aIMn`Fh%*{Xq
z;MOkNw(Cx{_=!0Ob~ks+hIO#4FT}-M`#nnR&Y>ogqHr&=@&Y1q=24UMi?>kUbgs=r
zpSH4rQX4^ymrH$r;r`|sqr567VG@ufYUCunMVjLLw{&QKRNJa%kcdu)E{3f!T-H)0
z^ebyu*8DmJM_k<|PUMAzO=637{~iVj_X{#|l~d%9M+@IEUD+v|RFNyhleo26a_@)!
zh?w=zhblu;MZB7K<I1`H(+QuMn3kY0y&QdCW;kS)VBR<Naw{^y<Nf(NGt%QPoQ_S2
zAr_7`qlMG|{`?}*{z5KyWOh8+4-AUg<YQagmR^;F-|Nu)7WIZ`KqPL7B|~y|#~|`h
zIO8B$^07HI3?Anll6$8~Rb?e(z!@w=Aqyj=gyGVF?<^Kwgee%Q?Z~@HiP#KJv%W%#
z3Qt%|N;Da!yCD(|g1V&^s}s}Qap@Oi;IT&+5tvZFdhSif9^Iux`y)XmjU~E>>=C|a
z3%}KS|DM?Y@j*z67T~(|LE?WRESo@p9uEn<#3uN8qq!Ya|4(K&ybLQInt_4m{ZB7b
z^P6k~bm8XUK(;qZOXUFFKyY*)a6T{&i~&(DDX;)XG`y`-P(-8#CNrQQ<NV(_IeU0`
z+y*ifR=BvoUq1SOr|ZcPvbB<U2>U>iVXJL020uZmtb@HfBmmC_Iuz)KL7?rrH2o}=
z%<j|&mEOF@wg-$dp+yj*R4>{hN*slW2tHtcAcc|GZ7_oO-&q(|eZ|vxe!*l4S9AE&
zr%IlMIy&TC8|so2Xo>yMt%N6#-7OxZ*&*?-g$?ZLi7n8<ECpfit7Qt<A3ZXsm-gf#
zR<QvDFme0w7F<z3(8;%xV8mSUZibghP%mx&D~TAD$E@-IPf&;+LNtHmt>?=Pv(d-?
z4v-w@y<YM@=ix@FItuaJvA6&8drn?Jpdvp%Kc};==086Y1a-<$5X;17!rTcQJK@(K
zpS6S{I9oiHHI0b#=YZ{spGyEl5D41AZP*~FE`z;EOGCqMPrH-4F`Xr?;^REw+{3M@
zDEi^SEU_ZS2qxRBOl;?K7w1vW{p8^zx~66Dn|8vZPgJW1i`ezwGd^?AAqMw+|JWaV
ziV&D5<In>pTYNe7GO}gh@P5s<W={-0mpOzS<1WIyyu9ITCC`m0=D_yyW{_|0_Ykd2
z0%)M!60&Fz{+{6>tY72-Bjq?9bFXVmd5-L3Z;<8q;K|WfxG(b9L9k(iqIuBb=0nqn
z`GuAsP%aym9_|FUZ@)@*V@Uu_CWY;R@~vB&cFX2ZeN|QP+a562D5`gGHF8E@-2E*(
zUnt3Rc%i7Er&kjk%Gg{u`FLV-WYSis<^>J8!Hp!f1Wx@Yj+=C_67SP9TjOI`eN$Dj
z^kVh#-oW|c!*@Om%k#mjXNx`eUA?`(f0`W<8~(-L$MfRZCGTS^6|T<F(H$u3yE{7}
zmk###ulfAS(Lg&A=-70I)3$wr7S*Wvln?4p&oCLbHaso$a5w?B^zs6ta^)*P-ty*#
z)fB-f&BAQ<;Q;o1wyk1sJFoUVc?AtW6s07}c%<3Q!yqsH*6AxK^;cA|l=2yjs%~4p
zxpRGxLnm88;K~(4Y<S=@a7VqpFMRONe=Yr&3)mpX{+o;mSrw7*d*1P=oeK9C>pZ8U
zq`cMo=no9fThomO4k7y~{O`SXUOs|^n<4E89an|F;LZ38<fjITS^VKBA^+_bNzI74
z2$<;ZbLogOuOT_d=~Jk@qZ_?RZ%4dHa5aR4ggom(uIgTE*HDn!1~uU3r46rpvR~9$
zg~p7-9abmeigZS*NowcFltfW2SkmtBb`U<#CvT28gC7!HHsN4ACKQ%{)@%gl3#K*2
za=D;$hR=qx72%_li$F6@&&;$!*GD4j-bbH;YzJEG_3OQp`Y$z~?rv|lAC=qo#3rwe
ztRKk(>4-ZIUXE|yzvC<6_IX;9p_JVSyIGlp6+wqNn4FvhPaLpTlmccHq}y9Q5Oe^D
zkfj=EhJ%9x-0nj@j&2~Nsx2EmmLXVkrtu-p+#s&|!-wQe#<~MFa<-iljPM4Ac%k@B
zNG7x9HwXvc02BWB)D*qd_l}N^%(N?mSYoA-A<O+wm8D)@BF4iT)v`z)#N`k?z3C~e
z9i$*)RBFfzuNg>Uk`1js1x?UnWiTe?QXOYt|ETU213jOgD)5RD1y*|Rz*hdW6S^xx
z%*MvX2j)r|Y9Z*87Q(-z+~#3Z7h@faT&X$*N)f_*kB+tr5)!~a?!UCT8NWc<3IF=n
ziByb?M78f=h=yRg?s$HWZW6pe>K!|F_DsoA@Ops*MMd!F*bmryWLw6a9#bsR1vzr;
z+r<!&9uf2Vy7q;Q4$6$es@9{NL^F-Y{ruF=nME%JKU1wcqqHSJZOz3aa#IEKRNntc
zSZ$96-k9ftB7YdSTd&J$YL}(--d2cBxvw2HHi)&}DLmqtfY}$H-=(l<n@WdH!}kub
zo{~?J35+oXf%cf%59IxJyE88t!ROx-4N!IT4zx3M^xpK4o^-`yrA5cLE~4N!(L1vk
z0;qTa#+Hve2_t8k9i`&(;%lEl+EaSnc>-nW91xrRO{o6rYL8N~#qUc%P!VkZGRZ!w
zgKeaBORmIFQP@A7fkDj1V4j*n-UE?QeL+3JVhz7@6Y&bOHn+81fI|*E{D>Id{wZ}V
zbTTeWrOUny6)JSSb;=I{GF#vVfs>;1ax(<zfNhKvmtCu}mL(=ORy6&!O~;jo9WP$k
z<o~4e`Za9|Uw`29S31w(PT$hbSCGZG%+qIjjWv>$DcGCVZ_b!pq_o-}%aOW9S@7*R
zq2OB$)`<Ws$5Q(Q3oX`@H&6%-<eC~9N?d<7KKjE)QLMps^o{14?>4wtgt0qMOR}>8
z5$$c?54S2tBr15ph-Mv>7O)%Q<1^5&Q)n|pFzcV*gj0WuZx-5w^Y=PD@<CjRa8xR7
z2rVoG<6`LQ4nvwmtN-!MNV@~QwHN3PWJFeZx9govY3@rJt(}&EDhP=S5s{HpJbIVr
zPL&RcgzVCJ4X{NpFfi<IZ})27anccd7NX=c_uAq_Pt5%&Jj>bZI{Nng+a-Dhh_ffd
zEY{pJ3G(Ko4t!6KL?pJ0^4Qgh)zy0eLa=PZDC-pAELU8GJM_twa7b=2Pz$$DVFXP=
z6X*zNSOLIx_)jb?0oA>80g3~vY1J3DPedICX;M6s`BR^X*nP;6dKh^2$5^uU=3?h4
zxNB0$h(a=z!MSm7w#DyjlyW$|O#k?JJro%D#wskE>ql+~C@XRQj(h-x0%iRr@d6rp
z^OGm!k@LHk>58`D570w#ZlZ}jh2?~aF~VeW_#nO7w(!0Y78j`L3A~>`g=LWQr?EQ0
zMP9`e4+Z=a)G<MDHCgqbNMLxqlKz_YStE;uShdG;KLj2t>M#2=OS}I7Gz&h??>1%z
z$%Cr!O~FhzQD!W3Od3!Or3gF|9oHl`tvs>)Havjv%@?z@w3NMeElp;0uy=NLcK^Qz
z<)zRN@}y9cAD{Ax@nkahB!yJdfJD`maRR%(B1Nw;mB_k$dUQX+grn-TZ5Wl2k+Gtb
z`1&zLjoC=nj{MudVq7y~-)uKIx>DkGGB>OC;bBAMW=C77voAy+eb~vQ_1~UHdl4FA
zZoR!njY0)0|M)J?A|XMgPAO<XlbbE=;O~E}Gme6{@I8sf^VczNXjg3cM@$khubZci
zl02F5LS%Co{ot^cVvNcPAGrDW=+0pA->@S6Al)W%<wW@8fwb*URuR@LJbY^d6*aX)
z2C2`(!&SgUySXgO?0|hQ{F?z`_26j=OE&{g@O3VB0jz2|)k_3QsjAQL=HWY0KJx}E
zg8%VuXmXk&ns)T@$h9k~u)4sllY?y5!|II?B-*lq|L7cIjQsum(=rCgQ-9)-kU;3t
zJAaiSy3aK$4A+}5p45XaH59eMB`qz@%31&}1HirH;V7lgDExVq;E}D8C7^I=)CN{V
z@cPoadwL4;qQb-Tr@(JWU5qIK^}rh%3LJ_OW=sw2*H070S2fDfaOdGO;3}2V<KRR=
z_lLg3dXE^Zy78ki1u8XW=g%J^eEih=mD3PmeC0|V1WUo|K&n8Z>31#Htne(CQitCV
zj<Q|WyF{*Zo)jG&4W--n@#BFh2H^GGV7i^0G@0y#A2wibC84Ou&eL-rIN8q5PR$I#
zgd=ZnZ%)m$=-AjMkSbExRCBNSkufnPT6!c{$R?+0<6PY6RZskQ2KpPcyw2_?7TT(K
zgHO0gM7_MdjdoRiwY3TB1j(XY)L-jisc2nMA6hTbLMJ%})mQ^9P*T&@)wRl$Y^+CY
zh9902E-QyX!6mNnQ|6I(_4W1V=jW)L2z*MuO69e5iYBlKyD&zPFsJK&&6RXln&l#@
z!3l`Q4G9U^y+IHC&}p`%aUo9n&J_j%)B9|4-Rs~VgYaJ##xt)v$5A#&4%B2ZT;7^`
z2gEzpXq+dLd|<q7S9##^u6-!6v%=VW7{iMnsw{|?6;Vivijt)_fKMwsn_e{F?5`Ib
z!!JDsnzn_$F%ksuJe6>-Yw-l*v0mVKnnCqHJ3ZCOlY3xihw;_;^-a#V)?r`5lM%A}
z_05+o#6ZNplw)vegfpfW1H51GD&8$x1_pi~d*Dw2dOiB~v&UF8G$s~fIjni|@j@ro
znu((sC(88qbR#h8*_>MGD*hTqN3A0{@Z~v=m(yB|L#=3!7cbAho#^Ix!%%%KP5#Ff
zVnwRzpyiVf$WOZX>z7Np?}yUs$hWWb84KT9>ElJ0GEN%nomnVI3r?^yd;1$bDQU<B
z>ao&0g{Ij74${zzZ7tT^rKKg-<3uJ|J|D$2rDyBQFR88YqWt16s`Hm;p|ROw7?qMm
zV-!>tSlav3OenpoiEz=UZLB!<zS_!g!&se)zKPM}FKia0Dl>@{{;n_ba;CVdjPd8z
zIFTV|G1)T&JrlJX1W>AdNx-0(@CU=RR%YJna9-4((v}@9v;5J~QIyy2H#738P5|>i
z$1Acmq<5vvvj`-Vl$G~>^c7J@C#1DS$c(P%FAim24cb{$)zce++08#7Ai&@Mik5B6
zBI!TJUaLLh8=2BMiAkEU8Qj*x&2M6o?I89=p$|U2oI!@RBCN6m@*gSM#nR$pIF^Fo
zN9y9s4Br8yLgJ#3u&^HE+UhD!Qj<ms8=F0c*>iX!lQUQu=_&aPgDDy4>C23-z2r#e
zVfyDp)L>GyhbLdKyUw<N%1T5+BJc6zBjiCWT$(7or8R5D@9yE@G~G}$(kgI$FL%KZ
zjhEeurw^=o02i?q$!%{k`hr}0^QGobfr%VKvI?CJ@OD!R`ola5b*O_r!&P;hKZY|_
z{hzOtKO|wL%YzmxUh_CrH&sgEE|qkc{tIjf`-UhCHdBR<0Al-_{l3mOqZjj}_6Q!m
zgl72A$EV8RRbus}j|8`Zd7k=Emtojw4m4*N<VHw+#Umn0h>1}wUdJBgzrIc-M4lY4
z^Rdd)mWZQ>`OQYEXVmj#)ZT(Z0%}*j#PzWe##7|k+?^a6+JcgE#6vAzk0~J`;r3z(
zPg}ylNL{S=%KttXRBbRVsQ&{XX7%>=Dqp7Jz1f{<_z89A%{p@P!%+|O;p%6`J%4Tq
zcV5MT^~tTMfBp{+eCiIif2spO4o>73{rl_xzkfe3)(-!>s06(AX%7A?&`Y6jk3qqN
z$=(o^N@_j98J=7hMJx;lkZ=&{Pxh62q7cmw*k2Zc@xc#v0vv<tcepp_U;=m+T@3}#
zF&pqXzS4P^Wd?GGrU3Zj4UjW4|Ni}(nU3xm&?L?fQ{<(tqOv{2$?-7w6MuYL*wxqV
z+HRhn6yYzJ`_{tyjx^N;p+)oQ7j{EIlJ?#_f>mi4CICm>gG5K5C}QK|Enwb5JY;a&
z!Q%~ZO~Jw1H3S_C_1<lvQwg4jpoNJTDy9wIF$d<O5e_H=<$497{Pdq89bXC^h>P{*
z<)=^+;B&(U4|Q{4QPKS`B?YEBX-=@+j!X*!+|gc7;sZZcYJFxTj=>XQrq>!?--1Qc
zxdC_#A=p$+hly!|mXBaM0I8RPcLgvm6BAQtay*H&*!e4?AYuZ7uHfsa)Ig3Ra;~Mz
zXQ1qYL&5}59=Q7KHQ)xquvlvNIu$MntY$I;W(GKL#2K5AAPeRJH#a2W6b$#VZ!8<!
zSg&1U5X@<9ZM9+9R{-aY@Gteh8kq7n09Qg^WZVNGe-9?LBQ(`{cv(~v?5yCDH2Brt
z9hNXMl$V!hW@cuPy!V+yu{`t6zOuJv>Mu79Xxt{-wATKlx|zZq6BF;?%0NVXk5AJ`
zK!WX?Js=Q}sAur#?+6GXRp`#n>G8u;A=5W6$k4Br!?ZRDfe6fzM>OMy8xthTT|hhy
zXNq8i`EIVmt~$hW(4kOzl@?MePsY=4TWe_G2DVk}SKXF%B)L-q=oiir>k#Zl%&Q9s
z3vVOjG}hIi^HY#{6fD>JFit1o@3a{|!y|&Hs}PGs3WVNyFzJQI%F$Y#f9b=!AJCZq
z<(Iy%D$Ytoz#WnweF55$BK))*1k1BJU6#UQ+iifQm3&;WxNP7{=kw{CQUUa2d-v|)
z$`JifI}|RyC@mBl^DTHyW<)&6i4M&wob^Y1N>pB8YC(<|Tnnte&gu;^C5=Zmyl5@(
zoM6HMykkJu_6V$$_W^@|r<Bu}S*z~9TtG1sYa|Rfs8mnzIy`W7l?R9kM(Y8TuPNA*
zLame0G32tFn`I<!xA>;KIKfz60I=%r<@J<R1Lwmt=^?OqWPq%MHKJWmMZ9dMq|}LI
zl_-<6C8eRl|G8TPS{3L(EUbe<WNdJz=`>!B_p=$2=KlTgggeOl6d>RN&Lp#>n>FNw
zfLp0ONh^ko^Lzb+jUPY4`^J&i`9Vt61sKz<1N#BFcPv1yfpVv#r-zCcT0?m~OBRGr
z+jFII<a#2|0kEjrVdA8(uMa(B4$c-tg}t;=e<Qis1fTS_NjF+zV&cK!A+v;YrnE2%
zOFNKxdId_F8sMAW4xob!R=0nCy652V@BD&nx3E%fyTeKiZU=Ut3%DWnfYX2M=O-mC
z9SF2MT=^EypQ%}Wd{L_d86?bL|JVbpCn+geGR6R;K=Gp*B<4a-2yPQhg_RCYu-M!y
zv;-3YJ{3O??r2A)7B1`0P*tOl4~A@Cgx(82fBxM5BVaXn=WB2RbR0_Fn=070nr{I6
zX2z6TG``WGve-?$L)U<RrSHy*A-)lOnxd2A;|29sP*K+1PCu}=fTcpp;|J<GPL#6m
z<kXaLso`~@A?QH7ZSE^C$m!_#u<&X;K08o4V!<Wj`}dM{KLSAXcBFMj18>y-unIuZ
z(eFR6p!jOM3F&|zL!irzo}S*-)iuS!%@^o5gIq4+f^e2+{~S3wJ5n?YSj9eV^WCup
z;A9{D>eVWkSy;lpzEfaFKc|0uDE&_}MNV6+$sJODb#-+Tk|gljlwgn+8ns!&Zvt4|
zHT{a^KYc)nKmMgr-uh@!FJd4%*fjl#O^-x+0AGff3p=H8ad9(6?PEt~DxmNzz$7IO
zZwrMm56y;77;|=l;9|hVqXVDP;=G-||0x&*EzF~A{IfnHvDCn~aGt^mf!5p%RRWIk
zLh@CoFB-pYt!B#jxCjYV!MVY~#-`IU5-LteNciuMWgGkw(+#HYBxd<@@LPcp-l>P7
z{8uMOvIao92dUBq3^l~CycPa^x((hmibH~gvv69xm)1pl3T<K%UK_eBFb$-1LR_4I
z%c?|tRWF=pI34s96ki~>iJCeC3jQFB4G^FW5YaH>2Y@a|wWA-OuT5whVMm6CYpBmm
z#$){FdERm7KRPdf9;A~gyZ|c@&fpH;9OAoG+Wp~!5)YG<2j-`{@F-x{568xyg7+q-
zgfj#j+muv7^e-@a>uz3y(3=2`QlsCBy)7@_25^>A=r%)Txr4tfG@V1Jt?<&6zGWWk
z*>iA~zzs9RtiG8FHR<oki56OURyi5&XyC<p0ASI7APnwkcPP3fEajuT0M{dLVx(~O
z_iq^yAhImhrp2|>u(jz?@LRlqZxSZhh+mO+;V=}8wL&RPb7v7Rkg~J2)q4$mzqs?H
zo|J{ydph2Vr#?(~2GWPd#>jVX37J9DxpU_ZjNIDXarLcm<QyFxp{-*6_lODb^8|C=
z@Kh*JoB_Dh$^O-!GxaTN-iuqeQ#ThD(Auc!ogz%3X92c^cel)RbfAfvwC22Z@K^pK
zWHbKQ8;KY2=$e^fB%-09xWjKsOJ0Fb-w3!LsIY%NVl)*Mbvu~`60{Q+k8!7BBu4k1
z#l&la-tE~X<oR7TA{@UD-HredC8)>t84mv9yZW<0YkV}%2V)hGvt_qA&E>ukxHhW9
zkoBj9IJ|*l14}d)&>r+J{Ujj|y{v;ut>k!1ZmXnscHpb@nP6XeUv1Ag?al<}xWY{!
zgG^}y?Jr2s(9rZ+SXo&iIw|B!IOfyg{eCyvSK3*k{fAl*-3Ca97!BATyDrbPqemf7
z7C>SM_l1uw`vNZc7?fURWo593zkHE@+)(B4=IH$ZG!CE(NPuH4(PxK+EX6n1)+pD^
zXct`wQh7VBKK)Bf{jmLzk2oeSt|*=5C+;Kbo3}8V1+V+0j=JLY^=}XS4VrB7D)T4$
zf4KVYc&zuoe=}S5igMX|lO*G^E<#pDk(pEqA(3QfhsbEzA&F=SSqV{gREk1qQ50Ig
z=hZpqz90AR`}qEG&Uqx)_4&NV>-AhO4w@q<eMY8wzQr<de)#xt<~Sg0;cV9j5iH_W
zIcZwW`-D5lG{`o%F(BIlg62FY7J#xQi@V00>#35HDf~O&zEj(lKTYgSm)qF8Rf>(#
zEpuPN5AnAeG~u^8J3DQR(t~JrSgj>)-GalcS?tDZj?DeFrVC<CyO&m%JU4FKs88yo
zyW}*t`72L_eo&B_!jV@Ty9SfX%cXiB;FuPhFHcCIUw(nqJtpE{A}+KxW82ZoYMlT3
zw-xFek|b!J8{FG_IlZ3FLztgciMjsnT}^$`der7zX312SoD#+E_jh8woX|XW$4;KH
z(m5wVZyMOYr1U2<<%NFWbXSxo{zprg*GKEza8%{fCHH6I^Q4>P*T{p7qaukSBPA(`
zBerDQ+zCrdOA)7OoJnG0hHROeW8>p{LRciI@rm}8l;HcRqn#ED%*5%5sYbTc=hU!$
zx6YmD-WSQztlSak=$I=kc0~V%!Rwvhi1r^E#9T=355&a|6DiF}We)*JcXmpssMxS&
zN)*%;J{AxDD7)k0rAtSS9FZ0y?TP*!zb~ilJ3U$hHHqEp_<VTcL={!snybNB+u~Q~
zBzS0rm?xMO3>immh(UZzg75M`czLE{er_(`vfA<;(49GWCM*>%upSOAo@XGcY-1Ax
zmOhvd75AnHMMC0Ql3V664i1ht!D4ffOc_bP7%SY@k=;f!G4fmY#Dy)U+|$v!^%Ta=
z1HHBTu;)WV2hp(}U%hnlWF$i^qYXU9`LO6@$g;IB$C{d@`)#u+vy<D(dh+Y6#fQ^1
zuQRh^nv*il7VX5dC&*D_bs7y;;pe$0huH~Ev}^6s^xamP3+XTT{^*nFi8gxqD<XKl
zNi|IDnMsQpq$0}Z1JFi%L2HR}z@GZiX|b7-or)gM#HC|h64LErsa8)XBq#5^>D3LC
zME$$55gD;FD<O10Spsk=LJQ<^L+av}nVlJOHe*(Wg@xGsKv(~sADNX_6n{3NVO6v#
z=>k@zx?DWa^7QGhlE|8x8nOmd8gpF!IcZ4VQBUz_)0>gHhz^v2o?dECeK~U@-UKp5
zK@&KYTM_t=;eM2w29)gn1J@R`IfsFo+_>?%*yQZZ15YpOo{k7-M&la3>JQY7Ao20T
z2mBU^oJ!c=*Rgc)>TxKsu|(loGFm5wybZv<Lw+@Lpq-xJi8{a;CjpkADg)GdMz4tr
zw;lVIEf}kK{KKu<+HKH2;QorUd`0cWn7jgWc6D|2SOR)ZwP0i1uLvvKHi(!gV22~w
zR0kfPzYZ(&lP6C!8Fw2jp`$@%S0GsK<lA(Upx#t=c%(9WpJ4DQ^}uIxjr&B#O1W;L
z;Ezu={^xG#K2(xH5iby>(`pQ&N0>csHwQmIgT?N<{_b63KC04@uCNM#C`Nrn?C>z?
zlyj&SoEF!%>DuWtiw2UoU;i-7@zevji76@PCnqUb<itOr)bsZR7L-nF=K)m+8_OY<
zfr9t2fg;yU(nniu0G;r)-PgQxi-|Cey15D4L`E1hu5RJxF3llgMWb)~@b;}}&>hah
z_B``?yU^*;(9s#}GK-UIoq~C|(~u&c=;D^}4mZ1Ax2UC|p&_Ow4EtRf@|CJD**9Kk
zf4%ZqP<%l8tz*V&m~PPMEn-Gsx41E|$|3yEGPo&>3&$!RYseX9OhbAdK<)*2vsQBb
zXWDuq=j1UOC^qlvRmpmLU*D>xrX8{8?%%&3-cBcI9eOxGK?vo_lM7oF7vhQw?iYN_
zpvoG<=~DR83Uk+}Q&z1q`~AiujhOG-lx_HU=1<Mmr6q(75TDuOt@Zc9z1B7ncO_91
ztVvXQjMMd;=xy0XT5RcKk*=x5R&Mks+I<$Niu3*N?bp2M*c5W(Fwct`-*}5N#;W!a
zp7%EK?5ktXA_{2a|64<O?ZEZy&QJ}s951S0(q9ydB)J70P#^kSfVS8XXZF%3id4k|
zl-Cz%y~5SN+u3pjl7q%@&q{Z%xpGuY29f&m2ETMdztCv-Wy|c=*4Ccf)uWkDw?GR$
zmHnxw{=n$`?<U^*J$a?QJ2rCp`*&TmtBB-du~j;Msg~}7_2D@K&uuc&qzNB6_P+Q*
zxeNP-@|^I2AGckw?5G*2^8X$8&nEOZDCZHUp9<EKPvbN4|Iy-8^J@dZA!^k`ou%(k
zFw|3%bvi1ernZdDME1#_O#`K(S3-C>GO~i>;mfZTMCn_-F=#})z|6BBpz7ih))X+<
z$cp4ufIFSXq#bL7(=sdc{ai6rgkaUE$*7>LeIU1}^H>%QEp4kabh19Ul?yjdX>2MJ
z4!Wv$=s7a(4CmOibnQ*)2wy(={5*3!_}DQOd$&?0O~J~MT+L^4x4p-g^DR}==3lZf
z`H8Ui85{g)xoK=pZgB9`x>e8(HJ?~|1ExqTXbx`Cbewo|ALCN^HGCc6QG`Sz(g%@y
zs1+MXe!?MW|0=@q81CM<p_pZZimPA<DE9Q+9Q~<M!<xD};83`4pJJiufG`dN_<Sr+
zeCFZz_`85UByoK42e_qRj0W?WVp=vTYR-mgoCNrS(>>Wt8nX!fBfP5N%_wA8vC&gY
zXu|cT=F{KO*N1HH!zf|9=rc-lX*3m);M-}!Rg5Vkou3$uqXy(ig6E}=8Af+jmO1&h
zKj+uD<SjUaW%tTZBtJDi_1BN@cMd;eeerMYmZ@G-8%xQwJqU;hn#BGVbRM?nZS5m}
z+(CPeGqvrCbG;9{VLpimo95f%BHMXM35gBO)$_-UO-w{tX}GnG-8oLwrJqI_ZA*0X
zBx-ve(sLs88m1+r@Wg+L`*=`<ma|0@bB?XB+5+frf}>3>bn*@C@fJzj_ep~B?~ACD
zAyX|!)>Z$hS)DjHF-=7M#Q6#i2=k-Y0bc@CfC$GH-#p_P@J4rzw&obK`GI0Ouaw#g
zetm>K8h;6cL!_0Sr~C=bE+;t2Q~>$KV!4V$DrdQ()*>g3e*T0C9-TcFof&x54Bq32
z%Wma4`n+DaPNVieEI_*PKHddbk*AAC?#v!AY)xnO@bn~zo;%WbRgu48QQ|*@u4B+~
zntu{_oZnc@6gW<__lL-FU9){RTpzG*<-6aRCWKnliT*8m9}$`<BvG)79jU!@=jmN4
z6$9SO|K5OUjte|<$-IhfG~ZTMf`fzOIzA3poC_B{Y-rd4HI49D*TxeAm@0wLFS}}I
zCox{F7O^2cy4-($d?)(N6tyclrxreaN>l!YDL^>SqtbErwXY)lHW>}u*|Qsa-BVU@
zhuh$W<h;?O&O)oyt@eK&60|0Z$aefjW`@shR*FDj3dyvFlsg$53c;y_JFu<2oh;x%
zrYtrxSO6n2CdNrQs<3&8Vy7)=^0@zNd*m!M+$nLAKS$dKC_ZFi_#h4nEcz&pS5?%T
zRulC2+SpnkkTdU=@2{YLIgch0JfWk|T{5MV%$r<7vE=71Y+bBo?c+0tC%f`(11+sP
ztI<DSnMh)+=@M}S6pQB?KMH*LBlKzo2f$pdfBVR^g{;%Xu?VH-JHS-0Zyk0(<?gQT
zh09w>Nl8M&xY<ZUMn*<X&RmQgT^_KlJWkSZ?okm3hiB+)82-6u=uIil@1faA(9#m1
zIsv%?ip5pO0=+0QtNlCJ-=9rdg4-`Dp1Kh~FJhE*_ujqT<yMpgT$<4vnnS-z)NARW
zwGes%o(G@j@L&l;$@ctDkaPW?8iMZ8D&Q-8|BmCB0_xQhMlL*>g5RI-pBR175PY~k
z=AYW7paEdXYch|$xQGX*sioB>gMGlkF?m{K2x$_J9Zcu<SK3j&k{0}c`rY8pi}7(d
zSIu9kR^^DwM5m%4B252V5dAGHdZ~n^du=C|gXjA7ftInS&!ce`wyKRPw%WXABil#A
z^4NRKFn5Rk3fA+rw2H<b&kR>owHj&j|7YFNIkM1f=JLZgE=X9c1*kIUdW$GrZFXKR
z6bz4aWZ`Ral4#SJkH}2H9b3$k?u9~6H*l6Y)(P;UpeGHnSVZMFg0+s}lC8Nv(p^bS
zc=2DYK~n1?*BTBtST8Z$5tRNsR{IwJ?xXBQXU#Zu2WxZAlw@)G^l2^%sxc*7A8T>N
zgaafW!4rrEK*KzO4piw8JXLM6H=ODuN@lT&QJx&;d-V9RtcVEue4ayjmE-jECK*;l
zUS8hb06k`dvO^L+jv9Ru(W9qOpdp>3n13i}h2fubse^{x=qBuweL&}^HRT^kXb_&B
zbR;&mW@b<M`w$EXKWkj79F<Sp9*ZQ#_%Ry{LY0Hwb5^Q0GLk|J-_WS=YbUny6tFx~
zO3hlfRIskGU9lALbu!rp!0NhHdr-fUPRjBr8%xd|i?oY39_dxiVO>r2ce1v%qr3P1
zVQak22HHO3^gQA(59+?Sc5B*pbM?pG%$&;S24?>)s6|XgDSdynu*QwX709?Y{{-lY
zc590I#hjH$7mIWQ8-L|yd$BCB5983i1brA&9{AA^!1Z%q=s6{+-Ic>=c!lp>v#WRm
zaNwk^Sp2*>i>uWBT+!bKT19F7*Dhba+`pC|ka8<?pXi*Co+eGDcl7Lo4?TvxUiI7l
zc}}q;pMrT?9D9zJ(jCDm+fyO&cNOa%ZDQe9JAx2lFgiN==g*%>Jo4ljon55WJH)FD
zg%m4;c2pUxb_(V$Coc4lDY;$IJ-x5UkijcSFL3nbVDB(Z{5BD`hVN*w%Dr)dr#u`m
z@2O$05n^X&2aXpMq6qzD%aDeuexHQdp_KqP6sO17|9vVR99k{wdJpd5GiYf&fAK;#
zlbHZS=_RDHKaG8^L)Jn+@$v2=VT(?90$V~86)mGM+jH_Dw1mmo*|L%fR-lb4gHig7
z6JyB0!Un_W-d)uTvF4oem%Ym*x-M+Ju`i9j{=a+w(LT=r<^f-tbT9?Lb`1DTjEzwq
za7onUF;rUT)AuQ4+MM$J@cO|69A1eUMm&--GK>~yF2{#52Hl>U^ZBPLNq87}DDrl+
zTI7xmPZgnAYGbTfmFedZ=XQwFpqq0~Fy0?}fTEp~M<K=PqTSb_R_lI(ztv2bTe`?%
zMB!_<gZZH+Y*a@cD~|`n>Wg-*<bjw?@FaX5*{!77T9VnQaVJ9V4x^gZ7`M=zr>0P7
z@Z63`i@)U%X+gw~ixvkS=E|bk+Ffa<d?cillB-3`NJ>$PLu|hzi2^wg-srAs!n3#9
z{X<1&cDhxaTo{%HYzH-3=?(7Q1Cgdl{-DV}#Yv2AD3gSI?F|yS-@Y|i0nm##GsrZi
z&6n|fd>l8u{J{PcIYwF~Q+71R3s)~CuB4}@M;^QlVV!4u+acHHe?HnxdcF*eL&H+I
zOz>>YAH7JI2F`GiOcIHSl|a_>Z*B9w03{4+_PfVF=947<ViAT$M!111(C5uJ_fq_`
zSQ+^)L0a-1FO=^_(sCqKZn}BGg9i`733dNe=pFeuZ_&m*Li=bKrU%qOLJW5Zc#r>n
zPqAJU)&Kr%cwPO!Ke*mPQrFaUETIEs>O~Y06`lXLCV5Xo#rJl1#^x~wBB@MNLu2&e
z!+-BJk5g_XNlTTajdTD0QPiaz|J~C6|38<+P~e-aV1xY+)|VNN|JV$D47eOE@NfUt
zwuIOc?s?%z)UH1vO+_i`3)=NR_>SI`Q*KqD1nA_^7q>s+g2<P3MhANmnO1-;*N{g|
zrbUSKwH`_rlM@n708_BDvkMBU7Z$U9J2{#Dk4Oof*!YVVOqq!_Sri}?KEHl&8o~s$
z9R<NGq6NB$=6U$&5z{rgxW-dIG@3uvrpgxLXvEF<_hX1LErL$#@9zgg?&&N^-z{MH
zzNHg<1(XrfFy?!DijvA&Y^YA)=3G7Rj65$yWUzccilQ2>Ik@ycLMR<OQU@jx$GY?u
z;Ii8OlX`!@e&%>$Vj=@GbCyOVm6-BFitdi`lbW|t3UTo8*aIvFYQ&VeRGUT7>1B#4
zQElWiQ0c-56g(FQ!#DcxjU!!|oG?`L3xM*=`yso;gq)#beMv4Mv7P}g+u`&4{Z$?h
z-Ih7n*cQQ4t+8hci-{rnF$X9kx{5eqv2!*BdXzywu+qrnhyx{2i7qy;fJ59YH+LQA
zVa!3nEnCiNj`28c*uH&xJ;(3unwnk-KfL6{BPU+Igu+ujBs47SNv?AHix+#n`2G9H
zp-<>~F(}#%suj2!Z;<;e>*5@~?OsUq!>|54SepEIF`8}^4k=xKxO|F8q>_sQ?e}h!
zK;Jzad*%#y-PN_V)~7KAMt>fi*zACW(=`@RgWnH3JI(r-g>q@H@Eflbt_}FGYE}JY
zW#7p#30lkXC|*GY-XCx}yW@DbrYqYIJP|bKKz=!0TZ6tXD=RB1S?-2p{kqo|ys_BG
zTIKD>eNnzIaUT2ha@*V#`8{2awG4!;wpRxHQBOMhdGtOzFVUB|S!aU2Ni1>8y{U`}
zDs_v-+*dSX^yIS4>&WE(9jAXg&u#e5_p5!C+#v{y9Zol)+t3L$lYc-!##W=Z<TGb9
zu%=}F;b}e>k!v0|pg$MP71cZJ_99=sX1{9;RNqx#&AD!x1(IL)4DYpUTM(UH1Fy7d
z2C$aIgwkH0MgJ3l&@c!@<JOHxFx&`7a!X?Xh6=b@a~j;7?6>_<abit=p16Mp%pO@N
z+lK0uOw!OaBR&ZvW9h|YvKAQ_(u|A;%90~vHH6vn8nWQVxBbYdIloOKenF25Kk9#D
zk=%YLe+4vzyVy^I#QeKAoG#SVD20BN?7WFZUB35DwXoQGN`gN)hP7qIYI<khFm|Qt
z&PhQLCpH4&xajt~&%77h3rr1_FKVtcgV!8ui>CI`YtJ<R$G{fsAuFQN3t$Cp=|qKd
zuB6?12qh;Pp$cl~K{r^-1fBl^C>&vFOq#v9iepVDw`$;Aotd8>$03Lo@=-?zIhY&5
zZL0ycCek5T6g1hi1TSCbYJvo*^|W+YZR%Pjs^WuXDfjjYick0!?!8t8OoPPfv5Dgp
zP8SFXe_(v(%4madN4U~gY^QDQSLiamC)*yWrztu%`G;>4c8+i<AJE>f!p?AISyb$B
zG<!mS>gtlX)xBf;^-1=$zjURfNKfdx-xDdL78_QrA_b(_d+EDoZ(7O)Gc6;d%1xu_
z{)fTBJKynwaU`xRE}j5a7I!OJbt}M+{nKZxMXP@H_gk$EOicX3!`k|8o8Q4PnQNWD
zz;hnsm*2kqJ~*M`WaL$GZYd<Pr|C7-N{A_hAEV!Mu*87DpoevfPNQ9gjgMZ!zFtMQ
z#phRdZTY!H&4;ZgF;9leTy+K(=;10SGRa?4Jmu|4<W=Rm$<rk+EL?z8A*FO$f+^jQ
z6x{RQL2yo+oS>a^F>Uf}BVt<M2mE53YS+7{+&(b}I$}HF1?`q738;O1k~bL*9)!mH
zK5w$R4YSlh-Dtto9Ii`GB%Rj}9aoG$BKZ1T74y1oig+mZTocVEm5oOw<Hw_a((Mr?
z5L)w}CEXbwSCL;Yd<lM=j(0epm+}6w8AfIssa<Q<pKt#L_2i~j@j+c5D{yH`j33F~
z7pc)3Hp|)Q9RHBpZz0-;&kL}Mw1s*I<m$Y-i@(3pZ-`B8gc1&KEPer3QtR~6w{P*I
z5AE8}jVf)YZPiAU7pHVF1yTb|yu8Fd>|gC2%<nAc%|HsuMF4@ULR#S<ki(nwc?b#$
zpK#yKeXOBeVoAGp6ZUfY*I;hYBn8CH;^e$k0*<om!OH-naAaPfBOqr)DR)O7yn&A0
z(|8ua{v`d9t>ott`o)Wfy@exur|-+V)}aSBH8aK@wXsi3pOcn_Rt3YS`VAI$#IW2;
zj&UQRu23aiWukU6F_9ytjQxiNnC$x@CL80ri@CA1s6Dvwd!|@QZQW$0gG9|2y2!X0
z8nT+7(7>bMyb2|>V_n~2s@~;E^0+9q?`;yhU%Cysu`$du-IBgE0>qVZ!p-g|Muvp|
zydv*+weYNszbZ2hA9Z&-wCaX4VFdvQAvnCztdZ5D(kMD@=6nS?rQ3hRy`xs97#~6}
z%Rl$_?NGJL_S{~ncW7fU@*%2&wwuar^ey&3+7<)d?#nywi=<aN+(?T^_FDsRSa_}A
zj%?FIw(uWsGkLX4*zE}#{g<GA+yQ-X&;;CPYy?d9)kO9scKD>oacHu2sQ&<gLB87q
zU?KiO0di$08-nJeU-^XP(A1Hn_&5yH(nFI*q*bG*5@oAFOo6CL4}~?SMZu1;lUx~Q
z8+t#zoGLqmVuW~ww}JKr9awyREoafP$0_DB=C*ozEyyX1Iz}|^aY;zY?LP<5%S3hI
zR<?IOGPm@Dm7d0}$>ovI8Ny1aSa|aJmUrY_yN;j>^Bb&V6r<4Lzx|=l-ZEzVrsvN2
zZC9Cx+`sH)auvvJy8!o%04j}d3n`1GQQfqTeSp}l27Gqx-!rsG!+-lJ;ER!uXA|$i
zDfsq|!RW+AF6O<tY?(4rZykKy!d%!gZ?*28Tv(8~voh>*KJ0BqUV%l`8jlZ?4mD)u
zlK=pK`Y)mB7BRr5V`4Ucu)ZM6oIiEb!?65Svb88xEfYHc3GX!K&Mv-)=K!vr&bN#S
zd{c~{C2p;i3A)4B5+38Y`{=cnav^C?&3&b2+?W7@mG177&{R_cyhHM>n^l7TJCvrS
zZypx-!=1$!Bhqi!liPX-0iU2+uk1J(&k~Db;wsc1QjVyHW|)#J8m}aJNr;GuxP8($
zDU{5Tbzl|J3piX0VAdA}wuta^+z6?qfoSM~#1kb<rNyH>^v@Uy--cI%Vw~YRHy<B;
z-kBDlii{KAMZ>-6wY{Q}sWzo=&Ap`Dv{M4pF#Qs=%0->oKR12996qYoO>f4KBg1@T
z+qwNIsMUmdNjhun&!lG~g(ErTzhXbm5bi21S?fF#4rz5F2YsTw@>!j6le3skpx!8?
z75fpN-u)!h4&~APeO8mAma+32lxfZhkj!{Kz-@K6m%S)_qgYtaayrrFhVsCyPiT3F
z`BTCzSR6KUs|7?ezo1*OxuYwvCDp2g#QxQm?Qgqh+IsVv-f0{tXuWb+y*5xC-JrJU
zE5yg{VP5qr`7Hg#QtIji=lC8qrLDqYg-Q?lqgs)(@mt34O8k|WT19Whny3u5`f6<&
zjlbf?E1tb)y7-(CC(Edy5MKwBFEe1W-pw$X-5uv(+>@`ZbM^s8Q%mK7LiF2(+LRog
zpJHoT%yLt1{iweU6R$<*JJZe2I>)=bN@3&Rp!#~cnX&hRFx&m<i60Vz6l;@VKu<@a
zP*4)j%0Mh?H-v9K(5K+iKy!bisy@lAX-v~lxJ00uX}&@vZQdpQ4T;TxPGL7+C6+~u
z&KaA`DV1VKuE<e&b89th2YPb}k2e&S-af65f(ztI1F({9yAoM`np`w|>`O)JL*u`?
zzP>Qg?=E6NAAIuU$ziS+ni}Y7?p70y1{jI51@7%xIb3vo7`ll!D!hLt*5v+p<{RXd
zYMkm>wrPL%1X_r=qugx4nlJq{TS(;0l!QgZsPuGedP;WHoLZEpS*ohn&65B9R`$tH
zuD|^W$);wN^TnZ)gkoWbPv^}z(qijvxRtD8N^+i>%4BfTc76bx;I@Bq5i&FBDHO@^
zy?1dfbyQxv_8uY?k@iC0?857J?tBNMcx7Sn%NHBnq_t#LaVGS@oYK^5mTud0&bK&r
z7I0Dr@p*i4u@GY_3fXz~i}HX1!E?bynvv}oAa4If2v!L}*JN9pV+JI}FZRoSlwdKY
zzl__~qVg!`eXr;)yH`@O&kjY)8R|M57~Xw`R5dNNad{K#qqq&+XBdi6LqR@}XAzm~
za4Pk}5G(m$xttKG(Xkt>SInAXc#yw;3s>%!Bc2V{hbK=m1fQX6M$)eH1Q?#{s1_h5
z8|LQi+?6+t<Aauw%jylvI=*|?L<<U)PDLK1m6Vh;7uREWe3O5>{+DkDgMSFKO3W+q
zMm7OPeSI%b^7-qDiBl*!z035-9dxGHT`#Bn=++{4;S}eTM$YZae~#+g?Gy5q$d?9;
zDDaKleDnM!S*`&B$)32Lv^b<xn+enj$GWTPb09-Yt^>sQuJ3vCJ3dgH^ase9ZVohs
zc<U!egZM?`mA?9<!Sm;~FPt$}3+cX4t9+^CWxwq1bNh_FsUGlB@eML@n&Y=b>v1<+
zXt&65YF%XK^^|qbwd9ofj<N^Ghz`0?K+{&4WVX*S>5q#*i{V~=o?-~N@c+2$j1Rse
zy4L=)`l+7jcJ@VY@)eOv)-U<=>s6Z+<j}r(ny=23#5;6^ehq?~!aJ##g!{fhFTIII
z={aU~GvE4zCPyhEN!?aB){$W~Z*r(DmhJr+D#sWsC&mdChlR6@e41&)1l^t&CaR47
z=akyw(~;tLWqz51z6S6hs5b>ACAMFJ4O9XKuY@U{vP4@cMAN=w88DZlOv)3Y7h8Mc
zIMWuTkdLo`lA+{CdE@zSs76Rmr>KcG8Jwmyrer};;rkIXi4B*F^SoI%eZwgn$x3|g
z5j|{u+-o~_?66)%69Oi*{Q`yv#jJjA7?rE@-C}gNXPh!nDMP|%{HA!-B(!A=m+mv2
zVmi%tS;Nlf=I7!l25pBkFYQ08-~pLP?HhXU-L4mJlIr0(oV?&hHA9|*f=NUvmkPi_
zY?816gbc-<-cN&HMZad42G3<tk(>8~H7kn4k(5gyx^Z_&1Vtpj;tb%k@aU3F<t>jZ
zX}CGh)cFZso~y#sx&>Rm%=VqcO28q}@#xXxM=EijOznI))&xpAwal-6MWt*|9RyP|
z;FSbs^4W5mT=Bg=cjH5w`fjMq(9x1lqJ%$45=@wmmYbv_R!&jL0a`=_R4~P>;7tEf
zMwLi2w+1V0TV8BU2jN&MCNeoVKv5o1wlCWM6!|*srP34cQJ)rmo|?_iYmFvcS(@Sw
zXPY0WIB%X8hWQ04tiuoCDts-|-vYDj8i<nh@1GSjnPSDKXVAW6+?e_(DPftHH!r$h
zFf9;S%u1^-R-eQ=pGi<Z9zFcs?V5hwA50a=jnwnY`gmoS>n|YH8%yQ5X`@j7edLI#
zyou?H^`W|2dylorzfX_T4(R@ugTO_|rP8VO`u-hnwV=?wSEQNM3+?SH{QOK4>x1;q
zoDYqeE6J-ve@8HghdtBT(g<bQP93476t>@RA<|E<yn?thGOg_!+4l^V7rF4v(VT6&
z6kDMVB@d)xVqnPluDjDbD-=%}8tP~ngD!Zpso14@+k>{deWN^g*rwKC4=hm|8EqrX
zHBgcpi~5}JUzS#-b0p86H!4MYl5&oUo2A{pd4uU!8veZ*n;yobGXJU?8}78MomX#S
zAk3#dc%a+dJZ)~jhpd_i*Ol6sGIz>6Wbm5PGAY};HAH1l+ND9w`zfs{i_*`#kc)%J
zIJeH6qwJpsQgaWKkU#sGisDk$9~4Vl!)@YgUdEAG3!#2P9&d&~?-kt#=)6RBM4k-+
zYy_8P`@>i$tWX3v;<g)Z__bMg8l8=NrGa8GdgI;j?J8`|mSSLFkdlvhjOj|nA!mas
zbH<4W%V;>S_6iC+7rtm}Y|L^{mgU>7KYQ*AURt-Y0%xRO7ig;sfqwLAn<ZAEEG*YP
zQRELO1F)2|t4i1w+b3k=q*R8tXzS11Pi`U{s@LQDGCRfYI}N{kk1{3Kq?0SO&b!ah
z-UBy!k6A5LYj$mLiNLy&*SG}K;BbHLD#Q6L%93b;9M|%5OQKCfe*y!((cg5t7_zn8
zik$EHrA&OIvrjJVeUf;=4K)qODV~F@LT*ITp-jk5W?Y=Zrbh@i8+)@4&Bi&CP0hWY
z=$%(TM)eD9J61Bq*;cX7o2fL9!~CL3pj5d*U`{QkmyYzVC^iokATA7y`qqv3E+l8?
zi{bG`Uqv%YO7Qs~cX!VtvWrvfA-S_aZaDzHi^$F{`+#Cx6OEUYqxsg{)3WEIoec~b
z-OP>9;H7XrlBgl4({$B9f8l0q#+JF1v6BW8c&PECU&-!Gl&Gz(U2TG#g-ycj!P@L5
z14?sx$g|ek7SW5fS*bi~x~Li8fl{dFy!;Q4s`##uKtgBXDFq4t0uVT1cE=vH-jDQL
ze<@=tz+4&}5O5Dz82H<mn3&q@FCWBgd4xmJP3`oLZ%6K$emO-$`iaT{6obkWfG@C@
z-q2Pm`p#~9Q4>?OR5LO%AdKt$uI;Vuo&#5V_d}uD@1PY1huY7!p<qbYdDA`~vvBSK
zlN2GMz?$gl>Kc2uq2aPtFyjNEF8V1IA<kPZ);QVD`R!AZJL|sl70k<Lge{>$<1pc@
zXtySg)kwvJ3q@|*KXjPKb7Z)8&*$atuW>HNB%V2Dptm|BI5N>PHr^{$uwGu^E9EOS
zbyp9XopZ_&C(*?Zn1P0D>!oU7OmXd+gnFYWV`k<!-Us*!Xz*zqM8fWWu*AdfkZ$2`
zor(8Urc53Bj(7&_o1geI5O+VKO-RRy&L=N-WqerMF#fIFV@=2z!O9z4%^niOQ$*q%
zax{~b4uWjU_G%2Ld?z5eV_^FP<bo-ClGV<<2XK5-Vbzk{F_YE7e}08jy28n|%}SHc
z93g3(w+Wq}h~F<8rA)wOWD8`9UaaXX@%xiH6p-2xKlyC$^zTI4Lu6!Dg?@!c0<)>`
z>-#)#HMZQ>$`ULrL(h19Z3*w&zf+0rQO)KCu6y(o*TvJlAc3_ckxoF~lyVn05dB0`
z75K_C>3YW@`_$9Cy<bae3gB`EtFt=&DmgMxR}jPkJ(*?Zc;qP0rS`a(PQ?YWi*LGi
zGZTo@Z<AC6%{DwD7C@@AEB=D5MsQtjd71ZU{yV0HiJ%NvyQ+hzLqn=->+;k?zf3bU
zCSm2s)@>?4dQ7f~9y*#`mtPhd(3vY}Zr@Hm=Yg`p{>Rd$d}|3xfWi=9jzxchKE33h
zU=|uPGQk-;-9b|{CD-MpzHuO#T0CW(aaqu}{b;nQ*ne0+#wWy5yeTlzk0Sdg9Fn@6
z7kPaCa>bcidbZu_TtF2WjJN~@lJvLr>g8GvMhyRu>c%1H+|Y)bYLv6X9rt5FS%D<p
zwW5o3iJU8``uk=|$Gr>hth3MZ-D>xZy&*o~BBnx~IbfkQ1Q;Ohh-NAFapZ|~#m3mZ
zw0Tj{rq9&C6%|>B7HlZH7%oCR%99rTF8-ixLOTX;66afcRPC8c-6VR7(_;8z0juxa
z%e;r3D71}8ThU%v3pMPqm4)5(E~<~q)RJot2|V8OHJqPk_YKk_VPs+w8+MVT{?vQa
zu=#Kqj<x)g1e1VI{kLmg#~tPGB1bc<>wOCkipQ<bFtMEr@MnKTJTt$DK?IN;P{td{
zc6oJAqW2$^0O;p)OrbC<hN&pmRQV4JJK3iG?*r@FbSf%*mzbb@p#2W3qqXtJV$?D}
z2R}NFivh{{Oo_W~&OBE*r}v=s;cm5(by0JT@bD^wPjS@oM?S<+kC*P`&8;QXpujX6
zwK`QJ{`89OMp`O)N!OnW)}O*4{fQot@Ds?~+APA$dCN-4dULQ~eeQ5N@#<c$B`Rv_
zktt0!lWto2KIsb$PAR*G97j9*lW#bPH65iOuryto8}HT1ZJz%C?R@S%K286EpJPxB
z*DnArD5bEM*zdnN?r67c2H)%!D#<NQ#SbiUmGt9VzMV<kMLs3T1=oh2E*;aS+2szu
zqO#x)%6_3_2LmNk+Q)vb2E?}O#@1HofG4=nzo%#D_QF}KQ(^lf$FJ?X{vCBt&1BZQ
zO;e|^U|G(z6dLUt6aP$a5h^d1c;4hZWdL(_p}Xc6o7j+|@(T|g)l>H$VIDFX{IDVM
za$l7JJXW!vT784vpfPuDG^=JR-si^g!hc}qxXM0)`)`8EVe{nGA3q+mX|^2W5mkj3
z`0vLZ<Xk<saAfAzq5ksS!Lf01<ii&*T9_r5+#?(`2P0y=;oCa`RUk93RJ5AWA#zaR
z=C3O&57}Jj>_h|y{F>K{wTh0#(Ps$UBGqd%rdJ#rQQjXVl|@M>5dSzXBR2HE59=!;
z%5P-0?CULrGV|XM__o>I68acKu7TWV&{;kAd+=W6T@$(Z`4iLD5zUuqN6RUa#4YF0
z$oa>qLn>ZdUGrhhy6Wql2kz1H{KHNOr-%1zcj`ogG&1A=hUNnj>aLKHwl8GY3Mz@1
zBYXGm?b3h_q;M~-z)g$I^jFM&X^F3xOxqwL0$<qdJ#*P81m^}sV(ih3y<^$^O`v9X
z_)kXmKJV^kXw%fzcAoq6InG)-Gr?Pa_?CwK=2GJXTTonRqafOUE9&(W+L(U(uqgoC
z1`K_!It~+Zos|dW4i^SDGryJGBj$NP^|6Y3TPze{z=p~Gs5x#VWUb*Jw!e>*-x!)g
zR$r!pio<Stq~x8wy+}RExassC9j#35x>+mqj;Kot_<-Gz>7M<<WlHJf?KN-!rcrX-
z77FaP9G*NTt(LzqNJq4q@0dT_bmZyJb<>|dRe!ghJ6cDkO6_<`tN{)v&l<ad%7QzM
z@kk9Opcd}6*i(Hi2;kl7>MGs{+P4oVk9y3AVOuEcJJ5PdTI7obeSf2Ic$A!a#5dl)
z_Xom@(;c9u`bSsQ18)gjK!f1L@-XGMpFe1okB?6(Ga3)g=RDmD{M|9aS=Y>i7ls*9
zRZ&d&dXk;lGX}%-k7`w3!hwW}FpRZMc{%@~A$fV9XwF)l<?Y73d$V9hdF>0{C)k6}
zDkU&F0s1{#|B@X3`7K97F8suahh?rt-$oo<3Ab?aJ*JN1hmVT-D)UuEaG6$(Jsy*!
zLO76c^VFQS&V}1b`YhW40pIDc8U8E;h#%0gz3gQ%oyk`*LN@Cv@)n8VL1sRJ`YiTn
z?d!ia=Cwo6`t>@UeZ;2eg3COXNS5>lWxU#HG9@S?7=^NL=)TaiXV1Rl10<=IeYcK|
zQs7dgsr&NAb%=(BMlYEMh7u8bG1{S9B%4q#!4tz)7ZzkBZz*u}c`MsncsgwotuRsv
z(71jPzqPF;XX8*$aHDwncA4zVrM(c%RIB$s>>BABK`ZGQPA{MT?Fg+T@T12{vF9Ar
zxi<YG3?$R@EMo&0<s1Af5i3yzHXBc+H+Rv%vxo6_NqD%!*J7F;eN`vV5`QNNPx1#z
zd1!jbMJ&J1qblFDPo!eW;$oj1Q}6K;AM)>idCxXa>Fe%U+Cu~PA@Qafq>p)5scmuP
zzvAL&$vO=<ae=MZ_&u%1%}}&wK%CYAFo1h6*BPx`h?wgq%xn;|uyR|g&&7!<2_D++
z_`y-5&*^qk_?+D*)GRkTjhB~~1IuTccvF5%RJ`Qqq3*|81_uhe0h3EuUM#QD$xq6V
zH>nJ=c2^(iX5^CJqXw!;WZn*LOf0reoigR_>bO$V*WQE<#@Z^1SGNx5+%$`7L!W+n
zB;d=msXo1_!)Ejypm?E80Fz1-fAhtBa0-mXnee=mVNqXP@A~UsUm|nL;3Q|{lVQEs
z(|Dp5W?fXd019qnYoer)eN<NRse;ukjlqGF-OBCWXu>pvu5h08D3mJj{eqv}_G`Kw
zK}t$$CR5K|Lq}(`I9J2ou4!X4tE)JdsNF-eeqY(Jt<0%(8Ej<*2)(?+BVy7wXGqx!
zGF4?-{0Y+&f0#kd<S=^<J?|2{B`hZEHomt2zV9QxzSF9|I8u6zQ~0K)rZOOpV3(Y=
z$FhXobKV3j@N_;8^ydCtaQ=z}?V3l4PPKuA8x>T5!j(6XFOjDwc$`p!*8Oe^oJC6K
z#1G`uvK(P>k6{ulHU{=2o{YZ@vUC=c?z5US#j&twdzhc42_TX8_ef=&K{^=`-COTN
z@Fd%*Do5ZK3MKG{8!myP9-dJIe8~~|?h^PcUs1#6F4m(;g4Uo*X99%08W3#-%bb&F
zUxV!22rnT%*f62N7aEg%b&F*^JE-xPzl<mim0ULQMK%`nUAGfAdz?6LU5V$uyTXQc
z|Kki%y5=i0b6Y%qpz3FHLt)v!lO~&dy~?L_)AI@6T*sP-+CtVi_N5VIlUd!Wd=n+E
zjT^B<?PA^8h$_S^mg}4G%rEhU--@p@66$Uo-P&&J8^M!%TQhipYgxM|vBc_BDDTC6
zJZ9?q_n{UtVI=YFFlp9P8Azi`J#)5;mQxQK+~B6q2$@vjbypN%<Yl*v4gb(r6Sxpp
zE_&GBzAhwh?rX)M5zDSv_d1_%NoYJ}MwGS11{7p)*E))y4~|^gTiO`9M%L`*C~nb>
z(2mf6$Exn=gw{`~{N~qZ*)q@T9q>q(4D!2p0i!WCWU(dj+4lU<tT~MC8+}eEg;4SC
z6kg@7n7X8>o6a2^yqX<=VATD|iPhIeHTZaBFN+!1qZ`RQOEJY(a+dNM+WccF1BJ&u
zl)pjPmdy-x1Vv|Ym-US?K1NTsq;2ZHWcLH=^PaW~{_p&&!t_!G$uT2Va?-&LN>w+!
zg;sjJi^|G28m^U+RD0Db=5}}Rbv{usYy+O8v~Kdgu>4q|VHRUttK%OaqyWMkuEsPJ
z@DM}J0|1cU<?8G#*n2#5Yk~X3{{4mf;AaZDnIE@x8axd8LV4?=*!7gFHCtu2tgP#1
zjvU_F9&tE=$7d1RKa7=I!?^&i=k)SihBr@7l*%PkMr2o>1<oJswI`W|+b?Us?cyyZ
zjw=O|lRNC=iVQZ|+3@T^v{r(RP+yP0H-$bX`QZEIvx)tOdHVJhItVoxaC}_D*<Qu@
zSgYmB0cjbTL!Bx7tL{7v4sO>bE-*K3P$%S3k16)2j<v*Q4JTPiKyw)@Efb`ukxsq6
zqqS?}Tip~U<u1&h-)<=CeYb?7g+j>Tj<XksXFqJOoD!K|M)k$+Ln74?<=w)^tHXVh
zo|(BL^4M67JD;4#hh)MJR65KPn;67~5Uh6KZaIvVEWWZ_v!HxPJjLJ04%J!JB$|+}
zj^~N-|GotGhRVnB?6=)5`nIvP*fX-Qj6AjzThjKhN?QuSZO)l`BlLXSQJU9~jb5~c
zZ4;=rJZwZ-G=ET2qz$p~egbb|e>JAA5kloI`C;~I(OxY(%6yY*`a@Nob4{Cv*oL~_
z+%c$I<k%!M=f)-vK*8Ywr%{QqU)Cgz^e@*+`=;aVv_(1(XAeZ(Y@N?$Vf{#V)q1=%
zCoU|2YkH*C)1+6<a}!<BP6J)Z=Sysqr^-OW!7W8k_Qha9#(r9InAt{^IK}PGM`dDX
ztYPoe{wl6W;QiN%5u=BHBBFf0nd1HQhVZ@blxQf2c*WzoV>q{uc|inb((vVBl6N`4
zt=vKK7<w>l@vfr16A^%OMMNX_6igHEr0YQg73-*rgCOHA5w2PY7Z@%@L~^uK2*hYR
zSMohd{_~1w6(xk5k0Y$^P2UIH7tdG=$KU&cSeSaX0x?nzgbRxYmG5?FI;Pbuu|(G1
ztv8!i$y|J&V#;dRA70wASBP&1=r<l(10Gngt&OMnhCE3!nKmJ`?dyj|t(&EY(ign(
ziuxVP+I)o_CMQ~HVv_pr=j`R|tCMRlEoG38+R$-lOOGqgsnG2kznLYLQUr3FQE;-A
zi<WpJekPrq*)#L8plo|QgSq74szr_<1{wwDyKJddS0juLEgO4&tax@*Dtn#l!j-s&
z)~LbBc&9mTy~IQ(0+It%w{O-FQTLsEW>MRd5!ZN)*jf`P5HFQ;xwc2Zo^l{%Wo>w&
z=*{T|dTJMp>Kw|SCQK2^?n|MHzV`49)!4IVyt;d^C$ryQ$B@h*xFw;4YWG#}_UBZm
z92ENb<Ou!~FqGW0ybU2QF;}?`IDXh$d7_HK+|z~c&zUBunQ%6K94uvGE=8M*+Rh~&
z>507U{aAx!i5Wud{Zq3HrngfA?01vP0k(!r2fFiI@m+)borJ+t*`Und+3N&Ky>3$I
zZ8oK$T1AxriAbvzU*h8s2gV7`2W%}$#aWa~I6t8*N<P*T)$Beof=ealM7vhy=R|dD
z+d$UgUb~5|ni8;~SyaUe3v}0kFs8aFwJe=V_H$TKut>SI-=H9Q_$z&UAS2(BC~a2X
zqepZ-ba7`qN8xmGH-4lPmFU$c9S-`UKYor62=qd`Sowcgz|f2R1Fw9Tzt-u+T)Tf}
z-c*oQFnNpI+6yjjZt>3pN)O)V#kjv4W@_ElsI<@N>$&WyiZP=RzW3+in?wc-%!3Ac
zX&QJo=tieku~bueKA?)<cz|8jkMpq(wcNY2WcYjKMW>quxkY&Jd;MDWHP@eRihJtm
zb(>a=e36r{B?P#p!-Pg*U*p(Mcbd*(reHnNTV5BxJv*$G%J|{6k8mX$RtOMHdzK2J
zfLX}8altHsptSYNyQdo^X<h(RNRL|7gMuyEU8|8bg?&cGb~QRVIk|m95O3${1ks@4
zr{uv$sdiWA7Zw&~XURwwc1Cxt4kG&)GCqIEkmYXu8Pyq6N^MIURZ}zU>BH&fo0=ij
z`G}0=zg}d1dKGsHa{ALb9sSQCVKc2Ou{qDBt~qhk+QruVt8|?5S3UQV3~sk9WOTSz
z*D>m{3_e-x<FT6ekF4D(7C-AW+5waEOwQJhqS%^y%OWlJ+e6sRl9P%_K({&*V=69}
zG;Hz^aT<y<p(Z*ON#k1vL(klsGG|1({;GWWbfA(hQ-|SM7>(p^4?Lee{qzb_mF6Ns
zXIR*!4~82sZ@-%OsnW?w_1x~`r5?PyJ*%9UZ@e_zs61fgE^)Qw)^(cD!xVd{Z#|(I
zA&89^{CO*r{+jtqgO%vBKb+IL{Q~yCv#vcH**0r2!fG6^*K87m`*~?;Nhtwgk=L~k
zsKXV7+`VeYTB31FV=yXX3vG8P{a#cAJTi79h54zOnH5Bm=Kk@fWqz+5{{vZv(}Ox+
zGUR_=feNgw7~&Z?XLmO?H4V(52u|2n**L7fj}|l0yYo~f)f{nW$9@XXH180OK+Qcl
zIN8ub;QOrM_v+<hst(&GzIoJnyCXVwb>W7&gNbtUA+2TSbmS35RNuvVKDlvVKydPv
z+aAV0D{UEagO3`ywUyTfF23_re-F-o)H+bae6$|4rI|&awpCrmNbop5IV!Iu7K-^e
zMVh{bdJy8TRda8jyXuB4h@R?=I;#|49FHEpyx+nq7m^;gPc080(!S|gWZl&(EzEwe
znVL&Tz`5I~?o*q#x!B=`#X(!{28NTp4#aA*lqYPh%*@Yj{WM?(Lyz1mv@%RTo<DmQ
z0_ogplNC>}DoaG7l0i~++7^MI3I%rb%5{JDnA(7gy6lBvohwN$cBzRv6(KVcVF|Sg
zNh&y+u0nGb|C+?lw8q7tWrIdHV7>Rj35IU3$rtMI>gH29THf<evHPljy(-aJSJ(Pf
zR@#`OWx?a`zusKq)b-_2IjKA$dv%X(4!{Hi{4+l&1D~V(E%<DO@M<jz<v-xOmG=5-
z>8JQ%=A87irza4~0D^4ej5cyM?`@Tkn8j(=!{SiR6=6ci&29%Wz;x9Ei4hBGOSZ$H
ztWZqLetwGhhL&8%&m&B^sSwYep?>;WUe+Xx_n$8GY~rR2s>PYO<|OueuWXtS24<DH
z=%sdrs^vR_Otf`@^Bv=jcWvOo5YRqRGewxYGkf=D_l6{P@kc(pn|#u@@r^zU60&gn
z9aXl8|LQDisft05&L=k|d<+bYc`Z7%=(~@qaf($e#+Nwwsi`uB2g`nEetRrl{m}X)
z$5o?9D?y}2Jg3p!vcNDpd?dX6$-$!g`L8c`a@0EWS{T<k7H!(Q4US&6pI-{Y>aV{l
z9*Ff4nly3`+gV+c;3u{sCFF3%d1ha8cpCkL3fp+FRI(Ev_2r^h8v~xZNz*wtf94Hi
z9uo7nP#ygdp=_Pn{RE(ky8@kR>zCiM>Z|-Mu{&mG*)2|m+}S3qZvM_7%h=Gc{>TfS
z144n*xi31^T2Z8v)j{_rC1(rCG;9`44}T92fh>o>+)?0@{vhm%hXWbmOZ|yg1MQ=1
zkj@zDAcX^0-PqeNr3Vx=kOyt)CxjM!JsB1z5WlHfq1ZTZjh{gxpx>J1Go5k(NhW$J
z<jbe*erF5GP+E;YdP4*LhitAr#1&%EA0N+TmX|30<X9%-4HK<z#(_5@Uq#M6bR-KP
z0cD(m?*sjLTqxgfx6-4f%;!`xPW1d}oN4e;$rnG;Tvf&BxR0;P!<#br(cB-j$D<E|
zm<Sb5z>Q}8I9o8cd_MHi2;ueq1P0MtN>6SU2z>~0tfTg=I1srcpSb0^ftJe49}y4;
zql5TL*4H4C2)`65I4f}T#2&SZW(hYG{&{51w99Q}@1<VKb1#qS?2U+JQU?Blhp^e!
zM5%Yco*bAko_x@6&e5>tI1Va89okJoJPT(>RPM?Rn^H!aHPGpk)aF-oT;?vvM6VkW
za3Lp_DEZ0zQHqOwOiWAb^fLgo)7O}Hj_tAguO@b+^sR6C>8Q5>+1GLd&lcQ@CN7pf
zU@+z2Yb&BNd$x1#JU0f%(lwAh^iGt^fsR&-5i@<+Ux+Qc3qp1#H_{431q1}-Dz&+7
zKdiGcWl!;^W0-F#WFNs)Un=M}>~tzHxHIgvV!eo$WURsmS9+I(De?qTq~iXbo|#b(
zTb{%AD!Q>NU#$WpLs*E=;bS0LK_D?syf+SjT7sXIiTK3v3KFicCqN({&=EpP)*2on
zdnQumzkW4P)9m!mUSc;pfiLDiF|(5BayRV#a0NBB6I-Sw;u7i+jm73c>y_||{@rz`
zw`L!mp|Ib4h9JfrRm{!9!vpw|U}b1XQ<e(I89IrDxj88ZT2V1uvJ$-ae9@mA2()&%
zzUq1Z;X~E@k{PGt+~$rGh!s%aS+lF@QXy>={7A79b>!zA?-f}&$w-`p<XBAR@6E2=
zIDIh9lAJe%=}DfJLd9&pk54ATWSNXc>GS{C4V5MP{))K*zhZjC(UD4SiS+3`ISX4k
z-#jQPor$5DrFXm6_z`-`k*K>qg++uyoKWPh<(^&_CY*WCOk|MFUiNYK@Be`CSNURl
z?q=3qmO`st_ji~|7$-Rv-Ve0R&s+8DUCKOJ`jO$IB(F#Bq0h#dtf9C6bQMu)wl{rt
zu*g%{U$*NCE9Z%h1a`m^>34C$gCpWPu73+6C$2AiVceG&&;dhGyx%h4hvpvrdFAOM
zf&T7e*LU{9m(w>Uf`8W`f93Gi%{qZ-Bqo{376U+=806HYx66a<_7t0FeR&F74G6B1
zO2*b@>F1H@y{UEqt7j><b-s`=yria^?QlO?F0t=4{k2EY=Qu5b5}4_=6go=6j~+)`
zk3*h3-U3g+{b$cJZldG2g^|bY?FQ9pxiSYDAWFI0fC=V*pcHF+;L;o(3Mi?Uy#+X@
zem!3PDa@X@`wf#y;U&u<3lh*xg8+H-2=#4GPTZktslS#N52}<vrS(U1A}T6hfUK@=
z+?(<}E2EdCECPyyY59%b%>u&3UAmdKUWTfY$x;Xe#!>B{%_bT|VE7_=`V2>BHG~EA
z$W?x3aN>lfn&eBj6A#l1L>|K6cnUWV(wmSjg}1`(qq;HH`?AV@GpJ!>KfO9A7R{3I
z3SOrI5#l?J(`c#uBmcTPNP|%ux=IZYaAe#mVen#^Cv2nAbDHy?0eit=2w%Z4lz%Jt
z4ZzzH;!!##xKe!(P;%2-u>1z^cmMeKHh{q*iP|G5X-Xp&goTAE_B27m-?+ECr}p;u
zf88t|+f-hhj8s))tJmb;5w`4z_ei#F24e^Y)GNC5Z*g58dELAN%^QxU2$c4Pc1DNJ
zHQvc)oS@nhzv~_E0O2oRfp`7bfYO&M;RWieHsctIeZaV|-D8jLUIu@97cEKn<@5h~
zMOAnj<u%xag8*eS$ezegLsdH|I-=O^^#Py)DmIaw9NgUMr+<exwZIUD$VRCxaEC-Y
zDeZrzEwsAlZs^ytT7$uY^a{S$9F54=dDD>y1(n*LbTRH9XiQK?m>Mgbmom2*()UA!
zRHsFbISY#dBbCFnN><_H=CRvyZJc_Dw=}<pzc${IgfGEIr1a$h>wBY&dQ&taZhd_}
zfHFoVDI!aSt1=<$F=*zK<Mxz+1_xOcR*Gx{WJdNp0_Fh}S?WI7TwCR&x@*@ipBjii
z4sFhCC`dQe+HRWa$KdSjynsZ>l6Qt`Pvex~wJW%pnUO5ccy2g|?HG)iD=FRhh~%5_
z85PC<fjJk4>i$DHWp=PJu7T)nW3;NQxX6BZE|$z|5n%sJuX=(PhQuyMNG|W1!|-5&
z8REU5E&#^9dH?<bIDO!ko|*{CSb;(urg_WF!O#fe3W3D3laSyH)&ze@?ciWXUmpvB
z@202Y=c%bE%336CrNnS4c_|{oArp~$9Y`fgS7*(5U+>-@4wHZ&vMr{-icU!hMpI`9
zaggO!?l;YhmOTU{O7ogYT2eKTAiN}}R$-$cxb=AM{&L4!k=ulmhzF6r!2XpL#uItF
z@^tr#<>#Ddq$*m|;y*t_v=5mbIwnXjlt6<v@p_J*zkkg-bI(vosEzp*%?vrWgGHm7
z*YhV#=bk*oTgzbAqULfzL7D9t@E;(mTja||7IC(jcL3HRT$8aYck@=r%_c*O_5Att
z1RvA!ZgC&2AY$(MvAsy<@KkJ28qHyT?B^X#{N5H?vIYft*V!>+lA&R271v7_;HKjT
zVvmOYfjO8QXG@d4d2V3=2a#FRR#t&;Nrq3iHzduD9I-sZZv5oFmes^T+iNjoCti09
zG9aCVfCY3hr1;!$z89_B)X$Qm+%QphVB>~XB|E4UT-Q889)9c?3&So8OQOB`4Oxdc
z#j@Y0lcRu(Uy)U0^}@6za_8c-^^T`2r>6mN<{L8L^k`Io(Qqt|9@(`Z+d2v92_!br
zh<j=ccoF=}o(tmp<&?&ALp2!_&$DYCA!ke;9LJc(*3ol4qcwK%AEiT~d4Ym?XO<Kp
zt^<^nKaVi$KxA&A)q$kO<tGJ7$80!u1c*3wWyNKD5>svCqEOp>2$r94wS=i!j^#X*
zH}2FcM(P3d5{DrX@v~IWoQ6^zt1JSFAFwV{RWjYi#>PdrtSy3w^?wk7kuvho(REPv
z!5RbOgzU>gY6QI0U~Rs~-Jd1D*Zvc6EhA3kOPuA>U(C}I&a1g#V&A@uxzMf0gD(uZ
zFZXW`d2@REby5>6IeJBGqgKn?Jj<>BVF9sT2QfDhIaV*O@7)S2aL$-H2QsBt%gdPm
zC_q?UMHe3z8|$VCSGe~a-JCgd6_AUKS1c}Z#eX3yshgUb`X^c#9;(2!=4(Ls33;M_
z*p!od&5Pz!C#U0l5E+S7!b|--)TBQDWCo7dbpkkIdK_Of@+IK%+Ntz%Qo_{fTAp0E
zsuP9gNi*}ll1WYe4VC-j^IF_vJoH@(+;IJ0^a;=MhY}4L8&cZN>chMSr^_Yo9!TfU
zH!`Xi{+Rf|*VmVg^GzY}n|=-zws}30F#GVtA|*?cDt%~KDEYORF<l7USu?BkEq;PQ
z+~E+*RW36d`ABvBasNr26#?f1x?p~~<fBlo(r6J%Zz%0-5*!}nHq0d<bGvXRWn$+=
zA6J{6zYD&aQjN=U9K@@?v^#4#l(9*?NwySq&pVjDd2Q_Igo1BHtH%9?(sAX=r`w0C
zrbdoDiIS)pD13I%B1DON+p{2rL2Re!=dKm-&>BDa!?URPL>=afiQDvUw2kPK&}HEf
zCNNV9-?}DXXw})#e}Zq8DARQo=V<zAJ}psJ8_tGz3*6h8oJd=kJ9*!bY`K)(XIi)0
z94O4I@@`T)M@);4>Sk+6f4^9*>_ib&81lVBqKnrcoFv4xSw$F(BHyy-EB#jil}>h9
zW)qi{=K2j$Ll~M%i^W>jBWQFTWk8g(zRlv|NS?rDeNM@T%ZavwcIHG*^8EPtsQ5VR
zX98~d26M4j60@vt<G$=Zc{sxjR10UH(JA`=?KDeJ%M}s=wE7!6?YElOD@xDM&5B6{
zNpk6xp(5b9x-n-rxLf!mXZCSz7P04}3)_2HWo{9mXGIAAH^#sx_i;Ypx%GdjpLK;W
zmY5Lt_o>CSDr{IjwrLaU#dA+GC2%Feg<}a=PuT{jpWED7>(7yt)WcC_GpX8Um$tuo
zzhg^zUe%hZcz!e0ha1QUTgxr&pWv!YbHc#Q57GPY1kKwxrp;=1&`TeKGp%I)?OSSn
zT3K#;M+jbeD{c`1qCq@zd~vcB>|1v__9W3$SUpzv#3IF~hD4RzKpXQrHDz}#Hiz9B
zrOw=KW;h?+b0JUpVA1)wGVvmsGv%`7Aziq2zI~c_0pJ`{!`^)G1+<uJZP(YFRYJop
z92uYi?v46-8WZE0$BW>tipm!)xgVx&h5>lbMc!>khB3jrG*F=EnXJFdg+OJ2eG}dH
zlUDlQ|Id>l=j(d8M90Lycb?W7wo~YH<5x>4DufeLABG^7BQS6~_9v=7^Osi`gjoq+
zC%@5OT5zoMW|6ba;M0^rKw0y+QFXqkiv=8<p{IR|x+^^eB=*alGMFp`#6>o&&0Tiu
zSQH|J1r*3mQh4SlQI7?%iLtf#=!peGV9_Nx79w%z`iAQ)772pLp^GzRBuNyi4v|qh
zmzrk<d#Be;C6wNkh<)x5r*?XeE$y~x^CWiM^@wbC3E|1;HdWq+1H+}mn4DucK0Wb8
zir{P?cuZgN%;TgZ9nbE^ZCXPGyXCUv?fs_aT)XQO=d)k;;@Oobt5RKZ#+9@}OMCj(
zKd7DFRNRx@=-ao6TyV76*;?a}8)`W-(&YDAr&LM$19Sc*jXo_tpvE4|P#bu;Jh`HK
zcInRgxOGZyArI;Rj}L4lSLPci@np=YR;XN>yt+9czVL~M=mq0jB&|Qwn_&FSNi5&Y
zP9Ztb`N-W>jsZBFUcGt+b%~O>{iSHFGH;vssQl8lYA~#jgzNyBTGW7wBLC?+%ov9d
zDhS#u^I`6`z_Od~G4;Ueh6eLWw8~@gz`{>f6#H*@Utcj3|7hjQg_#T+M7`SKL}I)i
zmyS^^(~!dLX+mQtQafw0T;kKo&ZAecf|9*Z428o5)DNXf{gySOQ=vs^O3X8<edXRb
zgoSBcoSi5AWp?shps-+}8~g{If|{U5#+GB5lfDjJd(q9FQ*07RmE$?XGh0>l)fZh*
z|E2s1o9dz+Z_P|iO3K{Q7y4X~?;GP+MdQ$5z*`m-Cse9EX!|UaxdzMrUf`WI84q^x
zb2(BD5(#3(qNlD8FFXbHOtzWUP^3SqNr1f4*U~GzsbC-CEcQqB8g54P2*EQVXRZ5?
zM7Ga5Bh;JzU44mp$9fgBHv=;2C;1CmXa`hwUL4)|Dskrq713U%+^^;pG`9bbv+s__
z`hDLfBYTsby&_vi37I8XS(U7$XvwO`ULhk&T1ZN=OUa(eD4UiLLMlX2%5%J_@Avil
z<M(=A&(j}$J{7n7zTVe$Ugvq7$8nr2NC4|noW}RP8s^{hIQhfV8n*bK0cNU=hV<O~
zPUvlM*6W?#H8pqbR=Qexv1+wMb@HQe=YdU00VXn?TwM={_gmy@^}xn)JVC)bgUpyp
z{tDT8hW&7?nGelAs$?y-bIEL6+}$HbM3FJ_zLEaYC4;%wJ2|DNlcl&s%jJwjxwy0g
zr8Y^4(u8s7o`6;ur3!%DUaVTO>_K}z(z^rQ-QCx-+NO7ni@P!0doX_gb#zkF@mqH5
zvrnZFA?+%mkZ%)O8%cn>OYZ_3bC?Ucz(Yy~UX1MJdQzNF>zZ#v+}sJqbQE%e4br^4
zymqA?gzX(9$GOORR;9MO>+z4aX>^q|Bt=Tu{XbW2xSyZQdgq>iuFTy0q{V*)_3Mue
zlMsD20H1TaV-Y}k)xGWwmP?=!zwYxvC+>Nsv{e$$b7Px6QU*G@X@KI`S@IX`?$&p9
z5+1r>^VDtDrYaH>GfriKwI=7qO@y_@IJsCTn!MnqKD(~v#NeThyDp50)ux5?Vto89
zd1uOqX2Q5~W(Mk*7HnAb!U<0PEfi@enj++ohWvtFCW%sZKqM@Se0Rn*si_~xkMPn&
zwp>($3WsRW3|5xAJWm4K`4Te*p8z+9OGyxHFW`@yix>^94004}b7B@r)iG4&cdi~e
zd2$BQv_wxdbGwvgP58b!AH8gG2~`xvfg7IviVJtgQXIuj6fv$ZuG?ZVb6L`*=+rvH
zbE~HKOcYR$GYjiW+Z3jQg9G_*d|cdt9Ml_pkVCq^eKL#sfDl}xkbu(>+lrq45PHcl
z`9VlPi9|ckE<#XnK22#+<-f)D@E9np9UQEJ4K%U{6^^JFzDRJ}A|oS_(w4)3R-qlE
zARu1UPP~i?<i-Zw4*+9{dB4uVAk{*6)@U}hLH79@BLM|0$Zrs-P=Dea)q+rsV3NR$
zQY=VHD~dZ;m;nY)j$quHQuyx<z&LQsjF61Zu{Ck_Hn>d>{Z7|5*kYBpT#>!C$$E3U
z)+=ssp`PPUN$EwYXLm=Q(O;~QNR{qFTMt!e^s(giajaZil3qW{pad2(;Uy?+hU4|-
z>o`L#(YD3XfR^%%Q<(wnPSmoT+B%%hPw0$zIXR;oMfE-ErfL(IZ@(dsQl9!R7!@CK
zB1z;byWviW=Y)a6<()J`a4{m}cCfpEms&c@Zbc?VT_pAmjSOX~pq!zzfH>T*Yfp?M
zNZ5pWs7Q;d8ep`uGx#qZ=XP$!T+K^wF|Z4ACU_O5cp8mt!s^Jt*RkdD?q5p`$#P0c
zYzH+5e7wE&?3pekB(ALoOpq{HeVB>Lo9zwqEE|CVlpLPAM#dYD4|utWUT=USu*uD>
zWoRovIVBe<7$kq%3>S~zc&h(0NJGO%KG2CRG_3lGxa^k}4T2pbhQY1BJA#&N80D9a
zjCySDkYLy^$>}@D?HGFFuz0AwHMfTR+qZ8TAOZsrfXm|_ywr|f*rbzIS%B7`PA_Gh
z?~%=752prfUKKgJ@W@!^yrRxB7epGjN=VMAb-FmbJocwB>6s=m>EQsHbPda~hnsBH
ziO_a3;-iT11e5HnygaQB02aLZ_D(HUBp`fea`YBadI&@d4#)DrQX-<&in|0&Z@pLP
zo)(<l<PqM_9@L^0F}s(foIQ<|<7tuB#IdLWFiB6mDQ%x0*2$fu*|0e_TZ`PywPy?$
z<Khaw8r7GBtVstHADOy+TTfwoPzhdTY|URsf6fs`TIi(SM7{?3AM?7;>nE=X9xn<#
z{!FV78RSg<u<uxNB3ZD+R`O+(=JFyCz6b4cH8EGEA=?=%Ei5c7?-#y>;RoH#SXY+;
zTQ?<DHQ2g*Mn~yx@r`>|k3=~cI(@)>E9S(n;Y0VHaq8N+IEtg|0tgk`y>4Wk_v`mu
zSM5YLr^{&VC7D0gbKwX>sxBx&X1GaA+hN**dX<h>m1#klt|5zO*~LTTEO_Bd;a1&}
zt(%(ZA97ah6Npy6%h$er?SpZpJ@lhD2WZ8u;t{3I<FUstBfEXir`q@LH<BGJn~4pX
zyElyW0;FyI&BFcN(?`6mI+pdE2a$Na<xz~Mr=o)0UU#_#8>RA2KoW_oRuK=#^fVmn
z8-6nnz>y{gyH1Sz9`#$3wr%i7ypIxp>ZF^Fp;Nb_0Y*v8QQJ_D@SN6Yk3XU*=U}$G
zER~}{YP<||v8X9dN}Z^Y`_DFHKiHrvUGY}oPzz^M7>P>Bq}*hL5q<j>o~vg@hybml
zpnfDvPyTFZO4>wTwJqs{P3%EHl<~7l;}i~a%`?E5Kb^7FIjmj@@*-6rs=lh_xm|}6
zXks`oaPvQkkAI2g8oA(Q^5Y^;bJc<YLe{SkhdJ{Z5J*a)*MMl@c$1?GgV2P>j~^GG
zy%epr8+qZ#__){!DYH=Nbn1n5hrVENSJFm=40=9DxY#qU#nI5vnD-f*_!zTJ^zz+j
z|M?AvT<1ruJU2~V7FU#P8{?nb*!>9In5B^DYW(dQL(*Vx@7|lY!N(&^ApB-^zI1Ip
zMT7SOJHrjDJCSSSF14DO&7&3t+0R41YSk^Wyf}teV2z_LpycoZlRn${DhpWfom1!*
z63i3%Pq={4WT^+-O9)x)m70p@7>?;kYlAunZ)Lg^iq1FHfq|^SOmXmvqN1e*)#*;r
zwdD-z&J&>1eA6XMxxyo;O;rt&=8h0>g1F@66X$W?wYcq0QwmnTK)+vX?mWcy>PNtX
zsj8|PfEwU&k!X5*JfifDfX!YdlqmS$z{(>3_&_1huPcml?v!a~p15{%kv-Ci6L53X
z_&}$_*m{yxe6ygSBNUcYuno%w0|mZ2Lj%n}jIz~1TntlG^P6#aa>ab?BB%U1VU;DN
z1OEQ63v3krVFAmyJ|O|pfPW-naP(+MaCU}mqFv2R<q8Tr?ZI_222IiH9$RUW#eT*v
zOp)359l^w)6?8WrG^#jlX>O2J_<prlY6bTRCtVSJ4D9Ec1wBk0y#iyt#u~zl5BC?W
zHIL)!lwWRC-DgV?>EiZxT-8(7ER)Pm^B;4!<Q&(HAEMi4<2074d8)6%QgC&fZr)_|
zAjppG$i+LnLs+Ek5NKjD0vbRB4Y{|k7AU0Ho}0^~&sjNBqr{3SO{;PJ;u$r#&0RZD
z75vP}@7Fzk!U_+gUktq+yu7@iIV9Ns#v3s=Mh)04MrJIc_oiwny1HA!n7VCdlnqbH
zmV19v!B6v0I{tPM0fy-ab_Ch}Zn&l_Lpq1f42P95^1qDXxX)<B<N(N%<GJ@90bQr6
zZZ<+=3n9Ex^@62qtixgi`x(WLKyc{4M$XU99sxK4iW~a=F&w>U_o0FbN${fhrV!$y
z<+pk~le`P3lPnXSRAUe}YQrHPSUwV4C82gv_3XUcChO{SfbB>e6ibO@$y26JWEh6H
zw^uM+`uzFx;Lk#<3oeBLJjE1{Y9-r`B97p;!v~R7P+)1{(*OD7)Q7MypVQIY0L^kg
zp~%0#)zIoM3QZ+%WcT3tew<i%b;@+gA8KLqXX6S+7)6$0dOE{;q8Es0>bIw6?JiJ@
zLc<;W88`a~&LE)jMUb8yr=}WVh5rjeb?^(`p~kOOguL#izdd*6W28GXz2I6bVmJN6
z^^GEZU$Ax;u8x=yx#XCmSJ*`v18FM;98sPlG}{Reb_$5dx7iF-BN<{pQfI-3Qf5le
zjcnaII6WdOsM)gX5JT4?X6eM&pBxg6DUlxIkxJ{j?jzrHdIr>mSlF&&mNEe7h|@f*
ztiS_rf}95(AJK*o%9F_2AzK*5pl#TaUPpW<6lCi$!wkjOX`txH0S-X^<NuQIxh33Y
z0C@h)|GQ_Biqc6;$f@34R6h=<=K|^5TWi*|3RHr+j5H3XC9U(XuO3dkZj$40K*ith
z(<vrK6uIcYVO>~AXjOSmCD^xK|Neh0x(u=10jsRJTCM&QKwFkcQhd0p2{0Rr3=jWn
z0Qn$3A%O|)oJ4+97)jKUnDkj?^`DpIb%?drTXO^>KPUloR4I7XC@|^~=`Bj(y%4$>
z-gk6&-v_^%g9qO)F8Zw%4^iHDNnb1v0)<nBR2Lb(P(d7A)@Ha>B1!-EzG|W70g#WJ
zQnm|&-|#i)Rk#mUEMbuWe{is}3a{QfR7TsOL6hH1kJ&Yxy-iK}S**kY*g@w$3qna1
zW{M$Tpn7IsTcND=uySpRBHVcq1`+4V4YyB|3yOThz;Os3KYql>PiBCa{VUCv#N*eN
zxWTDrn&@L=01nDf#}x!%xP56<^8emjc;?slyyij&p<3KiP!Vb$ZVGH&_y|Y&z`zx3
z2TVk)V{P(H`1e9+o2sg*p=)1&K_kddBDsVg1U)<*goib=9lewgrlj#2n*4P1qKJ=|
zwAU!+a1h=Xyyyq@)~hVqbFBV7emfH1$TtLfIA%QvqM1fGgFM6fp`|m1o%z7-(fxn>
zL#K--hIR;;6M?^C<x%voJ{8YELeY=B0`o%t8GZ_i<P|<4L2{qJH<zH~IxLSk!$lCO
z30!{(`tItRN>FM5Q4T@{zz0Ya&qMJ9W_Br{UT$t0RvVjb=+~V`&KynE@f|kN{~QQ)
z6xLm4ujzP7EIEidXs@c^Dxn%exY=_}Wp`DKC@%OqDXix)bl{OY+;TI<*h#F>ZTr>o
z6hA%6+gXy7myfR!+yXSKP`u*WHX}fmz4zI|GLc1K*Id{j`v;;KBGEwTz<dZMt0rJ(
z>F0r*AAmPFYbS<%_TYXY3cMWiMwhcrIDk0%xWg@U;8IBb`+b%XYoe~{eH7wQoETGU
zTVUQ^CL$Mp=s)9jomhv&egT3TkDfF(CB}(;#pMBjDe&V9zU37}B0*`iRQ&+=qn>L^
zQ_e-j0ug6j3l#%HQ{cV#2h?NrHrYLt__LmZLiF-Y%vpMcPuok3Z@|z$b|Z3n+LdJh
z`U8YQ5>cy=nUyuPG+<^Z_}`Ot;*FsiLb`(&raylIc+hM$)Btia%omByVjWFW>DzEO
zq%IqDqfp(V6Fx<OF$sf+)Y$$Jv&{UQoc9=v3=QQzmSV`|>hpb`W;4n$0h>syJ&bWq
z;zojerWyMWK^H)Mh9805?}Hqu0{XZpIdG6UQ|nrqA@l2y?854$Mtz?d-mxrenjU1x
zB^OC(RUp`L!l<9LYRu2PefxIDQWGQ;!8^W;j`qOTml)QomW8t-fmZ$xl}W8;9FMX3
z-qhoZIKWa?4*)8x?Yw)1J&H9513aoHhj6qJTE<ApC<*5z6ycF15h|xoo`fshc0xes
zxD_oE#{dB9cTnduU5#!EdtpEk&V~Hz2oUC$XNYZ+VLMjh;pBze1EewxN8`gn|IOLd
zLWnYSwsC`|CZ>s^`F{e$Prz-X!vJV>3{eQ;iEuD83wlM!nd5=#(<HQ;cK&Ch(!@|X
z`1<-TzlXsmxJd%c!}@ijbTl*}QV|UEb8|WZJzsHsr!-qpw3OkI^#sr-4SsG1>fl-b
z^5s`#%h-(He*D;={uyg>oN5S35RAAiCT{);Cn+r{IR{I<=y`nVgO&y;gW~x##QrVP
zvMfBGOe+ZP^ZXl}Z=BLfaO<15E^*EP0G#^#Ij#ovfDk%UUl4YgY=c0#u4l2<M73>r
zyqV%L25jbB#37@9jFw~B%yVR<Ht=<Io5Q(IGkiZdXn(xMAwE8SEg8m>`LkiyyLImX
zTVO^0;HC!N1_nI1hEB*ina{(|2}!qbM`Pn55EgI}Ir<Fjs@B_Ro}g3Y)v@M7VDhn<
zFeJ9q;y|Vz?LUx7gu-Sg3GI!Cp?$ycP~W|K#~w|^Re`J#(pEn|KPq?8-uGl4>v%tn
zkAw49fxO^#UmxKpP}@_3YWX_kA(e<_g{QB`?4#Uc^Hob+{4V^?#;lJ13!&LX&F%?3
zS`$-TS&MG%Q`R;^+iJv`|7VUdUg`UlUst&fl9CWB47U(hft96T(gH)60ddLu4xagl
z?fUPz8#)c7o-gicIkUW2B>He3%P+VSRH8dSm1h;Qusj#B+W@x-HLg+xDEh4<YJOG1
z=0ysfO({cHVm66b?B6T4LBVE*V<L7JH~e<Z4I|YX`uZ?Ndf(c`08KN!M38b}14dx{
zJsnxHY&G0ABim}$4h!5xH()5T>Dx8*NypH&ZX{Q0%@!OB&_}YC&0yOkNRyrj7879=
zI(T1qbr(hTCT%`JatHk-*18|mf1Sjs@HKy5`G3yk`{xFZ+v<Ov-S_|cHHEB~U6769
z@j=aRxgMqHA{w*<Zh#O0*8R;90KT7*{zUTY=TDt4_jfSxZza-1Z1>-|Qb0YyS$^^_
zQ0hp>AL4UBll#yw=uQxoZ63NMV&o0TDNJ3r4H&70a2jd<?Tdyw8!HlwwBT5|otf#{
zmRbbzs0U>IE$!{QWmg?Vh-HGe`lcYvaA`Bx7{JEFB!|H@Abp~Zuz)=Xi<W&Df`)rR
zb7lFoV+!C=Hv|v_uT7Xohd4TDfB5i6B(Z=_jsHE;=K=#4xlzQ&g1>~1%*ikVNH9(5
z2ux!wGj*e(iNFMA*eVBL9F%0miW<1xNEw74Q8O?^xG~bwo|~UALkkzm(%cP#a&jk8
zT_QDYvM;e<2WbU!c-+z9MDT0hPIFB8NLLoJz1$n86@Mhrkz)YhzRc}^cZUc>I*#8)
zR;&*O>;=a`v@n{%u@SOKt`$t!Twg-WF+X`xVDsjD+=!?SjP5sM9dY}>^!OE)SDYK$
z|DOS8$Ga{38#kVi&MvkN_!pv>wn?9-RU&smVx~t){*&Xi`QQpKj6>li#zkOMN4l>v
z-HE6;|C`&@50^Xq+zA#wu!nm;G@;R_rx3QL4n81#`Z?yCpa?!LZM$GU_HPjdBZzXV
z;~c7Brt=6DY+M)M_z5=nNnn_G@(HxIn7J2U|Hm15kkBMDc=C{??mgS}TJSS0>I6$*
zZvxN9A4oFmPQrRn-vJrRe;qF27Xei%QzQZ7BG;F@H5R;xmHmXt)n(QJutLNYF6?S)
znf!O_C17?Ld7=M%Srvp-MUWMT8<05hPgP>=%=G~X^!(TkMv_R<3j_<mrdKhGe4-aE
zgyyjVNYo%~A~+v71=Ft|eIl58zZW*tS^u-6WaPb*)lqtEpK6yxP?7^~rXilz_^BOC
ztlt=Rwt@Ezik^Z|{HDLpbq!<9mz^IF<YV&V+C{>n00WmsQmbE&UBPn#MTE=npvMkN
zOj;j>wVKY4LV4Y<;P`wSYyCJqy%o;^Rrd=Up)X&)By^<OGCjQ_MRYJ#PGrjCb_`BU
zXb7R5FBAQT1^j&?#VVIsY5-$T`7XQ8|M=a~TOrbt*Emil!@Y51HIf&ge1!cu)vIz}
z**~oxFJMrX$Zhyr)C#F2GO&Fm?haw$VRUygZ~$<P3&y4*S^F1p@#=Quxq$Ey8cP2B
z_?`9~iI=Q7i6tC`4t0vn-M(?-9aNBz5xB#E1qS)^gn4eb2_q7YcVU#rF)<RZMnm~K
z-lo}q=F<FzZem<2>{2IRKg#{jBaFX8E=LXx{0C%X>x=qvko0~Xk}f{<E0AFckUT^l
zdEbj1^U<`p3pD9MpnGghjTZPPh7*Vg%?VJ7B06yjm7e<0bTR<>7(t@L@U~?b1);7^
z$W_-+Q$wXNmA8LvXs82~5sZ)=O-Ompa!E#FSR<KyC*dEWXY8@+0gH8gK1XcwzLl!?
zy1@Y$N*o%897g-ueP3-GfG@uIgbBB&9`o{q*peXVd0W5=FCPUy6;T}kAOONa=WadW
zN>6}rTz3Ok{-F4Ni(rMw*_)&N0~ishJfcVLl|;{G90bpgFW!M)2Ev{&ZTI87m)b61
z>W4Zp<pcO}?=YI&7r=mJGeYhE_wur(zDD=k>kD!yj3p0i3{uC4J038pAJ}oeK6{pb
zN=I=kF*b#%G_OKf{n3-amGg+(>G_KHe&6iXI^48kIZdn#rc#G=-~zr0VFn$>wp@w7
z=u9(?5F^A|1S;CYVX)mK6ezAfP+z^7tU@UGhKz$?l7`}iux0T2&<T}v&W}3%`W2K2
zQEV1SWD@V!Y$051K+6QHM8=SVveFBo01ieO%TJE>N-e)k-a<jRkU|ZARbSrq@AO(5
z>QXs1y$I2@pj+ppbp^iN7&w=SLJoCT{~KCs`lp$IpzB&-65S3~3TVkyzrJY1lrkFW
z5$F{A%YL{D$p2>M;#xwMiSyoC1Lq^-tH+jL&@tA8L<rDXIdq~n7f(iD_9OEmo(Doi
zjeHf(3AW$XZQJf>R3ZgJ4k0*)q|{MNLtXv8;th<qPnCBbEtypahi}zG%s45BCnwx*
zqM%v7B4IXyM+Z|$DAIod!UkaiNnNV20fT=-QR*XY-iFA4cW5HP{PO4GqJZr54Yku^
zo(A67h}m0j$=0S&l||i*C+IOmAK`(0M6(-_)}t0S0~>2gr?doF6&LmtCQ*5MV5_~D
z-yB_(ttcJj>b)BB4O@m~I>KxyE<d5**6Hl+C5GVQ-atbMP?9D7kP!^y&yPbx0+=T;
zzKjeWf^KV!)51@{Y1!B*aIn6vPC!=>iR@E~1r2xzAn$^ue9M40N;fPL;<I&LFt{5%
zaG}-xHGb_xVJ<)&CZwXlrtv8B5vK$mZY-X_xNWREm;=15tfzqi!EeeJypMqxRp{z&
zC>=>k>Onl3gM_{p^g;=Vd%zsgYa@n9g5ZNc<mF4VeZY}09Y;Ykd=DTeSMC-2O_H5x
z`mcLri|f+xxaw&3H46F|S4q2v6W|?(eaUmh`fn-P^}M-oQi(Q*W@@j&YH&>GsWJab
zDi)TdA!qG)%ZY5xeA#zJaoHxUl?s3gfL}&qYqwIIO;nGx>a6;?Np<)v7*#^jPQCC8
z1I2W)APcyxhW6Ceg)8*z%gRHS3jXl}o4j&QYHw+3Y#fHJPpOB{a6_T&uoLsKPa`^j
z`4vW|KLm?|p&zK(*uE%@KE0k&Px)sDQ8QB&b2Y*?XbNQlPJLgxHd$p_oo%@9g*cSD
z!wI^dL=%;hI^jV>*xM!3t8eYBCn%$8;n=0xRWvsqxu3m)=Wj()IkgtBl6DdZ(vj%+
zc(5)tj2&#MprOJ;KqX{e@QPBNa*SFnjo6N`aC(fi44`K+RYDrBQfq@3mu24I*f>&Q
z_=g4M{nKIHv<Ei?H#2k*UJ)nbQTk9``+;)Sv{T3T+7{gdu<ae5|AWYia-UsY@;HLy
zx|+=qmiqdITEl^tJ4hWX@Z?Y+@a{!AnK!IaGjI6No`ubrkN%i9D)%RS(fnUNf0k(<
z#lj2)f(SWzpegNz4e45BE21OdCD);6KA-yN^}is^!$^zZV+;1G2|AC&F6ZSPL(zoY
znoKoi@IJ$Ab_Gq>XI?d25n9R>hxeUrG_61xo}cldC&yxd<LMPY>UU`$(XpTG$ROJ~
zn3|f3oxkas&QY2hpYepJdN)bzunmWrV;+t>S4RS|+cN~ijac%oxGH^Pw7#iTTJo#f
zo4l7X$?c0mpH~yjsw<+7G`Ter`b%U7Ph~Td<qe89enjRlW+3qp`A~CtHhp65;Y!G@
zP}nm)ebfgS+#1t3E8P$R{=kq4yF%=71{q;{wPnke#Y~i<I|Q;+8%FV-w=WKn`6Cs{
z_4GhxjXs?hI8DfXQZu_~!>>*c4b6b;#}2-UXqXflXw#_gl{P#I84A1P;aWLL<Fk`c
zRKc@79e1YDQI6AceO}-`_e+z+p7s8FcNmEh(+Wn>h^O885@Vjx!aghecJBLk{UIcB
zxNZ+3G7uu;;JM0!5j}bPHdKwlj~i`7IvyWXm_T;G+bJ8ADL>>*%<1y%#~>1<YKDYb
z0Nt4+=FwfzzkmORWwYmpCi(@kha^A0BLPGsEy(H$%LY+&CS{5VhY?32Ub5NQVTOzt
zD$K=dr$!pT7p{G|-~%Yw;YcAKKa1mmWAUjdpV33-OHxClv%95(?7e%$)`o!?Q4@sW
zw)l!~wx1tKX~klU=}gH>&CvQY$auiRQ93cWUy<1+5xhBES>w=CG3e1yuP-RZ-j0wT
z%X=}m-D6*wYs%cvab%~%C;wpJup#;J!odTtaLt!Ke$2RPlotwKg0R88F=QJ8&+z87
zIbOehJ#|POL;j!vj@SI@hEp-#PunS=JuEK#8sAD}0C%L4x}?V)GACo%wF=g5P?5bu
z?g><wsrXyj&`1bF%m}rr?!sU}u92VLA`0D@Nv7vQf`Y@izmO!#`^TyHU?{N&=<m%s
z0YAPXg#cb1&9am1m2umH4VlE;`*nL?+L)MQZB|3VYK@ij6!E}`J*$AEl*Qp8JnjRK
ztO3WcIDU1l#uRz9I_*7IKt;s|PYss^lxJLUB3etyL>^)4B`y?1I)voE$gU0D<`BKV
zC5Ff@jH>v*{=Wly0`M{{ghroW)xLTDJO}?B1l{6aF<~SwJwmd6{d(+`Ioum_9}sJ+
zmd3B4t4H&%S`@ia7)9ofcH=Tup)4;?MrGu~2e75oLC_$~Tu)&h&=MxXt7&Nbx5Avm
zxV4Cp#=xBOV@-%|*wqCWiTemajd)>^5+*)AJ~lQH;xjnqWpxVKV7Unk(7QQ7zt2JC
znaB*)91MxSp5epYRBNCe)vJg-Iw=JQ4;kq_mX<xRjFZ{$z6&(}ujrnpm1FdyCW_ga
znUjtx9C<gA{O*4Yk$sA1n!5v;eGyVHN0nkO8Ec(wGr#>2XhuIP$9Z<OKUjC3Pd}bN
zE)}%dI)$uPqPJf(H+VZ5?&Q9XRWc%z-W()9{RO9T2N{Z$1!Ty`hG=s?0)$31{~@rd
zDw@1|i(JquzPdUPI^uo5BhlP46yj{z9`IAiC=wKZ;rF_?B_)Ncifw|H3~VprYJf?Q
z+jz>B6ZZau+<H@|ZjyC*R;JRUtH+LOBK^lB+jeFyYdK0vYuU2E{@pU0i=thA*jcS?
z3?7xM?Dx8BZu0c%URBIm8X>&dzh_#Cgx`<~?=SW|kQzEkDUO7(i!Wv?nTNBp@D>z5
z0$zN)yxAr<(qyhx4V=f5K=#L@d=&VhsAHovWIE2=izKGgs3Sh1DA(<(H5@_SQAh!_
z*&aTS52Fo9LHIy((XA^h`tIGsNesFN<euhP<)wvpiCgJ`M~Sh7J%XG)#Kj8o30ie|
z)&(~&U9tdzfQyz$A7Tn{dxJfYEYBQueCX4sm;?B;@>WwtWp8_;1!+$gjvsLE{5qW*
z#nSfZM&NWJtBc+&-cM0uMs!CFxu1=kEqe5*cT;>)nxk<&x8NvFs>ERw{j=f1?g5K4
zj{B+3E=5E{5OYNpW%vJ4rFrk%bWyq5Ct}R(F%QFbpJ~o2c~jwrXM^~d+*TIfV%_^J
z-*LmurltsRVZyB03#7IiAmF`Wh>~B!d+H%ja$=@NbD}eD3RNa^(~@tzII0M_b6Os^
zJrZJyxyDN5np$#RMWo5x=32z3M_ur~+?O$2$@t*u0!Q_;;;#!6Q!eG3yw!acq2%r5
z^|tbyFNiDi>KR457^7<r!XiT#?aD-r?ATcz#CTfoY{_X$$?D5v)XG+;oav8C3%BJ7
zFzwBU$qBe>#!8aJxuM44b?y+@BFBFgw-i#n$oFMODRGM#EdQuEIqr&N1n|Kh(52+a
zgTwxyX^Z4um!`(%F!&mr$D%}vLAE3uc(`R=O|ot}3@n`U?#`GKEy<Gd>T-XY61L&Q
z`}nM^#B%BnFH%w8*dBPkoeUH(mklBA<buJc%Jy^aQ9R^-fMCif&?!2>lJMEH=4M0V
zt9p8RwccTDgn{|68B2R=gtCqr85tQ;`#4AS;u>Fu5v{8eV=>ek6C8$`?G>YfEfIr7
z<NYQjTc=Kk`GD+`YxhV>x*Tgfyved8t?5O9<L=(P;C1Lh+v-OQ5;K=A1<q<oW(eUD
z4ic#k6H9Bf`Dpf@JFa=r)gsM|^O+6L(b8B~0oX&(j3K?1Zn=G>YTUlwt4F*QVuA7>
zZ@iwNl-%;V3`ZdChH1&dP`)rzIr6~>F7supI{gT4%fo4PCMk99wl__U*K_7RiKgst
zn?Nw@cus|hx32r!T#~o_!vgkSj}{~P;nKl(2Faw$P$=LgMsu&AY{O2v>Kq(#)~kGU
z2C%S2rtXk&t?X;}UB-r!;B$=H)0Htrsd;AbbU1J3t=eSF=}kkl@Pb&xV%1(zkdr$+
zx&3h}RZK;Nqn_FLd3}{>Wc?PcGjd(#`va1KgM7s`l0rl434_{+PGP!4c|nQ~_mBWi
zTqZashHPYS(RFz9=1p#V_@}5=3x+ghMrre`DA%KNGsK-BaB*05KE*!J>aO%b_Cd%I
zJYW}2_$dMd8{k)PiMn=;$0tL47feBR8qsVBcQnr6Dc+<U5)>x2L&@W|A2x0I>5mNi
z6=EwE=44FMwZQd@8@r?b%|_Av$Ik`#`Z<Y%p%OC2ufYtgAqiu_0Q!jNqf?F#vZwlj
z`1h6j$T;b+X?wuu>3OPo0BAFaKeBAj7+85PvFL@fp8!K*yBl}CN{<JZzwi;t5e<t{
z7Rzpo*q(n~d$PdwL;9<fOB7s3OoXp}88}(pS+`iHtK?n6<G!uA2Zd$2dQ`-jE>tr@
zbGW&gY;PQ)(b!8<aOjK<M1-+>_m|YNwo}PFQrzYlvVLjPg69_{S{OxQwVY5;^|M7+
zX^Hh(-L>Ful31CUjoSw}JE(5xH<m6%I!A?`2{@$5Pj+Zv-9U}s9aIgRg2!GJQ#hxg
zZd;%K<hod72U>9%yyng<r1hp{A<RO{Gxdy|o%g#VZRcST><?|8X-}%fBB-5X<Xf9~
zaZJl^ruUMU5|F5=EUcR7ypkiY7aS=6j-)B`dPf&Dzsg^YTTc!pJF0H}voDG7qL6z0
zbY*I1&>o8Q)cpdb3q1w=Y3p@F+_J?OwW~M-LE~a($;Ay_7!fOa(fQ7ch6yewy5AcG
zIgi1imowCFzn55*P;8@R{{*t<iF(e!)_BgNADEKg${lo68Q<v6X;HFur~fnvW~Rpj
zQ@%O5szgPnN#z9}^H;2K4kKyWauUEuYzpsTCK}$6oto<%AAE}%b#iS@zjlODDlg2-
zWmC=@Jfun24X#@}lhjMQro}dITVju!PW~l(@=;oqyj0GOox2tC$8<O4zZ!~mC5Ngl
zX2p$E@mex*^Rff`zD8MJfD(i@_b`B%#m`q>wmXsKzs3Zgw(Y#Pxj-n8FmC(gto7>Q
z5sQTndvTiVD*WWPz5%mhoyCWaOwMOS^NffPM`9D((LuQ&PZ}mcJ_V*n#*w?buVwQx
zI4&dQ+_ezX4BBMy7y~;WH@EuvWxv?S2-ulC^+TBoPLjbFiBV)m2?V8NEM!YUcXMlR
zFMH-s`10;Ua+j36-N<+TCTWwvz8B+$9o=pI%#X)|qq8Gg$#v@9zYoNjK*I>~g%UYN
z<Dcm(C{kG~xl7cL1{fO|C$l<#0nTH?Cvohdmv+fkn!@Uymj)PSMqR?w(3Ym-ZG1x=
zs)YOCd}p7i!AyGTAi1vf>1PI~5`3eYCF@*n+nzU`;i3exOwGM#=^mSTh>Fr%_ouJ)
z%+DTBQ1>a8-KJ>t&?kGBlk05k-nTZP;%R1?k_2RWxkl(EiF5vj6@s2rs|rv)Y%tW0
zwXYp_0{oxV5vkVmE#7D{AQzKN1T@M}$8JwkvES_vZXqD`=3kB?r^Tg#CN=31`Z4OV
z5J5@l4fhUZ@LY2A<STPN0n0LUheNY>L~Z4uU&NFxWKY(EyW<jte6;U5bCTM|obgif
z%skY3N&F?!xs3DjrV%7fbd}~BoIPly>4y=P6ZIR|^b=x@kwJ%sgg8vozT3SpAa|@Z
zU9q9DkxQe)>*&OVRQce|I*0XdS*lmqx1>4z%*M>NLWv@HVeMr#;EKtycDLCxcfVGS
z@3irFMP`#1wT0({$+>2$l=z^!3(2iBX%@R3eRc!S!jOxH=ttVrnm?&yGI_XLY0s8v
zg8|<;&13$`M~?D*>y)l`bpWu&B=MECX|qzYI$wKb6Sskyt*c7$<i%r|M~$A&(-|4v
zWsxku%$oP4h;qy2L=StVMFgxFi#u0~)dG@;t<BGIDhT?xP9z!w@nRkvQO^;h>{iHX
zkQ3B76oFql=Zp*+rYf2sTw%<VsN{31r8)8DX4FmElso2ip3uB|qN@+Rlt(Llj$X>$
zGh;NBoSU1?UV~;BmM=PHPvx<^5vJ4X?=fw#d&|}OEjNLQ09i~_rQ302viShi_!0i0
zCgz8>7pbK01>>mFwVm6G+N%*g8+IAHo(4TTw4cETK=#SktrW3dC?vXPlzut&M{rCO
ze~cPid$RIIjz<3ufX~RxZh#nVT<doEnU`^;9g<hR4YVT;u@|`{pqAF<bEvOqd*<~S
zCcx9-Sq;)W+4%z0uss>`Y#+B&G*Zq39Rn=}<XNI#r7~ihAQ%?67F9}o;<~ZMT4<D`
zYLncV!_$dJ6y^IA(t<$-H~<|tDn7G6AUfagCb+G`_Ri6p#B;GR$Cdt<Cz05R!ha@o
z0Zn(OkiCPd=_aq*G>uSzh%oXj{Jg`((6;GQ<(R0q8oaE)&_Jq^cRo@|p>b4+k`;M~
zvN$uH0W!jFxCb4g&Lu)j^-sAIjzx9!uuT_TC(jqeOt;nEgON*te6zaHbq!yJ#9_57
z(zfOk9ILZYpyv-VQ@F^d>949QsecPc=Thql2+FT;ZrOCASe~5hHlRzCYo^q%fRsX8
z7F|S}Ei+SuOuCsbR3vLV>MbxksNUVTQ#}fPl|S8pXZpe6YQ0}2<X5)-6ao3)dQxOk
zt2+k}mjpb7zbP99^lVpA`HnOi^gETx)WRisGZQaowjKGN$zM_>82v5BB%?v<Af9>u
zjU{>~likB|AIcA*|0XoqXk!1-$ebf$te-A6KHlIOo20q!=~p7{mDxPcmi0~SpOt!j
zy88b4rBgDyj4csXcv`8dEvD|QPx^g;XmN|A%==Rg{HzUAAMfm)vYrs3Sy$9*OgcS1
zU4hmRRyP1zfP_cbm9P_Kd3Z<dnbT|j9anJ`5mu)&o{pNtzyLwd<NTL?r)r}+DP=hi
zus0*Ph?e3PzC!+WkU^X$0fe1B0vLn%H_v^xuW0p^B4j(dn)RZo<EhSaMyHe9qga;E
zR?tL;hBNCz*6lOtlRfiR;tCsMV|PC}`8?{#6HD`-P7k(rP{J3x#@7S|+^pX0^eaVK
zS=q#7N~4F_C_*ECe#RUML#v`o{b!Pr!yT8D$!28^kLZo1o!h<T;!@o8iYk}MKE>)w
z;veiTry9Pu3B7hTaqoef$S4%Hu+`{8<G*pdB!im%R>a)5Z=q+_1rG4i)0OxlI$|K}
z<z0uz&@{OnuQ>(eNv&XAljTpy6$mfZ_w|z2!5k}jC2=bVfIG-lpPDukEwVp*t}5I?
z7e&XnT8Tl)_;fi#8U1boIED_TeyGu4@#WD^B$EWHHs*zi)7PyE-sw>lk#|r6XHY|7
z2|A_ANrV{lA5ZJ)HjGzbuJS(g4pzAdNee?V9r|2y4kRqFFRU0J+!(mbJl+OgW!Njs
z6a;5@o!Ci*!5sL)@9-;}OHqlQvs@o5JVxr={kPknyLCR7iI+F_C?c5s8ClvQrXxPI
zN^5<5TMqRa{on|t*(89z?x^^yg(OEi1(WoWrqguP+u~2SySq<+A757g+i3}N@s|jS
z>%zqC=in2`eN(gl2Tb&loCr1%30Ts!-+}pwmqv?OoVW+qt&I_lx|2cXLBq)R59u&$
zirmDrHpcYdpv|Z?ti_h}uV*!0*7l!&_5auZYiMKWA~BW<&j6RTyu3V6;I%i9pd<p;
z6MzG7yI-bkx?*^OzyRBD$%luB50{G}$^-vEVf&B8CrB7gIggBtpxVRlNdS)%&#!^Z
zv9YliFZ%fU{^h4+v6iYA4o^?>vap22dG*xzQ>G@gQCGZ&lK`Act=EtqC%)0vD|;9$
z^wb@-*Zcjs-ND5e^3|Y8x2d}KO^Wcf-CW|4f{owkH@9@E3Ff>6?*<6(#P2m`g*zGd
zB7_T*%I1%v$apW!_%x3_+flH!iktb^z4O|Zb^EHLwnPQF+5MsxlpMiF?<;KjJA5_5
zA&VOfqAoJ9xQ@LP=AaBqV`c69zP_3zEWuJ#Osr{e(EjiH3mACy3PUL`%-0C5^BWI!
zI8+`|vLkM*TE%IufR-~O?>2xqcz=jCeBIhqbQ^Kb9L%(y4A#3zS~WknvaNgn8_{QX
z8^1M*L~Ws_j@cMpB756d7o7(VJcC!or=m4hca2lr!0Xqmv`oCEE2mZp6!>Vz?H47c
zO`F|40{69e>mQ1re&taZ@N4gUVeX!rjSV@%f1Arlm+FhZl9s-7b-rs+;n4MN!=*pv
zZ_3V`zZ<M~;CwaDDwIY1kOZaL;&lUV`6?=BrjPxH%8_I>BdNXm9*DgaGJguZmOf)p
zC;;a=d1tu<grF9G^{E+~0~6i<!hi>0b<1$^;-(1)YpKINl`|m>rGoOaAxusIy88MN
zk&!!!)z#Fr%U{11TR9RA3aTN9ZBKxK<9Cp7E!NgH={(pTdlne^59T}E4Jliw+o-R%
z;{UA-19iA?s$kzpY^I#xJO&R{4UNdKFl=FtOuN6|Y+|EJ(%*9FgYn`@<=l_mb#Dp^
zwkz|MnQ5l!0HDMi;`8X9i%XLv(K9fhm9Y=}jK2pL4~KlFx%fEWi>-2sbMbfHfrVNL
zG9DEp;~tr>)|bG}0EJ}$s8ZX<V33GX#0jMmF_w)01(79@g6Ne;qZ(+c^tC!(hczzR
zO=j-fWka2=TM&N1YMq+)5^fJvu~)B}p%Q^cKRF)zk053NyZ-wwp4XWdXr~R2oyxj-
zm@$59{wrmx4#|Xf9OX=;o#ZeRj*5vXDJfYjo@o}shFo4m#skoTn9ODn$4xZyaJQiE
zXa09Nq&?&xuwBlGx*hOQr>y$Bv|MKFwZZpWZmJ($?D~fVP!!TK>$Vv3yu6U0L~?^`
z#UgjR_=m0_48nO;Z2SG)5N;xgYxtpRiNimhmX*bU?W^zv{cS=53q%{a{sm0VM*fTX
z0FzAV2tFsdV{D~dq@%3!hSCh8%ki%jX(BrYHwuE}hk32U_zZ)^HZX`Z&d%S9k7v{b
zY4Zg7HRy)=0mKI;f9S}e7BPi|A3q3Y!dl05+t&HJ-<7(rLwk6^3^*QIyw7zp0Iw4>
z2&e5p&WK_bHm!hkFx5hMb$`d|oi$QxW$>XE<bv%%SaQW|vvGo6@j>b9;C3v-E}Fh=
z3Jf3na-ZE1Xkv~CH{9)58W<QXbR^4~hHX`0C-yuLvQMJ${T0>SSK=B+44?Ue3X4P1
zocxVx7Gb>of{u!65gIqbk!dz3%R{IeBoTjz^Ac(^GJfs}<lM#jlVd#`A~wEBs2Z>@
zcA-v|(<G=T8?lQVT;o<ZQIr~Drp|*66K%rk4!7Xu`lhxv0}YpG{skx?wr?j^LHo?e
z2S8-=LQ1gvv?+1|n*rm2Wi*}0Rs^N%>+4sRK5kU4M{TK-jr1IXn>6T=<w6N^A{GZ~
zF6hWFs=w7u!~1*q`0<saef|AgFl;TMe326@!)<gYxG0}oRTd)lwBR^_+ZWm6ZNImA
z2L90kcv%RpJc9>3q8>l?g;#xHXZCKMWkv>uz8D8*=WZk);95+yL9c^VAqLxmN62(*
z5yHDYOZj3Ar#wB?VPY=_xQUxh*8Z&=-Uy_3Xv^x8KN;z0IvEYQ0h)*q1Q>C?J1Tg?
z?cd7S__y;wmPk@6vVZ5|^`<Y5IKDjoFTmofyUU)Vi!Q3;Wso@LVeV;n3V=++sjQe>
zYnC#>D+>y-0$w`vAfmi4J;u}4izBF=PV+9bW2E|AUig=Y&p1J#*<ZbM1o?6}M|O8u
z%e(5p?QCDMRlz^`jpK{v^>gvCeUFZ&;EGt?Rl2L<;ut&-e7hpXX4{ZY>x7|09@8U?
z>#?H}<ckp1F!!e*Mvy}c42LU0Gz27*O#a)bg8;MsnjQxgyz96A*|Zn497#t{!TQM}
zDJNP<8~$3efykmf%K<xsDfPsENnv>qmGv4wJn4Q1TGgqI*oGAq6-wJ|!jX9krit43
z{sQj~NQ@5%Zb+?zq_A7QLkeEC%DL$W4JpcnwExFii){kJTcraaz=2R%3<)ouZ@oXk
z8f8{>X=ch`t$E(sgXvZe7^u!QAMo`hy3-E*_@edTNUd(!2b68&26}qLgfy3v#Gvpt
z^rN%~qclKen$T)jjbhrkQC2!AGV&QH=9FLOfojw}!&H=7+wj3A-&y31dISxiq_Q%=
z&@ifE#Wq9<!jY&7c;&%PR27VM;M1)Kp1;7`7^&WOV{8RSyZJr)!ta->J9N^-%WEF}
zw)XuzjcG;CJ6<MjLzKSGeu}E-e8<&rlkw;t0j?|hnUT^Mdb0uxSmF$UszDezLhjl$
zk|lCmi7ctgFi{9*UFH5u#kkMTTD!STASR#-kaR&-zf_k{c7x+j+4B{ZFUr!pH(U0o
zOe%|wf=H2&l?b5ukkQ>(T8{yAjv)EP2DaMsJETHg_r6oK(kdggi!SF}MsUjKSSk=b
zMUG5E7k$HbQ2t?{A`_A?eA|z2-*^;Un!&4FyM*P*^vEzupahfxAu=5tLnCf9h-+3*
zy`sF^UByCu)+XQex>@1l$J-G;*REhAuu`q6uE>Y3eggyS&5#Tiz4bYDYK`|VQgVAM
z<#p}P2Z>o5M*O%;!TMlX{cspt{WQkm&Ia_;*DenoV>li~!|RyhJ)xt&gbQEvXP=U8
zA(8eaNb5suWok+&DU#0Aau$HE!FAv_4KeFMadv+GEowqQB)c1^si@rES5+E{;xR^=
zJ?f~`x(CN3g2vx93{$FG*p3*xnn-Q`I{5+`RQ>Jk?O@eX8#!u-UqcYV9f8)J65mTp
z{jVZBc`kTSY|yOY0(Xzl;msdluJH=ZDlALt+y|)U3SJ94f%ZeVQKN~QpEs+Hp_Dls
zK@uek)5$8v{QXzdPT2k7@15E5yPAVFld>%!lnQy8HW*lx<I6*2JTXBBVD_M;l(-Yh
z?S6ECQL$hH*47+{*4Rj$*E1h88UQnNy~Tw!0ph@g2kZ6U0CSsS^49o@ZGk#mXm=E<
z&px3d#Y1LY@}De8kNK_q2}m3S1W(zn3K>k#-s<O13{y<*Ts28bYnA)qGJhEtXS0gD
zaeLdJTUq*Y6;H8YIGr?(_DCeYZfJ@z(s1J7kERWf8DUWpY7mb~=pPyQy!es%#HW;^
zc30sf3{BT<;(NlBN%^14+i;!<o*$_-raK?S1|5h>m?&Nxzw#Mdi|`PMW)USczAMC5
zt<m>GzYD=ZAX@(QX<y&SS|KlA2YBg^f@e4Y<s(e9ls%DPFzE7q2kZAF$d{^9pm!kF
zY{PsMP!zykGJB2Wh(|1nX@Vei<6lAVgbSOkBzx19livOT0g22)pW3M$Ok=W`1eKJO
z(59Jba2diy!pw=Xt0#FL%{~?24P6|Ytmwk8Fr!6##M$|h8+m)ukc1Mqzlh%g=e~1(
ze$7qVd8brabW?zbGi885m-ac<ORlp6c&hWHFta5A@Bz(ftT|8`t48lOpb&K$EjE|9
z19Qe)yAEbv5%bi(h(yKes2MB|AI7@UPI!|nESVSgZ8b&gV}DqYo142FrBZ8eD_O6Y
zYb(|M#S1AF@)rT}Hy|kLg|<qYn#>z}IXG`Kct_>7!`Oc49`IJU9nc)+IJ~o<s)^gG
zMA7}bV|$EANbV%!BzzWi`gIyvWlFAEUmDaqn);w<(=H#WcCU`CRoAV`5)T`?%C`$=
zV;tiZ`T~8v4!%S85wICow(G#krP<vn6TK)A`;3vp#HiLhJKlJr+~IP0jN9R_q9F6g
zM^_kF7dzC3)YQ~q|2dCt!K@~_jm)Z0TOeHkW2{c5R)QeCcn-*Tk?o!iXCzBG57K26
z7afy)df5HsP_ugSQ&f}<oE17G_e29+TnJhTc-C?eP3b=9$($Y2HRsGAG_DHHV64Fe
zQ(*?ZSoD0UuEWVMmLVA<{m7mAF=IO2)A44#QD_A7O7u2XW~E(1@pVkR>f|jn-ih(Y
zZvVXJ4Y6~2u_-0%XKC-8==n}*<W&(=2EC?IZX$|2rX`0&rW9eD#<KfHwrBDvZiYp^
zUJufGhV-kCT)T}5>1V|r3ton>N$RVWvX3kMt~;-8beK{lPYUmDs8x}=SOLQ95$S;T
zEYorD@f;~zK+rF&N~3pwpvd#7K4QZSa%&4DmuCEB(iKaGR05Q_?6b~3=ceu1A<L)q
zXwbG#I%3c)qO!3toc`Ay9UUEHPdKg_SJTv<i~Za!n&gRqLX~JU$~EMD_|Hn>?&x(Y
z7hfG48EL$6__dDjWYK{79bRPdoFv=HUnC`ycl`-34$tINaG@%d*WU<+TN`V0DZ10K
zQ0juJR0ImRsdxyRoPEPR=1dA2(o*W{dnd@%9`qP9*-KCs;93Wt#9BPONZJWmH}wtC
zeBZ}2pajZo{S8Pk-Ciy%d`ozev(f|dI+16E3&>%bsY3gSF4Ac8y2~aI<0cY(cP86x
zSM`vhB!Op$khcjo1-ukkugj+nYiny4pEA8q%__#}e%PZXDdf6bqGsA15Q4gN^>}nL
zox21(DbdKvW6e*jdhn#!+Q@=qfT^BCt8qa+=<52qij?vWF#uzF*1-b73OSZJEUyg?
zNG@Dewvw&?Vu|5Ws7<tDGD#gLhDS56L#`BhH9C`f*TEZXCYz_nf`Ulyr9&B;;iHpV
zU(W*)HyXnIGi>fRCBryxI<eXJt;^*8_Jiqh$NBMO+uHfwFqf1VOT|}0dKXf=|4ezg
z-0IY59Z->u_$g6elJlxA?e|>-=jd!#p;x-qIWxZ#R?m$tBMRp?dsc4s<yoq}Irr$Z
z(+54Tw{JdgXpDPCEhfaO)5RQnEB%RdWrSj}+$>v>Am^eEf6e<EDs!44P#vAwqH6PF
zgJzvj21exZ^Yia)nL4+hG-90d0nx5{dWUFN?d&<H%o=t+G{1wVfQ;Np)>0_qCOr84
z?hn#_<66J-D?{^!hFr2!s{0iTonj9b$(-1%Cv-t3;=6T)ayN5q3i+^SLR?=^P0-yi
z8mYL@%Cm98!Es`T1a-q9>Y1ERVcVH3aq7?VnbX`jAxi8I9DklYN5AKSBh6Wvps8yU
zBw`GfUqc!~elw8LrSuY3@yl)8yWSR#s$K(^1T0>4Zl=ikpXGTw@^`pqev~jWx^@a;
z!YIk!f{v+~gu@Z^xo0jYzf2yN?0b-{cF5{+babv{r^_j`)c1d;j2B)MFEyIV_0=`~
zjK3=K;o8pMy@#i#Knlu?M78{B<;z|V%NIVM!k>Kmvm$=#mvZx;8+%mFy_@)HcCv1i
zPhPNKMO;Bpgs*mn%~^F9t%FPAy&$u05E$vc5`!Ai?f04JfWZlMy+!O<m`pl*KLoM*
zdE`A&NUzRL(s3(M?brw9CKz{bs{@J5tz~mNd0bfxp}&Ou8Ml#R_B)Uh(CC_~G^DwB
zeNgahu*BV;T+J@dPeqQVd&pZ^X>zMDXsNp$KHU{L0$%iGq2U$huO{ia5?`x>w~LVL
z3`K}&+0aSmuG>5vlh|7t#98-!T}X}|U0p`<%^mKH-jkBYww+8bl@_&QGS#&+9c|_}
zP0%Z)YL*h%B`{47?YrQwU*0#>SJV{o{wmA1{196@e^LCSg6|i_ms`KJEiR95*@bX<
zEWDLc=@^$q)7*`A$@i@ka~It_4#qgis0Zz)q9EMyy|(-;G(Mkp-1hNNim1~}zNkSq
z?$ueooXx4>^Wfy&j}D&;?a>=F{Tk4lC!5W~)91yi@u|LPw?|9f;PGn4YaE~QwzZyD
zei$nwT~Yf^n4KYD^N-^~LS3_;&jm4mp<H<q7GJgb`jh!#*}-4K)!y&f=s&k@kz=OF
z>u-Jc4+~&wxbq@^=Yo(gnFDnhpGy!lW*1*lMKFsCa0w;zHsd}iE-sdn7Z%<z$QyG~
z=Le@vTLsi?<RXTN-WXn38)2I7o&3q&F1;j8fbSi|c1y8W!Ls;NmC~EgE&mbKCw`4J
zV0JOpn7rQNkTlsO$EP&6N5|e+*+<AEXKVe6noEI<+&&}B2mL+W`z<D9X{E6xdY@W+
zRd|v-niE=E-yyqpWp=pcL*lDvV6X*shNvh-jsw?QEZwh1NrfR3`S;ARA(*W{L@rW~
z@E#ufbpB$Rz-SW#rk#;5)riC_^eR7?6!YneJoZKS_=3-s0Gskl+%b=;r62J=zVA4@
ziScZ*H=p!{N1EnpZ^|t!EMzV^>+1Gi56tXH(^j5}IQw(ru+SW7WPNaOvUSoWj?v1C
zbpZfCQT%O$3$3nh1IXWKNM4|E9@qls^`*<qE+){}h7aRj=R+Z0@H?;K(rF044F#NI
zQ<IZLlCMn=B4(r}xT$$)y)KiY_w@-x(8KL%;a7Xbf8S?XiUqh0UOb8;V)CtyPKdu{
z()B2E2CG1fLO{;tYgHA{r`$<HOADS<4|uDPX)rGj__r67%*m@8=sr9-tkZCW$ZyG<
zF05|F!&kJhtX4bPh!#>9Db$oYKVOf0+1br76pWu82oroPV|QM%Ppi|@b~~ecEU$NK
zQgPQRUNA3kQIR>=@22o3meGdSGj(IYeCLV4U;DZjlvSkXYMORWKVZD}#Y^93>VfC0
z$VVDEM=aj#zifB0Lb%^m`Qfhq-wmPshs@Hvi~0<t+8o}N&pIM;1JpkWlY9Xop-}GE
z>kpjW^|gBWtI+j>D_cj08j~#RPv1OO$}sg>L3JrcXz69ZiC$*@TBC#S4xQ6YVS`@k
zZ0`1RrS1+|u?;$q`^?bC-erz;OqOk-U!RXl%5iAZ#sk91cS#+4B({UD;5*eLxp}k6
zuS@WzTVD1bJ!4#OUzuZqE@=P~F71miUR_9+pxeXT<#zg=r%(u{hq-(y7PAu-6-`wG
z?)FMJeL6XQV%@1a^e^T3GH!hLioQXdZkd?5)|XFVqlcChc;aY<@73tsu&-~^n0tS}
zZN2&@ofkg~+XEWT-*`7wpWS%&&hK~kBknJ6YYBDQ{WxU(xh>3Q0yEYU&pstYPXvyB
za2a(r3xAw3piVPP|MXd<gXt5X33MT_uJD1R3p=URfXm%>JAc!kZ_Z3CHi!3{vFT^}
zh+V$an&u|B)zl(pO!oa^rkMu4TQ#%)tWdY7=0*t|mQI3!=-nMqbg0t2YVzk4ci*ek
z(@>i6TfMwDGT`yyvc2>v@i$e+Y7<*RE3ZY}Q~!31<a&yAU;6Pl1EB?L4d;>H{$CH@
zjJ|iBiOe}DoYj*dQdrmQW(Cb0%iL!Hum|E}W9O~r-NV$;_!&bjapcGms?f0y#pGvr
z=6225zD;@PAJ5LlmVEiL7}gU=`c4T4p36~D_ePe!vrO12H}>3$P|7c03_9VOQuVmx
z$;`8l+A}O}nOaZC?ZWGI;DC`>H|FdiLry{QT!MS}q5p9vOp0etyytX9%hyk2qHSR#
zWjocWk9XN@U%s6buL@vMW-g<xJ?iK81RG39=)Rpli+@$u%eemQ%f<0;zUm4Re=8*9
zd1cSKp__T35#B{9`<gu7?NcB#Mty}}njdo`9V);3Hz!=Iy_L;z*Iw#*OLrg-v)I$e
zG=Bo$xoh&*Ph0_1gkMr2jJMXs4Sk>GtV+7L_E+oHu@>s?HN~$pHwRZ=aa04liL-zv
z(1FC*k^;yiX0=cgZy~cLH1TMj-Jdd>R8l!J_AoLUG6&-CX^i1pOBWQ~?9R(zU}AD{
z^>ff{<;>~JwcfKxM&^)tUlL!YsA#de6cjA6X7c9j=j%vP?;X8=+ktNNrv{VVwoo%>
zKR;66FTk7_INWRw<2TfwXp}`tEH6CVM*O7vr8{@+qNSzXwR2~2NePMpogF*ESL8^<
z?zf!uKZ5K5%YXd%aWgaK_i?Lh!%nBh>EZ-vD*RN=%ofTT-MzQ!hnZIYsh7VXQiOO>
zq0FPfq;kYVVrJe;i_fvTF!${4odN4xd-ZE|Eqi<E!o*LViS5)_`@&ZZyVC!CA=YW_
zt9sV~kg#k_Nl6(SALn3ahq?Xb%a>_Ze+CU38=EDBcaW1u)(bAjVFmYIzIE$XN=mr%
zZW|jLf^!}kN<qB38HJRjq_#r#lP3fP5`O_-apphuSgw|q*49lD5^k>_=BzIA+$9GJ
zO;{AjDk`#WT;?SE#*ek8E_)B!F`RwZesB#FM(srA)a~IUVcn~J=+GfsTU*sCs?|58
z6(T={d_L?Jv4kO>r%#g&bCIon7Jbf~@zGJLwLO5(0RVIDTWScSu*^)MVMc!{j{mU<
zICF#?g_p6EX6%-BcHC?YpEQV-lwhL32*wJj<=`DI#1F+&<iJ~5T}HD<H6*EP`|v&m
zp3dqoOPR%GK^weL?5aC7%Zi3(_=!*uPzli(4(vO9`g9E2*cnYypYKfJ^}|D(_YmK7
z{$oAKldP<)^z<54(DrXZu!YK9I!Yn|Lk<odJ}m44Kwz^||J-zz=iz6Pg}|mUAp;{^
zS2woM%B&Gd?1Qfm1JCxKRSA1$NCTCfg0e1~0O4)NSAs@+9Zv}RqA9B8wl-s4Rwhf@
z)sM1$_RqGOJ9q9ZEiG-neUQ4u(KWD=>_XJTgkO5|JXm*slE#q=&hNgf+h|nW{sl?v
z+k%s<=gse$@PXO1O!YAX8@V#&mvS%2SlI3Z)f0rZ+|;WgR7G2k_83}v1FD8!x?-u0
zxp~+2KeO=w2P=P0<%SUJR?*N(TKH^|Z#m(|dX^<K96oGsO%8tko7b+npVr0)>gP9q
z>NSa+?=3|Ac2B<6Gj7+N{vEk}S)05Nu$1w2)gl0S@FLQBTMnoJg_#107(Uya&<V<#
zxlXIGr89s(1%v`6pyNGIUOH2RZnLJ}OwFHV;Pl2OCi?F#@^4cIf(*257NQP4Hkr4W
zcyk|6=6XL8f57F-2Ohe0f+{vU44|i1aB?>um}R0rI|)AMFBJ9QgvVdJcz(L*ncRim
z7iHd`to)UsNCOb>7WjfBwfUfw>-q+vx9S#{714)ofxjQfXo+>d`>X#vB5u(72*C?b
zax8&ClZcAh%@oDOXddh*4(dOM3EhJp7C^DY<YYEp-mOqGBgY$hgC<{C2a<^Tk02dp
z+(W@HR20jF&+QfCQ%ZG1mJRp9y^peiOS={%4|=M%7_{IuI$@$!tLsvI&~KRH!7h09
zS{2yeNK6ba055!oeJUX>?E)j=f&j<0u4<}&v&Y+4mR{<VX$7E@r0O}6s&?$Pl7BcO
zRm$oyFROQFtnJcVpmElYwV2&78H3gh!R2Tky!U?m<40%X=<4QC8#WzXc4|Q@ii*p0
zF*A!9zH@&@LH$TdVj(ZW2hk;20_{#*Ozh8;bu~*1eDoOj2w-3L8gO|edl9kxadH9h
zKEWFaMCChocl&SZ>aJ}SHLrwX#{{?uh4X1o&q4ohyBnU~yXo^23(E8W-G*<3F5Rd^
zc#2><-^7>(?3E$1%OO1vi(J(1#=da`<APPpcmN0-#)QXNMB>dW^KU0YVzX!gMa@yG
z^|y(61yDbIPO-K>^QG*gTm=t+I<!TYs9U*QJhM@hh?`vRU=NYMB_O1L1Y(5X6=fh5
zJ#*$v^KBu63$YVW$VV5l8gO2>*tKVm0i_>IlngV^FZ5a)CTM<ZQ(SxwjybH}f*9eC
zTgN;J=>_2|ZT<s)O{ICNl;QA1f>-b67q5gKerxu8U3%;s2-`?WtKq1-$ewA{P&4JF
zTLwnn=FExFQI~~CH2WJ?lMn?>gUxnUb9b)T*G1w3@&y<9Xh(HfKd=dQ7SlOpx%jBx
zzO}85jfg#?n)tkism+X>q2uG@-zU2be&0u11~Ldv+Ll14(SC5D3F*J!ESjp1!iiAJ
z#?*PB$8^t$Gw;yJ`6PAo>{L!qPY+;6VG<uz-Y92e$RFFU{b=Gj;lQ8a5&_ddW*(jx
z)|1Uwh{l}w5FA_Gq*>)fbY7*Wr{fWzA@>V7i)W?}|KXU97ojfFE!x-jBgQPBh8?4!
z#s~jf(g$xq6Ytlv@%g@mNE?bXdh<wrW&wVbUp^)<%C2O{-Rj<xxGz6w|2E<ZN*R50
zE~q#63iIy~S<i~sC*=RMK7Y>KLdEhb7ESSqi3vd9C#rvQkXbnk>arCk)c9kXsTV66
zOs`N}4IjhReN*WOizXzd`H*nU<&e%by?*dOT10P_^dP8PHWFJng?%qfZ_?>T6Ung!
zo@qz?XHsIFPYIaIp5sTgf}sEKo9ezW4uzUUf*ks3lFABQM6+adGN%(u8LsUcFV<|1
zKUaKn>OhO?ElzH3DIy>?2iTvdXK7yl9I@i)Es2=G7Unnb1`Ahs0-FGJS1o%{O-*|~
zhPk~py1~=nphFE#@UAsiKA#A*xV!Sjw|a*Zd##jtnqe=^S8dZ{u?~R4qWnC;&NMPI
zTKot|essR8%ba)bpSdg5L)K9z5<`D~ItZ%O!4<o08zW6w*K?iel7aFm@9`kZPQNn{
z$iTepwQZOcgjtR8leR!Wmr(?<va&MExZk}krg|u7Id7&%IR5`sb>-nuw(WaDVk{Yi
zK|;zdyDW|68zf}kNksO2$zEg`TNz||iPw@{$RJB9AzPa*M#xr{QYo^8?|Q!P{f^`J
z>mMB*`D5m}pZhwm^E|KfQi*vA^W?<CZgbx?9WrvVN;j-gDZJ*mDS)EX*t>8}AHu<^
ztgPe^{k{Bd0SxI7FT*?#j!S!a(ZGQHQrlTo)kEYQa0|;OV))T&!otE6&xx3QFn2X6
zG<AUhJv=-tc^jH&6KVFOp0AUQNawr3V?6==bikVn34!Y{A(s~a1nyu+b6O1QgB+sm
zb}$qoQr+qp-A`mtF4`I1Hr)2d+mK0tB(y`7xzS1^UgHM$E+jJDEK&E32;ckK0%%(m
zx=dDy@|Qh5O|S&$`e3<UF2Bkc%-)V-kIuhMT8;!uuXGRspG+Nm{ZBRIMLfIo;8T-P
z=B}@WQ<#)F1p6y*h(L9^{nlpve_Q~Px&Zl2)*vOr>}`rRoUi?4`#&1`&4`qy=m0?C
z9>o@th=<!*%z%Uds08Nar+*}u6up?M$kAqb3A;jmbh8{9s_cDf1m^N!F~dL-BD*_*
z5zuyO_joVi6b6FaUGBOLJ2u5txRH>8OM}M{VM*OQtkmos+Ss^O>XpF2b=?J{L{nhI
zm_D=(+D~fD`C@y;eYiFLg3WX|kRM+as-B9YF>tVB+UIY40=Zh;SN&GiaT3XJRx7#y
z6V|{BeREKzik3>QBWOyz*nTr!DFWyF5hX3SQB--+9J*_sTs9{oruEJ(vWNTM$&*YX
zu&3SR%DGhAR2vKR*~fnWy78IE=uF(}l&3SRZ+O0N21mt6G7Hu#1%Gkf^}2rj6R0Rm
z!Abt-`p$4WF`mNN!ppSzD;I6F3pYnvfm|oqLQq+G4|Zxbpj+6A0$^e){}YIic|-CZ
z<@PX`CntPZ`2@^UDJk@u&Rwo*_&s?3%*X*f;S5AP7_zW1;9%i+^=6#^Ob3<q9(ILy
zF&YrTB)lyo5(%z02rr~JcfGku(%2V-LFTFyrcbq3p6o(p@Wbwh(J@M&@5+f9v*hzs
z^PPefI>*_HAo#a3a{WngTgR`qe5Ry@^NB1E!Q$782?FIA8k9aG1c4Q!1s1OCTpt+7
zJGS*H)d?uC)u~%?{zid%dh|GzvihF^>iBz16tCaDeT#_D8X4giLNOXYfB^3J`C8eh
z;|KMfhCa$SV0=|kIDuf&P_5Kx@N9XOp(#?2Q(iqDB|)f27ZMfK)z!_oaX_~u{}IXu
zwCOPWJ=i8FVzLA5QYefwA!w{`Htkc*=$nOK{$pUaIQ?yJ^J78`LF6vzSx;e#)*U4l
z6;b#VZiD~AUo)LmuV?pU_eDE+P{?W(Sy|Ia&Mf_H+HVJEs%#w{9bw47`rs!rwf^My
z6<B;zs*^#5z-BYWnMj(fry++;{{pIf>(r-|NlBU6D7<N<vy)TbvVyR%PG>N384{|}
zAt1ywdf6i60;O1gee*>JDI0<YlhM+9&~hLPz;u;MLkL2(Sr-=<f#^1b{>+G1J^dPx
z1kjJL+{-_%T`k=y4u6D&i8tehefxe7JcW;RBH@J}Z2w*ej1^5xOoRX)U48wNQjW3T
zs{m$$p%{rR+$aQ43}a|HN<mfM)4@1_*Va}JZ*92CX00>b8gQ)gU=|2Sn0IH#-IB=6
z&*z4L0nmuD>-@Hgfp6mf&Nh%&4GEDcjf!n6%$Gx|?N{0!JWPX=1St$BM2n;1#$Y=V
zNh!d}Y7z+By34Y5Zy^K3;J#AaVK{DgxdarUV399&IP!<!t@GKC5t$77ZqT<GyY-xV
zj>k7Q*Z+lI^Z*|MlUdB05jk}<oD_S&_sv52uf8`H?(2n^85zBUO9V0=Arkt-BWGQ`
z=aq1rW#=w%+=J+_sW2Wf))P$8UeI^K$@GSKzVFyr8@QZ$Lz#@c%bI#<Su<6^tYFme
zw#4_6vWSR?s3_gsBq+y#7fB;ap6*_$)5gjHVPU(#t{n$88So*M+eY>Lykl$=?C?#K
zLDsIphx38Fm-Uv_nD1Xfxf9gOxg`_^o&Xr-2w$x%*AwmVnv##5SKVJRi1U(fPYMnQ
zZ@4izxnQdVWA}iu$4a8#AE#S#@sv8%B#6PZCchVDCfb3~MdK`b!D7UR_}cj8?-_rX
zWdx)Glt&bpgWOB`pzA}B76FZfe^AXpMeogotNt`8WRa*1@XrKtDTlJ|--q0dE2CH|
z>BZzl@c|e=1Va1}9$-PlhK?1dvDbDLV#6<l>gO?1mg*hy7m?TiprF3K9z+&CUMcYp
zR*GdoCb{OuK`>^3H_16RJD~S>gRJaP;}}bBPO6ocFoq1VD3%A@g+^yJ7>9lWW-Vzo
z49zUDQJyxgCxBVybbE!J^P;%a$<MOR3u~8T?k_)TzUVW6zREwZ(;W^~kdm7It(PtS
zd<75M4YDD@Vv?${IB#epK-n-rlkhg4z;$yYqmY+#^nOT_w}aZLj5#5knC)Xj>SyGY
z;I;?(SdZA<b2iQNR`bwp^w)u+nXp^kZ~>>fHE~T*QLz_&@em3hksDemIb4ad-P0&L
zE|kY-ZTU?kA^k}Giu-DF&BGt!VP$Qt`YqWj^Lp*6l2Z$&ma<W2%1bU79ckVB$Vw?M
zN}eRe119r;z=4iOL)eI98O(N(Uf*CxwVSr|_~c|#j(P86-VwHd$pR>uQaO2N_!W2~
z-;rtSw4eGygCbZEQVit^q~G@p!BUy{#oJeDLnTAMNijPUSfGQ6ezyfZiNR1|c6JMh
zvw!~l0bMQv0v>5DF8W~dd5wFPSt!?GYz6J?xeM!c27RPzpu&`_OKT3*L-oQp_B9vz
z{uv?px-4<5m1TXYNndp@Za&|73q^U_$8?G$i;r}rqSBl|1HrA;L=`JULvjkJwQ8h3
z!u5y<E2T7O92!`y2;TR`()D!%nrYU^RYA}2i>3{7@3Qq2B>05_sXgn!yUs3Rm<uh(
zRsPPd`7}n&?PytPer_)=>z4XETgFZ<Vr>s%d67Jt*~s7bm5vs%ik!9Q+WPpMl1g{g
zirK`K3j1T8G>8;FZ^b;8a{9NdUH$HyE&t~cH1=Tsc?A6OB*U$fU(QXeZ>JpG-lrj!
zyD_{=Ip6bf<7?tJU$JZKxTT}Nzw`j>Yvpt|3x$USw*V}=6WMY6s}5Aac<fbvv>}Jh
z>7wkM90Fey02--V<I@TRKSYgQYWxLVSBxYw3c8&_T!#KQ5;luDSx6ogme%VgnB2ih
z3C1L~%!JVyp^Ia{*nEwjy1Ou9gSNA4g4K^=IHz|mC?Z0Ix~Ad<WC2CNr5hp7=52k)
zZ8{B=+2crkO|k032V43ksgGK`)1ZRD6{jf5u%n<@+H0UU#quhyl%LsNBb1v`Lt9SO
z&Gr&dW4%Ax%*=h<<-{3uE-rKfn_%_cT%5^4=5ihHyk=kYuB(D~SeR1ro!P^K-vk28
zlf*w;09savVeTdTFcKYVzV?!_RS6Jd?-2P!i?;)<o3WT_uN`?X5q{%ob>ZRmOI3dS
zjY;t{BmoM$omLq4?qeu6!!VcV@-l0^$;4_VAMLjWW?sAEuEc(|ImfBA3VdBa^IyH<
zFv#fD^rJSsEO>;YCA$&ibS~0uzq=+5eh^I5-O4;lwR6Q2XUfs)Sh{cI;vxseoR<31
zuQHZG(xeIw4XcqmPUJCti*8FStFvvITe4LPTzF<2fCzt4rs!iXZ||PbvW(qNpy0h+
zVbih>s5X{apYKL#vMiHDg+V$9d5pbf9PglQqrab<n~43+j-lwSq^VfEpODiC=CDVc
zIqF&-+qaHLWf7j8xHb=z!<xu#?4qk#=L$nV_ehuipj2&Mv(q(25vo{@b%;S@k2Znv
z045r%?Ca`wR%$BovSmHSOeii3D=t)C*7bbL0&*4CZ|Jr!Mh`^rmYr5kx=4*7MEq1a
zTl{WRFs-C|`O%|saWTFt8uan5Y|j(rQ3cS}uQR)5PaAhxS7)<i3&T#`#8Fvm4i_z`
zD^BEbM|JRBZ$UKY$Y(G9RAC><JBf**u>AdgZJFPoJKc|vHQ2-H{zbklJRj{f0q)d%
zPBr~{XJXC46~4kROMVPZky=7;&M{@3?4S70mzfJ-n2R0oUUUi&rTeJo)Q&v%$DY9#
znO(>ik^Wl^y_94~-!zu_7p8ZXBOVqPSSkMiJPF7!bS{oPEerMm&O_yr!Z=WBJzQ0}
zxZHo7qgBGP9);C49nPVWkp{|$d!(&ZOk2)x9#6#q<V#`X)+Fe}?^xL$&^mWWoR-+Z
z1&2=78g|vk#86->fYw`?SDQADI`~;gr(5;_D`;KUt}lddU%|vK50{VIHcNuUDYLOP
zjU+t-o@vV?HR-iK@QcC+wzZFAP^bTfU1=&B!h!UommbGV(7PDxJ?&aurnv4>T{-oL
z{F#*PvNqvn)<4Npu2GXL#7PubjVH+JOF;y}#;D<Y7d^qYDWaYzARXG|1!fH9DDMmq
z@~UdKBHxHVh4+s5YH3jq%W>GKmLpCJ>7>3&rMy!`bn&k@j@WT{)xlIYfC0rPK!*%4
z&BN@y|7!q-1EPF!>GoZHHkW}A13;m3=@Q!bv2-Bmy7go0*KkO{#VUcEut9%;KkmRP
z36+Br4C<p++Q%B%Qne*Ed^38d8c4kPpO6qiD)|X$1bs#T_&Q$W7&cvud`?zb9u&vm
zznOj|AVe6l@AUig5S{v?Yi#2hYRMHR9I6_zw!ymj6v*NfaIL-DXv?6XNyn`48Ja4`
z>(ZS3S|}-Pr#~WIE#DdRW>nhy++OXf=UtPcLbyJrITgH9OemMzmPs4UE_-sL#7Hf3
zdb9f%!XctDSP?EzXFYZS+fCoEEzriwTO<L683Q-yZuE<}XA`e$BM8S9y`q9YLFAWY
z@zGFXdF-6BV-?h>oY!~Le1OXU6}~6wYQ+TzQ3QMo?=Qc)g2%X+o+n_7d>Jt@*!qqv
zWC4{2pI;W4Ai|$vpt>IjhSM(Uk*=nt4nToyL5(JN3}+fro<b&q`gSbwhOu#a<8Ycd
zSmDo*T_6FV&%rTp1`xRb?bseY=BR^fCrFfdcA6=YxSMT~Z;vG>jzbW%N^+Ymn>mtU
z2zW*l&1mQPkKh?x-AD|gTZ6m`FcRJb%kQHCvP}T8P0w(|8%CJyzYc-5vX7;zPR<xW
zoCjEh%Pjg=*#zji-7<k*L1-)ki;=)VcdprD7k6w+_P%-3#Dc&mLmcn!iGdX^Pv_XR
z4bip8moa1)u&4P#S&*%a;I<1@N^cy<k?3nnsGcomL^!eBOc;g(A)ty$Zt*sQsBr#s
zxfxkaQ*4pULS4&lqf5Kil`A~MoV`ZvEms2xMfHO&Em_AHT>;X+ST@JyX$vX3I4!2>
z4~w^ymQsyC&>-nKl0uR8Di2`&s~$zs57(!^WM>o<6ciTT^~?*Kex&JECOM#8BMpJS
zVl;dWE4hpd#veppIbznw$63+pqtPrvJhm0z#<QwA@@vaBvo=H49*<SQU8K+R-f#;W
zJ5I)j{qs5C3D@k1W?rMtAslGqUTWfIEkn4HYF(t*3Q(vc6gqfy(-Njmr-*LG-jcEv
z;grZRv5d_0^q6JH<|cN@yTnb^<n8;XsFH+U{nZ$LNk4nu%B?q%=e@ZFO_$&trlr|*
zX~|QrmTPvQcEP-w^Y{5Zm4`)cg~A5f{^q&<Sx9+LL@vBj-Oo7s=VJ3;%+VNSer~Yr
z+v#gr0hp^QEiIjv;RBmoKmve92p(#&hz41I&-a>r=BH^*MDE(5I2U~uO%v@)OF}2a
z<>%+~$L-QP9RHs@_^SK>`Cmps&p=NSGUT;nfb9`TYmGOfv%meHzktF|@n50s|4S#|
q509WwhleL~1UOJA6gBc~P@=M`d`kO6PAbB`pma1Z;~#2Vjrlk529*f_

literal 0
HcmV?d00001

diff --git a/doc/screenshots/garden-mcp-split-stack/gateway-detail.png b/doc/screenshots/garden-mcp-split-stack/gateway-detail.png
new file mode 100644
index 0000000000000000000000000000000000000000..c0c71d91c02a286329cda438ca366b7538b3f0b4
GIT binary patch
literal 94681
zcmXt;bySn@|Nm8N1O(|+k&a1&)LW%P1f*khBf{v|ER;ra^pp<A=n&YHl$IPliGk!`
z1I8GG-#)){zWZa_IXgS|eP6G*Uf1LKjD7h+o9;H}?Ms&~(dp`Fm|VJajr#RU*v%`{
z5AdDaLYFSxy`-!0^i^oyPX3Lzlii$sLJ>Ulis2c8JewUc_ivA1eRXx`Ym6Rat;$Q|
zm)|Y#eyMza-~7M38G?HEHVtzQmm=DbVHYl`v$N?PiyuDFATfmK)>#+n?CeK`3uL73
z$wG!9b96<5NJ52Z+IVGO(Qi_0Y^AnwyFCEkVP6VJISw`B2mU&>XJsw@s9hdc$X=3t
z@lR<w(B!@Sm4REdrX5<=0ByMm-U2?}y;n(n--gySPywO03b_jqe5pbYJHHtWnoNOR
z`(q2aiwr0;97$*cGQOxVjK2_j7+tWA-S5Tr@aN|ZHTZ_v92~z=Ir;VffB!PtY{pW$
zzY;e0+g$}{Xed8$Q0X>b7}B6N4k~taNk;;r#4xGNpCC^JW_Ln5xHF)=?YzDErtJn;
z&&dfm_u2L!8X8+j96p}x%jn~Fo@0O6SmfZy7}v_;r>Z0YAjLS@XJiY+lmsn&($4br
zNHXg{MXpYF6lg7mCRLu|kEAI{W4_tx|FE7BsNbZx>ACQ#%F{o_c_aK3ZtUjTBhAS^
zVeP7K1A|h8#-_Nqb=SBe`Ej>?gD-i-dcKl?Yyov?y*csw{kr1+DFuM{UEddL$Yq5)
zaWG~lNn8C5*0IP&e=UHHnZ6rf=olKZH*#wbrFA<4YT?>4`4~BT%n-h+&z~3}pxe4y
zlWB`F=(L1#cP(3^H|TZO0itrVER3*EF74cCUZ=cTBQ!`Q2ebiXfJpOF&dDfD%j*0<
zpzV_pqnFP``uxF8`4=&=m2l{$`Y6L|-kvN>q`~Wp;;VxT{ZBA5+e4jE1XZGcVKdyy
zD9UCj^##GCfRAM}rJ2QZ7jjM#5s9nKki{Ks17y^t$5(UJ2|ujdCf&eZOoW`(&!dIe
zg(vG9CSaEa<0LiVY*jetlV^sy<LHL1Yg5h>BH`KLs8BPA>dKcFdT*wbXD&lkBl{Z*
zTpvopXq`kF>@V5%1_86|w!`vA08y;IW3j=Me};xr+7<QmX6w~nohR8|_J$hP1y_Xx
zDtKjpa%e_<L9DWE(~cO2#dAuYf($bVvTi9G*b*F__%c!`Q~V)|o6>S>TDu!WG4Gv0
z4pv(uh9;B1!+AyF8R#Ut(_D_BXC?yxEU07GegqZy#<D$Gz#DCa=l_s>eY2|gQN=NM
z3~|LRLVDHqcJkziL2_&6Z|L|O>yJ}x&{HJ?fHta>ef|`yt%dJkCuKHhrx2_P)d~-N
zhr=u9Y6;xPHTbtGU{&HLi^<f{+*ebR2=gnW#H{TqH`4Fq$AgC%ML=bZ9E-g9sL-T7
zZb55W543oZYL^Oi5pr+nM8}ceAqw5B>&y0oGZ9(qin8gFro&6blj~nrLQ6R}U5bd5
zx$Ne4EVBVfBNn7S3(=T0!v4{!fMh3OKfW^Juq}FDQ8rEfwSBw8pgCae?B!s)`H=z8
zsALw%_${5|Yu=Elk@1v6FXS{_{XbQ!e}>`ktuQ6k3{Qj*hp|yGzrB%kVS%`FwNS6D
zbc-}a&y;5runVj&h}({u&Aa+vi9XR)J!q{B2f~ixPWA{ll=59h1XP|uwp^dti1seR
zVo9-5LdHW*Ltb<1D)w-0HJ~*5P5>{~EWc`q<s-U+TMDxZs(cfMWb?@LsE=AlNx<Uq
z!L0vFIM<OP4Gih@+0g(g2dJ0Bl}m7kqr^$ZjJ#8bU^lXj_ptkVDQ-Zanmb7>Yx@@F
zaTHor@`UH{XLxYITp*n@a*27H{6ZM@z>mxF$BmTP-d32T%*68YP+1<y|Mx~=Wn8PL
zNh-SV-f-{1M6!XcL9wqUO<30KJtQHktVCev^1mQT!gyr+oX7r_bEkor8~v*iWX4wW
zEAH_e)l1X#weW~14;K{0HS<c5vIJ99tX8&xjdV1Wzoan|ekr*WOcx~DSm8fMDhWE;
z9vgK`9)SK}(I_?~XJ;n;U4g-t@zG-j@sYdS6NAKn`C`!l<1+%CS%qH}XBS!^ztASD
zp?=a<I;vv+rv@@}eG3YNWQX<6jhEsq#QKWtTC?1)y}EO>ErsV;^;~4?y%SOPy6E<o
z7Y2Xy_wmw={^cbsKzg7PuoQ>p&UUl5{WTo9=+)C#3_c?2c#6Q1P5j4W1MYBTrB7$(
zL>VuyezD;&<bp#nehIS8@5R(G6{BwbL&|wN&TAl>qWzNi2Kl%K<;?64RZX6D)1Qm2
zG-V_<goMOSd7^DthYu=viu#7oa~%4Vb5T3^!kEN%JMJuVDD&RHQ0g^d?GXlFx9sxk
zrbgn=36<B3M-MZ?47alP3U1qiHDX-d&cmfU%sy0XU=P7>@y|sGoYMs92vN}g&%GV3
z_5v3TRhg6Uhfwhn77XIl^wl}haD!aI`Ar?lc7hxtNF|R4RbbCwx8bTPaY;C7NX?Ld
zIN`3d)^aXP7=NZwFt0<nhaxeotE?~BNUbY97%Iw}c=mK(slc^BaFj@Gb{(?4x3>Dv
zHsX4@%`(=jB73W<fS+51VF+mvxEDcK%KaFo9wAQpaVod5JQODBJ5-pM-73pq5lH}P
zT6aeMlWkVmxQGMLUHg`-D^Qd4^2ptOe3Jhe?%$|~Wl$pf#p#nXt5?*F$PY^M(%s%d
zm!a~4vI|(ZET+SUbcq52*WrB8f>;3=bsn$Kw>-<*j?MF}5+qmsTPt%|3qe0g&Du;)
zYN11sro;P`>x96>YOvwzb#=p@q(pv&fWrbA0?X&AjJKIwJtY#{@Ij|d<0~1PT6%Rk
z=6oE-LLIpYDm}Q54tUlDV%1zh%BNF0XWm)fQmanxNK|#702xdJcrYo^^xx+auSP(4
z>kZ2$fL@aU#%%s#&FR#1B7k2|7YRfRUV3#DwTZscuTiSgYt)K7>vwlMS=#mWw#q>Q
zTd#(_y{=xE{!*Jcr0fQ0x(d2$(K;k;^$%U1TR-HzWGY+ep)nRy$QT3<*MljQl^NK<
zu9_O1$E#OXk5BwSD=!_G4XR<oqGh2kBS#;T*URw<JqqfKJ&JN^PHMQ)ZF_YL0u9;B
z)jlvRiSo3bgp8~!D9|cmCfa#^CEg=*OPjeC?urZKQg5Y^l;fsc)k}EaN!(V%Wf1uJ
zRnDVa`hFYv^Oe}k<@58IP6WaXE6JV?sz$qb9l1}ft{Nmd$VJI0al5RCJ1`rDL#sW7
z2Bhv-kFtNJAEmdUES@ixkmVBx#7uGyWI5*!iCgYhWTH?=*;TNEsk;m&qZa^=YjA6H
zO2t?%d%A^ZEJmT~e1ED-M55vz&Rz;^d!GlGWnXJ@ljpjAFPK(!csG)Fbz$0<Jr%C0
z&&2>1tAqE9?mZk|AbQ)&ouoB%x)te>Dy4!AmA}~J*nALg5?HN->#z#K3+C=Ar*;h3
zR%$5?xpS@hqdK3so`PK=b(=Sm>Q2BMgxM`0&n{xsZ6n0PuqbT9`J;qdxKDC(iJWpd
zSdLj<6Js)h*2<{>n|a=yjY2KBZD#nu<|zLqm|Y0O$2fFW4(uFTdy33^Q+$3J9FacK
zDc3sQax=MAmzd2U_}X!q)jQb{mN~&I0_Q<6>b|~XB=Fx{3<OluZXLzHc~n(%2@6Ex
z(6wiQBr(gs!7T=Szs;)3!drPCZ{VK;Wa`mr9PpfARRDr$H^@*s<ZV8BH)89w<$o1E
zn;5Fv9}`|_u^qk=jMLXW&bW_J*d>~tGiS8I2~o2cqIU;s9!DOZu$R=Y!lC&|5tI#~
z%E2>@W6G%n9R^`fUrz!DsqQEy<1J9glCg7h3_^+zl!J>dQN_q)#ugeZUzR`XFn~ez
zl<II6-IUYy5-`Yt8f@Ps?{#fXB(P_Nd}Jf~zam**rYC@=_9w3AY{WN6;eErO9&Fw$
zVmpgMc^0?g&_-y>qoidr-3AiKw)hB;b|f9fnCTuM5k9;{4l*J~qI!Q5PY#Rb>$?ob
zzs11>>6mHq^0<8#5RkuO^$&d=LZ==jN&;iW=kn3x7KN&CKgVtgKBdgs_fFmJ1C@pE
z-yAI-d;92f`J+sVgjZg=w8fkoeXMvTk?29ZbmJbPQ?=yV+|y{tl(=@@hQU!XS&kw4
zTFm9?Rj^#%3g0V&Xj<?BBJcRkV4}bt+U?p}&~eYZ-)^_pzZ~~aL`@bDeca9OR>9bY
zt@z8qab!7PSYh(vS&Ytv-*-gG)daHKTs8)l#eK0FVR{9C0qj}uTE+!^Y3-p5tj58t
z9wZ7I7p{^dGnt88CfVr9f-Tn*vn%OF{-~#!y8ftNlcpWh=zDSGj!#D}91vB;dX;AB
z#eo#npOQzfxN&If1%&8`X&Y_~3RnSWmq#B8O6208(4x3oiK7hP%UT)U_WPsS-Ht1&
zts+edrHpzP1gFG?Aw#9K0lWfzm$*7`ti-BQH@M^Y#N@GB2DE(}+gd2aW~K>#>5l^M
zBEm~rfD(W=3y83mUT&LWigqGs0ddiyw-IEN&=_b-JX86({*vx4QEWqoHE;nTm3TPF
zz)lpy4cX$IQ>zc3_EH8;jenH)pN<KS%UxGg8sjByH#3u1F^Db`sd3$hg{je;#O=&X
z>di+iAkHF{(yV6%Bv!yZggupE-v?U#ZgUCbjH~59YraR}*4-4nU`}8T^^r=kz4!&x
z(okjIi{MzY**FJru($=-eDXQ4j}p!ju>b(Ykm*9GzepVSIIM!Ry{Qp2PpI8uB36ac
z^i5s8N8GMQTdzRYLLEL+|JR_phhAkRdY^!YYemNmkb0sCD`1g51!@5?6ZNTKc<PT*
zm^oT|l0Xi6o-(jzLvo7Z0D+S~F%!KPba@I!nUKITVz>_2!R?4r$qGSqUg@P&j`*W^
zp`=?NYErDL#H~=*WfU<^y|O%C+Uh$vF3f+^DvG|sdKH}5;FU-=qv@rbmQhy0s?=5c
zF$_CO&0hgq>G-1p=CUrf>!aH2YqoAqu@bja<pcHpwg9bgAMX;qJ%r6X${SX|zFQV@
zlZZc2N&ct=rEP7~2+>q}Gs`bhKl>K~ivIDZUbEIxRI%^mzQujR$yR9x2{fHlZlJeT
znw8o^JBrM+GfPg}Rj#lR2eSb1$8CwC`z+?imu~POm{`U`IEUbCza7cr(}r$U<ndnV
zS%E!^rq2iL4hQEUZUuz((^9)(=(Ll3=Xl(u18QCe1*l7Yo?%KkPPV=kl1$E+*vAT9
zXCqeW7~hSPdub8Wh}MIzvC`~N(}qE#2TJd%5%!G7SR4+5Ic-(POC!RJjMD`Zg*lC7
z3#FeMZPx!gOy4|G&1Q*I&6c`Y-Wq%YxE<N2kXb3v$4k9m5GSbMjX;)LoeHjZLnTS-
zXWSs!G*W-b+`fy*MQsu)7+P5=qt!(zmFqLq5I3|+NEAd*zH${M{4aWvM^6PxG{Jgr
z+FbKi|BnR}O;(kH)@0-;?r8$o6=w*qa8b^tMNB4hkj;sgPR<?PW*H*C`Y5MH)6@{P
zMhy=Wy#wRDHXmL%L!IAp7zrtNQ|kWnNA)&|%IG_EHoL9ctb(ofsgbmH92tFYvjR42
zZUOe-T#h7qR+}<gfCTth_&7$3Nn-&4fZJqge75$HUpJF(XaNeYfUyDGt8_yxK(|_B
zQW=YCrlqdT`BOZlGF4)jJ3iIUu(%PR)7DD~r)Jimk3Z^I@tzEmqRPJ(O!r|A#TptM
zAz@mA6N+bd(2Tn{_{d5WBZCt&{o}|}_@YM`gilIs*)YyN+$Ynb%8puw&jAEZYR|D{
z$O4h5ElDri6K(pf1sF%BYaQZR`%z{eza1NiYujl7UNr2GSzJ%a5iHOaAPI@E+_>Z<
zxy(oOCQz<RsWa+JZTM4@`a>ur4&XcFEF-xGRqCb;xIXEoNP8v?>=4XC&l5vtKXMYQ
zo(z{@TY#+377#l)ERE=43y>e9x(A&l@K9Ikn`sLg{hMLqoL6vD&^`&3>V#|orZ}Ix
zTg3FOeaBhO`J>*!cvy2L)rZeyE2urj>U;^|v_>cq;GNm^DxayNR#cSO@40;7)Aw;?
zSG9<@g*sRr{n;glC}bY`k3p_#rF2;f5Y_PN4k(#?<agW7;t|(}SvO%RhCxg~(N%xt
zn!YOGI1q^%r**%!ROh!eeH3XC<U>(u13X2VjVm{W)gR>;XPbmcb-p;y70vxzeBc~Q
z4mv^R3AMBUMc@^I3@B&+v@|Q^R{aP3gH=9@q5-L&0pH^G$XH+R+A(PnU+deic12vL
zeD`&or<C^4O32^b#-0o!+c75Gy=5wTAKtBi5ss=;gZouig<&h;58`Rmw~DfGI6{b-
z7(ut)U%hwK9TJi;aHq7Ovhou($QY>EXL6l?A2FVc?Kx4+6C4$LA4_H-+$-I-L_Iu`
zNC=BJR*~5d8d}Ghg@I-<Bp>rWxqJ`ne^;na*GDSY%3bXz1uP&MWalREJb&*~d#GBn
z^hU!<MCaudaO3V;YlCRdrFh2T3ZV13&tZI2ls$v5#_aWC{^M<4(+S9;j7s4PT%>$o
zhSIkD#KS$bhg#CaelxXbSc-FYan#Z;W3k%a1V$Vah@2VzM-*#~QpEtE8oKy?o)ji)
zVu>`gtI8Y2;Z}T+1v*%{=9hb1tAkr8P~81Y%b>z+Q)<iHbn3cA+P^tn=__ylp}TmJ
zMgLyNYkf7yh)qLiC_H>D4F54qrKTtpVE<AZ9Q=vTy4u#!RqT_37k7MQ56v}PM`%hS
zM{wmvyi&a@A=Gr1h{=1}@kA|8LgiUKR^0l{Chponp<R20*JeP<E^mxkr^?1iaRO&>
zX7j6&JiTZ=V>-^Bed$r)OXE_H_3u_0ONg}<fjs40>6O*`LSlVyctM2Pi)ORX#msgC
zWJ1ER4#fqh+2pM~uCMxHzi9-DF>SLS;<u}d=#-5Z-!xrvhbg|_<CA*;NosjBHustS
z5ix2{5%UQ0uI33{VO!wnuLSRsnpzH=`-`J+NG^Euv)>4dFuR(IhW+q(X*k1<e)e$}
zDUmBRE+fWcR?xfA+W60_$b~aG+zO6beVAO6V#}EhVxPQMsu_6P`Jhvuk50|5)@1D~
z1HO<uJ#)*Dvb&*=*~UT+TaA&gM+sV*q)1d-h#)a+J*ynF_-V|pt?!my2wuYrJu;V)
zl%KAyopjSDKBWc}(K*;LoGJ3R!W1y*Y~)5ueI@_Vi$Id4NVfS(sF)@w5Ay8nT9+3(
zaStCzZ-@2TW#vPRWQBt%Tiw1F0)0JU_Th5wJp*IEF>PY4e#xtRk(oE1KWj2|0(7+T
zTsT-3+-}y~T}qiGdjfOO)rct|j*$TYZ`T+G?)Vp4510Sq!(xjl2lSsg6^7@q**iM8
znamg`?7)Re*_WoNrjN*Voi7BlsWx|aJ(zpr>a%+pD2Y1j#PVYXxA-`dk31X6vuu!D
ze@EP2x(Z1}Zd*g0WRNG6Kn7EfkRk<?v#wUTs)l-o-Tf7Bf4MD}<&cSZwhngos!V}A
z#RBUR>sNzKwasR+Ocv$wY$lM?<Fg!=IYdUKR-*@x%{P-r)ijC|WED`J1;VH2x7SqB
z+!9}|gf=_Kaigi2*NAiR)mI10#p_abKitvDlO66Qkv=9UV}oX1rITwf(&f*|SFX`|
zLo2#9{L17%k1YaF1>48HQkK5xr0$J2J_y94ATFcOcn(OAq?`{%M@5(fY#dE~=b3=J
z)7L6DtRd97B&@1l52cN+-=sAS_B9Hx-j=$9lXm3~%PrdXR4=e;dw6hiFgajWwC9<B
z)Fe7qSn%(Zs5U%E8@YyjZn!sax&~5O7%(z)y!=o)iBEsIthXC>dwt;E`pnw^?@NIz
z$!T`m$G`rxvp=&W{e4&L&Z{o(@TU5Dhzp~uIfCVAPl#TQEkeU^z%1drwQA)e&FsSx
zMh`1$PVP*LP_D0gEy&U$HYRb6znXlj<mt&B*|Zz{fTsz<;2%@o<%wU)J<uBj3Ha$u
znv%mz0GECy9($cz0Y8MB0Dy`5zdWLVExPJ6r!NPatlExZx?na6q^6ZKytZTCTre)b
zH--tdMYI66+5IR!KbvT66uY<U`+io`uXbwiUJ~ELi&1k$)hex7GQDf?Ze)vbnz-GY
z#HnTqXru?@?nR?!WN&md*CN{cE$aC1>9if!RI^!9U7(bf&QXr>uCm+e?)~KEOA^^`
zMoLLitp#|G<l*&YU;I%E$P}UofSQ&@cGuLB!seC)UBx^IbYo;^p>=?z;uWj|C-HaG
z=X*?(Q2W8KzI-b))lzyfhqB})#O~qz=C%4Z+s2Q;Xbk*E;P~{#Y2TGu(8s~uw_=2d
z=M#!iYfX)ZNXs~L9_5Nly=8mN2Tgv#I%-i1UP;ne8C9k1j`Q&Y+6_|-Sr(Yo^0?1?
zXQxNg@;`c>H~-lBut?PrsNm8SzQo^RuZ8io%ExUjne^f63^<X&M%m$l+wBPk{O=9S
zE61B6gUiA?&N9!II2i?oiHA%l=AA|Y<3Dg{9MUJ9-|gkPNv`%a#y0n%s(bB8ASN;s
zp?pv{ZB$bZlM2Z;cXY~h9!8%v)V+UWiI>iJ?48}|UNGWpaiu{NBy1HiK}V!WQx;{{
z&&<V!$4yr}waWz3#w&DBWm21vO@MFryCawUM8Y%@!o6Jat<{KRlcR=pQu>^{sC9}9
zKS&>h{&IZG4YKLrhW(I&YJoLAPX4;wbtUay$7R`cTX1OT*MK$9ZC9r#zsg$p82W{0
zx=4D>Me8Qr<H82rgi0XmNyN{`g3QT5R^K&Fb}*9o!}BPS+F4cdacR0FTQvN5PuFu!
zCEosh>4cj>YmD9k`M>G!R;o4%LPorh^JU3d!kTGA(=<P>jhGalXm-5w;yh@s=Y2Gj
zen#vhLQOC9Dg^wWnEUA@;a2R<a$kM4rxA~bQX;4OJGbXzk^9G+BguWNl1!ew$>;a4
znZkDO-H3|c{0%S#Fbgw-y*F>dhu#cVPZaslFN}VNfB*K(&waF-BYenxI;bf7{5@dX
z#M`R;aPk_&cBa_^l#$sYhaYKkcB+pi4cQL0H&lKyE8Uivl`^y?8FeBi0GYxpWBW<s
zHDF4|zSGi~<E?`wto|zQHRB-6d29uI<m(R<iPS%-L#;xx!w;s%Q$iN9qk;8D(yh_D
zGJnt1R>#||*ak7IL8mU2pVdQBhL*SjrGd!(X7wQ%&}lTob=axPtECkI2S$@5UR{p!
zgKT<+9;BKgF&#GoIq%QrY%HpGqjNsB3K3Cr?aZo|lCnOi`M6o)xfQ;LV-tIo@FXY>
z>bC|u+IH*(DKDfS1|qmM<33&xLR7-}c;cRHy93DE468c+iXqK+XeW9Zdh@_pqppCL
zk0N`<KW3`~TN({c@`vk0Kbge`;WCOW58l8iLy??U>y6g<o@Bj0g^J%BYtdzm(x_1M
zTKKITIC89m-WQ-<Rgc`5r0#*t07gdE*GmU$ui2(eJ@2bb@kcB_^dNl9o{(IsL}RLw
zb!!hp6E-Ys@au`O@#jARBhthxt&(s`cY6z>)U?N#ay-QZvema&up}emkiUNIWB(Uk
z=%=L@m6Y@j%L5%t10*bxw`}Mq5x-v+n8f|!{G?+-V$Ox*u_7_`+JUp0x($B%w^m5+
zzF3ika#glv;X@qKAOCYH{RUrbRH03<&aVd_j8GR=?AI^#?%E&<RB8aN1m{`M#x3%8
zvOdLL@qD?a{m;dz1Cf3!1po7V?M1T7V79W)GVB0>iac91!aI2QV~-3F+|jRZ^?k?o
z^=~v^Kogo=FNf_#b8EhieXHww%6#b4&0|=968@*ez4n%Yd|y&A7{638?#iFDkZ+d$
z$uZVB>|gAT4#18Xq5AnABF<M}zASvlW1x&L4_OwJX@MC?l<P}Wv8nXwwj+9I@+jru
z$CS%#mU530i2(qT82E6%UO=BiU5Y|8=Vmzh3&CZ0+4zTpTFy#$8*KfT)z9tzHeQ*C
z!3Xn$0CSa<5jU&IqXr2!KubE}ZLrr_{UfAVo25R@oDI!$r@t3hrVJ%v{Rpqg*+T?q
zSm__M(~a$-S%8!n5}-V7H6#wtXQ~K_8)K||QhuTP&t;NuQ1<xF3Wg^TpPx)%2Jnh(
z^=dOqvavsK6*~zE`2ydP&kQ9UU-wy%b=wMId-EQYSQ`*_<&ic&Wqbe^-frH^%s}Lj
z$p)Su6ji|Jlq9^kLNz%2CJz(e9OYlu!dT5+-GVl=zZm_@JDOCW*>#SKUVZ+FtE}vw
za#mVslt#aH(j&;}H~GK72r*)+<^eEavYNqzZ^(Rizuu(nx52oi^qKgJ7rI3PJjsi6
zQoSv0z5WfWb${v%#Yg?7MN5M}l<TuKc0r20<+GNY4BqYj5sXS2EK+@9ZFT5=_96LG
z5qI9x{gVGK*=TKclAw5&JNhkac4yEd=2dnuOMOAPiYNykjuK&frt0g24W4Ni`LpTl
zIgef%*$tj1jK2(<gijRB{vkt#3Ch&HL{f`chU_u(#q<l5I*=)7=k<XlT%W#`<{|eW
zCspFcQzY%U8Q5a5&m;y6>M=cyfwSYG&4P3brk68QJW=YJ83XA}Q@G-+Wy{PQ^H}ME
z5Eg=#>gFJ$Cl$B+Zv**Goi<&IaTEhjfTN4--U;u4ii8n)!@J%CB;Uy#=H_JO#d&|s
z@00TgC@bYS2gKW9(5B<~jG{*nqi{S?1zTF&o)!QAVV6H?>b>S~bvN^d2?~bwn7@No
z<eXxgZq3i!m8S*8<{~%Crre#V+l;bT%DRmGBJBG~Bx<@Od(`A8yR|PAX_x+W4tiP-
z?u}gf@rp7o0<FHE^nWaXDnps|nC>APoQk7vKXW|i>=qgBmT6sYLLT6nCnsU0;GW-X
z`aMmP58d+v(`sJ@G8Ed^l@7XSqp0hN()~ei5v7mNw?=Jq*km{J0j=#h`C%OT{MRk1
zhs`%i6>}@#_ys2V55JZ_^y_pPTQx<lEiLxXY|SjYgno*LPP*GvhOc;R?eU1f=X*MT
z(R%xnZl}14X;j-~JE*{X<=M{Lj;71sM|URi98_urUdD0xYK)MMI%8Kw7}SbwDu!7V
zU|!RaDC<{L+EJz6{`D4dzov#sfd4kjE%k8W9{vu3mA{W`Z}*4$$1T9k$wM;zJ|76+
zJDYyhLjHWdMa_RHPk#tqH<aV{-J>=}bV|0*4teHymtn!J$w&7Jw_+CNtX}ac3M|D)
zq<wSKtV&ybLfQTNO2Mv8S}0Pqdd_XZFQsr92hKx$+55PR?oPZA<W}F>J=2h%>EVNj
zMoe3}#;(hto1#4({@iHY+fJ8=$h)Ch$obiOrdkjZ^uSwwbl1@7kT4qq5jK(Cp>{DA
zai>hg20{3yKKC_qVJqo6y~Ka+5gYFj4)d8VQIaKzGTiqQh%92764bbEs~()Yn>U1N
zG<sS6Q04k;__vn1me1O=S*x?rtkp|46HF4|AIyyR3J)>o{+k3BQ8{*=`1I%uz1zx7
zZO%PO1)D4u)z8+dcl*yaIaiZ5>aB9*AFnIieJLGGGyuSdLwpQZ`~j5`yq_S?t6o#G
z5WRWPA{s;5*~WF#+5)dNll#)e5G>_DV1krwyGAIs(&}{;Gxf>|qER>4)iXr6u7OS{
z`St4aVy}DDZ$$(P;h&A>kI8?x13Yn;RNSqPI<ey2qmf$T*=4I=n{9vKxqA9&=B9Py
zuz7{vB<;oE?D;QC`_6Spn!<O($i3*6>0Re-g#rA)+q~%8pA9cIRs8OUj$GKmVh%nj
z0T-`ZogT+`eSOc;uX6uWeVcV+)-g|=Dq83@$>bFv_S)4&iweENdXJ&^?00n6HBC~&
z<+X5D66y~Ze)o9>gv5W3_KThQAz~#7*E=e|MgSbhGO@g#K!6@T`E5(LSzp%p?wWd7
zwe9ko;=vcOAom8C7dpAq$U~PTgp}iRX4kPcJ&g07mAA=1l>&6+)H^KKWSatFPSM_X
zX|gY4(y?D8uqdJ~^)yqIz<HW!F!HPQRx^_zCChT2>(3JBwz)t~P<+t$Tw5ehb52<?
zdqlU~2J%L|`Xc{ptTa46<E?*qK$-Zd7}7}q^D$!L^wFIr_XzK!?lDzjB)7(3(nTuv
z#{pwB;}r|0t2Cgeucugj&#cW5ppUYd%&n0TG?|iI*9a5i(OUTzR@}+z{%rRS8rsd<
zWhr-DGb8hO0z$5`8y|;St5qM$_X{@Pf|RE=TQY#dmv{*%g~JI#A0YsfNIvs96F|sP
z{^+S8V2h1g8hzM1-V-Ape9brX#ssIlHPzq74-tB;hPM0j5Y2IcJ7YC3=8O!KBNOsf
z)4VFm*muj9FtjV0;94eY1+((<imHd2ja;tT_!PV_lka#lOl3|^)FR&c1TA1cf}vd<
z+=gBo6pjx6Zahe0c7EZHf)GsW0+_wLJ#REm^ws(jcXgX!xB$;`mCEjjfq+xRX<J_7
zQ`|s0-w50~<x-ai@{BQnG{k*&roK)On5YFZ6I+1bVpZ}JSSz(7G~*|HOfCwXF3*{c
zFr0H7QBiXg>0C<V-S~71&^Oqzmx0_z(Ynq^6wA~)ETW17KqPPhV2aI-b@iko@FYT>
z1C{OT$i(9;+S8(S$6CP$KOLW<HhLcHp||n89IN@G2~v#P-a~iA31(eo1Ks4pAPMIC
zduWJ_AXRZIF{SD&2OTPm94tgJKe5A`_1<YesUQ`}P4q6;6C_0xmmDr~Ll%pn&K|}W
zA!>s^hNSX$*ojq&?KqKLzw1(~!IH@5#k3$pKd*D6T|3K#6|5BItM@7RC{pf8FHJ7x
z9YsV}Wa;@0)9oc*I`U~W?NUdC=>x@j7rC>BzNE5lEWX=i>RG&;&DYPr&O`7nqQryS
zHjGTlA%eVW={W$@ItP97VSftU_Py!q7e0%UVk%X^Jh1dNZ0Q|4BIuf5=-XO@qtd;l
zjH~Vr=g*cMJ9~eovs`p{NwusY^lh3S>1N*9bw6=q8)<6^^zVe^t{z2pnLB>(g0l^|
z_s=vdYa$b#c^q{7%Ww+F>6^fp8(Vsf!U*d_75Vya9QI}k66S5-KgM#;4WEQRnkA07
zd#;Bcz8Pq(_p*J#FuKw866MY%U+g7USnsMJiCW;is;oLL;7Bo>`d;h!XQ?l_bl=yx
zK1|dsb{6k9{?p<`r1CQN(3X``XUneF#&Pj1%6^CRj2l%@6|Ny>-55TcwWCyw&&Kt;
zulrf7y4UTwzfcRA=7O5G{rFZ!&!;n6E5Y%;IC$|Nl|v<Q8_N6oXbt`yxTJqWzCT-k
zrbZ6Q9_02@tZ(^q-bs&@lKQnAg{k;3hC5QE+o3In2Y;W!wJWC+@OZxq(eIetR^01s
zGapymitJH0PnYe@M}}~&Cf$y6ucSO)7|*NGjZw~zxi|=_K8&@c4n;m~S4uxgyV>h{
zUE%0FDv53<WMvyLvQIs;uJ#o~tg<L!YOcz3fxpwGdo?zS44!w0L`G(c^VnBE>;7tC
z)G@yCzcb+4Fjpo3)fZX#p&#tfuyszcR{l?ipKq0JDGSfS5Bj(2j^j0~oBl)FhwSW9
z&8X7EVbTh{SiOTVNSBVw{9)OQjJyU|DvUFZf+}~_+2>pMC1XS!gyb}_=aw;7JKPhQ
ziVIXriQ;MSBa!|k)Okzj8%V&rPB4R*IfAFr&uCzJI94dBtlGZdrZTNe)cqk0%^g3`
zES~YhjlA%q9%m4^&9dfA=)3p5GM7$nNhsA|DxeW0N_w6TyC&)8EJ{5amjdPEt#&w0
z-g{{<-)AS$Pz_T#&%=Jf;;Dq|GV4`a;*c6X0}ybG(|@n@eQ9?ri(0j5S3?R*{?qsV
zYb`ouC?;f3nHxsWiB;CS-<Jd8i&-d`^7a&cfs2}TcRi|#dGVBOmC3rJ)UUF`8!A6j
zIVHUn>rZ##GO=zI1(L2WD0@*-Fr|GH^t541Up09+AM0)AmQYeZZYjMba<+85{PD?8
zn!GQ64GqnfW!j4>*2|eGSCE`htR>%u5PkV6gvP;aCy8NSjeg$8gDvCp8dLfcbH$om
zT|%uEkb-h8o+3K`@Mk}E(njifLwdgAkd)KBg>cK2)3=u|n&kf`6OP}RrI%b&j}O7=
zu)1TR^k^HPk$_Odg?(f{*lF$;dzaaw{V2_;M<0bg$Gz*vBU_H~!^wW%_pej6mDQd7
zzflQNv*1ea53jIia+JEelB!2F5I;P`CUtu<M6G9sSCjj1(?zO(Rb`O{(^3#2y!<io
z9_E<<<yX+oTmW)#_38E%`>?W!K6?U%oQe&o>BN^D-0REVKGA7PEqRE=ljOV>Hr!89
zZ@4cK`J#H^1(E4bj^nZ60+A?b4+C<x_W|X)r22{A6io0XO+%UJ;y24T9w{(nMEO3&
z3u}qj%>I-N1xn<P|1hszgeJNJI&Q;+*pWar0JLKuZWL2>QsRn1hz6#k_-688Sp(g~
z?+DdlW?ud8Sw>UV>q@)@qi2z*p;63s){9AZvX+vqGCR&Og&-H@7>R@G#?2K>lOOi)
zQ>5d|pd6k>1_gdd{RE{EV{F47`Dp8)!@fH3j(W`|*;UJ0j%vvmomhn)6Di@oNMNa+
zQe`|2?LOs{DNCe?p8gqYmJ_Gv?MmJqOirkSI#=F8HOK>{qfouMR!4xWeOZWA27nI<
z%&j)w^>jM{yDk>%{LqEyL2-*1VpZkk@lQC5h$nWTZz+MWtqt-KI`*~aF5MO~fE^&D
zVwFTTvm3W>w5-*+nQYsd<|o2gz#qY`68h!}-%PHpt%dEU;h#SK7@6sze=@sPzLZOS
zchrlv{JvCLDOU#0{@cHa0nMMd4-b5l#y(`Fa9}paZaOmjmFSdkJZmu36n}SY2`?4U
zqMLI1WNf|r!|E>$v-a!2ue0%)XOpiet_Rjh;1C9O8t!HG%dY9-bJqF<g~Rs>r}=B%
z8IoLM2Bxk9n0U$MgdR92o{1!uDagFZ{)^c(RpxjrUaMVr?whOfZpF8Yrbkh-C(L}-
zMuCIIZQus~onG`-7P{ujmL~yjF(lNRxFP#jSlC{4<<IgfS-c(5<sDi<;D5?RlOcJ=
z=@SF&z`G&F>@IfIy2cgMsr|u-@I#ekn{>U|-E3Ho2>DeGnhjut&$;SPMtDgj$r`kY
z5rj)iXz$I1+(dg<!%1_4T7wSsH{2PUt8Zam?6v2peWo>*@_jca2=L7Po4G(`Mj>*e
zl~(5}y}7*Yoo*t1nfpA#;Kl0OG91kxw!EpNQFm;8|0`Z6W0-4IJ#18Q>9s0Iww+%L
zqbQzm6fUyi9c8rO@6M`uueewB6VNR#<K}3tMZAHSrSSV?lP((D@f^g~=u@e#xbGQX
z*}b}j@0l)BdH%V#{n=@wuJdPDVuB0JQol{5fnurl^Xo8K<%iYwG`=eAAB-Uz1cW*;
zPwMF5xzD)xIu;!ug$e6V_*L2bf$?$=b)Z-;+iK!9!&~T>zj1B{$@>{Z;tY#87bAM)
ze0)@fj!|kt?>DVxtuIWBBqZr?%(Qs2<_Q`U2G0Jbo{(72{3{&3?Pq=0+x;Qsaoh1S
zOU6_BxxerSVXPNHx9WSxVEG*C)*Oe91$94+M8plkh!ZN1kt1@2hAu43RBk7w*V3fB
z{V8nurfzIN0Yt!^dbRs76_cN3!jRp{Vt|@D?Sq3}<uLyNzs0=6<$0}pLC=jAdAlNl
z58j97ac0?U#7x|_QoJzf)2?f4ybeROOc`3*-{FfH6#runI*_-kg@?L4Q#cUIRS>*0
z22ehEz6Tr=**9eo&r83SZ=&wD_NTtx;B)w?1V!tntV=H0X|b2dZz>E0?A)<>ZMOa<
z<IezF-=1P#&H|5&<4&ub7?X3IFxyDg5m)cYD81Ez4L^RphhnAv+)%8g99|-eW-K|G
zqf?3Ab}9OPEML2Q+pG>O-Gdvgd1I7}^rx{`3!@^j-h3N?kob_yzpe$^i<pgFnay~R
z)6W|}RpO(NElf?Bci!y0c30(-Pdc(KP7cn)sR&+E2sz)6%=w2Fb}QKI_1FlKG!v`~
zjeT>%vK-fa^J8|<(0)C>iT0v>Ei~@iIS%PK2_w?0+lM+ewy{j3afABjaVV6jyj0=B
zi%5=D6}kCo>;n2++-8h)=>J^_5gT(yV`KpX=%gbLPSR4v3?`_|f^?x?X58;IBX1Ae
z$6-k&gI;Kv>SxE`&Hb0bYw<brMv-7Qsm&p*hw-D2TWMAQ#{!xNi}15IlnR(b&f!20
z<wwS5$_h=%Kj3)*RG36()~jlrarWxr@G5xGiFtyLm@BMV;^we`m@r{9Qp*KJc+WLY
zo;3udBO>n9P$%U)c}m`|J{51jlGtNaBi@#4kyNXWwyeO;7@XxB)kZOx{&y8zWIG@`
z`Z`5^;4qPoU*4wJ^f}d0bfy}<;8!WPhkmfjMic}1O8xww0m(IoIv8gM$V$&Wkeia*
zqcTLZ&mdFlaGC^RiMU?2gYC>?kK=W^ZKi+?T?y-F5u)v({V`piO_I2E$HWIp{Zx&X
z_GR4L%Z$q0hPReEDf=nu?WE2g!gL%j4L460k~>V^Mm~9+?7Bko*`@uDDv1sQA3Jr<
z)L)$Czs>G&oEVQnS&x=%)q{pb?@AV2xcwO3oK^ET9uq#!3#K8YDeJ+17`xqhoaTC0
zi@|4Twmut>W}2nCXHk5l&{QFyul+MwRI;>X_TTp7r5h>|PWoBAG<T|0s!vMvwEr9Z
zs{S|fr@_BPg+z{V7(sFgEtTt2wmHqOJ+?9@n6>42Z*3t!Ut<)h6n1U-Gjvxs5}=Z=
zfC`2wh2AgmAw52U5qAwGA-PLP1EsKsM}K~;Q5D6YuqS)S8>W1?H!j$^kMp?SS0>Jz
z;QcN79TaOOZv3rVTQezT1z^dt7|35N!Taf0VG7`Iu)iv{p(b&&*=$nj%0P`l>+e_R
zhqQ$Adf}zqfxjuM+CTm##}h*mGMwK^txnR{+iGaE0GUnG+^j^+<5KBpMZ&+&QD+q9
z-+a@A3g^eaG~A63JIXcVJ+&#gx$ZeSr-oG3Eh^si33O+bFn>AolR0<uIV3ADS+}(B
zQW5vUr@@TmLl1=Dm@K4rC8Yz{Utu$yVH2lWo~nOSGDjKLFTGP_YHS=CBeH@P3~|Te
z9<Fo^SE;`!#$qxWBTIDrr(~*YDr+8kN5#!5or{~Ryx;iAA9YsVY&JjRCh;oI^djQC
z`%H;V51J@uB72AD*L>N&#PY)HsQA6J*@g!d;G)NQPA7;BQ*F@txB)|Z?DY2-zdyq9
zZkG)YUR$QU<c=64Ln9KWtM%S?T~<=;Ik$tpe5Tx&I3{o=S_KvIn3ACxdN~Tcv9{vb
zz~HQ<aM1GWr>fW_0Mnxl+lZ!t&v$9Rq?hE$6wxm#m5M)a4_tfW)zvGtoU)*G-{;5m
z1zgl=dUH^l4}4xq7EQaDJe(VpvVB>RFNsGt1Cm47j&_HQR^*gP0^sFf=52GKt$MS}
zywo55b`KZC16(VoV?N<l>KPiV+4k|djS0R>CSn&@`@S*iZjEg(u?)qWE0LaP#%T$c
zMo09&*H@IYj~L6!IF}+ngyqlMJde1N*g9<(uPW6cyD?IRxB8nsF_(7VSZbQ%n=J@o
zkwMlhMput(IZ)*QdX0-hd^<7hVnEij!1Y&q{AY&fRonPUv7f3Jnc=0y;TVpu`N>(|
z;~9Ipm>U(UGLqMzie$?bc=*YGdhrp?HcQ*+$`=;5oUd~`C}IJ3jZ4BG88Apm&6Sub
z7g0L$4Rc*ZfFc7SVt-)Z05OT5F)O=n-1=iTBXUDKCod!NeqOtb7T%pX0;0d``~^sK
zZMK39pY_``%44N|%n{V4if}%x1d>qMSV-ZBcCsK$C39eYqf-;1@|ULO%x_n`SE3gi
z?%fbOPZbE6```sNx{eK~19j(yE@(mNrFGvc+ci-Q@r)6Dc2*68&wlM+Pjs&9wboW<
zMy!gMm%nT&2?@<UOOKq8wH$>-)Dl*~8G$MX*A^~r4c2+sG=pHy>i?4~b5#B)<syKc
zmKd-S)vQ0evAGIkP$g`AU5G=$nmh^L&kuOOcAu64x7iFdc|(PB%Uf4t{nSB9aVS6e
z|44NvbPL56vU_N_0Ybtz^fiCcQ0#jz0<jY82^6oT8r8r?pEt=zVIdRNf`U2J8AD(i
z&B@@?uG)7<jGK*-f5+k(waG->{-VW}JK?UGqo-Vf(NIF7S!u+vR9Dr2XBX^$PSbUA
zqP$zD{gkvk^E&J}o@~a9IM}65;G9kih}Ox1!^7kwI(FjVBMbnvPeTZdixD^`eaV)9
zOMFNsn_Z#$uqLP$p6o^9pe@zVRl>yRm?!U9g}F<GDJx5RI5{oxG%Yod<tJ~`!1M0+
zQ^f75r7LheprWo*vokHtEHsJ>10ROJ$+&PnF8QdxWb>L4m-6X4ZI@5P$WXk*-f*gb
zzM|Xsyu6V5VW@luW2DqiM#tM{p8Bk|-);Gy44f1um>Vr<26RVjeylg&brMQer{#j2
zUvd0|Lx+xX;rx<oEdK$_rEOtjDa&sLB(fkCP8sDMukWqYYga@iMujm`%#P01CNTRx
zC&-hWbDZR=#q$n1+%zx5EEw0_d;88t%dAWhoFsGWECN-zc|76tR_s;WdZQ*KWLM`&
zi#m(KWA-TjB}u#DjtY;y<8G6ZBjvYXj?ca=&q{<lZ0G=&Mz}ph`SBAqG#o}XC)bO$
zE8f^>Ag>hY0t>cDP9wn50(FQv91<Z5*!YQDQ@9Ah&u)Mwec4sLOIgj+<-FOqveh9c
z9~k=Z^13lbDk0N0buQ_$*N0}<DL$jA8H?shbL|iRS=h+f6}mjK2>CRe8b<XBDb=VS
zl~{nLJ=tlv=Er;3)WEo*BwyW<0S&_5kH)~_P=-ps3Mkby65v%ifXJ9}u5+`SPMRnZ
zeHjR!?|T6Y;C14+2_D|GXnMBhn^C02pq`skxi$p<ZkyTS6}D1jSI?C{I<vRfUvWx{
zKZ^BBujJevGBVh^ENLZO=o2m6p&E6p9~viW5j(y6wGa~B7^_NEpFws>1*%2UaK9Ot
z2~#6Y*UZn$0rO_0xGb@co@K1~5P@Z23SXMQQ2OeLZq<YJ3952P>ugxN(mU*qPD*bE
zsvqc}xrc3feJs=Nh-p<XIL-*$H0{S_sDO_jYyP^~3fEhUF&Zf@uH#lxx!ced@`xCw
znM-s~d(~<^`P*pJ;Yq5hq|Y&cjh<I$cT7R3S<-pWhRT|=mQT!j5Fkif=syS1Pha*g
z;pVbGZt<w*Ne6e&S|7bsb=FIln>KCrYLIPyoO6Tlir;(!;m$HvAL$jHf2zh;(izM;
zUHyEADhD_EK;<MQ4GQZ16a7hUhWHKqeGoQ8{<u%eaUX&!pgw}~fd-LVV&28B%_PF*
zNyuyGxF%<tI;_xA>Uw)D2HhyH0oP(s{&4w=MB6m;4Te(WAI#}#-s{oz(9>FeEwnyX
z{nRBX!rILW^<=Zy3heX!2F;99vPJ~eadJ9m)A||>y!63yMcFTJ?i^SsrAV<^-OIEZ
z%VnoGS+s20;k9qJ2VlDeqvJK0TLtdy8J3c_gc8-+pcAXYA2o)(ryT3t3y6cYMHRpV
z6`T4Ouf_@)Pf2?f_F|t}-)t;e^(L#;Q$Y@SecnGT0w12l8GilK<C%vR=lrl_t&r`f
zWnhr~pykS0vl3}hfydgcS_W41N`~(tol4$c@Au0rZ1!hs>S~R^kj-mb&>JPsN^};i
zIy+gK$8ELK3ma_&c6S##%f9{gO;t|5!Nfd_?>6mK_7gLY?cOAj%ECw2_lM504_}P3
zo%Y~QT-;7K+JciK_WJoZM#>wvIaeXXB<3YG-#MEb?L1&sz6BT_D-4g1XNhmH^J~oP
ze&ZVF_%B2yxUXO(6VMla-YmEI6FGU&k#a92a>t)E9x64Lt?Y5HY^*>(!!7QO9%1l3
z`#WSxeGiFQ%>JPXE}xzB<0JO?B9)4lc8OZmr-`z-f2q-I>Y>{W9jV9nU>}CZtlnJz
z?aRf*C74g{J&IFS&z{(Ht_aIN4KPeSjQ_xEloeN{XK4^PLqM!;p*K$2F@Q!d=+x4f
z$}pm~aIlytV?%b`EIc7%o-~4NnDz#RF}vN(uvV2g4fT+QuxFX#yy<_<&zBZ;pUPKk
zmbq5e-<W~I)G&xJ%w#~f>Z`TfY1!xTr;(_p1}e9PZbE?OhM4;oy^jB>X8<r++SxdP
zb+D4qMaIKnqxT0C(Q{zSV@e!vw7QYd66w3q#$qH2*|2Fw0BF~u2v*&c%JV2MeHnWr
zO19eP)uYko(8&__q8(2N29d^>g$6?A#u~Z9Vx>*97-hs&I!Z4VR_+}~Y}Cv0uMj}-
zIOym`n3BodlZ)hpVBtOkS`1>W39k(6DCIq1XX;Z7t~L#fh&#$Qw_3G~L@i7^j~TM6
zx}KzUfL9luLJwMipNT5oIB)=-BAT?3E|8!8S4=xk8yT>$0uGA$&Qe15Y;=sP*rf&}
z-Xqx5yj<sG)3jor9M)<0`~xp>zS4J^YMo#|h-F><Oaf93R0Nir3gN~xp(=Wf)+yfR
zy#Tw=3f=nerNPA89roofE#cu(6J@sl@CL!9l`E~jh_%bCqtRTjlpZD4YV&H|#uZqo
zt#9r^eoupmFbv|O^80p#F6KPv(c>Lf1D>O7MxlE=C8}SXkDFmQg;WS!A0Q!bL$xLL
zNNa{OQIW3UR|wAHDCWSu`x3dJUc2Xh7j<G=$;{<!EIimqy>{!<CG(Q1#;~#td3`eI
zqBE|Givi*?$e48NpbwV^Uau{B^C@Jrpu?p?*q%NIn^HXs&Wi+3y1Pp$f%lhvro6o(
z+8cc|sE*FFzc2EifKD6+s4fMW>oNtGkFSAasGe#a^2)pHiZ6{>bkY88bK{z9jr?$q
z9$%j`oeTT)mz4&Oh?mIoTkJA@*V!dhhmIEyuhh8ib3JJ$H9{V5^VLg&WtN9PQ2`It
z#SJ#eUJHL1UO*13*S$u7k9YEo0-#jI)%s{$O-8TkrP9iWZzNgBv%0Yv-c>^fgYJ&d
zvsK3g+++n<&HlA};vmO)Xmg9>^B08eqGMH63fdn=exCzAYjm*8dVb!}8l8}x2mZ<b
zxgh!$%7FBn%$MMcc?z{T9odqP**nxZ#<<(QHKu`w^yN#z=iSYA4m88Lv@}0=9K5Ke
zQr3(8UDK>bjs=vJs#d)Wscx@}r>$!2fpO{~ciA>J3311qyfRC%9n$xOtZ~mNq~L=p
zuU=H**{g_C>ni)cnPZ-MDWQ+9`ARb(iRX=nI|=HyHA$m(Pt<aJr-$P2_2%soP__^6
z&94uvRu~JN?*DrAZ_BjIggtFQ!Qweh=Ld=olv}3Eo?YGAThjLOoT|s<H2z-c2yux|
zOe=<c{vX9+={JdL9C^Gsne(u0gGzSdpa-`D*6wVd8Z4CIV5~}1lV%9mV7np~XgS#2
zK(lqLnPs}dZ1g3g&fn2%gjEUCu45i&cS?Z&IMh9&Bg>Sps_?az&@lyQ+Zq>H+Iu}J
z>qglnH<H0c=1?1KEjBm~{ogQOglOM>^2iMN8cSEnr7pxSO|6Rh{t(lTa`VNk=QrMs
zWbXbS3ow2BKrQ@{)nQxt#%Di{jny{3?TsREMooL}lS}NzL7bL0jfrEGp2-61vU!|K
zj5IQTdg8r4C_DMAruC2hc|q!M2sHRQzQZ4fPMnS69B*0iHTmi=bE6BtVBK5u@~=4f
zNMiSJZLv?=&XZzc`q2yPl1xz9+g650>XU!dEYXiR?LI6D@o&4~q^T+)5le%{9Q`G-
z`uE*4-K)5C^wHgnYd5H{wQR(<!R9Tn$FqT}C<aHze-|3f|Jg+9ic$U{?Lm-A&v_mf
zrX-?xHOjr#zMnIwFjQ?}L`uqiC!+y&k|)(gnVVilmJ<ITZEqb{)%JaX(%s!CDAL^m
zN2OGdkj_IRok|}<5F}MP1PoeA8tHCOy1U~5hd#tx-1`3hexLX5$ItbCJaYElYtJ?2
zm}AT}Z{ki)yef0eVclBN-F>nl$1}GBw2?Ls#pV003d1MYKcG=E8ui)~H+N`-9_oKz
zMYQ-%*Vw|TR~}U@56b(uFJm!&>=43`X`>%$uhIDO=}qiwE=U(!{2a@kpejFN7>=xe
z0*<ZJbY49_Z*IS$voe}I-PZ89+i^w5WCBj^Y>@yzukFfPi+Y|9k#$@Rl@CY8_da{L
zm-x))H+5~XQXBE~GVJQ`Y6;eVULve`oD~8er#rP9(COD*0&d|?Rb3zd@8g52+Y!i$
zHgs^FC;#@KLC+pCe*HXr1sRV3$2eBYtG#lG8lVz;I?Sb@@m-+L@0tk`We!yA$VvCu
zug?#fNJ;aZ^}3d4W_tQM`=q+JmbH>~VDqu7p9dYm&-G_8t}PF9cP5S<`Xhgp8qDxX
zHATZ8>7>~|S)$!8DH&p+N)m9CdgG(}(kv4$1CG!1dSuPm6a1Wga)5E%S9`Kjc624y
zzO0?Sh>TDFA~yA5(>7y0%(wbZ(pK4UmlE4$tT)jbs)_*0b?JR3#B|+rHB$VG#GZRd
z7Plx}=jfmz16|1UrM)>gr)f=$fF8n^L+FZG{Imw)4_#5sm6F_9&UmgI5)MDXl`7w2
z8K??8e;cEt{=Iaoa>PDi>NUMgYnws1ErM+B6Kok89q2-TqYM|2hJrqoi*^~>c}V%5
z5q(zk0FN$zA;qVP^vQ<rbS4~w6GN%ae$*UPMe~eTO{&wC_nKkUdD35*o+LjW({StA
zCD4RP_7LQ03B;;AH(MHoz7hPIBUszlROn5qpot>rEr+RL6@Z%2ASk2-w_X#}!-~wM
z|Jm0!j5NMp(*-XdF7pbU7!jZpDt;2#eX6mCBoyY0PxuKJ>(9!7Cw69IiA7ZMg>VwB
z(zkT@8bb_g$`{tv$7mJ;!1=ZF{Sl7mT?lsMfqnw$S+z9oK_u%$KOe4qZb#L>Zlxfx
zBM45IC~=pz&dfPo7gtHFSzSC;kyYF;-}Pw>zkXo^`Md;b!*#fbX4d#Rl2Adm+cMwA
zPj&+QVSEEUw?FoT`nE)*znfKhN(!9`H%B9%!;VLXQg2u$pFj$aT9;URjqo>Rq|)<q
zb8F?&_&jK8-+BS#pc^biaQ??`zKUOA+P%wT*9J}b==5m*bYIcKih7P~nEpJa_G>BQ
znB2x1g0&Y{hK)7xHqaiZI$l`5LDHG_AFo&6uMXR(V|I|5QSj5;C5~4-R<iy#37uVw
zHrs;AJ}HlI*TPDI{nYJObyIXxPUKBh%sBm7%WcXi&fmYguk1h9?B9)Ob?3^qDva5G
z=)T!uZNzpzzriohivG~&-OPY;9r{pR8J7Lqm3wQhv%)IWa|4fK*zb>!W?^`2g@OYq
zvJL4N#tIllJ5f4TPYY8>rC-;_b^miDc{qkWJG)G|2={Gn4!mK9OJiC%ckGW<-L;2r
z@mt#^>Gn&u`{8Chk+hJMIY{HP(#}Oo1@4y9I{M*8fn{jj57?>~MaKK?GLB+Ch;lky
zLQ8`?_UPO=pYB!mg9P=D;q@4Nr@n{Rf{2P@^7FMUaB#Z8;`-dU&-45Z>RP=NL@xq)
ze2Od3zF9pI_EeSbo5l+_If<B;HwPQx%U(T-ZfffdO9fxNST=}XiBoVEI`L-dmGgtM
zwzb?eb}GTCW8}v|!%rakG2{LW-k>?{!Vg<qs)hZ1l}7-W$#N|hsB`QmJ#jYh=_!3<
zIQaNNtqSY>j}`3G85V{430$Uo{w>*-&PRQ@=R)$80vprMp?PFcrdLEIdq~T*;tSGk
z9p>eG8j+_k8*?!|7i4roTrs3#kPt6iIQNImGT%Wx)XiXYM`GKfiRJuZM!y64_typS
zMJg3polcwaho2k3NyqY~j4}I!6v`LZMJWfCq8w0W^{LSh&}PbI$1nQ8oGS6Zd2zj#
z3T-HYWjX8)a`1Os<(>J#2e|y;Dg)~tXl@oMt7ophz4wr(M?3S|LW%0x_mc!dLG$(0
zFvgk~dQC`+a_T&#aA&~giTcsqJdCFZxbak@Th}z0J+Slq6R8tf0&<{KRW?;`s^P(=
zHVj8d6q+2kl{_a{{8(DnR_i7mPZPFbX?5Z)_)TlLXnpm#!S4KSf>-|*t(j_G^9VxF
z8-f`7XX;8$ieB*p8$Wnr&G(9|VX@%CQ_F9C?DININxk*P-;Z$wW2(n}+WepuesHlr
zNy8Uw#3$fTWpV}%aiM?1Wj*vpB8IOpUj@NFFD9O}`mhPipqaGmm>C^wRFLGDI8U!!
znMYPcleo!re=ooCX=FOcg5F#{nnxZFidnBQO@BIXK(Y6QkH@a1rRDG~`!qV*m?G7J
zF6N3)(3s6L@r{<hdql#o@?|V7MqjW%g8aoaEq_v(^VV_)!>?*>q&rs1wIG7eLOEgc
zsG?F$Od1^p*{cc=W539sk0u-lF7-{vXF4dg%Q+Ck+u=jW*>A*j)Olbg5|E(A^$B)G
zkzSAegDt3^rlv-{&~ICnO`JsyO6+3(P1lXy@nzU&k6z&N)!@F1v(R#sUiMr)5k_1&
z>W?j5RjLTg8##19UNs)*Vk*Hbg82p>^R-(OYxo^dc4#S7>CsgR&#{X_N<PN8^_icj
zFDx&y_Sj8Pw<`C3Rk!ZmWA|;WyCboCaJKq@EpP4fAj7(qM1$|{h_=PUT(4s>`Uyy3
z`_<O2`B~Jlu)kB_Z^uu}Nu7aDDMbuMD}{!s*sJ0#bP}f2Zo)qaKbjrXyfO+QTJD^?
zPB<09el)>7d!fDp&4#uYUaDPDI<9t|CoZGcq#SGVwHA|QUWTdl5U8oF<>lns@-IXD
z>X|dsxsTZDwZZ4p8tb|sWAv>YTZk<k-(%hC7Mwqp(;C)OT||9ToMTo4O+AidBZQs4
zYAhcFIUc+3%v7sqUCXl1;SX!p@q-L6Kh5ibdkv5n68ye(?8-r}x;3nXrMGE{0$0nV
zfd$>;I%j<|Y2)2YCJoWEr(9KyaoWDT3iUe{!>7H|lMcpPt5AvG(Bxh5@%TSe_Vbed
zRvm%e=ht8oLiR~u{J?g)lX4Bof|TV?Ma_@Krwfu&QSL84Nw_nN9i%cS%89QOaA)!g
zNrzlAH(LKbzMwmf6aHo}^_4mK6*lDRRiy0fn=AuEf@#Xr{P*Z1Tz!TKyba(uBkwWQ
z?<zqDO$GhZ@5$e1X=CkCUh1zX?w_h6D=VgGe3?$<TEjDG#_;!$lyC4G-R0uoA}<tD
zYrg|F)S>(^oauU3DfL`*zPOry>QDauRZ0SVv2n1@Pu%22Th3YQXRf*zuvI9f`9-D7
zuf*g8M92l@G-nIhTH=^O#C0WB22T`jaj_{SVl^}sj$-j?Hd;d0tD>N?rO+?j0)J!}
zFLpQLxo$Ar^iB3pl+88_H($;*@zY5@Kbw%4m;V06oRb=>?q)$p(Td%t+amMs)>C$r
z-KV`(71NG>HvP4INrUrt+0rZya=b2(LYD!hN{h7>q)6v?n*z}RG`3ZmgyW+#7$Xvd
z%-`b<&bZLV5r=+vbPChAR?i>J^u*wl_VqzkJF4S3cfE~O;MnYt?}C3Fi9F7iNW5ha
zZvT!vFn%yj9;2yhlP8{215Z3pZ#6p<(tFv!iG)#ZGVLavAg&IPzhdEuNFU#8<H=Jy
zrC)uj6gDt3Ddd{ux_ZAa+nTy@q8CNkN+`B~*sy^r;)?SRgX+l@=cjR<ldIakyQ|wd
zCq?95*PCK|@#_WeE-D6{82|WMF?nA1Ay`?YqY=(XvTvGw>&e1ZI^WCF;fO1|EE7F&
z%JcS{4Eis9TRJp)BG3EC`t;x%mQz>tM0A`iPv*2MvbCs<)_}WaxOlt@y%eZO&rl%%
zWNtW;$!h%56xj)d9f5PT`+M9SOxFl>({PaoNlJI&*x>N03yc%yWVbNqJkPOO8<)<P
z=s=*NRn>lVm~v2FDaHXw$~lP=s|<NncErxz|B123eezkjoAkL}KlXQ*cM<G3$UkPp
ztxuOkm4^53r}G~~6ffA2o~Ew3ysw5Tt(3^l6dTyTPp0DI9&XUEjyQ`qHvtfFV9I2p
zE1^9?rn5|q{^RMgwv#oODWdsdm)iwQP#D{9M?oTCZ)w$^=dyA()u;-*9xqWo{wZxD
z_AEJ4f#UDe-QVwP4C`fY`3Q2IdD9_BsI8_Fow#>h8XX0i23#6_v9E1pAP3&VX>>yC
z>$4Q0Gz%zj)dQaM8E(VU!A^#0&Ti3pd=hlf?#IO!k~j_70~v(!V8FU#zGhc5A8^OZ
zIfh1>g*!{I7v<jhn+)gqTl)4X>v{Vqp>OsO2bs@hlO{vUj&~*2UYY{NSiTHv7o0hA
z*AL~J4;-4%zIv5Tbz!ixv;3jT_Jd1f-zWGwQVSeO4pE%|XLLDs!7PD^VNx5Q{~RJ#
ze?~R$-=&Yb%MzGOW;nwqGz<zEZ*ac)(q0;&N-xXN296jz$WKw7_A)G!UoKNs!^h1h
z3Y2}4(zGv!!4M)s1}LfFOmQgz&t76O-msNM9HK&ya&y|<ru|B?y$OT#blc#fqp%D<
zF1;sq|ItkGKJK<6h$y<Z-C(0>hKk?+=4ZGJL!YW=-#eun)2Jsqa5^~zBMjmMhl_GR
zd9}H7)n}lp0A?ACYSc3oJ-GEu8kHsX5;;I?`!jH2z30@=Kci#`)J;m*0uWr#pQ+Y}
zI-ju=zZ3|Xi7M+_TpF*hHiR?E!3~|kC^fE(wP%XQovwdOEW>E=NlsIjm~YRPulkAv
zS3~1VLEZHn%#e7QlGq0ZqojXbKRbtMWtja0GaQ~j*UIu8&F%%h2$pvzdF(KlNk(@X
zasNh;))iP6rYx7L8@@Mo(Otw0*ew*$2G9eVrrj=cR<>YOnU4{MjBh}-q{zxw!QxF^
z@9pnRy}t`0AV<FN_F#6NC4tf1#N{A+=n*^Yg{6)4cxnRA!}ds>(zXX-vI31dRGKrz
zdd&AZk{geo6SD2;%#D$ubMtw<in3RvaJi$6{HkI9zU7`zOgeF~z1jh1-LrPBRR5Zu
zZnhq9idiST;I~<T)~LN$w{BXy!@pX<X@P&%Y~$CL`UhDr=8GlRqPTvoASrjPU^$Q7
zYwV`{<v30>hRkrwqS<oP!5bJa0jSpASgKb1K*bV^{Q+VmR(;0F`8N3#tm(?MU%k^@
zi*lbePeyvTjJS^t^L-ksqR0X-rU0Ipqs76qIt`9%xkjFju$%EVKl$race^KD^88hD
zQU(ozYVx$#ZW%IokU|dxL*L^j1bgw8{)>i&uSw(5)4nl-dEAIcN;AbuNV}{Miqq|J
zj|&gGEJ4O)SV&H1Zp=rgfzx2PPP)>=D7no%<<Wy`U%OvXzVk_+a1N!~pIrC-BEB*0
z9qy=V==XkpqdT5x_TB+KLhOSVZ{{<`jBXJgwoh=KSJEyRpRD4BQRnFIi==#Xs!KJ3
z&W529vF#<UW7D7Z0&#M+Ja3kqA$>YwI1<c45scW2w<q8oOtcFzg3T1uqTbFzaN^eo
zjbbmW_yu|q7uPO;&av!2%*e8QPUaS=s#c^7W}kGbi+AXVgJubv`Ir6%Zy8RvOFIJD
ziQv9goQNtBK?w*rfzJaef$OM*f<Xhd6R&t|GT=H|pO;}TASIyn;Nu@xnCnjowkwBG
zBCtoi*UQWy;l5znK}DbNcAoM1nV7@v6qZC<Wog>>tCurQVU~0J<MrDs-exh#)n^i&
zRdLHOhf@uaq-tm<vO;5q4<Uaki3A%$a!==VH1Zhe7Cmq=QUvo_D&lFwyvdsSSWU7+
zx)u22gH~RI^m;YaX4B(}Ky*(h9-OhagxS5vJ^>{+2JNX`LU$XtzDf?*U&-b(#kRn8
zOkPT~>dRpzdkZEjd<P>yVkT|}=focqEpNRSh+v)oEqiOjX0H0jS+9$~n}a@VFzAEL
zOE_8URN@@=`S@E}bhxGkW4>2Fs}Zlj8$LCDmpjT%b3;WX;nn(2vnDT_h~@*#@<lpd
zSpxL5*C7$bZ9Uxv6JpMiUkJBq{oI-sUifqE9!38qqQc;ZJ)H;IW~cBHEURoJl8urc
zS*hmW0=NffEg^TL7kI@r_5BAvjnSQ}G^g93O>XUk&~(%mx-!3ZT*fNdeq~0x$BfR}
ziPEbyNn{J1YDC`wa|`J8y{2nB!Q2W3RgOaxLYN%KmuU9huB@b5JKb#WNv4w2@5&0S
z;eTfkUZvYYbJ=U8eA{NHlQ>?l5{Cigf>ze6DlKjmEoj5BPh;PrQlqcUdt?PwagG;(
zb3io|+91<-D1FXt7PH%qsL^XWPX|Lj`m3R(ZIOvic1MX77LC==>9W^&{`ln|!E~AU
zt0tJzD8S|McH-VXsYe9P3+nk7F+V>H_-SeBk%U!4duiK#v`(Hd*@R}b7?qw_yP|{1
zK-$OK;+c$d^s5<Ge+-HNgsQJHuL}!y7U&7N)g3x@KQ-5x=NKT2G1Cmlsjro2Qub*{
zGWJ0}+xjq85$>ppH(WJ3>@AU>Y$XMeQl^wK7RpT?Z%c{Me!~^I&dvnISCFf%{9&2=
z>8pWXUpoGW=x{-w&jNR+f=#SjM6G~ywob_xdK#`sDx;8|aM^8zeevhzZ)Gs&b6HsP
zo3wPDMNHh_Rkwa}{v^BsF)8416vwGYMF=Ue@;eYLPS$Q=Nj8@_8`o#siKx?N(nWIH
zNE5YvtN$|ht>!w}t6iWo-!0{Sgg0H*fvcy!af*|jTK{^2*Ejw7UmcVc;|vldcfGC>
zeHkuXS->nQGEbXm_WEPZ?y4VKze%sp-}V0~XNeF3ZKg$2`M=*ONHE1zFD0Fa@2k`6
zpvsqiw?yshRo?E&S`C#dbLZ&%1otU`;aFnjTYLA`VI6B~i3HQ8LRB$2AxDBjKGMm)
zgDM4$yx+hOEDu-_H)2%iJ7T2d982JOcp8~pmHyAnJ22_<{dfW1pj?0tv#Onk^{%na
z!1i}!UUlf9aMg>4Gl}PQanEedY+@Pq;8MGd!omT&)eH&I2=dtitA1i)53Ww9fw!{z
z{e5pgD<+qD>l|nKAB?7rOAMSI>1wb-1gFTI)6Np6B6UVHlt-rfK_M|(kCQKaL-E&?
z&peJbsmblsQ@UM~feh(2jpPAEdvd9~XJcN~Uv<~d4Hf0&xKt3n91a^eepH1SIogbi
zIWNvWdbhA@7ESfJSZ+}GNOF9vi8t4Sut*Wk-W$N|S1{k=`_&M8tbaS+^J<Vo-Rfng
zt7n7Q=u^e5bQPtl;0G6x*i;1{w%iz89_W%WWB3Lfe%?$(H+SBTjS30j$jcKgPD}Mw
z73O7UVkjT4tERzj0%K+~$T}QI^G#nY*u=z%A~Zf-_I%{SV}Z{9dL!}lMR|ga-qz>B
z7FSjbV!qgn^4eTc75$IJf*HxpHXqL0O0GX~7I)U69K>oj25i|_)#XkWY!SQj!(2W_
zNwX{{iXbX9bVT^Z6h8NpKN4xDgl-k{s8K?bi+U-Hvpd;C&v~ix)0Zi2W=vj^X%3^9
zCp5(vsYj)xIB*$RXt{Owm47Urw;CzYl;5IW%h0yeh~*79KKa9&cerX0X^?&roRz;O
zpYaSW>6sY1)tm|U@zHY|7`n!BSra`~GZ~qdjlsC(PaCW;?2pdh3oas<>+|^vH>j;g
zs|C2Om*-1<2w2H<#eHgH&eeYXts*hUPmEyKIP<U|G~YYq{!pD;vTWa=f)!Rh@^i10
zL;tC_-o8cx3Mg$!KXQwRY?#H4m~6dwukBI(#t5c-CY7+=%YB@fhoLd(ejNA7%0I+-
zts>8QgOxM)pm_H93A@m)Hw#2W<P{-_yY#Tg*FSs3YTjG=e@$uJtXD94dpnm_$cS}|
z&QMje*kv#l?%}uzM1bRqm2zK*h_SXs_OZ40EWEcbF(ajq`_!Wf*&rJ8TzD<RH91<z
z0cQ4;!kp<VM0r~*W(koHr@01MS6@Akc`Eb*#b90Oao;xzM5Z4?pp3daZKZt8$LjOw
zzOy{NdSD0cJfYBb9;aFQvM}H3x&HRVT2}r!<c7A`tS>gpt9br$vQLrzta5eNBtw4t
zJg@s=E=oee-*G5ueY<%1cS!BEb5>%vn@?!DE#89WaN0^SYw(7MLP&o7(s=5pE@jld
z%i}PSLd*}f8;n*LWaonS<DCiwZ8mdrK9LWPSsI>tfjNQO?y$|WR}m`Z+lo&43B-ko
zN$gPCd%bwS93|X0)V@3kp?Pe0W5RF#Y&rQ3PSEWy!Dtg`pezZ-<9~jQi`)yq{p%C(
zVOS~}S<`<XwY@;aHTm}=oTcml4E}$A3d2R?5n9qeUx^b`&2a}+`M>X+q4<Ep_V?Am
zza8<OqLBahonn~(FE2+jP$XQS{aNbuoZFG-VfQdcG}p=iZ92qBuH97+k2=!qze`}a
zXjOk=T8N<5fNoY<b#Jw$5Awi}{g(Op(G0bJ8l+q}y%3dWY#sy2zZTqmeK}eGyVbBr
z#XxpToiG_c9ZEg}9NaSHcvfv1Y5U`{!EsFrOyuZEA-knxl%tmpZ-Oxqqoii8+Fb>b
zaR^PH?jO&8o;WO$)qbHVaOe5{wi9;U$4NyZBds!(X7!9h{fbMIs3}YZVgvO;s|JBq
z9qodT)_q}Gs;56ht<JXSz*!raHs^lH5Uj?Ux=HD(m2S%BKkes;^)k!e4xFV6?6<VN
zT;l1c@Ol5Ejo+~kRMTbrB-z;5SXe$=Pg0tW7a5UC_9pQ3rigHDwF(kWS2`%Ycp+an
zLD(FEPff%u!@$VM$OKzuHFQK7D>MjYn*Zg&r}BY8!Zq{DL_A9N+_PA=)xKnM%b#4$
z?Ge;2KX;C?t$rFf)`Wx%tm?q4=3(?wp8L^^59x$ok$5U1Pj*{v^?q8EmKTn1&(`~h
z@nV*ima3~aps*WegXs^f%vPml?K}6KCQ9yte|ULSR?;M2+b(xRF~x*tqk^|3_ta2;
zcwe<K&2!gZDPvp1ZDlBa@TjQByFPC&ZY0j4SPZlKz<m6*S8e_SZYgf=%U<;xnc-iR
zUl*HiA}HV6&U1<>QLmt~InoqWV|z}Nm?pgsheS~ETnxz)uXe|V8sX1*E=OTAc`l3@
zIQb#^#ZtwbV5hSlWqqhtD;fUR5-C~GM%a#|_3_qdnN`1}+Zw@5nML;}@K>OLXqagB
zKV4UQb|%Xbc?=R}h09<4Hv9cmUMh-yXt!!!#`kRhW!Cf3q4R4b{C8axy_i)kO)JL<
zxYF_NbfOWisKb=zuQv`#Y$I^6*m@g=R>vlSxyJR9ymvfiUyr{fmf5JBdQbkqImO&E
zZPRYN$WJTu#(if(pj;|ny~O14(@A2PvrNSprppKAjjKCv&#I{Bij00qzTP^5&u837
zm^1~b%A9|H9?!WwUJRV@;Uod`uBF?3jnPdRfhyxMN8OLFzN@A21%^+F<Fng7ja6r8
zIeyX!^(=al{FRiW`@PYxd8|SHu_dky$=H@6)ei6wPpl7Dy1_D8=|r5Joqc3g6!d!@
zh}%C|W=;E8{CBSUw-}j=S6v_O@->{Xq!rD>kUYP#n|i}93^|UG^Zqxc-aHYP?kK-?
zzdXV0>s=(a7?10fN<+sc@&#+U;lhq_Bu*i3X13J!o*X?@+~sV#%E@}1GI1Wx*LW#-
zZw!RG&JSJGn2oE``3xD^{WuPd1a7^S;TqS~Ao$huJg6Fos0gy^sYDJ9tOtTh)QNi1
z)%{;GI-?osA6*5V&iN3}&3=C9!E0PcvuBsKQ&JL^@jQ+_u({HG^AF_uY&l-XI8bE`
zV!H7}v=_Vg&(i6<e+GC_`C0{PbljLXmxw`XsBiNv9I%KNO|TBd$oy>D*3#j9h;s_x
zFfGvLnTOWc4m48l?Cd|9jDeh6ckYpg5*b$)`%OaDcJ}4uM)D0TcEVm)Y*8^CPv&ol
z;E&~f99T~jTq1qdS74IHtNnw<iXd>jjj$SQwyN1T^x4N?u=#qHQsRQEDJ}6@g^*QW
zKzLYWWLw7m+=l6B+i^doKZf`D;i`*^i?3(qgzx!b|L2F)ym1>F8!Iaomy%9%QpyY(
z8XEZ2ynUf0Y#$}u)`HnvJY`^);wq@;daFDJmE5`|C<y&NwZ->jsUW;97h6Kq&_rxU
zOlr%*iWB1Eg7Nm%FF^OrW9zlS4CZZF*UXhBBp#N1P#z*p!tD;hpHq{Z@$C?D;%JUE
z(Da_c3vH-7<9Kw8cIm!1Qv+Vw^8VdF3o$()ZiZgh%(OPI;xttF!0V}J1B;r;5?R@!
zSmeVq>7u1&Y<RiO8UNJ+{@fF9a>2Q|M)Ivt!8v^RoMx&?qgTPZIHaN%v88zasPv3{
zK#YLXbCIDp^z5;EJeLktAt5GaAcj9u#GZYEOWmv5L0xu-y5aeT@R{iE9Nn*k=RzGc
z^$ydOg?eRH;NCvQJVfKXTnuG?BBYbAiL3a#&_FEGi(N9T)Mu{-+x(GzG{(CNRmc^F
zQr1a+grFsxauSNiDhOnwN1@{w^=~OnzBf(C(tAq<?)+va_q#agWJW;9$;cYc*XZNk
zfBL<UO9o*srQ_URj)4%-ixPZ}D1XIrzQN!TMLAUYO)=)3LzQeOk=eNTpUvT%Z~coB
z5YPQP{up#QQVMAANCp@wdRcK~kUK(2Ce=y|)M<GdIbUbN0=$F#rZcK_Urc{f4)I2<
zQh{|uF+-RNL>#6@U?Vi1?Bu5p4WIFsm)w;)>4MMx@;Kd_U5r+sgM67NDdCS?MB(`>
zy$5lvq3(@+lS~+tfw~=)jL!OKgO-rh19R>9N#$STR{dWZ#{9=F+YJUXRP8;WdBq(+
z4zsh(7-?opVfl%cObeJTyUd9AJ6YV3OS(00cBjA|X11S`BIlii`d=Lv6gRZoBNH>p
z9?ar@(KdogPSmFn!ywTzE+><%28Erk0_3cjOf7y-$qy0tK4N!OL(6`_PFUs;QASM|
zb}ZoG!j*9c!#6tOOAu*D4d2?&BtA2ui)p9E_Ya<c2f}|Gmdv~M<JX(r7JDSXi^~Un
z*NxW~c45}+wz+yg*hHI0sD@uLRfc}${~Q$_{$w$UW!e7c*;t7T^A_p}<t3@~$%MH$
zssO2K#?2eVTK}sk0OkkS9AAc3ylb`inpDMA7rB<r$Pn-kb#aMq;^KG=_#-K4xP(|b
z{5wRB($T%t!jwnoa(DcFM@kd#PGo*Kj~(@KcaHR>ekIJ1XK+5G4?sJlX^l&EyG5+4
zv%A8U{h=Y_L2D-^awJbfiuo-n4@xn|p#N^gxbwn?JrW%NObTp$(jOvT$>Kb5d`Oat
zI5vIVA~`67<PH{&#3^~v#1a7UIv;vX47qeZ*_njbAqGHfQiSt9y8qj-x^W-dAEl3w
zoji2D&I_Sks82}4kCK3SP5x%~n<DWMzT-1B&=6oza`s+l&|zE`)kfF`Fpib_W%i*d
z8cy~o2oG_{OrFLAhC7@A`nc4R-}xfx4h{~Kndz(Vj~3{}PzOyjj2EDIupf!5NM1iU
zp&=zjEta99>cCk<g>4sB)xO!)2Xtq~6nV7CD%HV{+IkStW3nQ3*u_e-Li5_N6#EtJ
zEmtHlEKN%OD64aTV)DH+Qg`>5O=c#m<x=8dtw-L);HUb+Da!e}y;ttaXZe(&Og=w9
z^=SS;>>yq*pu&n&c@iX=9B9N;W;O+W;n_!4z2#v2j!DKJYVM8N`Ua$Ffz-CX>et(2
zXSh@zeS!R?;vfz0FSbIxH}8ux@E10dd3f~UD@M`;DmSo=1)ir3c9#&j!x=qh0?%1|
zxj~lsIl-ab!Mot=%#}eJ+?^s~$G;i^P7h!If;Z4NP+WE&k^XwUtxdq+K$m@{Ds_NC
zM$?qU(7JQD@Rs-qfr)X%GocxdGu&`egl43{-r!@j;TPF<SOib|>drCf4zZ?a(j6LD
zA4Vh1zBE;k{E!!S11yQ&Hdv^xTAYfar2udJfd@;Lo^)qMCTeE*BJVN_YV6?$hEx!L
zYB{fb4TWdIU+=gC$STPAE-1rgs*Dw0lsucQeSP=IPz{ZeE^Yf#%W)GradkZLYNWET
zV3B%PD2)Q5MZ=qrz6Y)C90_lX>B%{_;s_Ii?S?D`^|e}_BwMF9Yf(qLkj8Tk1OAYc
z0ZZ8o<SYptNRuF6XH>wyT;$Kp)N@V^fGzXPe}6`fBj45dj*xyTB1k(pjR`QlHqpW6
zLR1}33QT(JVISrO4^O%C;*vSg9iFMQsNKGcvZtm__k$AkO_X-LlK=w)$B%m?<(E&@
z(WDmHW9iYr62I$N;8&-$$NwGC8vG2?)w?H-gGN5#&%zgZdYR)94c*Xnlc$liLRdWS
zU~-{{gr?p!lJ4w|5&KF)M*81$8)WDp_wQqVqVZ-r4m~(U3_?OVXbb78E&pQeZtWN)
zMKGP_Zx3BJ!X2ga?>}hw7qH#zy(+iPXkeO8E-rJJ?*5j;_m~GJVmm8Tzb!ax9$9$d
z-k4})$4}l;NZmq-Xj~ZO%VwLAN3o{Pc2RCjG_P&4{#s2dOS~^401bYhqFUC{(z0;3
zxes>=g^LwiXuxC6%NlSFz^Xe^s#g&nCr@I{We$3{ikmK?y&hO$RUbSYYcrN1Sd6T$
z3H%+599z(AwjfQ3igED7{McyLj(7G_)PCX)80|kJm{e@8+mat7jCHq865IW(xa90k
zKc;hY5T@7K7unDfR`n<L_V$UqMrfLYF3`<8e(<=C(pJ0h8u35kjr<zW3fp+@0Cdg4
zg9qP#m+X_c{ti2r_8>6++-lkYAGB$?jq7EbT<upQDAK$*L%r4fj`IzS@}{^iFmqUD
zzU(7p`}VDOW_v<4=*C%aOmf-E$((lW=G0`}J?Zc`lO{axuAIGQI>i^*VdOBX6;^Fh
zBFGUt6~fng7fTxM@|g%qSczVq`VHkBtU$Xk<;PMrA-)yP2*cVtK(F;gJ;J#lDsPgY
z{x?@1HNrdhn~GN1QN)H~#E09BP3q1rwu`;!aI5=$j<>YxJYCYB@5{@c8!+W;jTbY&
zn*;>nforCTJl#*KC)AZ>x~~NiGQ+)OuyFn3==M|Z5P5Y((pFCj7;VYM64Q%vJNN!o
zey%_F4k!&)r0#WL9rGNOyGM0ddRmiX>vwd}vLnHoz%8l!U2YG~<_Nz~p3U*rWEL{(
z2esXRCX)%(MWpTKpDf=ktZ6s!FiA2Z%_~^mG`3V<HGOwb&s(|!x>5Irl0qJ#w6^pM
z3B<R(lX|1#Te{Zuk+rLNC++4vF8eUV&8+x+y|2Q|k;%P%fwzl+cY8v`6zHsO3~TOU
z4{La8wy_<qKl3c-AD;hZ_5NFdMh;O7TKr-GCZ83<DJ7YBJDW-xPSr};pbULJJxQ#6
zuAqR2b?qvSo1=OG%BUL>mko;oA4;pqe7LwmVf>3gnn8R+&5K>PL5q+v8?qB_i?QeO
zIKX(#n{w5J`U8t)Puw}Y@y0nh$XDJ2o1J;|Y&8*@nW&N`9(WwmP^(SY9{9}_)T-<&
zC(}-ym}9%Rn6$qIrCgGss!j13Tw<uo@+`XgRyz}=)k(#MH81y4+|~y~UJapKP;pYk
zhrXFDw~0N|g2kX<Vfo*YVEpw4-6zyRXC@v4l%^p2KS-;ZS)BiAsWh{EecE_)bu_GM
z#wh&oo<QAC$143uUUuuGulya{KBUckhQlp4+(a1HUf0#Ig@n7eTYDh>6eZ@u-m)rP
z<kP36Muv0MVXG-2l}R^wVy5!kWmYW#G1$_kK6!`3)?C4WP`zCgQzh1xSgdD&X-9`4
zo{C9V?*en+-bh~T>MxO7mdU->6$*K?KJdBZ5yDqFscnWXVUwM)ubx}gTCa^~40kO)
zDSB0CDI0qj+Q-V1?CfKfTX%i2eaZD16o;QyN$h!B>fZ}z*io^op`a58^)|f>EXG<-
z^88A9pLKZmzHl@Wk4X<RYk4_$h;n~zv=|Cq$rR2NbQHufl&;EfzIHwEx;U~q%cSBn
zzT9smE?cNhYYij|s7#ag5lv`8aXH#hKXalNb7ZLQ#6<O`{fW^LbYCf<Dfzt}{>fn{
zv%g8s3?p5p?*_vLEshb6iEsoB?s)ze3+IoaOmAZj0M0MY$urPtGTe-ozAvH>=UVIt
zJ|wvOm~Zs!P5s4Ifm7pEWxFH_DsC3GD))FTh>HepM5W{GRQ3z{bcJ!<6!tD7Y!n&)
zxPV`&p6|SXkkBQUVRjkEuKwi5`y;@Kd9LN8AG}BjMt<8NUwbSIs?U4=_IRHo9;b@f
zX=@tH;m5eHuivt6m+hG{>lk(n%7wS0|87gri>7pf62n+(b-6*PjC<pje)8^<e*(ky
zrDqh!{BC$;kKjRX;jGUX5h6H-w&5M*hG4Z%5W9NWOd-UJ(n{xW+xZC^Lc;UjS%fin
zmGN}~cU+zQq@XgM0BJJ=zNo8JL-kAFCXImC{4Oi2nJb_a<ZDul;a(LAa%K?~rD9T&
znOI19EB?{nsKHkv;{rZcPY<KH9?(+ez56=*Me4im`@<Pu8Td^CKH#A#OD;YS`i<=x
zw#hqoOTd=L3faKRP2ZiaTDA}Iein)s#7waD)wtf<@}6^Kfle_|ws$n-iwhPpQ)F4p
z<|6T{;16?~eiEVRd-bQr3?n*FKg@aVA6EOcEos;{JVcz2V!m0+V`FYuzLIBW2&3I=
z30bD5F1kXVB3>;vvE~DA*A?hZ3azNGB)sniShpC^5`2TH1U)a$4lePZ9SYStK9b#=
z{goI(BpMt-fn0Txyabv=CZ(l(r+X?JL;i;b=SDukMW|6wATG@4dewP`F&orvPU5C5
z7}t6-kuPynBBDf+jIgnuQ&P=cUm@Mxcut}bIQf)X^5_l6V+M6*i1oox8+4dS!|2c#
z*?GTHqYbZ}L}q-IN7<=QO$3@hvM{rvZkv=;y!wsCQUe&7^PO*e&KhqiA5~(0JB6Gr
zpv(MOc-c|1esCUW@a|S86sKK6?eNVr7)&u&<StgLc>4b3GSlWuo5QmgMj3g?iajLb
z>AAQ3ffUl0=lar(?EuA%|67Z@X<w2+wHV^8LoHC%98|7vu?Sn@RCrOrG{AAw)_04b
z*7rQv8ZBVOKHYIy?lA3ti%l%*G{<l)8G%j16d%guy#e;lB>+Bt@^%I>#b^e{m`4UZ
z))<QzaZGD@%zj6t!{`)u?N@X*MQ#3IlsyY$IXm5}L#U8mOq7}{;&ApkCd*6!7J~(e
ztam1`Ns}qAKcO3D6mj0cI7>^KZV18<>2y!dilF4uZtAsgi5dT)=LY0C5?66@bRCeF
zah~GjgThWFSukW1uDb@u`h^$TdQ`MC`%7$vi<d(RyQu6zx+j_l!O*fe3B#chU;Rjx
z)BKYVJP;pU{2PR@@9gA%=p+*$@pPVYrm@Vhv%CJ+mo2NF4uJCo^TwSQH(uk_VEPb#
zXT)H#4YL!^XY`zAlJ;&I4-X7pq{#0lbsRj|opyt=|3Go7JHRTMKEzXVsgCEr(lh&r
zTZ0q(>YGB8q{m(#-{C7lren@Auf-5*=kb7K6fW6EX1?!gw}l_eO7AzJOMRymCEZZo
z`=$_jvN?<`;XKzu5_v*eob=8(gjxqSDYAw85a%6jWzc5wICg)S)q0F(B#i*tY;$OT
z1YZNYLFSz#)6B&frv>|V6xh*k#V7LKi~ni?$=9ohf67*dRYCJ)jDCZ@`T9_LFjinD
zCoezcYkr>dGnRsFq0!Ema~<`}s@6N7?goTh6dFo6_7F$u);3WzA7Z##p$w2zW8zWs
za<`=2(G&PgCuo6lDDWk?RqjV0G>ndta`gmDr-6t<(2AZ#bmB?C;rngOy^3nvWv}@L
zzh}>$IbV072JW9VKg3vcU+E(4d&RR%xJ>fyZl9UJeZqZiVL*528I%I}oU!J{MIHbJ
zWSrp*``OPAxaux1WFFy>({R4S(@jqW9RA_slb@eaRvQrm57pSHh;Kxka_xxx^|AFy
zUq(fAf6)E)hUcOdoU1v+362b=rRZ_q9xEIQy!>*+)nI4b0=c<t&7doBXZElA3RK3s
ze#(ny2g?&f*QifsMt}lqbuLJ54T|Ive4Rr5cz=P%3loC3^7q|pGp2>ZRktKGT{p&D
z+a#E(@SZ<;hrM=On6>vfosjSDhUrx6pl-y?k$nt_aifb-(>&qw8M(i(z5>iEp8k?h
zfg5LMl{}agbxr~!CLwGuwprZ0Pj%il@HGAzjvB~gt{WwGp$6?izP*}HXA`Z?oiUxJ
zD|i27DJ3{jlqnCXjWcY>N?=H9wi$ffZ6ao_Ug@0?;rsIVEmkzdvNz#{To<;gF{2Mm
zfU)z%^Nk4vdO5+ZrBK2}gFaIcA!;p%?oDa5^aNe8X&VWO!sN;ygvY&E@Z3RdgkrW&
zothAo_f0D~E$w8vjYfj0h5LEi3pBQr52`!)&LXGrL};3PvEx!22g9lm9=)F{9~GIN
zoj!;N`;co;<rt8Oep{d3nV|H=psV}i)PF>KiT(+-=SZ3hlhAi@rF$G&*!D+h%@-r(
z&Yxy282Ih46622JlcFSSnj@bqvjOp4e1^f}y!OVu0;CV&5d-A-;qkAi;yO7#uKyVx
zMOZq2(EF12j|XgqPnjPkIB#iwTE_D_lw0kkpDl9u_<*T#W&(1ELM}!C)a$>m5f-`D
zgTGLKi)*s<F7Q8_#X?x;ko47Gcm3C2>ni{M!C3kK#K#G8Rv?kfUIe)!@}E@;i(Is#
zZW_)}1vQG+lP7358d_TN>fGCMii+bv;{qa`O#&4&bEE6(^Lv~+MGVx`oj5FVc$A!N
zf3FBmP#2A(EvhfTQb2>;H-=0>{XbOSpCSU(!I4>yd82$y4zG&k&KT8X!7PxBfk=vP
zcxUBELsdGYE%WhPV;~AB{O3to&^d0=EVPCax2~pwsnim~d#D4cVtm^8Ym*~3!`YUD
z>Gis$W{|5R^8eXEg5+Wq*k?e^(QVo8Jqpe6*qeFZHdEt<{(~U^JlJ5WSTXofk|y(x
z$jK5@+0~x-kNzM<fo(lnXix>R5jmT3z>{}_wAU+5kU${R`2!OIFucg9s6wM(qQ1SR
zrl$Wc7f#SqYOxBGfzJ=cF6%*7QctmKIQpZcE3q#L(7?^r)wT5<VQ(A<I;xaq4+U?4
z#><z0obqj~4?=G0H1l2>RN6NeLwyhA0l`JTjQj9m2+$hx2P(i)Z~+Pe;BV4~Lm+wn
z&nA<r%^bXABycC7)PAn+9B3q@q@)6`w=_ND+l!r7ihzQ8u+*+rr#1_yB5Wb!1U^qp
z><nlj1i4d&iBCnqEK>)z_5Znlz9ZW2T&=&qDc*(lCh|dn2XHz0L$3_D1cWJ->faQ6
zF}uctF!5Q`^IqQnp2)3-)>+)S?1IemJXn&Cpt=I$s=2v2Se}`$^7suz|2d5xWxCLP
zEt3Q-@h<DZQ+DU0ANLBi<4L%#lzd-aUPiyfU_LCj8D{c3`rUYQP2URuvmWrj|9fLA
zs11UTewa;y#LBJrb3YAOD<+_P1iV1t#_j6jxVyXiLxpaUK^3p0Bv91rK)vmX?A|_B
zke9E&I+^x5T$%jk;gqBD8Bn~L0v$f_VA}s~k5uwrKrsq75rb}}y&j0cFFNvT!0}l`
zO&79O0q-pNnrsu)vZvtjGQ?e$n%`pIjb~+LtwDKnX#@Nu9{uuHf4<{hOM&15ehVH2
zI|(^?>%UvzPMEuk2ENJD=iFdH9nUFBLO{Hm)84^21%-X<VFPk6RtT6V#Hdo>#qkCJ
zj{hd66R{Gj%5tkC15MxP$L5&^NbugLdspY{83-|R5yu(NrU29<+I#=vN|^h%E+@{0
zJ@LOC;|WWCzl$TS0`2?v?qTRYkd&+igcNL7%gv>}WFa7Wyn9IP?FoV%ytMudh<^&i
zC7Mb40z{Zrk)Z@HZ#1cxFfc@o*Zy@xaad5qkgP+y?h~VEPb9x*9B%Xfdug1dpI>Me
z2p&jD)d54~67jV8M()2YYpCaVqL_)x68k9T(LV;VoPt|_19~0co3uh!_t@A3|NEk#
zE>FQN(v1jeKESjr0aW}9tpPU;yf$hwV3jffM}bV&8kDj}ubKb*A(n65?8N(EM|Vci
zC#I#@-)yEjH3VMljuq0A{qletS3BSR9~y)auzizi0&bhrNbYa2{C3?L!Zv?^?dA=x
zR%+e}co>~TdpM=}|BUF5%@%PeD$kzb;^UWD^lVY@L94@jPWM0!;`KjdBBAXYMH2i0
z{wn@4vIU=S2FN8(W0<5<a{d=&k1eEho}tJdL^DXd%!Pim`rjp7w7S?)cMi^si$#1+
z?Ahl4^LumvDts64s8Ugv`}@w<#{V~is0nWI3>g>e_@ZnAxzGtf0|1O$VLf*qVCdbb
zO8~Y*T$%st2q=(!2SM}O82ZBa@XZVixeKuA_tEC?B64@4l=Z*W!Rb0&?QH~m<#>A>
zd}%ys@_V4SYvsLM{SwNQ4|I-SMP1IQzL#e%+?_GZP{7&6<~+XvjQMYywtP14j3#7~
zIs<gwLN42)U;yagLqM?3tuw4~E!_?#pl;$Ph-8rX>Acud<F@|4HLwu?W+;dUewJYb
za1MRy=Rjcqejt*pX>oCpgM&lLsK(W@YIJ8Fj}2!DPtb1c2gm~+yHoL&QWL*xUvHo6
z&8DWL=mW1ozrt4FujmLHItSb3*_E+kllpw6!!!WXpWA`p8=Wts=|u8%ij7gn0*5ba
z*3-f3wjcli0^CDYpxS%D=ZwC};U;`Ep^jyHVLO!B43O33`tlq&K&=?s#m3TA$Jm5)
zBlSL~Xqb5aYy^Lx`*ekEhl7-1#D^w++dsgK&aPk1p4J2k7E*Xn<-&pI9=I4VE9Ddv
zejWvRy{WXH{HM3W%d!)3alAd4E^Po(qNgR7_K&c%@87=zXHHR3Q8p8l<U-a1X~3P2
zPS(9;x<JJV308Ufw0bqc0Br{+=NxEQ(-n3)RgSa3TA<=JtOk$_HqAR4B7A&VMqr%A
zfT#f5jfz{BWc?aoI9L%Zzvu!v@YU+5JC<{GUO*3R#j9q!1eWUlgLU8|h7{{p;N8#E
z{a#8Z`j~67cc$89xjXj3xvjE)w^UCvaPcVqied{gnTw5Y;FbiIE>P2BZUt&1Vv9Iz
zaqyaAZjqvh6#Q4sZsqg>l2O|G$nSI(n+GoscNV8m7dW!)eT%K3jUZEk>~*4?)&iU-
z%fB-v0>EE$ROHv0H^GH!KkHfwtL846v6=6<0F@7zE<b>k3Ve^yJ{gxKIl#U_0f)ti
zFGTAv(sWy}j{@1mp$ksRs$c@o%gb{Eb7VF1$i5!~2t=%Oza?`v{VZUvaC3dd*xQzJ
zMw!e`a!6y)TpOy7`R{XK@e=|>C1EY%;-_!ZBqWzg*sLMSe@Y@J85R=*-U5;}Mhb15
z7vtWMLp-Ne(sk4x=qPc9vfn%SDj$&|>R>xq2lmsVU<i9ZNDSSd?(?YH{xGch3A}7z
z244;W$G3^AfF17-HJ@?Ynp7j~>S8EuPzs^k;Cr5QZHuy@buY8Kl$tkS@$<V=`t3W+
z;isQH<|aW=JNeV{fl8VuP@^s}u;CzKt0#k}ZGI4W@o0OhH~8n(W=@70-N<n`CD+11
z^!xV`Ah`s5`-|7HkOw_Ovto;^E((}js#R-@1YC6{_tCeO2>hxC!%p{ra=L^@Bd8^X
zYX~G=&-aW%ZmT_*loz)i>@zUy=rJswaqrnJ-T)@iZax3?>(@*n9?AfMcbOrF!FWah
zaV>a6+founL79UUkKf66L%wR_r&$d!;FjX3I<v{zIE_Dk;pwnz$pVDA6meUe1@IoL
z?8b?bQKSEX_G;X_pdU$$jimHLv{V$v3X5-<a?JP(W#yHx2cTAwT1=V*@!r)d?Q^1>
zD(V1ADIo5wXL(7b14`4442q>PU=(-GeEN|^Z5CwcfE(H=dZIZ1%%>o}LAM3DRNq67
zy-NTQJjZPfpx~UT_wi7YIpRFp1<+J75AX&4dlLX8m^W4CI9r?HccM3%uN4~``^CpA
zds_XU94B^{Nr9w|uoLuw0Axq=n|Ojfr+@Z(k$SZe=o(3z(KDcCI!H916k1IBEcu#q
zCLip>A0QnsP^$wR5ValIxa9$`g9qBzfL|=OM1hy(cj2Bc<+Ttme+@vZjcrNE2I#<n
z4efhLd)HTMsZPN8c`LkyG8+E%aD9+i<ks)P@qB7|xuR_aA_ou<e(M2->Y#JP#9c<r
zziEz3t1OdAP&KMvsTrnJu4@<93UizT$a-I}0O&llpWxqkmTR_h$8>N7?sU6Ii@!r6
zeYf&*(BP$Bh_&Cpe*+ghBrGI?W-HOh&Tb?ZbzMlR14JR0R(_mrBOq*EN$D*AY5{<>
zwng899X7MCGe8a9#f9d#?4hAl=8av8d_nI%y!%GOlHjzh&6cZGFa~-=ZpDk6U=^ZG
z_P=RU7(IRau8{mVW+)LOr)Dk*YuGmPb!BTL(;zjkVSpopphXuLT@4VYAL6l+)IHhg
z@9*m?<y&|%VWfCwN5A+!eq2>WMWNey?n!5@Lm2+=Ky>U9O8*M2l<N2z-*Z>-S{`N^
z;^V)sR$WQKt`=Z)_i(M>XWF6apz13LZ4cP56UQiC0k}(6!4OEAl~peD03qN2PGqE{
zrU%1QALm;r38F0rl7+ChP63H4TNz&WzfHMIR;)TjhM;Go4lvkTP_j_~Qspim%Uwqm
z&_&nwLe9d%VmSN7+wQu(r^?Dl-t{q3hfe{G{F^F>-3Q3vFjZ~?Vhzw*z>Wc=_dxLv
zL6J~0#G(EbV~r93^)$c$S69J7`>`LBU?pyla7Y4f({E{D#)16{@*odu&|9WJwlL-9
zQLlf>U={@V7V8io-2si%f2eDzMGtNpY5>Ic$37SYLHG--Cs4U2nMv@K0RdBpX5f(F
zbOGH&GJY4g4Jeynt3@(H<__f}?c_m`^ko;Mq)Fghzsd4C?0!&sdDzSM*6_v~TyGBT
z#XtL_?HJqrmUe@Fi&Vh*2pPop0san3pBe)C`2}kc@7=}KQUu?E(XFwe8|Hg?&<T=W
z=tiM-;S|uEK-bP~I>Cjqx$ZAC19ZIwRBrTF1+9+a8~>}Ti-b6}f8Y#)9+xZNE`IST
z4TdM)jDUT7Ys7={6PO21pt)|5(CY3>utNZ8dGT42auZY!qz(OSFH#<9GD~~M6{94&
zg4Med3Cxea#{0M*+}1yPJdpst$zdontV!GX>l0ZSuw<ZtCORq#+=$Zw`FKGLXj4EZ
zmKp+$De7!F0NTO(#4#MY4OEX)&|<N44hqd1fX7SA%RI>4`NkVijmf;((QOz2HBU=x
zE4+4_*E3(;|A4X&1tMUyy@aCfW)V#*w03!paK8M?c80t5_O9%^F!MUpJH-FBZ;sP~
z5+{gg=BFio`6}S9!54l@?;liO_<?)YuW}?L^jd1erD6f935cdVPiJosVxV{=drnD4
z;nU1iIslTnCk}lu`x|{wTmaH71LzOQx?0_bl>NJ6wj(%Pw^Z>deugdR$8%jDa8Pdq
zwJxY#oaP&@K*9zE(7Z3AUy<1_?nV>n1G$z+*hgr!vuUXcz+$N9B4+tBK*us&;b3<N
z`+I{XiiP=ibr2u}$P!CqbVu1Xy>Whw{pq$i-@yv{PcR`Frv<#-5wskpWr)~~1^bXQ
zE!;BV<>tnoQ76!qc$Z@M;8G|+Z3e8Kb%tN1AMyl%?^vFO;`Q-LckHciFf%|>JAohP
z09wx$)~*0azOC3LrEaTUJc^A!S@^b?PPSk%O0?>|kKgRg;PP?J^oD=cEH-A`HaG!I
zP;+MO;mztZRZdWfiDD>(A^VJS584ac6$!O>ocwt|1?@Q!lpMLw7BVvbd?~%ng-^FZ
z-&rXjl_1DN2$&?@H%uAX{e>}q1!gK{UWo(p0U%JCiMWr4MypH0c>$$1<0b`csA<Pv
zglx0~dR3P|edac<I|C|V7dH@7cDUH1NdGAkT;!YMeBy|t3P9?DSePm+_dUq)Me}Ea
zIRM(`>3If9blr_dr*8no2b=#xi1X;J5YA-8u6n%<ibzj0&^@Eu@)4g0Z+9QiYs4jJ
zF$3y#72q2n%|UD3Im&qjK`+eJc5&lZ-3?P5qgQKS7aE-S00~t*YH_n2Z-RuYsfGtu
z0UtMZd%AaPbjSuYH7rLzM7s%o{&nrc>IaB##mI=}Q~Ec{Pp0~atIt5oD-|hesZ~Fn
zMB|H8QB~<<O^`1HNLD*ndCp6)t^g$s!K3s(9@P=}d2_zbETH^v#nOc{R%C<(-g0Z{
z=CSvAqDYdAI*6=Az`ymp^=e%2UuIR!d2_|___qrWb{cyI`Kw~f@U!E9|Iu?Pk2~t1
zA!xn?3{feL9d&-<r)BRQT3e8?__jfh-kDt%&!ej+5OYlN=>$ILHE{7FGIo#^PB5Tg
zeC*&|q4totZsXF+R!*j4qZhR=kxKG=`xtG4I8AB;MxfT4Qyxyi5p?$!e$QT;#=G>c
zf5T%Vzr;<&`ynT8O7pLzK--tVW3Z6p2jt77>!4TF4#Ni*T-l+$*8n1&IS`O9qCh+e
zk^^~sR&=u3g*5?0`ij39oTUEYo1I7Apa{`zu?B%Dac1<Tn@cknr9PlM%z*0Aa0}(F
z4NKfm4v4{5jC0yGlZ81e6+k{$RLLc-gB4m2!7FUg!Bz+cpxqQP;Ar?11sRZszKqgJ
zif#rdEB~~v_9LRm`!mW*NyO5(D@BkAs5HUeyp-3WxJ>e+e{q{~{kD+y1&Pca@VrI7
zD_~FQZrIP(QVySiJqCaOApI4HK9Jk6iJ1sg1rwVcQ%w%%0g39esvf=t6VTrX6oJJY
zzy^Lm8yi4salUz?bOTrpkR3vVyZ|7bxR&s2fr<POcGC^~Fw@Bb1_H1R0IY}sK#IQj
z#>l3c&Ty8~pDOlk4J1IRI`7-$aPkg%QS@uCMHM7MF2ibPfZ0QI07J|I{C*hM)5-Ek
zNu?>?EDZu`d61zHMb}O~RCO48l;9iFIb3Ev2(DlcI;(+tMAHC@XHaX={96RGybbJ{
zsjwS2kCD~}B_NK(`Iq^HXHTDQfci@gPVZEQii>x*9<af2W1n5%kE2!wsa%8fb*2<l
zvKD}fF1N6<)E-fwRnS4nCuKd<>f9meopYO<DgFSm%J9V2b_*2Q>ey6xw+ujt*hjA7
ziy}z0$!n^)=Kzq`20r6+V7$L>C5Al8Vr3SDwFKjWCPXH2=Y>QltlN=-;u_=pbq{DO
zIoob5#sSb;bQui?EuLnXh(x0bn_(<6>M0sF^6QseoxZy7)X@BQ&OsK*fL(Aza)IjK
z0^=i<l<_KF^tv)pWQw>R2<8??$0FB<3-3Zx{~zAoIx5R`iyoz<C8SeIL`uLyLZlH<
zK}kUb0mY(3C8bNHBm{#HK|~Z#k?s^wK|~ReZb4}&;m+56_BnUlJI4L%H?HHHJ<d_K
z-}^o9^Q<-3oO7*5`o&S1nSqJF<gL(&<0%J8<1LfCW)D&C6#+l82cYyC7tE)ds@Wh6
zl84FO4fx^;lyX=2WuHobgxgeCe(H_N^MI3tw-Cs$HAR)Yd4%-FK;^qz0pE+RY?q{#
zJk=O!e(tPX6ZvgFvH(?Jwhb0>=JolZp&?{y{iPY3GiQoj$C0Dm<7ql!ZqG=?@5?A8
zjaOBon(e9ZQDKyBnExbu@5`OY1yn$trS4bgvq9AoL=Ot>+X62(afTx?g>Ty>E>2s2
zk9*Gri*HmcXFnu`U)d^$eRu;Tk3xwS0amI?KW~8BXi6C=zBlFj!yKicb0fGEo0VF!
z>xEIeI)@G=A{SH#(dAhKH9*z%05TqJifb+x{rNOkVo>}hk6^tyatKHVHa@<~W}80`
z!{b^!#gO4_aoFsj)!X27-Y|rM>c>(W6g<N~x^N9e#l{-K1r1kw3eW<<o)pq70Ux9&
zM)@9&ImMrQ;#-9wYl6DM<ZS1&nvZl@;pW#eRr(jF7TY&#Y0>l%Y%F)7M%b3M4`A%d
zaG0hCZ3J9`-nvFBq0ZJ5@<kfjtSvoqXziHD^!D5P@-KAImPa+kN%XppK0F*RnYim5
z!`_C#Y@AMFy_hN?xL#Y$M>ZhXM;r+=%2!b4#h65##H&W?b~*byaRr-y+QV9jO!thJ
zbC7b<j0=?MSw$t({j<-AK-s89dN-fI<oP@Lip!2AADA^43!&$lg|~jYh)C!IkjGWL
zgykN#UF{yPiBC^+Ig6)eP$L{ZL85+EeOSo3S*n1Vls<JG2K>!@3ar<8ljZ>C1}%KO
z=U~o#Q&H<jELBxySw3>CQgHlt+idfKpGd2z>#nb&4ak;oAeo92tmjl@zbbgI?DpA0
z(k_q`me@XAdUvhKB{^bgmz>;|EAmO}V`-6-KhW)&z^F~}_&~4;xE*03Ax>3W-FWF!
zUD;;4+~xvR#RGhQ4qVe;8mJxI5+xLMywPWQ_^w&Tc96@GHiZ|aeCs(T3b4{lkKnCm
zym4hIyq|KE!|4+Bs(`dJOoIVUb#}a#^YGdG=PY-aoSu2|K4HC36*(~PV#fWN{(ztw
z<5E*UyOx0CnL{kclt}9?ZqU?6;JB+@tx<T3LMW8y9{A6^`*+~nO&@%6Km3^jBQ+hJ
z%}RUS+Og0fp4n}0W#kQPg`?fY^iwJU9Nbs%4^*{*%vj$O(~%2fZRENMr><W3oJ}|j
zUtK(c46uB6i=-RI8*1>A1YDK-xg+k`X9l4Js+AK7i~dv@dM|DWo=Lr0bp99q1s}lr
z=%t?}zxsGz00e_LrljYr+~+=1$8p+yIIgqP^!C0bm;QrVG?1l(C4D3L6zf@>>gGxU
z^i~G?5uKa=BDU4vzZhSMy2{t9_;3$Is;nQpY#nR;7us}ZTNsgAKulQDlzlbiQ(s$a
z6^!`Ps3SmvgDW!H4XS93rW1_hTu$DrX7c)M6!|q(JbkNfRpft)z|?^jLko}Uy2mO&
zU=)E8NOsoi96gGyxKAl&`gqr#xF8pW#kJ97pCpNTaic71&FwLF?zk*XTg%G;q7Y%e
z=#E4F3ZNBo&QDHR9;;`4k(-ii3-=Li8Dl-Hj3SB(H>_##mOl{eS4j8JXkuc|B++BB
za*%uPr3AO!bR@TF`VR@R0ppCU2T4BM+e24YKTk^ZlFW3-h@XA`zzn=zY@}8tb69Hv
zx+$y@cb+cqQ`gi_1e6*y9&k%&?Nkq@?;odO5q*8>>zya5fivxjze;Q7KiHU3IAxX{
zBJy(W)ptgJ7-ZJU@NuWk$f0qdB?g$o<nD!ztnb&pT~>P68%SXkWi*N$Taf)gSes!z
z#?3s%bQxM((9dF|?f&c%U^W5VRrW&4GPxBpO}20kIjNsWQ^DlXHJZ^O=pL}cL`<kY
z;*c<&gpJLn_*pK_+Y*Z|zdx-6!I#8)s97k_x2m_+%NHXtq{<OmOy<rPBnbN)J}De(
z)It<uNB-pk!WtWOmcM|@M4`#&>F46mT_}5r3Y@~__Ka}1T+IUyI4s>rlddJKITQ`Y
z!#vJ+_>xdXRL%3R?Mm!<{mnZol%Qn*&7~b_?VGMT$q@3J?0Sd)juRQvn~StvflWI1
z6f>5Qv)y#LiN>L>i#cyqPpEmSE1CC9Q02F<tbJc%N<8A)Cl+s_&O^Jic&S{$cKcR?
zT>D&s1lYDbw%U-8lW!(Vex>X`0?VUctX=WNQ<<laCLi!VJ6?*aRcKd2j|f3a3{VO~
zJ!mb4uZH8jWk!V=k7cOdD!aXZ;ZvqxX}Z0?XXKrJ=U@KD&c8qU)%kYO(5(pteQ7qS
z<X0&wgdV(I`+$G30yZutKWIrwYk6*&4%F3%;CvqUNBc~Mti1Eyqhh_$?svR;q-yH)
zw~4Rkl84VP$@Kfj`_!>zgIix~b|Wi1mRfJ%hZ2(i!ija7m5KL?zgR=ajbB)}!{T$~
z-tMQUha9d_kC+C=u#=TQs!;oV@<D;0pG7H(V5#KY8h&7MPJsp5;1p<Ap$?Ju6|GI@
zd12Ki>huYF^1+j3VM@k{&g&G`r8W%=Nz!I7MUI79lP~ja-5R+!kc0a`Cz9P)N7~#6
zYMHlw9ZGR7Uz<H_N+G%P8vC!<@*gis68PP2ldI-M<ww1X9~DrWI`Ws$bD)>gC4oT3
z6|=Wr&I81fj3C5{s~O&OyH&fD`f39sqo3>?{ZmiiB95Q1!uho`p0poojAmk+p7dTB
ze{$M;f$cH3G#Scm&H{HqDh74VYBE-N_gPzcw}#tX<T=8&o#=l`Twj}j9)PS63_-Uh
zkcI`$8LGDw8@o0NPoFs>6f0<QJ1S>-9qa?05Lb`Q5_!mGo@?MEDpmPvNzXH?T(J%o
zo@h%888!)(esQ<2S#zQ9evkz(1Z#wlh_qni0v%DqJwieQ$k<xvr(bWNgs{JsDgTN6
zo5F!czM(wo9n=ql-{63q0*TURpRZEh>}d_UL}{L5Pru)G0>H*3K09skKyZ_@U40%S
z7!i>7hwn=NL7>eg+ewkwx#`+XIz<ICZ;BEcg;-DBe#>iKcPwOV>gm_ZB_>ZPQQUyh
zFv+)|2pN0!o31{~?QQbu%gORioyV62g;|V(ZU*aVZh|pT{1-LD<)q5Xb|Wo`z)`tw
z%)9Ns7h`Uemk{s!)J4(1<;p%vu5G@u1u@CH2dCc}k9ZL;L<B&I-^HIQXh4ZjPt831
z<osHEV`9c99zj=Na@3g{jRESunNH0W6n|wc;SH`GfzPfst{;(RvmnJ0vIROiZpOYq
z(WeG!l$f#S^GddN0t+}|X{;kW<FE*5j-my<eu^IRV^$P06cfk`p%fZjsG_ZZXCMl3
zI9O*&imBiD1i}i}9LXpZGbKhj5jo}V&g4>>`6o_0YC>r4?&01{wFm5IlCo#lkEjS6
z)mxjEESP?6ni24TvQZ?=YVN#1O-D^1E#$_dMcY%F>i~=qB0fKja1_30_yRfu+4E`F
z#Hm7Ud&oFxN?G==nb~EiTyf~7;0yP5-hBJioToM_73B6UD=2$3?@xbFqOCR0N1?sv
zOf9vwXx|ztRe4+cRaD_GT^EQ&b?&HqAo%H52g{du_}X4U$GS<12i)t^#_$BE@9|Zd
zfqS_~UfElw-#oW0yEmTq(CON#_YKARtR@V+_FIyCn@!f~FX?Qetq}978`xDh+e}tF
zY8gbwtQ)qy?{fU%8soKx$57M{_6jkOSj6ruo8NM*rfp&@DQNKql5=YKa9Vv8ZN)RU
zks$Ia%HM@cEKNt&_WP`Rjc8;xkZC>~X>j55yE8;%sy<|L7fng5JtmwSOTVw~A3JiJ
z%hOgen7xGsEX=iUblFlw&(Owa*~cYgiWxqK7*ve1O__fmo}_!Z)&B}i?nK|@O8dfe
z<&{kmta4f66`J%CmF^P1js{BCwA`HS=MOo?bCW~4Svc|fWGAV0%NLsbeJJ!ppM|-Z
z(Kwg+dMcD0ZG?o2Ivoi03(BPR?V{4vr_`Bh_k<|!Z-4TTBA&5h=-qt|xd0Vc+PAEH
zeDBmm_U<)aKT+zddxPp_s3m*os1@OFZ2nSI<bN|VGK7wm;lc=+aX<`Lgjt5q{e1_0
zrQ3skgRv3ph?@2&EBw4oRJ5st<x`eX^MDrn&hB{fC+*IXLhX-80<@K+F6DiBR2{$1
zrJs{9ajX|*phHtNk!V<4BpW*}rbm6g&|I*2>ZiB;AU46wZ?!=u^mK}B+^qM@>3B)=
zA@IuzcqkxoaP6Al{2BO_8h!FhU+@}fMs(jfQ+cqqI`IQvBj*HDPbU9$jhY3i)$o8{
zM3@}7;D2lHMk|T)DTsx<DpHC2--?kwxN~O<2gmkm@5FT%W@rsYROcSKU1H1fr82LU
zznVDlB|6Ho+BKbtv7FLvbPgN|IklDBrlR|Ks1Vq{?jR4Jhilv1@;-$sLq+jmNi7!o
z>|16>1NNQjZ<vPiLS2h_EG8Q*57D7cADSqDrUtT#ImCCB_r*kOjD0+0u9F!%rvJP-
z-yZy|7qzc4YI{lf6ch8;_A~GH^~(IY+{skgEmKAI=E?8}kg1_eXBZ~Ak+l5^gJwh0
z<WX__6KkCJ_{q*gzZ*(Dq%ku3c6)Mc@?6u9MMuHGn)3Iqjxry<0<?Kkh6%`VXZpj^
zI_HYE(L!&BrRje3($S>Q?053FyV1@j!gBWts=;fktqxC*r+4oqx~bq6aziL-i#Xjh
zTzRE&Vap|2f{8mCu#@$!XXA6^z7OT)f6_Dt;+h>6=x0qK!`4bO<_UXllL~$EQqgtH
ziur*|_CXS1zq3`TVW$zjK@pfsTgZAZ!;4`m7V5GTFb~>n=$8RqYZ7mN5UfWzcJI)w
z7hBU?cXfTuow`roGlr;8nh4ZTs86>`Ec*No(_AaadYub3M#yv&M3<p-QqT*dXYs?S
z^62D`MRuAy)>X;22sW80FqBT$DxXw}31Qs&evQ#zt$uEMh@dCYuKn?iJ(a~naLCcY
zJg=aRJ6t@&C%xDw0#z-2ZE0U`H-oYIkGDs=;QE*e{Fc^y_ll&T;I-Et3m0bg>>$Wq
z-MiA88O2Td2F8{eZrIt{kQxtGvu%2F@k_)96J(xp6e`u_f|b*Qrwu&tAW}ICTXMuk
z9WO~Ae@yLjsp_~<!dc^NQ$a^D|N7-sv?Wb_Yv|b7-3Y(TVQt4PK&K{Lh3!_4>rWA`
z1QoOkmfaJ4<yWMOK5VP;pYUUpyeQ0a^b6j+UVKpib)0WOOvQ8Bf*8O*zY1G5w-(f1
zw26ZLQtAuezcPPR8041-%1TDmY_E7Na!ad_3SDa_UfLeAUq^OObXW!OL6%AypGhaD
zq^Hj1NWIl+{L<2Y7yCeya}2b3Fz8yPOSJqZZVB#PQ_nvU3ql&+bbU9(E>593&s@0p
zZ}Z9iF=Dr{tiJa4^j9K{fN8G0E>6p(azp9Z!4Gp^f~}`PGY2c4O}(*QFF~Neu~{Hl
z<r+Ufe}r(|oza^9mWpLw9-ijY20ew&HtUwohmFv>CK#f=3qzJrm}_3Itlf3~<70v)
zAFWvwSKtWPDjMcG|2Ih-8Ox}l9%w@4njjF`atO#LwH(TQ=x)O*a9u5~U${!$!A1mV
z&*Q5G>WG~#S2Cn99=z$FeiwS%OaTP}Ch<jsH;_X-CU26p3tN2EzqpoG7^Qr5;*(#t
z_hep!+q=|zyqdzbJ@90-w6lpDx`D!A<X58RxuUCkvy}USWyKBeLiN;{K243psCW8d
z&_?QxBKGsAI6!|oeDvrGe3+VAwYg(i-NPvR31~1DUu|gOAnvN!*l3HfXYn*}^6{1V
zY}~LeWJTWt<IbNb6#I<9P4B-g3gcCkD#Vrr@RB1xoZj8`I5Xt5Kv$!UqkUj)TD|#3
z+v=L~2d7d-OgB(>0Ha87+>aN))kcl9Rp|YupUcroI}%LK<$^P2$X5I(|BI!%k*xd_
zC0(Zd?xiaqlpCIvSylNX6sNv3=z!WP`@Of>#_8i1L_8Et-6SwvhTe~WYwJpH7ji(q
zdB8x>qp@!VzbgI66W1wAU;v!i1G5*bUBlFUu<xmN$o#R{n*w?Se1}BIBj~h`?zEnr
zE<E}<+9#;_(^Q%9fQ;Xt@LIC|>Zz}<FbkyO{rq)q@}#$AFBgwdkS?hal%J;|y;7p)
zO;&4@c~iAbivC_@qe-5*Y2b%WT6%p)aG7E7al7ub)K8@|gL)4A&RT^=n+TTE@zHSe
z-MIow**{-h+BD=)A&!#CpDy>3FNPPMx@nP-&wWp550H|9A<1CW{S7#Xw`I}tY+hSb
zlexn0vo-^X*=u#GK+mV1G&ETt61*5q$li@zpZ-(F)C;7Qlk36knU3;JO|x{So=0is
z<KdlEzp1swHg-u%JABGCa0=Z|=|st>6yDk~5Tm27FG=pJ1rI%YX_||nxKh-{YVStW
zPM^_57vDJ+ew#7rX!0-8hP%6(oW0#t`#l2_0<TAprVRV6jBnrfd*|o`FI~IJi8YjW
z&ilmycc~uaaniVq$$j<{4HS|xcof*Ev4ANLq|_$bsXX+#r38<wd*9Pzzy0yhwVA<&
zW;WlW!Le+~Y@y-dbuZ9xe{SZxa3ah$sw6~f#codx4Grj2z`5k7q>SnQLJWjrS^XD3
zj`2Z_X`J2mQQ{V+T)eq_|Ib4)Sy@>e_98v&gG_Qt_hi)@u0&1tl&yk50y!Lb$;u=Y
z1uIx*^-}!*+jb(bkATEbK}UXI`0%r8lPIL00Vmj_hL_%5UlLi4dChcwP0+ef9oENC
zo4awA_beXTkb)NLOERC_B-AQ(;qDa-hL8`3#2Q{hQ+jr~Pq*aU2Y$B%;Qq_*ZLfp=
zVR=a`Ewslkl5Q?U`It>p;o!SK{`)^Dom0g3)c)%~Ex@nB_cXjDA$ozZB>3*kz!VN!
zeo{RP(QE$>aIxJYM%fv69heApGt|cd#mjv$?jwokdfI6+GO@2`zD!io834g9T^V|^
z`j6&L5KhlXlxu&q5Pe1<dZC#s9C(=k1{978DGX$Iw&?`7k{Zx~8B!WpQP9fcpryHf
z+WpT8XQ8P>qUZ$C80ElxUIYK&Nu8Pd|8fDzI#(%F2<pIe3jQ-m>U;Yf4?quudKtkf
zdj`xHmM6~Vh^}r|xp&FZ9IVKy>=IYtVTFD);~3S*EAQm%;}!JR#zMfQv%wU(<V=|~
zG&BT0DD5JA!yQYb+X9~8)xa#Z#yp0ad*7u_C$!!0DY!0SJVf*yYUeW*1ZM%;2oAv2
z={{B4*$<B%XJiQdf$Q8lW;4%TfikF9k8!Yq=Fyz|SJE`kzX0Q<e0dIVg)&rNAUlsf
zKdP1a@qjLv808YQ`Q3*eF>LzJq#WD5SO|UCDJ8+*E2DPPIbnY|)1t8r%#<*x_D>jj
zmO*bua_`a2ejqwsh0fk<a7H7S5w0=YtR))SMbIxeX6sZc)6infz-<vt`N*#DHrzlM
z&r^ejDU&$z=sK!dFP5bDFfD-Vjo7L}2nen}K3@g~?WABBT3T|8CAcV6#}DWk-m-#s
z=X7A#-@2T5>-X6_XyVBUN$s@*o;5`ZJjgO(4NX!m!Bb^rF>vqB1jW=CD2{BQtnqTq
zx`o7Q7+bdbRtaQ76mzPrH+QC?;w(masDr~xblyN+cb0w#<-E{mW4%$;8^&;oHgkB2
zvje==XY{E1u=qjaGJoboV7<+R!LYkpkK=7)l^~8`$avBy&{ip2VgI!k4rByU<nF?Y
z>qB7=w;a{EoXO_|HQ-M4hxK$3u%nR-wA}mTr@`CVCsy$H5bZJ>hrBMcMOaAEv5Hl0
zv?QyjwA)<<o$mmzBVHv8j+>-=341Ssld|&wg;(|Tb{oD-I~_t*ueN)LU<$A}Klv4=
zv6!VplR+^F37l+fb^kpz4hM8dp1d1*cOM9W2`q`Lo*upHCEy~I%`WvLfSx&jo&ciC
z{jom((<r!s^Kj;ANpOoQ2ti15pP|sg4>`^0gG#G02M*?5c5!UKc&Ekp$tqj(pMyF_
zDI2Xq_=6w+tC0#gxQJ28Uxq}#&)zCY>kQtsq^leKGz?!_=-EM_z<_+BaQTTXa~I}D
zC)Q(0N=4vqEJ(1e*_zxDD=lUqo1eoDhWw}@y50>{6Oug~j+=)qz*i1czB7mI@{%Gr
zJH)A~nN^4;L_f^`Udh=YrONYH7AMW9+lc8x<EW~Y`L>FkDZV+fbu+Aoa0<0ymph)`
zE+^*#K?oct;1JDv?a|eR9}Pa$#;_pajafoGO8mL>2Wmk-`$&b_{9gOk6o?2qH8ZQI
zUTVm1&*KDO9#$*%n(QCH3$ZQ#TYlpg;UvZ!(la+^@{6x<d~ABYP5GGei|)24J2_TO
z1EY>9leJnEJ63uGF6WjH@lxM#gWM3WydUJFLdV_%h1cM3+qN-Z%y6vc_r<SF3_Sz{
zcm}t2&!8;ts!^69(BK;LLn!r9N)IOa{-O#3Sd>zHbmIzC@Ugy-Y$BOxt*&Btucu0F
z2vG~V_8Bhq9LqAes%aZ`Y|QFojzhvSo6zIsV-VcWQ8;g_w5pdItl#yoVEjdZvU9bg
zR$y0-)XvgrHLObF`pL6`hcz&>p$m+j9fhiV9{wk@0_gqMYv{e&>a6~8cp7wP`c6*4
zT{4$Ca|x|LLU*O<0hC<AzLYO2%q`+3H)qN%V@0x|a8R_j+xcB{_o~sL$J6ZuOOakk
z`Jpze<Qi3?`{f;GFCSA^ZKD<vxyi9J3Ht#e5&H7lX4^66h!dS1a#X~7LJUG-X8kSe
zczP4xb^8ygmk_nV0zmH|8U`SRE!`hw0HuYEQrpnrsgwk~$hzY=MIwwS5BE9p`$S{_
zshM&~cwt*U^18Hu>I%UB<Pg4qpq$)GIFBZqqJPTm3Rrm;N*V1uc|<#<2By2^kO3hf
zp<>|DwR?W6d}OPrq{=}};h`c_jy;f{`NuXK8ykyN>bGS1*h6mhHJY!$gR)oGgrX?P
z!N^5vaPof1l#r~fGsYKyNV*jkR^|S#;(K2Lmx#kc=>s`}mbj=^Pis}kLD-d$I+_zJ
zEOl<$RcU?LLJ@ty(&x`rJ*IwN<trn4z{W6@w9HdIKldTY8%ljkF23QZY*X2SJxI|&
zU%hAEKM`w!Gsp?TmH^AQGZ7IxX2B7`o7-C9vjHTU_8P5#esrfoD=9Z~3q+rw+ND;c
z3l!tuwI8J{Iv|>DXuB7GQlA~|WM=hWODQZ%f<$47kHOYjA|&J*`h28JowO{+vIS$*
ztgs6Bs-zx75gwS_6fflo&lG}~kP41|p;NwNFaNWt?<K$CtI9;biL2{8%0eV9=9cTg
zEr7ooyo!rUVDJ_uzwUy}g?2h5m@G8az>pAKa~-vY!`K590!E+MJs&`ML6*5q^cDZX
ze^u#bEPd(bp*-w7`8w0alhS@$kzU5dS%|@GceWS>ZC!u*BuUL@|Kch**;WpD3fpQc
zKd*+xHEe*cH<u+M$nI@!SO+_BP|3W>0@i4N%_PsC`^!aJwu(_LGIVn2tFJS=@J3`a
zeau$+DG=ew;iwRmXTtx6#?!HS_n<s>QSp4IO{7^h6Yu@^<)XpG<`r|+!Oq)^wc_sW
zK7SmMEHeY}nwP&3mimUWU8gEH5L?bC-H%Xw>G;$1Sb;I^`Cp5BzRO81xMm-}a3O1u
zYt$_v!aL9}P|Xs4CPPlms_HH5>>~-|rpG)J9ZpS}W(=AUGxKb>$W1fbcN@TK073j&
z|GJxl)cMn9JIwr<DV&EZZJAl*GMO_&iIsvb*BGe1sr(`Q8L<*3N4;8`osVP+w+yW;
zPSJVG-&k||IfNXwQL(X3_jM6?#Rq47&Ai=|rQI$T&ff-NVwdlUJS2q#Rke%hX2-N;
zrW_FcVZ=xsOUZD{C?ig9;1x<1{fvriqJ~@hK7LK$5x7g`F(zt3Lvn?^C<t`u`IQRs
zyp57ZS*-Cg{i(rGmffihz1u@h$ta7GaZ~P^Me47suW$0-nwW6hW<v6CKCp1gti_O(
zw!Oq_k=taM<cpz!=Ks8C-e2Hvshxw2{e7zflP*#=-0*=LP2c)8k3!J1(+!InuNoOc
z2i)3z$%}a=+G7BarS)zOamu!cd7J|<$z8A!@-iFdb#FRv+;jO?1mA_6QX9wO@NJ<A
zFIH^vKAn#g+z2`7Z%2`_d42oJ3{vr!bB50dUtb`tzUaN!---navUjhvmkSrXn_6(a
zm>#wGvrxD}ufgMF*3h;3{SH4nwPjKWIZ>zY@s08HyM?V+TU@iB*d#{aHJ+U|(IoKX
zM2sKV5~{g+DcXH;7uIcmEM$Az9sANiXl$%M?S{z$Dr|ocZTjzz>0KEv)Na0);C<$;
zvS6zlrs(-K1dR9Itv^Q8ucakk>a5Th`#}r}oXWMT0v6}^@ro($OFILF)MA~TIwGZ8
zhK;h|gp6v)PfbzR9o=Eo98|w0T@@WkNlPOV-c+|!Q%M@f`>a55OI<dQ<EU3k;^L-1
zVQbI%IF&TzD^WbRT*rifS2~w&(N;R%K9t+&H@Aij&U&1s(lc1J?r7ev!a{kS6q2d&
zPThF9eoc+<PKlbu;EvQD6fTr(!ri3&sRe@CkaF1)R0On_8{SUYsWBd$d2~RBaQ=6(
zh4}97A{|co4$3fCt(&_xZ`Q$+@#SpG(|vpmTiUmc0WpR5z>G_6c*Hm3ibagg`1Mfp
z&}Z-_-DK0JzO*fqT#K)zmNTaNLBFvmy+SEpYr=GT315b{cEtUXj`kj1!Kv?;wHNgY
z{(Vahzl7<Zqx1sisvKbu=I|N!waGA7CVwF3qRiJ^D)jd?2@N)8YNt4#sFfnsvMYIN
zdEP_2Gc@v;kCNWkGAhbnxgXQzM$bi24|r(Hi^!g;ndc4z%2G?L42ZsWPrQP(=cVZH
zjoX0Twr7$W+QCmm|1mUWsQ^sO75G8(gm+_hFNRZYhkMK!p0K<$YQFO84IThReA=|K
zl!8?iVSFTRZYeiq-}1|z(Lf|FH0L=ok5Fh;%(!nyyGm{N1-;}0566?cf?o$*&?E;2
z;C@+zdMe=|hHK42)MGn#RvIx9`Fb`2{TL)W-Zzhi?u>EHVZO$lqCEB7b|=enCTGRO
znXo<X<>nRUPM3~l`h#Z&JHo}{(a0#qBCX2Te5o~sG-EYNqHz6|wxzYKUju!e+Rmz~
z<~psYxa;3MqvA%-A9hrT*hVt*mSyb77}vZ@w2&q*W4rT_B;ntRhSCp0IN27vT+Hd)
zr8fCB$FA~i{^6EDdd>E$#n88gC+Ts#`xsjr5gKhNGoPgEMx1-_ZDjF)zgS&z>kE`p
zz6-W+8!|nT`Sx`eA5Y>YCA%RHg`d>>@A?=KVyRpN8f{RmY;&M-==X{$Df(%@1m9<s
z!7iu1gXlA*6tF#xj?xE5r*kn3?>F{%gN748M5~Cy#p)9w^PqLk?X!A&^k{}pGxwQ2
zk3XDwVs<Q}<ev3`m@j_Us&l-w6I^G{7nm#eci)GrUi9TO*MOTDlhf!2^tJSD(db7>
zS=SM!&2UAan((4#s64&(jNL*3kx%vAGSBTLUcO)zY2Q?98MC`v7qx~{Y0!9CSJ^?`
znzU&A@@|;1+VJv-j@70NPvh?^-^;I`y?D%REtg~I?N+xwznt<Fam+Ky>Uge4O*8fl
z{E@1*^J(dJ%{mNMyh*|9QMe}s^S)G#`FnI$djfKl+Pz)ldt7-B%VqMrwt-Jab;?#a
zUVG0%+iZnzIoJ6%&%THa3WJb#Dt4~rcTT3gvv02-PAug!t-QjrmuxkH7-q0KqI7v{
za)ix+#xlhh;|b%P0;Nfd;$J_=H@t(({NgWR&T%)9{X}1h{ULfANxofE3-nG+rW50Z
z!s}<Vn@hzBik3?|Sc$9*A5R$b_<Iji-C$cb>3rjU;4FVaE3ip0GetD1Bvjz>{>uq5
z-(8xe5(=!32Agrm%l}H**8Mp!`8i4zCs!G7E$ZIb1c8&dtYJ%#BSX+4;ns{3zX4-P
z&*7*AR|_isU1RLjCm%y!s~_!kSg37Tdh>1MGWpEET!6#s!k5zq`^-*Fj~?wmI^?4!
zNYI%m$<M5izXtt1;+c$o(X-!_UL5oN!Rb@Z>_M*`en!x+^$s-c;rr^0x0-A?T5D!U
z5{{`a_lcPvBzyg&EN;^7QP}kM$Q`H3JoY5}P>o&Z<aW#5-H@m3EMPAtqAwT0?Ww()
zJeH<p`@AVIxrXmB?Bz{cg@U}QSGt3@*bejk{@Lm35Kz@~Kf;D)U-rIUFBaYV<3i`)
z4P)9B5i(vVy7TMDUz~x;N8lw1-0Rn=t}N@aB)r1uGS-VQNhucdThX|t3DxseCA|hd
zBp%aaBXT1F-JZUDW^&}8+AX)Oa*Y-iebdhdgho}Ea9|yDY~#0f*>=khBsJeG0WJJ;
zZsKLt?%A%cROz`mY3<?5v~dM~MW;K2H)K2~hcL@SEo+$X<kWKp;H^_BILuTVx9L>}
zfWMk&-{h?hKPPyzBKt7i<I$$GE}(+=t}mH>wq4=5Q;v!h6o-{uNL*db>ud1a%_4eb
zo92-neN4EsZm8u$1OmLXfH8O^6j^@_;zXi!KZu2huhuATmgc{dUso(N-i;|8@q1z;
zC4$}PzdcV%;Em+kl>vdXg>Ui)jCChbEuaQZ{S16}>+KI1bW+Me0*FXnCwe-i&0yPG
z2W*$+;8@ply8+ccm^@I5v7-dfSEtFyt(COR=Im{`fVJ#<=AI`{zJ1<;D*ZY<vtTE-
zPtf~FeiFSf@cEb6)+^WT4aBT@Z<%|lQ98Zd{4_Y(DM9{PfgBs(a(;om>2AJD6f*2q
zc4Hs<Bp4?>uU}N~9RBXnejq+qLwRFqkg@x*zLD!b6KCS>W|Z}QcU$TYG57%Lmu?)S
zOz;o+_%NH0lUfyN<1qU)KI2|18ZRs=OLBP5y4J(@#r0c>@M6ZRWakJgrNRZ~iDe*Q
zo84zDW;mYjKil<#raQQxEGfc{vheQ#{KC8Kppt1ZF7Q5Z`)i@&jEbx(@7_zC97J36
z__u<cxUtHo{VgE&wo8?%WRAXn(tse9t508a-PAA#gDIMT`C43+miFxOzgY77N0965
zEoUbRr-_P7TqOiuUZ3#ZlptA6$`u;NZ6}K4f#B^n733|5Qk%O=343udfSuZ(zlu#f
z)FL!Tg;pGyz++e3Bm4Mcq56D$LW0<VyWHZc#y8N2ve*J!g}MLvf0&0!i_MHqB#oet
zA4vTCck}^uwOX*7@A5?hG=%Kvk?C(lj7wOLR{kF?$i$@=Ox?F-o30YZkbqt)TI*0%
z1VaZlC&kU1`rk4bP@0!(mU`ZZ=v{H({9lJhqrKda;{V24Q$&CLKQgUaHQ0-4iP8$0
z4CXGvGWHS1r0=iJ9Rok~()O)T4hs*@HymsH(SPYOYN2*@vQE;m9$1j(e|-4`2GoFc
z7^v`X6HGRwz0xk!$SP~oH8`1UQYUx6lQS}c|8*4WXkdl*;=^&`b#j{_?SLRQMba~n
z{qI6K2dG6JRLn*80^!0YZ6QB>p`hD^&KP1O&*58vfq_uV`eD6JK;JT!@hgyxiKY8C
zS=s1QCwhQx2`ytD^2_lPC;r=dTpLd3?#n0dHr<EULJ*#4;aw}jPlCXMigOLKeB<}@
zQ`9$|XJ3L(k?1Kv-5AcjXVy&#>>kmv0&u^CXmax^QO&ck#Go&}`Hf``EDUAabYrRI
zHXx;-Q5W46xkG7dnVFeD^|v12e4lNO-yDV*fO2LvJ}w}q1!JjyPkue|SSK1&tN+_X
z9@;`nV@1{1C1vuW8|=(S3qs)}1}99<|Fz6->~-i)7&UxmyqS#isLA>$@z+5=zSLX(
zaN`r~<MPQLl2v-qbcqAIj$jqli-pm;0dC^^Y~B<i%K?lo!}Ly}Q|SD$?;0Dke+*XG
z*UR$21j*^$woYhJ5{Lt>zULH`9dVZ6E~kAeXL=3@9`BJ{B?{_UDeC+G5??|m@Se`e
zLnjOV{2U#f58NC0uD^!QHVo*MNE$*cLWJcKOl|zbyw(>8ihQzXC`z+2Pl7rs(xu1a
zhtwot%b7N`iCl^sRsT9WOArYV3C7HaY)%6Jqx*Xh-fhjiRAWkhm(0_lJ&@+Ck1U0w
zC+xrPRs)=<Q*g~5!Rz&1ehqAo=CLX*keC4V_-`!r!^$ocve5;Tv|9qIEZPrK*aEf2
zi(Z*0E^SJlf+yvDk}}=4HPCiuO_AZ@d>9WdkyAQg+@UYQ!p<JN&DeKW5r$zfeSl)}
z|NQcR8hVWHu6oVwV%)_pSOR0yx#Gu?aMPnjj#)`XTwM3Yp*ZCYlxn8skeFQh!@|Pi
zaeY*CLpM#nT<crtT3Zp1FgFrM?IVf?JdXIy>i-gZa$7}wcRhfgo&!D0>!!@)^b4J6
zy_%k$hPHszQ`!h?5Vg;%PiTKNJ1N(}yngK&#x%Kfi08&KhVgK5jW52*ay85#Vx0M#
zz;Eub`C|Do0$U4J@&A@^1i|LLQy()Sm!>cZUN`xHW9^6z<i^?@n3Vjh39mRPsGSyt
zGAI{7gr}>MpvRBP9GLtk6c(p7c;K2b>@_0Yi~6MeC9uiL<%dv{gTa*2o(evhh*S0&
z-L2XbRV{zMIWhb<mW1lj;Ao1$V;7IOEqVO0j&Fw>Z}wooJ9b1~1Rq5Z0&ey*+j(<g
z8V!7-!M)xIF=jKD++!fP7OxpOI=<LBbcEtuzQ*>@^YP%aoAsLf0U$asTtl~cbXPA0
z?OOQ0o&?3~FWkbfWX4tH?Xz$7<)G#O_o1?xQRd&)2mi)cv8=3@KjN`fArpt%k?7w+
zP-H(X?m}_z4d`gFKW9~60es<i(FRO<ynU8sXg4i(8%K#!#8@}{rw9S@v#{_lslPwJ
z<v4MYd;`QWYPvz4k@fLb`m>U|?3Mn#N1zJLkQ$=@_dz*BFaP^2|EF#o`2QM=6NtCq
zV2{n6kAnwTf~hvI=(UVGu&@M)0|+F!tAD`*t|exEeoGh+uH_%R$O~h@jvY^NEd&3t
zU{fAUBT14#%qqI_ihcxP4pLA4sLe0z66fxrtd6OhPWy!^_{u<%{<DpzT|U3H_gB)g
zkal_w&o)W(Zrf^cqRZ>cPTZ+55Il@H;{|1h(2pP2R9C}2whyE?eOv}w61~t-3p!W<
z{)PBNqOS>N?`SvBs30mo$R&aLM3-QSY82YN$G^UMGI&GqW-c7^(uX-Pv7fO0g8Z+O
zOMsS!|GZ1;#X$g|`r;e|R_T!g5v;$Er$#Up4We;b9!LTN+_i~MZ!dc{E8PA1Yh1X|
zhQNW2aOo0u20Ly!>o}a%&>tMQZ^GF|4(3iUaNTGz*y=T{3LOeP7k|JysXhaXrQ#r6
z(oD4tU#&MG>!n^jzL@M_2=6KUm{HU%E71SbWw;gLv_UM|^(9XgzXs>M*rC7mT1Sw+
zLZ)e+(AK?RZ0{fN_P}?+44oQRMwt>p>Z^f`d>ly82n%R}p)~D%`F_thZYX0X+|nAN
zB7d)OC>}-_MJlkNaQ+ieb$ghN_XA9%rWO|6#B6j!1RrpN!*Iax@b`fk%)E;s!?Q3p
zT>`;sXvk`O6lxoUJ~)C;A(CX=8bts(k|0C$G<V7f36UkDkgsz=EKl~DeT&XW!iv`L
z4yl2`@d|d5`<_Y7BS}g`3qTNS<n7yfIy%0R-RM{*Cd>SMx!$|6{slhlLcOnX!aH`*
zY)f;<oPxQg|23;hIPd-~WDCfxGE7#9N4CF9c6y9=eH!-|Ky7lSMxKB3%N5<0(`EZE
zewI{F@PN$}j)NWMxGd=*_Ay~jAhf=Bs);ETQJC>(oXyDC4<v$C=Uc`D5{e_l03=9u
z7Plx*JaY|5YkVFsj|Qb5pPmNv)FyMDtok$sI%@-5JEWvKPxd`%7$dzTo4M;GC3)~Z
z`7Mx8DihGaW`o{$w*cEQXJ@k8OgCIR6)({3ly;S5sOoVhdT|;C{l?Eh#wF|&+*I4S
z-yAt|gm2eb`n?(_La$2R$8N81xSuPb?Q3IbbQQ}ow)3^jiYppX?AK6bQOL8qQe09X
z+~wR<PiQ6u)&zYDj=EmbO8O<w*`4*bUkO8K?piU|Zl<OX&$x|fJ46;ozT+cIVVJzc
zGLDBABsHt{x%cb@<j2S8OZixI<y>Ky%n7vp&LdV%EO<mm9-1KdtPX+e&2bW=Z}uAp
zqzo@dXvT>dkj<TKNlIK75Nq<|@B0Dw+Xp8Z%Eia&<Smae!ztx$8yV3EU3BHi5{(>N
z%%zrD3^gc52Px8&D|W4)PxU8WIV)(i318DXA)3=f>{&h9FIQ*CU!k^P^TG$vq4UcQ
zOc8qh9uqE_;zaJvfTBORxy{+$vXi^Di*$C=#<^e8m1%`5(!RZ%hjhpUb#$itn8>P5
z-BM&NAd}L+5UY0h)`^p1LF^~Re*XOVqHbHExi5uKAm_|4*I(b3-(39KDEf71t!w*-
z$)%R}(!X1LuGKf@%LQqC*?i7=I^xSSlVjzt+=$Nj#{#7oMDz(+EpJvWzlQk^^JC_M
zC>o?-U+0f!OXzt8<tc|g_g}95nv8rSxO%?A+0@;=NKuHlIQq}f5X=I#uki#EgZ6qa
zWND7eiXK`>rse6>nl$pFoJsd%j<Q0hjjfOOw;yTEum9x&{Ex{VO}BRJ^J4E2E)7Ts
z;ME?zpXs=d_77D+xe;U^-TjtiM`CH-uCfVUxG=B1wU*5ly}D)K)G#?oTZcVs$n3EW
zGiy+*_#bRl=%0idl%^6aRDiiyML^PO9ZuT&4d3gI4ox(F+$ZtrCNTg+R4yw`Og2?B
zB0J*Rt|nbECXB_=7RtwHAFg*7cXt~+Q5#%E*rw)h(tn)`;wWswL0_M#YuNs2n*Mn!
zrmg`or#&cu*{-G*e=-}jt27mQ!%@W;_l&Uc;K#cL1=xf|QphzOQ?qid3sUsgfX({0
z-Mre!D6g%L(IgN5$okkBYrQbaYA<+ix{nU__Q`#v<4H+LYFG0}dWJE>yXi>%lDy6|
zB_UGpWKPY?X*EEo!nq%~O@7Ud`_kQVVTy~lSQMH*_ft2#>9cBe8~oHS9BkGf_2Oi{
zxaA}A2F3%D#Jh;NSF|Yd(j|%VTj(R@_rLnQj)2ezy1<B4?3#XKRnW&*Ti{2(2qr0J
zA9vL2UX2Ib?L|C!{R)hfl4`x;0CefR5|tW>O#UI|s<X7}2bI~+@7=wd^_|)7Pz-+#
zda8dxy=ERz?S!Fzvg)?cuKbHGTUevwmd74gc&o0Q4Qh)zhX5Mx%;d{_yRAo4Pwf_O
z&<^@7PifyyqgcvxqwBa@YJW@EQ{c@GVXLUpH(XUDmtC`S`&GrLg)7rqf@C7iQaK~0
zbIQ6ggiZJl8YLAm+bT$s^&Qg8^CXtnsR!8E*a)b%yoH&Xu3BVe<=L@|LnqS}$bSSM
z??HA0F&O+xswwhRvXZ<1Oh7=u@2r%}&_UHA+k-`ld8NHOBVO$8lqT1ve&3ww$S3|N
z)K+eR%Xg{_lH*YlYtc?}ok+?9kqX;YS@m4+h{)!KmzS5TO{GmuO@(_)(>ol7WHlYE
zrKKg*Fz_n!&Q({}*K%Qt#5SH#<fP95CN`kWBh!neNtF+%=yIkzVwAoFzw2*!n2`ON
z+uCF$CG~n97_YN(Ng2F8GHfq4yyMtb1IO4O4=f(~nWZk?%3?l4#O|o@w%ywAn1T+l
z9yXX_eM(!zeP}Z9=EpfymrcKDI&!vX7px4ItWc&#1t~>ZO(TArpFDZyo5AGq)0xT1
zTR%D?gGP^zzPlf?Vua|Fx0POn{*WbWmZgN&npR8em(w=08ef`N>2vN^RH!g88ZzWb
z3@N`JTIy7h-!Iglnqnks!XUFC{O;2?yFTi+9t9hLZD)d_Wtdqp`Yl?J<sn6wNg{>y
zOK3|%MqHg*?uO4)gpZV&kG|<kQ@-4_yOcw$e}Ls7T1}uAi^tekgsoglD-Woe{=3PT
z$Yl&fp^Lph(<FpaCyY^Qili}krrP&F)+X4?3{9!EuK<Mwx`^q_ls1N))7MeG&)z$?
z`yTU&tMR3-M_;_J%pMxfMxxXfQ%g{_Lo|D;(`I_kz2u=`;CxV-;1|`CDDPphizB%`
z8!Jc6WmI%7vRt*3$*_hHRW!(UcgyaZqzKnp9C^pHwlF`hQFiJ8E3Mzwx2@B2Cc{$?
zbM@WV$yBL5>3=-UsaSbkpB=Y@({dl{pNY@USCPtWym4}a%LF6qA?r3?Ov>xZjC%I#
z%I5RArzj(s+zSVuo4jEV>~3yup8oJjmUS!DgB36#Re?HTLb9FYsHZDMIyDKJU?F5X
zB4?3QlVYfc<l?TIuPNVba_1bChd9l%?0{0&SefKvdjZb^A3Y@JUAek2!R@F$oDwFt
zT|?LK64Mb_0UOXTNBD}d(_X-0Ba|n16hCXgtZ-wk@OXu$+Qp8n4&2Src2cus4h{}t
zoJ*;N+5N?#3Hlb=ILqu#pxWp_15tF)x1oT>oGpm}XYp#6wuBb|!8`UKtEq2OLai4O
zz?^IUx-{=DQ_m+K(`Q$R_~?TVXPmlf#@;S{+4@`b5cCg!ZjQbB2Ry&l)oHF48&A@<
zFx`*T@aqidP{h3|WRxC=TeRsirFJ;J9~u(!<u>8?hHLh}@94-!{oUyaB7`N2%FcQX
zVStK~QcFXFSHaaDezS>vwjZq~rsTW=8}l`X;{OhB1kv?&<?#y76J>KlT_V-@Rgo|M
zFuU9plSX~}kJHAww~cuH)57o|qoKX!H~w({N~u32Hg!4Lk@Pcr3E2rj9Ue<k?-GOF
zs;IHQyOUzWK(Oh7zP=g>kFv+^JGuI&)Rz#{1?Zd4aUa5%jb*UlZ7Y+lsR18Zg1(~E
ze&i9>=tn<?c1e3%shXH)yJRG6ao0!Wjp-^XwX1ECFNc8_^Bs4@s$pCRQ&uli*6-S8
z?0zt>hb$ckvO>dElJ8=uXt|d_%;PIeLZ>m2EZ32FT}nzSFBw*l>^uu9st|ZvbI{q0
zIm>ESmv>)Cg-M{h`0BIz#!hlHiNL4NeDi^+1!6s6d7j{<{QB*iutL*BV);6)&F3bK
z`RC^TH}$8S4Cg?up1|k>KtLN}iX6-snnxq9tFF$H20bm1XhX6oL1S>yRe62qkK5r$
zRr?X%o*>n9pP1`3&KSO5;`R2sF;<Z~BAE`qx?KA-51Fdza_u>@{res}noo-g9d$gR
z%Eqx^?tW}1`TUfYH&sCY-~3KP_w}Ic3B&}w`5Pinhfy8aQ_SrTv=y4=Ry)D_L99ri
zF10V_ac^7dWSEwec;b%J>4p!CvUv8p*rFO{DvfT%(4&;~HEZ&Kz=@us%p+`)rmfSK
zbzl8Zp|MMyG%Wg^Ad68evTWDxYSo#Z-gx{XZih&*1GoON*UZ4C3%-;ue2gCtUOSX|
z>`}zc+;dAN-8-1KZiVm1&FiS={FvZJ@~nCA9a@&>Z^zfbQ7L-^9o)BjxBrb@f`^{r
z<k^ZC`?7Fwb1MLfFVEkF%f%bBElP#AB{FlcMQgy#W|$L{p&|ahNh9iLoc30({bC_E
zb@UwYXAI)?zmH9vOjLXHBZG81>-^M}%j1Qoj$dQ5mV>E-Fk??V03WwyT;$L({`&I_
z4?Z&=di*!B9RFk8h|l&X?IdB{?d9bKItMd5qET=XUMl%fWq8c+TaUtz1Cyf2<^0<B
z*V1(<TmMw>O>P&osNFfKb&zxj4Br?$dvL97Vou*ezK>U~t}Hb4b?Tx-@~v-R*oGs1
z5Z_U#l;UI#*wEGG<v1zx&)>e4pyZt;(|J4qstGRi1>|MZd6>{{CmLbv!C4iAiNPAR
zIIYUc$_PXpm}h6bo1zcoCD+$)&CQ4P&)OCvWQF3F&Y4Z7IVg1X(8Y+fIEJG8EwZ+L
z-5>PW!GG&$XLl8h9PGe6D*J4$^u!E5D8Ulihj5F&WC5z>m6em`<~#>xlF|9<E+HHw
zdjh}(zoLaYevZy8R%nR6gyGB30~0GGf0>LA4hkP9i6#`1+2u!>BDfwp2lPf`2PzQH
zjrB79pebyf#={xIhXY4_eSJYA!bz;tYiO!|o1KFr<R|E#Gqy!Z*kW400ev?8{Vape
z@fS!tm+@I=&Yk-WjSKUexJf%}Y6gL+g*NGvYF#dZhK7k+nKGX4?o-`GEHir~B`?8Z
z!<h=2W$eJ!iCEsP=_7EueeLRMy1SBr;foP#Z7-L8r*g>6KT<@ovBF=cir1l`5qmXZ
zB8(yN5FQy&IC5YDV9KBfbXT^Hf}WyYI)?Qill*8)qpF_3*JC~s9ipzL7IhvrPjSQF
zW!We5vnI>og2a|KU@{&_bIbzbEh#Axp2y%+!AHW+no}Z3EI=KKDEkKy?<iF4#DJr3
zIMFL1tR3M6#Eciue(0`>&pO`v0nf#j>goY_^_*Q@>FMb;Ht-&wMg}k4JhOAlFLY7>
z%;#!+dH}E3R&H)_Z5bJ20?!M}vYY8CL*KB~VO^o1pb(HjC%G}x-}SU}r?2!VDlT4G
zU6t4g)8KFPU5ZC)&dkjn{wPcveHi;9^6|~CUwCe89m#X~?sI1)b!>)!Ki)mqKZo>%
z-=4%B5-S4aCj=86yIzlD02S(T3H_9VXzarQyS0vwW&OLJ8fN@E{XRd#)HuAh<CY4F
zisvx$+8wIE5fQy;jm&m}9mY8kYw>V*2ZV4$#hp1X#7QXoP!f-8q3!D{HcC`wTj~KS
z@)K|m(gY17aW>VOW6Tnm0wcJt4}CDlLf}_ZHmC2xg|9D%L1E$=u<fT`m_&c4t|!WB
zYN2tNxR8(ra1=~WFmQ8Yx?f$R8_q5zk9q1kYrEa^wZ{QC?n{_RFTCBXXJ=;z@cX>8
zvlGFS&ZwV*X1_bfC6<4d@Blk3($$yByp}(H|9&c=1+4?9#&4llO!%d^GIN;0b<O4L
z;46jpEIoDe@HlC{z5nL?&=E~8c80TSd&Xz<{%*B8SrQ(=SXo%bwnB;KQ+(vY!^h_h
zh(>%ZG$2DrSX^B67mJf2`TN0%+~iI|=vV?XRD=~or0BN`+p-PA-jJOx9zJZTeDrA;
zX#%mU8b5LRhF`^8RXVy`=r^GeV$u0dGTGNB&|>E1RwzKMmG0%W<;*;EF-e8C)Pg$>
z+8^_T{O`YOk<c7>o1UmncBbPhO(CI=^;=&OBs4I0d?m@>r`OOhBO{mj`+LlGH2C4a
zzhbxj=TZOv`@zpbM{4Wpl)YD2`9Rg=y?nXlpGVO+-#kQ$=vIRr1pS3nZd#@J)f;Jp
zN3~$v4B`3v=fG>k8tZZT;tV5Ay8zjO2m%3wKuV|V?d653v9dsF*!$s}vO)+H{=@=d
zdFLg!Y}pccUZ58vRD3Xz5Bsu>(-oT+Cha_A3ou@{bo_wGi%UxAgyup5xP07|{&|TJ
zPsJ;NG?XAj!^^jgu7VrvXt0$M44ar=1<ga3Df%tEo*_X&b(tyVOzGl>4<F`X+rE7}
z9UWb?g_8c;$8ITi%=-Lv&kE)<e40O#MN*2!WoTpLdKJfU5ShJ8=2)Zu<pQ9~;FZ}b
z;8o$y(IpQTC#TBatd6SMPo<@$88&BQhhyl*ejLmXNvA~k7!Bq2@Mqex6Ca@yN4|$I
zQG`TWQ&SlfEI1VXU*kW1T)cewp^DFq^kaYuz^}KwL)QI6kMpe4cp=E&zkgpqj!S~g
zRbD}Xa?_?%;inr+vj@|6SCYrIkl`<<+o7W0e)mukxz~@+QfpEmvp<dkZXur$jo-`x
zaY^aAak?19>b?3#;L#^`F0L>ivQrio6b2`&W`ffg8j@yWrVpmSZus}_dn>Qs{_qf)
z6SlR!^32!<hs{$PRR#uzB_0ICP%)$aPahG<myZdgEAw8hs;bh8Xd#dLNJl&hmQqq=
z{NOuky)C{t>o+T~5JoF*Zf<xL)*ve}(%aCZiTU*}<|7(A0_Sugk1%PBlQtwppWEx6
za$I2mufUH=JaN+?<EPt|BBY(~-@pI<-5W*VgmRnqAF4`UC6rv&=H}+A8c)SVMT7U1
zrOcnXd>NO{UT#TH(%->1b8y=$VrBeis4i$(WtAL5>L3`x3b&a@*_0O*vFeb4V5~Qf
zmR(v|A>d@@i_g-Cw3x>Q1JeU3^S$X6XW%$r!qCdk@UCKF0nH$F$GcXoNd8l&G(Elc
z$AC6_4Ng*b1BCEa3{nH6fX=8MR0@3IlDV?Qd2d~N`zuJKJ1t9F_nC*wzMHWeik+Cw
zNeK@R7tm#tUv#42-X+RtsH;t^*fgHmYR&H+bAmWAfM6NXpO|}yAfCTV<`I#UaE#ht
zoKlRAetr4d=Z+4x^K&?c&~BiH<$gRpc*CPJ6ZsJU`;=w1H&6}co(#J<OwH^O5fQ;)
zL;(Q-+%0#&>Dsk&Bz9Ojf*JTu!U(*u2Ujj~UlX1fdg=D!%A1$x^!1~%Gk+)!9yHU%
z<fCKcCp@b1&JEdY|9`)mzz<uwVadh3AYhx%kndvmm6et{ogq=3L9v$U^*QIX4|=qO
z0?=P7(3Fd0tg3nyq81?j@n1Oy&f?Z+n0$hK#np2nBO`C!It)E<=<<vFhA-1&ZD}|;
z3yA$-DBZ#arr<~g8pxusvODq<Jy1h$S-5<!zBe8ZYhA}YCQ2(JpyGaFL>(CD!}PDC
zl?Ij&ftmWcI+~7611J+TWVA%sxj64^Utd{X9)5S<Bvab$&8t@|S>4~ty*>9cJQ9^V
z=jyt9FVdAc(QzUAWq-K>*K>^SkT`wv<Vg=VH-YjCx7j&4abaOUu0(Zv(@6~0+04N3
zK4yF5-{3DKbP5lUPARTquX9~2B26o6E?S2RqpmNjsrh@2|NI%@u~Xp_%US3NXt#D-
zUA&B4Tx+%P&Fly7>HBg%c40R`ois7*+qZAB($|;7`&FFHnVd(r0d1uI6IhEAlt>PT
zmZSb=8X?a!&a8eSY4Ih~Kz+5#hJ)iSX!NxCdjM9@5=x4T#RFU;a*nRY{>J8<-7<!o
zc41k{>fL6({*ohq7(%r86MEP8#6UiLEUt%5&Lewy;6I6|>!TRSeY(@9PmA=Vq@;kX
z7Puhf-_$$bwC?f%;<tE57py(l@jRr3h?8A&2K8UY&O18(>hJfP#_l?+aT+Bb<U$H6
zs^4R6>WKmGlUFAmNHsO0#2_Xj0U!V9cs4pVCiXY>hw9LgPy0-E7oEV(YkqG4$R_^8
z{e*cz?0Vww#YHVc21Z8hEuRx2SC+VynH?|=V=snrLq7*BJDDlu3?LM%XvJl!JoQx<
zEpY&PO2!%3LjOrEuT3*I=sPA$|G^eai7LD;Y74s@qq&#bQs(W3m>UtjIR1@Z32n^w
zl)uyd*;1f&|J_|pTR46HmH?q*hpkBd=5V1$l783yL?3O8j*ebOKLiF+W8E>cuV;EN
zJM3c{BogP8YrlGw;cfR93n)Uwz=WPX9-!fluO41NfW~0AG3a2oZru{lHAnG=Xmj~{
zasI5p9WV)esO=zt?ztf<AB?>g?l_1>>ZiYJi8~$~&z(D`8e5f1rl+wnhx39~2u!Y$
zLA|T0stR5SOHeA%<R&C6Ote!mGy5e7hRX4a_zj37UIW;_{8m+^>e-TzkO1gu#j6@S
z0ubc96ciF7;mu^xrY)j*>5}A0hFMO2$loZDYb&VsuG2oc9l~ZMv_iGch9|K@D;S#6
z1y;cXoX5e&uFNecP{GttEQLX9r3%rcrlH2JF+K{s2Zc&rlsN!}zM!WN+u*^4#YK$7
zrr@^4X_K-j%zdB4xr|)_#|ho$%?s1h_T7bfK|w(Ry2^4hkI1V8prvR2X<C=3cK%GM
z`36JH`&Rb?JWQNGMTL&9GKi$eB?li=3VL9{O-#N3U<fKT2birsOQ7177`mt$n&ju_
z2Nwk`HTCrD>?}AlI#sT%4coWujIfrFct+eFe9Y98^Znyj!w0!GgGru`gl6~XPhfq_
z$0v|y@aihOSNBd_!ZEVMaGLdPm`2NxRm*vTDLon00%n~S1Eyg8b@SBtGclq_i{#+%
zWH`als^F~*_GD~yG(?Wie+C9P3WIxSyC;p<ckbLMisyBr5@wB41x1ns-<3ktjbY-&
z)C%5o{Eo5><H^R>#7C<1GSa-69vvWhRQpY@UccVZR)}fxHCH+@pV6ElmK5Zz#zxeJ
zTxwQE56jM(oQIR^2>X~$?CbLu!{0;iX#ojP7<eG~Na<Q`=H7kKKnVFJ^9d|KhFmul
z$lrfYvB3;*YI4Bkj-SN!H->u^u1$t=Z(_KlsHmuF>#;Oan~E)As$pRp27k`O{Z}#&
z#?`JG;?c{oD_$DkmUTXUJR;17t+!Z=8%N@_y*FE0X-h!jaeFA76FUtm*gP22cppK;
zuS*SeZdL27@Tph{T*}ZCub&A^;|@BLy7FC-_&TyAF$_x~Tu)*^CAF2a#_s9t>Z0vf
zIQmlk=FOYO@13we+n<w`W`pCj^o(Cu8!w>xH0upq77;Nx2X-IbkJZ29cu#_mO(zd<
zU39&2MFO&MRu!NO)<I3@?4^|5(-R#MUO`P{IYB|2F4%+KnO|J2hq`7maJmQhZ->o5
zlvbWed9A?h9pt(7CbEoYb&GI4d1HI~iEHTmzXmx%?SrZ**jmIJ>%hJ~tJ;&pw@kLa
z;T5wvL$V$TEQrbtSuz8*rY?1iq(v<bcH(-p@tv|-@Mw)bCt?T%bZMZ*y?kg>AL~ys
zuV*-Q^rNpfrKjQ#1_OyI-ZoV)^F;$4Ev+~@kp-G`rvJpFta2ZI6&}91+)4kg{z*sq
zi^7T^km6qL=T>gB=Yi*a#0fDPF(oyKurJdIv8eA34-GvS6{XT%*OuA6ha>$JVnxoW
zl0|4z@isy-_Pp^gA7}Ux2j+bM)96+^a>jG!D2-k@4{E8}1~2jSZMeajg>I^?2fRXk
zk^}e8&CD?Gm`0=n;>Il7<NEQ|j*h31<WW#2DO{y}ay42O5i!E2pRiSi%F#c#KQ}k`
zqq}Hsbfdb6$BZT3X@&lY95dUC(-je~+!Q<qo~^@Spi!5N-6da_R%;^^Q$2oFqZgw;
zs5>rmIPn^186FC@-nnz9VgJwG3Li{K+b`N=2R>2bBE^1pY%%%CtM6m}^A)zy;((#*
zfAo$}87>|RYRO)6xhYn2X48@iledAE8}M~bPR_@l+5t4%jbR&+&N;9pYjm~$M+&S6
zV>jS30~ZRQbGvhTZTX7VELJo8E>J(p-4EyyuYR1Le-%~pP>uw63~yA2v0aFyvfLi9
zsIkm(WHlc~2XTZ?{p-7#mGbh3CV%~k+?j^ti<U|{<vk<5Igbkq3lY$5#MbSMvYtj7
z<?4I+^l$A$7Hw+SWwm=@6P)bS=_)N1DEP50jg2{<B=YRG?;9HneVTjTRC!HZ!sql8
zNA2@DJR=!-Kj4VSkd0VboUkZ<ANM7JhH{6*SKPfg^-!w|Unr=CcuEk|H4F_A$A4Pr
z#;W%HFtMC?IzO|x*pq+p?#G`EcPHSwXf;4k_c|}8;$ZSCtk@Z=`sB!cQNs#izoQya
zUSs);0Eb*VXei80nYl9H8+-NCTC-8gK|lC>FoHE7Em@dBf$|IEpPNB9$gplWjW*w9
z+?Y83fn_6e#_Ip#?LFhU?8ES3AtYpGmMyF7jEroRvPCIds3=r~WK)D9TC)2Yl|*hO
zq-+T#ql}C~$p|6iIWFDz|9SrF?c>G$qL15;>-v7rah%6-oFZmbU-A&nRwBOsgxtRE
zGb|!hjx=$ZVUp;KbL$#+ZlcG6(b;^fo7uPym!`U=KA^wpTTHpbKs7MH6-Yu`TK`>T
zs;uTNlXdtw)lY-#q}>DkdB~mVMOT<wGqjAB<wAYS;QJt7GnIXr{!Ok;%rj`(6OB%v
zJ`L7P@NjfQC(6vWzC3t9Z4Hh%g8U%Obu%O=pRq4qamsW1bD7ArG(P#Sczp#ztJyk_
zUh~A?m!Xzak(D)dWFQTtpYH_nINjeA-9aJE%y4l~e!EMQYVO&WGP`MakWa-uS)z69
zAyRCqo!9Ie<_^!4EN^}OGwuc4=M&~1z2~65dh>gM=U9)#<ClERI@bFp?%f=HY}vk@
zL3#P$!y#p1Ui!Oge$#{D`T6-valz5o-_#3ApR0U5y${Uu#waGiu<>@+yH`JSnpKM(
z2nZUydg$AGYcUCfWD2&4N2nRT^s6twzd4#h!=dC+@-E`!z^l7u*-gRXZoFZx?Hc~`
zbQS`;nGHh4uI*)!@!QC8V&trfH%5IkJSSl8AAdF8N_L=*YGVVUkYLJ}=I<y392^{`
zg7ultczfSi+n+8VF17Q#>8nq75sOYGFHZ{<seQdHgbsF(km4!6+JxWFt19=^duq)Y
zu~ujfe|FkPF><iH{Nh}m@kBo6@S`>v<iB*(HPu*#5+$vfH5qITxxA%a9A$VZ4Sdp+
zalorZZ@S0jR8)5v-kra(a`w3K(D_#?hmZRA7GKzQ{&vM&XQ|IbQfC=UV$z2`w~*P_
zuOxXB_dDhI<ZPTsEib>{9$vnZl;FtampEf5!qTQrV^TNxR<r)|Eorh$AvhT1AhHVF
zFNP=_JkilI@aE7P!c4sgq*BsWfs81+A;4ZydL$!Si}V2uLWnlzEnC$_>;JF-<8N{!
z37H5)abyw2F;$nJmWloX?)Jr2A(3}PNoB`}(P*=i<DGPfPdqoceXpohTrh6XxvZl+
z3ynY4B)^>JncaEFwuJX+YyinKx{=4p<AWm0y*>NCJ$L(|BG_r$-#*gFof<uVXvpnA
zMl-c7Ioi>-g%i3bj8LLB78#n-YI9j*-DqPuib;Y=?=XdPF_WK0A=SnbDow7}#8-NU
zmVx0CMoGl(nS3;56#NHC9s@tWeFHH`!o0M=xK`iy*YDr@(Zt#ht#g&wjdeAHbafiB
zBHvT&(W6Hx`&;P!{-8G+4SjPp*H~EZEvK$Y;DJPPa&lvvn(lvazXjAXdJ5F2(=Tpz
z$|)%=-D1I%cd<a0cQ&C?q}tZ$a3K3Z`>&0Sc3xSQfnRLCxqr7&j6L?io9Fd`&f|U*
za&2Yr3xkY{zHVELmSqX(EkT7W_<j7xKHPBYoBPD8aF&mu??>bUGv+$Dy|L+0GJptm
z@hcKO)osJSigYh(f8J?XkTO$*P>GAIW!iXS#}+Rz`#=5o@niUXv(U+tClwV-<Kr0@
z=|VyD##qjv&!wSCaN+K~dkHs?n0MU|ZzY)s8eUVotS)NC*NHX6d;6J%0Td<5AlpYw
zMWl0Z-ZFM%&^o6;tVl##enZMu-N@)2ruPn-9M%#0s{RlzFy(LDVd7)lZ}G~?{>Rp4
z9$_;{Cb<u#Zp7LBUVPzR%UL?9WBw!b%{t!>Y1iRk!MY*b<8Pa19lFmWB;0Ehpc*T%
z8oJNf2iPa>=cFwW%ifSy2R|<(q%yYa6lHbCJ<QC^H0e|*Pc<<y;h+wtRnW6%bblHZ
z1SD!dZ=wuS>RI=_W!fph!VXS9?1zufMb5gvdqw7Vq5vt|ky%oJQ=%ZQrDL~CFI`OL
z6CVl*PdgEn3r8ZZpY;gQP4pV`ZQ3d@^dF?6Wm&mtt3w0&eN;w-7cY8Eg5-iq4)&+|
zUFv=_LRZ2>`}woMGTRX)<8ro6i!x8gOeHT-FG9j;cdT?Ym&lb2y<JR#C;Q*(`ZGk!
zUSghL`>6lTo%<;t#n32n*7W)#0Rcw<-Bpdy296zMIChEw3uh98;vnvjUWO0^%P`0`
zaD=L=sS*ClSc*q^2e@Ae@DM{0w`R0ARW;3=cdZ|*u7j!Bf;T7$)*S1l$<Jl)k<Kym
zmiPF)fG0qra%=_p7i@PncJ>RfES%L`LnpCm|IyvMcQ;i0Q0=`n*SL-`nyAR`BZJfA
zFwlAvO4Mhd?f5aBMFS*_b+_rygC@}tGsVH@%M9HpI%;>-ClP;}+j>@jVJytdHph<P
zR4!q1iHZ;eLLXGxXsva=TmZbab?a6fA-%I*y}c_~G{ezd<>>jh-Hb8~C$K#<RanLg
z;c|ULgWH=ZCg7dKju9Lk3?d>J%9la0<>BFhJ5v{a5C$om1wzl<)KPC-2d|?<yA4e@
zJc6Ve7p4>6fH#Ol4a<n9cdqboad1S1OyM~{EGSs|JxMIpOW2U60x*6C7<|5l);t^o
z0A-DKKE6Nw3-q2VrKP1ZYWwaLT^%;Nh6aJ8F3-nDHmM7ghB7-nR5LlSdV4Qz&_%T$
z`|O(cB<S?SSv@T*tUrC@b<-0o<wyaxd#bmG2P4<}^Y+Aj<kGjxz?je(?1kDJEbI7l
zNZ~}6D<1_Th!RY^@Ouhcz-_*}t<A)V1LcVJ=h$o4ZW<-T#>52tnSW>?z{|@!QIP+1
zN3LA?Rd5HJX7AigeHpYe^0M+#q}ri&^EIKqu(fkz+ckwK-@H^~J~wADU}4XnH!Q0B
zbojx>A2T%TM^4`UI+-N@=ZvbWGg9Qz`(G_wg=S)y6XuTN{?DF06A0Dxkb;ph91;Kx
zT}=kAEn!tSfM0c_6_98qw*_Vf2h5|NoOAt&KBTX|Ujs|$5S0P?XeBWxISB>$NW?wr
z7$v4P&DNxLEnsy|cyZ+BP+exB()K1~?m|KskP4nZe}1yR@*NOwKyl;utz2;gMl!SH
zx8@aSxD)dhq5$=J@wWiId-rautz&c-qYoiL2n4`Hz-SoIxy6J&B}-vzG1Jl2h4ZVW
zb=dr&DlOO%1Yf?wU>H7^u%)D3S$pE#`#xP?_QHlPig8DAXM2h}M!C)<{R#I|3!<;Y
zG0DEqyOi$9Pq$)ht7q$3H^}?^qlCR}T9|gQ&F<&#PH(IW>)rA@ka5xB##+Mx{@-_w
zaVqp>8XfMWT7Sd!vjE0~Da&zwFN}ZK6ip+Ac3J9sJ|`pBG)8|faGsbi<HSl)oWUFx
zq2vi$loKvHuuAd}YY^JRYe%E2A`+&51H(kCrQFy%{?uYJx{KJej#JF1?GR~G5rA{q
zSbvLj)3F6}0Kb(bg?Wyxk;YdBu(WB{@IIZlL>ab`@p1|K70Eow&0jc~xL8slamTTT
zb872x2lRxD3Iu3PiY~T=x5&g<1Q=~??K|>r8Qaay{iK|&6St?ockdnr1qD+Cs5~vk
z{=Ggw1)O>d3kz{-$9djQeKl)*II~A}wT(7ieDH`BjiZNgGUI(aiGoPBpR;GvEiJc3
zmv5t~?YP%8u;#JIy)&TVPw9g@`n|S15`+HFcmEx<h`7w)5YD<xoxD6U$!0R6JE|40
zUBmo^Uf8;um+c6p38jV)-~<kZqdt7;=^oJ`S$FOnMKFoo=K#W2N(16YTkPOCd?yeP
z&X|%VS%uZ2zTtNgAj>QgzwzMZOSLQcqkAV<^Akt4WLO<DC`>pxExs||Ge2GtaEmDA
z#CB63=;Y8R(JqXS9qvCAzgc%lm-;-rNS%nQl=-*kV~%#sPCvY5``-V49CWE@{{F7a
z$+y>LkAAFZz3;5?yZ)!hb#fCwgD=nMZOZjNACq4EGJdfoHT={sT7jVfn=TYxQ&I;2
zAL&x1JyBOGjWRnoE;vx0w=8RPPF-Dn!QoB!QB6+fRi-!5cFUpJ(?;%jdz<WWC6pek
zxwi6YCXy#4B#53$dyU!r?s1_xPmW8UjB{QsPieUR6#On=oFr!U6+`CwFxSUcBvHY7
z2F~ZwvOOxIx&qPZsxJUfE(<1)no6^czg)Bc71<O~8TAEhC)m%n_4aPtAls(Qah!DC
zwe5I@u^Nf<Q<TW<$Vh6hik7pp6T-3g(qzb&1k=XvrcZBqAuH`7JFm<srp~|G^ujx1
z&~dfwc6a^kRSG`!^n<Cl_Z_UfQglsMdht&e>G5RCf!1G5_5$=E&*b6*5kcS=C@4!d
zF?VbC=_5^R)wvcEn{eILv3oUv98D$>H7J=Arw43FaJm}gy}+}5p|cRAR;4*fQ^S?Q
zP4x7zNv=WlMQPHAg%JlYSwkvkFqXSY|Jswg5w}hO>JZxOL(38tFcHswfHva(ecMx@
zR&<yrm@~Dbemf&u0G1R`INcbX6-$!92IjO{)uhyvEwmd+6lu>mSy)2Jf8cV$^y5l+
z#sit(pWDlfDT<S$QtMx?uC8`9gER1*TmM@@@r4lM6$+d<N%O-}b#--_Ij4u|&i%~D
z@=zDi$=-N?DN#0AoA)zKkO1?avdN$~JIv3E%lvbOJApi<{M5Wwa({0n*Ss;K@K*#u
z)VQz2cKh8kc>cZ&=iwc;KOI+4F_HxJ${j?i5LvPEvZx%<caQ;aJn%TnJPd*~vslih
zF22JAe;@NnCLJ+iyGuZHy6Y1Hyh!ZMZWC^Gp<I01-QA6$Qf;kXw9}{=B&8sLed_5E
zIN6XBbK?ffcs#gg+Pq<E@)ufJx=$f9bMOOIZB*^>Cln>WG*50SdjfsS!gE;t#Fyu@
zY`r}?K4wGOfaue1C2%ogAVxs^&{um>#o6Mq&zs@_f&*d^<j~jAK|#o<YbSVubf{am
zYeGQmPTV!*ky7^#@wQ`{5yv+9^O-BU@0KNN;<i24c(}8Dw5Q@wO8JAMH=b-s=BM!A
zlLSq=8aQz{I$){iSLly^c|p_=3#Qe{$R}^7SB3@$VgB(EL^{9#gL^QwcU~C8+U%?4
zS5t#E8;<kd)!GTz5nwI7A;Aj6jC=DokiuT^49EW5k~<*5AaS`P{x@qP9i6EyXI3W0
zVVF6>SAgIw*G6k;j%}Er=804?iwUBgK0m<Wk57f)d<pMW(yyqb(BV7Rg67UhB7koZ
zbmiF%43S{?0OL}Hp%UQJNu)@OW@bc^7ud^?;gw#m!f$y{m<k&gS?jjw)f#?yd{$U%
z!w_T(O39IAs&E4~=PEBRkGaoN6GwmzhP(_5gg;81kjj~X2G35Qe3@^{P#-|=0M>%V
zs0LTbpC)BgcmH4#r_>fIPE)ahZ`u)MT3cNpwMR$rHP{7NY|H);t)%59A@lowcgOVk
zSrv?izJ=z-`%X{rO;UrT8{Q)|b0=YEl9QylV|2rIeb)&}zo4%~$$aFE|J*@ouZVp~
z<$<Zw4F`ryzxy7l)ps22)%Z<)+|Z!$ageUf^3DA$;v<G`?rPjV`QPU5AN`uI{@_P)
zi0nqexGE<elIzEz=G(?Ai4;Ld@Q>A5ZH-X}zS$>38G(f~0HHE+i_xhC)NO?T2P3ek
zC}8WD-kx`I8b)WvxQCu@|NK%KQ#2>x`h{Vk(u+<ALK8PAi0J(C!1=Yh2uR9_OfLeg
zO53T4D`v5XDz(Ww8k=NC$GO8i9e-4Tyy^j-2}laAHW|TDUEU}z;M_x)+<_wzGAq{`
ze5I7^fzMg_!Njm1zrY!VaQZ7KSRB|`D0{m?(313WEJ{H1*I**;j9j1D+-oXNwQI-y
z$m~Q?h?$boHbL{l#SWCiUtrZ|*+To4E+zot#jMR)+Z<cU%&6?2Q&?1srNGhE0T&vn
zcf6<MJ5-6Gj(VhB{+1Q?A6_Vk=#QdG7Q^IagRPEIXQ-T%lFdk|#36>h7Z={We(ea4
zqy@_l7v#r(#Fc#!ZsD|NSl9))lVNM*Dosa-Y^r>Vv)HQxX*bBm4ymosb{HLRqul4t
z{MuZJGv|#KtGNvI(7X3L9MicD7|ttcbsjR#>FA;qJdtAF@abD3=@<Xn@(YKAEH94`
z(Vy|O{XW7xw04$<wfr{83m?ik7|5t^vI`iOK8yOJ|FD3K?ieMB-u&71gd*6ILD!9S
zjOnc`E9V)K(LEK5Tdh@m8@c>kw>2)^37&hU!WZr^R?koBeS1sp0i^gvy*VD>IuKmd
zI*^RwFSY%nBd>KuZ_gyAsQ?{o42ebD>F%N9+*v;XQq)hOFvcz4+HxRc*<m1p!O49l
zS=04}L||(Gdmir$DK2L+3V7tbnVd|Y-B`mA6CG+cRA_RaEzfD8j%niw>#i>ByIBQR
zbF_uFWQ1V8#L$iVD}4Z<B^9+QeBWGLYH#6_Cz{Hg3o~69E+<?{Fgd%lg}Mu+X=q5u
z2mQTkxY`4WJnfGwGTWw1mVl(QW=kD=F65|8TN5Jc%yC&vmuK6y?%GD40?Ae7poFl^
zTFlIYLo6ACrr$a{Q!Gve3~G??kZo>g*p$nMq)2lg&DqVke(lSN+SAVAPrXL>>XP@u
zdcc^=or+4Vy1H6RTbtz=wT?sa7pQqcDn&o@f3g$57ky+~Pe7Dfy%wlFzR?*^LPIHB
z9DL(d5^b<Evm7#AsHK?STC=+2d5MVL8{Kn@)Mney<d4;)bBfz^m3eLeV`ZdDj=DaH
zD{$sRdP+=KjJQmm%*?{8vLT>E>6ANoe@3N-7}WIl^M130ZPit83D*x_{3%ZSJhQvC
zz9GSUx)dpNX2&UHlTOjd0qzoD5JgA(+guk!A6h-hDBnu8gJrriWls|$XKg>3*_DAm
zhgLdUoGKcXS=FcKpNo_4NT&(--g{%oPvS~q+2YS=_l;L*G7=Ls5+F0%*~m01YL?TC
z_nwrF5$cCgy&IeDP5b#`Z%G|}X2?-zp?e;c^%&?Rtt9S~H!jGVTT<+-hkUtyk02LE
z7DIn6=&zb=8@t^=sv4DZX-)z9blmu2{5P|Jz`!JRC8ea*akX>XpKy6TPl(Sx(VP-I
zdUZ*zrIT;>)gU9Xbi?1PEB?y2>1sm^oWbHC{qCy>JbH;!T#dfJW-ou7#K?tmB?{8n
zb1#>YE-zivd##^4(|ll2=nxznO|OAIwaQO%hPmkRIH$d$wi!QJKW$)$b&|IOSx#aP
z4q?$7_<E?XE;yEB1pIWV72sRVn>T!-gOfxhyT1vAtd34tg{FWt8YDS~H&F<Cbeyu3
zQs}lrMKe~Kn8KI8s9ld+D7`6QPX7w|F`X3RK@s|)rmhaD9ZZTiG;yz#M7JMGRpspF
z7T%`m_6SH9so}oLx&4bt3n&(+OL0!dGspHgm|SCV_gq2_#W<rKJ*bh9QMdlL6)tHD
zVsgJtB}|(k+wpFI<~w3G;|WNu7AwBY&l3E&nH}GCw9c)aSl*@{@Xt)>HMq+-Lp-l^
z%b|IAMr92upN3=<xX_?3>3zH)5A!;c6G0SD1@>>klzB<NdyUQR26OO3NyT!drL%1x
zci(JS6WJ6OSh-qb(wwI%QI+UWL`(QeVHUy{<-Tk#DJn`sUjQHmM+}WRyX#cCJU>NY
z3!ap!swy!_gh?AFP=FjT28L@cgZIbnW_^)CsJ%h2%0>JF;Ru`Tj^fWiqG`x^5YtLU
zm8<;`rGs#zh?U=mEi22**x)K9m6q)@4c|4w%o4Yy>W&v?9p#$HAIX)JmZN(dK>k4f
zFOt4SB0N`-l#s94*VIlGds1D?n?%e&*OYK+q%01X&|xE_h@okw89LFRlRgA(1=%M;
zij*T+-PsB4{ZplLA>JqU8}VErkqspt1pkux9!2ddnFz;@#zxx3^Qg*-4&~pd$b5p!
zq4MYCU1@>+JD2IDnN~7$uU;_O<JXpRmYqHK`pnR1XJv0MpQ+ta?>VCkTlQz(rw2{<
zF=o?^KN3wKij$}i(!+CO?Ye=YT<#cA1B6h8gRVHqu{K7=#n_Zzd9tS@9}gJ$w0bFR
zyR2Kg(7oS@dg*{^0^t>j?Z~Wo2MRD0`GWzQ<3{6fJz{&z6Q1`7_BRO&6ajr=-AcBW
zlc$rAI+fVAxrt8~z%2s!ts}NwclQV1vrg_YjssCOcdpUJaH;prg7|A^X+Wd(y|8Tx
z`-}$<){VshpKeeWWkqZSmn~08wUBj~79MfjAqF&lO=ta{T+RU1Xo2W#9KT+spp)a2
zwyOdIjLF(WZTFe6ii*qxeX(pAb*gAlZG+!+e6J>^PMm(U;yss;P)TvqNUO+~w=(mq
z(TMj}mVFoGhWEYj))4AC^7ElecCj|U=B@Bt-X8nC0Rf<ud}|}W!Je>x#*JrY!*;Zw
zdv9qi#y$$x6bn<%OtHZNCZS#%H6^75%v40l#5MfoT;i({GHdi=UQ@s15~OGNKq84c
z4S+&2NO!e`$!Gf$+VU|V9($z?{A4r$d%!a_+=B8}lFzc9g5If9r}pl>T)v%OQj+fb
z<zHu&wz%3c2kHyPfhn$67L&Y}rEM+ooTzG!>$?V{k5;5hwjz?uS6^|Qa$`E-*f#e0
zANv}WE#hr0jn!RO_YX1;va5E<{F=^DI(c<d&7Z`^<Hn5HRAH}i9=SNu(O5KaB+|8r
z3q*V63Z0ABT3J1s$b^A2*4A`a(L}^ql@Hb0M7YyA{Xn}#n_(U<r-XP=9i55?4W-fr
z1Xd6@P)y6HCjEWj^u(nOTIs!WqO|DFtZ&Dk1y}yb5)$nzm8a6<M>gH8Zts!Z|7LB*
zwRg3X{rNwNqGRTTS!U@r&z_&$_R1vvxAuJvnz`PonT3wR$nMh<LA$yiMEYlDsRgBo
zMi)GM$c^n&ylL*sARo!noj3!RF05aPK@_Tc^Cpb}3Q6;cJFJY(q9Bsa^7h(rfAF4P
z9`F0yl>VFLZT6azorL}3yP&Oy1$k{>{x*KIV<0H7vS8uF`I}qUmOY)V1w9x08|luL
zzI#1;Am{7oC~5MdDn%%`)h2y?eE><Ab-soou*;Wy`r2n@-<(;0_*;K(%^JJb&+-_C
zcEzIRs`}!aQ6-yhZkpcTZMA3P(SJTYH-BrLr`J-{;hiLw+S{w8yUw1@CSqUv+t+>c
zYZoq@b{$^WBrfnI@<Y>`rqKfg?bIy}A7dJ+m(y|Wm0>yYFNqcHUzDp5M8S(@(Mim;
zc4Z>|S!Yaq8~GF}2z4w`ML)EO0Q7(&7hh-C@Q+qFEnEpF{tl@H{^GJx?O~gOD3%d!
zAi`0Dwns!n&)*e=g@|DaXaV_nl$-zl3;`B73$jZy!}|c9!rFqUlMC|ILI4GYhHBf`
z+^wG~ybdNHl+!w;FJA_tCj*d5`IpIii_L7~03iok!SyIY#O=`r7DI?0Km%dmklyR$
zi@b2`*{NGIUf?Mspt7(3H9Ag~hHRHtR#slVe0eUXA04>h3W~K)lI@R;EuP}#&!Q*G
z0EI^epeysf<oI~ZszcGSSsgiofqMm3Yy3-pYLCw)KLdio=g*&g7-puXQZPON?52B@
ziIZ~?-Lfq_RH0phK|R5Wgoq=agz@Oy!5L`cu~H-l&hP*JB-7Aba^h2*>%gerk1c&5
zKsd)kr)XG-CbzVxXbGuSx7G!GOb!m;@eg7?kzrxOE%%NJwc*MmiYXuu<BDgJ2aL4~
z4}U@M7xNbr5%~%f8#Qpr)2BD!Q(87OJe;M@0`^(KKKNnin!3KThNZ@t56=_cf!`<g
z_wC7Ud#_IAhVO>OIHyBWOFHV-pp~VP`YD9SaHSrzjoTor+t)sf!3eN&!ow5ZNKvy_
z)sgu$$t*K|;4okdaV*OQ)NK0JO1pMFLL-TXd8G1EAT&(U)u=we=8sH;1?m_0IfIuR
zmr4xTAlNOxN^EjM-2Xl_6#8==`t5MJ=dH);3BEq?6&pgMF2lk~f)v}xhcDi78M9N`
zzX#H=E^LD@zKviAwWEZ-J8w*>I{X|2q$s*A4aD<}O2b+gCY9T}Pv6dJc#@5!#!%dj
ztKp@G8H<|>j{sB%fN+N-JrwW?wM*L*k6x86TZlA)!UG-q#rCXy$B!R3Xrp<V(t-0W
z!|$c!{!Dfj-nbiroJVyP_y2=itnv+``2&W+`Q2LQ9v8vpi0qe6m!3{P_(&jJ0`w5`
z^n)-4Ux~L;#+gU4_bsi<3cSrgaV~9aQT+|N|Ah;`F-eGyp$-3tI{BsFFTDz#!s5b0
z8U}`&QoWx)W3loc$J9un&Ch^E+>j!?to*olo;>-TAodrmLVMyH&3a{ZG*{9@>y7R`
zo?y$Z?FnH_&R9`lQto^9$KJ5xcWwW{x=oCkrY=-n-e6^vSn$LFzdD5Tc!5}k!8+n<
z{uHawuE?=^Nfff$+V*2FU)p8K|BeZ+UsxC=g?7Sc!UtX4Rqs+7L8vk2)166_I(F<>
zN951$r_>$h&g&RXbwA2S{-TUboJZ0t_~RPguRXx(3vqcNV5H_s&}VPnyvg-qm$Wov
zP+ctdgFY<rZ2b7~8Sn;D#$hZTvSxq4450!GBje>NRWPL}ylZI*dlrNPQK`%p$pi1B
zUUB%LECeFr`RUmNv9qgKDoXTeRkEI|t1AZY^3RFMPZ2AAa~P5d`0Pa9$J6C3Yd*Qx
zz<_3zAZw~bW*Fv~htf;Hi9JKAJ*S}Hrntp^(xnoKJz$sqgPR4Cgrj_UqQ;WNj>$4Y
zauQ3)fNR@_9|g7`o}DF#QO)+4<c-=w#Yf?-H}M-B8L$F=;8UT1kn|_q((!$wvW{vn
z$+OJf&(>^XZ0Uvn1<M88XMZ3<%Klu+iHeDNlU#)n(Lt4c?r)_#*zcVMvzmCh7-0}K
zu$5Ix`^1kQ>#wAUnPrvA7m*Ibfcq%qF^dYbCdMHs>Huqf$6ZZpR6(6JmtH?V8m-BZ
zj__Ff#!g;-%Qh8xAbSVI>+g%M&5w6%4h7RDeB5gk7NTJm<}SlRAa<q59T~>a2UFxI
z)~&if<52M$u17_>@0uBQIO^-y{VzfnHZ}TY&g>y*6fpL0N3F7L^cQX*>U_cmOG1R#
z_|(9nVWKsgm}%B6EE&;4L~<@wy?LF!F15mcz^$sT@!dP4Lo?tZC%oo-Qt%%Za53h7
z`t-?@s?IOkJ8|{TkfSU-YfwJkON3I<t1=cFt(M@@(AIvP%|Olzf4<WI9s)6O!*d};
z<=F<uh<<_)0;6ZvV?<nro&|GDj#PfyJerqK%~I1=`bPW6K>p{qD4%l-ruQwZY1|1M
z)`t(ZV=1`gEIc{zDqqzjSm<yu<w-n&JH=t;Ye`7}%1VsKz_xjA%ytR0zz60Yb8oFl
zk3#hJEn>hDZ=|X<`q1n_3$dFnZ$K4@dqH8EWUckaZAyFa-naXOhZxsX1C!`|>0b)$
zSgG%fyB_ILdW~z;RRX^-&@;NL*7g&7X^%UvVi*e!U|qn}t5;$|%DiLXw5QA?yeRb!
zff22~VZ#O>4{uY|_AoedR?{0^OXWC%>0|nHHXbUd_qO)Jk65uHV0h?F@d=Xmix}&p
zfp>VBnM0VDkPzFRqH0_4&GTfRe=x5~|F{fFiFsAe&;JBhddXKcPcK>osob7FZ?ABM
zmQ1)GnRV#%&Gwz|f{4WIES3{Uciq@Rtb>>Q)Yjpr;qgMS(b7(=aT2o#UgGG<0o#-$
zrhkZ)_9;TX75XF8i8!tw;3U$m0q+FScP+R^$N)sU12j$gMEb>f=Ic9;lyan_mBOK|
zF$a{Vmjg1ZvCAH`+*nNC^ig?h@N`oC?YXy{!*apUW-O)^#!L}FXH3kGol&bLFpR(p
zgTe`PUd9~`j9sn7atWomP$R|0JD@)Rw8*VU9sdPV(8fa_%Y)Xo>lZCiQ{R_GOhrT5
z)bwzg=@VSyyn2ydq;r-ho(DIy#VYOC0aSg*A(Qky#9FeP-YUA1(x#M>j<Re#3+OJd
z#KaWXl*txNgPK@UdcZ$5qSNM^s*FfPW5-_AT63-~KR@>EDxj*Mx3RH-`}(84okVyo
z+J1xD&NT8i-I3Q^Y9{YA-&j0O8VeKH!u8qJXmjS+T{!{y#x}6;6VEy7f-^`={qCC^
z3aJIH^4vNNkWf?uYa3{~iACu3{$Thn5@E6#dJ4X{efQMZIJmgD5FZrH_sFnvPNL3k
zG)^=+TOh8<1m~%ti3v53z(LxeqN3tTEk{2uIz>fI?ReTmfu5FDtGfKcWGdzz%nS-H
z#L2Nadhe*ar>BNfJ>y-+>PXfki!h_uiFRe9*C!u&ry4w?sht@nA8%M_c94HP$!<yE
ze5Qcn&<4^4q6Ew+s4Gt1dq=F8DSUkQ;c+Q8(exOz1gRtm-M8eoJ6+`k51?$gZJo><
zPJ05oq@1>OR9BNbYqOd#Eq?CpO&X$pa4u|I=133zq$>+Mc<pzZ*YQ`UR)jlf%5HM>
zFt|Xn=St<_e+n%#{+wDRD{YV#|A;rT)Rz#4emJ{6`q9Idoi&EiEucs<okR&*5~Tas
z`|nF?dy0Ywy;v1HQ}xcGVuK$m>r=#8DJr{dKmoALd0=u<$~@M9^*~4DE~`Sao#uXQ
z!dG^WS5`DFfEa_5$sZLH+RC<l`=fH5L*70<*bL9Dl9-Aio7P;`$qAe`O=)fjO$>gz
zbENV_Gl@+jMiI<~VgHN}ul!(6chBU6tMALQQG)dYh{jahq)<1P;0o$_gaj*eD!#+z
zX~D)>=Py`H@gY98e-}{-InWy`n){Ypv^IYDXN~@N#sePr<73I9xgcA!F*5Rb4zFTy
zmrwm4<@9eLRD_Lh9h_-tQ1Q=uM?J=1VVo|03FDw~6mR2#X?a+2b<$3O&Il7sKS?H;
zc4%a7O+ookA53$1U(YT<_6ObvP^c27DtQIQy}CyJFJ|Aque$yH&Iy#pQ*WPwB$ybY
zklK0L_XTmZqd;_TZ)$0I1X?dV5cj$<jl97$y+Ps<H66zpY;gm;foyNmm(bPMcl^bJ
zr2zO|JwNkBYsZcU;CjLP&1Q&G6)t6{_;nE#lkRU9a`U=-vzl+Q;8ek;kCrRP&+2&`
zMrM>Do*ZgY<x9&8z<On(m)@OBns9H+2ygM@vhoi66^8eVzA_hqvi4Lmp*6_}vaUbi
z_m*`(&rG_Q&Q}KNr^d%F@|kLnUy`5N8QlE!>sJ?NXW>6-`*UqLr(v8&U_B_)RQ%nW
z>pDBxyA4;;ZT20BO*DMu9l`a<d3eyr!_CmJnNZl4TU1IUP5=6^uV2+9r~;P?X<fIy
zRN^#;ALY!RyZ@6;qMlZoNf@YX23m*41H<`1Ci!fUUFI-x!DtXQD?ahv4&jXrtcUPP
z<HRS;p3aSpJ(y8yd1zc@^zJuQuL+m-U^U^aR87_S^}y_mhBZ;X{xJ4%C?kO(<HS=S
z@JTeKtN6R9FYVSi4JHGSJ)E+me}diD>r+wmko${(ccMUOPD#CGs^XFR@Zo7pSl1QL
z!kZ__|5md9cZp@22E-C;z}VMGSc!hqB34iUfSe1W#d;f<(R`IaGHv(ntwP;{(B6mT
z@sNtoMqj(89<)lhJz#x{@#Eua)YR0o%IANiBqw*GvC&u<pg4T^@Wk2mhR~$;HKgRD
zLC`uv8FCB=80t;rKW?cuZ}g2I*^scB28!V}mT-qRy`WaX+_Jx>rlzOo$Ty|+K1_7T
zo(!UsPSAQGx!FKLRSsE#wDc58>h$z<SW@L9DZ|Xs!O@Xd)%S86sw6x|)Zb0W0pGbJ
ziPJ5bDKjD5iXv1ycoaF`c+wApIjE)6C?0;pU8NOh<dBq<WOQw_cXNZVCvN{F@-35x
z$%iDtv?^{^R&&&jF>a2Ig8t(?`s;nXvuX}~6~VgGwpJs9k%bS;Awkk5@u4O0MZ6|7
z*gA>)(2EQFM1^Yg@`RO@RmRZY|95ZBOUfQVd)Y$WfruJtya)>`lykUxU2qxXdJC-w
zlTM-u#@Xo150j>8E!-|Zm<c+wg4bQZaISHG6~NaFk8ZfB*cKfVLu`Kl^)D>%d?H5b
zu}o2-jzv$Oe#e*zdGg-fyTs}c$krgFiKQ)UIg6(RcTN1re6$aL$v`o$s<W7UP`9Co
zab@|lv^0-LjHxETJ03Zgm^*j4d+Kn`Axu30t$~i$f8yos&&W?+yM_jk5N0!G@8)S<
zxO1e=`|s_HD}4Cy;Zk?LQ;fECWP-lk?Z8Nuu{ZxoFI{{nZ!asaKgT=12piB#zG(vC
zZWUIDc%?<pp6O+a4)s$?h>N@9K>;bJr=xq*gmo%DpiBb=>=M;XRKSyE6*m_h`TKOU
zrQTE7;Xwb!+JKv5huzZzWXr)=fy3VE&;Q6EnqYE)ZcgtVO8vK3=i^s_AB!^iJOptr
zmK++W7)ZOe0%CT66+_~EJ#GsA0L<)&ks>o;Aq%M@#U`GTQOtci@%Ydo{R<Z`JI>Hb
zi)SNtF}Voy^V_4Ku73`YEb2CB;fe1ef?=dLJK0a5(O#5UgM=B$yt8ivha6@>z#8>$
zrYd@-K6vmA;~NJj-w2{%0AB~<mz}VHF&6eN;8<^kNCt9$#oSDsufr|`t0RuWV-rdU
zOhP4^8*yBa9T%{+1GMxxLUG&vI4pUz3@s82Fzk!bfpf^cLjwSaoY)pi^O{g-6xxT%
zimIqAAwV^vZm~sWk#EG!$QTc31(pj?w1SV~2>vIUjh?Ghb8~aQe!U-!UJ1fT90b$9
zOwPoTTjJ|?0r>)6DpGklU+4bGgm{VX1c4c#u!ART=k^V1GOh&C;NZ%*ha+AbP55VU
zmBJ$6+j{f@iX#j`QED<!p~&AhGJ@$Kj`dc~KLGqkVb65I{0@_c%nVS;VRIZ2)B8J^
z{jvN^`YYC2DM5A%V5(_Vlu6JRgS3C}s_V!9z8=xd0JZcw*hd;2#a(`v+a?}0N!Rtj
zNpeCl6S0N&(%_p->Cff4w)sY<l01XJ=mfZAIIiXi4NJm(^!CF|0K$;fzr&YMdmD5i
z(_M$_J7}K6hm|zzK<V>);uE_J_lS><%><`IHN5`PMasRu9nu-W;Y076xrVt8RHAW7
zpI=;%atW`N-MU^>qO24*TcPTz9@N-kCHwf>ihzW`d4bW4-B;7DuCqV+ZaYXwLxAIr
zK{X_1#ekjAYJy601FAQjZ+;U!3atKZ!QLBE7(tk-#5qSVuUiMXAh8+@YtGn{(5wf7
zC^CA(wQ7EP`jsot5R&+i@O8rI%j8_0=@fIQvDzbO0>*3qKM(7X_0z9-`iy)dzb+A%
z-d-Jttn^g37vg9twt!+G6d1ardJ1fzB1WlLPnC=G0YEZi%Mzw@4Jm$&w%>ZXyI~7e
z2@Vfv)d<(4u%r^y-}`E7P?BUUQ<!*#2-oG2U$+1*ts@JxVq8oYaVT+GaGD8gA-Dzp
z(wXek{R_-k<AB}i{dK7$Nz&R2L0*&`Y*37Q%cK6mlqN;mo}7xm1i&NnG>0FXLI=ty
z`0IR5@pIULi`QR8V-;^aGK_X5o#F(2*to-~1P;HrM<{KYnhO}teZ~Dqmkog8A9n?+
zjBL~p|2~cbvR@qIn@9XAdyvQ&MMfrFIx)jTxqxaPk)J8NAN65c)D^pKY)t`3gd}G_
zY%Z2haA?jFSUH*@{gv|=`{2>nQrbbz6Y~s_1Nri(wRJ3~Ty1x^A8rlKEEoxt$MKt#
z0MXQ%GZ6pxYFXSuocub9Yye}C?}!bk2NL+P(eFLbT>edtt?~TYM4K=$z=(daIoe&?
zy+(z1f1)`O;T<dzdR)2M1FCnq&eApo_rwGi0Xf|Nr+6<~=O*M`LKwpOuo%ToJ1lQM
z(E*!Z{?|Ii(%Jra>4Wymv^yIM1xoDirwzXVNCI&!5CgDj%~njRATy+SJ^zKF?>{U6
zR2SVcworAr-G5lIpFrt=u{Z?yI?RiIy)4$&{OAF9I?W+RA31V+>ejnNFQt@e#gc0$
zSOVpvVx0bWjcPq@Ap=b@aOEE#AAZ7V!HUVS0z!m^2+7BR-6-yO9t7tGH91(43Ff-)
z5|CLM+*}stQrnzI)97%fLU7lvLw%d>ipGBFlADR){@>K-(q!Mm&k!KQ2VbVkgv-zA
zPrGNE!NmeV0u5k&|9ewC7e_}H7M9mR8^w+dbeaA1^yK(I{Foi&nx(*2ktCn{{SrA2
zcv>Cv=nzrI*B6WdmO>D}&;8N#-t5`x|MK8hw#$nzj5GOWFXl_HT(>^s<po>$d-z6N
z871;q&KuO?*@FL>DoC%wZ~*FDS$^0#pml;`M>FvmIRyp0eVm6MZh(0G;+KDo1;T~4
zkvKQN!tHA!z-wq41B5qa6o(AGJzlf0&o|AqXXw9g1W#w|TIB|j#^R|h{4KRaa>tH3
zz3|_)Y3A(s!k^8}{RdK)yJUxIHG<(iKu_rS3GV@|#w{OaYrc`OIMd|*;jufn5EB^@
zQA>gY#pVoiXE!&oPgbs{vWI7O;4d)!&j29)2(|k~`;950H(s-wVG2QMQd|4q<4`q@
zrW^45Kk1KAlCFOhQKAH1|N6fOmH)>#h81tF0-8GW>le#<48h>!)sYnR{l9^}Jw`~+
zc!7okg(s0^iEaa5`?Yf(k`WFH=s`gGhd*pr7QBNL(SQRLwu}Go+az*mtB~Lcc&gnK
zUIH&({K3)0*y8)(pe*2cPB|CUpwyu-M2v0wcR-Rb2HQjlLpw||XsUn)5<bTG{ZM`)
z{Sn6obH`33bX;qY!f&Ih13(Q$p5%22dHD|w4g0d90d>H8$8lw2!lnVc+J5;xsq57F
zB0l61C4T-_@8AEzKsuCq%PL6n@L|F_PyMhj@D$#PDhcBUWKy7|upwaQ+<v_QfecKq
z$e)Ngggq9j(0}Wh<}2_SL88`fy@xc3|A~F)5mrV<<4iqz6yj(U0qNGYwK3T*Ac6uV
z=6puZvwiy|WN^aJ7-kLmS5CVD<-i1_jXK*dCLW~+6vLcy`4IM@aphDP2Ks4bZ9M|t
zec`hdLylt5G}nV5lqMO9ew6q!lbbk}1}^3jVB_r?mjVDs5;AK-4n{a7fk`g#T6?1B
z-Mh#5$)saY-@oqb+phLx1~r{-VlO0qcqi-TS8O?2N3gvy2$XAx4UM_iFs(kbb?>)&
zj2pV#FsKnjy!iWKGt94Vjnj0;z#H8KTrnapO1Y;mNHo7fa|XMgER(eJXU;5O_S1Iu
zf0$pH#}T$i3}NG7u6jVD0qkDy(D!w#lZVs499c<EB2e5qrT;y@^&D=Ax)_=n@7G=I
zv}u1l##fgi4ReQ~)>h-Y>`I_o{=o4Y1cUr!OpK{F>YLUz2tlxzq6;769F!Q90M#NQ
z@f?c#zoD8*xYqnED_avb66ok_OK-KN6R#qD=JNIf!XdxE6?GdPwhg*-D=Wf5ux$-5
z4NcA(21SH`4W|`lAIviUPHhBa>&-V{5YdiC#QNpMl9nAS89S(O4wy5e3+&-k`q~`p
z(T;*oijjnnN_1S@JNz)r?wC>tH>)tzRN|{@CogM)p$)n@hsLGy<v>}Y;bmgtw9D%!
zBbtx?e)N%x2(27&jYBJvq>0Kk1rZ$w9N8$WP3L1gYMlSo#VYZ_iUQyNG>@pMA$G9Z
zVyhQUGSRA{VgzsU^VI2VF^Q{jaa-VFWFm8wI*#~wlL&+)x6DD<T3q9NW4?jIV!!#G
z7d~UMV2$};b-@~t(=JUgAn+@gV=#s}YAI^iD7xm34h!|420Jt~G+<g`FQ3(q@=35F
zWBvtR6?mad_q7FY)H8*IhAN0O+}oqLN^FNZnIS_$6^eYW<xF@9p-0b$of2jW8xw9K
zl%aSIP*YY?8t@n2ygGWB2yUh(Ha0v0hHxYhzYXfHX#J+A4n0Rr`3DJR&w-ngnkC*S
zjEF2tSKEZyh0E0JW*8U2O!{U;I+`^}Y_c*CIC}IGjv|yh&2@Fu!9wt4Kvzt_s9Sxo
z8!<Kk1QxVxrGRjpID}5HwiA1yXM?bL7ezIs{pNVJ(2Ui0(+cdw?0MnM7sFU+ukPL3
z_MRB+Fl95|PIR@(@FR>qazwc9Ru^Q|sNI6HXbv~^k?}2MZ;|7)-mS>+s0cw|H1cPh
z8OJXx9ReG)kuP6lPPFj&1R>s_!60%vb`BVS=-`k;qC~Ak$eaPw8p{REjwURRNNaf_
znHnF)D%PK1a;g8VP}+hTeu+T%wH~hODO*42Q0;!aXXXfp_v5d0o5z@TY!7R|3MqEc
zcksF0mS8a!Z4l!i*;t7m%<NWe1k0NDJxgm+*1zZG=r?T=JNiuWzGRXz5m7&=qylur
zF#3j1lKT3Ykxkon)#X9i^7fPsU5p=EQGt9L8hVeoYVLujvV}*9*!2lX6oe)TzmMmb
zCq9RiOTVC?0Hx3R{Y(&py#v3win8)1?<%spH0JG)_x$U@wW(u-nA6}oD|~;H_}o;H
z3_hAFN=jYb-G8V0X4fkzZ(f*syI^>ZebkUbv-D*nDnOHuipjjvW?PY(iK==%FB;Ol
zJv7p`o0FHK@Lyvt9jIw07uV4OH?p^f<kiD(4V+si7GTi%|G(Lm8~bH#3rZ$u1JrAK
zu-_7lmv+JrVDuL#cZ;&%Y)QSlw+BMatJlykT`AyKRSf`izIm%8BayzHzP3Zv(F;xO
z_#yGpssoxjoXxm}I5mV-_9AmxDJF-bp#>6uY+jtFmjXb;g{2wSU`t``M6cvsirOEy
zu_3uj7p|J?JPM}>!|j)mfO~-C7H^BpC4{7Aj3#>R(Ah1oAglnBeFKWg5cXpiy+dO<
zRSG`5z|{t<EuOChcr@GuAmL!Dsx^V_BybjO75NAnUE*~(P;|l5t{i%;2}E}M7sGSG
zDACs><8<=t+f6;dq)19)^O9QKDq(53sS0H)%Nl(ZK{Jx1qoEl^<$$Z0xEg7WPRJ4*
z6x>R?XDZ2}`u?D1fYgp*{WtirnRjwaL8yna!M7U#k7P?t%|?Z9NF5*=5wvix=#<l#
z=g7N=>gU^(&0tN%)C}MT%yGnWxG+CI4g`Utdk#nX+O=y06on}BB-pDOTr+~GE)nCV
zu{g{^;6~lVifgZD92enXGD~>z<FSEp$4{KR`hb*j@|b5LJq4JQO*{%=D0W34-W4Sp
zs%c5LX;Z?E2l4)h4i*m%ZDZ9)APdhUzl)m>=(`~S?OQk6d9eJD!#A23e~jE9Mljuw
z1?K1GbUg}8G9&Kazdv7;*akvuT?}U^DMnY&U(oa#mjW#lsG5J20_U;B&wdy-P?YA9
z2G#<4W;aRknGKg|@k)Fb;W3;3JOkzYGw>-ix%7E;95}C!+~%ty;t4P=tRSg!ZG4w{
zu7!xmQO(H>6ortP0ex|4xr@r60hEvxY-0k9qhpltC4D8ZhA)OMN|wpoAzXY^KxOc8
zax(j1zH#^$q*%VX-R>Xi!QH(UGjN4O5I=4SndsEmhFJyFB6y2==7zHzk1E1+GPyPc
zW$1&LXDIqG3~ea9QmJ(C8BQo_)9va39J#(IzA%;W%0oNpCe>y@qRJ%yjGhNw8`{ku
z$Z$H(4u7P~CVc$tZ(!~iggG!^sqc3PvL;+TBCnx}e6masi=56Ia_e9sfS_igya=?B
znt>-O2OUFF+pLZe9YR-feLR|5Wc90Gy)qnO0fnt|Hqn$iE)RiaXw7{mmZ@d@um<4U
zO}&9*#Adqx`+dv`MIWE`Xv?U9k`Wz9xVWm|V}Un4pFRx<x110B^;Qw1LzBjb%q}GL
zBZt|PX>ytOEdZg%+kIHxCa+ZjPEmz0S1u%jm>Lr(6bw$#;Nm`yef^qKP?()Pf&qS5
zo~xw){P#{H;)<E%IOdV@u(6eZ1!C?6At3lmmyaAolg-46q)0Goz%2>D$}m?4%w*nv
z{AlSUjdo6ZNtcbZH<+ACPy67eSUjf3nZ_<>E;-;40J=wCzW+W>2>;rSp-Wm;5{Wgf
ziHDc$4nMYjN_Bb(FJ)5(>ls+k1Y_L=y*ca`u8f9k+?+AsH#cta20Ge}R-ByaCg<xn
ztDNaEAkpS6+yU)KxxTSc98bXO$T_Y|vEg?SGV1D*|52OirP|2mm_Yi2p-YH^RMBrx
zTH8QHmce=lwRVN)IDUCH^D(F2Tw0HOiJZ5FnOzqX6LD1Le)j&s8+P?j_njgOLRlVW
zR|e9EygQ8F72t4#QoiB(fd~PK0|u3U%x7Z(L+~$K1bO7CBaF2FGd%|_H%e#W>oj||
z&UyQd&EY7;P^qb8WM)3`Yztx65sQ!$LkU-HEgoicm&Ba6H|nXXXl;gM!KJUdI}F1s
zQ7Yb)I%`#Nac=){xdMi#ro0n4%BY#Nruxd*_4up)!vef_v`?bJm>S#5)CGfSA=tx9
z_@Rq@(U`Wd;CuJvA6%=13D4f=;WsQ%UDs0Y_b@@QI-h&0r+8EL0H{d(ZO+16l|+Lh
zN&!vs&4Y#?{2_IUsDwyluMG7{8{x^E7}B<r+Fm}J>23`SlHB_xh&Bh~Fs{<!gw{2*
zF5`i%Zxp{4ofe?rl6Pf<RqQYI#*s~<z6hg04Pwjeh#@w|X_RG3@6G|r#{=O}gZ4f{
zhHK^l&uNS*I3}LHQ-6I68?*cBKS^mIEMR(tv}Dl!I3Qe{3|Djor3vos0^Dy9H*)E;
zGGNGE4OzPnuv0=i@bsoe&?SF={{TV$FUTa+Cqu#kqZ9+YK#RA#kah7>ETqx{a-u{O
zsxL?xW(J$t3QQ*>^+n3ljl@!znD-?o4;RNI_?qx(SwlFRg`2}+4<&`D-4!|!yn3x9
z1DH<P+ZCff`{D_9jZR~l(lXMR1_tcC$W$n#@+6(oJ<1(wXwB=l@$kR{F8_Gac;CxC
zmRpjZpB5ht<+`_gR^gCh01Dq81w{czzT`pgD>FF(l7+?{Va~jQkGpK2ow5cw(0R7z
z1g}^zP(T&^?^sF(7t`RM;B*kppC)TR9qv_SzFi*S6!rNZ6QLTUG-5TuEk(C>C!m>V
ztrJ&>9)utcj}qLbJE5`Fhi?SXF&C+Pq||mcVYfBLz*Dgh77u!ST3awZe{~647uPGk
z=E!idUBi2T*CD%_cx{5WZO6t2`iJ)2g?c3?KuH2-*@SkyRY~s=G_BWL=AX!*>vX$f
z`#n9e2cV>R`6f%i*Mzd!jBNjXd{Abq{KZ+<;h?N;)c$lF(tP0dqMWT&CNC~bpd_|5
zeiWy9ZomrI%?!CLzM-u^e`tH4H1%*K8n@yZnO_iQ*+)7uSV?5LYPxL1pmK%wa26F%
zt(eHrMWh<ithmPK4n?jC+B1Fnee?%N>Vb&cI1CTU4OPy4p=(23_r#LRXo)TF=;<$#
zruJ;>_}{*SpRq<mx3b73Js&>@I*H56AJcGW6wbV9VuaAh+_#lw>;nFp#(GZLk3?7p
z4xSvR(SZj22}l;zN?gf`5=Q5zr>7wmhGE5T+%~wWw4&J&Boid7kF2xX#&{XC8i))W
z?N%|w5X%Z_|A=3CqsjBeY=>q-j%_v>YGjM?MY!8Pd80gGMm#Nb>ji4#2T1-Cd=crQ
zmm^GJq`3fnFypV`cb7H({E+(~-sX)GZnPUm*X)CzEFWtyn%KwXIxi2Oujlr_D>@W7
z45GAo(!aE`;!cz6TH?|+`K3>uBy58Y9T>~Mn8a$6IXd(H3bjTt!b%_T4Nw79{I;0E
zZtkGi4TFTJR5VR^sS<FGs`qW5QLdW#T`L-Kk~Iet$XI3-m*d5*CexD?N7g|T!YP35
za=3U8|96b(y57D$h<|>CVhsn?La#zkwc|d;DYBfm$x{7@xbQ;raCTO3Y38`g#etz;
zKtQ>%+9d19XI!jwkph`?5M<AsDfALkAi4&$x-Qr2_;R&dJ4E9LovGHseeyJ@yDp>5
ziRIN;1^A0+seS7==BqRvTIb}B|HwvU%!C^RIlr}|)&~-rHkgvV2Z8oqcJKa}eLu<X
zxfuGC%8cy#D7(Vt%VA18>F}_H=w?_fY`dvT`Z2b!BTVKcM4vV}!LJV}N=AWTe*eav
z&)L)7m$R3}#{<!re7Jx2Up!3g6<I-Oa`It9S_=}%XbOysFv(xfI_MF;$dG-vy8?7?
z{Vy_Eav=M7^~-vp6eTJrvv};UQ+QOAEcyQg$r-#y8G{MLPT5qHC!DL!6$wL_DK^#x
z!rpBeJX|=(RiDb977?1;Dcz=e@CjFr<MZDJ%GVXLey;8deR;21H|xxn2To&dL89aS
z@6EyiF@RM&KiU7d;=tSQLwY)i#29=j4g+f`&^%7_B}~I*g7u)xP#wb4t(Ivx9-W0Z
zi4XovxK}KKbyHnng9WH~#zlKdc54QvQW2l6C;K&b^4>vxs`F_wlL-lbY(u?-P8xjq
zl=Vb5$M?NL))f80@dtctiqiDwuTcehUTj?a^XIYElj_=9BHoU_kf*rx8BKeL;wyoS
zwY^s#*pzwU-?7@x58P3moUa1|(t%4p_8wE)VS!%=NJU_d`0PZw^$#?O=vi~QAT2a!
zR+V{dN5Ho|%F1v8)vu7Ro758!aJ0f&E6tRLh%N!v|GEI1L4i51FQ~453Fs6;=$o;%
zfq?-OXX2rl)P)t1g-jD;9btI9UPil4D~2la*UXHmi2hs`cADT!X`K^Oh{&*F+Pd}Y
z__+J&(+@q>y=E|Saa=~p9uXNS=zrA8%C(>m=km#Ze1BW2<+mbf^=j4Q8Gq0wpeq6S
z<2GdVd7O{|U%zm%ZfUsr)_Y9ttFGAh5M~i>BhJCDY9|Yhf@Xms3~p8w)8OEsbeRqG
zKL>q|IKL<~La~AB52^f_*U0{6XbKd8-J>T^U8+CmyD*hL?;renZv}hA?}s3}{V<K;
zyC62-0ARE*62RH)&gzu6b*k7q=8dC{Nxt2-spEDU658-dUAfnB+^F0ZRrN#j-0PpW
z5OTufNuHd2Z!kXqu3<77QUVIXACQZl90OORt#lSQ%>GjwuZ51}E_5R*{j77=Vv)BJ
zCUb*J4f_*LHSbbb4(_-h&9U%Vc<GixA@5YqGG=f9U0%_WD%16TdQWT=UeerML&c?j
zaW0U0{PU)W$`Izj_cF>$f}c)4j-C&G_|l<kXNtz^MAi1%<REx%C(aqp_VNobyCgOF
zZjxtOsYLCXt{E}U!%WVl?aC_=3bTgiC`e(A%6hc5_DH#}%*BiiKG;(&|7=*vRhd5`
zT_*A;nkM4V#~x^=FZ+q21yFUXB5(SBGYoO{L$^3{7MI4qKKF=U&nyRqLg_zpJ*}?*
zYJia_mp#RISdZ#ChmS0!37@d5!L$ns5AlEp1kC#$ogLdl?bwp*53LHQdfp?Gqejsy
z4PJ2>F7|qH>hx(Dn%GX1qV_K!I*fTH`79eCSdrRJMa`j?dnwrIoeQ4I{IT>;js9s`
zoYlsF79kv7z`?pg&lj1W^>lW2e)`1yT@};Gn8)S41pDsd*LU}MyT2j}b9{-W?Nd-z
zzvj*<b*{Q+aA)lwi8%Yf1GYs@n_NVnzQ<8VN1XHPpvnCtuN2P3)bXRm!Ghf>$J_@f
z@>`E{rhoH3(R{+P{}N-~LTsrBHlYLt4E-*f51|W+KUf^BwbpiWV2|;)L#?G>^(w|v
zcutbM56bs#yeARSdmW>iAB;b?2876el-su_4DIWXaI4PjTI;yhjr#U>X8MEjDQAj!
zw>28mx%ZVTtGItGAXqy<@rrL4TfH`?(Hf0=rckTjz2TvXd=h~m!d!k<f2Rk;yO6>a
z&E%-@zB!PUi^pq0GS<9?&@hXcUM6iiVV^VpK7-@x`Sf7t4P40>iGysgMMhis7a)zX
z&jAx`+Gbl~Yf#m~1NU`RahD@t_L@hKnnfC~2rxO{1z&db&dzc1=tKEWwv6lvd7sY_
z_Iu+{rt#wn29^HJlslVuv<2qN7*TlMmt3$D!>_&g<LSFrhnqv(R$*V>CL7xj`>EIW
zS)m2lCR~6Kn8@?5R3BM{5B|`TWZFS4P0;)~IA3u2ZP5>D-SR8>WWMKE6m>lZ_UuKM
zU*1YBl$SuWrN{G%tVB32Plc{v1(%=D_fOeN>V@Mh<Em9Ymwv`9H@i<#2VO6JN8emG
z#h*ORO`054Sbpg=e0xZuenD|t<jeWn^_t_<&sx}Cd%W@s2EEKR;E8C=q6oi$>}EpV
zqd^0q9PlIVUe`_Ofgp_P&XGwrkq`X*xy!usd78C#iMxf4PVobihVrvR5qFm{>=4~1
zdQh$S3q%~zdj<ZuzWatc3$1m9c%#thM~@?JhTMRO-niOXdpWoI++cr0e!Hd7knSCi
zM8tXN99>=AdHp}84DFY#tRC4Yn`dK=5Z4>^G3z3!wXC1{o~0wNii!#{lPyQq>hUy6
z@t~&2tq&9aSlSOvXlK)S>+Spr@d^=-d0tHk(0Nv5NpAM1czcq^pthhacuw-@vmYqK
z5(K77(P_g7M(-Z|0}9A5JQtGhdw6(6d$9IBMuE|gqfvCL;(C#+MBpCFe*ZkrHcLxO
zz3mNJ?{=}RsTm}0Ih9eYaiNP*Fiv7(CC#YucUenGhhKg6Al3Nij)+Q%xwhYIiPeh7
zNG~@x9F<8Z@MIRqh#}nmSE)z%ilfofJ(|@F<xZe`qFG^n>1X!pi^tgYhh~T(HV;vV
zo11&_seSPc>1!7S+2k~h0)Hh8<v*qqf7Da?R6+V-h4ZEksZ$Dit)hOMDatuDwth*E
zv-%$HEg;wm&Y3K7zo({r=f;zQySd~Z&Yu_F?<dvjT6?HUj4mNDFkia-fQgQ7!*{e$
zme;es=yLQ0IIr$kJksG+x`Q}^W?zMW94+oiNCsj=EF~zv;99_4c7R@To9^xaD;(4a
zq39A_XJ$6Lp>MZFX-AJ1PwN-8K0Oegil<^ab4%g4`-Hb6Lz&JFnM)M(JTIv#l4ERQ
z&HdhY2z%Cqx%HhD$nbfEy##CCi!;vfH$yoo5eOo5u-=YFSE?MXlXMmi@`i1xdY_Iw
zi#N{Pn>&Sk)tGbzZNzS4(fA=u?DUUQ-4%-7)r2-TkTTJ1d1d7)n}o}7bNIMS3XO@D
zg^+%lmR<)3eUdjF7wA;wZg0^tcTg1CFXeRf?V8m$qBwnV<mFznkG@jZi#_Ql+YyjK
z!ym>DC~RV~1Kg(D*r(nA`n}lR^gZAV)i!^ux;VH}-F+AMl)Xh;g?=;qxfl<P4$!dI
z$`tw}Qs<N4NDTzzD@3$VmC9a9jjnjGv^6#^1y85tnD}gf-3@*}&*vp2B{NUk5ybHD
zegvkTs`X3@&OH3>m7DJlSA+J><O;=O{x4$IygsH#3-fvlWYDb_J3*lA2z(_dWQkl^
z8y&Ylv_`Bee!w(5{P;uI`1y|*IUTj(v1a=Z3n=wSQoMjw@v2^#vgX`J%&k6xM~-I@
zNr;5O<pQ;fRnNf38m+bFLuNUBHAeb>fM1PC#*7}7`M`|o0D`A;iHv9U_MTX*!Qk;%
z;)P>cr|JE*IS%$0bA1YzW2#(ReNn!)_2d3OdN#~`SAih*{c~1()zzBgrDw-CH{WEK
zn`hYfLgj)|VBjFTnExLkNv+yd)R2&cJwa4nf2a<^(>Z`&j#w(;p-QX)EuHyxwf+(e
z*A&Y4FWtPBjOGc8RSJxSIVF$u&9+zF$?y!Hdx=MTFH6w++peTyjl!N!siV(?CJz$+
zSwM{o7rQ9$ewXn|U7GhR%Kk}QNh*dzulHzbU+<emg)-*<o^9WX*KU`{0UN6fZY`a}
zv+Hixd*$k1z1om|_~i*aXkta&sjokNoU-e|0F+PQ`Sa&_Yf1zy4nF~4ZLx8QwZ_t@
z;JpzVT?~(<R{{2hjn7nq$%`55QH~vL&U2$}j(`hDMH$?&T7pfLrr_DMJ;OYS+uayP
zTK|}dKhF<EPfyRqE<^KEt#-N}WxZCZa%#?lDrf7#K3@x+#Ym<ZNP}U&o#D%dYOizQ
zU{Qb+<aQq>nVp&|I#Nz#ykN~=0Rs&qTH2w^*wpK#TM8Ws-$KI>fzw!aH&XLyJ@UP|
zwfT*zvPAPUFlt@@Y3dJwu_W(V@;~pVj*J~u8Sldc0Q#L9#=WLieMjr@lu>n;<0+qB
zM)XRiRpYffr{{4%w$JC(DvUx37vW-uf><X?)+<%z_ut3-sbh(uMdv~Y)lk0=mNP0I
zJ7!vWmu=~MJt8h9H*>veSHTW_(&}5JJKj_3$y;%>&A{~krHA$>MMym~WX%(%S{)OR
z6;w*8sZ><omsFNLtv`hAGI_R@6?(5W*h-Pa1!Xesoo=@9-nUI7_kD&{uvTe+Z2UAx
zsWRRp4~Ur)v39w(^EOyBa>e9rs!8u^4x&PAoB&JnHTUi7`W_;V{W&9_s4;E3bm>z4
zZm!CrLq5+MtbSsak0o#)pij}M`=Iy>*EA?7s6d?IK~{y7Ud02dXHE5j*8RKKE~*zc
z#8)e-?fYfepl&pm)E56Ev(q=aVvJOG9z%K5XG?vv=GHQ1<wH7&$|)wh<W6r~fHq~}
z@cx(CzHkE!(081y=bkpg^nQgp5|Hu#Q`&dObN#+;OC?DO*-6>6tP~ZJ5eXq9*&{--
zQz%85l}$$3BUzCoBbDq;Ayh_4WhB|p@m9b4dEI~A&;5G(N8i4DJ|EZnx~}s)kMlT=
zQzI9u0wa0(P4#b?Z%s`{%Oo7s)O@EtQB-<Xo+jz{O<E7$>PJmH2N;L}Yt14dFKIQy
z(ofe(D}VNEpZUHK#NdQ*9;rSH!Fg=0#Xxh#=A#*bC+RtKKU7&Ga7npm`B2%3rgl%;
zG#=F|Y|-+v6z5zTJ7}ab;9_5AwEjWmZ5oR<=#@t}qK66$4Y87Puo*Pjo!PcF7-sPr
zgGsuFZ>b{LxBoPdYV`zHA;5));x;sDeWlNz1H^d*Yl@qVI+z=LZi+0CE4<Wlk;*R0
z?<ZGL9w-@HHF$X=V^$_6Nwm6=Z*T1i*^P<l86u?Av3V%bgH)TK76tM4rsy^U1B3Xt
zJN3_|uT@#;6LVU?7vP9l=GFsa7R~}Q=vLfH!E0dKf-$QKo$K(EWr8{vx{m<tv0(~}
ziZG8o<~NlM8iR2_`@qTi%kYx7s=iq5yS3WlE`TtYPHW!)-@Xl;Ym64a<_3?Apj;yz
z09EDm=eZUzgZMn@Z>kaWtM7!(@#=CZ`tQH{sfn8m06Q>V?s1wzv?O3NA;!&}4(z)|
z-Op<dyjWnP2IWqdhBb&S?KiQ3j{RWFSjzebNo@*dehB(YN@GwZE?ifz@gftqYs-_l
z;qqNBcNwP%>;fdy`;{Df8xLY^Xec~&dk=Oe+Rcd0mW><dy&>7d1?2)kYGy9W`-NdT
zWu|QDt?K{+wT<usS1bAbb($>s0)3CB(c0v<Z%df$*i#A4+sv=qJ{s9VN007)I|Uq@
z7?_N57Cbv`Hh4*%n&h2hIhuT4FggrHAF9ELxF?GmmNW!c1XG5r_*BU}2stOYH}Fq7
zt279qK|F+W>RWJ5hC^}?AeIiS7NhP7bpci+YqE+ISokZ}ly8OlDR#~vh}$3$q<q>9
zlgLD@I6Ba6V6Xr|q+w=;fYwkIGtk0NX+QcS$n&NFMA|KzHq|Cggj)v_Ey!RdCMG@t
zzXh*T7>Y)8zwtnsSs@MNPz*loJQ^&_midNY28@@(f<sghY{i+*$}sn(R$Qg9e>{k7
zSo;`IT4+fn8ghxkrgG5OxFHS0Lq-f-!^H2g%KuWpn(|xjAnrT`W`ReIgjZT7OGETT
zxQS}KyGG4XOzYgj=2^vKw9Y#}Lw_NgBslxP%m)#=O-E-bs(QVlkxL`ZF{(VMsiDz|
z7R*kswh)aKR3s2|ZSA@jLVXo|qA`^2V`GOAmkD#DK~-G!JChu(j%V)4Uj8+%72!e4
zI*YP|kv3Fs{e7q{?Lmx!#pguJpM&#XSL(|=l<U*p)|{XZ2@2{%9f{3Cn50X?{Nau9
zLfIGeE*siVTHK*2@LAY94b)l`7}!CJcw=7Za+A%I_Xdk#SlvHPVz*UxoJm)XzB8IS
zOluyMii<zWe#%qq^@AjoVoAQD=-D%Z6b-Tkpn;%hT&7@R(`FwfM%`>=dJc$|&<MJ+
ze(s*?PdsyB6<CzW=sykUzbAK8YqQCwd_w95JqY<V++Mnc4?PNsmW}<OF<QokoN%?<
zr3<}*1`2{S@5e1bA~Ec5XA&Z*z|u$1lp*;fFF=<`sp}vAlZt|Z8IU1<xnaWu;O+!Z
z<i~kSTiZS~NYIr298W4GPM@l32K|9ZK_3#l0Fk!!-YT}zQChfZ49WaFbcWX$;LIa)
z@QZ2-CT{H%BrsDz`ESn5W$d<ntxqB#ATVbLJM(d3!owP#J`7uZ0pq3=320x~4sJd7
zyYaq~pXk?Na9Y0i%GJ5jee;*lcr_obk3405yq*(<VI9Q!U|oS(8?3-sk@H}ES$Ko;
zg})hpg??y#W*KF>jh)>jG7ODuh2sVsEgXBkO+F;Xo}TE@F``a52VnMNhB{lSt(Z{d
zg@gb2om$t$*I#RwRp%dZ)6IuzGhyXIbh;^-*tOL=`Vs9HTY&{H&&|xx@aez<IW$}2
z5GX-}^BdB+{eK^j|Ar6wNNRvE{s63p-d*nrWI%*%+ePER_#ebbEij9)t<c0ex4<NJ
zW(F<%H#Idi%coZEjz#c#lGv|eJ{u&L5*Uk;o;jqZCdS>{1*Fg>06rU*<V>?PV?fm)
zwGGk9+nZwgGmD3JvOMCU=ulj;&k@O{7&Bd3>NBHN5VzF6M18n<^X3u6X)N8%um+X4
z&CO~R!T$b4y@O#VK-Eu5Rq#nU@?^wz_7m?ieiLPvxF7Oovga>e%+M@$`l<R&-SDJi
zW&J)p9Fc0Xkj@x@w@J0Y+fb)5tg@)fulZ1-aRpppj}?hlmC@UZw|i>5CA|47_>`*?
z;;q6;9s{{<r(TQYNnT?}`vU!OZAAW^kz5HYiweHF*TlCJt$zyxrmn42f;9?O=kfGA
zE5YTMCFQ9V7J@fqto*;<qJH`EWrSFdl?%O9-p!#L?*I{QzZWIppki%3hNYKJ4^MJ)
z8nqhE1;(u6zC54kze<hCR16Fk8WS8uMnUNTi?zS<`Wm)hhC?|1UPkm}K-B+${s5}-
zZBM^|!0=G~vBM^g!Ck@KqsAaD4uG_GGLW#E5zuMu>jTlf1MyT484$<`XkR0cj(z(k
z5QaXlv;FEe2aT}NM>)4o7IgO3wSz`Lwqy4n822QAGm&~*`=h2k&i{u62oD%+*xL*t
zi;AGegt<1EVJ-C#rYE=z(13D4ZVe<8G)-tMNkY|j%Arem<AV;Qx$?w)0n;+27`jPk
z3o@@0A)Z>$&R}0X05uH&k4YHjV^~8CP;Cvh_VGo9FK>rGgh0*3r(bBHt=);Jh{z=0
zj%1|sj58VwsjE`j`rAX9H7$8w<37DTW`IjScn~ojrV>HJaIBDxqURgXw3L=IEg7mh
zIS?0f^tL-13TG6n-tDDslhHt1q(IrF2*Ds_-7Of0`imv%JItEfw<W2#9EBrd2}W6N
zXO-GDvbV<>9d%r_@`~R(GN|O3`D<`iFl4F&=i`j$32#K8LXBfuyTaKdol+sngu{e>
zvP`Y~5f-j7IN)6Y0iv)47fCD5A953ub6yP!XKD9I;%deVpQs|pXqaYI0X{7r$v1-n
zKv#lBFVU5I2S%&nB+=d44P-eH&1VY8cWR<|&zOPj0>@9@;D$(j9C9@8(YCO=B9Pxw
z@D=mB6(|OFW#Lm2k!?$}24+J?A7;Igu(t&5P6a)K)bro_XFwxJA`K>AL4(e$BxU1}
zyrN=ui)5C=_Aeiy>pxH?vW93rl;@e{aN**ln@eq1)tS_C7fTw;GRi#l?8)KQ)>d5b
zAgFpka1y#?0TT&kfS^xkUq~~2U?DhfJJD&|uH^qw)9%sY^sVys84>lAlb&-6CJxq>
zr4!!>$P}aylX(<k6MbpScZxLVW*xmZ@hE{(Jck*>oLAGUrikNFPp-FtJNY^z(?+aj
zIHcmcyxa8NHGn=u&<mY35Xz{N@ADu#aj*~;Z?YtaMlZ_BQfU0TJuhDt=9af$Mc<ma
z15FdgSwu=FRq-(#kzo3xX0n*K_4y$B|Ls`gR$kr3B1}}p<Z|v!cuoxi&CQn(1_@6O
z93*NQxP09-xuxuq8v|!lbiXm<QWqN1MveVycLM~e;o`6>g!-}(iO5fk3=M6gK0uuv
zk|j`I^~k|Gj5MG08i~LyO1}3`;bEmm`>U<gKs-G%d@pI%yy}EOitP7!oNd|9MG)l4
zxhmvVBxDuzb?KhCHs0H3sh4f#9<b#<Siq!34qX(Nx`-@b4cG;yN#AUKLVH!3fx_~X
z<1p{LdwF?35x;S9DrmY@_#9d%`OKM{n)>__`1MmW<OH*`Y;J|?H~N7JLXKsykH-88
zaZ_4u$|25naPS7k3*f?>JZOC(B{KN8h!Z)528w>gr!3#?^o^?zTi2)P<ouH70M(#(
z?B4CeqqFdsXizzaG`cNcao;?i5jhnjEp75|Kb<RBzQ~belRo6)l23jS6UY^WbgyxB
z=_;C+qL@7)fq6tjJP$o@KC39M2iG9d=AaJc=409)G<aX%Hov4&%%m91=yTY&OE!(6
zCmrPhxp3x24#OPdN)VN+tNmAE&uw5lzPU?b7k@!WrfmHe{zdbIGc4~*4D!vVCD2u=
zd+@}KvqoFl%a*gz8HOoigHVb0Y;lNMUtk{97!#B6m|Kf(T>NL<3XcvAVa}Mb*}R$D
zq&@5uHX3BiI{Q2oKD=;qo}BF=R-wMGuh{kuhsqwA!^dxtLM7(9{U`SHn5T0aTMBsp
zH0EYSxb&C?hz$)V;2lZGvvsmGH}kke*sK5kyPcsw;I$cUxpd}fFNAEkNiZey2H7tp
z%-}@uemezL#TrC>Z6Gb|NaM*?M?(>-bX!#gsF2g8u~KL&RPUzG0!^@Nfn^&ieg5rU
zFW<1YuIi}k7fRmM*q2wVlTjhc+~Df${Ms0-2_~<$1Xu{o84F#^VZ0d3yRvULd*+{|
zB?xHv%-Q#RIxz7WjbCyaUO|p=OckTsV1*_yCX81lD=^FbpvxYNV1J#tMy97@?3dUd
zHf9$--F*@#Mo~d`h23=H5iRo)7NZxcw)Jjl+dcI2!lEokm>gb+VqbPFl(uetTFpn|
zvHU6TC4KKyv+jjYG4J^J<AY-kJ0^>!R~TkHo{SdI-O*6(kxMLvZ8zl>I%z@ltZN%Z
zhz)5mu6Qhb%mqX6hG~n4p*n<?AKlDn)@`IsUa76P%3&eg@Xfm|<YtVb`kQ@RMZSK1
zbvu5^dsfF-8+<GC5((q4k7GWD5;!;ueC@{{P5%I+1Zrkjd@<5zgj>b@t%krVY6Ikh
zHyCeF^j&!9Wo6O}MC%~D|IxYz&A_<8%uo2{=b4mHhd{KIxkpG16T(Ui!lt_khxgFu
z8ZFxQRLR`ZYc3sn>5_KwVybpe9U4D>f-ZWXGt~MS-aq%Vq+u+89hKxjO<oS)Vst+Q
zcO)S)2fcBtklN_*L)X}=7!AG74^T*PgcY7DP}c~mdF2VZ2X0d@^y~w2m1p+%@*rh6
zweDf}y4IEf222PVN1cXG%0v<ex@%uVaO-6y`g29rp&G|@GEf&H9}Xp^iuorJvya4H
zpu%;MCOke+*gxp!<w&Xb6*<#D7=xUfvM$5b&*sYi+V-a6ax^Siz?~P=FXY5nNEmXU
zQs>8DtVI^ROUdFojql$RQ3W^oiPMx!RZ~SEcF3v9B~j8cGnIzaS+PfQI+Sn@JyAY+
zQubrEVVMNQJsxcsEAnZ}*msqP9dx^<5|t~2g9m-A4yD8Xi8RFcI1qi1?sO@&mbyyG
zFvz*CkgBoR2v(!%75M=m|L0Uq6m`DTae0kOU*iPwj$8LV6CxF+m?OB!$~|fR732$G
zHsh%{e8^973acg|dh7LnKvlq8<D1NF4EzMy%2ILX88Ryi$|<;99dX~^ZskZP{-|vf
znprF+DiX91r6x{UUnXis>!uW*_HpE7twga=$RzajR%7sOSEM~~9F_*5MN+ce5022u
z925;R+(oxPpCaoL(q<0Y#dmW7YAe+8S#qu!`@I@YN7MuYMdUbqm{BB!kiuKOAbaGG
zA(W1)T*2W{8xDJvaWOeGA?Ks6(%5XjkOv!)N0mNAEYK=+vCk?F4{diO%>;v&Eqm|q
zW2&z8B^tXo73_Sd_kD=%Zkd2f6{2hj4!JMQ=~vm`ne7~%ML=h%Jay)q;^;dY)_83>
zlbQwYP{zM&A{boxFk>3zL&qOXAtXgMQ#4;Q+Ei*Pn^4ZuXH6i@gf9DL?egcp#P0Cv
zHrWPZ7$N%75>B4lA+XU;b3Dd#Q6=-<KF-H$`x%ZAbTl`K>RTFyb^-B3L%?(4Lth_9
z8NYclm0DC!PfwjOCo`Xv6th;+Wcsx5*$^DR!9WE?MWYukTT2y|-qrL@DI7xCh4Lh8
zO{$ZmGZ)0utOH`4bEicVHQj?EUY01v{caY&d^EMYUCW(ks8&fQdhLZxt9$0y@_ELV
zKTU^Ln+|#>^6EoKb@l31?!`X>p&xMZCaX3EJH=vvgqjI5Q0D6+dD*DVG2L|H>(`7u
zH_&i^Ds!*-4}Kexjl!19<9lxSP3)+$K7{1UFeZ%V3Nfo$G;CL{9uiZSTi)rt0%-{n
zH(PV=t(ZBvDCcrWSgrRZ-*|23yN&Kn4@9hpGRMkNv9yshT9#v)qH9HL_>_xkoWv7E
z&WWLTWZ5fBjPembG}^$SKTfS2Lqj1CUq0pjY^&^(p99OUuMuVeNc)3A#~B90d2_fP
z(6^7CR#xIZw&!_xM{sBvic8*pP@6o#k|QR*NV(Qm9R|nX0q)k9Vk(7cO|fKfxkB;L
z@LOM2mL!l4LYiF|hs&XT!!J8HK*tUx^`=-Ngxp_2Z#Zh~zZEmQTB0cw`E_i!T%cOP
z(SxP9-q%)iuD3IZ%3Ii>)475GHhfGHuvr@n!Z_G2%UQUg!3}g6=|F?ZU1d|MJ{;Uw
z`akKMR9F<{_Vt3tn0ss0Oxrd&*AsUMt1wd$OgUM&3~w<Q8X%kahC307RjAJsq}QPK
z`%h;^p|>aPF+LBi2r3$Rfg~W4s60-!f4@+aq*s7~7A;&ztvPMv?1C~fGG1=a;u}?u
zy@6AyVhZaZ+z7pF1}aIA*`j(&_2cZ{;NzeYb{S>m@b`<L`M6kwk>s4$@xn?X&hLje
z{#P&Vkz)nJRJX-SP+H;I>S<^YkdSagHGMJ?K1(dj2JEF8S$Z%Z16w7GSpx`E7g5`7
zyj=KIJ$B;`wO!8WWI5v%UoLfrsUa=)*Q?d7%Z!{pEkZ*qM&0^i9Dt+2B49Geh}z~O
z{7@;J)7Q5wI`Zm4HN-}^5szH{B%8EI=ZMt-y!IY5ek8?3MQM(OO0=<3Q%?gFf1?)i
z`weIdj)BLB=9XYHNCLgRQrJD!*3ei}u}KrcmYSyq8Wc5)5xi&QvL>|XP2mGHI{F(@
zq}}nEw|kaPm6ozHZRGi5wn_&FsZOeNvj1LpR~ONlymmhU7*o@af==^_$Ytg#<x9(;
zgOt5g;uXCZmKfzjzp+<SCFuyRP~d?|Th!vAc`n2WLg7iiZJRBaaTHGp1Zj@$I3ZV`
zaT7coaKmXD4TZK4YRuu}x*n1<H9fsRi0`&D`^twnQvh~6k}SB0#l-?;)f^4pW%(H+
zdritTrZd4or;=ITyEKRi?BF))sf#;8j-Knt=1@<8K}~J#;7z<WUI?Zg;5(!ovB{5C
z@8q_u8BgsBK4#(o@wpMDA+y-R>3m9A5&(;(wNsFp|NQcW{Q!&NJE9_{WHebG&Sb&d
zFXpWsgM*d0@gSnpt}MiK;cEm@r0MtLyo#&P1{Ly>enmZ1fuV6I18x&-G2mO6z|o04
z%h5qNvDFWg*9>~iC#Y63dZ1+DE#*)E&QJJPWFEc8C{jH&;pgiMYXP!T?^NK&OTG<$
zx6<8OnJT~Zbch*3*#vJ7fZD8Ntp5G>0lEm&sng0EKh^;ii4DUPZj^%4?kI<ti&b2C
z1KEG>dlC@*9p8`42lBU=9Bqz8i0~gHjrRAeX&Ht+g2I9es))=HwOG*+n0v?`KWn6o
zkzU($>EvxW)jj4fQ&CZ+S|;(YRd}y3kH1$)16P;eSTEK}FuCnzzXT_Vk*-eO&E`9A
zE~2qF)sE5aX`?s+06z$a6qiR7Atb@!iytf`$v00x6!i%8zl=0mtvcy=+<%#gwMQ}L
z9L$*_G$3lNYPA<@jwjmT{-{~oFomiZrTribOcrR`h{?J5FE;cCG_5!$vLC%5jJe;K
za2jpW{iXCNf&()=`U_83of%QmiJ`b2>O@4~yNG2JU5ODV;3_=r4vUV7hLFHOQO{7x
zi5leF#6VOlxE-2e8qWxY8`p4IX(^w;2`njy|LLl(TYp`qGaW@k0QqJzK{p}I`4xQc
zo|2jT1AF8bB4WoAej^iyguWI!0OGo-K<M%UdL`0PPmb7vR)mO4Z6RT+Ijo`WPOU;b
zZ^+n^2I8Pw`t|Xp$J53-MX4)OpU~1JpxqAoD?O>ow3heJ$7>wRSIOMJM!)`P<gJ44
zNr`Xb(t(~te@**2O5BW`3g*{sZH|Bu2(dpdAA~eS7mPzJhV+kF%pNCor#mrG4#PQ|
zqyk%j_l<F!dgI@LCa(NLT)xme?%im<Q%4Y}vELxDOTs^-cUC^WVkQr8bN!LBM>|7Y
zPf*tQ*2lmG1S4_%ai%Ct1cJ|BSZ^F82lE|sxEc8hD=>z{1we&dekbGb(2$tRm`3NF
z5I)kcjj_%!9Drv~bV;*Zf*Zu4;8E?^zWuaIFRq8v@rMcLA^XnE&_DD0TfYo0*$w5T
zrEw{afffxU<oeS0L(7;RYlQ^QcjBszYUZ()e*Qw1ST_)ZfIwjn9x;N+-zmNW8%Oab
zY&kp>ZHS|vwM5ows<k=#yfS~pmB5dSa1Rmn1Lj07rZl4SwH1sB%w4*U3%%N!x4pt+
zHl0u-UP=Ff+D7Bn!5MZ789I1+k8G*A4N4uv3wAlb6Uvb;6~q$L{o3g*REQSPB55eI
z>SEiv09NyYVu-rVjXAm7L|?BW3EUGyB;qFn<N4Y3LHDv-u3b1A%r;nGuQE8&R0=s4
z@h5b_oTU3PdgL8ve}zl|{8)FDfm<&vWfhXWuE(e;>l5xDd|q10m33#F!{|R)K)p&t
zl%S9hrg>=e{WXJ4_qEDkS}_WP*3O;oxWy%iBru5a??CF>&elo!AuWvhG)Yz^A3P2$
zZ2bh*zG)O7neDESkG&rr-hrpS{;5I(0J0`e^EGaQ2A<o()b#V@<nCR&IM-ohRc>Kn
zVZ@rcE6ui7VKP)7k8A$Yg$sA`IM-WY7Nph}dmod}z8ZwI{akI;VU~Gxpion@&<)TB
z5ig<1j+o5N%`GAE8yRKh$^+d+Ixv)CSt`ObwqSE?r=ohNdloF=^>tO*kMpUo@969-
zmLl+Q{Tp{z#6a@=7v(QJx=QxHmbY)B9oT$zdiIl~`bIV-d8Id8)|7=MMZDuCM^gP8
zs^m)lOLdOxN$DMrr^jrU=AelehkOmsAKwbLt3xAxC85qo`=2!aoIdmSh+0^wI&J-x
z`#y=RJx?mw?Xa-w->wdIY>YDLl(G88$RCAwpPhB;)paR+e`u!Yj>CW6BmfeXG25R5
z4R<G+e?O#i47khib7&}9hJj&FftfM(FLqz+0<!qv+nR>EzjGy{q_1BS<lWuR5%e`d
z>(#Ni5t+*QayI(8w@tdMZ3Pn?e@VyGv3IxrB;76%Mc*B@R`$9pk7{sv@n=_ai1U$O
z2ZoQ%nci4mUzC)zaAmq0ebF?uqekW5r%s~_|F~)WX%Rk9c+7uKyx=Q%+-*^O`=a+8
zLrdc6l*-3X&T6>C|L27S@Ip@$H?5xUExu*DBV@IOJw<WQ>z`wbe|sPzRdM`p2Dw#_
z;h#%?d_R}0P~JP=!d3R~=S4-rm&vZ2&+@Ffx9k<b8T@b1e8f@iERsVFLw_8T&IcuK
z;gRB2v<>S!zB9BAW(jxv{N83hGFboET+wN1X(55(;o*>t3Li>e+&;BieZFF|bCU=2
z70$hrA>AvvGZs%ThP|79%3f-FxNjS~D6zgE2mF&0*VhNO3=+R<@-SKuC-k|nN0E{O
zBEby29;$Pvuh0tm_Axha-b|eqjsg-*7pR)o_k9F&j&|$ku`$M7yCUx2zabYS%;vcR
z781U_2io(9;qAl<if#};h<U_pXm>VlAr99rjHIKXss6QYW6d3jzB8sncl!9nVtjnP
zFO+*Qq55|wM?hKxLizU$^GZl`_xAc$P5}~NXAf(g48D7p-s<LQi)2-(c+j&^Twjq`
z#s>-3o)ltWX+>;>AKGjHW()z%C;N9D82yiyXY04rnW!qzyw?BdlcEu_{>O4F4(<A%
z|4|X!U2WlZ{%)VkzER7|)k};`$Deg4Yg`IaJ8R#2_SxTgX7cjs7s5z(Lzq1oGT_Rk
zHb{P^;ET`o>Z1O(5~Fh=b_q@Oa{u;bY=rWDA8D@x&9aMU@3ifg4rGvzFa?mEr~${^
zC&J};E=eZ{7eiT2UFgBPf1}-;9wSM7XiIL?A94HN@b@ds>P0w~2!76XKQ5sDj-0(-
z81naSO-n%K)xWUr2;Oi^e!+RV7}6XVT-W}{&lk@54z_UoIWcwqxyXH3_vGM4&JBMm
z2G;^#jBL~U{rEyhR<`RBzmET_+e+NY!6v}cV9vm+nOX}5xZn6l%fmH99wTV4!qOpN
z>LSK8unKwL^*D6b2SK(cbop+jmA@EwefT=vr{=Dldjog-F7N;Sb7@+r-0pU9{zCqX
zgEN<l&7yP@YZS6oDn%U4WH+*e3iAFu43RYZ?44Uo*Z*<dA;W1nP-%yli*gCL3ej<Z
z$6Qi&p&Q14fTj-j2`Ke3nUPV>33Uu5)lH<X=;kaDwl^gXP>((=DLJI5Wz5b^ppsr*
zUWA?e1-~{J%cD|)j_smL#D2qb=3LOah9kKroJK!)!|M;de!`9xR$vHxf*IB9Q<~<Z
zH93?xuMY6rLBbA=adk54)j%PD{*fAn8u0t{Z2XLT3RTMoF$`&87SKW`DL7!^0OSV<
z)Ou#XreP3FOod3$LV|7KR2s`@+)S`^fanQnJd(w;bKOsRKtxD_c8I*|-~?I}lCY`*
z35IBbpCL0rMP798cwqsJ&f0#{k@2w&+Xm-j=Udj|4%8IQNqpX(8NllSKjXlUXF&vm
zX~ie5<VTZiEG*YRXF$th?^U?jx}z`72CG^CiQB2<1m%4df1jAR27npRJN2-56faLD
zJO$cAXvCBI(I0QcLQ}mtW!}AvU0AP;hEteUR?Ekj$PL45$VbL-sIit92gKntikqfQ
z24Zdjv5TFVH*VZOC57j<1PNV7DR+!Lx<7E@od<a!-t>)JfwhHhP93;5BBaR&UKFI<
z_nn4CaMKlisLZ^AWPNMM!85r(i`!-muBZgQOhgjifcCGFRozkaJKSE*iJiH9izK)b
zb%GN0hngC)9>IP4jx#~48G`zTgO>eXQm-V)*spJ4O2}Or-idhRVREd5?lA`md-69J
z;0vH&1nZ&hM&QNl8gky;<cL5*KD$q(KJoBR>nr@`I%J`Ab9&mhLuIIwz|UYp8nFew
zRB)nW&7$*j9R7fF@EvT~w|XIw9{6oR5b|O54?8@1!)d=;1BzouO_C+88mG=E0Kg%a
z??%I_z4mpC0g~!pLdhV5@LmGN!?1#3tjgH(HIeq!UKyta&c1PGem*+wB&QVooB<LX
z^O)HbtHZP*pslHCJ1c;7*+UbVD$<>jnaJ)>Ug9-O&Iz>c2b9q$*4BmoI(uNz82-=Z
zRXE2|aBxaRiU{0-);N=sBPTfpFshEu+BKb0Wc{KS&<X@4<UJmAL!27S?5!I&#L|a$
zwYNKAuR}3^T>1R(H>>DeNK2s!dM3Rl{@Br@8W!L}3QoKR9sOWFdA!CLC_4ZjcSedh
z@9HB=+?&>g_7U>y+->CFav{^e0Cw;rNu$50d;A3Itb;E?-%(P^1rrwSU|!z;HB|!4
zx8|de{(@m{@tllIgvNp685YDt(BE|(x{;9v;0k?!;(icBA8;U05b{<jDk(J#GTMfR
zGDZ$}@FTT5uIK9RuB4uNzVlA#6*Pg36-H2vjn(XBdb?eabc0@IVB^V3IKc4kS~tB^
zk?L68Id3m7cWFxyX{mUgn_`Q5sN%tk0lZCn*}f1hDe7g5hX9l}o7&;%&y0XAgv|6l
z=kz=hT=F}Bl|uaeTMv<Uslk5(8-S48)cX3{qpn>25_CXg2VK?%K8CI{97+;amcxeW
zkVbMEFaG)Cd*@EW4-^!DqTC=|B!1Ee1`+yS>mSty|3Ebq!g@p}lV%QdB5>IGv>BrA
zfr5$Ku#n~W3OaSLCuE~|kHY9S1B~RSk#8qSv+dkz;@~itbYjbTR9C*xOY(B{{A4S)
z#P<4gHovaVNq7&0>cK(bc3$3rz;GaE3i8@l2Vhu4_X%JI4k*I`OupLr9b1<$PCx~=
zm!I%>Br{34g<dm(mPN=;)4WxOBZ}{_;X|QjK$EKn!D@SSmp{)_4Lqz28bc=EMzlFW
z(e8%h<rz1qkqQ$9SB17gLc58@uRnQ}#e6RE)v(?hfCl%|&R7^h4~=(3kseZePQ?;e
zrGFV{Zz!!9F#wq0TTwFJA7dv8SRn+teVup&ol>`C5xyh32+6F|=G8-eV|pUa*Bj?q
zk`Jz~4awU5s$3}1q&B*JI%0L$D-LEisRK`O)5^KVnJv&Pv|_|C=sE})Kz`?9M9d>Z
zTz7!lxr)|7z~T3Zroc%+kKe<0X5p;8N-$84|C)y*?nHw<$#s5m3uikJHumCVlHBvX
z{iyZ9A_vOA%Ez46i>Ewxo~h9k_d9B-w}ryo?FXW|D!i^qroZgeUsc$5Zou!<0$-tz
z0(sXpAJQXg;!}%6VVZ35RCs3IRoUr>>GC1l<lx;4^8?Si0=dLCR(dXIu0Fq8`|%&D
zt+kSZGi4AVPTi=nlNcnMoiejfb$g343_Bri0-HwD+aT^PjbSXBZ6NdOpWU%-+v`j6
zP6XRR!%!aVK@WMe&N^B{jgu#9L0j7Pm^_6^Zxb1gRx1o8o*rDSb|5~HI1zb(1;6LL
z)KgJ7_q!p$csRH%EWtZ~*ASz4g_LidKPz8ja>a6|sBKp^9Ua|4fC4aF!stqjoY>)~
zFWK4NUWi+)`Y?IH%!_Hxwi18zx-npjCFv@9<EoWJ9#&@si=caU_8r;DUFq8j81}p^
z4{6;!5pSqHo4=U<z;)p!zR#+vxAz5#${C-M8Y<BvwGR;)@bGFd2-w`rOk+zT*coue
zlYdeD0Q$ck*x=Z<gBY}a80sv;PCe?NJm8bA%5e)r=7~2=y~lJ=TK@(Yeog$Mf<FIc
zA@=|5HTM7ajrraSGim?ohx*B!{{DWy9<!_KSutp)(=^uWAB_EfGCceL`w&Rh|F^$C
z?9}uyDF8+KOA4cN*?M5f>gf?_D7=y(D9v?lMIxB3^MpU_G4OY&ZV)^Ro<99+$2R`X
zH|7=P*nhBq4cH|6q1Y<pAv{<5y1Q{{sG!MpgZ3;`q+OEM*dpwk@oq(x6hso>-=2tW
zNOlDVOTIIHosx7qSV}lhE{BXZ?FgLlFhylf8tnKLSek$Ua~>lRLP>Fr?IIqxJd^Ci
zmQQdYNHykAQapJV(`?9|6%FTw28iAV^$U!NBqV?6My5>CVp=*b2;3N`@~L>95VWQ&
zEgnhh+WY&U!2ulFk1Y<uTX5A!A|kvE<U4^a2+ppcF{Z>5X&bH&7|iCJeM~>fA+zel
z9djAl-#^SCza$Zly#D;aTgCo+<X2XuIfc1J#rN||Nvoyav5V4C(|J~EKe?^%NOZn?
zooRxfcScnG2EA@?1sYQtbj7=U0z~g3jaf$O!%KSP@ZnnNOfobLU-k8sq4|sCbOLY^
z25k@?spK{i{QMJ$Vi-VKA9v^{oMuIltiFt3VmuL<w;2f#?z%5r)w7615Wf^$Ut7g}
z^?B%kQeUa_1u*IezYk*7MMM3ck5!&XG~Pbv{M5DHKD@tSe@0Mod3j`=LtUzt#d$jo
zI|~if;e@FhDaY>#NRH->oaZe&D-pUmb!Lx}q%P++?nXfFdy^?mfD9p>UjkSTEgj#|
zBTfTCz10D{IYkYUBLhs~*yU<TavRTY8HRme>e6Lr0&sLzt-!$B5J~WqpBf_lma}I%
zP`Nnq7*uI!2=frlt}I|;i|=Q^o`k1avMQ&z#Kn}gkWAm_R;584D}ldme=@A9&$<D|
z&!GIBhgX*-$CpYB&mT+3u~)E)e!#G&!N4Hx{jhulKQUU)><u|?bX+gI$ApB0plg4M
zQfluCFy*UgZ}2W42U2Bvg-C)brLYXlWrF)@qdRo<K7pc_xjn)D6<w(&ED|cw>y9`;
zogeFsB#$?ItN#w;5qF{J5U+1X(?sPKyY3%~JJIKvmhj|zewg0b(4I7_&3eaP!SZhq
z6bcYb5E2D2BW1=`)&{sCqi@tDaN)XmKnsIsv^Pv#q*27w)}GvD_0)2y#Zs8C3LE*2
z^jvfvIyFoPT$7Y@cXzk_wzekCr=7WzNDMK1Rd#%VAh#r>Cre-OG_2h*;$%y#TjM?>
z&fVl!KUsa#JEn9z^o;(th6l}l&6U?2g~v=wmgxi)tX6F<W^Xo`yC#j8Zh@l0`cLv{
zOh$f*dK0P3+1&H`I~4jB!HmG+MqIaVPYtM1{d3AB*+u-?Z@W%&p3@JsQ6bH(;#?8l
zrtn^s1{4hS8A8evBvoTs!8g=jEdBxgNlu`ZU2Mn!-x;|rBMruc1k9M+I3`ycbpJ!<
z)n)~S+qyk<_Fv=5^gc67ie1uCFV!yFbdGPW1{E8?ZX`{BjRDzOqJs*!H=iJ=cm>xB
z_r5~<1SJx)SU^Y!oqU8E;m76p<qhgx^q$U}x8j3M&%^u|kG=(aHK1h)SyGo0;UR*u
z#Bv@@ulvcMDI+`WdI$Dj>f^@(Rz&%=$Pc9T)u9t8>ej2bbXsZ#FNtA~^79HgMS-3o
zjs*!(D^8ymHm0?FUXt$DY2K+kEhU)xt$zG~+)eSTX3cp6n}awDpXKL-KNZ$td@LlI
zr~R1Z-P@I)^aIFg;ckbwP87`qAP=^-Y(XZv5^}CAABa{(gl{71V8RPkl$%sI?<Thj
z!`7`^L4m*sj9;J)zzt+^Z~SYBQ;teS?Khkl9libQ2sF@RW7c!(kITzfV15d6?oIzA
zU^fC?3W+7DVG}WXgWa_B_)!b$>#Lxq!^7d(#jbV4&2s-dJE`-zz889Zwp4-YClAk0
zdTYqXv~PJexBPU8oiEwUTur8emYUY@$4sU7!6f~X{dBfUHS*@oe+0tzKYVg4+*KmS
zjf>|{sB+pWSL?~jFN3zMba164+=FGG60`Pj#WqJDc=(dy+%b~J#!9E<ZMJ^RN9l6&
zE)Ks9B|n_pM5okcRtPhXSnWI8S#Ecn#r>;O;|K#Eax@sC-aGEyIuDusH9k-Pvp_aO
z!d(DH%*)1vBlAcxVWF~)$%-Z{QTuola(&I!tu6YNmni*vN^$(<X6YyWN26C{dM0e9
z;?fxI9^HDiKih7EKCRsO!^&Fx*EO$CUaF0WN22X>a>}<YJI`~;f7||EZRqExb4`I?
zn=6;P)7;NcAA7l`n|j`JHUCbKZ3<0dZ%}hw(`QEuVT=x~UHbA!D%Jbe?w3VRm%dKd
zqaF6zc$YUi)IQYc@bw_OJk_vf7|_H<LYu~b7U<OF6Z0!4#_R_xR?u5Q9^}to@S7YZ
z(c3M%AO3(NLDrh@ADlmxL()S;lZ9ZbEj%hipaQ7Vx(79jKQHYSR#qb}C8scppIu@r
za)T0l<F3Q6=A2u8*ng9mIQ^k)bQ||sA?=S1PsSc*{GKdxwp1>GhSzjBcjW9gdYQ$k
zn(l93n>{5*yv{eql-r_QF};xR{q&!*>80)`<159@TW9qyRPJ6>u`tS_zd>yVhrKqR
znu5s4F5K4;IJrQU1|Agdhhv8i>phEswDQN~Wbm^*4MQr3Do{}yc1B0UBC*H}%wl9r
z$_zX??YSO|eCDS`a(m(_gN032?B=3-a#ocuT$d@oHofpV$aw8Ri^$id4`V7~6_PG3
zTTHJwS2~>f>Rj@y$jP-{^81*?+}1OrD?^<>bS(MZr*iJfi7a})&omDb9oX<WX`phu
z%+jw*afN3Uf9jWi>rSI8zi9u`EnQYE`syA_*Idm3yPkqx_F0u;lHgW>jl%rpD1Hdl
z1@I2|Z-Epu4PNUmcu*soYiVgg^A!z}dM#Okr4>f~4}Y|jo+i6K6u^IJwms5fzE^<f
z`iG~?tn&jeiwcW&7uqCFvN5n-?;9+!$qLjplHOD1&@@}(<3pXKLmx2AeeYxLpSX9g
z>h{I;FU2q#*v9QhJos$z=sl8`D>VyL0^NnJvpF2wLhEStFOr#zD7K<XcXe?&3g0$}
z=-~iUk1YAo5UN)kG4j{-+611UeK#;L?ER_7GD;Etjc=g>;`%#9D75;OsKI5s)bdEJ
z_VjwIxMOkOqwZB`{VZKr?7>rRnry8!DsXzYXJB`!bLq+C#K>>OhRd^DgLe)sCkp-e
z9b3_sU#({!>XA0e)jH9C@@3}6%ByqyxNT4+m%@n>7o@>5+qHS-j$yiYj?2GDi~ZX7
z?z9tPcRzT3SKB7bHp{kryMPy5Qm%RNi)Q*!T(nOo6QV8O2wf8iaR`pi9P(r0wu)xx
zNZSAA^yX;$faW*bGz_S<DT<0BG~I^vrE1D^D0{tS_NiY{Yq4Q&&+zbGac*W3chO#W
z^oh^;hR;cD9UX2G5|Sy0@fUCIO6MssoFnm;EE!Ar+3dZtRD39~{z&<c^1;O1b7gG<
z3yo$f-d=S<ak)=Jbd~Og6)Xfic8<>wlDIIM7CUczR5!Hv!$lRQ$9=QX_dI*pulhZ$
zI%c<pL!b89xhI811{xaq;9+fjTxNG;6W(&~MT_xp%j0K#dEc5WI}J6f@9(nO{o(AN
zo-L(Wqw$>{1}Zx4*N%0slu=|43dEO~3}+q+YLHneaGQ;7dFL@&5~U;l;fI6Ki>vX{
ztloLV`(;&^&1$Ht-;3eDwQrcKnsvvWw`SC`!{H8ABF|&*lW*C-orL5D(|eXFHfQmi
zxH$99F*(*Fd&yR>d`#}Bp-Wxy()v2Lbm`bt4YRtiw?-md8JCQ5bC0a`-7&7sU@bo3
ze%-<F-7R-P%W3`)a)nL(p0_=kpBUxMUy)l4JHf<@Ux{Szxv|b(I>m45&7-<nGo9>3
zb&32*{1O*-*vF=X7#Cj-jiE8FTpRjXnSK4r*Z!_Z^R&SmjL&=91dT6ejvp%Y^$0l-
zsggE1&q5>V+fzxrVsaxz$FjWZa-LZE)7+Al=u6_PnI9Lu-`bkb*-ScdUi_jGp1fR1
z{<^ZZ_}r7Ik&nt`=Xy@NS<Q2pNL(&Gk7PJID{JdB^v{QYSA$GwZEsKa`P1|jNVNFz
z@@BULmoJ?(u$y;VX}6iBYW$GPr0h(2*7i_t!vUtbGnI^gdTgAplu4uu?I_k{bxh~-
z;4g5iR(N7@r%uU|q+<fO861M5qEnX@Y_c9dwzanA6%slas|w8H+r$L3garrzNn}H)
z$<x!hH=yPbqkQoE`>aa5*MLLs&u4Ql-U`mX`C2hGtd=pj^vomcIBgTlUcPk4!T#sR
zePm?^X84svo{Jad%=0U4FzLQrhK%IrC1`aoU5d)^u3Uo@1_G2=*n1pxl}bRwgQ4Du
z{52@wu3ozaFJiQAW@l$dHe<l=9DdTu!XhF%8g4xPubv+%6v<3WQ;>#Ve<`XSWc^#Q
zJ9sTSC!WQfnmF>{`W5e%T{1kU%}>7PYVKf~o3IHsAG$oh)a&_!M_SjwSY7v_yGPha
z+OS{SvAILmy=z}4j+0hR>S$=}y(dZ{kg?;=Yin`-aozf+rpV23P!tmrD?axf4tkoJ
zMw1-wn7zPc3Bsr|oF$oTA7^I+T~v}FyR+n30XJAsJZq-}Q(QGQHBC*E@SOZLrHX$?
zM#R%`e>>Lll>XkV`g}*6p_}m|<3`^r#Wk62X>Z1L8HE<MW@+iAN;x$(>h2)1lDzj$
z%;orzTd#!eeCBg<1Va>4HkrgVS(Wr5mlP<AjErQ3{-L0t?PBp=Snu*{-Yz@8Kkt1R
z$gJUY5eW%G9fibOyD6VD%xYu5zR8NbSf3=tA8Wd_@=8lTpY?*yb%bI>*~lj^&+?yD
zQ)?z%|LrMvgce)sJA*Hxar$%<QbwNhqIe;aKR+``HZm%J-goU<nP5A=tBL+lq>#C5
z_qfZYc^LsI7k76aZtlCihg~{R!jSsNYH4*qiOweN`5c)Fb`Oav4}TSjV(9(*_oJf;
zk(rOrhKvr(gD3{)k?LDY*TqPFM{n;{)PKO0g~)iQ8jK?%3lt^D-aRWW?jlO-%WiJJ
zL77wBFM`W}#Fv%Mge0X8{{Tb=o;_pJSHL8y1a@r78W<P|7hOZ>=k@hL-hKuMyDmE~
z=U06*Vsqi^TE*ywwBXaHPe;CkrBG~<B_nXe4C2>Jk5!3smwyvx$ra?sH0)0{(<FHB
z^HrHU)9v@wBje+9-hbnn<dadIbSvwz>$d)&HPeP4x~eRHTw8qT5Lu6%L~JfLi{(jr
z{IkC*bwmTPYAwSu4ch#XT^AEn&F^dSlHvcYvNdiXzLLDzL@G>t-OIi62C+&cB0eOP
z#8>~Vn@otWvZ{MYHWGg^Bi+DAeBDV)UPXMp5i`YrFKcVF2U)D~7c$~gY$Q3I)E4(g
S&+HWOEy@aN^0{&*H~$Yxr>(32

literal 0
HcmV?d00001

diff --git a/ui/src/App.tsx b/ui/src/App.tsx
index 83fe93f2882..c6126e6e7b0 100644
--- a/ui/src/App.tsx
+++ b/ui/src/App.tsx
@@ -5,6 +5,7 @@ import { Layout } from "./components/Layout";
 import { ConferenceRoomChatGate } from "./components/ConferenceRoomChatGate";
 import { PipelinesExperimentalGate } from "./components/PipelinesExperimentalGate";
 import { CasesExperimentalGate } from "./components/CasesExperimentalGate";
+import { AppsExperimentalGate } from "./components/AppsExperimentalGate";
 import { Cases } from "./pages/Cases";
 import { CaseDetail } from "./pages/CaseDetail";
 import { OnboardingWizardVariant } from "./components/OnboardingWizardVariant";
@@ -47,6 +48,17 @@ import { BootstrapSetupUxLab } from "./pages/BootstrapSetupUxLab";
 import { ResponsibleUserDenialUxLab } from "./pages/ResponsibleUserDenialUxLab";
 import { CompanySettingsPluginPage } from "./pages/CompanySettingsPluginPage";
 import { CompanyAccess, CompanyAccessLegacyRoute } from "./pages/CompanyAccess";
+import { AdvancedToolsRoute } from "./pages/tools/AdvancedToolsRoute";
+import { ProfileWizardRoute } from "./pages/tools/profiles/ProfileWizardRoute";
+import { ProfileDetailRoute } from "./pages/tools/profiles/ProfileDetailRoute";
+import { Connections } from "./pages/apps/Connections";
+import { Browse } from "./pages/apps/Browse";
+import { AppsConnect } from "./pages/apps/AppsConnect";
+import { AppsReview } from "./pages/apps/AppsReview";
+import { AppDetail } from "./pages/apps/AppDetail";
+import { AppNotConnected } from "./pages/apps/AppNotConnected";
+import { GatewaysList } from "./pages/apps/gateways/GatewaysList";
+import { GatewayDetail } from "./pages/apps/gateways/GatewayDetail";
 import { CompanyInvites } from "./pages/CompanyInvites";
 import { CompanySkills } from "./pages/CompanySkills";
 import { SkillStudio } from "./pages/SkillStudio";
@@ -94,11 +106,36 @@ function boardRoutes() {
       <Route path="company/settings/cloud-upstream" element={<CloudUpstream />} />
       <Route path="company/settings/members" element={<CompanyAccess />} />
       <Route path="company/settings/access" element={<CompanyAccessLegacyRoute />} />
-      <Route path="company/settings/cloud-upstream" element={<CloudUpstream />} />
       <Route path="company/settings/invites" element={<CompanyInvites />} />
       <Route path="company/export/*" element={<CompanyExport />} />
       <Route path="company/import" element={<CompanyImport />} />
       <Route path="company/settings/secrets" element={<Secrets />} />
+      <Route path="company/settings/tools" element={<LegacyToolsSettingsRedirect />} />
+      <Route path="company/settings/tools/:tab" element={<LegacyToolsSettingsRedirect />} />
+      <Route path="tools" element={<LegacyToolsRedirect />} />
+      <Route path="tools/:tab" element={<LegacyToolsRedirect />} />
+      <Route element={<AppsExperimentalGate />}>
+        <Route path="apps" element={<Connections />} />
+        <Route path="apps/browse" element={<Browse />} />
+        <Route path="apps/connect" element={<AppsConnectEntryRoute />} />
+        <Route path="apps/connect/:appKey" element={<Navigate to="/apps/browse" replace />} />
+        <Route path="apps/connect/:appKey/:stage" element={<Navigate to="/apps/browse" replace />} />
+        <Route path="apps/review" element={<AppsReview />} />
+        {/* Needs attention folded into Connections (PAP-13254); keep legacy links working. */}
+        <Route path="apps/attention" element={<Navigate to="/apps" replace />} />
+        <Route path="apps/gateways" element={<GatewaysList />} />
+        <Route path="apps/gateways/:gatewayId" element={<Navigate to="overview" replace />} />
+        <Route path="apps/gateways/:gatewayId/:tab" element={<GatewayDetail />} />
+        <Route path="apps/advanced" element={<AdvancedToolsRoute />} />
+        <Route path="apps/advanced/profiles/new" element={<ProfileWizardRoute mode="new" />} />
+        <Route path="apps/advanced/profiles/:profileId/edit" element={<ProfileWizardRoute mode="edit" />} />
+        <Route path="apps/advanced/profiles/:profileId" element={<ProfileDetailRoute />} />
+        <Route path="apps/advanced/:tab" element={<AdvancedToolsRoute />} />
+        <Route path="apps/app/:applicationId" element={<AppNotConnected />} />
+        <Route path="apps/app/:applicationId/:tab" element={<AppNotConnected />} />
+        <Route path="apps/:connectionId" element={<Navigate to="setup" replace />} />
+        <Route path="apps/:connectionId/:tab" element={<AppDetail />} />
+      </Route>
       <Route path="company/settings/instance" element={<Navigate to="general" replace />} />
       <Route path="company/settings/instance/profile" element={<ProfileSettings />} />
       <Route path="company/settings/instance/general" element={<InstanceGeneralSettings />} />
@@ -235,6 +272,12 @@ function boardRoutes() {
   );
 }
 
+function AppsConnectEntryRoute() {
+  const location = useLocation();
+  const searchParams = new URLSearchParams(location.search);
+  return searchParams.get("byo") === "1" ? <AppsConnect /> : <Navigate to="/apps/browse" replace />;
+}
+
 function InboxRootRedirect() {
   return <Navigate to={`/inbox/${loadLastInboxTab()}`} replace />;
 }
@@ -307,6 +350,24 @@ function LegacySettingsRedirect() {
   );
 }
 
+function LegacyToolsSettingsRedirect() {
+  const { tab } = useParams<{ tab?: string }>();
+  return <Navigate to={legacyToolsRedirectTarget(tab)} replace />;
+}
+
+// The developer "Tools" surface moved under the Apps "Advanced setup" door
+// (PAP-10862). `/tools` and `/tools/:tab` redirect to their new home.
+function LegacyToolsRedirect() {
+  const { tab } = useParams<{ tab?: string }>();
+  return <Navigate to={legacyToolsRedirectTarget(tab)} replace />;
+}
+
+function legacyToolsRedirectTarget(tab?: string) {
+  if (!tab) return "/apps/advanced/profiles";
+  if (tab === "applications" || tab === "connections" || tab === "overview" || tab === "examples") return "/apps";
+  return `/apps/advanced/${tab}`;
+}
+
 function OnboardingRoutePage() {
   const { companies } = useCompany();
   const { openOnboarding } = useDialogActions();
diff --git a/ui/src/components/AppConnectionSidebar.test.tsx b/ui/src/components/AppConnectionSidebar.test.tsx
new file mode 100644
index 00000000000..a3eefa4e2e0
--- /dev/null
+++ b/ui/src/components/AppConnectionSidebar.test.tsx
@@ -0,0 +1,231 @@
+// @vitest-environment jsdom
+
+import { flushSync } from "react-dom";
+import { createRoot } from "react-dom/client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { AppDetailSidebar } from "./AppConnectionSidebar";
+
+const sidebarNavItemMock = vi.hoisted(() => vi.fn());
+const currentPath = vi.hoisted(() => ({ value: "/apps/conn-1/permissions" }));
+const mockToolsApi = vi.hoisted(() => ({
+  getConnection: vi.fn(),
+  listApplications: vi.fn(),
+  listConnections: vi.fn(),
+  listGallery: vi.fn(),
+  listAppsAttention: vi.fn(),
+}));
+
+vi.mock("@/lib/router", () => ({
+  Link: ({
+    children,
+    to,
+    onClick,
+    className,
+  }: {
+    children: React.ReactNode;
+    to: string;
+    onClick?: () => void;
+    className?: string;
+  }) => (
+    <a href={to} onClick={onClick} className={className}>
+      {children}
+    </a>
+  ),
+}));
+
+vi.mock("@/context/CompanyContext", () => ({
+  useCompany: () => ({
+    selectedCompanyId: "company-1",
+  }),
+}));
+
+vi.mock("@/context/SidebarContext", () => ({
+  useSidebar: () => ({
+    isMobile: false,
+    setSidebarOpen: vi.fn(),
+  }),
+}));
+
+vi.mock("@/api/tools", () => ({
+  toolsApi: mockToolsApi,
+}));
+
+vi.mock("./SidebarNavItem", () => ({
+  SidebarNavItem: (props: {
+    to: string;
+    label: string;
+    end?: boolean;
+    badge?: number;
+    badgeTone?: string;
+    badgeLabel?: string;
+  }) => {
+    sidebarNavItemMock(props);
+    return (
+      <div data-to={props.to} data-active={props.to === currentPath.value ? "true" : "false"}>
+        {props.label}
+        {props.badge ? ` ${props.badge}` : ""}
+      </div>
+    );
+  },
+}));
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+(globalThis as any).IS_REACT_ACT_ENVIRONMENT = true;
+
+async function act(callback: () => void | Promise<void>) {
+  let result: void | Promise<void> = undefined;
+  flushSync(() => {
+    result = callback();
+  });
+  await result;
+}
+
+async function flushReact() {
+  for (let i = 0; i < 3; i += 1) {
+    await act(async () => {
+      await Promise.resolve();
+      await new Promise((resolve) => window.setTimeout(resolve, 0));
+    });
+  }
+}
+
+function connection(overrides: Record<string, unknown> = {}) {
+  return {
+    id: "conn-1",
+    name: "GitHub",
+    transport: "remote_http",
+    status: "active",
+    healthStatus: "healthy",
+    enabled: true,
+    config: {},
+    transportConfig: {},
+    ...overrides,
+  };
+}
+
+describe("AppConnectionSidebar", () => {
+  let container: HTMLDivElement;
+  let root: ReturnType<typeof createRoot>;
+
+  beforeEach(() => {
+    container = document.createElement("div");
+    document.body.appendChild(container);
+    currentPath.value = "/apps/conn-1/permissions";
+    mockToolsApi.getConnection.mockResolvedValue(connection());
+    mockToolsApi.listApplications.mockResolvedValue({
+      applications: [{
+        id: "app-1",
+        applicationKey: "github",
+        name: "GitHub",
+        description: "GitHub app",
+        status: "active",
+      }],
+    });
+    mockToolsApi.listConnections.mockResolvedValue({
+      connections: [connection({ id: "archived-1", applicationId: "app-1", status: "archived" })],
+    });
+    mockToolsApi.listGallery.mockResolvedValue({
+      apps: [{ key: "github", name: "GitHub", logoUrl: "https://example.test/github.png" }],
+    });
+    mockToolsApi.listAppsAttention.mockResolvedValue({
+      apps: [
+        {
+          connection: connection(),
+          pendingActionRequestCount: 2,
+          quarantinedCatalogEntryCount: 3,
+          healthNeedsAttention: false,
+          reasons: ["pending_action_requests", "quarantined_catalog_entries"],
+        },
+      ],
+      totals: {},
+    });
+  });
+
+  afterEach(() => {
+    flushSync(() => root?.unmount());
+    container.remove();
+    document.body.innerHTML = "";
+    vi.clearAllMocks();
+  });
+
+  async function renderSidebar(element = <AppDetailSidebar kind="connection" connectionId="conn-1" />) {
+    const queryClient = new QueryClient({
+      defaultOptions: { queries: { retry: false } },
+    });
+    root = createRoot(container);
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={queryClient}>
+          {element}
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+  }
+
+  it("renders a back link and the connected app tabs (including Test)", async () => {
+    await renderSidebar();
+
+    expect(container.querySelector('a[href="/apps"]')?.textContent).toContain("All apps");
+    expect(container.textContent).toContain("GitHub");
+    expect(container.querySelectorAll("[data-to]").length).toBe(6);
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(expect.objectContaining({ to: "/apps/conn-1/setup", label: "Setup", end: true }));
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(expect.objectContaining({ to: "/apps/conn-1/review", label: "Review", badge: 5, badgeTone: "danger" }));
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(expect.objectContaining({ to: "/apps/conn-1/permissions", label: "Permissions", end: true }));
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(expect.objectContaining({ to: "/apps/conn-1/test", label: "Test", end: true }));
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(expect.objectContaining({ to: "/apps/conn-1/activity", label: "Activity", end: true }));
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(expect.objectContaining({ to: "/apps/conn-1/advanced", label: "Advanced", end: true }));
+  });
+
+  it("marks the current tab active through the nav item target", async () => {
+    await renderSidebar();
+
+    expect(container.querySelector('[data-to="/apps/conn-1/permissions"]')?.getAttribute("data-active")).toBe("true");
+    expect(container.querySelector('[data-to="/apps/conn-1/setup"]')?.getAttribute("data-active")).toBe("false");
+  });
+
+  it("renders application-mode tabs under the not-connected app route", async () => {
+    currentPath.value = "/apps/app/app-1/review";
+
+    await renderSidebar(<AppDetailSidebar kind="application" applicationId="app-1" />);
+
+    expect(container.querySelector('a[href="/apps"]')?.textContent).toContain("All apps");
+    expect(container.textContent).toContain("GitHub");
+    expect(mockToolsApi.getConnection).not.toHaveBeenCalled();
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(expect.objectContaining({ to: "/apps/app/app-1/setup", label: "Setup", end: true }));
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(expect.objectContaining({ to: "/apps/app/app-1/review", label: "Review", end: true }));
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(expect.objectContaining({ to: "/apps/app/app-1/permissions", label: "Permissions", end: true }));
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(expect.objectContaining({ to: "/apps/app/app-1/activity", label: "Activity", end: true }));
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(expect.objectContaining({ to: "/apps/app/app-1/advanced", label: "Advanced", end: true }));
+    expect(container.querySelector('[data-to="/apps/app/app-1/review"]')?.getAttribute("data-active")).toBe("true");
+    // The Test tab needs a live connection, so it is hidden in application mode.
+    expect(container.querySelector('[data-to="/apps/app/app-1/test"]')).toBeNull();
+    expect(container.querySelectorAll("[data-to]").length).toBe(5);
+  });
+
+  it("keeps rendering a connection sidebar when its connection is unavailable", async () => {
+    mockToolsApi.getConnection.mockResolvedValue(undefined);
+    mockToolsApi.listGallery.mockResolvedValue({ apps: [] });
+    mockToolsApi.listAppsAttention.mockResolvedValue({ apps: [], totals: {} });
+
+    await renderSidebar();
+
+    expect(container.textContent).toContain("App");
+    expect(container.querySelector('a[href="/apps"]')?.textContent).toContain("All apps");
+    expect(container.querySelectorAll("[data-to]").length).toBe(6);
+  });
+
+  it("keeps rendering an application sidebar when its application is unavailable", async () => {
+    mockToolsApi.listApplications.mockResolvedValue({ applications: [] });
+    mockToolsApi.listConnections.mockResolvedValue({ connections: [] });
+    mockToolsApi.listGallery.mockResolvedValue({ apps: [] });
+    mockToolsApi.listAppsAttention.mockResolvedValue({ apps: [], totals: {} });
+
+    await renderSidebar(<AppDetailSidebar kind="application" applicationId="missing-app" />);
+
+    expect(container.textContent).toContain("App");
+    expect(container.querySelector('a[href="/apps"]')?.textContent).toContain("All apps");
+    expect(container.querySelectorAll("[data-to]").length).toBe(5);
+  });
+});
diff --git a/ui/src/components/AppConnectionSidebar.tsx b/ui/src/components/AppConnectionSidebar.tsx
new file mode 100644
index 00000000000..36c58e6edad
--- /dev/null
+++ b/ui/src/components/AppConnectionSidebar.tsx
@@ -0,0 +1,141 @@
+import { ChevronLeft } from "lucide-react";
+import { useQuery } from "@tanstack/react-query";
+import { humanizeConnectionDisplayName } from "@paperclipai/shared";
+import type { AppGalleryEntry, ToolApplication, ToolConnection } from "@paperclipai/shared";
+import { Link } from "@/lib/router";
+import { toolsApi } from "@/api/tools";
+import { useCompany } from "@/context/CompanyContext";
+import { useSidebar } from "@/context/SidebarContext";
+import { queryKeys } from "@/lib/queryKeys";
+import {
+  APP_TABS,
+  CONNECTED_ONLY_APP_TABS,
+  appApplicationTabHref,
+  appTabHref,
+  type AppTabKey,
+} from "@/pages/apps/app-tabs";
+import { AppLogo } from "@/pages/apps/AppLogo";
+import { SidebarNavItem } from "./SidebarNavItem";
+
+type AppDetailSidebarProps =
+  | { kind: "connection"; connectionId: string }
+  | { kind: "application"; applicationId: string };
+
+export function AppDetailSidebar(props: AppDetailSidebarProps) {
+  const { selectedCompanyId } = useCompany();
+  const { isMobile, setSidebarOpen } = useSidebar();
+
+  const connectionQuery = useQuery({
+    queryKey: queryKeys.tools.connection(props.kind === "connection" ? props.connectionId : "__none__"),
+    queryFn: () => toolsApi.getConnection(props.kind === "connection" ? props.connectionId : ""),
+    enabled: props.kind === "connection" && !!props.connectionId,
+  });
+  const applicationsQuery = useQuery({
+    queryKey: queryKeys.tools.applications(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listApplications(selectedCompanyId!),
+    enabled: props.kind === "application" && !!selectedCompanyId,
+  });
+  const connectionsQuery = useQuery({
+    queryKey: queryKeys.tools.connections(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listConnections(selectedCompanyId!),
+    enabled: props.kind === "application" && !!selectedCompanyId,
+  });
+  const galleryQuery = useQuery({
+    queryKey: queryKeys.apps.gallery(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listGallery(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+  const attentionQuery = useQuery({
+    queryKey: queryKeys.apps.attention(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listAppsAttention(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+    refetchInterval: 30_000,
+  });
+
+  const connection = connectionQuery.data;
+  const application = props.kind === "application"
+    ? (applicationsQuery.data?.applications ?? []).find((app) => app.id === props.applicationId)
+    : null;
+  const appConnections = props.kind === "application"
+    ? (connectionsQuery.data?.connections ?? []).filter((candidate) => candidate.applicationId === props.applicationId)
+    : [];
+  const previousConnection = latestArchivedConnection(appConnections);
+  const appName = connection ? humanizeConnectionDisplayName(connection) : application?.name ?? "App";
+  const logoEntry = galleryEntryFor(galleryQuery.data?.apps ?? [], connection, application ?? undefined);
+  const reviewConnectionId = connection?.id ?? previousConnection?.id ?? null;
+  const attentionItem = reviewConnectionId
+    ? attentionQuery.data?.apps.find((app) => app.connection.id === reviewConnectionId)
+    : null;
+  const reviewCount =
+    (attentionItem?.pendingActionRequestCount ?? 0) + (attentionItem?.quarantinedCatalogEntryCount ?? 0);
+
+  return (
+    <aside className="flex h-full min-h-0 w-full flex-col border-r border-border bg-background">
+      <div className="flex shrink-0 flex-col gap-3 px-3 py-3">
+        <Link
+          to="/apps"
+          onClick={() => {
+            if (isMobile) setSidebarOpen(false);
+          }}
+          className="flex items-center gap-1.5 rounded-md px-2 py-1 text-xs text-muted-foreground transition-colors hover:bg-accent/50 hover:text-foreground"
+        >
+          <ChevronLeft className="h-3.5 w-3.5 shrink-0" />
+          <span className="truncate">All apps</span>
+        </Link>
+        <div className="flex min-w-0 items-center gap-2 px-2 py-1">
+          <AppLogo name={appName} logoUrl={logoEntry?.logoUrl} size={28} />
+          <span className="flex-1 truncate text-sm font-bold text-foreground">{appName}</span>
+        </div>
+      </div>
+
+      <nav className="scrollbar-auto-hide min-h-0 flex-1 overflow-y-auto px-3 py-2">
+        <div className="flex flex-col gap-0.5">
+          {APP_TABS.filter(
+            (tab) => props.kind === "connection" || !CONNECTED_ONLY_APP_TABS.has(tab.key),
+          ).map((tab) => (
+            <SidebarNavItem
+              key={tab.key}
+              to={tabHref(props, tab.key)}
+              label={tab.label}
+              icon={tab.icon}
+              end
+              badge={tab.key === "review" && reviewCount > 0 ? reviewCount : undefined}
+              badgeTone="danger"
+              badgeLabel="needing review"
+            />
+          ))}
+        </div>
+      </nav>
+    </aside>
+  );
+}
+
+function tabHref(props: AppDetailSidebarProps, tab: AppTabKey): string {
+  return props.kind === "connection"
+    ? appTabHref(props.connectionId, tab)
+    : appApplicationTabHref(props.applicationId, tab);
+}
+
+function galleryEntryFor(
+  apps: AppGalleryEntry[],
+  connection: ToolConnection | undefined,
+  application: ToolApplication | undefined,
+): AppGalleryEntry | null {
+  if (application?.applicationKey) {
+    const keyed = apps.find((app) => app.key === application.applicationKey);
+    if (keyed) return keyed;
+  }
+  const name = (connection?.name ?? application?.name)?.toLowerCase();
+  if (!name) return null;
+  return apps.find((app) => app.name.toLowerCase() === name) ?? apps.find((app) => app.key === name) ?? null;
+}
+
+function latestArchivedConnection(connections: ToolConnection[]): ToolConnection | null {
+  const archived = connections.filter((connection) => connection.status === "archived");
+  if (archived.length === 0) return null;
+  return archived.reduce((latest, connection) => {
+    const latestTime = new Date(latest.updatedAt ?? latest.createdAt ?? 0).getTime();
+    const connectionTime = new Date(connection.updatedAt ?? connection.createdAt ?? 0).getTime();
+    return connectionTime > latestTime ? connection : latest;
+  });
+}
diff --git a/ui/src/components/AppsExperimentalGate.test.tsx b/ui/src/components/AppsExperimentalGate.test.tsx
new file mode 100644
index 00000000000..5a386cac89e
--- /dev/null
+++ b/ui/src/components/AppsExperimentalGate.test.tsx
@@ -0,0 +1,84 @@
+// @vitest-environment jsdom
+
+import { flushSync } from "react-dom";
+import { createRoot, type Root } from "react-dom/client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { AppsExperimentalGate } from "./AppsExperimentalGate";
+
+const mockInstanceSettingsApi = vi.hoisted(() => ({
+  getExperimental: vi.fn(),
+}));
+
+vi.mock("@/api/instanceSettings", () => ({
+  instanceSettingsApi: mockInstanceSettingsApi,
+}));
+
+vi.mock("@/lib/router", () => ({
+  Navigate: ({ to, replace }: { to: string; replace?: boolean }) => (
+    <div data-testid="navigate" data-to={to} data-replace={String(replace)} />
+  ),
+  Outlet: () => <div data-testid="apps-content">Apps content</div>,
+}));
+
+async function flushReact() {
+  for (let index = 0; index < 5; index += 1) {
+    await Promise.resolve();
+    await new Promise((resolve) => window.setTimeout(resolve, 0));
+  }
+  flushSync(() => {});
+}
+
+describe("AppsExperimentalGate", () => {
+  let container: HTMLDivElement;
+  let root: Root | null = null;
+
+  async function renderGate() {
+    root = createRoot(container);
+    const queryClient = new QueryClient({ defaultOptions: { queries: { retry: false } } });
+    flushSync(() => {
+      root!.render(
+        <QueryClientProvider client={queryClient}>
+          <AppsExperimentalGate />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+  }
+
+  beforeEach(() => {
+    container = document.createElement("div");
+    document.body.appendChild(container);
+  });
+
+  afterEach(() => {
+    flushSync(() => root?.unmount());
+    root = null;
+    container.remove();
+    vi.clearAllMocks();
+  });
+
+  it("redirects to the dashboard when apps are disabled", async () => {
+    mockInstanceSettingsApi.getExperimental.mockResolvedValue({ enableApps: false });
+    await renderGate();
+
+    expect(container.querySelector('[data-testid="navigate"]')?.getAttribute("data-to")).toBe("/dashboard");
+    expect(container.querySelector('[data-testid="apps-content"]')).toBeNull();
+  });
+
+  it("renders apps routes when apps are enabled", async () => {
+    mockInstanceSettingsApi.getExperimental.mockResolvedValue({ enableApps: true });
+    await renderGate();
+
+    expect(container.querySelector('[data-testid="apps-content"]')).not.toBeNull();
+    expect(container.querySelector('[data-testid="navigate"]')).toBeNull();
+  });
+
+  it("renders nothing while the flag is loading", async () => {
+    mockInstanceSettingsApi.getExperimental.mockImplementation(() => new Promise(() => {}));
+    await renderGate();
+
+    expect(container.querySelector('[data-testid="navigate"]')).toBeNull();
+    expect(container.querySelector('[data-testid="apps-content"]')).toBeNull();
+  });
+});
diff --git a/ui/src/components/AppsExperimentalGate.tsx b/ui/src/components/AppsExperimentalGate.tsx
new file mode 100644
index 00000000000..3bbe1eda832
--- /dev/null
+++ b/ui/src/components/AppsExperimentalGate.tsx
@@ -0,0 +1,10 @@
+import { Navigate, Outlet } from "@/lib/router";
+import { useAppsEnabled } from "@/hooks/useAppsEnabled";
+
+export function AppsExperimentalGate() {
+  const { enabled, loaded } = useAppsEnabled();
+
+  if (!loaded) return null;
+  if (!enabled) return <Navigate to="/dashboard" replace />;
+  return <Outlet />;
+}
diff --git a/ui/src/components/AppsSidebar.test.tsx b/ui/src/components/AppsSidebar.test.tsx
new file mode 100644
index 00000000000..4e15eebf978
--- /dev/null
+++ b/ui/src/components/AppsSidebar.test.tsx
@@ -0,0 +1,166 @@
+// @vitest-environment jsdom
+
+import { flushSync } from "react-dom";
+import { createRoot } from "react-dom/client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { AppsSidebar } from "./AppsSidebar";
+
+const sidebarNavItemMock = vi.hoisted(() => vi.fn());
+const mockToolsApi = vi.hoisted(() => ({
+  listRuntimeSlots: vi.fn(),
+  listActionRequests: vi.fn(),
+}));
+
+vi.mock("@/lib/router", () => ({
+  Link: ({
+    children,
+    to,
+    onClick,
+    className,
+  }: {
+    children: React.ReactNode;
+    to: string;
+    onClick?: () => void;
+    className?: string;
+  }) => (
+    <a href={to} onClick={onClick} className={className}>
+      {children}
+    </a>
+  ),
+}));
+
+vi.mock("@/context/CompanyContext", () => ({
+  useCompany: () => ({
+    selectedCompanyId: "company-1",
+    selectedCompany: { id: "company-1", name: "Paperclip" },
+  }),
+}));
+
+vi.mock("@/context/SidebarContext", () => ({
+  useSidebar: () => ({
+    isMobile: false,
+    setSidebarOpen: vi.fn(),
+  }),
+}));
+
+vi.mock("@/api/tools", () => ({
+  toolsApi: mockToolsApi,
+}));
+
+vi.mock("./SidebarNavItem", () => ({
+  SidebarNavItem: (props: {
+    to: string;
+    label: string;
+    end?: boolean;
+    liveCount?: number;
+    badge?: number;
+  }) => {
+    sidebarNavItemMock(props);
+    return <div data-to={props.to}>{props.label}</div>;
+  },
+}));
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+(globalThis as any).IS_REACT_ACT_ENVIRONMENT = true;
+
+// React 19 does not export a usable `act` in this vitest/jsdom setup; use a
+// flushSync-based helper (PAP-12371 gotcha).
+async function act(callback: () => void | Promise<void>) {
+  let result: void | Promise<void> = undefined;
+  flushSync(() => {
+    result = callback();
+  });
+  await result;
+}
+
+async function flushReact() {
+  for (let i = 0; i < 5; i += 1) {
+    await act(async () => {
+      await Promise.resolve();
+      await new Promise((resolve) => window.setTimeout(resolve, 0));
+    });
+  }
+}
+
+describe("AppsSidebar", () => {
+  let container: HTMLDivElement;
+
+  beforeEach(() => {
+    container = document.createElement("div");
+    document.body.appendChild(container);
+    mockToolsApi.listRuntimeSlots.mockResolvedValue({
+      runtimeSlots: [
+        { id: "slot-1", status: "running" },
+        { id: "slot-2", status: "stopped" },
+      ],
+    });
+    mockToolsApi.listActionRequests.mockResolvedValue({ actionRequests: [] });
+  });
+
+  afterEach(() => {
+    container.remove();
+    document.body.innerHTML = "";
+    vi.clearAllMocks();
+  });
+
+  it("renders Apps and Developer sections in one sidebar", async () => {
+    const root = createRoot(container);
+    const queryClient = new QueryClient({
+      defaultOptions: { queries: { retry: false } },
+    });
+
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={queryClient}>
+          <AppsSidebar />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+
+    expect(container.textContent).toContain("Apps");
+    expect(container.textContent).toContain("Developer");
+    // The Developer boundary caption frames who the door is for (PAP-13241 §5).
+    expect(container.textContent).toContain("Advanced setup for developers");
+    // "Run your own" / "Paste a config" moved to the Connect-an-app page (PAP-10922);
+    // assert their absence at the item level below.
+
+    // Three peer consumer doors: Browse (store) · Connections · Review (PAP-13254).
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(
+      expect.objectContaining({ to: "/apps/browse", label: "Browse" }),
+    );
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(
+      expect.objectContaining({ to: "/apps", label: "Connections", end: true }),
+    );
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(
+      expect.objectContaining({ to: "/apps/review", label: "Review" }),
+    );
+    // "Needs attention" is no longer a top-level door — it folds into Connections.
+    expect(sidebarNavItemMock).not.toHaveBeenCalledWith(
+      expect.objectContaining({ label: "Needs attention" }),
+    );
+    expect(sidebarNavItemMock).not.toHaveBeenCalledWith(
+      expect.objectContaining({ label: "Run your own" }),
+    );
+    expect(sidebarNavItemMock).not.toHaveBeenCalledWith(
+      expect.objectContaining({ label: "Paste a config" }),
+    );
+    expect(sidebarNavItemMock).not.toHaveBeenCalledWith(
+      expect.objectContaining({ label: "Applications" }),
+    );
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(
+      expect.objectContaining({ to: "/apps/advanced/profiles", label: "Profiles", end: true }),
+    );
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(
+      expect.objectContaining({ to: "/apps/advanced/runtime", label: "Health", end: true, liveCount: 1 }),
+    );
+    expect(sidebarNavItemMock).toHaveBeenCalledWith(
+      expect.objectContaining({ to: "/apps/advanced/audit", label: "Activity", end: true }),
+    );
+
+    await act(async () => {
+      root.unmount();
+    });
+  });
+});
diff --git a/ui/src/components/AppsSidebar.tsx b/ui/src/components/AppsSidebar.tsx
new file mode 100644
index 00000000000..09d26c78f56
--- /dev/null
+++ b/ui/src/components/AppsSidebar.tsx
@@ -0,0 +1,106 @@
+import { ChevronLeft, AppWindow, Store, ShieldQuestion } from "lucide-react";
+import { useQuery } from "@tanstack/react-query";
+import { Link } from "@/lib/router";
+import { useCompany } from "@/context/CompanyContext";
+import { useSidebar } from "@/context/SidebarContext";
+import { queryKeys } from "@/lib/queryKeys";
+import { toolsApi } from "@/api/tools";
+import { DEVELOPER_TABS, advancedTabHref, isExperimentalToolTab } from "@/pages/tools/tool-tabs";
+import { useSmokeLabEnabled } from "@/hooks/useSmokeLabEnabled";
+import { useReviewCount } from "@/pages/apps/useReviewCount";
+import { SidebarNavItem } from "./SidebarNavItem";
+
+/**
+ * Secondary sidebar for the prosumer Apps area (PAP-10856; three-door IA
+ * PAP-13254 / U3).
+ *
+ *   ← Back · APPS: Browse / Connections / Review (n)
+ *   DEVELOPER: Gateways / Profiles / Rules / Health / Activity
+ *
+ * The three consumer doors are peers: "Browse" (the store — discover + add),
+ * "Connections" (your connected tools + health), and "Review" (PAP-12371,
+ * Finding B — decisions waiting on your OK, with a live pending count).
+ * "Needs attention" is no longer a door: health/error triage folds into
+ * Connections as a status filter + banner, so approvals are never buried
+ * behind an error label. The Developer section was folded in from the retired
+ * ToolsSidebar (PAP-10915) so the whole Apps area shares one sidebar; a
+ * one-line caption frames who it's for (Finding A). "Run your own" and "Paste a
+ * config" moved out of the sidebar into rows on the Connect-an-app page
+ * (PAP-10922).
+ */
+export function AppsSidebar() {
+  const { selectedCompany, selectedCompanyId } = useCompany();
+  const { isMobile, setSidebarOpen } = useSidebar();
+
+  const reviewCount = useReviewCount();
+  const { enabled: smokeLabEnabled } = useSmokeLabEnabled();
+  const developerTabs = DEVELOPER_TABS.filter(
+    (tab) => !isExperimentalToolTab(tab.key) || smokeLabEnabled,
+  );
+
+  const runtimeSlots = useQuery({
+    queryKey: queryKeys.tools.runtimeSlots(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listRuntimeSlots(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+    refetchInterval: 15_000,
+  });
+  const runtimeActiveCount = (runtimeSlots.data?.runtimeSlots ?? [])
+    .filter((slot) => slot.status === "running").length;
+
+  return (
+    <aside className="w-full h-full min-h-0 border-r border-border bg-background flex flex-col">
+      <div className="flex flex-col gap-1 px-3 py-3 shrink-0">
+        <Link
+          to="/dashboard"
+          onClick={() => {
+            if (isMobile) setSidebarOpen(false);
+          }}
+          className="flex items-center gap-1.5 rounded-md px-2 py-1 text-xs text-muted-foreground transition-colors hover:bg-accent/50 hover:text-foreground"
+        >
+          <ChevronLeft className="h-3.5 w-3.5 shrink-0" />
+          <span className="truncate">{selectedCompany?.name ?? "Company"}</span>
+        </Link>
+        <div className="flex items-center gap-2 px-2 py-1">
+          <AppWindow className="h-4 w-4 text-muted-foreground shrink-0" />
+          <span className="flex-1 truncate text-sm font-bold text-foreground">Apps</span>
+        </div>
+      </div>
+
+      <nav className="flex-1 min-h-0 overflow-y-auto scrollbar-auto-hide px-3 py-2">
+        <div className="px-3 pb-1 text-(length:--text-micro) font-semibold uppercase tracking-wide text-muted-foreground">
+          Apps
+        </div>
+        <div className="flex flex-col gap-0.5">
+          <SidebarNavItem to="/apps/browse" label="Browse" icon={Store} />
+          <SidebarNavItem to="/apps" label="Connections" icon={AppWindow} end />
+          <SidebarNavItem
+            to="/apps/review"
+            label="Review"
+            icon={ShieldQuestion}
+            badge={reviewCount > 0 ? reviewCount : undefined}
+            badgeTone="warning"
+            badgeLabel="waiting for your OK"
+          />
+        </div>
+        <div className="px-3 pb-1 pt-4 text-(length:--text-micro) font-semibold uppercase tracking-wide text-muted-foreground">
+          Developer
+        </div>
+        <p className="px-3 pb-1.5 text-(length:--text-micro) leading-snug text-muted-foreground/70">
+          Advanced setup for developers. Most teams never open this.
+        </p>
+        <div className="flex flex-col gap-0.5">
+          {developerTabs.map((tab) => (
+            <SidebarNavItem
+              key={tab.key}
+              to={advancedTabHref(tab.key)}
+              label={tab.label}
+              icon={tab.icon}
+              end
+              liveCount={tab.key === "runtime" && runtimeActiveCount > 0 ? runtimeActiveCount : undefined}
+            />
+          ))}
+        </div>
+      </nav>
+    </aside>
+  );
+}
diff --git a/ui/src/components/Layout.test.tsx b/ui/src/components/Layout.test.tsx
index d8e318febcc..f4269120c24 100644
--- a/ui/src/components/Layout.test.tsx
+++ b/ui/src/components/Layout.test.tsx
@@ -12,6 +12,7 @@ const mockHealthApi = vi.hoisted(() => ({
 
 const mockInstanceSettingsApi = vi.hoisted(() => ({
   getGeneral: vi.fn(),
+  getExperimental: vi.fn(),
 }));
 
 const mockNavigate = vi.hoisted(() => vi.fn());
@@ -59,6 +60,20 @@ vi.mock("./CompanySettingsSidebar", () => ({
   CompanySettingsSidebar: () => <div>Company settings sidebar</div>,
 }));
 
+vi.mock("./AppsSidebar", () => ({
+  AppsSidebar: () => <div>Apps sidebar</div>,
+}));
+
+vi.mock("./AppConnectionSidebar", () => ({
+  AppDetailSidebar: (props: { kind: "connection"; connectionId: string } | { kind: "application"; applicationId: string }) => (
+    <div>
+      {props.kind === "connection"
+        ? `App detail sidebar connection ${props.connectionId}`
+        : `App detail sidebar application ${props.applicationId}`}
+    </div>
+  ),
+}));
+
 vi.mock("./BreadcrumbBar", () => ({
   BreadcrumbBar: () => <div>Breadcrumbs</div>,
 }));
@@ -245,6 +260,7 @@ describe("Layout", () => {
     mockInstanceSettingsApi.getGeneral.mockResolvedValue({
       keyboardShortcuts: false,
     });
+    mockInstanceSettingsApi.getExperimental.mockResolvedValue({ enableApps: true });
     mockPluginSlots.slots = [];
     mockPluginSlotContexts.length = 0;
     mockSidebarState.sidebarOpen = true;
@@ -485,6 +501,218 @@ describe("Layout", () => {
     });
   });
 
+  it("keeps the app sidebar and shows the Apps sidebar in the secondary pane on legacy tools routes", async () => {
+    currentPathname = "/PAP/tools/runtime";
+    const root = createRoot(container);
+    const queryClient = new QueryClient({
+      defaultOptions: { queries: { retry: false } },
+    });
+
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={queryClient}>
+          <Layout />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+    await flushReact();
+
+    expect(container.textContent).toContain("Apps sidebar");
+    expect(container.textContent).toContain("Main company nav");
+    expect(container.textContent).not.toContain("Company settings sidebar");
+    expect(mockSetForceCollapsed).toHaveBeenCalledWith(true);
+
+    await act(async () => {
+      root.unmount();
+    });
+  });
+
+  it("does not mount the Apps secondary sidebar while experimental apps are disabled", async () => {
+    currentPathname = "/PAP/apps/browse";
+    mockInstanceSettingsApi.getExperimental.mockResolvedValue({ enableApps: false });
+    const root = createRoot(container);
+    const queryClient = new QueryClient({
+      defaultOptions: { queries: { retry: false } },
+    });
+
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={queryClient}>
+          <Layout />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+    await flushReact();
+
+    expect(container.textContent).not.toContain("Apps sidebar");
+    expect(container.textContent).toContain("Main company nav");
+    expect(mockSetForceCollapsed).toHaveBeenCalledWith(false);
+
+    await act(async () => {
+      root.unmount();
+    });
+  });
+
+  it("keeps the Apps sidebar on the M8 advanced-setup tabs", async () => {
+    currentPathname = "/PAP/apps/advanced/run-your-own";
+    const root = createRoot(container);
+    const queryClient = new QueryClient({
+      defaultOptions: { queries: { retry: false } },
+    });
+
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={queryClient}>
+          <Layout />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+    await flushReact();
+
+    expect(container.textContent).toContain("Apps sidebar");
+    expect(container.textContent).toContain("Main company nav");
+
+    await act(async () => {
+      root.unmount();
+    });
+  });
+
+  it("keeps the Apps sidebar on legacy developer tabs behind the Advanced door", async () => {
+    currentPathname = "/PAP/apps/advanced/runtime";
+    const root = createRoot(container);
+    const queryClient = new QueryClient({
+      defaultOptions: { queries: { retry: false } },
+    });
+
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={queryClient}>
+          <Layout />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+    await flushReact();
+
+    expect(container.textContent).toContain("Apps sidebar");
+    expect(container.textContent).toContain("Main company nav");
+
+    await act(async () => {
+      root.unmount();
+    });
+  });
+
+  // Reserved Apps subroutes are not connection ids. They must keep the
+  // top-level Apps sidebar, never mount a detail sidebar for a phantom app.
+  it.each(["browse", "review"])("keeps the Apps sidebar on the %s surface", async (route) => {
+    currentPathname = `/PAP/apps/${route}`;
+    const root = createRoot(container);
+    const queryClient = new QueryClient({
+      defaultOptions: { queries: { retry: false } },
+    });
+
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={queryClient}>
+          <Layout />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+    await flushReact();
+
+    expect(container.textContent).toContain("Apps sidebar");
+    expect(container.textContent).toContain("Main company nav");
+    expect(container.textContent).not.toContain("App detail sidebar");
+
+    await act(async () => {
+      root.unmount();
+    });
+  });
+
+  it("keeps the Apps sidebar on the gateways list and detail routes", async () => {
+    for (const pathname of ["/PAP/apps/gateways", "/PAP/apps/gateways/gw-1/overview"]) {
+      currentPathname = pathname;
+      const root = createRoot(container);
+      const queryClient = new QueryClient({
+        defaultOptions: { queries: { retry: false } },
+      });
+
+      await act(async () => {
+        root.render(
+          <QueryClientProvider client={queryClient}>
+            <Layout />
+          </QueryClientProvider>,
+        );
+      });
+      await flushReact();
+      await flushReact();
+
+      expect(container.textContent).toContain("Apps sidebar");
+      expect(container.textContent).toContain("Main company nav");
+      expect(container.textContent).not.toContain("App detail sidebar");
+
+      await act(async () => {
+        root.unmount();
+      });
+    }
+  });
+
+  it("uses the app connection sidebar on app detail routes", async () => {
+    currentPathname = "/PAP/apps/conn-1/permissions";
+    const root = createRoot(container);
+    const queryClient = new QueryClient({
+      defaultOptions: { queries: { retry: false } },
+    });
+
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={queryClient}>
+          <Layout />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+    await flushReact();
+
+    expect(container.textContent).toContain("App detail sidebar connection conn-1");
+    expect(container.textContent).toContain("Main company nav");
+    expect(container.textContent).not.toContain("Apps sidebar");
+
+    await act(async () => {
+      root.unmount();
+    });
+  });
+
+  it("uses the app detail sidebar on not-connected app routes", async () => {
+    currentPathname = "/PAP/apps/app/app-1/permissions";
+    const root = createRoot(container);
+    const queryClient = new QueryClient({
+      defaultOptions: { queries: { retry: false } },
+    });
+
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={queryClient}>
+          <Layout />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+    await flushReact();
+
+    expect(container.textContent).toContain("App detail sidebar application app-1");
+    expect(container.textContent).toContain("Main company nav");
+    expect(container.textContent).not.toContain("Apps sidebar");
+
+    await act(async () => {
+      root.unmount();
+    });
+  });
+
   it("forces the app sidebar rail only for the Skills Store route", async () => {
     async function renderAt(pathname: string) {
       currentPathname = pathname;
diff --git a/ui/src/components/Layout.tsx b/ui/src/components/Layout.tsx
index 14b6f221fd2..ccb9fb3f4f9 100644
--- a/ui/src/components/Layout.tsx
+++ b/ui/src/components/Layout.tsx
@@ -4,6 +4,8 @@ import { Outlet, useLocation, useNavigate, useNavigationType, useParams } from "
 import { Sidebar } from "./Sidebar";
 import { CompanySettingsSidebar } from "./CompanySettingsSidebar";
 import { CompanySettingsNav } from "./access/CompanySettingsNav";
+import { AppsSidebar } from "./AppsSidebar";
+import { AppDetailSidebar } from "./AppConnectionSidebar";
 import { BreadcrumbBar } from "./BreadcrumbBar";
 import { PropertiesPanel } from "./PropertiesPanel";
 import { CommandPalette } from "./CommandPalette";
@@ -27,6 +29,7 @@ import { usePanel } from "../context/PanelContext";
 import { useCompany } from "../context/CompanyContext";
 import { useSidebar } from "../context/SidebarContext";
 import { useKeyboardShortcuts } from "../hooks/useKeyboardShortcuts";
+import { useAppsEnabled } from "../hooks/useAppsEnabled";
 import { useCompanyPageMemory } from "../hooks/useCompanyPageMemory";
 import { healthApi } from "../api/health";
 import { instanceSettingsApi } from "../api/instanceSettings";
@@ -45,13 +48,19 @@ import { NotFoundPage } from "../pages/NotFound";
 import { PluginSlotMount, resolveRouteSidebarSlot, usePluginSlots } from "../plugins/slots";
 
 function getCompanyRouteSegment(pathname: string, companyPrefix: string | undefined): string | null {
-  if (!companyPrefix) return null;
-  const segments = pathname.split("/").filter(Boolean);
-  if (segments.length < 2) return null;
-  if (segments[0]?.toUpperCase() !== companyPrefix.toUpperCase()) return null;
-  return segments[1]?.toLowerCase() ?? null;
+  return getCompanyPathSegments(pathname, companyPrefix)[0]?.toLowerCase() ?? null;
 }
 
+function getCompanyPathSegments(pathname: string, companyPrefix: string | undefined): string[] {
+  if (!companyPrefix) return [];
+  const segments = pathname.split("/").filter(Boolean);
+  if (segments.length < 2) return [];
+  if (segments[0]?.toUpperCase() !== companyPrefix.toUpperCase()) return [];
+  return segments.slice(1);
+}
+
+const RESERVED_APP_SUBPATHS = new Set(["browse", "connect", "review", "attention", "gateways", "advanced", "app"]);
+
 function isSkillsStoreRoute(pathname: string, companyPrefix: string | undefined) {
   const segments = pathname.split("/").filter(Boolean);
   if (segments[0]?.toLowerCase() === "skills") return true;
@@ -91,7 +100,19 @@ export function Layout() {
   const navigate = useNavigate();
   const location = useLocation();
   const navigationType = useNavigationType();
+  const { enabled: appsEnabled } = useAppsEnabled();
   const isCompanySettingsRoute = location.pathname.includes("/company/settings");
+  const companyPathSegments = getCompanyPathSegments(location.pathname, companyPrefix);
+  const isToolsRoute = companyPathSegments[0]?.toLowerCase() === "tools";
+  const isAppsRoute = companyPathSegments[0]?.toLowerCase() === "apps";
+  const appDetailConnectionId =
+    isAppsRoute && companyPathSegments[1] && !RESERVED_APP_SUBPATHS.has(companyPathSegments[1].toLowerCase())
+      ? companyPathSegments[1]
+      : null;
+  const appDetailApplicationId =
+    isAppsRoute && companyPathSegments[1]?.toLowerCase() === "app" && companyPathSegments[2]
+      ? companyPathSegments[2]
+      : null;
   // The Skills Store renders its own secondary (category) sidebar, so the main
   // app nav collapses to its rail throughout the Skills Store section (PAP-10879).
   const isSkillsRoute = isSkillsStoreRoute(location.pathname, companyPrefix);
@@ -138,6 +159,12 @@ export function Layout() {
   // both desktop (SecondarySidebar) and mobile (off-canvas drawer).
   const secondarySidebar = isCompanySettingsRoute ? (
     <CompanySettingsSidebar />
+  ) : appsEnabled && appDetailConnectionId ? (
+    <AppDetailSidebar kind="connection" connectionId={appDetailConnectionId} />
+  ) : appsEnabled && appDetailApplicationId ? (
+    <AppDetailSidebar kind="application" applicationId={appDetailApplicationId} />
+  ) : appsEnabled && (isAppsRoute || isToolsRoute) ? (
+    <AppsSidebar />
   ) : routeSidebarSlot ? (
     <PluginSlotMount
       slot={routeSidebarSlot}
diff --git a/ui/src/components/Sidebar.test.tsx b/ui/src/components/Sidebar.test.tsx
index dc69abdd793..84e57ed7efd 100644
--- a/ui/src/components/Sidebar.test.tsx
+++ b/ui/src/components/Sidebar.test.tsx
@@ -452,6 +452,27 @@ describe("Sidebar", () => {
     });
   });
 
+  it("hides the Apps nav item unless experimental apps are enabled", async () => {
+    mockInstanceSettingsApi.getExperimental.mockResolvedValue({ enableApps: false });
+    const disabledRoot = await renderSidebar();
+
+    expect([...container.querySelectorAll("a")].some((anchor) => anchor.textContent === "Apps")).toBe(false);
+
+    flushSync(() => {
+      disabledRoot.unmount();
+    });
+
+    mockInstanceSettingsApi.getExperimental.mockResolvedValue({ enableApps: true });
+    const enabledRoot = await renderSidebar();
+
+    const link = [...container.querySelectorAll("a")].find((anchor) => anchor.textContent === "Apps");
+    expect(link?.getAttribute("href")).toBe("/apps");
+
+    flushSync(() => {
+      enabledRoot.unmount();
+    });
+  });
+
   it("shows the Pipelines nav item when pipelines are enabled", async () => {
     mockInstanceSettingsApi.getExperimental.mockResolvedValue({
       enableIsolatedWorkspaces: false,
diff --git a/ui/src/components/Sidebar.tsx b/ui/src/components/Sidebar.tsx
index 29326f057c6..613baa62785 100644
--- a/ui/src/components/Sidebar.tsx
+++ b/ui/src/components/Sidebar.tsx
@@ -19,6 +19,7 @@ import {
   PanelLeftClose,
   PanelLeftOpen,
   Pin,
+  AppWindow,
   MessagesSquare,
   GanttChartSquare,
 } from "lucide-react";
@@ -79,6 +80,7 @@ export function Sidebar() {
   usePublishSharedQueryData(sharedLiveRuns, liveRuns, liveRunsUpdatedAt);
   const liveRunCount = liveRuns?.length ?? 0;
   const showWorkspacesLink = experimentalSettings?.enableIsolatedWorkspaces === true;
+  const showApps = experimentalSettings?.enableApps === true;
   const showPipelines = experimentalSettings?.enablePipelines === true;
   const goalsLinkPending = experimentalSettings === undefined;
   const showGoalsLink = experimentalSettings?.enableGoalsSidebarLink === true;
@@ -269,6 +271,7 @@ export function Sidebar() {
 
         <SidebarSection label="Company" collapsible={{ open: companyOpen, onOpenChange: setCompanyOpen }}>
           <SidebarNavItem to="/org" label="Org" icon={Network} />
+          {showApps ? <SidebarNavItem to="/apps" label="Apps" icon={AppWindow} /> : null}
           <SidebarNavItem to="/timeline" label="Timeline" icon={GanttChartSquare} />
           <SidebarNavItem to="/costs" label="Costs" icon={DollarSign} />
           <SidebarNavItem to="/activity" label="Activity" icon={History} />
diff --git a/ui/src/components/SidebarNavItem.tsx b/ui/src/components/SidebarNavItem.tsx
index a9603af7abf..c7034179c89 100644
--- a/ui/src/components/SidebarNavItem.tsx
+++ b/ui/src/components/SidebarNavItem.tsx
@@ -46,7 +46,7 @@ interface SidebarNavItemProps {
   className?: string;
   labelClassName?: string;
   badge?: number;
-  badgeTone?: "default" | "danger";
+  badgeTone?: "default" | "danger" | "warning";
   /**
    * Accessible noun for the numeric badge when collapsed to the rail, where the
    * count is rendered as a dot (e.g. `badgeLabel="unread"` → "Inbox, 28 unread").
@@ -152,7 +152,11 @@ export function SidebarNavItem({
           <span
             className={cn(
               "absolute -right-0.5 -top-0.5 h-2 w-2 rounded-full shadow-(--shadow-extract-12)",
-              badgeTone === "danger" ? "bg-red-600" : "bg-primary",
+              badgeTone === "danger"
+                ? "bg-red-600"
+                : badgeTone === "warning"
+                  ? "bg-amber-500"
+                  : "bg-primary",
             )}
             aria-hidden="true"
           />
@@ -192,7 +196,9 @@ export function SidebarNavItem({
             "ml-auto px-1.5 leading-none",
             badgeTone === "danger"
               ? "bg-red-600/90 text-red-50"
-              : "bg-primary text-primary-foreground",
+              : badgeTone === "warning"
+                ? "bg-amber-500/90 text-amber-50"
+                : "bg-primary text-primary-foreground",
           )}
         >
           {badge}
diff --git a/ui/src/index.css b/ui/src/index.css
index ce4c18ba7ae..a850c8179a5 100644
--- a/ui/src/index.css
+++ b/ui/src/index.css
@@ -1477,6 +1477,14 @@ span.paperclip-mention-chip[data-mention-kind="external-object"] {
   --project-none: #64748b; /* Semantic rename of --hex-64748b (DECISION-SHEET.md A3, value unchanged). 'No project assigned' muted-slate fallback (TOKEN-AUDIT.md 1.3) across Routines/MarkdownEditor/RoutineRunVariablesDialog/RoutineList/IssueColumns/editable-sections; also ActivityCharts.tsx status 'backlog'. */
   --project-seed: #6366f1; /* Semantic rename of --hex-6366f1 (DECISION-SHEET.md A3, value unchanged). Project-color-fallback indigo seed default (ProjectDetail/PipelineSettings/IssueProperties/NewIssueDialog) — new-project-color-picker-seed family per TOKEN-AUDIT.md 1.3. */
   --liveness-blue: #2563eb; /* DECISION-SHEET.md A6: IssueChatThread.tsx human-message 'liveness blue' bubble (PAP-95 rev 5). Same value as --status-task-in_progress by coincidence, decoupled on purpose so a future status-hue change doesn't drag the chat bubble along. */
+  --app-logo-tile-1: #ff4f00;
+  --app-logo-tile-2: #24292f;
+  --app-logo-tile-3: #4a154b;
+  --app-logo-tile-4: #0f172a;
+  --app-logo-tile-5: #5e6ad2;
+  --app-logo-tile-6: #1a73e8;
+  --app-logo-tile-7: #0f9d58;
+  --app-logo-tile-8: #ea4335;
   --gradient-extract-1: linear-gradient(180deg,rgba(255,80,80,0.12),rgba(255,255,255,0.02)); /* Dashboard.tsx budget-alert card gradient. */
   --gradient-extract-2: linear-gradient(180deg,rgba(255,255,255,0.05),rgba(255,255,255,0.02)); /* Costs.tsx subtle white card gradient. */
   --gradient-extract-3: radial-gradient(circle at top left,rgba(244,114,182,0.08),transparent 35%),radial-gradient(circle at bottom right,rgba(56,189,248,0.1),transparent 32%); /* AccountingModelCard.tsx decorative overlay. */
@@ -1548,6 +1556,8 @@ span.paperclip-mention-chip[data-mention-kind="external-object"] {
 */
 :root {
   --sz-320px: 320px; /* Extracted from ui/src/components/ActiveAgentsPanel.tsx (h-[320px]). */
+  --sz-390px: 390px;
+  --sz-64px: 64px;
   --sz-3px: 3px; /* Extracted from ui/src/components/ActivityCharts.tsx (gap-[3px]). */
   --sz-calc-1: calc(100% - 1.5rem); /* Extracted from ui/src/components/ActivityFeed.tsx (w-[calc(100%-1.5rem)]). */
   --sz-calc-2: calc(100% - 0.75rem); /* Extracted from ui/src/components/ActivityFeed.tsx (w-[calc(100%-0.75rem)]). */
@@ -1577,6 +1587,13 @@ span.paperclip-mention-chip[data-mention-kind="external-object"] {
   --sz-94vw: 94vw; /* Extracted from ui/src/components/FileViewerSheet.tsx (w-[94vw]). */
   --sz-1280px: 1280px; /* Extracted from ui/src/components/FileViewerSheet.tsx (max-w-[1280px]). */
   --sz-60vh: 60vh; /* Extracted from ui/src/components/FrontDoor.tsx (min-h-[60vh]). */
+  --sz-52vh: 52vh;
+  --sz-40rem: 40rem;
+  --sz-44rem: 44rem;
+  --sz-30pct: 30%;
+  --sz-24pct: 24%;
+  --sz-18pct: 18%;
+  --sz-12pct: 12%;
   --sz-calc-6: min(20rem,calc(100vw - 2rem)); /* Extracted from ui/src/components/InlineEntitySelector.tsx (w-[min(20rem,calc(100vw-2rem))]). */
   --sz-18rem: 18rem; /* Extracted from ui/src/components/IssueBlockedNotice.tsx (max-w-[18rem]). */
   --sz-70vh: 70vh; /* Extracted from ui/src/components/IssueChatThread.test.tsx (max-h-[70vh]). */
@@ -1801,6 +1818,12 @@ span.paperclip-mention-chip[data-mention-kind="external-object"] {
   --gtc-56: minmax(0,1fr) minmax(14rem,18rem); /* Extracted from ui/src/pages/TeamCatalog.tsx (grid-cols-[minmax(0,1fr)_minmax(14rem,18rem)]). */
   --gtc-57: repeat(14,minmax(0,1fr)); /* Extracted from ui/src/pages/UserProfile.tsx (grid-cols-[repeat(14,minmax(0,1fr))]). */
   --gtc-58: auto 1fr auto; /* Extracted from ui/src/pages/UserProfile.tsx (grid-cols-[auto_1fr_auto]). */
+  --gtc-59: 8rem 1fr;
+  --gtc-60: 1fr 1fr;
+  --gtc-61: 1fr 1fr 1fr;
+  --gtc-62: 1fr minmax(0,18rem);
+  --gtc-63: 280px 1fr;
+  --gtc-64: minmax(0,20rem) 1fr;
   --gtr-1: auto auto; /* Extracted from ui/src/components/ui/card.tsx (grid-rows-[auto_auto]). */
   --gtr-2: 1fr; /* Extracted from ui/src/pages/CompanySkills.tsx (grid-rows-[1fr]). */
   --gtr-3: 0fr; /* Extracted from ui/src/pages/CompanySkills.tsx (grid-rows-[0fr]). */
diff --git a/ui/src/pages/AgentDetail.tsx b/ui/src/pages/AgentDetail.tsx
index b0564d73ca4..a36a750a52d 100644
--- a/ui/src/pages/AgentDetail.tsx
+++ b/ui/src/pages/AgentDetail.tsx
@@ -33,6 +33,7 @@ import { useAdapterCapabilities } from "@/adapters/use-adapter-capabilities";
 import { redactCommandText as redactCommandSecretText } from "@paperclipai/adapter-utils";
 import { MarkdownEditor } from "../components/MarkdownEditor";
 import { assetsApi } from "../api/assets";
+import { toolsApi } from "../api/tools";
 import { getUIAdapter, buildTranscript, onAdapterChange } from "../adapters";
 import { StatusBadge } from "../components/StatusBadge";
 import { MarkdownBody } from "../components/MarkdownBody";
@@ -87,6 +88,7 @@ import { TooltipProvider } from "@/components/ui/tooltip";
 import { Input } from "@/components/ui/input";
 import { AgentIcon, AgentIconPicker } from "../components/AgentIconPicker";
 import { RunTranscriptView, type TranscriptMode } from "../components/transcript/RunTranscriptView";
+import { AgentToolsTab } from "./AgentToolsTab";
 import {
   appendCapped,
   LIVE_TRANSCRIPT_RENDER_LIMIT,
@@ -270,12 +272,13 @@ function scrollToContainerBottom(container: ScrollContainer, behavior: ScrollBeh
   container.scrollTo({ top: container.scrollHeight, behavior });
 }
 
-type AgentDetailView = "dashboard" | "instructions" | "configuration" | "skills" | "runs" | "budget";
+type AgentDetailView = "dashboard" | "instructions" | "configuration" | "skills" | "tools" | "runs" | "budget";
 
 function parseAgentDetailView(value: string | null): AgentDetailView {
   if (value === "instructions" || value === "prompts") return "instructions";
   if (value === "configure" || value === "configuration") return "configuration";
   if (value === "skills") return "skills";
+  if (value === "tools") return "tools";
   if (value === "budget") return "budget";
   if (value === "runs") return value;
   return "dashboard";
@@ -892,10 +895,12 @@ export function AgentDetail() {
           ? "configuration"
           : activeView === "skills"
             ? "skills"
-            : activeView === "runs"
-              ? "runs"
-              : activeView === "budget"
-                ? "budget"
+            : activeView === "tools"
+              ? "tools"
+              : activeView === "runs"
+                ? "runs"
+                : activeView === "budget"
+                  ? "budget"
               : "dashboard";
     if (routeAgentRef !== canonicalAgentRef || urlTab !== canonicalTab) {
       navigate(`/agents/${canonicalAgentRef}/${canonicalTab}`, { replace: true });
@@ -999,6 +1004,8 @@ export function AgentDetail() {
         crumbs.push({ label: "Configuration" });
       // } else if (activeView === "skills") { // TODO: bring back later
       //   crumbs.push({ label: "Skills" });
+      } else if (activeView === "tools") {
+        crumbs.push({ label: "Tools" });
       } else if (activeView === "runs") {
         crumbs.push({ label: "Runs" });
       } else if (activeView === "budget") {
@@ -1243,6 +1250,7 @@ export function AgentDetail() {
               { value: "instructions", label: "Instructions" },
               { value: "skills", label: "Skills" },
               { value: "configuration", label: "Configuration" },
+              { value: "tools", label: "Tools" },
               { value: "runs", label: "Runs" },
               { value: "budget", label: "Budget" },
             ]}
@@ -1360,6 +1368,10 @@ export function AgentDetail() {
         />
       )}
 
+      {activeView === "tools" && resolvedCompanyId && (
+        <AgentToolsTab agent={agent} companyId={resolvedCompanyId} />
+      )}
+
       {activeView === "runs" && (
         <RunsTab
           runs={heartbeats ?? []}
@@ -3850,6 +3862,13 @@ function LogViewer({ run, adapterType }: { run: HeartbeatRun; adapterType: strin
     () => buildTranscript(logLines, adapter, { censorUsernameInLogs }),
     [adapter, censorUsernameInLogs, logLines, parserTick],
   );
+  const toolDecisionLookup = useQuery({
+    queryKey: queryKeys.tools.runDecisions(run.companyId, run.id),
+    queryFn: () => toolsApi.getRunDecisionLookup(run.companyId, run.id),
+    enabled: Boolean(run.companyId && run.id),
+    refetchInterval: isLive ? 3000 : false,
+    staleTime: isLive ? 1000 : 30_000,
+  });
 
   useEffect(() => {
     setTranscriptMode("nice");
@@ -3936,6 +3955,7 @@ function LogViewer({ run, adapterType }: { run: HeartbeatRun; adapterType: strin
       <div className="max-h-(--sz-38rem) overflow-y-auto rounded-2xl border border-border/70 bg-background/40 p-3 sm:p-4">
         <RunTranscriptView
           entries={transcript}
+          toolDecisions={toolDecisionLookup.data?.decisions ?? []}
           mode={transcriptMode}
           streaming={isLive}
           limit={isLive ? LIVE_TRANSCRIPT_RENDER_LIMIT : undefined}
diff --git a/ui/src/pages/AgentToolsTab.test.tsx b/ui/src/pages/AgentToolsTab.test.tsx
new file mode 100644
index 00000000000..5ba996769b9
--- /dev/null
+++ b/ui/src/pages/AgentToolsTab.test.tsx
@@ -0,0 +1,309 @@
+// @vitest-environment jsdom
+
+import { flushSync } from "react-dom";
+import { createRoot } from "react-dom/client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import type {
+  ToolCatalogEntry,
+  ToolPolicy,
+  ToolProfileEffectiveSummary,
+} from "@paperclipai/shared";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { createElement } from "react";
+
+const mockToolsApi = vi.hoisted(() => ({
+  getEffectiveProfilesForAgent: vi.fn(),
+  listConnections: vi.fn(),
+  listPolicies: vi.fn(),
+  listCatalog: vi.fn(),
+  listAudit: vi.fn(),
+  putConnectionInstalls: vi.fn(),
+}));
+
+vi.mock("../api/tools", () => ({ toolsApi: mockToolsApi }));
+
+// Render the company-aware Link as a plain anchor so we don't need a Router.
+vi.mock("@/lib/router", () => ({
+  Link: ({ to, children, ...rest }: { to: string; children: unknown }) =>
+    createElement("a", { href: to, ...rest }, children as never),
+}));
+
+(globalThis as typeof globalThis & { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true;
+
+async function act(callback: () => void | Promise<void>) {
+  let result: void | Promise<void> = undefined;
+  flushSync(() => {
+    result = callback();
+  });
+  await result;
+}
+
+async function flushReact(cycles = 4) {
+  // Multiple cycles let dependent query waves settle (connections → per-connection catalog).
+  for (let i = 0; i < cycles; i += 1) {
+    await act(async () => {
+      await Promise.resolve();
+      await new Promise((resolve) => window.setTimeout(resolve, 0));
+    });
+  }
+}
+
+function makeCatalogEntry(overrides: Partial<ToolCatalogEntry>): ToolCatalogEntry {
+  return {
+    id: "cat-1",
+    companyId: "company-1",
+    applicationId: "app-1",
+    connectionId: "conn-1",
+    entryKind: "tool",
+    toolName: "github.read_repo",
+    title: "Read repo",
+    description: null,
+    inputSchema: null,
+    outputSchema: null,
+    annotations: null,
+    riskLevel: "read",
+    isReadOnly: true,
+    isWrite: false,
+    isDestructive: false,
+    status: "active",
+    addedAt: new Date("2026-06-01T00:00:00Z"),
+    version: null,
+    schemaHash: null,
+    firstSeenAt: new Date("2026-06-01T00:00:00Z"),
+    lastSeenAt: new Date("2026-06-01T00:00:00Z"),
+    reviewedAt: null,
+    reviewedByAgentId: null,
+    reviewedByUserId: null,
+    createdAt: new Date("2026-06-01T00:00:00Z"),
+    updatedAt: new Date("2026-06-01T00:00:00Z"),
+    ...overrides,
+  };
+}
+
+function makePolicy(overrides: Partial<ToolPolicy>): ToolPolicy {
+  return {
+    id: "pol-1",
+    companyId: "company-1",
+    name: "Require approval for writes",
+    description: "All write tools need board approval",
+    policyType: "require_approval",
+    priority: 100,
+    enabled: true,
+    selectors: {},
+    conditions: null,
+    config: null,
+    createdByAgentId: null,
+    createdByUserId: null,
+    createdAt: new Date("2026-06-01T00:00:00Z"),
+    updatedAt: new Date("2026-06-01T00:00:00Z"),
+    ...overrides,
+  };
+}
+
+describe("AgentToolsTab", () => {
+  let container: HTMLDivElement;
+  let root: ReturnType<typeof createRoot>;
+
+  beforeEach(() => {
+    container = document.createElement("div");
+    document.body.appendChild(container);
+    mockToolsApi.getEffectiveProfilesForAgent.mockReset();
+    mockToolsApi.listConnections.mockReset();
+    mockToolsApi.listPolicies.mockReset();
+    mockToolsApi.listCatalog.mockReset();
+    mockToolsApi.putConnectionInstalls.mockReset();
+    mockToolsApi.putConnectionInstalls.mockResolvedValue({ connectionId: "conn-1", installs: [] });
+  });
+
+  afterEach(async () => {
+    await act(async () => {
+      root?.unmount();
+    });
+    container.remove();
+    vi.clearAllMocks();
+  });
+
+  async function renderTab() {
+    const { AgentToolsTab } = await import("./AgentToolsTab");
+    const client = new QueryClient({ defaultOptions: { queries: { retry: false } } });
+    const agent = { id: "agent-1", name: "Coder" } as never;
+    await act(async () => {
+      root = createRoot(container);
+      root.render(
+        createElement(
+          QueryClientProvider,
+          { client },
+          createElement(AgentToolsTab, { agent, companyId: "company-1" }),
+        ),
+      );
+    });
+    await flushReact();
+  }
+
+  it("preserves checkbox changes made after the last saved install state", async () => {
+    const { mergeInstallDraft } = await import("./AgentToolsTab");
+
+    expect(
+      mergeInstallDraft(
+        { "conn-1": true, "conn-2": false },
+        { "conn-1": true, "conn-2": true },
+        { "conn-1": false, "conn-2": false },
+      ),
+    ).toEqual({
+      draft: { "conn-1": true, "conn-2": true },
+      hasPendingChanges: true,
+    });
+  });
+
+  it("renders effective access, access profiles, governing policy, and unavailable tools", async () => {
+    const allowed = makeCatalogEntry({ id: "cat-allow", toolName: "github.read_repo" });
+    const denied = makeCatalogEntry({
+      id: "cat-deny",
+      toolName: "github.delete_repo",
+      riskLevel: "critical",
+      isReadOnly: false,
+      isWrite: true,
+      isDestructive: true,
+    });
+
+    mockToolsApi.getEffectiveProfilesForAgent.mockResolvedValue({
+      agentId: "agent-1",
+      profiles: [
+        {
+          id: "prof-1",
+          companyId: "company-1",
+          profileKey: "github-safe",
+          name: "GitHub safe",
+          description: null,
+          status: "active",
+          defaultAction: "deny",
+          newToolsReviewedAt: null,
+          metadata: null,
+          createdAt: new Date(),
+          updatedAt: new Date(),
+          entries: [],
+          bindings: [],
+          summary: {
+            accessMode: "selected",
+            allowedToolCount: 1,
+            allowedApplicationCount: 1,
+            excludedToolCount: 0,
+            totalToolCount: 1,
+            assignmentCount: 1,
+            appliesToAgentCount: 1,
+            isCompanyDefault: true,
+          },
+        },
+      ],
+      entries: [],
+      bindings: [
+        {
+          id: "bind-1",
+          companyId: "company-1",
+          profileId: "prof-1",
+          targetType: "agent",
+          targetId: "agent-1",
+          priority: 100,
+          metadata: null,
+          createdByAgentId: null,
+          createdByUserId: null,
+          createdAt: new Date(),
+          updatedAt: new Date(),
+        },
+      ],
+      allowedTools: [allowed],
+      allowedToolNames: ["github.read_repo"],
+      installedConnections: [],
+    } satisfies ToolProfileEffectiveSummary);
+
+    mockToolsApi.listConnections.mockResolvedValue({
+      connections: [{ id: "conn-1", name: "Production GitHub" }],
+    });
+    mockToolsApi.listPolicies.mockResolvedValue({
+      policies: [
+        makePolicy({ id: "pol-1", name: "Require approval for writes" }),
+        makePolicy({
+          id: "pol-2",
+          name: "Block other agent",
+          enabled: true,
+          selectors: { agentId: "someone-else" },
+        }),
+      ],
+    });
+    mockToolsApi.listCatalog.mockResolvedValue({ catalog: [allowed, denied] });
+
+    await renderTab();
+
+    const text = container.textContent ?? "";
+    expect(text).toContain("Effective access");
+    expect(text).toContain("github.read_repo");
+    expect(text).toContain("Production GitHub");
+    expect(text).toContain("GitHub safe");
+    expect(text).toContain("Access profiles");
+    expect(text).toContain("Company default");
+    expect(container.querySelector('a[href="/apps/advanced/profiles/prof-1"]')?.textContent).toBe("GitHub safe");
+    expect(container.querySelector('a[href="/apps/advanced/profiles?check=1"]')?.textContent).toBe("Check access");
+    // Governing policy #1 is the company-wide require_approval rule.
+    expect(text).toContain("#1 Require approval for writes");
+    // The policy that targets a different agent must NOT appear.
+    expect(text).not.toContain("Block other agent");
+    // Unavailable tool surfaced from the full tool list minus allowed.
+    expect(text).toContain("github.delete_repo");
+  });
+
+  it("shows the empty allow-list message when no profile applies", async () => {
+    mockToolsApi.getEffectiveProfilesForAgent.mockResolvedValue({
+      agentId: "agent-1",
+      profiles: [],
+      entries: [],
+      bindings: [],
+      allowedTools: [],
+      allowedToolNames: [],
+      installedConnections: [],
+    } satisfies ToolProfileEffectiveSummary);
+    mockToolsApi.listConnections.mockResolvedValue({ connections: [] });
+    mockToolsApi.listPolicies.mockResolvedValue({ policies: [] });
+
+    await renderTab();
+
+    const text = container.textContent ?? "";
+    expect(text).toContain("No tools are allowed for this agent");
+    expect(text).toContain("No active profile applies");
+  });
+
+  it("autosaves installed apps for the current agent", async () => {
+    const allowed = makeCatalogEntry({ id: "cat-allow", toolName: "github.read_repo" });
+    mockToolsApi.getEffectiveProfilesForAgent.mockResolvedValue({
+      agentId: "agent-1",
+      profiles: [],
+      entries: [],
+      bindings: [],
+      allowedTools: [allowed],
+      allowedToolNames: ["github.read_repo"],
+      installedConnections: [],
+    } satisfies ToolProfileEffectiveSummary);
+    mockToolsApi.listConnections.mockResolvedValue({
+      connections: [{ id: "conn-1", companyId: "company-1", name: "Production GitHub", installs: [] }],
+    });
+    mockToolsApi.listPolicies.mockResolvedValue({ policies: [] });
+    mockToolsApi.listCatalog.mockResolvedValue({ catalog: [allowed] });
+
+    await renderTab();
+
+    expect(container.textContent).toContain("Installed apps");
+    expect(container.textContent).toContain("Permitted only");
+    expect(container.textContent).toContain("Permitted but not installed — tools will not appear in runs.");
+    expect(container.querySelector('a[href="/apps/conn-1/permissions"]')?.textContent).toBe("Open permissions");
+    const installCheckbox = container.querySelector<HTMLElement>('[aria-label="Install Production GitHub on Coder"]');
+    expect(installCheckbox).toBeTruthy();
+    await act(async () => {
+      installCheckbox!.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+      await new Promise((resolve) => window.setTimeout(resolve, 300));
+    });
+    await flushReact();
+
+    expect(mockToolsApi.putConnectionInstalls).toHaveBeenCalledWith("conn-1", [
+      { targetType: "agent", targetId: "agent-1" },
+    ]);
+  });
+});
diff --git a/ui/src/pages/AgentToolsTab.tsx b/ui/src/pages/AgentToolsTab.tsx
new file mode 100644
index 00000000000..3b22837d7ec
--- /dev/null
+++ b/ui/src/pages/AgentToolsTab.tsx
@@ -0,0 +1,638 @@
+import { useEffect, useMemo, useRef, useState } from "react";
+import { useMutation, useQueries, useQuery, useQueryClient } from "@tanstack/react-query";
+import { HelpCircle, PackageCheck } from "lucide-react";
+import type {
+  AgentDetail as AgentDetailRecord,
+  ToolCatalogEntry,
+  ToolConnection,
+  ToolPolicy,
+} from "@paperclipai/shared";
+import { Link } from "@/lib/router";
+import { queryKeys } from "../lib/queryKeys";
+import { toolsApi } from "../api/tools";
+import { Checkbox } from "@/components/ui/checkbox";
+import { InlineBanner } from "@/components/InlineBanner";
+import { EnforcementBanner } from "../components/EnforcementBanner";
+import {
+  RiskBadge,
+  CapabilityBadges,
+  LoadingState as ToolsLoadingState,
+  ErrorState as ToolsErrorState,
+} from "./tools/shared";
+import { cn } from "../lib/utils";
+import { brandChipBadge } from "../lib/status-colors";
+import { installPayload, installStateFrom, isAgentInstalled, INSTALLED_HINT } from "../lib/tool-installs";
+
+/** Normalize a selector value (string or string[]) into a flat string list. */
+function selectorStringList(value: unknown): string[] {
+  if (typeof value === "string") return value.trim() ? [value.trim()] : [];
+  if (Array.isArray(value)) {
+    return value.filter((v): v is string => typeof v === "string" && v.trim().length > 0);
+  }
+  return [];
+}
+
+/**
+ * A policy governs this agent's allow list when it either explicitly names the
+ * agent, or carries no agent/actor restriction that would exclude agents. This
+ * mirrors how the tool gateway evaluates selectors server-side.
+ */
+export function policyGovernsAgent(policy: ToolPolicy, agentId: string): boolean {
+  const selectors = (policy.selectors ?? {}) as Record<string, unknown>;
+  const agentIds = [
+    ...selectorStringList(selectors.agentId),
+    ...selectorStringList(selectors.agentIds),
+  ];
+  if (agentIds.length > 0) return agentIds.includes(agentId);
+  const actorTypes = [
+    ...selectorStringList(selectors.actorType),
+    ...selectorStringList(selectors.actorTypes),
+  ];
+  if (actorTypes.length > 0 && !actorTypes.includes("agent")) return false;
+  return true;
+}
+
+export function mergeInstallDraft(
+  serverDraft: Record<string, boolean>,
+  currentDraft: Record<string, boolean>,
+  lastSavedDraft: Record<string, boolean>,
+): { draft: Record<string, boolean>; hasPendingChanges: boolean } {
+  const draft = { ...serverDraft };
+  let hasPendingChanges = false;
+  for (const [connectionId, installed] of Object.entries(currentDraft)) {
+    if (installed === (lastSavedDraft[connectionId] ?? false)) continue;
+    draft[connectionId] = installed;
+    hasPendingChanges = true;
+  }
+  return { draft, hasPendingChanges };
+}
+
+function InstalledAppsSection({
+  agentId,
+  agentName,
+  connections,
+  draft,
+  permittedConnectionIds,
+  pendingConnectionId,
+  saving,
+  unsaved,
+  error,
+  onChange,
+}: {
+  agentId: string;
+  agentName: string;
+  connections: ToolConnection[];
+  draft: Record<string, boolean>;
+  permittedConnectionIds: Set<string>;
+  pendingConnectionId: string | null;
+  saving: boolean;
+  unsaved: boolean;
+  error: boolean;
+  onChange: (connectionId: string, installed: boolean) => void;
+}) {
+  return (
+    <section className="rounded-lg border border-border bg-card">
+      <div className="flex flex-wrap items-start justify-between gap-3 border-b border-border px-3 py-2.5">
+        <div>
+          <h3 className="text-sm font-semibold text-foreground">Installed apps</h3>
+          <p className="mt-0.5 text-xs text-muted-foreground">
+            Installed apps load tools into {agentName}'s context on every run. Permitted-only apps do not add context cost.
+          </p>
+        </div>
+        <InstallSaveStatusChip pending={saving} unsaved={unsaved} error={error} />
+      </div>
+
+      <div className="space-y-3 p-3">
+        <InlineBanner tone="info" compact>
+          Has access means the app is permitted. Installed means its tools are added to this agent's runtime context.
+        </InlineBanner>
+
+        {connections.length === 0 ? (
+          <p className="rounded-md border border-border bg-muted/30 px-3 py-4 text-sm text-muted-foreground">
+            No permitted apps yet. Bind an access profile to make apps available here.
+          </p>
+        ) : (
+          <div className="divide-y divide-border rounded-md border border-border">
+            {connections.map((connection) => {
+              const installState = installStateFrom(connection.installs);
+              const installedForAll = installState.onAll;
+              const checked = installedForAll || (draft[connection.id] ?? installState.agentIds.has(agentId));
+              const permitted = permittedConnectionIds.has(connection.id);
+              const rowPending = pendingConnectionId === connection.id;
+              return (
+                <div key={connection.id} className="space-y-2 px-3 py-3">
+                  <label className="flex items-start gap-3">
+                    <Checkbox
+                      checked={checked}
+                      disabled={installedForAll || rowPending}
+                      aria-label={`Install ${connection.name} on ${agentName}`}
+                      onCheckedChange={(next) => onChange(connection.id, Boolean(next))}
+                    />
+                    <span className="min-w-0 flex-1">
+                      <span className="flex flex-wrap items-center gap-2">
+                        <span className="truncate text-sm font-medium text-foreground">{connection.name}</span>
+                        <InstallBadge installed={checked} installedForAll={installedForAll} permitted={permitted} />
+                        {rowPending ? <span className="text-xs text-muted-foreground">Saving...</span> : null}
+                      </span>
+                      <span className="mt-0.5 block text-xs text-muted-foreground">
+                        {installedForAll
+                          ? "Installed from the app page for every agent. Remove the all-agents install there."
+                          : checked
+                            ? "Loaded into this agent's runtime context."
+                            : INSTALLED_HINT}
+                      </span>
+                    </span>
+                  </label>
+                  {permitted && !checked ? (
+                    <InlineBanner
+                      tone="warning"
+                      compact
+                      className="ml-7"
+                      actions={(
+                        <Link
+                          to={`/apps/${connection.id}/permissions`}
+                          className="text-xs font-medium text-primary hover:underline"
+                        >
+                          Open permissions
+                        </Link>
+                      )}
+                    >
+                      Permitted but not installed — tools will not appear in runs.
+                    </InlineBanner>
+                  ) : null}
+                </div>
+              );
+            })}
+          </div>
+        )}
+      </div>
+    </section>
+  );
+}
+
+function InstallBadge({
+  installed,
+  installedForAll,
+  permitted,
+}: {
+  installed: boolean;
+  installedForAll: boolean;
+  permitted: boolean;
+}) {
+  const label = installed ? (installedForAll ? "Installed for all" : "Installed") : permitted ? "Permitted only" : "Not permitted";
+  return (
+    <span
+      className={cn(
+        "inline-flex items-center gap-1 rounded-full border px-2 py-0.5 text-xs font-medium",
+        installed ? brandChipBadge.green : brandChipBadge.gray,
+      )}
+    >
+      {installed ? <PackageCheck className="h-3 w-3" /> : null}
+      {label}
+    </span>
+  );
+}
+
+function InstallSaveStatusChip({
+  pending,
+  unsaved,
+  error,
+}: {
+  pending: boolean;
+  unsaved: boolean;
+  error: boolean;
+}) {
+  if (pending) return <span className="text-xs text-muted-foreground">Saving...</span>;
+  if (error) return <span className="text-xs text-destructive">Could not save</span>;
+  if (unsaved) return <span className="text-xs text-muted-foreground">Unsaved changes</span>;
+  return <span className="text-xs text-muted-foreground">Saved</span>;
+}
+
+const POLICY_EFFECT_LABEL: Record<string, string> = {
+  allow: "allow",
+  block: "block",
+  deny: "deny",
+  require_approval: "require approval",
+  redact: "redact",
+  rate_limit: "rate limit",
+};
+
+const DENIED_TOOLS_DISPLAY_LIMIT = 30;
+
+/**
+ * Agent detail · Tools tab (PAP-10788, surface 09 of the PAP-10771 v2 spec).
+ *
+ * Communicates the agent's resolved tool access: the banner makes clear the
+ * prompt can narrow the list but never expand it, and the side panel explains
+ * which access profiles and rules shape the final list.
+ */
+export function AgentToolsTab({ agent, companyId }: { agent: AgentDetailRecord; companyId: string }) {
+  const queryClient = useQueryClient();
+  const [installDraft, setInstallDraft] = useState<Record<string, boolean>>({});
+  const lastSavedInstallRef = useRef<Record<string, boolean>>({});
+  const skipNextInstallAutosaveRef = useRef(true);
+  const failedInstallDraftRef = useRef<{ connectionId: string; installed: boolean } | null>(null);
+
+  const effective = useQuery({
+    queryKey: queryKeys.tools.effectiveProfilesForAgent(companyId, agent.id),
+    queryFn: () => toolsApi.getEffectiveProfilesForAgent(companyId, agent.id),
+  });
+
+  const connectionsQuery = useQuery({
+    queryKey: queryKeys.tools.connections(companyId),
+    queryFn: () => toolsApi.listConnections(companyId),
+  });
+
+  const policiesQuery = useQuery({
+    queryKey: queryKeys.tools.policies(companyId),
+    queryFn: () => toolsApi.listPolicies(companyId),
+  });
+
+  const connectionList = connectionsQuery.data?.connections ?? [];
+  const connectionInstallSignature = useMemo(
+    () =>
+      connectionList
+        .map((connection) => {
+          const installKey = (connection.installs ?? [])
+            .map((install) => `${install.targetType}:${install.targetId}`)
+            .sort()
+            .join(",");
+          return `${connection.id}=${installKey}`;
+        })
+        .join("|"),
+    [connectionList],
+  );
+
+  const syncInstall = useMutation({
+    mutationFn: ({ connection, installed }: { connection: ToolConnection; installed: boolean }) => {
+      const nextState = installStateFrom(connection.installs);
+      if (!nextState.onAll) {
+        if (installed) nextState.agentIds.add(agent.id);
+        else nextState.agentIds.delete(agent.id);
+      }
+      return toolsApi.putConnectionInstalls(
+        connection.id,
+        installPayload(connection.companyId ?? companyId, nextState),
+      );
+    },
+    onSuccess: async (_snapshot, variables) => {
+      failedInstallDraftRef.current = null;
+      lastSavedInstallRef.current = {
+        ...lastSavedInstallRef.current,
+        [variables.connection.id]: variables.installed,
+      };
+      await Promise.all([
+        queryClient.invalidateQueries({ queryKey: queryKeys.tools.connections(companyId) }),
+        queryClient.invalidateQueries({ queryKey: queryKeys.tools.effectiveProfilesForAgent(companyId, agent.id) }),
+      ]);
+    },
+    onError: (_error, variables) => {
+      failedInstallDraftRef.current = {
+        connectionId: variables.connection.id,
+        installed: variables.installed,
+      };
+    },
+  });
+
+  useEffect(() => {
+    setInstallDraft({});
+    lastSavedInstallRef.current = {};
+    skipNextInstallAutosaveRef.current = true;
+    failedInstallDraftRef.current = null;
+  }, [agent.id, companyId]);
+
+  useEffect(() => {
+    const next = Object.fromEntries(
+      connectionList.map((connection) => [
+        connection.id,
+        isAgentInstalled(installStateFrom(connection.installs), agent.id),
+      ]),
+    );
+    failedInstallDraftRef.current = null;
+    setInstallDraft((current) => {
+      const merged = mergeInstallDraft(next, current, lastSavedInstallRef.current);
+      lastSavedInstallRef.current = next;
+      skipNextInstallAutosaveRef.current = !merged.hasPendingChanges;
+      return merged.draft;
+    });
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [agent.id, connectionInstallSignature]);
+
+  useEffect(() => {
+    if (skipNextInstallAutosaveRef.current) {
+      skipNextInstallAutosaveRef.current = false;
+      return;
+    }
+    if (syncInstall.isPending) return;
+
+    const changedConnection = connectionList.find((connection) => {
+      const saved = lastSavedInstallRef.current[connection.id] ?? false;
+      const draft = installDraft[connection.id] ?? false;
+      const failed = failedInstallDraftRef.current;
+      return saved !== draft && !(failed?.connectionId === connection.id && failed.installed === draft);
+    });
+    if (!changedConnection) return;
+
+    const timeout = window.setTimeout(() => {
+      const installed = installDraft[changedConnection.id] ?? false;
+      const saved = lastSavedInstallRef.current[changedConnection.id] ?? false;
+      const failed = failedInstallDraftRef.current;
+      if (saved !== installed && !(failed?.connectionId === changedConnection.id && failed.installed === installed)) {
+        syncInstall.mutate({ connection: changedConnection, installed });
+      }
+    }, 250);
+
+    return () => window.clearTimeout(timeout);
+  }, [connectionList, installDraft, syncInstall.isPending, syncInstall.mutate]);
+
+  // The effective endpoint returns the *allowed* slice of the catalog. To show
+  // "Denied tools (suppressed)" we need the full company catalog, which is only
+  // exposed per-connection — same aggregation the Applications tab uses.
+  const catalogQueries = useQueries({
+    queries: connectionList.map((connection) => ({
+      queryKey: queryKeys.tools.catalog(connection.id),
+      queryFn: () => toolsApi.listCatalog(connection.id),
+      staleTime: 60_000,
+    })),
+  });
+
+  const connectionNameById = useMemo(() => {
+    const map = new Map<string, string>();
+    for (const connection of connectionList) map.set(connection.id, connection.name);
+    return map;
+  }, [connectionList]);
+
+  const allowedTools = useMemo(
+    () =>
+      [...(effective.data?.allowedTools ?? [])].sort((a, b) =>
+        a.toolName.localeCompare(b.toolName),
+      ),
+    [effective.data?.allowedTools],
+  );
+
+  const permittedConnectionIds = useMemo(
+    () => new Set([
+      ...(effective.data?.entries ?? [])
+        .filter((entry) => entry.effect === "include" && entry.connectionId)
+        .map((entry) => entry.connectionId!),
+      ...allowedTools.map((tool) => tool.connectionId),
+    ]),
+    [allowedTools, effective.data?.entries],
+  );
+  const installedAppConnections = useMemo(
+    () =>
+      connectionList
+        .filter((connection) => permittedConnectionIds.has(connection.id) || (installDraft[connection.id] ?? false))
+        .sort((a, b) => a.name.localeCompare(b.name)),
+    [connectionList, installDraft, permittedConnectionIds],
+  );
+  const hasInstallUnsavedChanges = installedAppConnections.some(
+    (connection) => (installDraft[connection.id] ?? false) !== (lastSavedInstallRef.current[connection.id] ?? false),
+  );
+
+  const catalogStamp = catalogQueries.map((q) => q.dataUpdatedAt).join(",");
+  const deniedTools = useMemo(() => {
+    const allowedIds = new Set((effective.data?.allowedTools ?? []).map((tool) => tool.id));
+    const seen = new Set<string>();
+    const denied: ToolCatalogEntry[] = [];
+    for (const result of catalogQueries) {
+      for (const entry of result.data?.catalog ?? []) {
+        if (entry.status !== "active") continue;
+        if (allowedIds.has(entry.id) || seen.has(entry.id)) continue;
+        seen.add(entry.id);
+        denied.push(entry);
+      }
+    }
+    return denied.sort((a, b) => a.toolName.localeCompare(b.toolName));
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [effective.data?.allowedTools, catalogStamp]);
+
+  const governingPolicies = useMemo(() => {
+    const policies = policiesQuery.data?.policies ?? [];
+    return policies
+      .map((policy, index) => ({ policy, order: index + 1 }))
+      .filter(({ policy }) => policy.enabled && policyGovernsAgent(policy, agent.id));
+  }, [policiesQuery.data?.policies, agent.id]);
+
+  const profiles = effective.data?.profiles ?? [];
+  const catalogLoading = catalogQueries.some((q) => q.isLoading);
+
+  if (effective.isLoading) return <ToolsLoadingState label="Resolving effective access…" />;
+  if (effective.error) {
+    return <ToolsErrorState error={effective.error} onRetry={() => effective.refetch()} />;
+  }
+
+  const policiesHref = "/apps/advanced/policies";
+  const profilesHref = "/apps/advanced/profiles";
+
+  return (
+    <div className="space-y-4">
+      <EnforcementBanner
+        tone="info"
+        title="Effective access"
+        body={
+          <>
+            This is exactly the tool set Paperclip will accept for{" "}
+            <span className="font-medium">{agent.name}</span>. Profile and policy edits are
+            reflected within ~5 seconds. The agent's prompt can narrow this list but{" "}
+            <span className="font-medium">cannot expand it</span> — everything else is blocked by
+            default.
+          </>
+        }
+      />
+
+      <InstalledAppsSection
+        agentId={agent.id}
+        agentName={agent.name}
+        connections={installedAppConnections}
+        draft={installDraft}
+        permittedConnectionIds={permittedConnectionIds}
+        pendingConnectionId={syncInstall.isPending ? syncInstall.variables?.connection.id ?? null : null}
+        saving={syncInstall.isPending}
+        unsaved={hasInstallUnsavedChanges}
+        error={syncInstall.isError && hasInstallUnsavedChanges}
+        onChange={(connectionId, installed) => {
+          failedInstallDraftRef.current = null;
+          setInstallDraft((current) => ({ ...current, [connectionId]: installed }));
+        }}
+      />
+
+      <div className="grid grid-cols-1 gap-4 lg:grid-cols-3">
+        {/* Allowed tools table */}
+        <div className="lg:col-span-2">
+          <div className="rounded-lg border border-border">
+            <div className="flex items-center justify-between gap-2 border-b border-border px-3 py-2.5">
+              <h3 className="text-sm font-semibold text-foreground">Allowed tools</h3>
+              <span className="text-xs text-muted-foreground tabular-nums">
+                {allowedTools.length} {allowedTools.length === 1 ? "tool" : "tools"}
+              </span>
+            </div>
+            {allowedTools.length === 0 ? (
+              <p className="px-3 py-6 text-sm text-muted-foreground">
+                No tools are allowed for this agent. Bind a tool profile to grant access.
+              </p>
+            ) : (
+              <table className="w-full text-sm">
+                <thead>
+                  <tr className="border-b border-border text-left text-xs text-muted-foreground">
+                    <th className="px-3 py-2 font-medium">Tool</th>
+                    <th className="px-3 py-2 font-medium">Capability</th>
+                    <th className="px-3 py-2 font-medium">Risk</th>
+                    <th className="px-3 py-2 font-medium">Source</th>
+                  </tr>
+                </thead>
+                <tbody className="divide-y divide-border">
+                  {allowedTools.map((tool) => (
+                    <tr key={tool.id} className="align-top">
+                      <td className="px-3 py-2">
+                        <div className="font-mono text-xs text-foreground">{tool.toolName}</div>
+                        {tool.title ? (
+                          <div className="text-(length:--text-micro) text-muted-foreground">{tool.title}</div>
+                        ) : null}
+                      </td>
+                      <td className="px-3 py-2">
+                        <CapabilityBadges
+                          isReadOnly={tool.isReadOnly}
+                          isWrite={tool.isWrite}
+                          isDestructive={tool.isDestructive}
+                        />
+                      </td>
+                      <td className="px-3 py-2">
+                        <RiskBadge risk={tool.riskLevel} />
+                      </td>
+                      <td className="px-3 py-2 text-xs text-muted-foreground">
+                        {connectionNameById.get(tool.connectionId) ?? "—"}
+                      </td>
+                    </tr>
+                  ))}
+                </tbody>
+              </table>
+            )}
+          </div>
+        </div>
+
+        {/* Why these tools? side panel */}
+        <aside className="space-y-4">
+          <div className="rounded-lg border border-border bg-background/60 p-3">
+            <h3 className="flex items-center gap-1.5 text-sm font-semibold text-foreground">
+              <HelpCircle className="h-3.5 w-3.5 text-muted-foreground" />
+              Why these tools?
+            </h3>
+
+            {/* Access profiles */}
+            <div className="mt-3 space-y-1.5">
+              <div className="flex items-center justify-between gap-2">
+                <div className="text-(length:--text-micro) font-medium uppercase tracking-wide text-muted-foreground">
+                  Access profiles
+                </div>
+                <Link
+                  to={`${profilesHref}?check=1`}
+                  className="text-(length:--text-micro) font-medium text-primary hover:underline"
+                >
+                  Check access
+                </Link>
+              </div>
+              {profiles.length === 0 ? (
+                <p className="text-xs text-muted-foreground">
+                  No active profile applies to this agent, so it has no allowed tools.
+                </p>
+              ) : (
+                profiles.map((profile) => {
+                  return (
+                    <div key={profile.id} className="rounded-md border border-border/70 px-2.5 py-2">
+                      <Link
+                        to={`${profilesHref}/${profile.id}`}
+                        className="text-xs font-medium text-primary hover:underline"
+                      >
+                        {profile.name}
+                      </Link>
+                      {profile.summary.isCompanyDefault ? (
+                        <div className="mt-1">
+                          <span className="rounded border border-border px-1.5 py-0.5 text-(length:--text-nano) uppercase text-muted-foreground">
+                            Company default
+                          </span>
+                        </div>
+                      ) : null}
+                    </div>
+                  );
+                })
+              )}
+            </div>
+
+            {/* Policies mutating the allow list */}
+            <div className="mt-3 space-y-1.5">
+              <div className="text-(length:--text-micro) font-medium uppercase tracking-wide text-muted-foreground">
+                Active policies
+              </div>
+              {policiesQuery.isLoading ? (
+                <p className="text-xs text-muted-foreground">Loading policies…</p>
+              ) : governingPolicies.length === 0 ? (
+                <p className="text-xs text-muted-foreground">
+                  No enabled policy currently mutates this agent's allow list.
+                </p>
+              ) : (
+                governingPolicies.map(({ policy, order }) => (
+                  <div key={policy.id} className="rounded-md border border-border/70 px-2.5 py-2">
+                    <div className="flex items-center justify-between gap-2">
+                      <Link
+                        to={policiesHref}
+                        className="truncate text-xs font-medium text-primary hover:underline"
+                        title={`Policy #${order}: ${policy.name}`}
+                      >
+                        #{order} {policy.name}
+                      </Link>
+                      <span className="shrink-0 rounded border border-border px-1.5 py-0.5 text-(length:--text-nano) uppercase text-muted-foreground">
+                        {POLICY_EFFECT_LABEL[policy.policyType] ?? policy.policyType}
+                      </span>
+                    </div>
+                    {policy.description ? (
+                      <div className="mt-0.5 truncate text-(length:--text-micro) text-muted-foreground">
+                        {policy.description}
+                      </div>
+                    ) : null}
+                  </div>
+                ))
+              )}
+            </div>
+
+            {/* Unavailable tools */}
+            <div className="mt-3 space-y-1.5">
+              <div className="text-(length:--text-micro) font-medium uppercase tracking-wide text-muted-foreground">
+                Unavailable tools
+              </div>
+              {catalogLoading ? (
+                <p className="text-xs text-muted-foreground">Checking tools…</p>
+              ) : deniedTools.length === 0 ? (
+                <p className="text-xs text-muted-foreground">
+                  Every known tool this agent could name is allowed.
+                </p>
+              ) : (
+                <>
+                  <p className="text-(length:--text-micro) text-muted-foreground">
+                    Tools the agent could name but Paperclip would block:
+                  </p>
+                  <div className="flex flex-wrap gap-1">
+                    {deniedTools.slice(0, DENIED_TOOLS_DISPLAY_LIMIT).map((tool) => (
+                      <span
+                        key={tool.id}
+                        className="inline-flex items-center gap-1 rounded border border-border/70 bg-muted/40 px-1.5 py-0.5 font-mono text-(length:--text-micro) text-muted-foreground"
+                        title={connectionNameById.get(tool.connectionId) ?? undefined}
+                      >
+                        {tool.toolName}
+                      </span>
+                    ))}
+                  </div>
+                  {deniedTools.length > DENIED_TOOLS_DISPLAY_LIMIT ? (
+                    <p className="text-(length:--text-micro) text-muted-foreground">
+                      +{deniedTools.length - DENIED_TOOLS_DISPLAY_LIMIT} more
+                    </p>
+                  ) : null}
+                </>
+              )}
+            </div>
+          </div>
+        </aside>
+      </div>
+    </div>
+  );
+}
diff --git a/ui/src/pages/CompanySkills.tsx b/ui/src/pages/CompanySkills.tsx
index 8d5d20c56b3..fbe873a8b01 100644
--- a/ui/src/pages/CompanySkills.tsx
+++ b/ui/src/pages/CompanySkills.tsx
@@ -34,6 +34,7 @@ import { PageSkeleton } from "../components/PageSkeleton";
 import { CopyText } from "../components/CopyText";
 import { Identity } from "../components/Identity";
 import { AgentIcon } from "../components/AgentIconPicker";
+import { AgentMultiSelect } from "../components/AgentMultiSelect";
 import { useAdapterCapabilities } from "../adapters/use-adapter-capabilities";
 import {
   Dialog,
@@ -54,11 +55,6 @@ import {
   DropdownMenuSeparator,
   DropdownMenuTrigger,
 } from "@/components/ui/dropdown-menu";
-import {
-  Popover,
-  PopoverContent,
-  PopoverTrigger,
-} from "@/components/ui/popover";
 import { Checkbox } from "@/components/ui/checkbox";
 import { Tabs, TabsList, TabsTrigger } from "@/components/ui/tabs";
 import { buildLineDiff, type DiffRow } from "../lib/line-diff";
@@ -1897,140 +1893,61 @@ function AttachAgentsPopover({
   onSubmit: (nextIds: string[], versionId: string | null) => void;
   fullWidth?: boolean;
 }) {
-  // Each popover instance owns its open state. The detail page renders two of
-  // these (agents tab + sidebar); sharing a single controlled flag made both
-  // open at once and swallowed clicks, so "Add to agent" appeared dead (PAP-10907 H).
-  const [open, setOpen] = useState(false);
-  const [filter, setFilter] = useState("");
-  const [draft, setDraft] = useState<Set<string>>(new Set(attachedAgentIds));
   const [draftVersionId, setDraftVersionId] = useState<string | null>(selectedVersionId);
-
-  useEffect(() => {
-    if (open) {
-      setDraft(new Set(attachedAgentIds));
-      setDraftVersionId(selectedVersionId);
-      setFilter("");
-    }
-  }, [open, attachedAgentIds, selectedVersionId]);
-
-  // Checked agents float to the top of the list (PAP-10907); within each group
-  // we keep a stable alphabetical order.
-  const filtered = agents
-    .filter((agent) => agent.name.toLowerCase().includes(filter.toLowerCase()))
-    .sort((a, b) => {
-      const aChecked = draft.has(a.id);
-      const bChecked = draft.has(b.id);
-      if (aChecked !== bChecked) return aChecked ? -1 : 1;
-      return a.name.localeCompare(b.name);
-    });
+  const attachedIds = useMemo(() => new Set(attachedAgentIds), [attachedAgentIds]);
   const eligible = agents.filter((agent) => agent.supportsSkills);
   const sortedVersions = [...versions].sort((a, b) => b.revisionNumber - a.revisionNumber);
 
   return (
-    <Popover open={open} onOpenChange={setOpen}>
-      <PopoverTrigger asChild>
-        <Button size="sm" className={cn(fullWidth && "w-full")}>
-          <Plus className="mr-1.5 h-3.5 w-3.5" />
-          Add to agent
-        </Button>
-      </PopoverTrigger>
-      <PopoverContent className="w-80 p-0" align="end">
-        <div className="border-b border-border px-3 py-2">
-          <Input
-            value={filter}
-            onChange={(event) => setFilter(event.target.value)}
-            placeholder="Filter agents"
-            className="h-8"
-          />
-          {sortedVersions.length > 0 ? (
-            <div className="mt-2 flex items-center gap-2 text-xs">
-              <span className="shrink-0 text-muted-foreground">Version</span>
-              <select
-                value={draftVersionId ?? "__latest__"}
-                onChange={(event) => setDraftVersionId(event.target.value === "__latest__" ? null : event.target.value)}
-                className="h-8 min-w-0 flex-1 rounded-md border border-border bg-background px-2 text-xs text-foreground"
-              >
-                <option value="__latest__">Latest</option>
-                {sortedVersions.map((version) => (
-                  <option key={version.id} value={version.id}>
-                    v{version.revisionNumber}{version.label ? ` · ${version.label}` : ""}
-                  </option>
-                ))}
-              </select>
-            </div>
-          ) : null}
-        </div>
-        {eligible.length === 0 ? (
-          <div className="px-3 py-4 text-sm text-muted-foreground">
-            No agents in this company support skills yet.
-          </div>
-        ) : (
-          <div className="max-h-60 overflow-y-auto py-1">
-            {filtered.map((agent) => {
-              const disabled = agent.required || !agent.supportsSkills;
-              const checked = draft.has(agent.id);
-              return (
-                <label
-                  key={agent.id}
-                  className={cn(
-                    "flex items-start gap-2 px-3 py-1.5 text-sm hover:bg-accent/30",
-                    disabled && "opacity-60",
-                  )}
-                >
-                  <Checkbox
-                    checked={checked}
-                    disabled={disabled}
-                    onCheckedChange={(value) => {
-                      setDraft((current) => {
-                        const next = new Set(current);
-                        if (value) next.add(agent.id);
-                        else next.delete(agent.id);
-                        return next;
-                      });
-                    }}
-                  />
-                  <AgentIcon icon={agent.icon} className="mt-0.5 h-4 w-4 shrink-0 text-muted-foreground" />
-                  <span className="flex min-w-0 flex-col">
-                    <span className="flex items-center gap-1.5">
-                      <span className="truncate">{agent.name}</span>
-                      {agent.paused ? (
-                        <Badge variant="outline" className="[&>svg]:size-2.5 border-amber-500/30 bg-amber-500/10 px-1.5 text-(length:--text-nano) uppercase tracking-wide text-amber-500">
-                          <Pause className="h-2.5 w-2.5" aria-hidden="true" />
-                          Paused
-                        </Badge>
-                      ) : null}
-                    </span>
-                    <span className="text-(length:--text-nano) uppercase tracking-wide text-muted-foreground">
-                      {agent.adapterType}
-                      {agent.required ? " · required" : ""}
-                      {!agent.supportsSkills ? " · skills not supported" : ""}
-                    </span>
-                  </span>
-                </label>
-              );
-            })}
-            {filtered.length === 0 ? (
-              <div className="px-3 py-4 text-sm text-muted-foreground">No matches.</div>
-            ) : null}
-          </div>
-        )}
-        <div className="flex items-center justify-end gap-2 border-t border-border px-3 py-2">
-          <Button variant="ghost" size="sm" onClick={() => setOpen(false)} disabled={pending}>
-            Cancel
-          </Button>
-          <Button
-            size="sm"
-            onClick={() => {
-              onSubmit(Array.from(draft), draftVersionId);
-              setOpen(false);
-            }}
-            disabled={pending}
+    <AgentMultiSelect
+      agents={agents}
+      selectedAgentIds={attachedIds}
+      onSave={(nextIds) => onSubmit(Array.from(nextIds), draftVersionId)}
+      pending={pending}
+      triggerLabel="Add to agent"
+      triggerIcon={<Plus className="mr-1.5 h-3.5 w-3.5" />}
+      triggerVariant="default"
+      triggerSize="sm"
+      triggerFullWidth={fullWidth}
+      triggerClassName={cn(fullWidth && "w-full")}
+      contentAlign="end"
+      showSelectionPreview={false}
+      onOpenChange={(open) => {
+        if (open) setDraftVersionId(selectedVersionId);
+      }}
+      headerContent={sortedVersions.length > 0 ? (
+        <div className="mt-2 flex items-center gap-2 text-xs">
+          <span className="shrink-0 text-muted-foreground">Version</span>
+          <select
+            value={draftVersionId ?? "__latest__"}
+            onChange={(event) => setDraftVersionId(event.target.value === "__latest__" ? null : event.target.value)}
+            className="h-8 min-w-0 flex-1 rounded-md border border-border bg-background px-2 text-xs text-foreground"
           >
-            {pending ? "Saving…" : "Save"}
-          </Button>
+            <option value="__latest__">Latest</option>
+            {sortedVersions.map((version) => (
+              <option key={version.id} value={version.id}>
+                v{version.revisionNumber}{version.label ? ` · ${version.label}` : ""}
+              </option>
+            ))}
+          </select>
         </div>
-      </PopoverContent>
-    </Popover>
+      ) : null}
+      emptyMessage={eligible.length === 0 ? "No agents in this company support skills yet." : "No agents yet."}
+      isAgentDisabled={(agent) => {
+        const option = agent as AttachAgentOption;
+        return option.required || !option.supportsSkills;
+      }}
+      getDescription={(agent) => {
+        const option = agent as AttachAgentOption;
+        return `${option.adapterType}${option.required ? " · required" : ""}${!option.supportsSkills ? " · skills not supported" : ""}`;
+      }}
+      renderNameSuffix={(agent) => (agent as AttachAgentOption).paused ? (
+        <Badge variant="outline" className="[&>svg]:size-2.5 border-amber-500/30 bg-amber-500/10 px-1.5 text-(length:--text-nano) uppercase tracking-wide text-amber-500">
+          <Pause className="h-2.5 w-2.5" aria-hidden="true" />
+          Paused
+        </Badge>
+      ) : null}
+    />
   );
 }
 
diff --git a/ui/src/pages/Dashboard.tsx b/ui/src/pages/Dashboard.tsx
index 8f6533a50f7..869ed1d0c99 100644
--- a/ui/src/pages/Dashboard.tsx
+++ b/ui/src/pages/Dashboard.tsx
@@ -28,6 +28,7 @@ import { PageSkeleton } from "../components/PageSkeleton";
 import { Card } from "@/components/ui/card";
 import type { Agent, Issue } from "@paperclipai/shared";
 import { PluginSlotOutlet } from "@/plugins/slots";
+import { SmokeLabDashboardCard } from "../components/SmokeLabDashboardCard";
 
 const DASHBOARD_ACTIVITY_LIMIT = 10;
 
@@ -309,6 +310,8 @@ export function Dashboard() {
             />
           </div>
 
+          <SmokeLabDashboardCard companyId={selectedCompanyId!} />
+
           <div className="grid grid-cols-2 lg:grid-cols-4 gap-4">
             <ChartCard title="Run Activity" subtitle="Last 14 days">
               <RunActivityChart activity={data.runActivity} />
diff --git a/ui/src/pages/DesignGuide.tsx b/ui/src/pages/DesignGuide.tsx
index 6ec47167e73..6ebe5809b1f 100644
--- a/ui/src/pages/DesignGuide.tsx
+++ b/ui/src/pages/DesignGuide.tsx
@@ -122,6 +122,8 @@ import {
 import { AgentCapsule, AGENT_GRADIENT_COUNT } from "@/components/AgentCapsule";
 import { StatusBadge, IssueStatusBadge } from "@/components/StatusBadge";
 import { StatusIcon } from "@/components/StatusIcon";
+import { EnforcementBanner } from "@/components/EnforcementBanner";
+import { ActionCard, ActionCardMobile, BindingsTable } from "@/components/actions/ActionCard";
 import { PriorityIcon } from "@/components/PriorityIcon";
 import { agentStatusDot, agentStatusDotDefault } from "@/lib/status-colors";
 import { EntityRow } from "@/components/EntityRow";
@@ -1778,6 +1780,158 @@ export function DesignGuide() {
         </SubSection>
       </Section>
 
+      {/* ============================================================ */}
+      {/*  TOOLS & ACCESS (PAP-10389)                                   */}
+      {/* ============================================================ */}
+      <Section title="Tools & Access">
+        <SubSection title="EnforcementBanner — default / denied-detected">
+          <div className="space-y-3">
+            <EnforcementBanner companyId="" forceVariant="default" recentDenialCount={0} />
+            <EnforcementBanner companyId="" forceVariant="denied-detected" recentDenialCount={3} />
+          </div>
+          <p className="mt-2 text-xs text-muted-foreground">
+            Persistent at the top of the Tools &amp; Access surface. Tints to <code>denied-detected</code> when
+            governed tool calls were denied or failed in the last hour. Observability only — enforcement lives
+            in the tool gateway.
+          </p>
+        </SubSection>
+
+        <SubSection title="EnforcementBanner — presentational tones (info / warning / error)">
+          <div className="space-y-3">
+            <EnforcementBanner
+              tone="info"
+              title="Effective access — server resolved."
+              body="This is exactly what the tool gateway will accept. Profile and policy edits reflect within ~5s; the prompt cannot expand it."
+            />
+            <EnforcementBanner
+              tone="warning"
+              title="Local stdio is local code execution, not a security sandbox."
+              body="A local-stdio slot runs with the orchestrator's privileges. Only bind trusted commands; quarantine anything you would not run yourself."
+            />
+            <EnforcementBanner
+              tone="error"
+              title="Runtime failed closed."
+              body="The supervisor is restarting (attempt 2/3). The gateway returns runtime-error and the agent does not see partial output."
+            />
+          </div>
+          <p className="mt-2 text-xs text-muted-foreground">
+            Static governance copy with a tone. Used for the PAP-10400 trust-tier banner on Runtime and the
+            effective-access banner on Agent → Tools. Pass <code>title</code>/<code>body</code> and an optional{" "}
+            <code>icon</code>.
+          </p>
+        </SubSection>
+
+        <SubSection title="Action approval card — pending / stale (surfaces 11/12)">
+          <div className="grid gap-4 lg:grid-cols-2">
+            <ActionCard
+              toolName="slack.post_message"
+              risk="medium"
+              isWrite
+              binding={{
+                application: "Slack",
+                manifestVersion: "2.4.1",
+                connection: "https://slack.com/api · acme-workspace",
+                catalogSha256: "sha256:9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
+                payloadSha256: "sha256:2c26b46b68ffc68ff99b453c1d30413413422d706483bfa0f98a5e886266e7ae",
+              }}
+              input={{ channel: "#launch", text: "Deploy v2 is live 🎉", unfurl_links: false }}
+              reason="This tool can write to your workspace, so a human signs off before the agent posts."
+              policyNumber={7}
+              expiresInLabel="expires in 23h 51m"
+            />
+            <ActionCard
+              variant="stale"
+              toolName="slack.post_message"
+              risk="medium"
+              isWrite
+              binding={{
+                application: "Slack",
+                manifestVersion: "2.4.1",
+                connection: "https://slack.com/api · acme-workspace",
+                catalogSha256: "sha256:7d793037a0760186574b0282f2f435e7a4b1b2b0b822cd15d6c15b0f00a0e3f1",
+                previousCatalogSha256: "sha256:9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
+                payloadSha256: "sha256:2c26b46b68ffc68ff99b453c1d30413413422d706483bfa0f98a5e886266e7ae",
+              }}
+              input={{ channel: "#launch", text: "Deploy v2 is live 🎉", unfurl_links: false }}
+              reason="This tool can write to your workspace, so a human signs off before the agent posts."
+              policyNumber={7}
+              expiresInLabel="expires in 18h 02m"
+            />
+          </div>
+          <p className="mt-2 text-xs text-muted-foreground">
+            Signed payload sha256 + expiry surface on every variant (PAP-10400). The{" "}
+            <code>stale</code> variant tints the border amber, banners the catalog-hash mismatch, strikes through
+            the previous hash next to the current one, and renders <code>Approve</code> disabled until the request
+            is re-issued.
+          </p>
+        </SubSection>
+
+        <SubSection title="Action approval card — mobile (390×844, surface 99)">
+          <div className="w-(--sz-390px) max-w-full rounded-xl border border-border bg-background p-3">
+            <ActionCardMobile
+              toolName="slack.post_message"
+              risk="medium"
+              isWrite
+              binding={{
+                application: "Slack",
+                manifestVersion: "2.4.1",
+                connection: "https://slack.com/api · acme-workspace",
+                catalogSha256: "sha256:9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
+                payloadSha256: "sha256:2c26b46b68ffc68ff99b453c1d30413413422d706483bfa0f98a5e886266e7ae",
+              }}
+              input={{ channel: "#launch", text: "Deploy v2 is live 🎉" }}
+              reason="This tool can write to your workspace, so a human signs off before the agent posts."
+              policyNumber={7}
+              expiresInLabel="expires in 23h 51m"
+            />
+          </div>
+          <p className="mt-2 text-xs text-muted-foreground">
+            Identical content; the three buttons stack full-width in the order Approve / Deny / Edit &amp; re-sign,
+            and the bindings table uses a 70px label column.
+          </p>
+        </SubSection>
+
+        <SubSection title="BindingsTable (reused in the audit row drilldown)">
+          <BindingsTable
+            rows={[
+              { label: "Application", value: "Slack · manifest v2.4.1" },
+              { label: "Connection", value: "https://slack.com/api · acme-workspace", mono: true },
+              { label: "Catalog", value: "sha256:9f86d081…f00a08", mono: true },
+              { label: "Payload", value: "sha256:2c26b46b…66e7ae", mono: true },
+            ]}
+          />
+          <p className="mt-2 text-xs text-muted-foreground">
+            Two-column key/value block with mono values. Lives inside <code>ActionCard</code> and is reused
+            standalone in the audit row drilldown.
+          </p>
+        </SubSection>
+
+        <SubSection title="Tool-access status keys (StatusBadge)">
+          <div className="flex flex-wrap items-center gap-2">
+            {[
+              "allowed", "denied", "block", "require-approval", "redacted", "rate-limit",
+              "deferred", "hidden", "quarantined", "healthy", "degraded", "runtime-error", "unchecked",
+            ].map((s) => (
+              <StatusBadge key={s} status={s} />
+            ))}
+          </div>
+          <p className="mt-2 text-xs text-muted-foreground">
+            Policy decisions, connection/runtime health, and catalog quarantine all route through the canonical{" "}
+            <code>StatusBadge</code> keys defined in <code>lib/status-colors</code>.
+          </p>
+        </SubSection>
+
+        <SubSection title="EmptyState (canonical, with description + action)">
+          <EmptyState
+            icon={Inbox}
+            message="No connections yet"
+            description="Add a connection to an application to configure credentials and discover its tools."
+            action="New connection"
+            onAction={() => {}}
+          />
+        </SubSection>
+      </Section>
+
       <Section title="Environment Variables Editor">
         <p className="text-sm text-muted-foreground">
           Reusable env-var editor (agents, projects, environments, routines). One shared grid, an
diff --git a/ui/src/pages/InstanceExperimentalSettings.test.tsx b/ui/src/pages/InstanceExperimentalSettings.test.tsx
index 45f4da85c13..300f2e2454c 100644
--- a/ui/src/pages/InstanceExperimentalSettings.test.tsx
+++ b/ui/src/pages/InstanceExperimentalSettings.test.tsx
@@ -55,6 +55,7 @@ const SERVER_INFO_TOGGLE_SELECTOR =
   'button[aria-label="Toggle server info debug view experimental setting"]';
 const BUILT_IN_AGENTS_TOGGLE_SELECTOR =
   'button[aria-label="Toggle built-in agents experimental setting"]';
+const APPS_TOGGLE_SELECTOR = 'button[aria-label="Toggle apps experimental setting"]';
 const AUTO_RECOVERY_TOGGLE_SELECTOR =
   'button[aria-label="Toggle task graph liveness auto-recovery"]';
 
@@ -187,6 +188,19 @@ describe("InstanceExperimentalSettings — Conference Room Chat card (PAP-11233)
     expect(warning?.textContent).toContain("no compatibility guarantees");
   });
 
+  it("enables the Apps UI from experimental settings", async () => {
+    await renderPage();
+
+    const toggle = container.querySelector<HTMLButtonElement>(APPS_TOGGLE_SELECTOR);
+    expect(toggle?.getAttribute("aria-checked")).toBe("false");
+
+    await act(() => toggle?.click());
+    await flushReact();
+
+    expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({ enableApps: true });
+    expect(container.querySelector(APPS_TOGGLE_SELECTOR)?.getAttribute("aria-checked")).toBe("true");
+  });
+
   it("does not render the Conference Room Chat experimental setting for now", async () => {
     await renderPage();
 
diff --git a/ui/src/pages/InstanceExperimentalSettings.tsx b/ui/src/pages/InstanceExperimentalSettings.tsx
index b77f205a3dd..80bcfac88fd 100644
--- a/ui/src/pages/InstanceExperimentalSettings.tsx
+++ b/ui/src/pages/InstanceExperimentalSettings.tsx
@@ -284,6 +284,7 @@ export function InstanceExperimentalSettings() {
   );
   const enableEnvironments = experimentalQuery.data?.enableEnvironments === true;
   const enableIsolatedWorkspaces = experimentalQuery.data?.enableIsolatedWorkspaces === true;
+  const enableApps = experimentalQuery.data?.enableApps === true;
   // Streamlined left navigation is now the standard sidebar (PAP-12472); the
   // experimental opt-out was retired, so it no longer surfaces a toggle here.
   const enableConferenceRoomChat = experimentalQuery.data?.enableConferenceRoomChat === true;
@@ -299,6 +300,7 @@ export function InstanceExperimentalSettings() {
   const enableGoalsSidebarLink = experimentalQuery.data?.enableGoalsSidebarLink === true;
   const enableCases = experimentalQuery.data?.enableCases === true;
   const enableServerInfoDebugView = experimentalQuery.data?.enableServerInfoDebugView === true;
+  const enableSmokeLab = experimentalQuery.data?.enableSmokeLab === true;
   const autoRestartDevServerWhenIdle = experimentalQuery.data?.autoRestartDevServerWhenIdle === true;
   const enableIssueGraphLivenessAutoRecovery =
     experimentalQuery.data?.enableIssueGraphLivenessAutoRecovery === true;
@@ -426,6 +428,26 @@ export function InstanceExperimentalSettings() {
         </Card>
       ) : null}
 
+      <Card className="block p-5">
+        <div className="flex items-start justify-between gap-4">
+          <div className="space-y-1.5">
+            <div className="flex items-center gap-2">
+              <h2 className="text-sm font-semibold">Apps</h2>
+              <Badge variant="secondary">Experimental</Badge>
+            </div>
+            <p className="max-w-2xl text-sm text-muted-foreground">
+              Show the Apps navigation and allow access to app connections, gateways, and advanced app tooling.
+            </p>
+          </div>
+          <ToggleSwitch
+            checked={enableApps}
+            onCheckedChange={() => toggleMutation.mutate({ enableApps: !enableApps })}
+            disabled={toggleMutation.isPending}
+            aria-label="Toggle apps experimental setting"
+          />
+        </div>
+      </Card>
+
       <Card className="block p-5">
         <div className="flex items-start justify-between gap-4">
           <div className="space-y-1.5">
@@ -686,6 +708,25 @@ export function InstanceExperimentalSettings() {
         </div>
       </Card>
 
+      <Card className="block p-5">
+        <div className="flex items-start justify-between gap-4">
+          <div className="space-y-1.5">
+            <h2 className="text-sm font-semibold">Smoke Lab</h2>
+            <p className="max-w-2xl text-sm text-muted-foreground">
+              Add a "Smoke Lab" tab under Apps → Developer and an "Integration smoke" card on the
+              dashboard for exercising every integration path against deterministic local fixtures
+              (fake OAuth provider + loopback MCP servers). Private (non-public) deployments only.
+            </p>
+          </div>
+          <ToggleSwitch
+            checked={enableSmokeLab}
+            onCheckedChange={() => toggleMutation.mutate({ enableSmokeLab: !enableSmokeLab })}
+            disabled={toggleMutation.isPending}
+            aria-label="Toggle smoke lab experimental setting"
+          />
+        </div>
+      </Card>
+
       <Card className="block p-5">
         <div className="flex items-start justify-between gap-4">
           <div className="space-y-1.5">
diff --git a/ui/src/pages/apps/AppDetail.test.tsx b/ui/src/pages/apps/AppDetail.test.tsx
new file mode 100644
index 00000000000..240822b5249
--- /dev/null
+++ b/ui/src/pages/apps/AppDetail.test.tsx
@@ -0,0 +1,684 @@
+// @vitest-environment jsdom
+
+import { flushSync } from "react-dom";
+import type { ReactNode } from "react";
+import { createRoot } from "react-dom/client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { AppDetail } from "./AppDetail";
+
+const getConnectionMock = vi.hoisted(() => vi.fn());
+const getConnectionInstallsMock = vi.hoisted(() => vi.fn());
+const listGalleryMock = vi.hoisted(() => vi.fn());
+const listCatalogMock = vi.hoisted(() => vi.fn());
+const listProfilesMock = vi.hoisted(() => vi.fn());
+const listPoliciesMock = vi.hoisted(() => vi.fn());
+const listConnectionActivityMock = vi.hoisted(() => vi.fn());
+const listActionRequestsMock = vi.hoisted(() => vi.fn());
+const updateConnectionMock = vi.hoisted(() => vi.fn());
+const finishAppMock = vi.hoisted(() => vi.fn());
+const putConnectionInstallsMock = vi.hoisted(() => vi.fn());
+const refreshCatalogMock = vi.hoisted(() => vi.fn());
+const startOAuthMock = vi.hoisted(() => vi.fn());
+const mockNavigate = vi.hoisted(() => vi.fn());
+const mockParams = vi.hoisted(() => ({ connectionId: "conn-1", tab: "setup" as string | undefined }));
+const navigateComponentMock = vi.hoisted(() => vi.fn());
+
+vi.mock("@/api/tools", () => ({
+  toolsApi: {
+    getConnection: (connectionId: string) => getConnectionMock(connectionId),
+    getConnectionInstalls: (connectionId: string) => getConnectionInstallsMock(connectionId),
+    listGallery: (companyId: string) => listGalleryMock(companyId),
+    listCatalog: (connectionId: string) => listCatalogMock(connectionId),
+    listProfiles: (companyId: string) => listProfilesMock(companyId),
+    listPolicies: (companyId: string) => listPoliciesMock(companyId),
+    listConnectionActivity: (connectionId: string, limit: number) =>
+      listConnectionActivityMock(connectionId, limit),
+    listActionRequests: (companyId: string, status: string) =>
+      listActionRequestsMock(companyId, status),
+    updateConnection: (connectionId: string, input: unknown) =>
+      updateConnectionMock(connectionId, input),
+    finishApp: (companyId: string, connectionId: string, input: unknown) =>
+      finishAppMock(companyId, connectionId, input),
+    putConnectionInstalls: (connectionId: string, installs: unknown) =>
+      putConnectionInstallsMock(connectionId, installs),
+    archiveConnection: vi.fn(),
+    refreshCatalog: (connectionId: string) => refreshCatalogMock(connectionId),
+    startOAuth: (connectionId: string) => startOAuthMock(connectionId),
+    reconnectConnection: vi.fn(),
+  },
+}));
+
+vi.mock("@/api/agents", () => ({
+  agentsApi: {
+    list: vi.fn().mockResolvedValue([
+      { id: "agent-1", name: "Coder", title: "Engineer", status: "active" },
+    ]),
+  },
+}));
+
+vi.mock("@/lib/router", () => ({
+  useParams: () => mockParams,
+  useNavigate: () => mockNavigate,
+  useSearchParams: () => [new URLSearchParams(), vi.fn()],
+  Navigate: ({ to, replace }: { to: string; replace?: boolean }) => {
+    navigateComponentMock({ to, replace });
+    return <div data-navigate-to={to} />;
+  },
+  Link: ({ to, children, ...props }: { to: string; children: ReactNode }) => (
+    <a href={to} {...props}>
+      {children}
+    </a>
+  ),
+}));
+
+vi.mock("@/context/CompanyContext", () => ({
+  useCompany: () => ({
+    selectedCompanyId: "company-1",
+    selectedCompany: { id: "company-1", name: "Paperclip" },
+  }),
+}));
+
+vi.mock("@/context/BreadcrumbContext", () => ({
+  useBreadcrumbs: () => ({ setBreadcrumbs: vi.fn() }),
+}));
+
+vi.mock("@/context/ToastContext", () => ({
+  useToast: () => ({ pushToast: vi.fn() }),
+}));
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+(globalThis as any).IS_REACT_ACT_ENVIRONMENT = true;
+
+async function act(callback: () => void | Promise<void>) {
+  let result: void | Promise<void> = undefined;
+  flushSync(() => {
+    result = callback();
+  });
+  await result;
+}
+
+async function flushReact() {
+  for (let i = 0; i < 3; i += 1) {
+    await act(async () => {
+      await Promise.resolve();
+      await new Promise((resolve) => window.setTimeout(resolve, 0));
+    });
+  }
+}
+
+function connection(overrides: Record<string, unknown> = {}) {
+  return {
+    id: "conn-1",
+    companyId: "company-1",
+    applicationId: "app-1",
+    name: "GitHub",
+    connectionKind: "managed",
+    transport: "remote_http",
+    status: "active",
+    transportConfig: { url: "https://github.example/mcp" },
+    config: { url: "https://github.example/mcp" },
+    credentialSecretRefs: [],
+    credentialRefs: [],
+    healthStatus: "healthy",
+    healthCheckedAt: null,
+    lastError: null,
+    enabled: true,
+    lastUsedAt: null,
+    createdByAgentId: null,
+    createdByUserId: null,
+    createdAt: new Date("2026-01-01T00:00:00Z"),
+    updatedAt: new Date("2026-01-01T00:00:00Z"),
+    ...overrides,
+  };
+}
+
+function catalogEntry(overrides: Record<string, unknown> = {}) {
+  return {
+    id: "catalog-read",
+    companyId: "company-1",
+    connectionId: "conn-1",
+    toolName: "read_repo",
+    title: "Read repo",
+    description: "Read repository metadata",
+    status: "active",
+    isReadOnly: true,
+    riskLevel: "read",
+    createdAt: new Date("2026-01-01T00:00:00Z"),
+    updatedAt: new Date("2026-01-01T00:00:00Z"),
+    ...overrides,
+  };
+}
+
+function setInputValue(input: HTMLInputElement, value: string) {
+  const setter = Object.getOwnPropertyDescriptor(
+    window.HTMLInputElement.prototype,
+    "value",
+  )?.set;
+  setter?.call(input, value);
+  input.dispatchEvent(new Event("input", { bubbles: true }));
+}
+
+describe("AppDetail", () => {
+  let container: HTMLDivElement;
+  let root: ReturnType<typeof createRoot>;
+
+  beforeEach(() => {
+    container = document.createElement("div");
+    document.body.appendChild(container);
+    mockParams.connectionId = "conn-1";
+    mockParams.tab = "setup";
+    getConnectionMock.mockResolvedValue(connection());
+    getConnectionInstallsMock.mockResolvedValue({ connectionId: "conn-1", installs: [] });
+    listGalleryMock.mockResolvedValue({
+      apps: [
+        {
+          key: "github",
+          name: "GitHub",
+          logoUrl: "https://example.com/github.png",
+          tagline: "GitHub tagline",
+          description: "Give agents a governed way to inspect repositories and pull requests.",
+          authKind: "api_key",
+          transportTemplate: { transport: "remote_http", url: "https://github.example/mcp" },
+          credentialFields: [],
+          recommendedDefaults: {},
+          urlPatterns: [],
+        },
+      ],
+    });
+    listCatalogMock.mockResolvedValue({
+      catalog: [
+        catalogEntry(),
+        catalogEntry({
+          id: "catalog-write",
+          toolName: "write_issue",
+          title: "Write issue",
+          description: "Create or update an issue",
+          isReadOnly: false,
+        }),
+        catalogEntry({
+          id: "catalog-quarantined",
+          toolName: "delete_repo",
+          title: "Delete repo",
+          status: "quarantined",
+          isReadOnly: false,
+        }),
+      ],
+    });
+    listProfilesMock.mockResolvedValue({
+      profiles: [
+        {
+          profileKey: "app:conn-1",
+          entries: [
+            { effect: "include", catalogEntryId: "catalog-read" },
+            { effect: "include", catalogEntryId: "catalog-write" },
+          ],
+          bindings: [{ targetType: "company" }],
+        },
+      ],
+    });
+    listPoliciesMock.mockResolvedValue({
+      policies: [
+        {
+          policyType: "require_approval",
+          enabled: true,
+          config: {
+            source: "app_gallery_finish",
+            connectionId: "conn-1",
+            catalogEntryId: "catalog-write",
+          },
+        },
+      ],
+    });
+    listConnectionActivityMock.mockResolvedValue({ events: [], issues: {}, actionRequests: {} });
+    listActionRequestsMock.mockResolvedValue({ actionRequests: [] });
+    updateConnectionMock.mockResolvedValue(connection({ enabled: false }));
+    finishAppMock.mockResolvedValue({});
+    putConnectionInstallsMock.mockResolvedValue({ connectionId: "conn-1", installs: [] });
+    refreshCatalogMock.mockResolvedValue({ discoveredCount: 0, quarantinedCount: 0, catalog: [] });
+    startOAuthMock.mockResolvedValue({
+      connectionId: "conn-1",
+      provider: "smoke_lab",
+      authorizationUrl: "http://example.test/oauth",
+      expiresAt: "2026-07-10T00:00:00.000Z",
+    });
+  });
+
+  afterEach(() => {
+    flushSync(() => root?.unmount());
+    container.remove();
+    vi.clearAllMocks();
+  });
+
+  async function renderAppDetail() {
+    const client = new QueryClient({ defaultOptions: { queries: { retry: false } } });
+    root = createRoot(container);
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={client}>
+          <AppDetail />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+  }
+
+  it("pauses the app by flipping the connection enabled flag", async () => {
+    await renderAppDetail();
+
+    const toggle = container.querySelector<HTMLButtonElement>(
+      'button[role="switch"][aria-label="Pause this app"]',
+    );
+    expect(toggle).toBeTruthy();
+
+    await act(async () => {
+      toggle!.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(updateConnectionMock).toHaveBeenCalledWith("conn-1", { enabled: false });
+  });
+
+  it("redirects a missing tab to setup", async () => {
+    mockParams.tab = undefined;
+
+    await renderAppDetail();
+
+    expect(navigateComponentMock).toHaveBeenCalledWith({ to: "/apps/conn-1/setup", replace: true });
+  });
+
+  it.each([
+    ["setup", "Agents can use this app"],
+    ["review", "1 new action to review"],
+    ["permissions", "Action permissions"],
+    ["activity", "No activity yet."],
+    ["advanced", "Technical details"],
+  ])("renders the %s tab panel", async (tab, expectedText) => {
+    mockParams.tab = tab;
+
+    await renderAppDetail();
+
+    expect(container.textContent).toContain("GitHub");
+    expect(container.textContent).toContain("2 actions available");
+    expect(container.textContent).toContain(expectedText);
+  });
+
+  it("hides secret URL parameters in advanced technical details", async () => {
+    mockParams.tab = "advanced";
+    getConnectionMock.mockResolvedValue(
+      connection({
+        config: {
+          url: "https://mcp.zapier.com/api/v1/connect?token=zapier-secret&region=us",
+        },
+      }),
+    );
+
+    await renderAppDetail();
+
+    expect(container.textContent).toContain(
+      "https://mcp.zapier.com/api/v1/connect?token=REDACTED&region=us",
+    );
+    expect(container.textContent).not.toContain("zapier-secret");
+  });
+
+  it("shows new quarantined actions on the review tab instead of an empty state", async () => {
+    mockParams.tab = "review";
+
+    await renderAppDetail();
+
+    expect(container.textContent).toContain("1 new action to review");
+    await act(async () => {
+      Array.from(container.querySelectorAll("button"))
+        .find((button) => button.textContent?.trim() === "Review")
+        ?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+    expect(container.textContent).toContain("Delete repo");
+    expect(container.textContent).not.toContain("Nothing is waiting for your OK right now.");
+  });
+
+  it("keeps setup focused on description and lifecycle", async () => {
+    mockParams.tab = "setup";
+
+    await renderAppDetail();
+
+    expect(container.textContent).toContain("Give agents a governed way to inspect repositories and pull requests.");
+    expect(container.textContent).toContain("Agents can use this app");
+    expect(container.textContent).not.toContain("Read repo");
+    expect(container.textContent).not.toContain("Action permissions");
+  });
+
+  it("shows the Smoke OAuth connection action for the installed HTTP fixture", async () => {
+    getConnectionMock.mockResolvedValue(connection({
+      name: "Smoke Lab HTTP MCP fixture",
+      config: {
+        smokeLabFixture: "oauth-http",
+        oauth: {
+          provider: "smoke_lab",
+          smokeLabFixture: true,
+          scopes: ["smoke:openid"],
+        },
+      },
+    }));
+
+    await renderAppDetail();
+
+    expect(container.textContent).toContain("Connect with Smoke OAuth");
+    expect(
+      Array.from(container.querySelectorAll("button")).some(
+        (button) => button.textContent?.trim() === "Connect with Smoke OAuth",
+      ),
+    ).toBe(true);
+  });
+
+  it("lets Google Sheets connections add spreadsheet links from setup", async () => {
+    mockParams.tab = "setup";
+    getConnectionMock.mockResolvedValue(connection({
+      name: "Google Sheets",
+      transport: "local_stdio",
+      config: {
+        templateId: "paperclip.google-sheets",
+        sourceTemplateKey: "google-sheets",
+        allowedSpreadsheetIds: ["sheet_existing"],
+        env: { GOOGLE_SHEETS_ALLOWED_SPREADSHEET_IDS: "sheet_existing" },
+      },
+    }));
+    listGalleryMock.mockResolvedValue({
+      apps: [
+        {
+          key: "google-sheets",
+          name: "Google Sheets",
+          logoUrl: "https://example.com/sheets.png",
+          tagline: "Read and update selected spreadsheets.",
+          description: "Share each sheet with the robot email, then paste the sheet links here.",
+          authKind: "none",
+          transportTemplate: { transport: "local_stdio", templateKey: "paperclip.google-sheets" },
+          credentialFields: [],
+          recommendedDefaults: {},
+          urlPatterns: ["https://docs.google.com/spreadsheets/*"],
+          availability: { available: true, robotEmail: "robot@paperclip.iam.gserviceaccount.com" },
+        },
+      ],
+    });
+
+    await renderAppDetail();
+
+    expect(container.textContent).toContain("Sheets agents can use");
+    expect(container.textContent).toContain("https://docs.google.com/spreadsheets/d/sheet_existing/edit");
+    expect(container.textContent).toContain("sheet_existing");
+    const input = container.querySelector<HTMLInputElement>(
+      'input[placeholder="https://docs.google.com/spreadsheets/d/..."]',
+    );
+    expect(input).toBeTruthy();
+    await act(async () => setInputValue(input!, "https://docs.google.com/spreadsheets/d/sheet_new/edit"));
+    await flushReact();
+    await act(async () => {
+      Array.from(container.querySelectorAll("button"))
+        .find((button) => button.textContent?.trim() === "Add sheet")
+        ?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(updateConnectionMock).toHaveBeenCalledWith("conn-1", {
+      config: expect.objectContaining({
+        allowedSpreadsheetIds: ["sheet_existing", "sheet_new"],
+        env: expect.objectContaining({ GOOGLE_SHEETS_ALLOWED_SPREADSHEET_IDS: "sheet_existing,sheet_new" }),
+      }),
+      transportConfig: { url: "https://github.example/mcp" },
+    });
+  });
+
+  it("renders unified action permission dropdowns in the permissions tab", async () => {
+    mockParams.tab = "permissions";
+
+    await renderAppDetail();
+
+    expect(container.textContent).toContain("Read only");
+    expect(container.textContent).toContain("Can make changes");
+    expect(container.textContent).toContain("Read repo");
+    expect(container.textContent).toContain("Write issue");
+    expect(container.textContent).toContain("1 new action to review");
+    const readSelect = container.querySelector<HTMLSelectElement>('select[aria-label="Read repo permission"]');
+    const writeSelect = container.querySelector<HTMLSelectElement>('select[aria-label="Write issue permission"]');
+    expect(readSelect?.value).toBe("allowed");
+    expect(writeSelect?.value).toBe("ask");
+  });
+
+  it("persists ask-first for read-only actions from the unified dropdown", async () => {
+    mockParams.tab = "permissions";
+
+    await renderAppDetail();
+
+    const readSelect = container.querySelector<HTMLSelectElement>('select[aria-label="Read repo permission"]');
+    expect(readSelect).toBeTruthy();
+    await act(async () => {
+      readSelect!.value = "ask";
+      readSelect!.dispatchEvent(new Event("change", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(finishAppMock).toHaveBeenCalledWith("company-1", "conn-1", {
+      enabledCatalogEntryIds: expect.arrayContaining(["catalog-read", "catalog-write"]),
+      askFirstCatalogEntryIds: expect.arrayContaining(["catalog-read", "catalog-write"]),
+      access: "all_agents",
+    });
+  });
+
+  it("persists off by removing an action from enabled and ask-first sets", async () => {
+    mockParams.tab = "permissions";
+
+    await renderAppDetail();
+
+    const writeSelect = container.querySelector<HTMLSelectElement>('select[aria-label="Write issue permission"]');
+    expect(writeSelect).toBeTruthy();
+    await act(async () => {
+      writeSelect!.value = "off";
+      writeSelect!.dispatchEvent(new Event("change", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(finishAppMock).toHaveBeenCalledWith("company-1", "conn-1", {
+      enabledCatalogEntryIds: ["catalog-read"],
+      askFirstCatalogEntryIds: [],
+      access: "all_agents",
+    });
+  });
+
+  it("persists installed agents from the permissions tab", async () => {
+    mockParams.tab = "permissions";
+
+    await renderAppDetail();
+
+    expect(container.textContent).toContain("Installed on agents");
+    await act(async () => {
+      Array.from(container.querySelectorAll("button"))
+        .find((button) => button.textContent?.includes("Choose agents to install on"))
+        ?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    const coderCheckbox = document.body.querySelector<HTMLElement>('[aria-label="Allow Coder"]');
+    expect(coderCheckbox).toBeTruthy();
+    await act(async () => {
+      coderCheckbox!.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(putConnectionInstallsMock).toHaveBeenCalledWith("conn-1", [
+      { targetType: "agent", targetId: "agent-1" },
+    ]);
+  });
+
+  it("renders activity attribution with issue context and human resolver names", async () => {
+    mockParams.tab = "activity";
+    listConnectionActivityMock.mockResolvedValue({
+      events: [
+        {
+          id: "evt-1",
+          eventType: "call_completed",
+          agentId: "agent-1",
+          issueId: "issue-1",
+          actionRequestId: null,
+          toolName: "Get value",
+          outcome: "success",
+          createdAt: new Date("2026-06-12T10:00:00Z"),
+        },
+        {
+          id: "evt-2",
+          eventType: "approval_resolved",
+          agentId: "agent-1",
+          issueId: "issue-1",
+          actionRequestId: "request-1",
+          toolName: "Mark done",
+          outcome: "success",
+          createdAt: new Date("2026-06-12T10:01:00Z"),
+        },
+      ],
+      issues: {
+        "issue-1": { identifier: "PAP-10912", title: "Fix app connection copy" },
+      },
+      actionRequests: {
+        "request-1": {
+          status: "approved",
+          resolverDisplayName: "Dotta",
+          resolvedByAgentId: null,
+          resolvedByUserId: "board-user",
+        },
+      },
+    });
+
+    await renderAppDetail();
+
+    expect(container.textContent).toContain("Coder used Get value");
+    expect(container.textContent).toContain("while working on PAP-10912");
+    expect(container.textContent).toContain("Dotta approved Mark done");
+    expect(container.querySelector('a[href="/issues/PAP-10912"]')).toBeTruthy();
+    expect(container.textContent).not.toContain("You reviewed");
+  });
+
+  it("humanizes the raw gateway-prefixed tool name in activity", async () => {
+    mockParams.tab = "activity";
+    listConnectionActivityMock.mockResolvedValue({
+      events: [
+        {
+          id: "evt-1",
+          eventType: "call_completed",
+          agentId: "agent-1",
+          issueId: null,
+          actionRequestId: null,
+          toolName: "mcp.app-gallery-link-ccad39e8-6798a369:kv-set",
+          outcome: "success",
+          createdAt: new Date("2026-06-12T10:00:00Z"),
+        },
+      ],
+      issues: {},
+      actionRequests: {},
+    });
+
+    await renderAppDetail();
+
+    expect(container.textContent).toContain("Coder used Kv Set");
+    expect(container.textContent).not.toContain("mcp.app-gallery-link");
+  });
+
+  it("renders connection lifecycle events humanized on the timeline", async () => {
+    mockParams.tab = "activity";
+    listConnectionActivityMock.mockResolvedValue({
+      events: [
+        {
+          id: "evt-1",
+          eventType: "call_completed",
+          agentId: "agent-1",
+          issueId: null,
+          actionRequestId: null,
+          toolName: "Get value",
+          outcome: "success",
+          createdAt: new Date("2026-06-12T10:30:00Z"),
+        },
+      ],
+      lifecycleEvents: [
+        {
+          id: "life-connected",
+          connectionId: "conn-1",
+          type: "app_connected",
+          actorType: "user",
+          actorId: "board-user",
+          agentId: null,
+          actorDisplayName: "Dotta",
+          details: null,
+          createdAt: new Date("2026-06-12T09:00:00Z"),
+        },
+        {
+          id: "life-paused",
+          connectionId: "conn-1",
+          type: "app_paused",
+          actorType: "user",
+          actorId: "board-user",
+          agentId: null,
+          actorDisplayName: "Dotta",
+          details: { enabled: false },
+          createdAt: new Date("2026-06-12T11:00:00Z"),
+        },
+        {
+          id: "life-allowlist",
+          connectionId: "conn-1",
+          type: "allowlist_changed",
+          actorType: "user",
+          actorId: "board-user",
+          agentId: null,
+          actorDisplayName: "Dotta",
+          details: { added: 1, removed: 0, total: 2 },
+          createdAt: new Date("2026-06-12T10:45:00Z"),
+        },
+        {
+          id: "life-quarantine",
+          connectionId: "conn-1",
+          type: "actions_quarantined",
+          actorType: "system",
+          actorId: null,
+          agentId: null,
+          actorDisplayName: null,
+          details: { count: 2 },
+          createdAt: new Date("2026-06-12T10:50:00Z"),
+        },
+      ],
+      issues: {},
+      actionRequests: {},
+    });
+
+    await renderAppDetail();
+
+    expect(container.textContent).toContain("Dotta connected GitHub");
+    expect(container.textContent).toContain("Dotta paused this app");
+    expect(container.textContent).toContain("Dotta added 1 sheet to the allowlist");
+    expect(container.textContent).toContain("2 new actions need review");
+    // Lifecycle rows deep-link to the Setup tab; quarantine uses the review label.
+    expect(container.querySelector('a[href="/apps/conn-1/setup"]')).toBeTruthy();
+    expect(container.textContent).toContain("Review in Setup");
+
+    // Merged timeline: the newest event (the pause at 11:00) renders before the
+    // tool call at 10:30, which renders before the connect at 09:00.
+    const pausedAt = container.textContent?.indexOf("Dotta paused this app") ?? -1;
+    const usedAt = container.textContent?.indexOf("Coder used Get value") ?? -1;
+    const connectedAt = container.textContent?.indexOf("Dotta connected GitHub") ?? -1;
+    expect(pausedAt).toBeGreaterThanOrEqual(0);
+    expect(pausedAt).toBeLessThan(usedAt);
+    expect(usedAt).toBeLessThan(connectedAt);
+  });
+
+  it("keeps the header and reconnect banner across tabs", async () => {
+    mockParams.tab = "permissions";
+    getConnectionMock.mockResolvedValue(connection({
+      healthStatus: "degraded",
+      healthMessage: "Token expired.",
+    }));
+
+    await renderAppDetail();
+
+    expect(container.textContent).toContain("GitHub");
+    expect(container.textContent).toContain("Needs attention");
+    expect(container.textContent).toContain("This app needs reconnecting");
+    expect(container.textContent).toContain("Token expired.");
+    expect(container.textContent).toContain("Who can use it");
+  });
+});
diff --git a/ui/src/pages/apps/AppDetail.tsx b/ui/src/pages/apps/AppDetail.tsx
new file mode 100644
index 00000000000..1f568cc450a
--- /dev/null
+++ b/ui/src/pages/apps/AppDetail.tsx
@@ -0,0 +1,639 @@
+import { useEffect, useMemo, useState } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { Check, Loader2, Pencil } from "lucide-react";
+import type {
+  AppGalleryEntry,
+  ToolConnection,
+  ToolPolicy,
+  ToolProfileWithDetails,
+} from "@paperclipai/shared";
+import {
+  connectionDisplaySecondaryHint,
+  humanizeConnectionDisplayName,
+  isToolConnectionAttentionHealth as isAttentionHealthStatus,
+} from "@paperclipai/shared";
+import { Navigate, useParams, useNavigate } from "@/lib/router";
+import { useCompany } from "@/context/CompanyContext";
+import { useBreadcrumbs } from "@/context/BreadcrumbContext";
+import { useToast } from "@/context/ToastContext";
+import { queryKeys } from "@/lib/queryKeys";
+import { toolsApi } from "@/api/tools";
+import { agentsApi } from "@/api/agents";
+import { accessApi } from "@/api/access";
+import { authApi } from "@/api/auth";
+import { buildCompanyUserLabelMap } from "@/lib/company-members";
+import { installPayload, installStateFrom, type InstallState } from "@/lib/tool-installs";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { Skeleton } from "@/components/ui/skeleton";
+import { cn } from "@/lib/utils";
+import { AppLogo } from "./AppLogo";
+import { appTabHref, appTabLabel, isAppTabKey, type AppTabKey } from "./app-tabs";
+import { SetupPanel } from "./app-detail/SetupPanel";
+import { PermissionsPanel } from "./app-detail/PermissionsPanel";
+import { TestPanel } from "./app-detail/TestPanel";
+import { ReviewPanel } from "./app-detail/ReviewPanel";
+import { ActivityPanel } from "./app-detail/ActivityPanel";
+import {
+  AdvancedPanel,
+  ReconnectCard,
+  DangerZone,
+  connectionAddress,
+  connectionTransportLabel,
+} from "./app-detail/AdvancedPanel";
+import type { AccessDraft } from "./app-detail/types";
+
+export { DangerZone, connectionAddress, connectionTransportLabel };
+
+export function AppDetail() {
+  const { connectionId = "", tab } = useParams<{ connectionId: string; tab?: string }>();
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const { pushToast } = useToast();
+  const { selectedCompany, selectedCompanyId } = useCompany();
+  const { setBreadcrumbs } = useBreadcrumbs();
+
+  const activeTab: AppTabKey | null = isAppTabKey(tab) ? tab : null;
+
+  const connectionQuery = useQuery({
+    queryKey: queryKeys.tools.connection(connectionId),
+    queryFn: () => toolsApi.getConnection(connectionId),
+    enabled: !!connectionId && !!activeTab,
+  });
+  const installsQuery = useQuery({
+    queryKey: queryKeys.tools.connectionInstalls(connectionId),
+    queryFn: () => toolsApi.getConnectionInstalls(connectionId),
+    enabled: !!connectionId && activeTab === "permissions",
+  });
+  const galleryQuery = useQuery({
+    queryKey: queryKeys.apps.gallery(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listGallery(selectedCompanyId!),
+    enabled: !!selectedCompanyId && !!activeTab,
+  });
+  const catalogQuery = useQuery({
+    queryKey: queryKeys.tools.catalog(connectionId),
+    queryFn: () => toolsApi.listCatalog(connectionId),
+    enabled: !!connectionId && !!activeTab,
+  });
+  const profilesQuery = useQuery({
+    queryKey: queryKeys.tools.profiles(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listProfiles(selectedCompanyId!),
+    enabled: !!selectedCompanyId && !!activeTab,
+  });
+  const policiesQuery = useQuery({
+    queryKey: queryKeys.tools.policies(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listPolicies(selectedCompanyId!),
+    enabled: !!selectedCompanyId && !!activeTab,
+  });
+  const agentsQuery = useQuery({
+    queryKey: queryKeys.agents.list(selectedCompanyId ?? "__none__"),
+    queryFn: () => agentsApi.list(selectedCompanyId!),
+    enabled: !!selectedCompanyId && !!activeTab,
+  });
+  const activityQuery = useQuery({
+    queryKey: queryKeys.tools.connectionActivity(connectionId),
+    queryFn: () => toolsApi.listConnectionActivity(connectionId, 20),
+    enabled: !!connectionId && activeTab === "activity",
+  });
+  // Resolve who ran Test-tab calls ("<User> tested as <Agent>") in the Activity feed (PAP-11415).
+  const userDirectoryQuery = useQuery({
+    queryKey: queryKeys.access.companyUserDirectory(selectedCompanyId ?? "__none__"),
+    queryFn: () => accessApi.listUserDirectory(selectedCompanyId!),
+    enabled: !!selectedCompanyId && activeTab === "activity",
+  });
+  const sessionQuery = useQuery({
+    queryKey: queryKeys.auth.session,
+    queryFn: () => authApi.getSession(),
+    enabled: activeTab === "activity",
+  });
+
+  const connection = connectionQuery.data;
+  const appName = connection ? humanizeConnectionDisplayName(connection) : "App";
+
+  useEffect(() => {
+    if (!activeTab) return;
+    setBreadcrumbs([
+      { label: selectedCompany?.name ?? "Company", href: "/dashboard" },
+      { label: "Apps", href: "/apps" },
+      { label: appName, href: appTabHref(connectionId, "setup") },
+      { label: appTabLabel(activeTab) },
+    ]);
+    return () => setBreadcrumbs([]);
+  }, [setBreadcrumbs, selectedCompany?.name, appName, connectionId, activeTab]);
+
+  const catalog = catalogQuery.data?.catalog ?? [];
+  const profile = useMemo(
+    () => (profilesQuery.data?.profiles ?? []).find((p) => p.profileKey === `app:${connectionId}`),
+    [profilesQuery.data, connectionId],
+  );
+  const enabledIds = useMemo(() => enabledCatalogIds(profile), [profile]);
+  const askFirstIds = useMemo(
+    () => askFirstCatalogIds(policiesQuery.data?.policies ?? [], connectionId),
+    [policiesQuery.data, connectionId],
+  );
+  const access = useMemo(() => accessFrom(profile), [profile]);
+  const install = useMemo(
+    () => installStateFrom(installsQuery.data?.installs ?? connection?.installs),
+    [connection?.installs, installsQuery.data?.installs],
+  );
+  const agents = agentsQuery.data ?? [];
+  const userLabelById = useMemo(() => {
+    const labels = buildCompanyUserLabelMap(userDirectoryQuery.data?.users);
+    const session = sessionQuery.data;
+    // Prefer the viewer's own profile name for their own test runs ("Dotta", not a fallback).
+    if (session?.user?.id && session.user.name?.trim()) {
+      labels.set(session.user.id, session.user.name.trim());
+    }
+    return labels;
+  }, [userDirectoryQuery.data, sessionQuery.data]);
+  const logoEntry = useMemo(
+    () => galleryEntryFor(galleryQuery.data?.apps ?? [], connection),
+    [galleryQuery.data, connection],
+  );
+
+  const [pending, setPending] = useState(false);
+  const persist = useMutation({
+    mutationFn: (next: { enabled: Set<string>; askFirst: Set<string>; access: AccessDraft }) =>
+      toolsApi.finishApp(selectedCompanyId!, connectionId, {
+        enabledCatalogEntryIds: [...next.enabled],
+        askFirstCatalogEntryIds: [...next.askFirst].filter((id) => next.enabled.has(id)),
+        access: next.access.mode === "all" ? "all_agents" : { agentIds: [...next.access.agentIds] },
+      }),
+    onMutate: () => setPending(true),
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.connection(connectionId) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.catalog(connectionId) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.profiles(selectedCompanyId!) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.policies(selectedCompanyId!) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.connections(selectedCompanyId!) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.apps.attention(selectedCompanyId!) });
+    },
+    onError: (error) =>
+      pushToast({
+        title: "Couldn't save that",
+        body: error instanceof Error ? error.message : "Please try again.",
+        tone: "error",
+      }),
+    onSettled: () => setPending(false),
+  });
+
+  const persistInstall = useMutation({
+    mutationFn: (next: InstallState) =>
+      toolsApi.putConnectionInstalls(connectionId, installPayload(selectedCompanyId!, next)),
+    onSuccess: (snapshot) => {
+      queryClient.setQueryData(queryKeys.tools.connectionInstalls(connectionId), snapshot);
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.connection(connectionId) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.connections(selectedCompanyId!) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.profiles(selectedCompanyId!) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.apps.attention(selectedCompanyId!) });
+    },
+    onError: (error) =>
+      pushToast({
+        title: "Couldn't save installs",
+        body: error instanceof Error ? error.message : "Please try again.",
+        tone: "error",
+      }),
+  });
+
+  const [renaming, setRenaming] = useState(false);
+  const [nameDraft, setNameDraft] = useState("");
+  const rename = useMutation({
+    mutationFn: (name: string) => toolsApi.updateConnection(connectionId, { name }),
+    onSuccess: () => {
+      setRenaming(false);
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.connection(connectionId) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.connections(selectedCompanyId!) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.apps.attention(selectedCompanyId!) });
+    },
+    onError: (error) =>
+      pushToast({
+        title: "Couldn't rename the app",
+        body: error instanceof Error ? error.message : "Please try again.",
+        tone: "error",
+      }),
+  });
+
+  const updateConfig = useMutation({
+    mutationFn: (config: Record<string, unknown>) => toolsApi.updateConnection(connectionId, {
+      config,
+      transportConfig: connection?.transportConfig ?? {},
+    }),
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.connection(connectionId) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.connections(selectedCompanyId!) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.apps.attention(selectedCompanyId!) });
+    },
+    onError: (error) =>
+      pushToast({
+        title: "Couldn't save that",
+        body: error instanceof Error ? error.message : "Please try again.",
+        tone: "error",
+      }),
+  });
+
+  const startOAuth = useMutation({
+    mutationFn: () => toolsApi.startOAuth(connectionId),
+    onSuccess: ({ authorizationUrl }) => {
+      window.location.assign(authorizationUrl);
+    },
+    onError: (error) =>
+      pushToast({
+        title: "Couldn't start sign-in",
+        body: error instanceof Error ? error.message : "Please try again.",
+        tone: "error",
+      }),
+  });
+
+  const removeApp = useMutation({
+    mutationFn: () => toolsApi.archiveConnection(connectionId),
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.connections(selectedCompanyId!) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.applications(selectedCompanyId!) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.apps.attention(selectedCompanyId!) });
+      pushToast({
+        title: "App removed",
+        body: `${appName} no longer has access. You can connect it again any time.`,
+        tone: "success",
+      });
+      navigate("/apps");
+    },
+    onError: (error) =>
+      pushToast({
+        title: "Couldn't remove the app",
+        body: error instanceof Error ? error.message : "Please try again.",
+        tone: "error",
+      }),
+  });
+
+  const toggleEnabled = useMutation({
+    mutationFn: () => toolsApi.updateConnection(connectionId, { enabled: !connection?.enabled }),
+    onSuccess: (updated) => {
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.connection(connectionId) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.connections(selectedCompanyId!) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.applications(selectedCompanyId!) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.apps.attention(selectedCompanyId!) });
+      pushToast({
+        title: updated.enabled ? "App resumed" : "App paused",
+        body: updated.enabled
+          ? `${humanizeConnectionDisplayName(updated)} is available to agents again.`
+          : `${humanizeConnectionDisplayName(updated)} is paused for agents.`,
+        tone: "success",
+      });
+    },
+    onError: (error) =>
+      pushToast({
+        title: "Couldn't update the app",
+        body: error instanceof Error ? error.message : "Please try again.",
+        tone: "error",
+      }),
+  });
+
+  const refreshTools = useMutation({
+    mutationFn: () => toolsApi.refreshCatalog(connectionId),
+    onSuccess: (result) => {
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.connection(connectionId) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.catalog(connectionId) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.connections(selectedCompanyId!) });
+      queryClient.invalidateQueries({ queryKey: queryKeys.apps.attention(selectedCompanyId!) });
+      pushToast({
+        title: `Found ${result.discoveredCount} ${result.discoveredCount === 1 ? "action" : "actions"}`,
+        body: result.quarantinedCount > 0
+          ? `${result.quarantinedCount} new ${result.quarantinedCount === 1 ? "action needs" : "actions need"} your OK.`
+          : undefined,
+        tone: "success",
+      });
+    },
+    onError: (error) =>
+      pushToast({
+        title: "Couldn't refresh actions",
+        body: error instanceof Error ? error.message : "Please try again.",
+        tone: "error",
+      }),
+  });
+
+  const apply = (mutate: { enabled?: Set<string>; askFirst?: Set<string>; access?: AccessDraft }) =>
+    persist.mutate({
+      enabled: mutate.enabled ?? new Set(enabledIds),
+      askFirst: mutate.askFirst ?? new Set(askFirstIds),
+      access: mutate.access ?? access,
+    });
+
+  if (!connectionId || !activeTab) {
+    return <Navigate replace to={connectionId ? appTabHref(connectionId, "setup") : "/apps"} />;
+  }
+
+  if (!selectedCompanyId) {
+    return <div className="p-6 text-sm text-muted-foreground">Select a company to manage apps.</div>;
+  }
+  if (connectionQuery.isLoading || catalogQuery.isLoading) {
+    return (
+      <div className="max-w-3xl space-y-4">
+        <Skeleton className="h-10 w-56" />
+        <Skeleton className="h-48 w-full" />
+        <Skeleton className="h-40 w-full" />
+      </div>
+    );
+  }
+  if (!connection) {
+    return (
+      <div className="max-w-3xl p-6">
+        <p className="text-sm text-muted-foreground">We couldn't find that app.</p>
+        <Button className="mt-4" variant="outline" onClick={() => navigate("/apps")}>
+          Back to apps
+        </Button>
+      </div>
+    );
+  }
+
+  const status = statusFor(connection);
+  const needsReconnect = status.tone === "attention" && connection.healthStatus !== "unknown";
+  const quarantined = catalog.filter((e) => e.status === "quarantined");
+  const active = catalog.filter((e) => e.status !== "quarantined" && e.status !== "removed");
+  const readOnly = active.filter((e) => e.isReadOnly);
+  const canChange = active.filter((e) => !e.isReadOnly);
+  const actionCount = active.length;
+
+  return (
+    <div className="max-w-3xl space-y-6 pb-12">
+      <AppDetailHeader
+        appName={appName}
+        connection={connection}
+        logoEntry={logoEntry}
+        status={status}
+        actionCount={actionCount}
+        renaming={renaming}
+        nameDraft={nameDraft}
+        renamePending={rename.isPending}
+        onNameDraftChange={setNameDraft}
+        onRenameStart={() => {
+          setNameDraft(appName);
+          setRenaming(true);
+        }}
+        onRenameCancel={() => setRenaming(false)}
+        onRenameSubmit={(next) => {
+          if (next && next !== appName) rename.mutate(next);
+          else setRenaming(false);
+        }}
+      />
+
+      {needsReconnect && (
+        <ReconnectCard
+          connection={connection}
+          galleryEntry={logoEntry}
+          onReconnected={() => {
+            queryClient.invalidateQueries({ queryKey: queryKeys.tools.connection(connectionId) });
+            queryClient.invalidateQueries({ queryKey: queryKeys.tools.connections(selectedCompanyId) });
+            queryClient.invalidateQueries({ queryKey: queryKeys.apps.attention(selectedCompanyId) });
+          }}
+        />
+      )}
+
+      {activeTab === "setup" && (
+        <SetupPanel
+          connection={connection}
+          galleryEntry={logoEntry}
+          appToggleDisabled={toggleEnabled.isPending || removeApp.isPending}
+          onToggleApp={() => toggleEnabled.mutate()}
+          configUpdateDisabled={updateConfig.isPending}
+          onUpdateConfig={(config) => updateConfig.mutate(config)}
+          oauthStartDisabled={startOAuth.isPending}
+          onStartOAuth={() => startOAuth.mutate()}
+        />
+      )}
+      {activeTab === "review" && (
+        <ReviewPanel
+          connectionId={connectionId}
+          quarantined={quarantined}
+          pending={pending}
+          onTurnOnQuarantined={(ids) => apply({ enabled: addAll(new Set(enabledIds), ids) })}
+        />
+      )}
+      {activeTab === "permissions" && (
+        <PermissionsPanel
+          appName={appName}
+          access={access}
+          agents={agents}
+          install={install}
+          readOnly={readOnly}
+          canChange={canChange}
+          quarantined={quarantined}
+          enabledIds={enabledIds}
+          askFirstIds={askFirstIds}
+          pending={pending}
+          installPending={persistInstall.isPending || installsQuery.isLoading}
+          refreshPending={refreshTools.isPending}
+          onSaveAccess={(next) => apply({ access: next })}
+          onSaveInstall={(next) => persistInstall.mutate(next)}
+          onRefreshActions={() => refreshTools.mutate()}
+          onSetActionPermission={(id, next) => apply(actionPermissionMutation(id, next, enabledIds, askFirstIds))}
+          onTurnOnQuarantined={(ids) => apply({ enabled: addAll(new Set(enabledIds), ids) })}
+        />
+      )}
+      {activeTab === "test" && (
+        <TestPanel connectionId={connectionId} appName={appName} active={active} quarantined={quarantined} />
+      )}
+      {activeTab === "activity" && (
+        <ActivityPanel
+          events={activityQuery.data?.events ?? []}
+          lifecycleEvents={activityQuery.data?.lifecycleEvents ?? []}
+          issues={activityQuery.data?.issues ?? {}}
+          actionRequests={activityQuery.data?.actionRequests ?? {}}
+          loading={activityQuery.isLoading}
+          agents={agents}
+          connectionId={connectionId}
+          appName={appName}
+          userLabelById={userLabelById}
+        />
+      )}
+      {activeTab === "advanced" && (
+        <AdvancedPanel
+          connection={connection}
+          appName={appName}
+          galleryEntry={logoEntry}
+          removing={removeApp.isPending}
+          onRemove={() => removeApp.mutate()}
+          onReplaced={() => {
+            queryClient.invalidateQueries({ queryKey: queryKeys.tools.connection(connectionId) });
+            queryClient.invalidateQueries({ queryKey: queryKeys.tools.connections(selectedCompanyId) });
+            queryClient.invalidateQueries({ queryKey: queryKeys.apps.attention(selectedCompanyId) });
+          }}
+        />
+      )}
+    </div>
+  );
+}
+
+function AppDetailHeader({
+  appName,
+  connection,
+  logoEntry,
+  status,
+  actionCount,
+  renaming,
+  nameDraft,
+  renamePending,
+  onNameDraftChange,
+  onRenameStart,
+  onRenameCancel,
+  onRenameSubmit,
+}: {
+  appName: string;
+  connection: ToolConnection;
+  logoEntry: AppGalleryEntry | null;
+  status: StatusInfo;
+  actionCount: number;
+  renaming: boolean;
+  nameDraft: string;
+  renamePending: boolean;
+  onNameDraftChange: (value: string) => void;
+  onRenameStart: () => void;
+  onRenameCancel: () => void;
+  onRenameSubmit: (value: string) => void;
+}) {
+  return (
+    <header className="flex flex-wrap items-start justify-between gap-4">
+      <div className="flex items-center gap-3">
+        <AppLogo name={appName} logoUrl={logoEntry?.logoUrl} size={44} />
+        <div>
+          {renaming ? (
+            <form
+              className="flex items-center gap-2"
+              onSubmit={(event) => {
+                event.preventDefault();
+                onRenameSubmit(nameDraft.trim());
+              }}
+            >
+              <Input
+                aria-label="App name"
+                value={nameDraft}
+                onChange={(event) => onNameDraftChange(event.target.value)}
+                className="h-9 w-64 text-lg font-bold"
+                autoFocus
+              />
+              <Button type="submit" size="sm" disabled={renamePending || !nameDraft.trim()}>
+                {renamePending ? <Loader2 className="h-3.5 w-3.5 animate-spin" /> : "Save"}
+              </Button>
+              <Button type="button" size="sm" variant="ghost" onClick={onRenameCancel} disabled={renamePending}>
+                Cancel
+              </Button>
+            </form>
+          ) : (
+            <div className="flex items-center gap-1.5">
+              <h1 className="text-2xl font-bold tracking-tight">{appName}</h1>
+              <Button
+                variant="ghost"
+                size="icon"
+                className="h-7 w-7 text-muted-foreground"
+                aria-label="Rename app"
+                onClick={onRenameStart}
+              >
+                <Pencil className="h-3.5 w-3.5" />
+              </Button>
+            </div>
+          )}
+          {connectionDisplaySecondaryHint(connection) && (
+            <p className="text-xs text-muted-foreground">{connectionDisplaySecondaryHint(connection)}</p>
+          )}
+          <div className="mt-1 flex items-center gap-2">
+            <StatusBadge status={status} />
+            <span className="text-xs text-muted-foreground">
+              {actionCount} {actionCount === 1 ? "action" : "actions"} available
+            </span>
+          </div>
+        </div>
+      </div>
+    </header>
+  );
+}
+
+type StatusInfo = { label: string; tone: "connected" | "attention" | "paused" };
+
+function statusFor(connection: ToolConnection): StatusInfo {
+  if (connection.enabled === false || connection.status === "disabled") {
+    return { label: "Paused", tone: "paused" };
+  }
+  if (isAttentionHealthStatus(connection.healthStatus)) {
+    return { label: "Needs attention", tone: "attention" };
+  }
+  return { label: "Connected", tone: "connected" };
+}
+
+function StatusBadge({ status }: { status: StatusInfo }) {
+  const klass: Record<StatusInfo["tone"], string> = {
+    connected: "border-emerald-500/40 bg-emerald-500/10 text-emerald-700 dark:text-emerald-300",
+    attention: "border-amber-500/40 bg-amber-500/10 text-amber-700 dark:text-amber-300",
+    paused: "border-border bg-muted text-muted-foreground",
+  };
+  return (
+    <span
+      className={cn(
+        "inline-flex items-center gap-1 rounded-full border px-2 py-0.5 text-xs font-medium",
+        klass[status.tone],
+      )}
+    >
+      {status.tone === "connected" && <Check className="h-3 w-3" />}
+      {status.label}
+    </span>
+  );
+}
+
+function enabledCatalogIds(profile: ToolProfileWithDetails | undefined): Set<string> {
+  const ids = new Set<string>();
+  for (const entry of profile?.entries ?? []) {
+    if (entry.effect === "include" && entry.catalogEntryId) ids.add(entry.catalogEntryId);
+  }
+  return ids;
+}
+
+function askFirstCatalogIds(policies: ToolPolicy[], connectionId: string): Set<string> {
+  const ids = new Set<string>();
+  for (const policy of policies) {
+    if (policy.policyType !== "require_approval" || policy.enabled === false) continue;
+    const config = (policy.config ?? {}) as { source?: unknown; connectionId?: unknown; catalogEntryId?: unknown };
+    if (config.source === "app_gallery_finish" && config.connectionId === connectionId && typeof config.catalogEntryId === "string") {
+      ids.add(config.catalogEntryId);
+    }
+  }
+  return ids;
+}
+
+function accessFrom(profile: ToolProfileWithDetails | undefined): AccessDraft {
+  const bindings = profile?.bindings ?? [];
+  if (bindings.some((b) => b.targetType === "company")) {
+    return { mode: "all", agentIds: new Set() };
+  }
+  const agentIds = new Set(bindings.filter((b) => b.targetType === "agent").map((b) => b.targetId));
+  if (agentIds.size === 0) return { mode: "all", agentIds: new Set() };
+  return { mode: "specific", agentIds };
+}
+
+function galleryEntryFor(apps: AppGalleryEntry[], connection: ToolConnection | undefined): AppGalleryEntry | null {
+  if (!connection) return null;
+  const name = connection.name.toLowerCase();
+  return apps.find((a) => a.name.toLowerCase() === name) ?? apps.find((a) => a.key === name) ?? null;
+}
+
+function addAll(set: Set<string>, ids: string[]): Set<string> {
+  const next = new Set(set);
+  for (const id of ids) next.add(id);
+  return next;
+}
+
+function actionPermissionMutation(
+  id: string,
+  next: "off" | "allowed" | "ask",
+  enabledIds: Set<string>,
+  askFirstIds: Set<string>,
+) {
+  const enabled = new Set(enabledIds);
+  const askFirst = new Set(askFirstIds);
+  if (next === "off") {
+    enabled.delete(id);
+    askFirst.delete(id);
+  } else {
+    enabled.add(id);
+    if (next === "ask") askFirst.add(id);
+    else askFirst.delete(id);
+  }
+  return { enabled, askFirst };
+}
diff --git a/ui/src/pages/apps/AppLogo.tsx b/ui/src/pages/apps/AppLogo.tsx
new file mode 100644
index 00000000000..3a570175736
--- /dev/null
+++ b/ui/src/pages/apps/AppLogo.tsx
@@ -0,0 +1,69 @@
+import { useState } from "react";
+import { cn } from "@/lib/utils";
+
+const TILE_COLORS = [
+  "bg-(--app-logo-tile-1)",
+  "bg-(--app-logo-tile-2)",
+  "bg-(--app-logo-tile-3)",
+  "bg-(--app-logo-tile-4)",
+  "bg-(--app-logo-tile-5)",
+  "bg-(--app-logo-tile-6)",
+  "bg-(--app-logo-tile-7)",
+  "bg-(--app-logo-tile-8)",
+];
+
+function colorFor(seed: string): string {
+  let hash = 0;
+  for (let i = 0; i < seed.length; i++) hash = (hash * 31 + seed.charCodeAt(i)) >>> 0;
+  return TILE_COLORS[hash % TILE_COLORS.length]!;
+}
+
+interface AppLogoProps {
+  name: string;
+  logoUrl?: string | null;
+  size?: number;
+  className?: string;
+}
+
+/**
+ * App icon for the gallery and connected-apps surfaces. Renders the manifest
+ * favicon when available, falling back to a coloured letter tile (deterministic
+ * colour per app name) when the image is missing or fails to load.
+ */
+export function AppLogo({ name, logoUrl, size = 36, className }: AppLogoProps) {
+  const [failed, setFailed] = useState(false);
+  const letter = (name.trim()[0] ?? "?").toUpperCase();
+  const dimension = { width: size, height: size };
+
+  if (logoUrl && !failed) {
+    return (
+      <span
+        className={cn("inline-flex shrink-0 items-center justify-center overflow-hidden rounded-lg bg-muted", className)}
+        style={dimension}
+      >
+        <img
+          src={logoUrl}
+          alt=""
+          width={size}
+          height={size}
+          className="h-full w-full object-contain"
+          onError={() => setFailed(true)}
+        />
+      </span>
+    );
+  }
+
+  return (
+    <span
+      className={cn(
+        "inline-flex shrink-0 items-center justify-center rounded-lg font-bold text-white",
+        colorFor(name),
+        className,
+      )}
+      style={{ ...dimension, fontSize: Math.round(size * 0.42) }}
+      aria-hidden="true"
+    >
+      {letter}
+    </span>
+  );
+}
diff --git a/ui/src/pages/apps/AppNotConnected.test.tsx b/ui/src/pages/apps/AppNotConnected.test.tsx
new file mode 100644
index 00000000000..e2037ad12c9
--- /dev/null
+++ b/ui/src/pages/apps/AppNotConnected.test.tsx
@@ -0,0 +1,223 @@
+// @vitest-environment jsdom
+
+import { flushSync } from "react-dom";
+import { createRoot } from "react-dom/client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { AppNotConnected } from "./AppNotConnected";
+
+const listApplicationsMock = vi.hoisted(() => vi.fn());
+const listConnectionsMock = vi.hoisted(() => vi.fn());
+const listGalleryMock = vi.hoisted(() => vi.fn());
+const listConnectionActivityMock = vi.hoisted(() => vi.fn());
+const listActionRequestsMock = vi.hoisted(() => vi.fn());
+const updateApplicationMock = vi.hoisted(() => vi.fn());
+const mockAgentsList = vi.hoisted(() => vi.fn());
+const mockNavigate = vi.hoisted(() => vi.fn());
+const navigateComponentMock = vi.hoisted(() => vi.fn());
+const mockParams = vi.hoisted(() => ({ applicationId: "app-1", tab: "setup" as string | undefined }));
+
+vi.mock("@/api/tools", () => ({
+  toolsApi: {
+    listApplications: (companyId: string) => listApplicationsMock(companyId),
+    listConnections: (companyId: string) => listConnectionsMock(companyId),
+    listGallery: (companyId: string) => listGalleryMock(companyId),
+    listConnectionActivity: (connectionId: string, limit: number) =>
+      listConnectionActivityMock(connectionId, limit),
+    listActionRequests: (companyId: string, status: string) =>
+      listActionRequestsMock(companyId, status),
+    updateApplication: (applicationId: string, input: unknown) =>
+      updateApplicationMock(applicationId, input),
+    approveActionRequest: vi.fn(),
+    declineActionRequest: vi.fn(),
+    createTrustRuleFromActionRequest: vi.fn(),
+  },
+}));
+
+vi.mock("@/api/agents", () => ({
+  agentsApi: {
+    list: (companyId: string) => mockAgentsList(companyId),
+  },
+}));
+
+vi.mock("@/lib/router", () => ({
+  useParams: () => mockParams,
+  useNavigate: () => mockNavigate,
+  Navigate: ({ to, replace }: { to: string; replace?: boolean }) => {
+    navigateComponentMock({ to, replace });
+    return <div data-navigate-to={to} />;
+  },
+  Link: ({ to, children, ...props }: { to: string; children: React.ReactNode }) => (
+    <a href={to} {...props}>{children}</a>
+  ),
+}));
+
+vi.mock("@/context/CompanyContext", () => ({
+  useCompany: () => ({
+    selectedCompanyId: "company-1",
+    selectedCompany: { id: "company-1", name: "Paperclip" },
+  }),
+}));
+
+vi.mock("@/context/BreadcrumbContext", () => ({
+  useBreadcrumbs: () => ({ setBreadcrumbs: vi.fn() }),
+}));
+
+vi.mock("@/context/ToastContext", () => ({
+  useToast: () => ({ pushToast: vi.fn() }),
+}));
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+(globalThis as any).IS_REACT_ACT_ENVIRONMENT = true;
+
+async function act(callback: () => void | Promise<void>) {
+  let result: void | Promise<void> = undefined;
+  flushSync(() => {
+    result = callback();
+  });
+  await result;
+}
+
+async function flushReact() {
+  for (let i = 0; i < 3; i += 1) {
+    await act(async () => {
+      await Promise.resolve();
+      await new Promise((resolve) => window.setTimeout(resolve, 0));
+    });
+  }
+}
+
+function application(overrides: Record<string, unknown> = {}) {
+  return {
+    id: "app-1",
+    companyId: "company-1",
+    applicationKey: "github",
+    name: "GitHub",
+    description: "Repository app",
+    type: "mcp_http",
+    status: "active",
+    pluginId: null,
+    ownerAgentId: null,
+    ownerUserId: null,
+    metadata: null,
+    archivedAt: null,
+    createdAt: new Date("2026-01-01T00:00:00Z"),
+    updatedAt: new Date("2026-01-01T00:00:00Z"),
+    ...overrides,
+  };
+}
+
+function connection(overrides: Record<string, unknown> = {}) {
+  return {
+    id: "conn-old",
+    companyId: "company-1",
+    applicationId: "app-1",
+    name: "GitHub",
+    connectionKind: "managed",
+    transport: "remote_http",
+    status: "archived",
+    transportConfig: { url: "https://github.example/mcp" },
+    config: { url: "https://github.example/mcp" },
+    credentialSecretRefs: [],
+    credentialRefs: [],
+    healthStatus: "error",
+    healthMessage: "Token expired.",
+    healthCheckedAt: null,
+    lastError: null,
+    enabled: true,
+    lastUsedAt: new Date("2026-06-10T00:00:00Z"),
+    createdByAgentId: null,
+    createdByUserId: null,
+    createdAt: new Date("2026-01-01T00:00:00Z"),
+    updatedAt: new Date("2026-06-11T00:00:00Z"),
+    ...overrides,
+  };
+}
+
+describe("AppNotConnected", () => {
+  let container: HTMLDivElement;
+  let root: ReturnType<typeof createRoot>;
+
+  beforeEach(() => {
+    container = document.createElement("div");
+    document.body.appendChild(container);
+    mockParams.applicationId = "app-1";
+    mockParams.tab = "setup";
+    listApplicationsMock.mockResolvedValue({ applications: [application()] });
+    listConnectionsMock.mockResolvedValue({ connections: [connection()] });
+    listGalleryMock.mockResolvedValue({
+      apps: [{ key: "github", name: "GitHub", logoUrl: "https://example.test/github.png" }],
+    });
+    listConnectionActivityMock.mockResolvedValue({ events: [], issues: {}, actionRequests: {} });
+    listActionRequestsMock.mockResolvedValue({ actionRequests: [] });
+    mockAgentsList.mockResolvedValue([]);
+    updateApplicationMock.mockResolvedValue(application({ status: "archived" }));
+  });
+
+  afterEach(() => {
+    flushSync(() => root?.unmount());
+    container.remove();
+    document.body.innerHTML = "";
+    vi.clearAllMocks();
+  });
+
+  async function renderPage() {
+    const client = new QueryClient({ defaultOptions: { queries: { retry: false } } });
+    root = createRoot(container);
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={client}>
+          <AppNotConnected />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+  }
+
+  it("redirects the application root route to setup", async () => {
+    mockParams.tab = undefined;
+
+    await renderPage();
+
+    expect(navigateComponentMock).toHaveBeenCalledWith({ to: "/apps/app/app-1/setup", replace: true });
+    expect(listApplicationsMock).not.toHaveBeenCalled();
+  });
+
+  it("redirects to the connected app tab when a live connection exists", async () => {
+    mockParams.tab = "permissions";
+    listConnectionsMock.mockResolvedValue({
+      connections: [connection({ id: "conn-live", status: "active" })],
+    });
+
+    await renderPage();
+
+    expect(navigateComponentMock).toHaveBeenCalledWith({ to: "/apps/conn-live/permissions", replace: true });
+  });
+
+  it.each([
+    ["setup", "Reconnect this app"],
+    ["review", "Nothing is waiting for your OK right now."],
+    ["permissions", "Permissions paused"],
+    ["test", "Reconnect to test this app."],
+    ["activity", "No activity yet."],
+    ["advanced", "Danger zone"],
+  ])("renders the %s tab with persistent app identity", async (tab, expectedText) => {
+    mockParams.tab = tab;
+
+    await renderPage();
+
+    expect(container.textContent).toContain("GitHub");
+    expect(container.textContent).toContain("Not connected");
+    expect(container.textContent).toContain(expectedText);
+  });
+
+  it("keeps previous setup context on reconnect tabs", async () => {
+    mockParams.tab = "setup";
+
+    await renderPage();
+
+    expect(container.textContent).toContain("Previous setup");
+    expect(container.textContent).toContain("Last error: Token expired.");
+    expect(container.textContent).toContain("https://github.example/mcp");
+  });
+});
diff --git a/ui/src/pages/apps/AppNotConnected.tsx b/ui/src/pages/apps/AppNotConnected.tsx
new file mode 100644
index 00000000000..b3ed0820229
--- /dev/null
+++ b/ui/src/pages/apps/AppNotConnected.tsx
@@ -0,0 +1,371 @@
+import { useEffect, useMemo } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import type { ToolConnection } from "@paperclipai/shared";
+import { Navigate, useNavigate, useParams } from "@/lib/router";
+import { useCompany } from "@/context/CompanyContext";
+import { useBreadcrumbs } from "@/context/BreadcrumbContext";
+import { useToast } from "@/context/ToastContext";
+import { queryKeys } from "@/lib/queryKeys";
+import { timeAgo } from "@/lib/timeAgo";
+import { toolsApi } from "@/api/tools";
+import { agentsApi } from "@/api/agents";
+import { Button } from "@/components/ui/button";
+import { Skeleton } from "@/components/ui/skeleton";
+import { AppLogo } from "./AppLogo";
+import { connectionAddress, connectionTransportLabel, DangerZone } from "./AppDetail";
+import { ActivityPanel } from "./app-detail/ActivityPanel";
+import { ReviewPanel } from "./app-detail/ReviewPanel";
+import { appApplicationTabHref, appTabHref, appTabLabel, isAppTabKey, type AppTabKey } from "./app-tabs";
+
+export function AppNotConnected() {
+  const { applicationId = "", tab } = useParams<{ applicationId: string; tab?: string }>();
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const { pushToast } = useToast();
+  const { selectedCompany, selectedCompanyId } = useCompany();
+  const { setBreadcrumbs } = useBreadcrumbs();
+  const activeTab: AppTabKey | null = isAppTabKey(tab) ? tab : null;
+
+  const applicationsQuery = useQuery({
+    queryKey: queryKeys.tools.applications(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listApplications(selectedCompanyId!),
+    enabled: !!selectedCompanyId && !!activeTab,
+  });
+  const connectionsQuery = useQuery({
+    queryKey: queryKeys.tools.connections(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listConnections(selectedCompanyId!),
+    enabled: !!selectedCompanyId && !!activeTab,
+  });
+  const galleryQuery = useQuery({
+    queryKey: queryKeys.apps.gallery(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listGallery(selectedCompanyId!),
+    enabled: !!selectedCompanyId && !!activeTab,
+  });
+
+  const application = useMemo(
+    () => (applicationsQuery.data?.applications ?? []).find((app) => app.id === applicationId),
+    [applicationsQuery.data, applicationId],
+  );
+  const appConnections = useMemo(
+    () => (connectionsQuery.data?.connections ?? []).filter((c) => c.applicationId === applicationId),
+    [connectionsQuery.data, applicationId],
+  );
+  const activeConnection = appConnections.find((c) => c.status !== "archived") ?? null;
+  const previousConnection = useMemo(() => latestArchivedConnection(appConnections), [appConnections]);
+  const activityQuery = useQuery({
+    queryKey: queryKeys.tools.connectionActivity(previousConnection?.id ?? "__none__"),
+    queryFn: () => toolsApi.listConnectionActivity(previousConnection!.id, 20),
+    enabled: !!previousConnection && activeTab === "activity",
+  });
+  const agentsQuery = useQuery({
+    queryKey: queryKeys.agents.list(selectedCompanyId ?? "__none__"),
+    queryFn: () => agentsApi.list(selectedCompanyId!),
+    enabled: !!selectedCompanyId && activeTab === "activity",
+  });
+
+  const appName = application?.name ?? "App";
+  useEffect(() => {
+    if (!activeTab) return;
+    setBreadcrumbs([
+      { label: selectedCompany?.name ?? "Company", href: "/dashboard" },
+      { label: "Apps", href: "/apps" },
+      { label: appName, href: appApplicationTabHref(applicationId, "setup") },
+      { label: appTabLabel(activeTab) },
+    ]);
+    return () => setBreadcrumbs([]);
+  }, [setBreadcrumbs, selectedCompany?.name, appName, applicationId, activeTab]);
+
+  const remove = useMutation({
+    mutationFn: () => toolsApi.updateApplication(applicationId, { status: "archived" }),
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.applications(selectedCompanyId ?? "__none__") });
+      pushToast({
+        title: "App removed",
+        body: `${appName} no longer shows in your apps. You can connect it again any time.`,
+        tone: "success",
+      });
+      navigate("/apps");
+    },
+    onError: (error) => {
+      pushToast({
+        title: "Couldn’t remove the app",
+        body: error instanceof Error ? error.message : "Please try again.",
+        tone: "error",
+      });
+    },
+  });
+
+  if (!selectedCompanyId) {
+    return <div className="p-6 text-sm text-muted-foreground">Select a company to manage apps.</div>;
+  }
+  if (!applicationId || !activeTab) {
+    return <Navigate to={applicationId ? appApplicationTabHref(applicationId, "setup") : "/apps"} replace />;
+  }
+  if (applicationsQuery.isLoading || connectionsQuery.isLoading) {
+    return (
+      <div className="max-w-3xl space-y-3">
+        <Skeleton className="h-10 w-64" />
+        <Skeleton className="h-40 w-full" />
+      </div>
+    );
+  }
+  if (!application) {
+    return (
+      <div className="max-w-3xl space-y-3 p-6 text-sm text-muted-foreground">
+        <p>This app doesn’t exist anymore.</p>
+        <Button variant="outline" size="sm" onClick={() => navigate("/apps")}>Back to apps</Button>
+      </div>
+    );
+  }
+  if (activeConnection) {
+    return <Navigate to={appTabHref(activeConnection.id, activeTab)} replace />;
+  }
+
+  const gallery = galleryQuery.data?.apps ?? [];
+  const logoUrl =
+    (application.applicationKey ? gallery.find((entry) => entry.key === application.applicationKey)?.logoUrl : undefined) ??
+    gallery.find((entry) => entry.name.toLowerCase() === application.name.toLowerCase())?.logoUrl;
+
+  const previousAddress = previousConnection ? connectionAddress(previousConnection) : null;
+  const connectHref = reconnectHref({
+    applicationId,
+    appName: application.name,
+    previousAddress,
+  });
+
+  return (
+    <div className="max-w-3xl space-y-6 pb-12">
+      <ApplicationHeader applicationName={application.name} description={application.description} logoUrl={logoUrl} />
+
+      {activeTab === "setup" && (
+        <SetupTab
+          previousConnection={previousConnection}
+          previousAddress={previousAddress}
+          onConnect={() => navigate(connectHref)}
+        />
+      )}
+      {activeTab === "review" && (
+        previousConnection ? (
+          <ReviewPanel connectionId={previousConnection.id} />
+        ) : (
+          <EmptyTab
+            title="Nothing is waiting for your OK right now."
+            body="Review requests will appear here after this app is connected."
+          />
+        )
+      )}
+      {activeTab === "permissions" && (
+        <PermissionsTab previousConnection={previousConnection} />
+      )}
+      {activeTab === "test" && (
+        <EmptyTab
+          title="Reconnect to test this app."
+          body="Testing becomes available after this app is connected again."
+        />
+      )}
+      {activeTab === "activity" && (
+        previousConnection ? (
+          <ActivityPanel
+            events={activityQuery.data?.events ?? []}
+            lifecycleEvents={activityQuery.data?.lifecycleEvents ?? []}
+            issues={activityQuery.data?.issues ?? {}}
+            actionRequests={activityQuery.data?.actionRequests ?? {}}
+            loading={activityQuery.isLoading}
+            agents={agentsQuery.data ?? []}
+            connectionId={previousConnection.id}
+            appName={appName}
+          />
+        ) : (
+          <ActivityPanel
+            events={[]}
+            lifecycleEvents={[]}
+            issues={{}}
+            actionRequests={{}}
+            loading={false}
+            agents={[]}
+            connectionId=""
+            appName={appName}
+          />
+        )
+      )}
+      {activeTab === "advanced" && (
+        <AdvancedTab
+          appName={application.name}
+          previousConnection={previousConnection}
+          previousAddress={previousAddress}
+          removing={remove.isPending}
+          onRemove={() => remove.mutate()}
+        />
+      )}
+    </div>
+  );
+}
+
+function ApplicationHeader({
+  applicationName,
+  description,
+  logoUrl,
+}: {
+  applicationName: string;
+  description: string | null;
+  logoUrl: string | undefined;
+}) {
+  return (
+    <header className="flex flex-wrap items-center gap-4">
+      <AppLogo name={applicationName} logoUrl={logoUrl} size={48} />
+      <div className="min-w-0 flex-1">
+        <div className="flex items-center gap-2">
+          <h1 className="truncate text-2xl font-bold tracking-tight">{applicationName}</h1>
+          <span className="inline-flex items-center rounded-full border border-border bg-background px-2 py-0.5 text-xs font-medium text-muted-foreground">
+            Not connected
+          </span>
+        </div>
+        {description && (
+          <p className="mt-1 text-sm text-muted-foreground">{description}</p>
+        )}
+      </div>
+    </header>
+  );
+}
+
+function SetupTab({
+  previousConnection,
+  previousAddress,
+  onConnect,
+}: {
+  previousConnection: ToolConnection | null;
+  previousAddress: string | null;
+  onConnect: () => void;
+}) {
+  return (
+    <div className="space-y-6">
+      <section className="rounded-xl border border-border bg-card px-5 py-4">
+        <div className="flex flex-wrap items-center justify-between gap-3">
+          <div>
+            <h2 className="text-sm font-bold text-foreground">
+              {previousConnection ? "Reconnect this app" : "Connect this app"}
+            </h2>
+            <p className="mt-0.5 text-sm text-muted-foreground">
+              {previousConnection
+                ? "We kept the previous setup. Add a working key to bring it back online."
+                : "Agents can't use it until it's connected."}
+            </p>
+          </div>
+          <Button onClick={onConnect}>
+            {previousConnection ? "Reconnect" : "Connect"}
+          </Button>
+        </div>
+      </section>
+
+      {previousConnection && (
+        <PreviousSetup connection={previousConnection} previousAddress={previousAddress} />
+      )}
+    </div>
+  );
+}
+
+function PreviousSetup({
+  connection,
+  previousAddress,
+}: {
+  connection: ToolConnection;
+  previousAddress: string | null;
+}) {
+  return (
+    <section className="rounded-xl border border-border bg-card px-5 py-4">
+      <h2 className="text-sm font-bold text-foreground">Previous setup</h2>
+      {connection.healthMessage && (
+        <p className="mt-2 rounded-lg border border-amber-500/40 bg-amber-500/10 px-3 py-2 text-xs text-amber-700 dark:text-amber-300">
+          Last error: {connection.healthMessage}
+        </p>
+      )}
+      <dl className="mt-3 grid gap-2 text-xs sm:grid-cols-(--gtc-59)">
+        <dt className="text-muted-foreground">Address</dt>
+        <dd className="break-all font-mono text-foreground">{previousAddress}</dd>
+        <dt className="text-muted-foreground">Connection type</dt>
+        <dd className="text-foreground">{connectionTransportLabel(connection.transport)}</dd>
+        <dt className="text-muted-foreground">Last used</dt>
+        <dd className="text-foreground">
+          {connection.lastUsedAt ? timeAgo(connection.lastUsedAt) : "Never"}
+        </dd>
+      </dl>
+    </section>
+  );
+}
+
+function PermissionsTab({ previousConnection }: { previousConnection: ToolConnection | null }) {
+  return (
+    <section className="rounded-xl border border-border bg-card px-5 py-4">
+      <h2 className="text-sm font-bold text-foreground">Permissions paused</h2>
+      <p className="mt-1 text-sm text-muted-foreground">
+        Reconnect this app to edit who can use it and which actions need a human first.
+      </p>
+      {previousConnection && (
+        <p className="mt-3 text-xs text-muted-foreground">
+          Previous setup is retained for reconnect, but access controls stay read-only until the app is online.
+        </p>
+      )}
+    </section>
+  );
+}
+
+function AdvancedTab({
+  appName,
+  previousConnection,
+  previousAddress,
+  removing,
+  onRemove,
+}: {
+  appName: string;
+  previousConnection: ToolConnection | null;
+  previousAddress: string | null;
+  removing: boolean;
+  onRemove: () => void;
+}) {
+  return (
+    <div className="space-y-6">
+      {previousConnection ? (
+        <PreviousSetup connection={previousConnection} previousAddress={previousAddress} />
+      ) : (
+        <EmptyTab
+          title="No previous connection details"
+          body="Technical details will appear here after this app is connected."
+        />
+      )}
+      <DangerZone appName={appName} removing={removing} onRemove={onRemove} />
+    </div>
+  );
+}
+
+function EmptyTab({ title, body }: { title: string; body: string }) {
+  return (
+    <section className="rounded-xl border border-border bg-card px-5 py-4">
+      <h2 className="text-sm font-bold text-foreground">{title}</h2>
+      <p className="mt-1 text-sm text-muted-foreground">{body}</p>
+    </section>
+  );
+}
+
+function latestArchivedConnection(connections: ToolConnection[]): ToolConnection | null {
+  const archived = connections.filter((c) => c.status === "archived");
+  if (archived.length === 0) return null;
+  return archived.reduce((latest, connection) => {
+    const latestTime = new Date(latest.updatedAt ?? latest.createdAt ?? 0).getTime();
+    const connectionTime = new Date(connection.updatedAt ?? connection.createdAt ?? 0).getTime();
+    return connectionTime > latestTime ? connection : latest;
+  });
+}
+
+function reconnectHref({
+  applicationId,
+  appName,
+  previousAddress,
+}: {
+  applicationId: string;
+  appName: string;
+  previousAddress: string | null;
+}): string {
+  const params = new URLSearchParams({ byo: "1", applicationId, name: appName });
+  if (previousAddress && /^https?:\/\//i.test(previousAddress)) params.set("link", previousAddress);
+  return `/apps/connect?${params.toString()}`;
+}
diff --git a/ui/src/pages/apps/AppsConnect.test.tsx b/ui/src/pages/apps/AppsConnect.test.tsx
new file mode 100644
index 00000000000..d9ff3228605
--- /dev/null
+++ b/ui/src/pages/apps/AppsConnect.test.tsx
@@ -0,0 +1,700 @@
+// @vitest-environment jsdom
+
+import { flushSync } from "react-dom";
+import { createRoot } from "react-dom/client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { AppsConnect } from "./AppsConnect";
+
+const listGalleryMock = vi.hoisted(() => vi.fn());
+const connectAppMock = vi.hoisted(() => vi.fn());
+const finishAppMock = vi.hoisted(() => vi.fn());
+const putConnectionInstallsMock = vi.hoisted(() => vi.fn());
+const listAgentsMock = vi.hoisted(() => vi.fn());
+const mockNavigate = vi.hoisted(() => vi.fn());
+const mockSearch = vi.hoisted(() => ({ value: "" }));
+const mockParams = vi.hoisted(() => ({ appKey: undefined as string | undefined }));
+
+vi.mock("@/api/tools", () => ({
+  toolsApi: {
+    listGallery: (companyId: string) => listGalleryMock(companyId),
+    connectApp: (companyId: string, input: unknown) => connectAppMock(companyId, input),
+    finishApp: (companyId: string, connectionId: string, input: unknown) =>
+      finishAppMock(companyId, connectionId, input),
+    putConnectionInstalls: (connectionId: string, installs: unknown) =>
+      putConnectionInstallsMock(connectionId, installs),
+  },
+}));
+
+vi.mock("@/api/agents", () => ({
+  agentsApi: { list: (companyId: string) => listAgentsMock(companyId) },
+}));
+
+vi.mock("@/lib/router", () => ({
+  useNavigate: () => mockNavigate,
+  useParams: () => mockParams,
+  useSearchParams: () => [new URLSearchParams(mockSearch.value), vi.fn()],
+}));
+
+vi.mock("@/context/CompanyContext", () => ({
+  useCompany: () => ({
+    selectedCompanyId: "company-1",
+    selectedCompany: { id: "company-1", name: "Paperclip" },
+  }),
+}));
+
+vi.mock("@/context/BreadcrumbContext", () => ({
+  useBreadcrumbs: () => ({ setBreadcrumbs: vi.fn() }),
+}));
+
+vi.mock("@/context/ToastContext", () => ({
+  useToast: () => ({ pushToast: vi.fn() }),
+}));
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+(globalThis as any).IS_REACT_ACT_ENVIRONMENT = true;
+
+async function act(callback: () => void | Promise<void>) {
+  let result: void | Promise<void> = undefined;
+  flushSync(() => {
+    result = callback();
+  });
+  await result;
+}
+
+async function flushReact() {
+  await act(async () => {
+    await Promise.resolve();
+    await new Promise((resolve) => window.setTimeout(resolve, 0));
+  });
+}
+
+function setInputValue(input: HTMLInputElement, value: string) {
+  const setter = Object.getOwnPropertyDescriptor(
+    window.HTMLInputElement.prototype,
+    "value",
+  )?.set;
+  setter?.call(input, value);
+  input.dispatchEvent(new Event("input", { bubbles: true }));
+}
+
+function setTextareaValue(textarea: HTMLTextAreaElement, value: string) {
+  const setter = Object.getOwnPropertyDescriptor(
+    window.HTMLTextAreaElement.prototype,
+    "value",
+  )?.set;
+  setter?.call(textarea, value);
+  textarea.dispatchEvent(new Event("input", { bubbles: true }));
+}
+
+function buttonByText(text: string): HTMLButtonElement | undefined {
+  return Array.from(document.body.querySelectorAll("button")).find(
+    (b) => b.textContent?.trim() === text,
+  ) as HTMLButtonElement | undefined;
+}
+
+function buttonContaining(text: string): HTMLButtonElement | undefined {
+  return Array.from(document.body.querySelectorAll("button")).find(
+    (b) => b.textContent?.includes(text),
+  ) as HTMLButtonElement | undefined;
+}
+
+async function gotoLinkFrame(container: HTMLDivElement, url: string) {
+  const linkInput = Array.from(
+    container.querySelectorAll<HTMLInputElement>("input"),
+  ).find((i) => i.getAttribute("placeholder")?.startsWith("https://"));
+  expect(linkInput).toBeTruthy();
+  await act(async () => setInputValue(linkInput!, url));
+  await flushReact();
+  await act(async () => {
+    buttonByText("Continue")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+  });
+  await flushReact();
+}
+
+describe("AppsConnect — Connect with a link (M4 frame)", () => {
+  let container: HTMLDivElement;
+
+  beforeEach(() => {
+    mockSearch.value = "";
+    mockParams.appKey = undefined;
+    container = document.createElement("div");
+    document.body.appendChild(container);
+    listGalleryMock.mockResolvedValue({
+      apps: [
+        {
+          key: "zapier",
+          name: "Zapier",
+          tagline: "Automate things",
+          authKind: "api_key",
+          urlPatterns: ["https://zapier.com/*", "https://*.zapier.com/*"],
+          logoUrl: null,
+          credentialFields: [{ configPath: "credentials.authorization", label: "API key", required: true }],
+        },
+      ],
+    });
+    finishAppMock.mockResolvedValue({});
+    putConnectionInstallsMock.mockResolvedValue({ connectionId: "conn-1", installs: [] });
+    connectAppMock.mockResolvedValue({
+      connectionId: "conn-1",
+      application: { id: "app-1", name: "example.com" },
+      actions: { readOnly: [], canMakeChanges: [] },
+      catalog: [],
+      suggestedDefaults: {},
+    });
+    listAgentsMock.mockResolvedValue([
+      { id: "agent-1", name: "Ada", title: "CTO", status: "active", icon: "Bot" },
+      { id: "agent-2", name: "Grace", title: "Engineer", status: "active", icon: "Code" },
+    ]);
+  });
+
+  afterEach(() => {
+    document.body.removeChild(container);
+    document.body.innerHTML = "";
+    vi.clearAllMocks();
+  });
+
+  async function render() {
+    const root = createRoot(container);
+    const queryClient = new QueryClient({ defaultOptions: { queries: { retry: false } } });
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={queryClient}>
+          <AppsConnect />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+    await flushReact();
+    return root;
+  }
+
+  it("an unrecognized URL routes to a frame with the URL, defaulted Name, and a Yes/No toggle", async () => {
+    await render();
+    await gotoLinkFrame(container, "https://www.example.com/actions");
+
+    expect(container.textContent).toContain("Connect with a link");
+    expect(container.textContent).toContain("https://www.example.com/actions");
+    expect(container.textContent).toContain("Does it need a key?");
+    expect(buttonByText("No")).toBeTruthy();
+    expect(buttonByText("Yes")).toBeTruthy();
+
+    // Name is auto-filled from the host with www. stripped.
+    const nameInput = Array.from(container.querySelectorAll<HTMLInputElement>("input")).find(
+      (i) => i.getAttribute("placeholder") === "My app",
+    );
+    expect(nameInput?.value).toBe("example.com");
+  });
+
+  it("opens the selected app directly on its setup route", async () => {
+    mockParams.appKey = "zapier";
+    await render();
+
+    expect(container.textContent).toContain("Connect Zapier");
+    expect(container.textContent).not.toContain("Pick the app you want your agents to use.");
+  });
+
+  it("choosing No and clicking Check link connects with no credentials", async () => {
+    await render();
+    await gotoLinkFrame(container, "https://www.example.com/actions");
+
+    await act(async () => {
+      buttonByText("Check link")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(connectAppMock).toHaveBeenCalledTimes(1);
+    const [, input] = connectAppMock.mock.calls[0];
+    expect(input).toMatchObject({ link: "https://www.example.com/actions", name: "example.com" });
+    expect(input.credentialValues).toBeUndefined();
+  });
+
+  it("choosing Yes reveals one masked key field plus the lock reassurance", async () => {
+    await render();
+    await gotoLinkFrame(container, "https://www.example.com/actions");
+
+    // No key field while No is selected.
+    expect(
+      Array.from(container.querySelectorAll<HTMLInputElement>("input")).some(
+        (i) => i.type === "password",
+      ),
+    ).toBe(false);
+
+    await act(async () => {
+      buttonByText("Yes")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    const passwordInputs = Array.from(
+      container.querySelectorAll<HTMLInputElement>("input"),
+    ).filter((i) => i.type === "password");
+    expect(passwordInputs).toHaveLength(1);
+    expect(container.textContent).toContain("Your key is stored securely.");
+
+    await act(async () => setInputValue(passwordInputs[0], "secret-key"));
+    await flushReact();
+
+    await act(async () => {
+      buttonByText("Check link")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(connectAppMock).toHaveBeenCalledTimes(1);
+    const [, input] = connectAppMock.mock.calls[0];
+    expect(input.credentialValues).toEqual({ "credentials.authorization": "secret-key" });
+  });
+
+  it("a Zapier MCP URL stays in the URL flow and includes its token in the submitted link", async () => {
+    await render();
+
+    const linkInput = Array.from(
+      container.querySelectorAll<HTMLInputElement>("input"),
+    ).find((i) => i.getAttribute("placeholder")?.startsWith("https://"));
+    const zapierUrl = "https://mcp.zapier.com/api/v1/connect?token=secret-token";
+    await act(async () => setInputValue(linkInput!, zapierUrl));
+    await flushReact();
+
+    expect(container.textContent).toContain("This looks like Zapier.");
+
+    await act(async () => {
+      buttonByText("Continue")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(container.textContent).toContain("Connect with a link");
+    expect(container.textContent).toContain(zapierUrl);
+    expect(nameInputFrom(container)?.value).toBe("Zapier");
+    expect(container.querySelector('input[type="password"]')).toBeNull();
+
+    await act(async () => {
+      buttonByText("Check link")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(connectAppMock).toHaveBeenCalledTimes(1);
+    expect(connectAppMock.mock.calls[0]?.[1]).toMatchObject({ link: zapierUrl, name: "Zapier" });
+    expect(connectAppMock.mock.calls[0]?.[1].credentialValues).toBeUndefined();
+  });
+
+  it("keeps Zapier visible and uses the compact agent multi-selector throughout its wizard", async () => {
+    mockSearch.value = "byo=1&source=zapier";
+    listGalleryMock.mockResolvedValueOnce({
+      apps: [
+        {
+          key: "zapier",
+          name: "Zapier",
+          tagline: "Automate things",
+          authKind: "api_key",
+          urlPatterns: ["https://zapier.com/*", "https://*.zapier.com/*"],
+          logoUrl: "https://example.com/zapier.png",
+          credentialFields: [],
+        },
+      ],
+    });
+    connectAppMock.mockResolvedValueOnce({
+      connectionId: "conn-1",
+      application: { id: "app-1", name: "Zapier" },
+      actions: {
+        readOnly: [
+          {
+            catalogEntryId: "action-1",
+            toolName: "find_record",
+            title: "Find record",
+            description: "Find a record.",
+            riskLevel: "read",
+          },
+        ],
+        canMakeChanges: [],
+      },
+      catalog: [],
+      suggestedDefaults: {},
+    });
+    await render();
+
+    expect(container.textContent).toContain("Step 1 of 4");
+    expect(container.textContent).toContain("Connect Zapier");
+    expect(container.textContent).toContain("Add MCP URL");
+    expect(container.querySelector('img[src="https://example.com/zapier.png"]')).toBeTruthy();
+    expect(container.textContent).not.toContain("Pick the app you want your agents to use.");
+    expect(container.textContent).not.toContain("More ways to connect");
+
+    const linkInput = container.querySelector<HTMLInputElement>(
+      'input[placeholder^="https://mcp.zapier.com"]',
+    );
+    const zapierUrl = "https://mcp.zapier.com/api/v1/connect?token=secret-token";
+    await act(async () => setInputValue(linkInput!, zapierUrl));
+    await flushReact();
+
+    await act(async () => {
+      buttonByText("Check link")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(connectAppMock).toHaveBeenCalledTimes(1);
+    expect(connectAppMock.mock.calls[0]?.[1]).toMatchObject({ link: zapierUrl, name: "Zapier" });
+    expect(container.textContent).toContain("Step 2 of 4");
+    expect(container.querySelector('img[src="https://example.com/zapier.png"]')).toBeTruthy();
+
+    await act(async () => {
+      buttonByText("Continue with 1 action on")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(container.textContent).toContain("Step 3 of 4");
+    expect(container.querySelector('img[src="https://example.com/zapier.png"]')).toBeTruthy();
+
+    await act(async () => {
+      buttonContaining("Only specific agents")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(container.textContent).toContain("Select agents");
+    expect(container.textContent).not.toContain("Ada");
+    expect(container.textContent).not.toContain("Grace");
+
+    await act(async () => {
+      buttonByText("Select agents")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(document.body.textContent).toContain("Ada");
+    expect(document.body.textContent).toContain("Grace");
+
+    const adaCheckbox = document.body.querySelector<HTMLElement>('[aria-label="Allow Ada"]');
+    await act(async () => {
+      adaCheckbox?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+    await act(async () => {
+      buttonByText("Done")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(container.textContent).toContain("1 agent selected");
+    expect(container.textContent).not.toContain("Grace");
+
+    await act(async () => {
+      buttonByText("Continue to install")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(container.textContent).toContain("Step 4 of 4");
+    expect(container.textContent).toContain("Install Zapier tools?");
+    expect(container.textContent).toContain("Not yet");
+
+    await act(async () => {
+      buttonContaining("Specific agents")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(container.textContent).toContain("1 agent selected");
+    await act(async () => {
+      buttonByText("Finish setup")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(finishAppMock).toHaveBeenCalledWith("company-1", "conn-1", {
+      enabledCatalogEntryIds: ["action-1"],
+      askFirstCatalogEntryIds: [],
+      access: { agentIds: ["agent-1"] },
+    });
+    expect(putConnectionInstallsMock).toHaveBeenCalledWith("conn-1", [
+      { targetType: "agent", targetId: "agent-1" },
+    ]);
+  });
+
+  // PAP-10922: "Run your own" / "Paste a config" moved from the sidebar to rows
+  // under "Connect with a link" on the gallery step.
+  it("offers 'Run your own' and 'Paste a config' rows that route into the Advanced door", async () => {
+    await render();
+
+    expect(container.textContent).toContain("More ways to connect");
+
+    const buttonContaining = (text: string) =>
+      Array.from(container.querySelectorAll("button")).find((b) =>
+        b.textContent?.includes(text),
+      );
+
+    await act(async () => {
+      buttonContaining("Run your own")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    expect(mockNavigate).toHaveBeenCalledWith("/apps/advanced");
+
+    await act(async () => {
+      buttonContaining("Paste a config")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    expect(mockNavigate).toHaveBeenCalledWith("/apps/advanced/paste-config");
+  });
+
+  // PAP-11091: discoverability copy for remote MCP URLs — the link field
+  // advertises that any remote tool URL (incl. a local MCP server) works. Per
+  // the UX re-review, the localhost example lives in the body copy (legible at
+  // every viewport) rather than the placeholder, which truncated on mobile.
+  it("advertises that remote/local MCP URLs work under 'Connect with a link'", async () => {
+    await render();
+
+    expect(container.textContent).toContain(
+      "Any remote tool URL works here — including a local MCP server like",
+    );
+    expect(container.textContent).toContain("http://127.0.0.1:8848/mcp");
+    const linkInput = Array.from(container.querySelectorAll<HTMLInputElement>("input")).find((i) =>
+      i.getAttribute("placeholder")?.startsWith("https://example.com/actions"),
+    );
+    // Placeholder stays a single, short example so it never truncates.
+    expect(linkInput?.getAttribute("placeholder")).toBe("https://example.com/actions");
+  });
+
+  // Reconnect from the app page: ?link/?name/?applicationId prefill skips the
+  // gallery and re-attaches the connection to the existing application.
+  it("prefills the link frame from search params and passes applicationId to connect", async () => {
+    mockSearch.value =
+      "link=https%3A%2F%2Fwww.example.com%2Factions&name=Bla&applicationId=app-77";
+    await render();
+
+    expect(container.textContent).toContain("Connect with a link");
+    expect(container.textContent).toContain("https://www.example.com/actions");
+    const nameInput = Array.from(container.querySelectorAll<HTMLInputElement>("input")).find(
+      (i) => i.getAttribute("placeholder") === "My app",
+    );
+    expect(nameInput?.value).toBe("Bla");
+
+    await act(async () => {
+      buttonByText("Check link")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(connectAppMock).toHaveBeenCalledTimes(1);
+    const [, input] = connectAppMock.mock.calls[0];
+    expect(input).toMatchObject({
+      link: "https://www.example.com/actions",
+      name: "Bla",
+      applicationId: "app-77",
+    });
+  });
+
+  it("shows the Google Sheets robot email and keeps empty sheet links from continuing", async () => {
+    listGalleryMock.mockResolvedValueOnce({
+      apps: [
+        {
+          key: "google-sheets",
+          name: "Google Sheets",
+          tagline: "Read and update selected spreadsheets.",
+          authKind: "none",
+          urlPatterns: ["https://docs.google.com/spreadsheets/*"],
+          logoUrl: "https://example.com/sheets.png",
+          credentialFields: [],
+          availability: { available: true, robotEmail: "robot@paperclip.iam.gserviceaccount.com" },
+        },
+      ],
+    });
+    await render();
+
+    await act(async () => {
+      buttonContaining("Google Sheets")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(container.textContent).toContain("Share each sheet with this email");
+    expect(container.textContent).toContain("robot@paperclip.iam.gserviceaccount.com");
+    expect(container.textContent).toContain(
+      "In Google Sheets, click Share and add this email as an Editor. Then paste the sheet links below.",
+    );
+    expect(buttonByText("Connect")?.disabled).toBe(true);
+  });
+
+  it("shows inline validation for invalid Google Sheets links", async () => {
+    listGalleryMock.mockResolvedValueOnce({
+      apps: [
+        {
+          key: "google-sheets",
+          name: "Google Sheets",
+          tagline: "Read and update selected spreadsheets.",
+          authKind: "none",
+          urlPatterns: ["https://docs.google.com/spreadsheets/*"],
+          logoUrl: "https://example.com/sheets.png",
+          credentialFields: [],
+          availability: { available: true, robotEmail: "robot@paperclip.iam.gserviceaccount.com" },
+        },
+      ],
+    });
+    await render();
+
+    await act(async () => {
+      buttonContaining("Google Sheets")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+    const textarea = container.querySelector<HTMLTextAreaElement>("textarea");
+    await act(async () => setTextareaValue(textarea!, "https://example.com/not-a-sheet"));
+    await flushReact();
+    await act(async () => {
+      buttonByText("Connect")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(container.textContent).toContain("That doesn't look like a Google Sheets link.");
+    expect(connectAppMock).not.toHaveBeenCalled();
+  });
+
+  // PAP-11283: the gallery step exposes a Name field (default = app name) so a
+  // connection can be named at create time, matching the link flow.
+  function nameInputFrom(root: HTMLDivElement): HTMLInputElement | undefined {
+    return Array.from(root.querySelectorAll<HTMLInputElement>("input")).find(
+      (i) => i.getAttribute("placeholder") === "My app",
+    );
+  }
+
+  it("gallery key step defaults the Name field to the app name", async () => {
+    await render();
+
+    await act(async () => {
+      buttonContaining("Zapier")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(container.textContent).toContain("Connect Zapier");
+    expect(nameInputFrom(container)?.value).toBe("Zapier");
+    expect(mockNavigate).toHaveBeenCalledWith("/apps/connect?byo=1&appKey=zapier&stage=setup");
+  });
+
+  it("returns from an app key step to the BYO gallery", async () => {
+    mockSearch.value = "byo=1";
+    mockParams.appKey = "zapier";
+    await render();
+
+    await act(async () => {
+      buttonByText("Back")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+
+    expect(mockNavigate).toHaveBeenCalledWith("/apps/connect?byo=1");
+  });
+
+  it("leaving the default name connects with the app name", async () => {
+    await render();
+
+    await act(async () => {
+      buttonContaining("Zapier")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    const keyField = container.querySelector<HTMLInputElement>("input[type=password]");
+    await act(async () => setInputValue(keyField!, "secret-key"));
+    await flushReact();
+    await act(async () => {
+      buttonByText("Connect")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(connectAppMock).toHaveBeenCalledTimes(1);
+    expect(mockNavigate).toHaveBeenCalledWith("/apps/connect?byo=1&appKey=zapier&stage=actions");
+    const [, input] = connectAppMock.mock.calls[0];
+    expect(input).toMatchObject({ galleryKey: "zapier", name: "Zapier" });
+  });
+
+  it("a custom name in the gallery step is sent to the connect mutation", async () => {
+    await render();
+
+    await act(async () => {
+      buttonContaining("Zapier")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    await act(async () => setInputValue(nameInputFrom(container)!, "Zapier (stdio smoke)"));
+    const keyField = container.querySelector<HTMLInputElement>("input[type=password]");
+    await act(async () => setInputValue(keyField!, "secret-key"));
+    await flushReact();
+    await act(async () => {
+      buttonByText("Connect")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(connectAppMock).toHaveBeenCalledTimes(1);
+    const [, input] = connectAppMock.mock.calls[0];
+    expect(input).toMatchObject({ galleryKey: "zapier", name: "Zapier (stdio smoke)" });
+  });
+
+  it("a custom name on the Google Sheets step is sent to the connect mutation", async () => {
+    listGalleryMock.mockResolvedValueOnce({
+      apps: [
+        {
+          key: "google-sheets",
+          name: "Google Sheets",
+          tagline: "Read and update selected spreadsheets.",
+          authKind: "none",
+          urlPatterns: ["https://docs.google.com/spreadsheets/*"],
+          logoUrl: "https://example.com/sheets.png",
+          credentialFields: [],
+          availability: { available: true, robotEmail: "robot@paperclip.iam.gserviceaccount.com" },
+        },
+      ],
+    });
+    await render();
+
+    await act(async () => {
+      buttonContaining("Google Sheets")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    // Default is the app name.
+    expect(nameInputFrom(container)?.value).toBe("Google Sheets");
+    await act(async () => setInputValue(nameInputFrom(container)!, "Google Sheets (stdio smoke)"));
+    const textarea = container.querySelector<HTMLTextAreaElement>("textarea");
+    await act(async () =>
+      setTextareaValue(textarea!, "https://docs.google.com/spreadsheets/d/sheet_123/edit"),
+    );
+    await flushReact();
+    await act(async () => {
+      buttonByText("Connect")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(connectAppMock).toHaveBeenCalledTimes(1);
+    const [, input] = connectAppMock.mock.calls[0];
+    expect(input).toMatchObject({
+      galleryKey: "google-sheets",
+      name: "Google Sheets (stdio smoke)",
+      configValues: { allowedSpreadsheetIds: ["sheet_123"] },
+    });
+  });
+
+  it("passes parsed Google Sheets IDs as connection config values", async () => {
+    listGalleryMock.mockResolvedValueOnce({
+      apps: [
+        {
+          key: "google-sheets",
+          name: "Google Sheets",
+          tagline: "Read and update selected spreadsheets.",
+          authKind: "none",
+          urlPatterns: ["https://docs.google.com/spreadsheets/*"],
+          logoUrl: "https://example.com/sheets.png",
+          credentialFields: [],
+          availability: { available: true, robotEmail: "robot@paperclip.iam.gserviceaccount.com" },
+        },
+      ],
+    });
+    await render();
+
+    await act(async () => {
+      buttonContaining("Google Sheets")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+    const textarea = container.querySelector<HTMLTextAreaElement>("textarea");
+    await act(async () =>
+      setTextareaValue(
+        textarea!,
+        "https://docs.google.com/spreadsheets/d/sheet_123/edit\nhttps://docs.google.com/spreadsheets/d/sheet_456",
+      )
+    );
+    await flushReact();
+    await act(async () => {
+      buttonByText("Connect")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(connectAppMock).toHaveBeenCalledTimes(1);
+    const [, input] = connectAppMock.mock.calls[0];
+    expect(input).toMatchObject({
+      galleryKey: "google-sheets",
+      configValues: { allowedSpreadsheetIds: ["sheet_123", "sheet_456"] },
+    });
+  });
+});
diff --git a/ui/src/pages/apps/AppsConnect.tsx b/ui/src/pages/apps/AppsConnect.tsx
new file mode 100644
index 00000000000..227f68ff227
--- /dev/null
+++ b/ui/src/pages/apps/AppsConnect.tsx
@@ -0,0 +1,1645 @@
+import { useEffect, useMemo, useRef, useState } from "react";
+import { useMutation, useQuery } from "@tanstack/react-query";
+import {
+  ArrowUpRight,
+  Check,
+  ChevronRight,
+  Copy,
+  ClipboardPaste,
+  Link2,
+  Loader2,
+  Lock,
+  Search,
+  TerminalSquare,
+} from "lucide-react";
+import type { LucideIcon } from "lucide-react";
+import type {
+  Agent,
+  AppGalleryEntry,
+  ConnectToolAppResult,
+  ToolAppConnectionActionSummary,
+} from "@paperclipai/shared";
+import { getToolAppGalleryEntryForUrl } from "@paperclipai/shared";
+import { useNavigate, useParams, useSearchParams } from "@/lib/router";
+import { useCompany } from "@/context/CompanyContext";
+import { useBreadcrumbs } from "@/context/BreadcrumbContext";
+import { useToast } from "@/context/ToastContext";
+import { queryKeys } from "@/lib/queryKeys";
+import { ApiError } from "@/api/client";
+import { toolsApi } from "@/api/tools";
+import { agentsApi } from "@/api/agents";
+import { appCopyFor, credentialFieldLabel } from "@/lib/app-gallery-copy";
+import { advancedTabHref } from "@/pages/tools/tool-tabs";
+import { AgentIcon } from "@/components/AgentIconPicker";
+import { AgentMultiSelect } from "@/components/AgentMultiSelect";
+import { InlineBanner } from "@/components/InlineBanner";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { Textarea } from "@/components/ui/textarea";
+import { ToggleSwitch } from "@/components/ui/toggle-switch";
+import { Skeleton } from "@/components/ui/skeleton";
+import { cn } from "@/lib/utils";
+import { AppLogo } from "./AppLogo";
+import { parseGoogleSheetIds } from "./google-sheets";
+import { autoExtendNotice, INSTALL_ALL_WARNING, installInfoNotice, installPayload } from "@/lib/tool-installs";
+
+type Step = "gallery" | "key" | "actions" | "who" | "install" | "success";
+
+const ROUTE_STAGE_BY_STEP: Partial<Record<Step, string>> = {
+  key: "setup",
+  actions: "actions",
+  who: "access",
+  install: "install",
+  success: "complete",
+};
+
+function appConnectHref(appKey: string, step: Step): string {
+  const stage = ROUTE_STAGE_BY_STEP[step] ?? "setup";
+  const params = new URLSearchParams({ byo: "1", appKey, stage });
+  return `/apps/connect?${params.toString()}`;
+}
+type AppAccessSelection = "all_agents" | { agentIds: string[] };
+type InstallMode = "none" | "specific" | "all";
+const LINK_CREDENTIAL_CONFIG_PATH = "credentials.authorization";
+
+const STEP_LABELS = ["Pick app", "Add your key", "Choose actions", "Choose access", "Install tools"];
+const STEP_INDEX: Record<Exclude<Step, "success">, number> = {
+  gallery: 0,
+  key: 1,
+  actions: 2,
+  who: 3,
+  install: 4,
+};
+const ZAPIER_STEP_INDEX: Record<Exclude<Step, "gallery" | "success">, number> = {
+  key: 0,
+  actions: 1,
+  who: 2,
+  install: 3,
+};
+const ZAPIER_STEP_LABELS = ["Add MCP URL", "Choose actions", "Choose access", "Install tools"];
+
+function askFirstLevelsFrom(result: ConnectToolAppResult): string[] {
+  const raw = (result.suggestedDefaults as { askFirstRiskLevels?: unknown })?.askFirstRiskLevels;
+  return Array.isArray(raw) ? raw.filter((x): x is string => typeof x === "string") : ["write", "destructive"];
+}
+
+function isGoogleSheetsEntry(entry: AppGalleryEntry | null): boolean {
+  return entry?.key === "google-sheets";
+}
+
+export function AppsConnect() {
+  const navigate = useNavigate();
+  const routeParams = useParams<{ appKey?: string }>();
+  const { selectedCompany, selectedCompanyId } = useCompany();
+  const { setBreadcrumbs } = useBreadcrumbs();
+  const { pushToast } = useToast();
+  const [searchParams] = useSearchParams();
+  const appKey = routeParams.appKey ?? searchParams.get("appKey") ?? undefined;
+  const zapierSource = searchParams.get("source") === "zapier";
+
+  // Prefill arrives from the app page for reconnects; read once so later
+  // wizard navigation doesn't fight the URL.
+  const [prefill] = useState(() => {
+    const rawLink = searchParams.get("link")?.trim() ?? "";
+    return {
+      link: /^https?:\/\//i.test(rawLink) ? rawLink : "",
+      name: searchParams.get("name")?.trim() ?? "",
+      applicationId: searchParams.get("applicationId")?.trim() || undefined,
+    };
+  });
+
+  const [step, setStep] = useState<Step>(appKey || prefill.link || zapierSource ? "key" : "gallery");
+  const [entry, setEntry] = useState<AppGalleryEntry | null>(null);
+  const [galleryName, setGalleryName] = useState("");
+  const [linkUrl, setLinkUrl] = useState(prefill.link);
+  const [linkName, setLinkName] = useState(prefill.name || (zapierSource ? "Zapier" : ""));
+  const [linkNeedsKey, setLinkNeedsKey] = useState(false);
+  const [linkKey, setLinkKey] = useState("");
+  const [credentials, setCredentials] = useState<Record<string, string>>({});
+  const [googleSheetsLinks, setGoogleSheetsLinks] = useState("");
+  const [googleSheetsError, setGoogleSheetsError] = useState<string | null>(null);
+  const [connectResult, setConnectResult] = useState<ConnectToolAppResult | null>(null);
+  const [enabled, setEnabled] = useState<Record<string, boolean>>({});
+  const [access, setAccess] = useState<"all" | "specific">("all");
+  const [agentIds, setAgentIds] = useState<Set<string>>(new Set());
+  const [installMode, setInstallMode] = useState<InstallMode>("none");
+  const [installAgentIds, setInstallAgentIds] = useState<Set<string>>(new Set());
+
+  const openGallery = () => {
+    setEntry(null);
+    setGalleryName("");
+    setLinkUrl("");
+    setLinkName("");
+    setLinkNeedsKey(false);
+    setLinkKey("");
+    setCredentials({});
+    setGoogleSheetsLinks("");
+    setGoogleSheetsError(null);
+    setConnectResult(null);
+    setInstallMode("none");
+    setInstallAgentIds(new Set());
+    setStep("gallery");
+    navigate("/apps/connect?byo=1");
+  };
+
+  useEffect(() => {
+    setBreadcrumbs([
+      { label: selectedCompany?.name ?? "Company", href: "/dashboard" },
+      { label: "Apps", href: "/apps" },
+      { label: "Connect an app" },
+    ]);
+    return () => setBreadcrumbs([]);
+  }, [setBreadcrumbs, selectedCompany?.name]);
+
+  const galleryQuery = useQuery({
+    queryKey: queryKeys.apps.gallery(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listGallery(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+
+  useEffect(() => {
+    if (!appKey || galleryQuery.isLoading || !galleryQuery.data) return;
+
+    const requestedEntry = galleryQuery.data.apps.find((candidate) => candidate.key === appKey);
+    if (!requestedEntry || requestedEntry.authKind === "oauth" || requestedEntry.availability?.available === false) {
+      setEntry(null);
+      setStep("gallery");
+      navigate("/apps/connect", { replace: true });
+      return;
+    }
+
+    if (entry?.key !== requestedEntry.key) {
+      setEntry(requestedEntry);
+      setGalleryName(requestedEntry.name);
+      setLinkUrl("");
+      setLinkName("");
+      setLinkNeedsKey(false);
+      setLinkKey("");
+      setCredentials({});
+      setGoogleSheetsLinks("");
+      setGoogleSheetsError(null);
+      setConnectResult(null);
+    }
+    setInstallMode("none");
+    setInstallAgentIds(new Set());
+    setStep("key");
+  }, [appKey, entry?.key, galleryQuery.data, galleryQuery.isLoading, navigate]);
+
+  const setAppStep = (nextStep: Step) => {
+    setStep(nextStep);
+    if (entry) navigate(appConnectHref(entry.key, nextStep));
+  };
+
+  const connectMutation = useMutation({
+    mutationFn: () => {
+      if (entry) {
+        const sheetIds = isGoogleSheetsEntry(entry) ? parseGoogleSheetIds(googleSheetsLinks).ids : [];
+        const trimmedGalleryName = galleryName.trim();
+        return toolsApi.connectApp(selectedCompanyId!, {
+          galleryKey: entry.key,
+          name: trimmedGalleryName || undefined,
+          credentialValues: credentials,
+          configValues: isGoogleSheetsEntry(entry) ? { allowedSpreadsheetIds: sheetIds } : undefined,
+          applicationId: prefill.applicationId,
+        });
+      }
+      const trimmedKey = linkNeedsKey ? linkKey.trim() : "";
+      const trimmedName = linkName.trim();
+      return toolsApi.connectApp(selectedCompanyId!, {
+        link: linkUrl,
+        name: trimmedName || undefined,
+        credentialValues: trimmedKey ? { [LINK_CREDENTIAL_CONFIG_PATH]: trimmedKey } : undefined,
+        applicationId: prefill.applicationId,
+      });
+    },
+    onSuccess: (result) => {
+      setConnectResult(result);
+      const defaults: Record<string, boolean> = {};
+      for (const a of result.actions.readOnly) defaults[a.catalogEntryId] = true;
+      for (const a of result.actions.canMakeChanges) defaults[a.catalogEntryId] = false;
+      setEnabled(defaults);
+      setInstallMode("none");
+      setInstallAgentIds(new Set());
+      setAppStep("actions");
+    },
+    onError: (error) => {
+      const details = error instanceof ApiError && error.body && typeof error.body === "object"
+        ? (error.body as { details?: { code?: unknown } }).details
+        : null;
+      const oauthRequired = details?.code === "oauth_challenge";
+      pushToast({
+        title: oauthRequired ? "Sign-in required" : "Couldn’t connect",
+        body: oauthRequired
+          ? "This app needs you to sign in - coming soon."
+          : error instanceof Error
+            ? error.message
+            : "Please check your key and try again.",
+        tone: "error",
+      });
+    },
+  });
+
+  const finishMutation = useMutation({
+    mutationFn: async () => {
+      const askFirstLevels = connectResult ? askFirstLevelsFrom(connectResult) : [];
+      const changeActions = connectResult?.actions.canMakeChanges ?? [];
+      const enabledIds = Object.entries(enabled)
+        .filter(([, on]) => on)
+        .map(([id]) => id);
+      const askFirstIds = changeActions
+        .filter((a) => enabled[a.catalogEntryId] && askFirstLevels.includes(a.riskLevel))
+        .map((a) => a.catalogEntryId);
+      const selection: AppAccessSelection =
+        access === "all" ? "all_agents" : { agentIds: Array.from(agentIds) };
+      const result = await toolsApi.finishApp(selectedCompanyId!, connectResult!.connectionId, {
+        enabledCatalogEntryIds: enabledIds,
+        askFirstCatalogEntryIds: askFirstIds,
+        access: selection,
+      });
+      const installState = installMode === "all"
+        ? { onAll: true, agentIds: new Set<string>() }
+        : { onAll: false, agentIds: installMode === "specific" ? installAgentIds : new Set<string>() };
+      await toolsApi.putConnectionInstalls(
+        connectResult!.connectionId,
+        installPayload(selectedCompanyId!, installState),
+      );
+      return result;
+    },
+    onSuccess: () => setAppStep("success"),
+    onError: (error) => {
+      pushToast({
+        title: "Couldn’t finish setup",
+        body: error instanceof Error ? error.message : "Please try again.",
+        tone: "error",
+      });
+    },
+  });
+
+  if (!selectedCompanyId) {
+    return <div className="p-6 text-sm text-muted-foreground">Select a company to connect apps.</div>;
+  }
+
+  const appName =
+    connectResult?.application.name ??
+    entry?.name ??
+    (linkName.trim() || defaultLinkName(linkUrl) || "this app");
+  const zapierEntry = zapierSource
+    ? galleryQuery.data?.apps.find((app) => app.key === "zapier") ?? null
+    : null;
+  const stepLabels = zapierSource
+    ? ZAPIER_STEP_LABELS
+    : isGoogleSheetsEntry(entry)
+      ? ["Pick app", "Share sheet", "Choose actions", "Choose access", "Install tools"]
+      : STEP_LABELS;
+  const stepIndex = zapierSource && step !== "gallery" && step !== "success"
+    ? ZAPIER_STEP_INDEX[step]
+    : step === "success"
+      ? stepLabels.length
+      : STEP_INDEX[step];
+
+  return (
+    <div className="max-w-5xl">
+      {step !== "success" && (
+        <StepHeader
+          subtitle={
+            step === "gallery"
+              ? "Pick the app you want your agents to use."
+              : `Step ${stepIndex + 1} of ${stepLabels.length}`
+          }
+          step={step}
+          activeIndex={stepIndex}
+          labels={stepLabels}
+          appIdentity={
+            zapierSource
+              ? { name: "Zapier", logoUrl: zapierEntry?.logoUrl ?? null }
+              : undefined
+          }
+          onCancel={() => navigate(zapierSource ? "/apps/browse" : "/apps")}
+        />
+      )}
+
+      {step === "gallery" && (
+        <GalleryStep
+          loading={galleryQuery.isLoading}
+          apps={galleryQuery.data?.apps ?? []}
+          byo={searchParams.get("byo") === "1"}
+          source={searchParams.get("source")}
+          onPick={(picked) => {
+            setEntry(picked);
+            setGalleryName(picked.name);
+            setLinkUrl("");
+            setLinkName("");
+            setLinkNeedsKey(false);
+            setLinkKey("");
+            setCredentials({});
+            setGoogleSheetsLinks("");
+            setGoogleSheetsError(null);
+            setConnectResult(null);
+            setInstallMode("none");
+            setInstallAgentIds(new Set());
+            setStep("key");
+            navigate(appConnectHref(picked.key, "key"));
+          }}
+          onUseLink={(url) => {
+            const matchedEntry = getToolAppGalleryEntryForUrl(url, galleryQuery.data?.apps ?? []);
+            setEntry(null);
+            setGalleryName("");
+            setLinkUrl(url);
+            setLinkName(matchedEntry?.name ?? defaultLinkName(url) ?? "");
+            setLinkNeedsKey(false);
+            setLinkKey("");
+            setCredentials({});
+            setGoogleSheetsLinks("");
+            setGoogleSheetsError(null);
+            setInstallMode("none");
+            setInstallAgentIds(new Set());
+            setStep("key");
+          }}
+          onRunYourOwn={() => navigate(advancedTabHref("run-your-own"))}
+          onPasteConfig={() => navigate(advancedTabHref("paste-config"))}
+        />
+      )}
+
+      {step === "key" && entry && (
+        <KeyStep
+          entry={entry}
+          name={galleryName}
+          onNameChange={setGalleryName}
+          values={credentials}
+          onChange={setCredentials}
+          googleSheetsLinks={googleSheetsLinks}
+          googleSheetsError={googleSheetsError}
+          onGoogleSheetsLinksChange={(next) => {
+            setGoogleSheetsLinks(next);
+            setGoogleSheetsError(null);
+          }}
+          submitting={connectMutation.isPending}
+          onBack={openGallery}
+          onConnect={() => {
+            if (isGoogleSheetsEntry(entry)) {
+              const parsed = parseGoogleSheetIds(googleSheetsLinks);
+              if (parsed.invalidCount > 0) {
+                setGoogleSheetsError("That doesn't look like a Google Sheets link.");
+                return;
+              }
+              if (parsed.ids.length === 0) {
+                setGoogleSheetsError("Paste at least one Google Sheets link.");
+                return;
+              }
+            }
+            connectMutation.mutate();
+          }}
+        />
+      )}
+
+      {step === "key" && !entry && linkUrl && !zapierSource && (
+        <LinkConnectStep
+          link={linkUrl}
+          name={linkName}
+          onNameChange={setLinkName}
+          needsKey={linkNeedsKey}
+          onNeedsKeyChange={(next) => {
+            setLinkNeedsKey(next);
+            if (!next) setLinkKey("");
+          }}
+          keyValue={linkKey}
+          onKeyChange={setLinkKey}
+          submitting={connectMutation.isPending}
+          onBack={() => setStep("gallery")}
+          onConnect={() => connectMutation.mutate()}
+        />
+      )}
+
+      {step === "key" && !entry && zapierSource && (
+        <ZapierConnectStep
+          link={linkUrl}
+          onLinkChange={setLinkUrl}
+          submitting={connectMutation.isPending}
+          onBack={() => navigate("/apps/browse")}
+          onConnect={() => connectMutation.mutate()}
+        />
+      )}
+
+      {step === "actions" && connectResult && (
+        <ActionsStep
+          appName={appName}
+          result={connectResult}
+          enabled={enabled}
+          onToggle={(id, on) => setEnabled((prev) => ({ ...prev, [id]: on }))}
+          onBulk={(ids, on) =>
+            setEnabled((prev) => {
+              const next = { ...prev };
+              for (const id of ids) next[id] = on;
+              return next;
+            })
+          }
+          onBack={() => setAppStep("key")}
+          onContinue={() => setAppStep("who")}
+        />
+      )}
+
+      {step === "who" && connectResult && (
+        <WhoStep
+          appName={appName}
+          companyId={selectedCompanyId}
+          access={access}
+          setAccess={setAccess}
+          agentIds={agentIds}
+          setAgentIds={setAgentIds}
+          onBack={() => setAppStep("actions")}
+          onContinue={() => setAppStep("install")}
+        />
+      )}
+
+      {step === "install" && connectResult && (
+        <InstallStep
+          appName={appName}
+          companyId={selectedCompanyId}
+          access={access}
+          accessAgentIds={agentIds}
+          installMode={installMode}
+          setInstallMode={setInstallMode}
+          installAgentIds={installAgentIds}
+          setInstallAgentIds={setInstallAgentIds}
+          submitting={finishMutation.isPending}
+          onBack={() => setAppStep("who")}
+          onFinish={() => finishMutation.mutate()}
+        />
+      )}
+
+      {step === "success" && (
+        <SuccessStep
+          appName={appName}
+          logoUrl={entry?.logoUrl}
+          enabledCount={Object.values(enabled).filter(Boolean).length}
+          access={access}
+          installMode={installMode}
+          installCount={installAgentIds.size}
+          onDone={() => navigate("/apps")}
+        />
+      )}
+    </div>
+  );
+}
+
+function StepHeader({
+  subtitle,
+  step,
+  activeIndex,
+  labels,
+  appIdentity,
+  onCancel,
+}: {
+  subtitle: string;
+  step: Step;
+  activeIndex: number;
+  labels: string[];
+  appIdentity?: { name: string; logoUrl: string | null };
+  onCancel: () => void;
+}) {
+  return (
+    <div className="mb-6">
+      <div className="flex items-start justify-between gap-4">
+        <div className="flex items-center gap-3">
+          {appIdentity ? (
+            <AppLogo name={appIdentity.name} logoUrl={appIdentity.logoUrl} size={44} />
+          ) : null}
+          <div>
+            <h1 className="text-2xl font-bold tracking-tight">
+              {appIdentity ? `Connect ${appIdentity.name}` : "Connect an app"}
+            </h1>
+            <p className="mt-1 text-sm text-muted-foreground">{subtitle}</p>
+          </div>
+        </div>
+        <Button variant="ghost" size="sm" onClick={onCancel}>
+          Cancel
+        </Button>
+      </div>
+      {step !== "gallery" && (
+        <div className="mt-4">
+          <div className="flex gap-2">
+            {labels.map((label, i) => (
+              <div
+                key={label}
+                className={cn("h-1 w-20 rounded-full", i <= activeIndex ? "bg-foreground" : "bg-border")}
+              />
+            ))}
+          </div>
+          <div className="mt-2 text-xs text-muted-foreground">{labels.join("   ·   ")}</div>
+        </div>
+      )}
+    </div>
+  );
+}
+
+function ZapierConnectStep({
+  link,
+  onLinkChange,
+  submitting,
+  onBack,
+  onConnect,
+}: {
+  link: string;
+  onLinkChange: (next: string) => void;
+  submitting: boolean;
+  onBack: () => void;
+  onConnect: () => void;
+}) {
+  const normalizedLink = normalizeAppLink(link);
+  const zapierHostname = normalizedLink ? new URL(normalizedLink).hostname : "";
+  const isZapierLink = zapierHostname === "zapier.com" || zapierHostname.endsWith(".zapier.com");
+
+  return (
+    <div className="mx-auto max-w-xl rounded-2xl border border-border bg-card p-8">
+      <div className="flex items-start gap-3">
+        <span className="mt-1 inline-flex h-10 w-10 shrink-0 items-center justify-center rounded-lg border border-border bg-background">
+          <Link2 className="h-5 w-5 text-muted-foreground" />
+        </span>
+        <div className="min-w-0">
+          <h2 className="text-xl font-bold tracking-tight">Connect Zapier</h2>
+          <p className="mt-1 text-sm text-muted-foreground">
+            Paste the complete MCP URL Zapier gives you, including its token.
+          </p>
+        </div>
+      </div>
+
+      <div className="mt-8">
+        <label className="text-sm font-medium text-foreground">Zapier MCP URL</label>
+        <Input
+          value={link}
+          onChange={(event) => onLinkChange(event.target.value)}
+          onKeyDown={(event) => {
+            if (event.key === "Enter" && isZapierLink && !submitting) onConnect();
+          }}
+          placeholder="https://mcp.zapier.com/api/v1/connect?token=…"
+          className="mt-2 h-11"
+          autoFocus
+        />
+        <p className="mt-2 text-xs text-muted-foreground">
+          The token is part of the URL. Paperclip stores it securely and checks the connection before enabling actions.
+        </p>
+        {link.trim() && !isZapierLink && (
+          <p className="mt-2 text-xs text-destructive">Paste a valid Zapier URL to continue.</p>
+        )}
+      </div>
+
+      <div className="mt-8 flex items-center justify-between">
+        <Button variant="ghost" onClick={onBack} disabled={submitting}>
+          Back
+        </Button>
+        <Button onClick={onConnect} disabled={submitting || !isZapierLink}>
+          {submitting && <Loader2 className="mr-2 h-4 w-4 animate-spin" />}
+          {submitting ? "Checking…" : "Check link"}
+        </Button>
+      </div>
+    </div>
+  );
+}
+
+function GalleryStep({
+  loading,
+  apps,
+  byo = false,
+  source = null,
+  onPick,
+  onUseLink,
+  onRunYourOwn,
+  onPasteConfig,
+}: {
+  loading: boolean;
+  apps: AppGalleryEntry[];
+  /** Entered via the "Connect your own MCP server" card (PAP-12371, Finding C): focus the link path. */
+  byo?: boolean;
+  source?: string | null;
+  onPick: (entry: AppGalleryEntry) => void;
+  onUseLink: (link: string) => void;
+  onRunYourOwn: () => void;
+  onPasteConfig: () => void;
+}) {
+  const [search, setSearch] = useState("");
+  const [linkInput, setLinkInput] = useState("");
+  const [linkError, setLinkError] = useState<string | null>(null);
+  const linkSectionRef = useRef<HTMLDivElement>(null);
+  const linkInputRef = useRef<HTMLInputElement>(null);
+
+  // Arriving from the BYO card: scroll the "Connect with a link" section into
+  // view and focus its input so the paste-URL path is the obvious next step.
+  useEffect(() => {
+    if (!byo || loading) return;
+    linkSectionRef.current?.scrollIntoView({ block: "center" });
+    linkInputRef.current?.focus();
+  }, [byo, loading]);
+  const filtered = useMemo(() => {
+    const q = search.trim().toLowerCase();
+    if (!q) return apps;
+    return apps.filter((a) => a.name.toLowerCase().includes(q));
+  }, [apps, search]);
+  const normalizedLink = normalizeAppLink(linkInput);
+  const matchedEntry = normalizedLink ? getToolAppGalleryEntryForUrl(normalizedLink, apps) : null;
+  const zapierSource = source === "zapier";
+
+  const continueWithLink = () => {
+    const next = normalizeAppLink(linkInput);
+    if (!next) {
+      setLinkError("Paste a full http or https link.");
+      return;
+    }
+    setLinkError(null);
+    onUseLink(next);
+  };
+
+  if (loading) {
+    return (
+      <div className="grid grid-cols-2 gap-4 sm:grid-cols-3 lg:grid-cols-4">
+        {Array.from({ length: 8 }).map((_, i) => (
+          <Skeleton key={i} className="h-32 w-full rounded-xl" />
+        ))}
+      </div>
+    );
+  }
+
+  return (
+    <div className="space-y-6">
+      <div className="relative">
+        <Search className="pointer-events-none absolute left-3 top-1/2 h-4 w-4 -translate-y-1/2 text-muted-foreground" />
+        <Input
+          value={search}
+          onChange={(e) => setSearch(e.target.value)}
+          placeholder="Search apps…"
+          className="h-11 pl-9"
+        />
+      </div>
+
+      <div className="grid grid-cols-2 gap-4 sm:grid-cols-3 lg:grid-cols-4">
+        {filtered.map((app) => {
+          const copy = appCopyFor(app.key, app.tagline);
+          const oauth = app.authKind === "oauth";
+          const unavailable = app.availability?.available === false;
+          return (
+            <button
+              key={app.key}
+              type="button"
+              disabled={oauth || unavailable}
+              title={
+                unavailable
+                  ? `${app.name} isn't configured on this instance yet. Ask your Paperclip admin.`
+                  : undefined
+              }
+              onClick={() => onPick(app)}
+              className={cn(
+                "flex flex-col rounded-xl border border-border bg-card p-4 text-left transition-colors",
+                oauth || unavailable ? "cursor-not-allowed opacity-60" : "hover:border-foreground/30 hover:bg-accent/40",
+              )}
+            >
+              <AppLogo name={app.name} logoUrl={app.logoUrl} size={36} />
+              <div className="mt-3 text-sm font-bold text-foreground">{app.name}</div>
+              <div className="mt-1 line-clamp-2 text-xs text-muted-foreground">{copy.tagline}</div>
+              <div className="mt-3 text-xs font-semibold text-foreground">
+                {unavailable ? (
+                  <span className="text-muted-foreground">Not available on this instance - ask your admin.</span>
+                ) : oauth ? (
+                  <span className="text-muted-foreground">Sign-in coming soon</span>
+                ) : (
+                  <span>Connect →</span>
+                )}
+              </div>
+            </button>
+          );
+        })}
+      </div>
+
+      {filtered.length === 0 && (
+        <div className="py-10 text-center text-sm text-muted-foreground">No apps match “{search}”.</div>
+      )}
+
+      <div
+        ref={linkSectionRef}
+        className={cn(
+          "grid gap-4 border-t border-border pt-5 md:grid-cols-(--gtc-13)",
+          byo && "-mx-3 rounded-xl border border-primary/40 bg-primary/[0.04] px-3 pb-4 md:mx-0",
+        )}
+      >
+        <div>
+          <div className="flex items-center gap-2 text-sm font-semibold text-foreground">
+            <Link2 className="h-4 w-4 text-muted-foreground" />
+            {zapierSource ? "Connect Zapier" : byo ? "Connect your own MCP server" : "Connect with a link"}
+          </div>
+          <p className="mt-1 text-xs text-muted-foreground">
+            {zapierSource
+              ? "Paste the complete MCP URL Zapier gives you, including its token."
+              : byo
+              ? "Paste your MCP server’s URL and we’ll walk you through permissions and review."
+              : "Paste a setup link from an app that is not listed here."}
+          </p>
+          {!zapierSource && (
+            <p className="mt-1 text-xs text-muted-foreground">
+              Any remote tool URL works here — including a local MCP server like{" "}
+              <code className="rounded bg-muted px-1 py-0.5 text-xs">http://127.0.0.1:8848/mcp</code>.
+            </p>
+          )}
+          {matchedEntry && (
+            <div className="mt-3 flex items-center justify-between gap-3 rounded-lg border border-border bg-muted/40 px-3 py-2">
+              <div className="flex min-w-0 items-center gap-2 text-sm">
+                <AppLogo name={matchedEntry.name} logoUrl={matchedEntry.logoUrl} size={24} />
+                <span className="truncate">This looks like {matchedEntry.name}.</span>
+              </div>
+              <Button
+                type="button"
+                size="sm"
+                variant="outline"
+                disabled={matchedEntry.availability?.available === false}
+                onClick={() => {
+                  setLinkError(null);
+                  if (matchedEntry.key === "zapier") {
+                    continueWithLink();
+                    return;
+                  }
+                  onPick(matchedEntry);
+                }}
+              >
+                {matchedEntry.availability?.available === false
+                  ? "Not available"
+                  : matchedEntry.key === "zapier"
+                    ? "Continue"
+                    : `Use ${matchedEntry.name}`}
+              </Button>
+            </div>
+          )}
+        </div>
+        <div className="flex min-w-0 flex-col gap-2 sm:min-w-(--sz-360px)">
+          <div className="flex gap-2">
+            <Input
+              ref={linkInputRef}
+              value={linkInput}
+              onChange={(e) => {
+                setLinkInput(e.target.value);
+                setLinkError(null);
+              }}
+              onKeyDown={(e) => {
+                if (e.key === "Enter") continueWithLink();
+              }}
+              placeholder={zapierSource ? "https://mcp.zapier.com/api/v1/connect?token=…" : "https://example.com/actions"}
+              className="h-10"
+            />
+            <Button type="button" variant="outline" onClick={continueWithLink}>
+              Continue
+            </Button>
+          </div>
+          {linkError && <div className="text-xs text-destructive">{linkError}</div>}
+        </div>
+      </div>
+
+      <div className="border-t border-border pt-5">
+        <div className="text-sm font-semibold text-foreground">More ways to connect</div>
+        <p className="mt-1 text-xs text-muted-foreground">
+          For tools that aren’t in the gallery. You’ll need details from the tool’s docs.
+        </p>
+        <div className="mt-3 flex flex-col gap-2">
+          <ConnectMethodRow
+            icon={TerminalSquare}
+            title="Run your own"
+            description="Register a command Paperclip runs in your workspace for a tool that isn’t listed."
+            onClick={onRunYourOwn}
+          />
+          <ConnectMethodRow
+            icon={ClipboardPaste}
+            title="Paste a config"
+            description="Already have a setup snippet from a README? Paste it and we’ll connect it."
+            onClick={onPasteConfig}
+          />
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function ConnectMethodRow({
+  icon: Icon,
+  title,
+  description,
+  onClick,
+}: {
+  icon: LucideIcon;
+  title: string;
+  description: string;
+  onClick: () => void;
+}) {
+  return (
+    <button
+      type="button"
+      onClick={onClick}
+      className="flex w-full items-center gap-3 rounded-lg border border-border bg-card px-4 py-3 text-left transition-colors hover:border-foreground/30 hover:bg-accent/40"
+    >
+      <span className="inline-flex h-9 w-9 shrink-0 items-center justify-center rounded-lg border border-border bg-background">
+        <Icon className="h-4 w-4 text-muted-foreground" />
+      </span>
+      <div className="min-w-0 flex-1">
+        <div className="text-sm font-semibold text-foreground">{title}</div>
+        <div className="truncate text-xs text-muted-foreground">{description}</div>
+      </div>
+      <ChevronRight className="h-4 w-4 shrink-0 text-muted-foreground" />
+    </button>
+  );
+}
+
+function normalizeAppLink(value: string): string | null {
+  try {
+    const parsed = new URL(value.trim());
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") return null;
+    return parsed.toString();
+  } catch {
+    return null;
+  }
+}
+
+function defaultLinkName(link: string): string | null {
+  try {
+    return new URL(link).hostname.replace(/^www\./, "");
+  } catch {
+    return null;
+  }
+}
+
+function LinkConnectStep({
+  link,
+  name,
+  onNameChange,
+  needsKey,
+  onNeedsKeyChange,
+  keyValue,
+  onKeyChange,
+  submitting,
+  onBack,
+  onConnect,
+}: {
+  link: string;
+  name: string;
+  onNameChange: (next: string) => void;
+  needsKey: boolean;
+  onNeedsKeyChange: (next: boolean) => void;
+  keyValue: string;
+  onKeyChange: (next: string) => void;
+  submitting: boolean;
+  onBack: () => void;
+  onConnect: () => void;
+}) {
+  return (
+    <div className="mx-auto max-w-xl rounded-2xl border border-border bg-card p-8">
+      <div className="flex items-start gap-3">
+        <span className="mt-1 inline-flex h-10 w-10 shrink-0 items-center justify-center rounded-lg border border-border bg-background">
+          <Link2 className="h-5 w-5 text-muted-foreground" />
+        </span>
+        <div className="min-w-0">
+          <h2 className="text-xl font-bold tracking-tight">Connect with a link</h2>
+          <p className="mt-1 truncate text-sm text-muted-foreground">{link}</p>
+        </div>
+      </div>
+
+      <div className="mt-8 space-y-6">
+        <div>
+          <label className="text-sm font-medium text-foreground">Name</label>
+          <Input
+            value={name}
+            onChange={(e) => onNameChange(e.target.value)}
+            placeholder="My app"
+            className="mt-2 h-11"
+          />
+          <p className="mt-2 text-xs text-muted-foreground">
+            We filled this in from the link. Change it if you’d like.
+          </p>
+        </div>
+
+        <div>
+          <label className="text-sm font-medium text-foreground">Does it need a key?</label>
+          <div className="mt-2 inline-flex rounded-lg border border-border bg-muted/50 p-1">
+            <SegmentedOption
+              label="No"
+              selected={!needsKey}
+              onClick={() => onNeedsKeyChange(false)}
+            />
+            <SegmentedOption
+              label="Yes"
+              selected={needsKey}
+              onClick={() => onNeedsKeyChange(true)}
+            />
+          </div>
+          <p className="mt-2 text-xs text-muted-foreground">
+            {needsKey
+              ? "Paste the key this app gave you."
+              : "Most apps just work from the link — pick Yes only if the app gave you a key."}
+          </p>
+        </div>
+
+        {needsKey && (
+          <div className="space-y-4">
+            <div>
+              <label className="text-sm font-medium text-foreground">App key</label>
+              <Input
+                type="password"
+                autoComplete="off"
+                value={keyValue}
+                onChange={(e) => onKeyChange(e.target.value)}
+                placeholder="••••••••••••••••"
+                className="mt-2 h-11 font-mono"
+              />
+            </div>
+
+            <div className="flex items-start gap-3 rounded-lg bg-muted/50 p-4">
+              <Lock className="mt-0.5 h-4 w-4 shrink-0 text-muted-foreground" />
+              <div>
+                <div className="text-sm font-medium text-foreground">Your key is stored securely.</div>
+                <div className="text-xs text-muted-foreground">
+                  You can replace it anytime from this app’s page.
+                </div>
+              </div>
+            </div>
+          </div>
+        )}
+      </div>
+
+      <div className="mt-8 flex items-center justify-between">
+        <Button variant="ghost" onClick={onBack} disabled={submitting}>
+          Back
+        </Button>
+        <div className="flex items-center gap-3">
+          <span className="hidden text-xs text-muted-foreground sm:inline">
+            We’ll check the link before turning anything on.
+          </span>
+          <Button onClick={onConnect} disabled={submitting || (needsKey && keyValue.trim().length === 0)}>
+            {submitting && <Loader2 className="mr-2 h-4 w-4 animate-spin" />}
+            {submitting ? "Checking…" : "Check link"}
+          </Button>
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function SegmentedOption({
+  label,
+  selected,
+  onClick,
+}: {
+  label: string;
+  selected: boolean;
+  onClick: () => void;
+}) {
+  return (
+    <button
+      type="button"
+      onClick={onClick}
+      aria-pressed={selected}
+      className={cn(
+        "min-w-(--sz-64px) rounded-md px-4 py-1.5 text-sm font-medium transition-colors",
+        selected
+          ? "bg-background text-foreground shadow-sm"
+          : "text-muted-foreground hover:text-foreground",
+      )}
+    >
+      {label}
+    </button>
+  );
+}
+
+function ConnectionNameField({
+  name,
+  onNameChange,
+}: {
+  name: string;
+  onNameChange: (next: string) => void;
+}) {
+  return (
+    <div>
+      <label className="text-sm font-medium text-foreground">Name</label>
+      <Input
+        value={name}
+        onChange={(e) => onNameChange(e.target.value)}
+        placeholder="My app"
+        className="mt-2 h-11"
+      />
+      <p className="mt-2 text-xs text-muted-foreground">
+        We filled this in from the app. Change it to tell connections apart.
+      </p>
+    </div>
+  );
+}
+
+function KeyStep({
+  entry,
+  name,
+  onNameChange,
+  values,
+  onChange,
+  googleSheetsLinks,
+  googleSheetsError,
+  onGoogleSheetsLinksChange,
+  submitting,
+  onBack,
+  onConnect,
+}: {
+  entry: AppGalleryEntry;
+  name: string;
+  onNameChange: (next: string) => void;
+  values: Record<string, string>;
+  onChange: (next: Record<string, string>) => void;
+  googleSheetsLinks: string;
+  googleSheetsError: string | null;
+  onGoogleSheetsLinksChange: (next: string) => void;
+  submitting: boolean;
+  onBack: () => void;
+  onConnect: () => void;
+}) {
+  const copy = appCopyFor(entry.key, entry.tagline);
+  const fields = entry.credentialFields ?? [];
+  const allFilled = fields.every(
+    (f) => f.required === false || (values[f.configPath]?.trim().length ?? 0) > 0,
+  );
+  const robotEmail = entry.availability?.robotEmail ?? null;
+  const unavailable = entry.availability?.available === false;
+
+  if (isGoogleSheetsEntry(entry)) {
+    const parsed = parseGoogleSheetIds(googleSheetsLinks);
+    const canConnect = !unavailable && Boolean(robotEmail) && googleSheetsLinks.trim().length > 0;
+    return (
+      <div className="mx-auto max-w-xl rounded-2xl border border-border bg-card p-8">
+        <div className="flex items-center gap-3">
+          <AppLogo name={entry.name} logoUrl={entry.logoUrl} size={48} />
+          <div>
+            <h2 className="text-lg font-bold tracking-tight sm:text-xl">Connect Google Sheets</h2>
+            <p className="text-sm text-muted-foreground">{copy.short}</p>
+          </div>
+        </div>
+
+        <div className="mt-8 space-y-6">
+          <ConnectionNameField name={name} onNameChange={onNameChange} />
+
+          {robotEmail ? (
+            <div>
+              <label className="text-sm font-medium text-foreground">Share each sheet with this email</label>
+              <div className="mt-2 flex min-w-0 flex-col gap-2 sm:flex-row">
+                <div
+                  title={robotEmail}
+                  className="min-h-11 min-w-0 flex-1 rounded-md border border-input bg-muted/40 px-3 py-2.5 font-mono text-xs leading-tight text-foreground break-all"
+                >
+                  {robotEmail}
+                </div>
+                <Button
+                  type="button"
+                  variant="outline"
+                  className="shrink-0"
+                  onClick={() => void navigator.clipboard?.writeText(robotEmail)}
+                >
+                  <Copy className="mr-2 h-4 w-4" />
+                  Copy
+                </Button>
+              </div>
+              <p className="mt-2 text-xs text-muted-foreground">
+                In Google Sheets, click Share and add this email as an Editor. Then paste the sheet links below.
+              </p>
+            </div>
+          ) : (
+            <div className="rounded-lg bg-muted/50 p-4 text-sm text-muted-foreground">
+              Google Sheets is not available on this instance yet.
+            </div>
+          )}
+
+          <div>
+            <label className="text-sm font-medium text-foreground">Paste links to the sheets you shared</label>
+            <Textarea
+              value={googleSheetsLinks}
+              onChange={(e) => onGoogleSheetsLinksChange(e.target.value)}
+              placeholder="https://docs.google.com/spreadsheets/d/..."
+              className="mt-2 min-h-28"
+            />
+            <div className="mt-2 text-xs text-muted-foreground">
+              {parsed.ids.length > 0
+                ? `${parsed.ids.length} ${parsed.ids.length === 1 ? "sheet" : "sheets"} ready to connect.`
+                : "Paste one link per line. Both .../edit and .../edit#gid=... links work."}
+            </div>
+            {googleSheetsError && <div className="mt-2 text-xs text-destructive">{googleSheetsError}</div>}
+          </div>
+        </div>
+
+        <div className="mt-8 flex items-center justify-between">
+          <Button variant="ghost" onClick={onBack} disabled={submitting}>
+            Back
+          </Button>
+          <Button onClick={onConnect} disabled={submitting || !canConnect}>
+            {submitting && <Loader2 className="mr-2 h-4 w-4 animate-spin" />}
+            {submitting ? "Checking…" : "Connect"}
+          </Button>
+        </div>
+      </div>
+    );
+  }
+
+  return (
+    <div className="mx-auto max-w-xl rounded-2xl border border-border bg-card p-8">
+      <div className="flex items-center gap-3">
+        <AppLogo name={entry.name} logoUrl={entry.logoUrl} size={48} />
+        <div>
+          <h2 className="text-xl font-bold tracking-tight">Connect {entry.name}</h2>
+          <p className="text-sm text-muted-foreground">{copy.short}</p>
+        </div>
+      </div>
+
+      <div className="mt-8 space-y-6">
+        <ConnectionNameField name={name} onNameChange={onNameChange} />
+
+        {fields.length === 0 ? (
+          <p className="text-sm text-muted-foreground">
+            This app doesn’t need a key. Just connect to continue.
+          </p>
+        ) : (
+          fields.map((field) => (
+            <div key={field.configPath}>
+              <label className="text-sm font-medium text-foreground">
+                {credentialFieldLabel(entry.name, field.label, fields.length)}
+              </label>
+              <Input
+                type="password"
+                autoComplete="off"
+                value={values[field.configPath] ?? ""}
+                onChange={(e) => onChange({ ...values, [field.configPath]: e.target.value })}
+                placeholder="••••••••••••••••"
+                className="mt-2 h-11 font-mono"
+              />
+              {field.helpUrl && (
+                <a
+                  href={field.helpUrl}
+                  target="_blank"
+                  rel="noreferrer"
+                  className="mt-2 inline-flex items-center gap-1 text-xs font-semibold text-foreground underline underline-offset-2"
+                >
+                  Where do I find this?
+                  <ArrowUpRight className="h-3 w-3" />
+                </a>
+              )}
+            </div>
+          ))
+        )}
+
+        <div className="flex items-start gap-3 rounded-lg bg-muted/50 p-4">
+          <Lock className="mt-0.5 h-4 w-4 shrink-0 text-muted-foreground" />
+          <div>
+            <div className="text-sm font-medium text-foreground">Your key is stored securely.</div>
+            <div className="text-xs text-muted-foreground">
+              You can replace it anytime from this app’s page.
+            </div>
+          </div>
+        </div>
+      </div>
+
+      <div className="mt-8 flex items-center justify-between">
+        <Button variant="ghost" onClick={onBack} disabled={submitting}>
+          Back
+        </Button>
+        <div className="flex items-center gap-3">
+          <span className="hidden text-xs text-muted-foreground sm:inline">
+            We’ll check the key before turning anything on.
+          </span>
+          <Button onClick={onConnect} disabled={submitting || !allFilled}>
+            {submitting && <Loader2 className="mr-2 h-4 w-4 animate-spin" />}
+            {submitting ? "Checking…" : "Connect"}
+          </Button>
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function ActionGroup({
+  title,
+  hint,
+  actions,
+  enabled,
+  onToggle,
+  bulkLabel,
+  onBulk,
+  askFirstLevels,
+}: {
+  title: string;
+  hint: string;
+  actions: ToolAppConnectionActionSummary[];
+  enabled: Record<string, boolean>;
+  onToggle: (id: string, on: boolean) => void;
+  bulkLabel: string;
+  onBulk: () => void;
+  askFirstLevels: string[];
+}) {
+  if (actions.length === 0) return null;
+  return (
+    <div className="rounded-xl border border-border bg-card">
+      <div className="flex items-center justify-between border-b border-border px-5 py-3">
+        <div className="text-sm">
+          <span className="font-bold text-foreground">{title}</span>
+          <span className="ml-2 text-muted-foreground">· {hint}</span>
+        </div>
+        <button
+          type="button"
+          onClick={onBulk}
+          className="text-xs text-muted-foreground hover:text-foreground"
+        >
+          {bulkLabel}
+        </button>
+      </div>
+      <div className="divide-y divide-border">
+        {actions.map((action) => {
+          const on = enabled[action.catalogEntryId] ?? false;
+          const showAskFirst = on && askFirstLevels.includes(action.riskLevel);
+          return (
+            <div key={action.catalogEntryId} className="flex items-center gap-4 px-5 py-3">
+              <div className="min-w-0 flex-1">
+                <div className="text-sm font-medium text-foreground">
+                  {action.title ?? action.toolName}
+                </div>
+                {action.description && (
+                  <div className="truncate text-xs text-muted-foreground">{action.description}</div>
+                )}
+              </div>
+              {showAskFirst && (
+                <span className="inline-flex items-center rounded-full border border-amber-500/40 bg-amber-500/10 px-2 py-0.5 text-xs font-semibold text-amber-700 dark:text-amber-300">
+                  Ask first
+                </span>
+              )}
+              <ToggleSwitch checked={on} onCheckedChange={(next) => onToggle(action.catalogEntryId, next)} />
+            </div>
+          );
+        })}
+      </div>
+    </div>
+  );
+}
+
+function ActionsStep({
+  appName,
+  result,
+  enabled,
+  onToggle,
+  onBulk,
+  onBack,
+  onContinue,
+}: {
+  appName: string;
+  result: ConnectToolAppResult;
+  enabled: Record<string, boolean>;
+  onToggle: (id: string, on: boolean) => void;
+  onBulk: (ids: string[], on: boolean) => void;
+  onBack: () => void;
+  onContinue: () => void;
+}) {
+  const askFirstLevels = askFirstLevelsFrom(result);
+  const { readOnly, canMakeChanges } = result.actions;
+  const total = readOnly.length + canMakeChanges.length;
+  const enabledCount = Object.values(enabled).filter(Boolean).length;
+
+  return (
+    <div className="space-y-5">
+      <div className="flex items-start gap-3">
+        <span className="mt-0.5 inline-flex h-6 w-6 items-center justify-center rounded-full border-2 border-emerald-500 bg-emerald-500/10 text-emerald-600 dark:text-emerald-400">
+          <Check className="h-3.5 w-3.5" />
+        </span>
+        <div>
+          <div className="text-lg font-bold text-foreground">
+            Connected to {appName} — it offers {total} {total === 1 ? "action" : "actions"}.
+          </div>
+          <div className="text-sm text-muted-foreground">
+            Read-only actions are on. Anything that can change something starts off — turn on the ones you want.
+          </div>
+        </div>
+      </div>
+
+      <ActionGroup
+        title="Read only"
+        hint="these can look but not change anything"
+        actions={readOnly}
+        enabled={enabled}
+        onToggle={onToggle}
+        bulkLabel="Turn all off"
+        onBulk={() => onBulk(readOnly.map((a) => a.catalogEntryId), false)}
+        askFirstLevels={askFirstLevels}
+      />
+
+      <ActionGroup
+        title="Can make changes"
+        hint="these change something in another app"
+        actions={canMakeChanges}
+        enabled={enabled}
+        onToggle={onToggle}
+        bulkLabel="Turn all on"
+        onBulk={() => onBulk(canMakeChanges.map((a) => a.catalogEntryId), true)}
+        askFirstLevels={askFirstLevels}
+      />
+
+      <div className="flex items-center justify-between pt-1">
+        <Button variant="ghost" onClick={onBack}>
+          Back
+        </Button>
+        <div className="flex items-center gap-3">
+          <span className="hidden text-xs text-muted-foreground sm:inline">
+            If {appName} adds new actions later, they start off until you review them.
+          </span>
+          <Button onClick={onContinue} disabled={enabledCount === 0}>
+            Continue with {enabledCount} {enabledCount === 1 ? "action" : "actions"} on
+          </Button>
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function WhoStep({
+  appName,
+  companyId,
+  access,
+  setAccess,
+  agentIds,
+  setAgentIds,
+  onBack,
+  onContinue,
+}: {
+  appName: string;
+  companyId: string;
+  access: "all" | "specific";
+  setAccess: (a: "all" | "specific") => void;
+  agentIds: Set<string>;
+  setAgentIds: (s: Set<string>) => void;
+  onBack: () => void;
+  onContinue: () => void;
+}) {
+  const agentsQuery = useQuery({
+    queryKey: queryKeys.agents.list(companyId),
+    queryFn: () => agentsApi.list(companyId),
+    enabled: access === "specific",
+  });
+  const agents: Agent[] = (agentsQuery.data ?? []).filter((a) => a.status !== "terminated");
+  const canFinish = access === "all" || agentIds.size > 0;
+
+  return (
+    <div className="mx-auto max-w-xl">
+      <div className="rounded-2xl border border-border bg-card p-8">
+        <h2 className="text-xl font-bold tracking-tight">Who can use {appName}?</h2>
+        <p className="mt-1 text-sm text-muted-foreground">You can change this later from the app’s page.</p>
+
+        <div className="mt-6 space-y-3">
+          <button
+            type="button"
+            onClick={() => setAccess("all")}
+            className={cn(
+              "flex w-full items-start gap-3 rounded-xl border-2 p-4 text-left transition-colors",
+              access === "all" ? "border-foreground bg-muted/40" : "border-border hover:border-foreground/30",
+            )}
+          >
+            <Radio selected={access === "all"} />
+            <div>
+              <div className="flex items-center gap-2">
+                <span className="font-bold text-foreground">All agents</span>
+                <span className="rounded-full bg-foreground px-2 py-0.5 text-(length:--text-nano) font-bold text-background">
+                  Recommended
+                </span>
+              </div>
+              <p className="mt-1 text-xs text-muted-foreground">
+                Anyone you’ve added to Paperclip can use {appName} in their tasks. This is what most teams want.
+              </p>
+            </div>
+          </button>
+
+          <button
+            type="button"
+            onClick={() => setAccess("specific")}
+            className={cn(
+              "flex w-full items-start gap-3 rounded-xl border-2 p-4 text-left transition-colors",
+              access === "specific" ? "border-foreground bg-muted/40" : "border-border hover:border-foreground/30",
+            )}
+          >
+            <Radio selected={access === "specific"} />
+            <div className="flex-1">
+              <span className="font-semibold text-foreground">Only specific agents</span>
+              <p className="mt-1 text-xs text-muted-foreground">Tick the agents who can use {appName}.</p>
+            </div>
+          </button>
+
+          {access === "specific" && (
+            <AgentMultiSelect
+              agents={agents}
+              selectedAgentIds={agentIds}
+              onChange={setAgentIds}
+              loading={agentsQuery.isLoading}
+              showSelectionPreview={false}
+            />
+          )}
+        </div>
+      </div>
+
+      <div className="mt-6 flex items-center justify-between">
+        <Button variant="ghost" onClick={onBack}>
+          Back
+        </Button>
+        <Button onClick={onContinue} disabled={!canFinish}>
+          Continue to install
+        </Button>
+      </div>
+    </div>
+  );
+}
+
+export function InstallStep({
+  appName,
+  companyId,
+  access,
+  accessAgentIds,
+  installMode,
+  setInstallMode,
+  installAgentIds,
+  setInstallAgentIds,
+  submitting,
+  onBack,
+  onFinish,
+}: {
+  appName: string;
+  companyId: string;
+  access: "all" | "specific";
+  accessAgentIds: Set<string>;
+  installMode: InstallMode;
+  setInstallMode: (mode: InstallMode) => void;
+  installAgentIds: Set<string>;
+  setInstallAgentIds: (ids: Set<string>) => void;
+  submitting: boolean;
+  onBack: () => void;
+  onFinish: () => void;
+}) {
+  const agentsQuery = useQuery({
+    queryKey: queryKeys.agents.list(companyId),
+    queryFn: () => agentsApi.list(companyId),
+  });
+  const agents: Agent[] = (agentsQuery.data ?? []).filter((a) => a.status !== "terminated");
+  const installSpecific = () => {
+    setInstallMode("specific");
+    if (installAgentIds.size === 0 && access === "specific") setInstallAgentIds(new Set(accessAgentIds));
+  };
+  const extendingAgentIds = access === "all"
+    ? []
+    : installMode === "all"
+      ? agents.filter((agent) => !accessAgentIds.has(agent.id)).map((agent) => agent.id)
+      : [...installAgentIds].filter((id) => !accessAgentIds.has(id));
+  const canFinish = installMode !== "specific" || installAgentIds.size > 0;
+  const extendingLabel = extendingAgentIds.length === 1
+    ? agents.find((agent) => agent.id === extendingAgentIds[0])?.name ?? "1 agent"
+    : `${extendingAgentIds.length} agents`;
+
+  return (
+    <div className="mx-auto max-w-xl">
+      <div className="rounded-2xl border border-border bg-card p-8">
+        <h2 className="text-xl font-bold tracking-tight">Install {appName} tools?</h2>
+        <p className="mt-1 text-sm text-muted-foreground">
+          Access is permission. Install decides whose runs actually carry these tools.
+        </p>
+
+        <div className="mt-5">
+          <InlineBanner tone="info" compact>
+            {installInfoNotice(appName)}
+          </InlineBanner>
+        </div>
+
+        <div className="mt-6 space-y-3">
+          <button
+            type="button"
+            onClick={() => setInstallMode("none")}
+            className={cn(
+              "flex w-full items-start gap-3 rounded-xl border-2 p-4 text-left transition-colors",
+              installMode === "none" ? "border-foreground bg-muted/40" : "border-border hover:border-foreground/30",
+            )}
+          >
+            <Radio selected={installMode === "none"} />
+            <div>
+              <span className="font-semibold text-foreground">Not yet</span>
+              <p className="mt-1 text-xs text-muted-foreground">
+                Keep {appName} permitted only. You can install it later from the app or agent page.
+              </p>
+            </div>
+          </button>
+
+          <button
+            type="button"
+            onClick={installSpecific}
+            className={cn(
+              "flex w-full items-start gap-3 rounded-xl border-2 p-4 text-left transition-colors",
+              installMode === "specific" ? "border-foreground bg-muted/40" : "border-border hover:border-foreground/30",
+            )}
+          >
+            <Radio selected={installMode === "specific"} />
+            <div className="flex-1">
+              <span className="font-semibold text-foreground">Specific agents</span>
+              <p className="mt-1 text-xs text-muted-foreground">Tick the agents that should load {appName} every run.</p>
+            </div>
+          </button>
+
+          {installMode === "specific" ? (
+            <div className="ml-7 border-l border-border pl-4">
+              <AgentMultiSelect
+                agents={agents}
+                selectedAgentIds={installAgentIds}
+                onChange={setInstallAgentIds}
+                loading={agentsQuery.isLoading}
+                showSelectionPreview={false}
+              />
+            </div>
+          ) : null}
+
+          <button
+            type="button"
+            onClick={() => setInstallMode("all")}
+            className={cn(
+              "flex w-full items-start gap-3 rounded-xl border-2 p-4 text-left transition-colors",
+              installMode === "all" ? "border-foreground bg-muted/40" : "border-border hover:border-foreground/30",
+            )}
+          >
+            <Radio selected={installMode === "all"} />
+            <div>
+              <span className="font-semibold text-foreground">All agents</span>
+              <p className="mt-1 text-xs text-muted-foreground">{INSTALL_ALL_WARNING}</p>
+            </div>
+          </button>
+
+          {extendingAgentIds.length > 0 ? (
+            <InlineBanner tone="warning" compact>
+              {autoExtendNotice(extendingLabel)}
+            </InlineBanner>
+          ) : null}
+        </div>
+      </div>
+
+      <div className="mt-6 flex items-center justify-between">
+        <Button variant="ghost" onClick={onBack} disabled={submitting}>
+          Back
+        </Button>
+        <Button onClick={onFinish} disabled={submitting || !canFinish}>
+          {submitting && <Loader2 className="mr-2 h-4 w-4 animate-spin" />}
+          {submitting ? "Finishing..." : "Finish setup"}
+        </Button>
+      </div>
+    </div>
+  );
+}
+
+function Radio({ selected }: { selected: boolean }) {
+  return (
+    <span
+      className={cn(
+        "mt-0.5 inline-flex h-4 w-4 shrink-0 items-center justify-center rounded-full border-2",
+        selected ? "border-foreground" : "border-muted-foreground/40",
+      )}
+    >
+      {selected && <span className="h-2 w-2 rounded-full bg-foreground" />}
+    </span>
+  );
+}
+
+function SuccessStep({
+  appName,
+  logoUrl,
+  enabledCount,
+  access,
+  installMode,
+  installCount,
+  onDone,
+}: {
+  appName: string;
+  logoUrl?: string | null;
+  enabledCount: number;
+  access: "all" | "specific";
+  installMode: InstallMode;
+  installCount: number;
+  onDone: () => void;
+}) {
+  const installSummary = installMode === "all"
+    ? "Installed on all agents"
+    : installMode === "specific"
+      ? `${installCount} ${installCount === 1 ? "agent" : "agents"} installed`
+      : "Permitted only";
+  return (
+    <div className="mx-auto max-w-md py-10 text-center">
+      <div className="mx-auto flex h-20 w-20 items-center justify-center rounded-full border-2 border-emerald-500 bg-emerald-500/10">
+        <Check className="h-9 w-9 text-emerald-600 dark:text-emerald-400" />
+      </div>
+      <div className="mt-6 flex items-center justify-center gap-2">
+        <AppLogo name={appName} logoUrl={logoUrl} size={28} />
+        <h2 className="text-2xl font-bold tracking-tight">{appName} is ready.</h2>
+      </div>
+      <p className="mt-2 text-sm text-muted-foreground">
+        {installMode === "none"
+          ? "Agents can use it after you install it on their Tools tab."
+          : "Installed agents will load it on their next run."}
+      </p>
+      <p className="mt-1 text-xs text-muted-foreground">
+        {enabledCount} {enabledCount === 1 ? "action" : "actions"} on ·{" "}
+        {access === "all" ? "All agents can use it" : "Specific agents can use it"} · {installSummary}
+      </p>
+      <div className="mt-8">
+        <Button size="lg" className="px-10" onClick={onDone}>
+          Done
+        </Button>
+      </div>
+    </div>
+  );
+}
diff --git a/ui/src/pages/apps/AppsReview.tsx b/ui/src/pages/apps/AppsReview.tsx
new file mode 100644
index 00000000000..719a3a01505
--- /dev/null
+++ b/ui/src/pages/apps/AppsReview.tsx
@@ -0,0 +1,45 @@
+import { useEffect } from "react";
+import { useBreadcrumbs } from "@/context/BreadcrumbContext";
+import { useCompany } from "@/context/CompanyContext";
+import { ReviewQueueCard } from "./ReviewQueueCard";
+
+/**
+ * Review — the "decisions waiting on you" inbox (PAP-12371, Finding B).
+ *
+ * Ask-first approvals used to live only inside the "Needs attention" page,
+ * folded together with health/error triage. That buried the one thing a user
+ * must act on for their agents to proceed. This is the explicit, top-level
+ * home for those approvals, aligned with the Inbox "waiting for your OK"
+ * language from the approved PAP-11178 gateway UX. Health issues stay on
+ * "Needs attention"; decisions live here.
+ */
+export function AppsReview() {
+  const { selectedCompany, selectedCompanyId } = useCompany();
+  const { setBreadcrumbs } = useBreadcrumbs();
+
+  useEffect(() => {
+    setBreadcrumbs([
+      { label: selectedCompany?.name ?? "Company", href: "/dashboard" },
+      { label: "Apps", href: "/apps" },
+      { label: "Review" },
+    ]);
+    return () => setBreadcrumbs([]);
+  }, [setBreadcrumbs, selectedCompany?.name]);
+
+  if (!selectedCompanyId) {
+    return <div className="p-6 text-sm text-muted-foreground">Select a company to review approvals.</div>;
+  }
+
+  return (
+    <div className="max-w-3xl space-y-6 pb-12">
+      <header>
+        <h1 className="text-2xl font-bold tracking-tight">Review</h1>
+        <p className="mt-1 text-sm text-muted-foreground">
+          Actions your agents want to run that need your OK first. Approve, always-allow, or decline.
+        </p>
+      </header>
+
+      <ReviewQueueCard emptyState="reassure" heading="Waiting for your OK" />
+    </div>
+  );
+}
diff --git a/ui/src/pages/apps/Browse.test.tsx b/ui/src/pages/apps/Browse.test.tsx
new file mode 100644
index 00000000000..8bb4562b65d
--- /dev/null
+++ b/ui/src/pages/apps/Browse.test.tsx
@@ -0,0 +1,195 @@
+// @vitest-environment jsdom
+
+import { flushSync } from "react-dom";
+import { createRoot } from "react-dom/client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { Browse } from "./Browse";
+
+const listGalleryMock = vi.hoisted(() => vi.fn());
+const navigateMock = vi.hoisted(() => vi.fn());
+
+vi.mock("@/api/tools", () => ({
+  toolsApi: {
+    listGallery: (companyId: string) => listGalleryMock(companyId),
+  },
+}));
+
+vi.mock("@/lib/router", () => ({
+  Link: ({ children, to }: { children: React.ReactNode; to: string }) => <a href={to}>{children}</a>,
+  useNavigate: () => navigateMock,
+}));
+
+vi.mock("@/context/CompanyContext", () => ({
+  useCompany: () => ({
+    selectedCompanyId: "company-1",
+    selectedCompany: { id: "company-1", name: "Paperclip" },
+  }),
+}));
+
+vi.mock("@/context/BreadcrumbContext", () => ({
+  useBreadcrumbs: () => ({ setBreadcrumbs: vi.fn() }),
+}));
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+(globalThis as any).IS_REACT_ACT_ENVIRONMENT = true;
+
+async function act(callback: () => void | Promise<void>) {
+  let result: void | Promise<void> = undefined;
+  flushSync(() => {
+    result = callback();
+  });
+  await result;
+}
+
+async function flushReact() {
+  for (let i = 0; i < 5; i += 1) {
+    await act(async () => {
+      await Promise.resolve();
+      await new Promise((resolve) => window.setTimeout(resolve, 0));
+    });
+  }
+}
+
+function galleryEntry(overrides: Record<string, unknown>) {
+  return {
+    key: "github",
+    name: "GitHub",
+    logoUrl: "https://example.com/github.png",
+    tagline: "Let agents open PRs and issues.",
+    authKind: "oauth",
+    transportTemplate: { transport: "remote_http", url: "https://api.github.com/mcp" },
+    credentialFields: [],
+    recommendedDefaults: {},
+    urlPatterns: [],
+    ...overrides,
+  };
+}
+
+describe("Browse store door (PAP-13254 door 1)", () => {
+  let container: HTMLDivElement;
+  let root: ReturnType<typeof createRoot>;
+
+  beforeEach(() => {
+    listGalleryMock.mockResolvedValue({
+      apps: [
+        galleryEntry({ key: "zapier", name: "Zapier", tagline: "Connect automations." }),
+        galleryEntry({ key: "github", name: "GitHub", tagline: "Open PRs and issues." }),
+        galleryEntry({ key: "slack", name: "Slack", tagline: "Post messages to channels." }),
+        galleryEntry({ key: "acme", name: "Acme CRM", tagline: "Sync deals and contacts." }),
+      ],
+    });
+    container = document.createElement("div");
+    document.body.appendChild(container);
+  });
+
+  afterEach(() => {
+    act(() => root?.unmount());
+    container.remove();
+    vi.clearAllMocks();
+  });
+
+  async function renderBrowse() {
+    const client = new QueryClient({ defaultOptions: { queries: { retry: false } } });
+    root = createRoot(container);
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={client}>
+          <Browse />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+  }
+
+  it("renders the store header, popular grid, gallery, and BYO card", async () => {
+    await renderBrowse();
+
+    const text = container.textContent ?? "";
+    expect(text).toContain("Browse");
+    expect(text).toContain("Connect Zapier or your own MCP server.");
+    expect(text).toContain("Popular");
+    expect(text).toContain("All apps");
+    expect(text).toContain("GitHub");
+    expect(text).toContain("Slack");
+    expect(text).toContain("Acme CRM");
+    // Bring-your-own is a first-class row in the store.
+    expect(text).toContain("Connect your own tool");
+  });
+
+  it("enables Zapier and custom URLs while fading unfinished integrations", async () => {
+    await renderBrowse();
+
+    const zapierTiles = Array.from(container.querySelectorAll("button")).filter((button) =>
+      button.textContent?.includes("Zapier"),
+    );
+    const githubTiles = Array.from(container.querySelectorAll("button")).filter((button) =>
+      button.textContent?.includes("GitHub"),
+    );
+    const tile = Array.from(container.querySelectorAll("button")).find((button) =>
+      button.textContent?.includes("Acme CRM"),
+    );
+    const byoCard = Array.from(container.querySelectorAll("button")).find((button) =>
+      button.textContent?.includes("Connect your own tool"),
+    );
+
+    expect(zapierTiles).toHaveLength(2);
+    expect(zapierTiles.every((button) => !button.disabled)).toBe(true);
+    expect(githubTiles.every((button) => button.disabled)).toBe(true);
+    expect(tile?.disabled).toBe(true);
+    expect(byoCard?.disabled).toBe(false);
+    expect(tile?.textContent).toContain("Coming soon");
+    expect(zapierTiles[0]?.textContent).toContain("Connect");
+
+    await act(async () => {
+      zapierTiles[0]?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    expect(navigateMock).toHaveBeenCalledWith("/apps/connect?byo=1&source=zapier");
+
+    await act(async () => {
+      byoCard?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+    expect(navigateMock).toHaveBeenCalledWith("/apps/connect?byo=1");
+  });
+
+  it("filters the gallery by the search query", async () => {
+    await renderBrowse();
+
+    const input = container.querySelector<HTMLInputElement>('input[type="search"]');
+    expect(input).toBeTruthy();
+    const setter = Object.getOwnPropertyDescriptor(
+      window.HTMLInputElement.prototype,
+      "value",
+    )?.set;
+    await act(async () => {
+      setter?.call(input, "slack");
+      input?.dispatchEvent(new Event("input", { bubbles: true }));
+    });
+    await flushReact();
+
+    const text = container.textContent ?? "";
+    expect(text).toContain("Results (1)");
+    expect(text).toContain("Slack");
+    expect(text).not.toContain("Acme CRM");
+    // Popular grid is hidden while searching.
+    expect(text).not.toContain("Popular");
+  });
+
+  it("keeps the custom URL option available when gallery search has no matches", async () => {
+    await renderBrowse();
+
+    const input = container.querySelector<HTMLInputElement>('input[type="search"]');
+    const setter = Object.getOwnPropertyDescriptor(
+      window.HTMLInputElement.prototype,
+      "value",
+    )?.set;
+    await act(async () => {
+      setter?.call(input, "missing app");
+      input?.dispatchEvent(new Event("input", { bubbles: true }));
+    });
+    await flushReact();
+
+    expect(container.textContent).toContain("No planned apps match");
+    expect(container.textContent).toContain("Connect your own tool");
+  });
+});
diff --git a/ui/src/pages/apps/Browse.tsx b/ui/src/pages/apps/Browse.tsx
new file mode 100644
index 00000000000..5998e0abf3b
--- /dev/null
+++ b/ui/src/pages/apps/Browse.tsx
@@ -0,0 +1,205 @@
+import { useEffect, useMemo, useState } from "react";
+import { useQuery } from "@tanstack/react-query";
+import { Link2, Search } from "lucide-react";
+import type { AppGalleryEntry } from "@paperclipai/shared";
+import { useNavigate } from "@/lib/router";
+import { useCompany } from "@/context/CompanyContext";
+import { useBreadcrumbs } from "@/context/BreadcrumbContext";
+import { queryKeys } from "@/lib/queryKeys";
+import { toolsApi } from "@/api/tools";
+import { Skeleton } from "@/components/ui/skeleton";
+import { AppLogo } from "./AppLogo";
+import {
+  AdvancedToolsLink,
+  BYO_CONNECT_HREF,
+  ByoConnectCard,
+  POPULAR_KEYS,
+  ZAPIER_CONNECT_HREF,
+} from "./store-cards";
+
+/**
+ * Door 1 — Browse (the store) (PAP-13254 / U3 §4).
+ *
+ * A persistent, browsable storefront: search + a Popular grid + the full
+ * gallery + a first-class bring-your-own card + a labelled Developer link.
+ * Browse remains the single discoverability surface. Zapier and bring-your-own
+ * MCP servers use the URL flow; the remaining integrations stay unavailable.
+ */
+export function Browse() {
+  const navigate = useNavigate();
+  const { selectedCompany, selectedCompanyId } = useCompany();
+  const { setBreadcrumbs } = useBreadcrumbs();
+  const [query, setQuery] = useState("");
+
+  useEffect(() => {
+    setBreadcrumbs([
+      { label: selectedCompany?.name ?? "Company", href: "/dashboard" },
+      { label: "Apps", href: "/apps" },
+      { label: "Browse" },
+    ]);
+    return () => setBreadcrumbs([]);
+  }, [setBreadcrumbs, selectedCompany?.name]);
+
+  const galleryQuery = useQuery({
+    queryKey: queryKeys.apps.gallery(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listGallery(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+
+  const gallery = galleryQuery.data?.apps ?? [];
+  const popular = useMemo(
+    () =>
+      POPULAR_KEYS.map((key) => gallery.find((entry) => entry.key === key)).filter(
+        (entry): entry is AppGalleryEntry => Boolean(entry),
+      ),
+    [gallery],
+  );
+
+  const trimmed = query.trim().toLowerCase();
+  const filtered = useMemo(() => {
+    if (!trimmed) return gallery;
+    return gallery.filter(
+      (entry) =>
+        entry.name.toLowerCase().includes(trimmed) ||
+        entry.tagline.toLowerCase().includes(trimmed) ||
+        (entry.description?.toLowerCase().includes(trimmed) ?? false),
+    );
+  }, [gallery, trimmed]);
+
+  if (!selectedCompanyId) {
+    return <div className="p-6 text-sm text-muted-foreground">Select a company to browse apps.</div>;
+  }
+
+  const loading = galleryQuery.isLoading;
+
+  return (
+    <div className="max-w-5xl space-y-8 pb-12">
+      <header>
+        <h1 className="text-2xl font-bold tracking-tight">Browse</h1>
+        <p className="mt-1 text-sm text-muted-foreground">
+          Connect Zapier or your own MCP server. More integrations are coming soon.
+        </p>
+      </header>
+
+      <div className="relative max-w-md">
+        <Search className="pointer-events-none absolute left-3 top-1/2 h-4 w-4 -translate-y-1/2 text-muted-foreground" />
+        <input
+          type="search"
+          value={query}
+          onChange={(event) => setQuery(event.target.value)}
+          placeholder="Search apps…"
+          aria-label="Search apps"
+          className="h-10 w-full rounded-lg border border-border bg-background pl-9 pr-3 text-sm outline-none transition-colors placeholder:text-muted-foreground focus:border-foreground/30"
+        />
+      </div>
+
+      {loading ? (
+        <div className="grid grid-cols-2 gap-3 sm:grid-cols-3 lg:grid-cols-4">
+          {Array.from({ length: 8 }).map((_, index) => (
+            <Skeleton key={index} className="h-24 w-full rounded-xl" />
+          ))}
+        </div>
+      ) : (
+        <>
+          {!trimmed && popular.length > 0 && (
+            <section className="space-y-3">
+              <div className="text-(length:--text-micro) font-semibold uppercase tracking-wide text-muted-foreground">
+                Popular
+              </div>
+              <div className="grid grid-cols-2 gap-3 sm:grid-cols-3 lg:grid-cols-6">
+                {popular.map((entry) => (
+                  <AppTile
+                    key={entry.key}
+                    entry={entry}
+                    onConnect={entry.key === "zapier" ? () => navigate(ZAPIER_CONNECT_HREF) : undefined}
+                    compact
+                  />
+                ))}
+              </div>
+            </section>
+          )}
+
+          <section className="space-y-3">
+            <div className="text-(length:--text-micro) font-semibold uppercase tracking-wide text-muted-foreground">
+              {trimmed ? `Results (${filtered.length})` : "All apps"}
+            </div>
+            {filtered.length === 0 ? (
+              <p className="flex items-center gap-1.5 rounded-xl border border-dashed border-border bg-card px-4 py-6 text-sm text-muted-foreground">
+                <Link2 className="h-4 w-4" />
+                No planned apps match “{query.trim()}”.
+              </p>
+            ) : (
+              <div className="grid grid-cols-1 gap-3 sm:grid-cols-2 lg:grid-cols-3">
+                {filtered.map((entry) => (
+                  <AppTile
+                    key={entry.key}
+                    entry={entry}
+                    onConnect={entry.key === "zapier" ? () => navigate(ZAPIER_CONNECT_HREF) : undefined}
+                  />
+                ))}
+              </div>
+            )}
+          </section>
+
+          <ByoConnectCard onConnect={() => navigate(BYO_CONNECT_HREF)} />
+
+          <div className="flex flex-wrap items-center justify-between gap-2">
+            <p className="text-xs text-muted-foreground">
+              Zapier connects with the MCP URL it gives you. Other listed integrations are previews.
+            </p>
+            <AdvancedToolsLink />
+          </div>
+        </>
+      )}
+    </div>
+  );
+}
+
+function AppTile({
+  entry,
+  onConnect,
+  compact = false,
+}: {
+  entry: AppGalleryEntry;
+  onConnect?: () => void;
+  compact?: boolean;
+}) {
+  const disabled = !onConnect;
+  if (compact) {
+    return (
+      <button
+        type="button"
+        disabled={disabled}
+        onClick={onConnect}
+        className={disabled
+          ? "flex cursor-not-allowed flex-col items-center gap-2 rounded-xl border border-border bg-background px-3 py-4 text-center opacity-60"
+          : "flex flex-col items-center gap-2 rounded-xl border border-border bg-background px-3 py-4 text-center transition-colors hover:border-foreground/30 hover:bg-accent/40"}
+      >
+        <AppLogo name={entry.name} logoUrl={entry.logoUrl} size={36} />
+        <span className="text-xs font-medium text-foreground">{entry.name}</span>
+        <span className={disabled ? "text-xs text-muted-foreground" : "text-xs font-semibold text-primary"}>
+          {disabled ? "Coming soon" : "Connect →"}
+        </span>
+      </button>
+    );
+  }
+  return (
+    <button
+      type="button"
+      disabled={disabled}
+      onClick={onConnect}
+      className={disabled
+        ? "flex h-full cursor-not-allowed items-start gap-3 rounded-xl border border-border bg-card px-4 py-4 text-left opacity-60"
+        : "flex h-full items-start gap-3 rounded-xl border border-border bg-card px-4 py-4 text-left transition-colors hover:border-foreground/30 hover:bg-accent/40"}
+    >
+      <AppLogo name={entry.name} logoUrl={entry.logoUrl} size={36} />
+      <div className="min-w-0 flex-1">
+        <div className="text-sm font-semibold text-foreground">{entry.name}</div>
+        <div className="mt-0.5 line-clamp-2 text-xs text-muted-foreground">{entry.tagline}</div>
+      </div>
+      <span className={disabled ? "shrink-0 text-xs font-semibold text-muted-foreground" : "shrink-0 text-xs font-semibold text-primary"}>
+        {disabled ? "Coming soon" : "Connect →"}
+      </span>
+    </button>
+  );
+}
diff --git a/ui/src/pages/apps/Connections.test.tsx b/ui/src/pages/apps/Connections.test.tsx
new file mode 100644
index 00000000000..3f80ba4bf5f
--- /dev/null
+++ b/ui/src/pages/apps/Connections.test.tsx
@@ -0,0 +1,325 @@
+// @vitest-environment jsdom
+
+import { flushSync } from "react-dom";
+import { createRoot } from "react-dom/client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { Connections } from "./Connections";
+
+const listGalleryMock = vi.hoisted(() => vi.fn());
+const listApplicationsMock = vi.hoisted(() => vi.fn());
+const listConnectionsMock = vi.hoisted(() => vi.fn());
+const listAppsAttentionMock = vi.hoisted(() => vi.fn());
+const listProfilesMock = vi.hoisted(() => vi.fn());
+const mockNavigate = vi.hoisted(() => vi.fn());
+
+vi.mock("@/api/tools", () => ({
+  toolsApi: {
+    listGallery: (companyId: string) => listGalleryMock(companyId),
+    listApplications: (companyId: string) => listApplicationsMock(companyId),
+    listConnections: (companyId: string) => listConnectionsMock(companyId),
+    listAppsAttention: (companyId: string) => listAppsAttentionMock(companyId),
+    listProfiles: (companyId: string) => listProfilesMock(companyId),
+  },
+}));
+
+vi.mock("@/lib/router", () => ({
+  useNavigate: () => mockNavigate,
+  Link: ({ children, to }: { children: React.ReactNode; to: string }) => (
+    <a href={to}>{children}</a>
+  ),
+}));
+
+vi.mock("@/context/CompanyContext", () => ({
+  useCompany: () => ({
+    selectedCompanyId: "company-1",
+    selectedCompany: { id: "company-1", name: "Paperclip" },
+  }),
+}));
+
+vi.mock("@/context/BreadcrumbContext", () => ({
+  useBreadcrumbs: () => ({ setBreadcrumbs: vi.fn() }),
+}));
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+(globalThis as any).IS_REACT_ACT_ENVIRONMENT = true;
+
+// React 19 does not export a usable `act` in this vitest/jsdom setup; use the
+// flushSync-based helper the sibling apps tests use (PAP-12371 gotcha).
+async function act(callback: () => void | Promise<void>) {
+  let result: void | Promise<void> = undefined;
+  flushSync(() => {
+    result = callback();
+  });
+  await result;
+}
+
+async function flushReact() {
+  await act(async () => {
+    await Promise.resolve();
+    await new Promise((resolve) => window.setTimeout(resolve, 0));
+  });
+}
+
+function application(overrides: Record<string, unknown>) {
+  return {
+    id: "app-x",
+    companyId: "company-1",
+    applicationKey: undefined,
+    name: "GitHub",
+    description: null,
+    type: "mcp_http",
+    status: "active",
+    pluginId: null,
+    ownerAgentId: null,
+    ownerUserId: null,
+    metadata: null,
+    archivedAt: null,
+    createdAt: new Date("2026-01-01T00:00:00Z"),
+    updatedAt: new Date("2026-01-01T00:00:00Z"),
+    ...overrides,
+  };
+}
+
+function connection(overrides: Record<string, unknown>) {
+  return {
+    id: "conn-x",
+    companyId: "company-1",
+    applicationId: "app-x",
+    name: "GitHub",
+    connectionKind: "managed",
+    transport: "remote_http",
+    status: "active",
+    transportConfig: {},
+    config: {},
+    credentialSecretRefs: [],
+    healthStatus: "healthy",
+    healthCheckedAt: null,
+    lastError: null,
+    enabled: true,
+    lastUsedAt: null,
+    createdByAgentId: null,
+    createdByUserId: null,
+    createdAt: new Date("2026-01-01T00:00:00Z"),
+    updatedAt: new Date("2026-01-01T00:00:00Z"),
+    ...overrides,
+  };
+}
+
+function profile(connectionId: string, includedEntryIds: string[]) {
+  return {
+    id: `profile-${connectionId}`,
+    companyId: "company-1",
+    profileKey: `app:${connectionId}`,
+    name: connectionId,
+    description: null,
+    status: "active",
+    defaultAction: "deny",
+    metadata: null,
+    createdAt: new Date("2026-01-01T00:00:00Z"),
+    updatedAt: new Date("2026-01-01T00:00:00Z"),
+    entries: includedEntryIds.map((catalogEntryId, index) => ({
+      id: `entry-${connectionId}-${index}`,
+      companyId: "company-1",
+      profileId: `profile-${connectionId}`,
+      selectorType: "catalog_entry",
+      effect: "include",
+      applicationId: null,
+      connectionId,
+      catalogEntryId,
+      toolName: null,
+      riskLevel: null,
+      conditions: null,
+      createdAt: new Date("2026-01-01T00:00:00Z"),
+      updatedAt: new Date("2026-01-01T00:00:00Z"),
+    })),
+    bindings: [],
+  };
+}
+
+describe("Connections table (M1b / PAP-13254 door 2)", () => {
+  let container: HTMLDivElement;
+  let root: ReturnType<typeof createRoot>;
+
+  beforeEach(() => {
+    listGalleryMock.mockResolvedValue({ apps: [] });
+    listAppsAttentionMock.mockResolvedValue({ apps: [] });
+    listApplicationsMock.mockResolvedValue({ applications: [] });
+    listConnectionsMock.mockResolvedValue({ connections: [] });
+    listProfilesMock.mockResolvedValue({ profiles: [] });
+    container = document.createElement("div");
+    document.body.appendChild(container);
+  });
+
+  afterEach(() => {
+    act(() => root?.unmount());
+    container.remove();
+    vi.clearAllMocks();
+  });
+
+  async function renderApps() {
+    const client = new QueryClient({ defaultOptions: { queries: { retry: false } } });
+    root = createRoot(container);
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={client}>
+          <Connections />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+  }
+
+  it("renders applications without connections as not connected with a Connect action", async () => {
+    listApplicationsMock.mockResolvedValue({
+      applications: [application({ id: "app-github", name: "GitHub" })],
+    });
+
+    await renderApps();
+
+    const text = container.textContent ?? "";
+    expect(text).toContain("All (1)");
+    expect(text).toContain("GitHub");
+    expect(text).toContain("Not connected");
+    expect(text).toContain("Connect it so agents can use it.");
+    expect(text).toContain("Connect");
+
+    const row = Array.from(container.querySelectorAll("tbody tr")).find((tr) =>
+      tr.textContent?.includes("GitHub"),
+    );
+    row?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    expect(mockNavigate).toHaveBeenCalledWith("/apps/app/app-github");
+
+    mockNavigate.mockClear();
+    const connectButton = Array.from(container.querySelectorAll("button")).find((button) =>
+      button.textContent?.includes("Connect") && !button.textContent.includes("Connect an app"),
+    );
+    connectButton?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    expect(mockNavigate).toHaveBeenCalledWith("/apps/app/app-github");
+  });
+
+  it("rolls up multi-connection status, attention count, actions, and navigation by application", async () => {
+    listApplicationsMock.mockResolvedValue({
+      applications: [
+        application({ id: "app-github", name: "GitHub" }),
+        application({ id: "app-slack", name: "Slack" }),
+        application({ id: "app-notion", name: "Notion" }),
+      ],
+    });
+    listConnectionsMock.mockResolvedValue({
+      connections: [
+        connection({ id: "c-connected", applicationId: "app-github", name: "GitHub", healthStatus: "healthy" }),
+        connection({
+          id: "c-attention",
+          applicationId: "app-slack",
+          name: "Slack",
+          healthStatus: "error",
+          lastUsedAt: new Date("2026-06-09T00:00:00Z"),
+        }),
+        connection({ id: "c-attention-2", applicationId: "app-slack", name: "Slack Team", healthStatus: "healthy" }),
+        connection({ id: "c-paused", applicationId: "app-notion", name: "Notion", enabled: false }),
+      ],
+    });
+    listAppsAttentionMock.mockResolvedValue({
+      apps: [
+        {
+          connection: connection({ id: "c-attention", applicationId: "app-slack", name: "Slack", healthStatus: "error" }),
+          healthNeedsAttention: true,
+          quarantinedCatalogEntryCount: 0,
+          pendingActionRequestCount: 0,
+          reasons: ["health"],
+        },
+        {
+          connection: connection({ id: "c-attention-2", applicationId: "app-slack", name: "Slack Team", healthStatus: "healthy" }),
+          healthNeedsAttention: false,
+          quarantinedCatalogEntryCount: 1,
+          pendingActionRequestCount: 0,
+          reasons: ["quarantined_catalog_entries"],
+        },
+      ],
+    });
+    listProfilesMock.mockResolvedValue({
+      profiles: [
+        profile("c-connected", ["a", "b", "c"]),
+        profile("c-attention", ["a"]),
+        profile("c-attention-2", ["b", "c"]),
+      ],
+    });
+
+    await renderApps();
+
+    const text = container.textContent ?? "";
+    // 1. Connected rows lose the repeated hint.
+    expect(text).not.toContain("Connected and ready");
+    // 2. Attention + Paused rows keep their explanatory hint.
+    expect(text).toContain("The key stopped working");
+    expect(text).toContain("Paused — agents can");
+    // 3. Filter chips and attention banner are application-counted, not connection-counted.
+    expect(text).toContain("All (3)");
+    expect(text).toContain("Needs attention (1)");
+    expect(text).toContain("1 app needs attention");
+    // 3. New header columns are present.
+    const headers = Array.from(container.querySelectorAll("th")).map((th) => th.textContent?.trim());
+    expect(headers).toEqual(["App", "Status", "Actions", "Last used", ""]);
+    // 4. Actions column reflects enabled catalog entries rolled up by application; missing profile => 0 on.
+    expect(text).toContain("3 on");
+    expect(text).toContain("0 on");
+    // 5. Last used renders a relative timestamp when present, dash when absent.
+    expect(text).toContain("—");
+    // 6. Multi-connection app appears once and opens its first connection detail.
+    expect(Array.from(container.querySelectorAll("tbody tr")).filter((tr) => tr.textContent?.includes("Slack"))).toHaveLength(1);
+    const slackRow = Array.from(container.querySelectorAll("tbody tr")).find((tr) =>
+      tr.textContent?.includes("Slack"),
+    );
+    slackRow?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    expect(mockNavigate).toHaveBeenCalledWith("/apps/c-attention");
+    // 7. Button labels are honest: broken health says Reconnect, healthy/paused say Open.
+    const rowButtonLabel = (name: string) =>
+      Array.from(container.querySelectorAll("tbody tr"))
+        .find((tr) => tr.textContent?.includes(name))
+        ?.querySelector("td:last-child button")?.textContent;
+    expect(rowButtonLabel("GitHub")).toBe("Open");
+    expect(rowButtonLabel("Slack")).toBe("Reconnect");
+    expect(rowButtonLabel("Notion")).toBe("Open");
+  });
+
+  // F6 (PAP-13254 §4): the row highlight and the Status pill derive from ONE
+  // health signal, so they can never disagree. A healthy connection stays
+  // "Healthy" / "Open" and is not amber-highlighted, even if the broader
+  // attention endpoint would once have flagged it (quarantine/new-tools review
+  // now live on the app detail + Review door, not the Connections highlight).
+  it("keeps a healthy app un-highlighted and Open — pill and highlight agree (F6)", async () => {
+    listApplicationsMock.mockResolvedValue({
+      applications: [application({ id: "app-github", name: "GitHub" })],
+    });
+    listConnectionsMock.mockResolvedValue({
+      connections: [connection({ id: "c-healthy", applicationId: "app-github", healthStatus: "healthy" })],
+    });
+    listAppsAttentionMock.mockResolvedValue({
+      apps: [
+        {
+          connection: connection({ id: "c-healthy", applicationId: "app-github", healthStatus: "healthy" }),
+          healthNeedsAttention: false,
+          quarantinedCatalogEntryCount: 2,
+          pendingActionRequestCount: 0,
+          reasons: ["quarantined_catalog_entries"],
+        },
+      ],
+    });
+
+    await renderApps();
+
+    expect(container.textContent).toContain("Healthy");
+    // No attention: the danger banner and attention filter chip are inert.
+    expect(container.textContent).not.toContain("needs attention");
+    expect(container.textContent).toContain("Needs attention (0)");
+    const row = Array.from(container.querySelectorAll("tbody tr")).find((tr) =>
+      tr.textContent?.includes("GitHub"),
+    );
+    expect(row?.className).not.toContain("amber");
+    const button = row?.querySelector("td:last-child button");
+    expect(button?.textContent).toBe("Open");
+    button?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    expect(mockNavigate).toHaveBeenCalledWith("/apps/c-healthy");
+  });
+});
diff --git a/ui/src/pages/apps/Connections.tsx b/ui/src/pages/apps/Connections.tsx
new file mode 100644
index 00000000000..d5bf011a64d
--- /dev/null
+++ b/ui/src/pages/apps/Connections.tsx
@@ -0,0 +1,441 @@
+import { useEffect, useMemo, useState, type ReactNode } from "react";
+import { useQuery } from "@tanstack/react-query";
+import { AppWindow, ShieldAlert, ShieldQuestion } from "lucide-react";
+import type {
+  AppGalleryEntry,
+  ToolApplication,
+  ToolConnection,
+  ToolProfileWithDetails,
+} from "@paperclipai/shared";
+import {
+  humanizeConnectionDisplayName,
+  isToolConnectionAttentionHealth as isAttentionHealthStatus,
+} from "@paperclipai/shared";
+import { useNavigate } from "@/lib/router";
+import { useCompany } from "@/context/CompanyContext";
+import { useBreadcrumbs } from "@/context/BreadcrumbContext";
+import { queryKeys } from "@/lib/queryKeys";
+import { toolsApi } from "@/api/tools";
+import { Button } from "@/components/ui/button";
+import { Skeleton } from "@/components/ui/skeleton";
+import { cn } from "@/lib/utils";
+import { timeAgo } from "@/lib/timeAgo";
+import { AppLogo } from "./AppLogo";
+import { useReviewCount } from "./useReviewCount";
+import { AdvancedToolsLink } from "./store-cards";
+
+const BROWSE_HREF = "/apps/browse";
+
+type StatusFilter = "all" | "attention";
+
+type AppStatus = {
+  label: "Healthy" | "Needs attention" | "Paused" | "Not connected";
+  tone: "connected" | "attention" | "paused" | "not_connected";
+};
+
+type AppRow = {
+  application: ToolApplication;
+  primaryConnection: ToolConnection | null;
+  status: AppStatus;
+  actionCount: number;
+  lastUsedAt: Date | string | null;
+  logoUrl?: string | null;
+};
+
+/**
+ * F6 (PAP-13254 / U3 §4): a single health signal is the source of truth for
+ * BOTH the row highlight and the Status pill so they can never disagree. The
+ * pill's `attention` tone and the row highlight are now the *same* predicate.
+ */
+function statusFor(application: ToolApplication, connections: ToolConnection[]): AppStatus {
+  if (connections.length === 0) {
+    return { label: "Not connected", tone: "not_connected" };
+  }
+  if (
+    application.status === "disabled" ||
+    application.status === "archived" ||
+    connections.every((connection) => connection.enabled === false || connection.status === "disabled")
+  ) {
+    return { label: "Paused", tone: "paused" };
+  }
+  if (connections.some((connection) => isAttentionHealthStatus(connection.healthStatus))) {
+    return { label: "Needs attention", tone: "attention" };
+  }
+  return { label: "Healthy", tone: "connected" };
+}
+
+/** The single health-derived predicate that drives highlight, pill, banner, filter (F6). */
+function rowNeedsAttention(row: AppRow): boolean {
+  return row.status.tone === "attention";
+}
+
+const STATUS_CLASS: Record<AppStatus["tone"], string> = {
+  connected: "border-emerald-500/40 bg-emerald-500/10 text-emerald-700 dark:text-emerald-300",
+  attention: "border-amber-500/40 bg-amber-500/10 text-amber-700 dark:text-amber-300",
+  paused: "border-border bg-muted text-muted-foreground",
+  not_connected: "border-border bg-background text-muted-foreground",
+};
+
+export function Connections() {
+  const navigate = useNavigate();
+  const { selectedCompany, selectedCompanyId } = useCompany();
+  const { setBreadcrumbs } = useBreadcrumbs();
+  const reviewCount = useReviewCount();
+  const [filter, setFilter] = useState<StatusFilter>("all");
+
+  useEffect(() => {
+    setBreadcrumbs([
+      { label: selectedCompany?.name ?? "Company", href: "/dashboard" },
+      { label: "Apps", href: "/apps" },
+      { label: "Connections" },
+    ]);
+    return () => setBreadcrumbs([]);
+  }, [setBreadcrumbs, selectedCompany?.name]);
+
+  const galleryQuery = useQuery({
+    queryKey: queryKeys.apps.gallery(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listGallery(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+  const applicationsQuery = useQuery({
+    queryKey: queryKeys.tools.applications(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listApplications(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+  const connectionsQuery = useQuery({
+    queryKey: queryKeys.tools.connections(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listConnections(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+  const profilesQuery = useQuery({
+    queryKey: queryKeys.tools.profiles(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listProfiles(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+
+  const gallery = galleryQuery.data?.apps ?? [];
+  const logoByName = useMemo(() => {
+    const map = new Map<string, AppGalleryEntry>();
+    for (const entry of gallery) map.set(entry.name.toLowerCase(), entry);
+    return map;
+  }, [gallery]);
+  const logoByKey = useMemo(() => {
+    const map = new Map<string, AppGalleryEntry>();
+    for (const entry of gallery) map.set(entry.key, entry);
+    return map;
+  }, [gallery]);
+
+  // "Actions on" = enabled tools in each app's per-connection access profile,
+  // mirroring what App detail shows so the count never disagrees with the page.
+  const actionCountByConnection = useMemo(() => {
+    const map = new Map<string, number>();
+    for (const profile of profilesQuery.data?.profiles ?? []) {
+      map.set(profile.profileKey, enabledActionCount(profile));
+    }
+    return map;
+  }, [profilesQuery.data]);
+
+  const connections = (connectionsQuery.data?.connections ?? []).filter(
+    (c) => c.status !== "archived",
+  );
+  const applications = (applicationsQuery.data?.applications ?? []).filter(
+    (application) => application.status !== "archived",
+  );
+  const connectionsByApplication = useMemo(() => {
+    const map = new Map<string, ToolConnection[]>();
+    for (const connection of connections) {
+      map.set(connection.applicationId, [...(map.get(connection.applicationId) ?? []), connection]);
+    }
+    return map;
+  }, [connections]);
+
+  const rows = useMemo<AppRow[]>(() => {
+    return applications.map((application) => {
+      const appConnections = connectionsByApplication.get(application.id) ?? [];
+      const primaryConnection = appConnections[0] ?? null;
+      const actionCount = appConnections.reduce(
+        (sum, connection) => sum + (actionCountByConnection.get(`app:${connection.id}`) ?? 0),
+        0,
+      );
+      const lastUsedAt = appConnections.reduce<Date | string | null>((latest, connection) => {
+        if (!connection.lastUsedAt) return latest;
+        if (!latest) return connection.lastUsedAt;
+        return new Date(connection.lastUsedAt).getTime() > new Date(latest).getTime()
+          ? connection.lastUsedAt
+          : latest;
+      }, null);
+      const galleryEntry = application.applicationKey
+        ? logoByKey.get(application.applicationKey)
+        : undefined;
+      return {
+        application,
+        primaryConnection,
+        status: statusFor(application, appConnections),
+        actionCount,
+        lastUsedAt,
+        logoUrl: galleryEntry?.logoUrl ?? logoByName.get(application.name.toLowerCase())?.logoUrl,
+      };
+    });
+  }, [actionCountByConnection, applications, connectionsByApplication, logoByKey, logoByName]);
+
+  const rowsNeedingAttention = rows.filter(rowNeedsAttention);
+  const visibleRows = filter === "attention" ? rowsNeedingAttention : rows;
+
+  if (!selectedCompanyId) {
+    return <div className="p-6 text-sm text-muted-foreground">Select a company to manage apps.</div>;
+  }
+
+  const loading = applicationsQuery.isLoading || connectionsQuery.isLoading || galleryQuery.isLoading;
+
+  return (
+    <div className="max-w-5xl">
+      {loading ? (
+        <div className="space-y-3">
+          <Skeleton className="h-8 w-40" />
+          <Skeleton className="h-64 w-full" />
+        </div>
+      ) : rows.length === 0 ? (
+        <EmptyConnections onBrowse={() => navigate(BROWSE_HREF)} />
+      ) : (
+        <div className="space-y-5">
+          <header className="flex flex-wrap items-end justify-between gap-3">
+            <div>
+              <h1 className="text-2xl font-bold tracking-tight">Connections</h1>
+              <p className="mt-1 text-sm text-muted-foreground">
+                The tools you’ve connected, and whether they’re working.
+              </p>
+            </div>
+            <Button onClick={() => navigate(BROWSE_HREF)}>Connect an app</Button>
+          </header>
+
+          <div className="flex flex-wrap items-center gap-2">
+            <FilterChip active={filter === "all"} onClick={() => setFilter("all")}>
+              All ({rows.length})
+            </FilterChip>
+            <FilterChip
+              active={filter === "attention"}
+              tone="danger"
+              disabled={rowsNeedingAttention.length === 0}
+              onClick={() => setFilter("attention")}
+            >
+              Needs attention ({rowsNeedingAttention.length})
+            </FilterChip>
+          </div>
+
+          {reviewCount > 0 && (
+            <button
+              type="button"
+              onClick={() => navigate("/apps/review")}
+              className="flex w-full items-center gap-3 rounded-xl border border-amber-500/40 bg-amber-500/10 px-4 py-3 text-left transition-colors hover:bg-amber-500/15"
+            >
+              <ShieldQuestion className="h-5 w-5 shrink-0 text-amber-600 dark:text-amber-400" />
+              <div className="min-w-0 flex-1">
+                <div className="text-sm font-semibold text-amber-900 dark:text-amber-100">
+                  {reviewCount} {reviewCount === 1 ? "action is" : "actions are"} waiting for your OK
+                </div>
+                <div className="truncate text-xs text-amber-700 dark:text-amber-300">
+                  Your agents paused to check with you before making a change.
+                </div>
+              </div>
+              <span className="shrink-0 text-xs font-semibold text-amber-800 dark:text-amber-200">Review →</span>
+            </button>
+          )}
+
+          {rowsNeedingAttention.length > 0 && (
+            <button
+              type="button"
+              onClick={() => setFilter("attention")}
+              className="flex w-full items-center gap-3 rounded-xl border border-red-500/40 bg-red-500/10 px-4 py-3 text-left transition-colors hover:bg-red-500/15"
+            >
+              <ShieldAlert className="h-5 w-5 shrink-0 text-red-600 dark:text-red-400" />
+              <div className="min-w-0 flex-1">
+                <div className="text-sm font-semibold text-red-900 dark:text-red-100">
+                  {rowsNeedingAttention.length} {rowsNeedingAttention.length === 1 ? "app needs" : "apps need"} attention
+                </div>
+                <div className="truncate text-xs text-red-700 dark:text-red-300">
+                  {floatSummary(rowsNeedingAttention)}
+                </div>
+              </div>
+              <span className="shrink-0 text-xs font-semibold text-red-800 dark:text-red-200">Fix →</span>
+            </button>
+          )}
+
+          <div className="overflow-hidden rounded-lg border border-border">
+            <table className="w-full text-sm">
+              <thead>
+                <tr className="border-b border-border bg-muted/40 text-left text-(length:--text-micro) font-semibold uppercase tracking-wide text-muted-foreground">
+                  <th className="px-4 py-2.5">App</th>
+                  <th className="px-4 py-2.5">Status</th>
+                  <th className="px-4 py-2.5">Actions</th>
+                  <th className="px-4 py-2.5">Last used</th>
+                  <th className="px-4 py-2.5" />
+                </tr>
+              </thead>
+              <tbody>
+                {visibleRows.map((row) => {
+                  const { application, primaryConnection, status } = row;
+                  const attention = rowNeedsAttention(row);
+                  const hint =
+                    status.tone === "attention"
+                      ? "The key stopped working — reconnect to fix."
+                      : status.tone === "paused"
+                        ? "Paused — agents can’t use it right now."
+                        : status.tone === "not_connected"
+                          ? "Connect it so agents can use it."
+                        : null;
+                  const appHref = primaryConnection
+                    ? `/apps/${primaryConnection.id}`
+                    : `/apps/app/${application.id}`;
+                  const actionLabel = !primaryConnection
+                    ? "Connect"
+                    : status.tone === "attention"
+                      ? "Reconnect"
+                      : "Open";
+                  return (
+                    <tr
+                      key={application.id}
+                      onClick={() => navigate(appHref)}
+                      className={cn(
+                        "cursor-pointer border-b border-border transition-colors last:border-0 hover:bg-muted/30",
+                        attention && "bg-amber-500/[0.06]",
+                      )}
+                    >
+                      <td className="px-4 py-3">
+                        <div className="flex items-center gap-3">
+                          <AppLogo
+                            name={application.name}
+                            logoUrl={row.logoUrl}
+                            size={32}
+                          />
+                          <div className="min-w-0">
+                            <div className="font-medium text-foreground">
+                              {application.name}
+                            </div>
+                            {hint && (
+                              <div className="truncate text-xs text-muted-foreground">{hint}</div>
+                            )}
+                          </div>
+                        </div>
+                      </td>
+                      <td className="px-4 py-3">
+                        <span
+                          className={cn(
+                            "inline-flex items-center rounded-full border px-2 py-0.5 text-xs font-medium",
+                            STATUS_CLASS[status.tone],
+                          )}
+                        >
+                          {status.label}
+                        </span>
+                      </td>
+                      <td className="px-4 py-3">
+                        <span className="text-xs text-muted-foreground">{row.actionCount} on</span>
+                      </td>
+                      <td className="px-4 py-3">
+                        <span className="text-xs text-muted-foreground">
+                          {row.lastUsedAt ? timeAgo(row.lastUsedAt) : "—"}
+                        </span>
+                      </td>
+                      <td className="px-4 py-3 text-right">
+                        <Button
+                          variant={attention ? "default" : "outline"}
+                          size="sm"
+                          onClick={(event) => {
+                            event.stopPropagation();
+                            navigate(appHref);
+                          }}
+                        >
+                          {actionLabel}
+                        </Button>
+                      </td>
+                    </tr>
+                  );
+                })}
+              </tbody>
+            </table>
+          </div>
+
+          <div className="flex flex-wrap items-center justify-between gap-2">
+            <p className="text-xs text-muted-foreground">
+              Apps you connect become available to every agent unless you change “Who can use it”.
+            </p>
+            <AdvancedToolsLink />
+          </div>
+        </div>
+      )}
+    </div>
+  );
+}
+
+function FilterChip({
+  active,
+  tone = "default",
+  disabled = false,
+  onClick,
+  children,
+}: {
+  active: boolean;
+  tone?: "default" | "danger";
+  disabled?: boolean;
+  onClick: () => void;
+  children: ReactNode;
+}) {
+  return (
+    <button
+      type="button"
+      disabled={disabled}
+      onClick={onClick}
+      className={cn(
+        "rounded-full border px-3 py-1 text-xs font-medium transition-colors",
+        disabled && "cursor-not-allowed opacity-50",
+        active
+          ? tone === "danger"
+            ? "border-red-500/40 bg-red-500/10 text-red-700 dark:text-red-300"
+            : "border-foreground/30 bg-foreground/[0.06] text-foreground"
+          : "border-border bg-background text-muted-foreground hover:border-foreground/30 hover:text-foreground",
+      )}
+    >
+      {children}
+    </button>
+  );
+}
+
+function enabledActionCount(profile: ToolProfileWithDetails): number {
+  let count = 0;
+  for (const entry of profile.entries ?? []) {
+    if (entry.effect === "include" && entry.catalogEntryId) count += 1;
+  }
+  return count;
+}
+
+function floatSummary(rows: AppRow[]): string {
+  const names = rows.map((row) => humanizeConnectionDisplayName(row.application.name));
+  if (names.length <= 2) return names.join(" and ");
+  return `${names.slice(0, 2).join(", ")} and ${names.length - 2} more`;
+}
+
+function EmptyConnections({ onBrowse }: { onBrowse: () => void }) {
+  return (
+    <div className="space-y-6">
+      <header>
+        <h1 className="text-2xl font-bold tracking-tight">Connections</h1>
+        <p className="mt-1 text-sm text-muted-foreground">
+          The tools you’ve connected, and whether they’re working.
+        </p>
+      </header>
+
+      <div className="rounded-2xl border border-dashed border-border bg-card p-10 text-center">
+        <div className="mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-muted">
+          <AppWindow className="h-6 w-6 text-muted-foreground" />
+        </div>
+        <p className="mt-4 text-sm font-medium text-foreground">No connections yet.</p>
+        <p className="mt-1 text-sm text-muted-foreground">
+          Add one from <span className="font-medium text-foreground">Apps</span> to give your agents
+          the tools they need.
+        </p>
+        <Button className="mt-6" onClick={onBrowse}>
+          Browse apps
+        </Button>
+      </div>
+    </div>
+  );
+}
diff --git a/ui/src/pages/apps/ReviewQueueCard.test.tsx b/ui/src/pages/apps/ReviewQueueCard.test.tsx
new file mode 100644
index 00000000000..07df963db62
--- /dev/null
+++ b/ui/src/pages/apps/ReviewQueueCard.test.tsx
@@ -0,0 +1,153 @@
+// @vitest-environment jsdom
+
+import { flushSync } from "react-dom";
+import { createRoot } from "react-dom/client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { ReviewQueueCard } from "./ReviewQueueCard";
+
+const listActionRequestsMock = vi.hoisted(() => vi.fn());
+const approveActionRequestMock = vi.hoisted(() => vi.fn());
+const createTrustRuleFromActionRequestMock = vi.hoisted(() => vi.fn());
+const pushToastMock = vi.hoisted(() => vi.fn());
+
+vi.mock("@/api/tools", () => ({
+  toolsApi: {
+    listActionRequests: (companyId: string, status: string) => listActionRequestsMock(companyId, status),
+    approveActionRequest: (companyId: string, actionRequestId: string) =>
+      approveActionRequestMock(companyId, actionRequestId),
+    createTrustRuleFromActionRequest: (companyId: string, actionRequestId: string, input: unknown) =>
+      createTrustRuleFromActionRequestMock(companyId, actionRequestId, input),
+  },
+}));
+
+vi.mock("@/context/CompanyContext", () => ({
+  useCompany: () => ({
+    selectedCompanyId: "company-1",
+    selectedCompany: { id: "company-1", name: "Paperclip" },
+  }),
+}));
+
+vi.mock("@/context/ToastContext", () => ({
+  useToast: () => ({ pushToast: pushToastMock }),
+}));
+
+(globalThis as typeof globalThis & { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true;
+
+async function act(callback: () => void | Promise<void>) {
+  let result: void | Promise<void> = undefined;
+  flushSync(() => {
+    result = callback();
+  });
+  await result;
+}
+
+function pendingRequest() {
+  return {
+    request: {
+      id: "request-1",
+      companyId: "company-1",
+      invocationId: "invocation-1",
+      issueId: "issue-1",
+      interactionId: null,
+      approvalId: null,
+      status: "pending",
+      canonicalArgumentsHash: "hash-1",
+      canonicalArgumentsSummary: {},
+      signedArguments: "signed",
+      previewMarkdown: null,
+      requestedByAgentId: "agent-1",
+      requestedByUserId: null,
+      resolvedByAgentId: null,
+      resolvedByUserId: null,
+      decidedByAgentId: null,
+      decidedByUserId: null,
+      decidedAt: null,
+      expiresAt: null,
+      resolvedAt: null,
+      createdAt: new Date("2026-06-16T12:00:00Z"),
+      updatedAt: new Date("2026-06-16T12:00:00Z"),
+    },
+    toolName: "send_email",
+    toolTitle: "Send email",
+    connectionId: "connection-1",
+    connectionName: "Mail",
+    applicationName: "Mail",
+    riskLevel: "write",
+    requestedByAgentId: "agent-1",
+  };
+}
+
+async function flushReact() {
+  await act(async () => {
+    await Promise.resolve();
+    await new Promise((resolve) => window.setTimeout(resolve, 0));
+  });
+}
+
+function buttonContaining(text: string): HTMLButtonElement | undefined {
+  return Array.from(document.body.querySelectorAll("button")).find(
+    (button) => button.textContent?.includes(text),
+  ) as HTMLButtonElement | undefined;
+}
+
+describe("ReviewQueueCard", () => {
+  let container: HTMLDivElement;
+  let root: ReturnType<typeof createRoot>;
+
+  beforeEach(() => {
+    container = document.createElement("div");
+    document.body.appendChild(container);
+    listActionRequestsMock.mockResolvedValue({ actionRequests: [pendingRequest()] });
+    approveActionRequestMock.mockResolvedValue({ ...pendingRequest().request, status: "approved" });
+    createTrustRuleFromActionRequestMock.mockResolvedValue({ id: "policy-1" });
+  });
+
+  afterEach(() => {
+    act(() => root?.unmount());
+    container.remove();
+    document.body.innerHTML = "";
+    vi.clearAllMocks();
+  });
+
+  async function render() {
+    const client = new QueryClient({ defaultOptions: { queries: { retry: false } } });
+    root = createRoot(container);
+    await act(async () => {
+      root.render(
+        <QueryClientProvider client={client}>
+          <ReviewQueueCard emptyState="reassure" />
+        </QueryClientProvider>,
+      );
+    });
+    await flushReact();
+  }
+
+  it("promotes Always allow only after the action request is approved", async () => {
+    const calls: string[] = [];
+    approveActionRequestMock.mockImplementation(async () => {
+      calls.push("approve");
+      return { ...pendingRequest().request, status: "approved" };
+    });
+    createTrustRuleFromActionRequestMock.mockImplementation(async () => {
+      calls.push("trust-rule");
+      return { id: "policy-1" };
+    });
+    await render();
+
+    await act(async () => {
+      buttonContaining("Always allow")?.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+      await Promise.resolve();
+    });
+    await flushReact();
+
+    expect(calls).toEqual(["approve", "trust-rule"]);
+    expect(approveActionRequestMock).toHaveBeenCalledWith("company-1", "request-1");
+    expect(createTrustRuleFromActionRequestMock).toHaveBeenCalledWith(
+      "company-1",
+      "request-1",
+      { approvalThreshold: 1 },
+    );
+    expect(pushToastMock).toHaveBeenCalledWith(expect.objectContaining({ title: "Always allowed" }));
+  });
+});
diff --git a/ui/src/pages/apps/ReviewQueueCard.tsx b/ui/src/pages/apps/ReviewQueueCard.tsx
new file mode 100644
index 00000000000..412b14fff25
--- /dev/null
+++ b/ui/src/pages/apps/ReviewQueueCard.tsx
@@ -0,0 +1,196 @@
+import { useMemo, useState } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { Check, Loader2, ShieldQuestion, X } from "lucide-react";
+import type { ToolActionRequestListItem } from "@paperclipai/shared";
+import { humanizeConnectionDisplayName } from "@paperclipai/shared";
+import { useCompany } from "@/context/CompanyContext";
+import { useToast } from "@/context/ToastContext";
+import { queryKeys } from "@/lib/queryKeys";
+import { timeAgo } from "@/lib/timeAgo";
+import { toolsApi } from "@/api/tools";
+import { Button } from "@/components/ui/button";
+import { MarkdownBody } from "@/components/MarkdownBody";
+
+/**
+ * "Ask first" review queue (M1b float / M9 card, PAP-10859).
+ *
+ * Renders pending `tool_action_requests` as prosumer cards with three choices:
+ *   • Allow once   → approve this single request
+ *   • Always allow → approve + create a trust rule (won't ask again)
+ *   • Decline      → reject this request
+ *
+ * Pass `connectionId` to scope the queue to a single app (App detail); omit it
+ * to show every pending request (Needs attention page).
+ */
+export function ReviewQueueCard({
+  connectionId,
+  emptyState = "hidden",
+  heading = "Waiting for your OK",
+}: {
+  connectionId?: string;
+  emptyState?: "hidden" | "reassure";
+  heading?: string;
+}) {
+  const { selectedCompanyId } = useCompany();
+
+  const query = useQuery({
+    queryKey: queryKeys.tools.actionRequests(selectedCompanyId ?? "__none__", "pending"),
+    queryFn: () => toolsApi.listActionRequests(selectedCompanyId!, "pending"),
+    enabled: !!selectedCompanyId,
+    refetchInterval: 20_000,
+  });
+
+  const items = useMemo(() => {
+    const all = query.data?.actionRequests ?? [];
+    return connectionId ? all.filter((item) => item.connectionId === connectionId) : all;
+  }, [query.data, connectionId]);
+
+  if (!selectedCompanyId) return null;
+  if (query.isLoading) return null;
+
+  if (items.length === 0) {
+    if (emptyState === "hidden") return null;
+    return (
+      <div className="rounded-xl border border-border bg-card p-5 text-sm text-muted-foreground">
+        Nothing is waiting for your OK right now.
+      </div>
+    );
+  }
+
+  return (
+    <section className="space-y-3">
+      <div className="flex items-center gap-2">
+        <ShieldQuestion className="h-4 w-4 text-amber-600 dark:text-amber-400" />
+        <h2 className="text-sm font-bold text-foreground">{heading}</h2>
+        <span className="inline-flex items-center rounded-full bg-amber-500/15 px-2 py-0.5 text-xs font-semibold text-amber-700 dark:text-amber-300">
+          {items.length}
+        </span>
+      </div>
+      <div className="space-y-3">
+        {items.map((item) => (
+          <ReviewRow key={item.request.id} companyId={selectedCompanyId} item={item} />
+        ))}
+      </div>
+    </section>
+  );
+}
+
+function ReviewRow({ companyId, item }: { companyId: string; item: ToolActionRequestListItem }) {
+  const queryClient = useQueryClient();
+  const { pushToast } = useToast();
+  const [resolving, setResolving] = useState<null | "allow" | "always" | "decline">(null);
+
+  const invalidate = () => {
+    queryClient.invalidateQueries({ queryKey: queryKeys.tools.actionRequests(companyId, "pending") });
+    queryClient.invalidateQueries({ queryKey: queryKeys.apps.attention(companyId) });
+  };
+
+  const allowOnce = useMutation({
+    mutationFn: () => toolsApi.approveActionRequest(companyId, item.request.id),
+    onMutate: () => setResolving("allow"),
+    onSuccess: () => {
+      pushToast({ title: "Allowed once", body: `${actionLabel(item)} can run this time.`, tone: "success" });
+      invalidate();
+    },
+    onError: (error) => {
+      invalidate();
+      failToast(pushToast, error);
+    },
+    onSettled: () => setResolving(null),
+  });
+
+  const alwaysAllow = useMutation({
+    mutationFn: async () => {
+      const approved = await toolsApi.approveActionRequest(companyId, item.request.id);
+      await toolsApi.createTrustRuleFromActionRequest(companyId, item.request.id, { approvalThreshold: 1 });
+      return approved;
+    },
+    onMutate: () => setResolving("always"),
+    onSuccess: () => {
+      pushToast({
+        title: "Always allowed",
+        body: `${actionLabel(item)} won’t ask again.`,
+        tone: "success",
+      });
+      invalidate();
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.trustRules(companyId) });
+    },
+    onError: (error) => {
+      invalidate();
+      failToast(pushToast, error);
+    },
+    onSettled: () => setResolving(null),
+  });
+
+  const decline = useMutation({
+    mutationFn: () => toolsApi.declineActionRequest(companyId, item.request.id),
+    onMutate: () => setResolving("decline"),
+    onSuccess: () => {
+      pushToast({ title: "Declined", body: `${actionLabel(item)} won’t run.`, tone: "info" });
+      invalidate();
+    },
+    onError: (error) => {
+      invalidate();
+      failToast(pushToast, error);
+    },
+    onSettled: () => setResolving(null),
+  });
+
+  const busy = resolving !== null;
+  const preview = item.request.previewMarkdown?.trim();
+
+  return (
+    <div className="rounded-xl border border-amber-500/40 bg-amber-500/[0.07] p-4">
+      <div className="flex flex-wrap items-baseline gap-x-2 gap-y-1 text-sm">
+        <span className="font-bold text-foreground">{actionLabel(item)}</span>
+        {item.applicationName && (
+          <span className="text-muted-foreground">
+            in {humanizeConnectionDisplayName(item.applicationName)}
+          </span>
+        )}
+        <span className="text-xs text-muted-foreground">· asked {timeAgo(item.request.createdAt)}</span>
+      </div>
+
+      {preview ? (
+        <div className="mt-2 rounded-lg border border-border bg-background px-3 py-2 text-sm">
+          <MarkdownBody>{preview}</MarkdownBody>
+        </div>
+      ) : (
+        <p className="mt-1 text-sm text-muted-foreground">
+          An agent wants to run this action. It can change something, so we’re checking with you first.
+        </p>
+      )}
+
+      <div className="mt-3 flex flex-wrap items-center gap-2">
+        <Button size="sm" onClick={() => allowOnce.mutate()} disabled={busy}>
+          {resolving === "allow" ? <Loader2 className="mr-1.5 h-3.5 w-3.5 animate-spin" /> : <Check className="mr-1.5 h-3.5 w-3.5" />}
+          Allow once
+        </Button>
+        <Button size="sm" variant="outline" onClick={() => alwaysAllow.mutate()} disabled={busy}>
+          {resolving === "always" ? <Loader2 className="mr-1.5 h-3.5 w-3.5 animate-spin" /> : null}
+          Always allow
+        </Button>
+        <Button size="sm" variant="ghost" onClick={() => decline.mutate()} disabled={busy}>
+          {resolving === "decline" ? <Loader2 className="mr-1.5 h-3.5 w-3.5 animate-spin" /> : <X className="mr-1.5 h-3.5 w-3.5" />}
+          Decline
+        </Button>
+      </div>
+    </div>
+  );
+}
+
+function actionLabel(item: ToolActionRequestListItem): string {
+  if (!item.toolTitle && !item.toolName) return "This action";
+  return humanizeConnectionDisplayName(item.toolName ?? "", { title: item.toolTitle });
+}
+
+function failToast(
+  pushToast: ReturnType<typeof useToast>["pushToast"],
+  error: unknown,
+) {
+  pushToast({
+    title: "Couldn’t save that",
+    body: error instanceof Error ? error.message : "Please try again.",
+    tone: "error",
+  });
+}
diff --git a/ui/src/pages/apps/app-detail/ActivityPanel.render.test.tsx b/ui/src/pages/apps/app-detail/ActivityPanel.render.test.tsx
new file mode 100644
index 00000000000..2eed5c30a99
--- /dev/null
+++ b/ui/src/pages/apps/app-detail/ActivityPanel.render.test.tsx
@@ -0,0 +1,100 @@
+// @vitest-environment jsdom
+
+import { flushSync } from "react-dom";
+import type { ReactNode } from "react";
+import { createRoot } from "react-dom/client";
+import { afterEach, describe, expect, it, vi } from "vitest";
+import type { Agent, ToolCallEvent } from "@paperclipai/shared";
+import { ActivityPanel } from "./ActivityPanel";
+
+vi.mock("@/lib/router", () => ({
+  Link: ({ to, children }: { to: string; children: ReactNode }) => <a href={to}>{children}</a>,
+}));
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+(globalThis as any).IS_REACT_ACT_ENVIRONMENT = true;
+
+function act(callback: () => void) {
+  flushSync(callback);
+}
+
+function event(overrides: Partial<ToolCallEvent>): ToolCallEvent {
+  return {
+    id: "evt-1",
+    companyId: "co-1",
+    eventType: "call_completed",
+    actorType: "agent",
+    actorId: null,
+    agentId: "agent-1",
+    runId: null,
+    issueId: null,
+    applicationId: null,
+    connectionId: "conn-1",
+    catalogEntryId: null,
+    invocationId: null,
+    actionRequestId: null,
+    runtimeSlotId: null,
+    toolName: "mcp.app-gallery-link-abc:read_values",
+    decision: null,
+    matchedPolicyIds: [],
+    reasonCode: null,
+    outcome: "success",
+    latencyMs: null,
+    requestHash: null,
+    requestSummary: null,
+    resultHash: null,
+    resultSummary: null,
+    resultSizeBytes: null,
+    redactionPlan: null,
+    rateLimitState: null,
+    metadata: null,
+    errorCode: null,
+    errorMessage: null,
+    createdAt: new Date("2026-06-18T00:00:00Z"),
+    ...overrides,
+  } as ToolCallEvent;
+}
+
+const agents: Agent[] = [{ id: "agent-1", name: "BenchmarkForensics" } as Agent];
+
+let container: HTMLDivElement | null = null;
+
+afterEach(() => {
+  container?.remove();
+  container = null;
+});
+
+function renderPanel(props: Parameters<typeof ActivityPanel>[0]) {
+  container = document.createElement("div");
+  document.body.appendChild(container);
+  const root = createRoot(container);
+  act(() => root.render(<ActivityPanel {...props} />));
+  return container.textContent ?? "";
+}
+
+describe("ActivityPanel render", () => {
+  const base = {
+    lifecycleEvents: [],
+    issues: {},
+    actionRequests: {},
+    loading: false,
+    agents,
+    connectionId: "conn-1",
+    appName: "Google Sheets",
+  };
+
+  it("renders 'tested as' attribution for a Test-tab call", () => {
+    const text = renderPanel({
+      ...base,
+      events: [event({ actorType: "user", actorId: "user-1", metadata: { source: "test" } })],
+      userLabelById: new Map([["user-1", "Dotta"]]),
+    });
+    expect(text).toContain("Dotta tested as BenchmarkForensics used Read Values");
+  });
+
+  it("renders a real heartbeat call without the prefix", () => {
+    const text = renderPanel({ ...base, events: [event({})] });
+    expect(text).toContain("BenchmarkForensics used Read Values");
+    expect(text).not.toContain("tested as");
+  });
+});
diff --git a/ui/src/pages/apps/app-detail/ActivityPanel.test.tsx b/ui/src/pages/apps/app-detail/ActivityPanel.test.tsx
new file mode 100644
index 00000000000..4606813e8df
--- /dev/null
+++ b/ui/src/pages/apps/app-detail/ActivityPanel.test.tsx
@@ -0,0 +1,99 @@
+import { describe, expect, it } from "vitest";
+import type { ToolCallEvent } from "@paperclipai/shared";
+import { humanizeEvent, isTestEvent, resolveActorLabel } from "./ActivityPanel";
+
+function event(overrides: Partial<ToolCallEvent>): ToolCallEvent {
+  return {
+    id: "evt-1",
+    companyId: "co-1",
+    eventType: "call_completed",
+    actorType: "agent",
+    actorId: null,
+    agentId: "agent-1",
+    runId: null,
+    issueId: null,
+    applicationId: null,
+    connectionId: "conn-1",
+    catalogEntryId: null,
+    invocationId: null,
+    actionRequestId: null,
+    runtimeSlotId: null,
+    toolName: "mcp.app-gallery-link-abc:read_values",
+    decision: null,
+    matchedPolicyIds: [],
+    reasonCode: null,
+    outcome: "success",
+    latencyMs: null,
+    requestHash: null,
+    requestSummary: null,
+    resultHash: null,
+    resultSummary: null,
+    resultSizeBytes: null,
+    redactionPlan: null,
+    rateLimitState: null,
+    metadata: null,
+    errorCode: null,
+    errorMessage: null,
+    createdAt: new Date("2026-06-18T00:00:00Z"),
+    ...overrides,
+  } as ToolCallEvent;
+}
+
+describe("isTestEvent", () => {
+  it("is true only when metadata.source === 'test'", () => {
+    expect(isTestEvent(event({ metadata: { source: "test" } }))).toBe(true);
+    expect(isTestEvent(event({ metadata: { source: "heartbeat" } }))).toBe(false);
+    expect(isTestEvent(event({ metadata: null }))).toBe(false);
+  });
+});
+
+describe("resolveActorLabel", () => {
+  it("prefers the directory display name", () => {
+    expect(resolveActorLabel("user-1", new Map([["user-1", "Dotta"]]))).toBe("Dotta");
+  });
+
+  it("falls back to 'Board' for the local board principal", () => {
+    expect(resolveActorLabel("local-board", new Map())).toBe("Board");
+    expect(resolveActorLabel("local-board", undefined)).toBe("Board");
+  });
+
+  it("falls back to 'Someone' for an unknown actor", () => {
+    expect(resolveActorLabel("user-x", new Map())).toBe("Someone");
+    expect(resolveActorLabel(null, new Map())).toBe("Someone");
+  });
+});
+
+describe("humanizeEvent test-tab attribution", () => {
+  it("surfaces '<User> tested as <Agent>' for a successful test call", () => {
+    const { primary } = humanizeEvent(
+      event({ actorType: "user", actorId: "user-1", metadata: { source: "test" } }),
+      "BenchmarkForensics",
+      undefined,
+      "Dotta",
+    );
+    expect(primary).toBe("Dotta tested as BenchmarkForensics used Read Values");
+  });
+
+  it("renders a real heartbeat call without the tested-as prefix", () => {
+    const { primary } = humanizeEvent(event({}), "BenchmarkForensics");
+    expect(primary).toBe("BenchmarkForensics used Read Values");
+  });
+
+  it("attributes a denied test call to the runner instead of an anonymous block", () => {
+    const { primary } = humanizeEvent(
+      event({ eventType: "call_denied", outcome: "denied", metadata: { source: "test" } }),
+      "BenchmarkForensics",
+      undefined,
+      "Board",
+    );
+    expect(primary).toBe("Board tested as BenchmarkForensics - Read Values is turned off");
+  });
+
+  it("keeps the anonymous block wording for non-test denied calls", () => {
+    const { primary } = humanizeEvent(
+      event({ eventType: "call_denied", outcome: "denied" }),
+      "BenchmarkForensics",
+    );
+    expect(primary).toBe("Blocked Read Values - it isn't turned on");
+  });
+});
diff --git a/ui/src/pages/apps/app-detail/ActivityPanel.tsx b/ui/src/pages/apps/app-detail/ActivityPanel.tsx
new file mode 100644
index 00000000000..ae28488ba57
--- /dev/null
+++ b/ui/src/pages/apps/app-detail/ActivityPanel.tsx
@@ -0,0 +1,278 @@
+import { useMemo } from "react";
+import {
+  humanizeConnectionDisplayName,
+  type Agent,
+  type ToolCallEvent,
+  type ToolConnectionLifecycleEvent,
+} from "@paperclipai/shared";
+import { Link } from "@/lib/router";
+import { Skeleton } from "@/components/ui/skeleton";
+import { cn } from "@/lib/utils";
+import { timeAgo } from "@/lib/timeAgo";
+import { appTabHref } from "../app-tabs";
+import type { ActivityPanelProps } from "./types";
+
+export function ActivityPanel(props: ActivityPanelProps) {
+  return <RecentActivity {...props} />;
+}
+
+type TimelineRow = {
+  key: string;
+  createdAt: Date | string;
+  primary: string;
+  dotClass: string;
+  /** Secondary "while working on PAP-…" issue link, tool-call rows only. */
+  issue?: { identifier: string } | null;
+  /** Deep-link rendered after the timestamp ("View in Setup"), lifecycle rows only. */
+  link?: { to: string; label: string } | null;
+};
+
+function RecentActivity({
+  events,
+  lifecycleEvents,
+  issues,
+  actionRequests,
+  loading,
+  agents,
+  connectionId,
+  appName,
+  userLabelById,
+}: ActivityPanelProps) {
+  const nameById = useMemo(() => new Map(agents.map((a) => [a.id, a.name])), [agents]);
+
+  const rows = useMemo<TimelineRow[]>(() => {
+    const callRows: TimelineRow[] = events
+      .filter((e) => HUMANIZED_EVENTS.has(e.eventType))
+      .map((event) => {
+        const row = humanizeEvent(
+          event,
+          nameById.get(event.agentId ?? "") ?? null,
+          event.actionRequestId ? actionRequests[event.actionRequestId] : undefined,
+          isTestEvent(event) ? resolveActorLabel(event.actorId, userLabelById) : null,
+        );
+        return {
+          key: `call:${event.id}`,
+          createdAt: event.createdAt,
+          primary: row.primary,
+          dotClass: dotColor(event),
+          issue: event.issueId ? issues[event.issueId] ?? null : null,
+        };
+      });
+
+    const setupHref = appTabHref(connectionId, "setup");
+    const lifecycleRows: TimelineRow[] = lifecycleEvents.map((event) => ({
+      key: `lifecycle:${event.id}`,
+      createdAt: event.createdAt,
+      primary: humanizeLifecycleEvent(event, appName, nameById.get(event.agentId ?? "") ?? null),
+      dotClass: lifecycleDotColor(event),
+      link: { to: setupHref, label: lifecycleLinkLabel(event) },
+    }));
+
+    return [...callRows, ...lifecycleRows].sort(
+      (a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime(),
+    );
+  }, [events, lifecycleEvents, issues, actionRequests, nameById, connectionId, appName, userLabelById]);
+
+  return (
+    <section className="space-y-2">
+      <div>
+        <h2 className="text-sm font-bold text-foreground">Recent activity</h2>
+      </div>
+      {loading ? (
+        <div className="space-y-2 py-4">
+          <Skeleton className="h-4 w-3/4" />
+          <Skeleton className="h-4 w-2/3" />
+        </div>
+      ) : rows.length === 0 ? (
+        <p className="py-5 text-sm text-muted-foreground">No activity yet.</p>
+      ) : (
+        <ul className="divide-y divide-border">
+          {rows.map((row) => (
+            <li key={row.key} className="flex items-start gap-3 py-3 text-sm">
+              <span className={cn("mt-1.5 h-1.5 w-1.5 shrink-0 rounded-full", row.dotClass)} aria-hidden />
+              <span className="min-w-0 flex-1">
+                <span className="block text-foreground">{row.primary}</span>
+                <span className="block truncate text-xs text-muted-foreground">
+                  {row.issue ? (
+                    <>
+                      while working on{" "}
+                      <Link
+                        to={`/issues/${row.issue.identifier}`}
+                        className="font-medium text-muted-foreground hover:text-foreground hover:underline"
+                      >
+                        {row.issue.identifier}
+                      </Link>
+                      {" · "}
+                    </>
+                  ) : null}
+                  {timeAgo(row.createdAt)}
+                  {row.link ? (
+                    <>
+                      {" · "}
+                      <Link
+                        to={row.link.to}
+                        className="font-medium text-muted-foreground hover:text-foreground hover:underline"
+                      >
+                        {row.link.label}
+                      </Link>
+                    </>
+                  ) : null}
+                </span>
+              </span>
+            </li>
+          ))}
+        </ul>
+      )}
+    </section>
+  );
+}
+
+const HUMANIZED_EVENTS = new Set<ToolCallEvent["eventType"]>([
+  "call_completed",
+  "call_failed",
+  "call_denied",
+  "approval_requested",
+  "approval_resolved",
+]);
+
+/**
+ * A row is a prosumer Test-tab call (vs. a real heartbeat-driven agent run) when
+ * the gateway tagged the audit event `metadata.source === "test"` (PAP-11349).
+ */
+export function isTestEvent(event: ToolCallEvent): boolean {
+  return (event.metadata as { source?: unknown } | null)?.source === "test";
+}
+
+/** Display name for the human who ran a Test-tab call, from the company directory. */
+export function resolveActorLabel(
+  actorId: string | null,
+  userLabelById: Map<string, string> | undefined,
+): string {
+  if (actorId) {
+    const label = userLabelById?.get(actorId);
+    if (label) return label;
+    if (actorId === "local-board") return "Board";
+  }
+  return "Someone";
+}
+
+export function humanizeEvent(
+  event: ToolCallEvent,
+  agentName: string | null,
+  actionRequest?: ActivityPanelProps["actionRequests"][string],
+  /** When set, this row is a Test-tab call run by the named user; prefix accordingly. */
+  testRunnerLabel?: string | null,
+): { primary: string } {
+  // For Test-tab calls, surface "<User> tested as <Agent>" so prosumer test runs are
+  // distinguishable from real heartbeat agent activity in the audit trail (PAP-11415).
+  const who = testRunnerLabel
+    ? `${testRunnerLabel} tested as ${agentName ?? "an agent"}`
+    : agentName ?? "An agent";
+  // The raw gateway tool name is prefixed (e.g. `mcp.app-gallery-link-…:kv-set`);
+  // humanize it to "Kv Set" to match the cross-app Activity view (PAP-11105).
+  const action = event.toolName ? humanizeConnectionDisplayName(event.toolName) : "an action";
+  switch (event.eventType) {
+    case "call_completed":
+      return {
+        primary: event.outcome === "success"
+          ? `${who} used ${action}`
+          : `${who} ran ${action}, but it didn't finish`,
+      };
+    case "call_failed":
+      return { primary: `${action} didn't work for ${lower(who)}` };
+    case "call_denied":
+      return {
+        primary: testRunnerLabel
+          ? `${who} - ${action} is turned off`
+          : `Blocked ${action} - it isn't turned on`,
+      };
+    case "approval_requested":
+      return { primary: `${who} asked before running ${action}` };
+    case "approval_resolved":
+      return { primary: humanizeApprovalResolved(action, actionRequest) };
+    default:
+      return { primary: `${who} used ${action}` };
+  }
+}
+
+function humanizeApprovalResolved(
+  action: string,
+  actionRequest?: ActivityPanelProps["actionRequests"][string],
+): string {
+  const resolver = actionRequest?.resolverDisplayName ?? "Someone";
+  if (actionRequest?.status === "approved") return `${resolver} approved ${action}`;
+  if (actionRequest?.status === "rejected") return `${resolver} said no to ${action}`;
+  return `${resolver} reviewed ${action}`;
+}
+
+/** Humanize a connection lifecycle event into a prosumer sentence (PAP-11284). */
+function humanizeLifecycleEvent(
+  event: ToolConnectionLifecycleEvent,
+  appName: string,
+  agentName: string | null,
+): string {
+  const who = event.actorDisplayName ?? agentName ?? "Someone";
+  switch (event.type) {
+    case "app_connected":
+      return `${who} connected ${appName}`;
+    case "app_paused":
+      return `${who} paused this app`;
+    case "app_resumed":
+      return `${who} resumed this app`;
+    case "reconnected":
+      return `${who} reconnected ${appName}`;
+    case "disconnected":
+      return `${who} disconnected ${appName}`;
+    case "allowlist_changed":
+      return humanizeAllowlistChange(who, event.details);
+    case "actions_quarantined": {
+      const count = numberFrom(event.details?.count);
+      return `${count} new ${count === 1 ? "action" : "actions"} need review`;
+    }
+    default:
+      return `${who} updated this app`;
+  }
+}
+
+function humanizeAllowlistChange(who: string, details: Record<string, unknown> | null): string {
+  const added = numberFrom(details?.added);
+  const removed = numberFrom(details?.removed);
+  if (added > 0 && removed === 0) {
+    return `${who} added ${added} ${added === 1 ? "sheet" : "sheets"} to the allowlist`;
+  }
+  if (removed > 0 && added === 0) {
+    return `${who} removed ${removed} ${removed === 1 ? "sheet" : "sheets"} from the allowlist`;
+  }
+  if (added > 0 && removed > 0) {
+    return `${who} updated the allowlist (added ${added}, removed ${removed})`;
+  }
+  return `${who} updated the allowlist`;
+}
+
+function lifecycleLinkLabel(event: ToolConnectionLifecycleEvent): string {
+  return event.type === "actions_quarantined" ? "Review in Setup" : "View in Setup";
+}
+
+function numberFrom(value: unknown): number {
+  const n = Number(value ?? 0);
+  return Number.isFinite(n) ? n : 0;
+}
+
+function lower(who: string): string {
+  return who === "An agent" ? "an agent" : who;
+}
+
+function dotColor(event: ToolCallEvent): string {
+  if (event.eventType === "call_failed" || event.outcome === "failure" || event.outcome === "timeout") {
+    return "bg-red-400";
+  }
+  if (event.eventType === "call_denied" || event.outcome === "denied") return "bg-amber-400";
+  if (event.eventType === "approval_requested") return "bg-amber-400";
+  return "bg-emerald-400";
+}
+
+function lifecycleDotColor(event: ToolConnectionLifecycleEvent): string {
+  if (event.type === "disconnected") return "bg-red-400";
+  if (event.type === "app_paused" || event.type === "actions_quarantined") return "bg-amber-400";
+  return "bg-emerald-400";
+}
diff --git a/ui/src/pages/apps/app-detail/AdvancedPanel.tsx b/ui/src/pages/apps/app-detail/AdvancedPanel.tsx
new file mode 100644
index 00000000000..21407a9f243
--- /dev/null
+++ b/ui/src/pages/apps/app-detail/AdvancedPanel.tsx
@@ -0,0 +1,274 @@
+import { useState } from "react";
+import { useMutation } from "@tanstack/react-query";
+import { ArrowUpRight, Loader2, Lock } from "lucide-react";
+import type { AppGalleryEntry, ToolConnection } from "@paperclipai/shared";
+import { humanizeConnectionDisplayName } from "@paperclipai/shared";
+import { toolsApi } from "@/api/tools";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { useToast } from "@/context/ToastContext";
+import { redactUrlSecrets } from "@/lib/redact-url-secrets";
+import type { AppDetailSectionProps } from "./types";
+
+export function AdvancedPanel({
+  connection,
+  appName,
+  galleryEntry,
+  removing,
+  onRemove,
+  onReplaced,
+}: Pick<AppDetailSectionProps, "connection" | "appName" | "galleryEntry"> & {
+  removing: boolean;
+  onRemove: () => void;
+  onReplaced: () => void;
+}) {
+  return (
+    <div className="space-y-6">
+      <KeySection connection={connection} galleryEntry={galleryEntry} onReplaced={onReplaced} />
+      <TechnicalDetails connection={connection} />
+      <DangerZone appName={appName} removing={removing} onRemove={onRemove} />
+    </div>
+  );
+}
+
+function KeySection({
+  connection,
+  galleryEntry,
+  onReplaced,
+}: {
+  connection: ToolConnection;
+  galleryEntry: AppGalleryEntry | null;
+  onReplaced: () => void;
+}) {
+  const [open, setOpen] = useState(false);
+  return (
+    <section className="rounded-xl border border-border bg-card">
+      <div className="flex items-center justify-between px-5 py-4">
+        <div className="flex items-start gap-3">
+          <Lock className="mt-0.5 h-4 w-4 text-muted-foreground" />
+          <div>
+            <h2 className="text-sm font-bold text-foreground">Key</h2>
+            <p className="mt-0.5 text-sm text-muted-foreground">
+              Your key is stored securely. Replace it if it stopped working or you rotated it.
+            </p>
+          </div>
+        </div>
+        {!open && (
+          <Button size="sm" variant="outline" onClick={() => setOpen(true)}>
+            Replace key
+          </Button>
+        )}
+      </div>
+      {open && (
+        <div className="border-t border-border px-5 py-4">
+          <ReconnectForm
+            connection={connection}
+            galleryEntry={galleryEntry}
+            onCancel={() => setOpen(false)}
+            onReconnected={() => {
+              setOpen(false);
+              onReplaced();
+            }}
+          />
+        </div>
+      )}
+    </section>
+  );
+}
+
+export function ReconnectCard({
+  connection,
+  galleryEntry,
+  onReconnected,
+}: {
+  connection: ToolConnection;
+  galleryEntry: AppGalleryEntry | null;
+  onReconnected: () => void;
+}) {
+  return (
+    <div className="rounded-xl border border-amber-500/50 bg-amber-500/10 p-5">
+      <h2 className="text-sm font-bold text-amber-900 dark:text-amber-100">This app needs reconnecting</h2>
+      <p className="mt-1 text-sm text-amber-800 dark:text-amber-200">
+        {connection.healthMessage?.trim() || "The key stopped working. Paste a new one to get it back online."}
+      </p>
+      <div className="mt-3">
+        <ReconnectForm connection={connection} galleryEntry={galleryEntry} onReconnected={onReconnected} />
+      </div>
+    </div>
+  );
+}
+
+function ReconnectForm({
+  connection,
+  galleryEntry,
+  onCancel,
+  onReconnected,
+}: {
+  connection: ToolConnection;
+  galleryEntry: AppGalleryEntry | null;
+  onCancel?: () => void;
+  onReconnected: () => void;
+}) {
+  const { pushToast } = useToast();
+  const fields = galleryEntry?.credentialFields ?? [];
+  const [values, setValues] = useState<Record<string, string>>({});
+  const [single, setSingle] = useState("");
+  const usesGallery = fields.length > 0 && !!galleryEntry;
+
+  const reconnect = useMutation({
+    mutationFn: () => {
+      const credentialValues = usesGallery
+        ? values
+        : { "credentials.authorization": single.trim() };
+      return toolsApi.reconnectConnection(connection.id, credentialValues);
+    },
+    onSuccess: (result) => {
+      const healthy =
+        result.connection.healthStatus === "healthy" || result.connection.healthStatus === "unknown";
+      if (healthy) {
+        pushToast({
+          title: "Reconnected",
+          body: `${humanizeConnectionDisplayName(connection)} is back online.`,
+          tone: "success",
+        });
+        onReconnected();
+      } else {
+        pushToast({
+          title: "Still not working",
+          body: result.connection.healthMessage?.trim() || "That key didn't check out. Try another.",
+          tone: "error",
+        });
+      }
+    },
+    onError: (error) =>
+      pushToast({
+        title: "That key didn't work",
+        body: error instanceof Error ? error.message : "Check the key and try again.",
+        tone: "error",
+      }),
+  });
+
+  const filled = usesGallery
+    ? fields.every((f) => f.required === false || (values[f.configPath]?.trim().length ?? 0) > 0)
+    : single.trim().length > 0;
+
+  return (
+    <div className="space-y-3">
+      {usesGallery ? (
+        fields.map((field) => (
+          <div key={field.configPath}>
+            <label className="text-xs font-medium text-foreground">{field.label}</label>
+            <Input
+              type="password"
+              autoComplete="off"
+              value={values[field.configPath] ?? ""}
+              onChange={(e) => setValues({ ...values, [field.configPath]: e.target.value })}
+              placeholder="****************"
+              className="mt-1 h-10 font-mono"
+            />
+            {field.helpUrl && (
+              <a
+                href={field.helpUrl}
+                target="_blank"
+                rel="noreferrer"
+                className="mt-1 inline-flex items-center gap-1 text-xs font-semibold text-foreground underline underline-offset-2"
+              >
+                Where do I find this? <ArrowUpRight className="h-3 w-3" />
+              </a>
+            )}
+          </div>
+        ))
+      ) : (
+        <Input
+          type="password"
+          autoComplete="off"
+          value={single}
+          onChange={(e) => setSingle(e.target.value)}
+          placeholder="Paste your new key"
+          className="h-10 font-mono"
+        />
+      )}
+      <div className="flex items-center gap-2">
+        <Button size="sm" disabled={!filled || reconnect.isPending} onClick={() => reconnect.mutate()}>
+          {reconnect.isPending && <Loader2 className="mr-1.5 h-3.5 w-3.5 animate-spin" />}
+          {reconnect.isPending ? "Checking..." : "Check & reconnect"}
+        </Button>
+        {onCancel && (
+          <Button size="sm" variant="ghost" onClick={onCancel} disabled={reconnect.isPending}>
+            Cancel
+          </Button>
+        )}
+      </div>
+    </div>
+  );
+}
+
+function TechnicalDetails({ connection }: { connection: ToolConnection }) {
+  return (
+    <section className="rounded-xl border border-border bg-card px-5 py-4">
+      <h2 className="text-sm font-bold text-foreground">Technical details</h2>
+      <dl className="mt-3 grid gap-2 text-xs sm:grid-cols-(--gtc-59)">
+        <dt className="text-muted-foreground">Address</dt>
+        <dd className="break-all font-mono text-foreground">{connectionAddress(connection)}</dd>
+        <dt className="text-muted-foreground">Connection type</dt>
+        <dd className="text-foreground">{connectionTransportLabel(connection.transport)}</dd>
+      </dl>
+    </section>
+  );
+}
+
+export function DangerZone({
+  appName,
+  removing,
+  onRemove,
+}: {
+  appName: string;
+  removing: boolean;
+  onRemove: () => void;
+}) {
+  const [confirming, setConfirming] = useState(false);
+  return (
+    <section className="rounded-xl border border-destructive/40 bg-card">
+      <div className="border-b border-destructive/40 px-5 py-3 text-sm font-bold text-destructive">
+        Danger zone
+      </div>
+      <div className="flex flex-wrap items-center justify-between gap-3 px-5 py-4">
+        <div>
+          <p className="text-sm font-medium text-foreground">Remove this app</p>
+          <p className="text-xs text-muted-foreground">
+            Agents lose access to {appName} right away. You can connect it again later.
+          </p>
+        </div>
+        {confirming ? (
+          <div className="flex items-center gap-2">
+            <Button variant="ghost" size="sm" onClick={() => setConfirming(false)} disabled={removing}>
+              Cancel
+            </Button>
+            <Button variant="destructive" size="sm" onClick={onRemove} disabled={removing}>
+              {removing && <Loader2 className="mr-1.5 h-3.5 w-3.5 animate-spin" />}
+              Yes, remove it
+            </Button>
+          </div>
+        ) : (
+          <Button variant="destructive" size="sm" onClick={() => setConfirming(true)}>
+            Remove app
+          </Button>
+        )}
+      </div>
+    </section>
+  );
+}
+
+export function connectionAddress(connection: ToolConnection): string {
+  const config = connection.config ?? connection.transportConfig ?? {};
+  const value = config.url ?? config.endpoint ?? config.remoteUrl;
+  if (typeof value === "string" && value.trim().length > 0) return redactUrlSecrets(value);
+  if (connection.transport === "local_stdio") return "Local command";
+  return "Not set";
+}
+
+export function connectionTransportLabel(transport: ToolConnection["transport"]): string {
+  if (transport === "remote_http") return "Remote HTTP";
+  if (transport === "local_stdio") return "Local command";
+  return "Unknown";
+}
diff --git a/ui/src/pages/apps/app-detail/PermissionsPanel.tsx b/ui/src/pages/apps/app-detail/PermissionsPanel.tsx
new file mode 100644
index 00000000000..c3c1b0c4a8c
--- /dev/null
+++ b/ui/src/pages/apps/app-detail/PermissionsPanel.tsx
@@ -0,0 +1,476 @@
+import { useEffect, useRef, useState } from "react";
+import { Loader2, PackageCheck, RefreshCw } from "lucide-react";
+import type { Agent, ToolCatalogEntry } from "@paperclipai/shared";
+import { useSearchParams } from "@/lib/router";
+import { Button } from "@/components/ui/button";
+import { Checkbox } from "@/components/ui/checkbox";
+import { AgentMultiSelect } from "@/components/AgentMultiSelect";
+import { InlineBanner } from "@/components/InlineBanner";
+import { cn } from "@/lib/utils";
+import { brandChipBadge } from "@/lib/status-colors";
+import {
+  autoExtendNotice,
+  INSTALL_ALL_WARNING,
+  installInfoNotice,
+  type InstallState,
+} from "@/lib/tool-installs";
+import { QuarantinePill } from "./SetupPanel";
+import type { AccessDraft, AppDetailSectionProps } from "./types";
+
+type ActionPermission = "off" | "allowed" | "ask";
+
+export function PermissionsPanel({
+  appName,
+  access,
+  agents,
+  install,
+  readOnly,
+  canChange,
+  quarantined,
+  enabledIds,
+  askFirstIds,
+  pending,
+  installPending,
+  onSaveAccess,
+  onSaveInstall,
+  onSetActionPermission,
+  onTurnOnQuarantined,
+  onRefreshActions,
+  refreshPending,
+}: Pick<
+  AppDetailSectionProps,
+  "access" | "agents" | "readOnly" | "canChange" | "quarantined" | "enabledIds" | "askFirstIds" | "pending"
+> & {
+  appName: string;
+  install: InstallState;
+  installPending: boolean;
+  onSaveAccess: (next: AccessDraft) => void;
+  onSaveInstall: (next: InstallState) => void;
+  onSetActionPermission: (id: string, next: ActionPermission) => void;
+  onTurnOnQuarantined: (ids: string[]) => void;
+  onRefreshActions: () => void;
+  refreshPending: boolean;
+}) {
+  // Deep-link from the Test tab's "off" panel: ?focus={catalogEntryId} scrolls
+  // to and highlights that action row.
+  const [searchParams] = useSearchParams();
+  const focusId = searchParams.get("focus");
+  return (
+    <div className="space-y-6">
+      <AccessSection access={access} agents={agents} disabled={pending} onSave={onSaveAccess} />
+      <InstalledSection
+        appName={appName}
+        agents={agents}
+        access={access}
+        install={install}
+        disabled={installPending}
+        onSave={onSaveInstall}
+      />
+      <ActionsSection
+        readOnly={readOnly}
+        canChange={canChange}
+        quarantined={quarantined}
+        enabledIds={enabledIds}
+        askFirstIds={askFirstIds}
+        disabled={pending}
+        refreshPending={refreshPending}
+        focusId={focusId}
+        onSetPermission={onSetActionPermission}
+        onTurnOnQuarantined={onTurnOnQuarantined}
+        onRefreshActions={onRefreshActions}
+      />
+    </div>
+  );
+}
+
+function AccessSection({
+  access,
+  agents,
+  disabled,
+  onSave,
+}: {
+  access: AccessDraft;
+  agents: Agent[];
+  disabled: boolean;
+  onSave: (next: AccessDraft) => void;
+}) {
+  const [editing, setEditing] = useState(false);
+  const [draft, setDraft] = useState<AccessDraft>(access);
+  const liveAgents = agents.filter((a) => a.status !== "terminated");
+
+  useEffect(() => {
+    if (!editing) setDraft(access);
+  }, [access, editing]);
+
+  const summary =
+    access.mode === "all"
+      ? "Every agent can use it"
+      : `${access.agentIds.size} ${access.agentIds.size === 1 ? "agent" : "agents"} can use it`;
+
+  const canSave = draft.mode === "all" || draft.agentIds.size > 0;
+
+  return (
+    <section className="rounded-xl border border-border bg-card">
+      <div className="flex items-center justify-between px-5 py-4">
+        <div>
+          <h2 className="text-sm font-bold text-foreground">Who can use it</h2>
+          <p className="mt-0.5 text-sm text-muted-foreground">{summary}</p>
+        </div>
+        {!editing && (
+          <Button size="sm" variant="outline" onClick={() => setEditing(true)}>
+            Change
+          </Button>
+        )}
+      </div>
+
+      {editing && (
+        <div className="space-y-3 border-t border-border px-5 py-4">
+          <label className="flex items-start gap-3">
+            <input
+              type="radio"
+              className="mt-1"
+              checked={draft.mode === "all"}
+              onChange={() => setDraft({ mode: "all", agentIds: new Set() })}
+            />
+            <span>
+              <span className="text-sm font-semibold text-foreground">All agents</span>
+              <span className="block text-xs text-muted-foreground">Anyone you've added to Paperclip.</span>
+            </span>
+          </label>
+          <label className="flex items-start gap-3">
+            <input
+              type="radio"
+              className="mt-1"
+              checked={draft.mode === "specific"}
+              onChange={() => setDraft({ mode: "specific", agentIds: new Set(draft.agentIds) })}
+            />
+            <span>
+              <span className="text-sm font-semibold text-foreground">Only specific agents</span>
+              <span className="block text-xs text-muted-foreground">Pick who can use it.</span>
+            </span>
+          </label>
+
+          {draft.mode === "specific" && (
+            <AgentMultiSelect
+              agents={liveAgents}
+              selectedAgentIds={draft.agentIds}
+              onChange={(agentIds) => setDraft({ mode: "specific", agentIds })}
+              disabled={disabled}
+            />
+          )}
+
+          <div className="flex items-center gap-2 pt-1">
+            <Button
+              size="sm"
+              disabled={disabled || !canSave}
+              onClick={() => {
+                onSave(draft);
+                setEditing(false);
+              }}
+            >
+              Save
+            </Button>
+            <Button size="sm" variant="ghost" onClick={() => setEditing(false)} disabled={disabled}>
+              Cancel
+            </Button>
+          </div>
+        </div>
+      )}
+    </section>
+  );
+}
+
+function InstalledSection({
+  appName,
+  agents,
+  access,
+  install,
+  disabled,
+  onSave,
+}: {
+  appName: string;
+  agents: Agent[];
+  access: AccessDraft;
+  install: InstallState;
+  disabled: boolean;
+  onSave: (next: InstallState) => void;
+}) {
+  const liveAgents = agents.filter((a) => a.status !== "terminated");
+  const hasAccess = (agentId: string) => access.mode === "all" || access.agentIds.has(agentId);
+  // Agents that are installed but not (yet) in the access set — installing on
+  // them auto-extends access server-side. Surfaced amber so it's never silent.
+  const extendingAgents =
+    access.mode === "all"
+      ? []
+      : [...install.agentIds].filter((id) => !access.agentIds.has(id));
+  const installedCount = install.onAll ? liveAgents.length : install.agentIds.size;
+
+  return (
+    <section className="rounded-xl border border-border bg-card">
+      <div className="flex items-center justify-between gap-3 px-5 py-4">
+        <div>
+          <h2 className="text-sm font-bold text-foreground">Installed on agents</h2>
+          <p className="mt-0.5 text-sm text-muted-foreground">
+            Whose harness carries {appName}'s tools on every run.
+          </p>
+        </div>
+        <div className="flex items-center gap-2">
+          {disabled && <span className="text-xs text-muted-foreground">Saving…</span>}
+          {install.onAll ? (
+            <InstalledBadge label="Installed on all agents" />
+          ) : install.agentIds.size > 0 ? (
+            <InstalledBadge label={`${installedCount} installed`} />
+          ) : (
+            <span className="rounded-full border border-border bg-muted px-2 py-0.5 text-xs font-medium text-muted-foreground">
+              Permitted only — not installed on any agent
+            </span>
+          )}
+        </div>
+      </div>
+
+      <div className="space-y-3 border-t border-border px-5 py-4">
+        <InlineBanner tone="info" compact>
+          {installInfoNotice(appName)}
+        </InlineBanner>
+
+        {!install.onAll && (
+          <AgentMultiSelect
+            agents={liveAgents}
+            selectedAgentIds={install.agentIds}
+            disabled={disabled}
+            triggerLabel={
+              install.agentIds.size === 0
+                ? "Choose agents to install on"
+                : `${install.agentIds.size} ${install.agentIds.size === 1 ? "agent" : "agents"} installed`
+            }
+            getDescription={(agent) => (hasAccess(agent.id) ? "has access" : "no access yet")}
+            renderNameSuffix={(agent) =>
+              !hasAccess(agent.id) && install.agentIds.has(agent.id) ? (
+                <span className={cn("rounded border px-1 py-0 text-xs font-medium", brandChipBadge.amber)}>
+                  will grant access
+                </span>
+              ) : null
+            }
+            onChange={(agentIds) => onSave({ onAll: false, agentIds })}
+          />
+        )}
+
+        <label
+          className={cn(
+            "flex items-start gap-3 rounded-lg border px-3 py-2.5",
+            install.onAll ? "border-foreground bg-muted/40" : "border-border bg-muted/20",
+          )}
+        >
+          <Checkbox
+            checked={install.onAll}
+            disabled={disabled}
+            aria-label="Install on all agents"
+            onCheckedChange={(checked) =>
+              onSave(checked ? { onAll: true, agentIds: new Set() } : { onAll: false, agentIds: new Set() })
+            }
+          />
+          <span className="text-xs text-foreground">
+            <span className="font-semibold">Install on all agents</span>
+            <span className="mt-0.5 block text-muted-foreground">
+              {INSTALL_ALL_WARNING}
+            </span>
+          </span>
+        </label>
+
+        {extendingAgents.length > 0 ? (
+          <InlineBanner tone="warning" compact>
+            <span>
+              {autoExtendNotice(
+                extendingAgents.length === 1
+                  ? liveAgents.find((a) => a.id === extendingAgents[0])?.name ?? "1 agent"
+                  : `${extendingAgents.length} agents`,
+              )}{" "}
+              <span className="font-medium">
+                Review the {extendingAgents.length} access change
+                {extendingAgents.length === 1 ? "" : "s"}
+              </span>
+            </span>
+          </InlineBanner>
+        ) : null}
+      </div>
+    </section>
+  );
+}
+
+function InstalledBadge({ label }: { label: string }) {
+  return (
+    <span className={cn("inline-flex items-center gap-1 rounded-full border px-2 py-0.5 text-xs font-medium", brandChipBadge.green)}>
+      <PackageCheck className="h-3 w-3" />
+      {label}
+    </span>
+  );
+}
+
+function ActionsSection({
+  readOnly,
+  canChange,
+  quarantined,
+  enabledIds,
+  askFirstIds,
+  disabled,
+  refreshPending,
+  focusId,
+  onSetPermission,
+  onTurnOnQuarantined,
+  onRefreshActions,
+}: {
+  readOnly: ToolCatalogEntry[];
+  canChange: ToolCatalogEntry[];
+  quarantined: ToolCatalogEntry[];
+  enabledIds: Set<string>;
+  askFirstIds: Set<string>;
+  disabled: boolean;
+  refreshPending: boolean;
+  focusId?: string | null;
+  onSetPermission: (id: string, next: ActionPermission) => void;
+  onTurnOnQuarantined: (ids: string[]) => void;
+  onRefreshActions: () => void;
+}) {
+  return (
+    <section className="space-y-3">
+      <div className="flex flex-wrap items-center justify-between gap-2">
+        <div>
+          <h2 className="text-sm font-bold text-foreground">Action permissions</h2>
+          <p className="mt-0.5 text-sm text-muted-foreground">
+            Choose what agents can do and what needs a human first.
+          </p>
+        </div>
+        <div className="flex items-center gap-2">
+          {disabled && <span className="text-xs text-muted-foreground">Saving...</span>}
+          <Button
+            variant="outline"
+            size="sm"
+            onClick={onRefreshActions}
+            disabled={refreshPending || disabled}
+          >
+            {refreshPending ? (
+              <Loader2 className="mr-1.5 h-3.5 w-3.5 animate-spin" />
+            ) : (
+              <RefreshCw className="mr-1.5 h-3.5 w-3.5" />
+            )}
+            Refresh actions
+          </Button>
+        </div>
+      </div>
+
+      {quarantined.length > 0 && (
+        <QuarantinePill
+          count={quarantined.length}
+          entries={quarantined}
+          disabled={disabled}
+          onTurnOn={onTurnOnQuarantined}
+        />
+      )}
+
+      <ActionGroup
+        title="Read only"
+        hint="Can look up context without changing anything."
+        actions={readOnly}
+        enabledIds={enabledIds}
+        askFirstIds={askFirstIds}
+        disabled={disabled}
+        focusId={focusId}
+        onSetPermission={onSetPermission}
+      />
+      <ActionGroup
+        title="Can make changes"
+        hint="Can change something in another app."
+        actions={canChange}
+        enabledIds={enabledIds}
+        askFirstIds={askFirstIds}
+        disabled={disabled}
+        focusId={focusId}
+        onSetPermission={onSetPermission}
+      />
+    </section>
+  );
+}
+
+function ActionGroup({
+  title,
+  hint,
+  actions,
+  enabledIds,
+  askFirstIds,
+  disabled,
+  focusId,
+  onSetPermission,
+}: {
+  title: string;
+  hint: string;
+  actions: ToolCatalogEntry[];
+  enabledIds: Set<string>;
+  askFirstIds: Set<string>;
+  disabled: boolean;
+  focusId?: string | null;
+  onSetPermission: (id: string, next: ActionPermission) => void;
+}) {
+  const focusRef = useRef<HTMLDivElement | null>(null);
+  useEffect(() => {
+    if (focusId && focusRef.current) {
+      focusRef.current.scrollIntoView({ behavior: "smooth", block: "center" });
+    }
+  }, [focusId]);
+  if (actions.length === 0) return null;
+  return (
+    <div className="rounded-xl border border-border bg-card">
+      <div className="border-b border-border px-5 py-3 text-sm">
+        <span className="font-bold text-foreground">{title}</span>
+        <span className="ml-2 text-muted-foreground">- {hint}</span>
+      </div>
+      <div className="divide-y divide-border">
+        {actions.map((action) => {
+          const value = actionPermission(action.id, enabledIds, askFirstIds);
+          const focused = focusId === action.id;
+          return (
+            <div
+              key={action.id}
+              ref={focused ? focusRef : undefined}
+              className={cn(
+                "flex items-center gap-4 px-5 py-3",
+                focused && "rounded-md bg-primary/5 ring-2 ring-primary/40",
+              )}
+              data-action-id={action.id}
+            >
+              <div className="min-w-0 flex-1">
+                <div className="text-sm font-medium text-foreground">{action.title ?? action.toolName}</div>
+                {action.description && (
+                  <div className="truncate text-xs text-muted-foreground">{action.description}</div>
+                )}
+              </div>
+              <select
+                aria-label={`${action.title ?? action.toolName} permission`}
+                className={cn(
+                  "h-9 w-44 rounded-md border border-input bg-background px-3 text-sm text-foreground shadow-xs outline-none",
+                  "focus-visible:border-ring focus-visible:ring-(length:--rad-3) focus-visible:ring-ring/50",
+                  "disabled:cursor-not-allowed disabled:opacity-50",
+                )}
+                value={value}
+                disabled={disabled}
+                onChange={(event) => onSetPermission(action.id, event.currentTarget.value as ActionPermission)}
+              >
+                <option value="off">Off</option>
+                <option value="allowed">Allowed</option>
+                <option value="ask">Ask a human first</option>
+              </select>
+            </div>
+          );
+        })}
+      </div>
+    </div>
+  );
+}
+
+function actionPermission(
+  id: string,
+  enabledIds: Set<string>,
+  askFirstIds: Set<string>,
+): ActionPermission {
+  if (!enabledIds.has(id)) return "off";
+  return askFirstIds.has(id) ? "ask" : "allowed";
+}
diff --git a/ui/src/pages/apps/app-detail/ReviewPanel.tsx b/ui/src/pages/apps/app-detail/ReviewPanel.tsx
new file mode 100644
index 00000000000..221b2819970
--- /dev/null
+++ b/ui/src/pages/apps/app-detail/ReviewPanel.tsx
@@ -0,0 +1,33 @@
+import { ReviewQueueCard } from "../ReviewQueueCard";
+import { QuarantinePill } from "./SetupPanel";
+import type { AppDetailSectionProps } from "./types";
+
+export function ReviewPanel({
+  connectionId,
+  quarantined = [],
+  pending = false,
+  onTurnOnQuarantined,
+}: Pick<AppDetailSectionProps, "connectionId"> &
+  Partial<Pick<AppDetailSectionProps, "quarantined" | "pending">> & {
+    onTurnOnQuarantined?: (ids: string[]) => void;
+  }) {
+  const showsQuarantinedActions = quarantined.length > 0 && !!onTurnOnQuarantined;
+
+  return (
+    <div className="space-y-4">
+      {showsQuarantinedActions ? (
+        <QuarantinePill
+          count={quarantined.length}
+          entries={quarantined}
+          disabled={pending}
+          onTurnOn={onTurnOnQuarantined}
+        />
+      ) : null}
+      <ReviewQueueCard
+        connectionId={connectionId}
+        heading="Waiting for your OK"
+        emptyState={showsQuarantinedActions ? "hidden" : "reassure"}
+      />
+    </div>
+  );
+}
diff --git a/ui/src/pages/apps/app-detail/SetupPanel.tsx b/ui/src/pages/apps/app-detail/SetupPanel.tsx
new file mode 100644
index 00000000000..a8e66fb4e82
--- /dev/null
+++ b/ui/src/pages/apps/app-detail/SetupPanel.tsx
@@ -0,0 +1,282 @@
+import { useState } from "react";
+import type { ToolCatalogEntry, ToolConnection } from "@paperclipai/shared";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { ToggleSwitch } from "@/components/ui/toggle-switch";
+import type { AppDetailSectionProps } from "./types";
+import { googleSheetsConfigWithAllowlist, parseGoogleSheetIds } from "../google-sheets";
+
+export function SetupPanel({
+  connection,
+  galleryEntry,
+  onToggleApp,
+  appToggleDisabled,
+  onUpdateConfig,
+  configUpdateDisabled,
+  onStartOAuth,
+  oauthStartDisabled,
+}: Pick<
+  AppDetailSectionProps,
+  "connection" | "galleryEntry"
+> & {
+  onToggleApp: () => void;
+  appToggleDisabled: boolean;
+  onUpdateConfig: (config: Record<string, unknown>) => void;
+  configUpdateDisabled: boolean;
+  onStartOAuth: () => void;
+  oauthStartDisabled: boolean;
+}) {
+  const description = galleryEntry?.description ?? galleryEntry?.tagline ?? null;
+  const oauth = connection.config?.oauth;
+  const hasOAuthSignIn = Boolean(oauth && typeof oauth === "object" && !Array.isArray(oauth));
+  const isSmokeLabFixture = connection.config?.smokeLabFixture === "oauth-http";
+  return (
+    <div className="space-y-6">
+      {description && (
+        <p className="max-w-2xl text-sm leading-6 text-muted-foreground">{description}</p>
+      )}
+      {galleryEntry?.key === "google-sheets" && (
+        <GoogleSheetsAllowlistSection
+          connection={connection}
+          disabled={configUpdateDisabled}
+          onUpdateConfig={onUpdateConfig}
+        />
+      )}
+      {hasOAuthSignIn && (
+        <OAuthConnectionSection
+          connected={Boolean((oauth as Record<string, unknown>).connectedAt)}
+          isSmokeLabFixture={isSmokeLabFixture}
+          disabled={oauthStartDisabled}
+          onStart={onStartOAuth}
+        />
+      )}
+      <AppLifecycleSection connection={connection} disabled={appToggleDisabled} onToggle={onToggleApp} />
+    </div>
+  );
+}
+
+function OAuthConnectionSection({
+  connected,
+  isSmokeLabFixture,
+  disabled,
+  onStart,
+}: {
+  connected: boolean;
+  isSmokeLabFixture: boolean;
+  disabled: boolean;
+  onStart: () => void;
+}) {
+  const providerName = isSmokeLabFixture ? "Smoke OAuth" : "OAuth";
+  return (
+    <section className="rounded-xl border border-border bg-card px-5 py-4">
+      <div className="flex flex-wrap items-center justify-between gap-4">
+        <div>
+          <h2 className="text-sm font-bold text-foreground">
+            {connected ? `Connected with ${providerName}` : `Connect with ${providerName}`}
+          </h2>
+          <p className="mt-0.5 text-sm text-muted-foreground">
+            {connected
+              ? "Sign in again to replace this connection's OAuth session."
+              : "Open the provider's consent page to finish connecting this app."}
+          </p>
+        </div>
+        <Button type="button" disabled={disabled} onClick={onStart}>
+          {connected ? "Reconnect" : `Connect with ${providerName}`}
+        </Button>
+      </div>
+    </section>
+  );
+}
+
+function currentSpreadsheetIds(connection: ToolConnection): string[] {
+  const raw = connection.config?.allowedSpreadsheetIds;
+  return Array.isArray(raw) ? raw.map((value) => String(value).trim()).filter(Boolean) : [];
+}
+
+function googleSheetsUrlForId(id: string): string {
+  return `https://docs.google.com/spreadsheets/d/${encodeURIComponent(id)}/edit`;
+}
+
+function GoogleSheetsAllowlistSection({
+  connection,
+  disabled,
+  onUpdateConfig,
+}: {
+  connection: ToolConnection;
+  disabled: boolean;
+  onUpdateConfig: (config: Record<string, unknown>) => void;
+}) {
+  const [draft, setDraft] = useState("");
+  const [error, setError] = useState<string | null>(null);
+  const ids = currentSpreadsheetIds(connection);
+  const saveIds = (nextIds: string[]) =>
+    onUpdateConfig(googleSheetsConfigWithAllowlist(connection.config, nextIds));
+
+  return (
+    <section className="rounded-xl border border-border bg-card px-5 py-4">
+      <div>
+        <h2 className="text-sm font-bold text-foreground">Sheets agents can use</h2>
+        <p className="mt-0.5 text-sm text-muted-foreground">
+          Agents can only use the sheets listed here.
+        </p>
+      </div>
+
+      <div className="mt-4 space-y-2">
+        {ids.length === 0 ? (
+          <div className="text-sm text-muted-foreground">No sheets are connected yet.</div>
+        ) : (
+          ids.map((id) => {
+            const sheetUrl = googleSheetsUrlForId(id);
+            return (
+              <div key={id} className="flex items-center gap-3 border-t border-border py-2 first:border-t-0">
+                <a
+                  href={sheetUrl}
+                  target="_blank"
+                  rel="noreferrer"
+                  className="min-w-0 flex-1 text-sm font-medium text-foreground underline-offset-2 hover:underline"
+                >
+                  <span className="block truncate">Open sheet</span>
+                  <span className="block truncate font-mono text-xs font-normal text-muted-foreground">
+                    {sheetUrl}
+                  </span>
+                  <span className="block truncate font-mono text-(length:--text-micro) font-normal text-muted-foreground/80">
+                    ID: {id}
+                  </span>
+                </a>
+                <Button
+                  type="button"
+                  size="sm"
+                  variant="outline"
+                  disabled={disabled || ids.length <= 1}
+                  title={ids.length <= 1 ? "Add another sheet before removing this one." : undefined}
+                  onClick={() => saveIds(ids.filter((current) => current !== id))}
+                >
+                  Remove
+                </Button>
+              </div>
+            );
+          })
+        )}
+      </div>
+
+      <div className="mt-4 flex flex-col gap-2 sm:flex-row">
+        <Input
+          value={draft}
+          onChange={(event) => {
+            setDraft(event.target.value);
+            setError(null);
+          }}
+          placeholder="https://docs.google.com/spreadsheets/d/..."
+          className="h-10"
+        />
+        <Button
+          type="button"
+          variant="outline"
+          disabled={disabled}
+          onClick={() => {
+            const parsed = parseGoogleSheetIds(draft);
+            if (parsed.ids.length === 0) {
+              setError("Paste a Google Sheets link.");
+              return;
+            }
+            if (parsed.invalidCount > 0) {
+              setError("That doesn't look like a Google Sheets link.");
+              return;
+            }
+            saveIds(Array.from(new Set([...ids, ...parsed.ids])));
+            setDraft("");
+          }}
+        >
+          Add sheet
+        </Button>
+      </div>
+      {error && <div className="mt-2 text-xs text-destructive">{error}</div>}
+    </section>
+  );
+}
+
+export function AppLifecycleSection({
+  connection,
+  disabled,
+  onToggle,
+}: {
+  connection: ToolConnection;
+  disabled: boolean;
+  onToggle: () => void;
+}) {
+  const enabled = connection.enabled !== false && connection.status !== "disabled";
+  return (
+    <section className="rounded-xl border border-border bg-card px-5 py-4">
+      <div className="flex items-center justify-between gap-4">
+        <div>
+          <h2 className="text-sm font-bold text-foreground">
+            {enabled ? "Agents can use this app" : "This app is paused"}
+          </h2>
+          <p className="mt-0.5 text-sm text-muted-foreground">
+            {enabled
+              ? "Pause it to stop every agent from using its actions."
+              : "Resume it when agents should be able to use its actions again."}
+          </p>
+        </div>
+        <ToggleSwitch
+          aria-label={enabled ? "Pause this app" : "Resume this app"}
+          checked={enabled}
+          disabled={disabled}
+          onCheckedChange={onToggle}
+          size="lg"
+        />
+      </div>
+    </section>
+  );
+}
+
+export function QuarantinePill({
+  count,
+  entries,
+  disabled,
+  onTurnOn,
+}: {
+  count: number;
+  entries: ToolCatalogEntry[];
+  disabled: boolean;
+  onTurnOn: (ids: string[]) => void;
+}) {
+  const [open, setOpen] = useState(false);
+  return (
+    <div className="rounded-xl border border-amber-500/40 bg-amber-500/[0.08] p-4">
+      <div className="flex flex-wrap items-center justify-between gap-2">
+        <div className="text-sm font-semibold text-amber-800 dark:text-amber-200">
+          {count} new {count === 1 ? "action" : "actions"} to review
+        </div>
+        <div className="flex items-center gap-2">
+          <Button size="sm" variant="outline" onClick={() => setOpen((v) => !v)}>
+            {open ? "Hide" : "Review"}
+          </Button>
+          <Button size="sm" disabled={disabled} onClick={() => onTurnOn(entries.map((e) => e.id))}>
+            Turn on all
+          </Button>
+        </div>
+      </div>
+      <p className="mt-1 text-xs text-amber-700 dark:text-amber-300">
+        This app added actions since you set it up. They stay off until you turn them on.
+      </p>
+      {open && (
+        <div className="mt-3 divide-y divide-amber-500/25 rounded-lg border border-amber-500/40 bg-background">
+          {entries.map((entry) => (
+            <div key={entry.id} className="flex items-center gap-3 px-4 py-2.5">
+              <div className="min-w-0 flex-1">
+                <div className="text-sm font-medium text-foreground">{entry.title ?? entry.toolName}</div>
+                {entry.description && (
+                  <div className="truncate text-xs text-muted-foreground">{entry.description}</div>
+                )}
+              </div>
+              <Button size="sm" variant="outline" disabled={disabled} onClick={() => onTurnOn([entry.id])}>
+                Turn on
+              </Button>
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/ui/src/pages/apps/app-detail/TestPanel.test.tsx b/ui/src/pages/apps/app-detail/TestPanel.test.tsx
new file mode 100644
index 00000000000..0e06c06d624
--- /dev/null
+++ b/ui/src/pages/apps/app-detail/TestPanel.test.tsx
@@ -0,0 +1,505 @@
+// @vitest-environment jsdom
+
+import { flushSync } from "react-dom";
+import type { ReactNode } from "react";
+import { createRoot } from "react-dom/client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import type { ToolCatalogEntry } from "@paperclipai/shared";
+import { TestPanel, errorHints } from "./TestPanel";
+
+const listTestAgentsMock = vi.hoisted(() => vi.fn());
+const runTestCallMock = vi.hoisted(() => vi.fn());
+const getTestCallStatusMock = vi.hoisted(() => vi.fn());
+const declineActionRequestMock = vi.hoisted(() => vi.fn());
+
+vi.mock("@/api/tools", () => ({
+  toolsApi: {
+    listTestAgents: (connectionId: string) => listTestAgentsMock(connectionId),
+    runTestCall: (connectionId: string, input: unknown) => runTestCallMock(connectionId, input),
+    getTestCallStatus: (connectionId: string, actionRequestId: string) =>
+      getTestCallStatusMock(connectionId, actionRequestId),
+    declineActionRequest: (companyId: string, actionRequestId: string) =>
+      declineActionRequestMock(companyId, actionRequestId),
+  },
+}));
+
+vi.mock("@/context/CompanyContext", () => ({
+  useCompany: () => ({ selectedCompanyId: "company-1", selectedCompany: { id: "company-1", name: "Paperclip" } }),
+}));
+
+vi.mock("@/lib/router", () => ({
+  Link: ({ to, children, ...props }: { to: string; children: ReactNode }) => (
+    <a href={to} {...props}>
+      {children}
+    </a>
+  ),
+}));
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+(globalThis as any).IS_REACT_ACT_ENVIRONMENT = true;
+
+async function act(callback: () => void | Promise<void>) {
+  let result: void | Promise<void> = undefined;
+  flushSync(() => {
+    result = callback();
+  });
+  await result;
+}
+
+async function flushReact() {
+  for (let i = 0; i < 4; i += 1) {
+    await act(async () => {
+      await Promise.resolve();
+      await new Promise((resolve) => window.setTimeout(resolve, 0));
+    });
+  }
+}
+
+/** The form field input — excludes the "Find an action" search box. */
+function formInput(): HTMLInputElement {
+  const inputs = [...container.querySelectorAll("input")].filter(
+    (i) => i.getAttribute("aria-label") !== "Find an action",
+  );
+  return inputs[0] as HTMLInputElement;
+}
+
+async function fillFormField(value: string) {
+  const input = formInput();
+  expect(input).toBeTruthy();
+  const setter = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, "value")!.set!;
+  await act(async () => {
+    setter.call(input, value);
+    input.dispatchEvent(new Event("input", { bubbles: true }));
+  });
+  await flushReact();
+}
+
+/** Wait past the 200ms minimum-spinner delay so the result panel renders. */
+async function settle() {
+  await act(async () => {
+    await new Promise((resolve) => window.setTimeout(resolve, 260));
+  });
+  await flushReact();
+}
+
+async function clickByText(text: string) {
+  const btn = [...container.querySelectorAll("button")].find((b) => b.textContent?.trim() === text);
+  expect(btn).toBeTruthy();
+  await act(async () => btn!.click());
+  await flushReact();
+}
+
+function catalogEntry(overrides: Partial<ToolCatalogEntry> = {}): ToolCatalogEntry {
+  return {
+    id: "catalog-read",
+    companyId: "company-1",
+    applicationId: "app-1",
+    connectionId: "conn-1",
+    entryKind: "tool",
+    toolName: "read_sheet",
+    title: "Read a sheet",
+    description: "Get rows and cell values from a sheet.",
+    inputSchema: {
+      type: "object",
+      properties: { spreadsheetId: { type: "string", title: "Spreadsheet" } },
+      required: ["spreadsheetId"],
+    },
+    outputSchema: null,
+    annotations: null,
+    riskLevel: "read",
+    isReadOnly: true,
+    isWrite: false,
+    isDestructive: false,
+    status: "active",
+    addedAt: new Date("2026-01-01T00:00:00Z"),
+    version: null,
+    schemaHash: null,
+    firstSeenAt: new Date("2026-01-01T00:00:00Z"),
+    lastSeenAt: new Date("2026-01-01T00:00:00Z"),
+    reviewedAt: null,
+    reviewedByAgentId: null,
+    reviewedByUserId: null,
+    createdAt: new Date("2026-01-01T00:00:00Z"),
+    updatedAt: new Date("2026-01-01T00:00:00Z"),
+    ...overrides,
+  } as ToolCatalogEntry;
+}
+
+function agent(overrides: Record<string, unknown> = {}) {
+  return {
+    id: "agent-claude",
+    name: "ClaudeCoder",
+    role: "engineer",
+    title: "Engineer",
+    status: "active",
+    effectiveAccess: {
+      connectionId: "conn-1",
+      toolCount: 3,
+      allowedCount: 1,
+      askFirstCount: 1,
+      offCount: 1,
+      lastChangedAt: null,
+      lastChangedByAgentId: null,
+      lastChangedByName: null,
+      tools: [
+        { toolName: "read_sheet", gatewayToolName: "gs__read_sheet", displayName: "Read a sheet", risk: "read", decision: "allowed", reasonCode: null, matchedPolicyIds: [] },
+        { toolName: "append_row", gatewayToolName: "gs__append_row", displayName: "Append a row", risk: "write", decision: "ask_first", reasonCode: null, matchedPolicyIds: [] },
+        { toolName: "delete_row", gatewayToolName: "gs__delete_row", displayName: "Delete a row", risk: "destructive", decision: "off", reasonCode: null, matchedPolicyIds: [] },
+      ],
+    },
+    ...overrides,
+  };
+}
+
+const readEntry = catalogEntry();
+const writeAskEntry = catalogEntry({
+  id: "catalog-append",
+  toolName: "append_row",
+  title: "Append a row",
+  description: "Add a new row to the bottom of a sheet.",
+  isReadOnly: false,
+  isWrite: true,
+  riskLevel: "write",
+});
+const offEntry = catalogEntry({
+  id: "catalog-delete",
+  toolName: "delete_row",
+  title: "Delete a row",
+  description: "Remove a row from a sheet permanently.",
+  isReadOnly: false,
+  isWrite: true,
+  isDestructive: true,
+  riskLevel: "destructive",
+});
+
+let container: HTMLDivElement;
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+let root: any;
+
+function renderPanel(
+  active: ToolCatalogEntry[] = [readEntry, writeAskEntry, offEntry],
+  quarantined: ToolCatalogEntry[] = [],
+) {
+  const client = new QueryClient({ defaultOptions: { queries: { retry: false } } });
+  root.render(
+    <QueryClientProvider client={client}>
+      <TestPanel connectionId="conn-1" appName="Google Sheets" active={active} quarantined={quarantined} />
+    </QueryClientProvider>,
+  );
+}
+
+beforeEach(() => {
+  container = document.createElement("div");
+  document.body.appendChild(container);
+  root = createRoot(container);
+  listTestAgentsMock.mockReset();
+  runTestCallMock.mockReset();
+  getTestCallStatusMock.mockReset();
+  declineActionRequestMock.mockReset();
+  listTestAgentsMock.mockResolvedValue({ agents: [agent()] });
+  // Default ask-first polls report the request still waiting on approval.
+  getTestCallStatusMock.mockResolvedValue({
+    actionRequestId: "req-1",
+    invocationId: "inv-2",
+    phase: "waiting",
+    parameters: { spreadsheetId: "sheet-123" },
+    requestedAt: "2026-06-18T00:00:00.000Z",
+    resolvedAt: null,
+    durationMs: null,
+  });
+  window.sessionStorage.clear();
+});
+
+afterEach(() => {
+  act(() => root.unmount());
+  container.remove();
+  window.sessionStorage.clear();
+});
+
+describe("TestPanel", () => {
+  it("renders the Test-as header and grouped actions with access badges", async () => {
+    await act(async () => renderPanel());
+    await flushReact();
+
+    expect(container.textContent).toContain("Test as");
+    expect(container.textContent).toContain("ClaudeCoder");
+    expect(container.textContent).toContain("Allowed for 1 action · Ask first for 1 action · Off for 1 action");
+    expect(container.textContent).toContain("Read (1)");
+    expect(container.textContent).toContain("Write (2)");
+    // Each action shows its decision badge.
+    expect(container.textContent).toContain("Allowed");
+    expect(container.textContent).toContain("Ask first");
+    expect(container.textContent).toContain("Off");
+  });
+
+  it("shows the empty state when there are no actions", async () => {
+    await act(async () => renderPanel([]));
+    await flushReact();
+    expect(container.textContent).toContain("Nothing to test yet");
+    expect(container.textContent).toContain("Go to Setup");
+  });
+
+  it("renders an allowed result panel with a row-count headline after a successful run", async () => {
+    runTestCallMock.mockResolvedValue({
+      decision: "allowed",
+      invocationId: "inv-1",
+      result: [
+        { name: "Acme", stage: "Demo" },
+        { name: "Globex", stage: "Trial" },
+      ],
+    });
+    await act(async () => renderPanel());
+    await flushReact();
+
+    // Expand the allowed (read) action.
+    const trigger = [...container.querySelectorAll("button")].find((b) => b.textContent?.includes("Read a sheet"));
+    expect(trigger).toBeTruthy();
+    await act(async () => trigger!.click());
+    await flushReact();
+
+    // Fill the required field then Run.
+    await fillFormField("sheet-123");
+    await clickByText("Run");
+    await settle();
+
+    expect(runTestCallMock).toHaveBeenCalledWith("conn-1", {
+      agentId: "agent-claude",
+      toolName: "read_sheet",
+      parameters: { spreadsheetId: "sheet-123" },
+    });
+    expect(container.textContent).toContain("Worked. 2 rows came back.");
+    expect(container.textContent).toContain("Ran as ClaudeCoder");
+    expect(container.textContent).toContain("Preview");
+  });
+
+  it("renders a failure card (not 'Worked') when an allowed call returns isError:true", async () => {
+    // The gateway let the call through (decision:"allowed") but the upstream MCP
+    // tool failed at the tool layer — the envelope carries isError + an error.
+    runTestCallMock.mockResolvedValue({
+      decision: "allowed",
+      invocationId: "inv-err",
+      result: {
+        content: "Invalid arguments: range is required",
+        data: { content: [{ type: "text", text: "Invalid arguments: range is required" }], isError: true },
+        error: "MCP tool returned an error result",
+      },
+    });
+    await act(async () => renderPanel());
+    await flushReact();
+
+    const trigger = [...container.querySelectorAll("button")].find((b) => b.textContent?.includes("Read a sheet"));
+    await act(async () => trigger!.click());
+    await flushReact();
+    await fillFormField("sheet-123");
+    await clickByText("Run");
+    await settle();
+
+    expect(container.textContent).toContain("It didn't work.");
+    expect(container.textContent).not.toContain("Worked.");
+    // The actual MCP message wins over the generic gateway wrapper string.
+    expect(container.textContent).toContain("Invalid arguments: range is required");
+  });
+
+  it("renders the ask-first card linking to Review", async () => {
+    runTestCallMock.mockResolvedValue({ decision: "ask_first", invocationId: "inv-2", actionRequestId: "req-1" });
+    await act(async () => renderPanel());
+    await flushReact();
+
+    const trigger = [...container.querySelectorAll("button")].find((b) => b.textContent?.includes("Append a row"));
+    await act(async () => trigger!.click());
+    await flushReact();
+
+    await fillFormField("sheet-123");
+    await clickByText("Run");
+    await settle();
+
+    expect(container.textContent).toContain("Sent for your OK.");
+    expect(container.textContent).toContain("Cancel this request");
+    // "Where" is populated from the polled action-request snapshot.
+    expect(container.textContent).toContain("spreadsheetId: sheet-123");
+    expect(container.textContent).toContain("Waiting ·");
+    const reviewLink = [...container.querySelectorAll("a")].find((a) => a.textContent?.includes("Open Review tab"));
+    expect(reviewLink?.getAttribute("href")).toBe("/apps/conn-1/review");
+  });
+
+  it("restores the ask-first card after leaving and returning to the Test tab", async () => {
+    runTestCallMock.mockResolvedValue({ decision: "ask_first", invocationId: "inv-2", actionRequestId: "req-1" });
+    await act(async () => renderPanel());
+    await flushReact();
+
+    const trigger = [...container.querySelectorAll("button")].find((b) => b.textContent?.includes("Append a row"));
+    await act(async () => trigger!.click());
+    await flushReact();
+    await fillFormField("sheet-123");
+    await clickByText("Run");
+    await settle();
+    expect(container.textContent).toContain("Sent for your OK.");
+
+    await act(async () => root.unmount());
+    root = createRoot(container);
+    await act(async () => renderPanel());
+    await flushReact();
+
+    expect(runTestCallMock).toHaveBeenCalledTimes(1);
+    expect(container.textContent).toContain("Sent for your OK.");
+    expect(container.textContent).toContain("spreadsheetId: sheet-123");
+    expect(container.textContent).toContain("Cancel this request");
+  });
+
+  it("shows 'Approved · running' while an approved ask-first call is executing", async () => {
+    runTestCallMock.mockResolvedValue({ decision: "ask_first", invocationId: "inv-2", actionRequestId: "req-1" });
+    getTestCallStatusMock.mockResolvedValue({
+      actionRequestId: "req-1",
+      invocationId: "inv-2",
+      phase: "running",
+      parameters: { spreadsheetId: "sheet-123" },
+      requestedAt: "2026-06-18T00:00:00.000Z",
+      resolvedAt: "2026-06-18T00:00:05.000Z",
+      durationMs: null,
+    });
+    await act(async () => renderPanel());
+    await flushReact();
+
+    const trigger = [...container.querySelectorAll("button")].find((b) => b.textContent?.includes("Append a row"));
+    await act(async () => trigger!.click());
+    await flushReact();
+    await fillFormField("sheet-123");
+    await clickByText("Run");
+    await settle();
+
+    expect(container.textContent).toContain("Approved · running");
+    // While running we don't offer cancel — the call is already on its way.
+    expect(container.textContent).not.toContain("Cancel this request");
+  });
+
+  it("mutates the ask-first card into the allowed result once approved and done", async () => {
+    runTestCallMock.mockResolvedValue({ decision: "ask_first", invocationId: "inv-2", actionRequestId: "req-1" });
+    getTestCallStatusMock.mockResolvedValue({
+      actionRequestId: "req-1",
+      invocationId: "inv-2",
+      phase: "done",
+      parameters: { spreadsheetId: "sheet-123" },
+      result: [{ name: "Acme", stage: "Demo" }],
+      requestedAt: "2026-06-18T00:00:00.000Z",
+      resolvedAt: "2026-06-18T00:00:05.000Z",
+      durationMs: 1200,
+    });
+    await act(async () => renderPanel());
+    await flushReact();
+
+    const trigger = [...container.querySelectorAll("button")].find((b) => b.textContent?.includes("Append a row"));
+    await act(async () => trigger!.click());
+    await flushReact();
+    await fillFormField("sheet-123");
+    await clickByText("Run");
+    await settle();
+
+    // No longer the pending card — the real response is shown without re-running.
+    expect(container.textContent).not.toContain("Sent for your OK.");
+    expect(container.textContent).toContain("Worked.");
+    expect(container.textContent).toContain("1.2s");
+  });
+
+  it("shows the denied status when an ask-first call is declined in Review", async () => {
+    runTestCallMock.mockResolvedValue({ decision: "ask_first", invocationId: "inv-2", actionRequestId: "req-1" });
+    getTestCallStatusMock.mockResolvedValue({
+      actionRequestId: "req-1",
+      invocationId: "inv-2",
+      phase: "denied",
+      parameters: { spreadsheetId: "sheet-123" },
+      requestedAt: "2026-06-18T00:00:00.000Z",
+      resolvedAt: "2026-06-18T00:00:05.000Z",
+      durationMs: null,
+    });
+    await act(async () => renderPanel());
+    await flushReact();
+
+    const trigger = [...container.querySelectorAll("button")].find((b) => b.textContent?.includes("Append a row"));
+    await act(async () => trigger!.click());
+    await flushReact();
+    await fillFormField("sheet-123");
+    await clickByText("Run");
+    await settle();
+
+    expect(container.textContent).toContain("Denied — see Review for why");
+    expect(container.textContent).not.toContain("Cancel this request");
+  });
+
+  it("explains an off action and links to Permissions without calling the API", async () => {
+    await act(async () => renderPanel());
+    await flushReact();
+
+    const trigger = [...container.querySelectorAll("button")].find((b) => b.textContent?.includes("Delete a row"));
+    await act(async () => trigger!.click());
+    await flushReact();
+
+    expect(container.textContent).toContain("Delete a row is off for ClaudeCoder.");
+    const permLink = [...container.querySelectorAll("a")].find((a) => a.getAttribute("href") === "/apps/conn-1/permissions");
+    expect(permLink).toBeTruthy();
+    // No Run button is offered for an off action.
+    expect([...container.querySelectorAll("button")].some((b) => b.textContent?.trim() === "Run")).toBe(false);
+    expect(runTestCallMock).not.toHaveBeenCalled();
+  });
+
+  it("shows the 'Last changed by' audit hint when the access summary carries one", async () => {
+    listTestAgentsMock.mockResolvedValue({
+      agents: [
+        agent({
+          effectiveAccess: {
+            ...agent().effectiveAccess,
+            lastChangedAt: new Date(Date.now() - 5 * 60_000).toISOString(),
+            lastChangedByAgentId: "agent-admin",
+            lastChangedByName: "Dotta",
+          },
+        }),
+      ],
+    });
+    await act(async () => renderPanel());
+    await flushReact();
+
+    const trigger = [...container.querySelectorAll("button")].find((b) => b.textContent?.includes("Delete a row"));
+    await act(async () => trigger!.click());
+    await flushReact();
+
+    expect(container.textContent).toContain("Last changed by Dotta");
+  });
+
+  it("surfaces quarantined actions in a 'New' group with the not-yet-on explanation", async () => {
+    const quarantinedEntry = catalogEntry({
+      id: "catalog-new",
+      toolName: "rename_sheet",
+      title: "Rename a sheet",
+      description: "Change a sheet's name.",
+      isReadOnly: false,
+      isWrite: true,
+      riskLevel: "write",
+      status: "quarantined",
+    });
+    await act(async () => renderPanel([readEntry, writeAskEntry, offEntry], [quarantinedEntry]));
+    await flushReact();
+
+    expect(container.textContent).toContain("New (1)");
+
+    const trigger = [...container.querySelectorAll("button")].find((b) => b.textContent?.includes("Rename a sheet"));
+    expect(trigger).toBeTruthy();
+    await act(async () => trigger!.click());
+    await flushReact();
+
+    expect(container.textContent).toContain("This action is new and hasn't been turned on yet.");
+    expect(runTestCallMock).not.toHaveBeenCalled();
+  });
+});
+
+describe("errorHints", () => {
+  it("maps known reason codes to tailored hints", () => {
+    expect(errorHints("Requested entity was not found.", "NOT_FOUND").length).toBeGreaterThan(0);
+    expect(errorHints("permission denied", "PERMISSION_DENIED")[0]).toContain("permission");
+    expect(errorHints("bad input", "INVALID_ARGUMENT").length).toBeGreaterThan(0);
+    expect(errorHints("slow down", "RATE_LIMIT")[0]).toContain("rate-limit");
+  });
+
+  it("returns the locked generic fallback for an unknown error", () => {
+    expect(errorHints("boom", "tool_execution_failed")).toEqual(["Check the inputs above and try again."]);
+  });
+});
diff --git a/ui/src/pages/apps/app-detail/TestPanel.tsx b/ui/src/pages/apps/app-detail/TestPanel.tsx
new file mode 100644
index 00000000000..3868c04e287
--- /dev/null
+++ b/ui/src/pages/apps/app-detail/TestPanel.tsx
@@ -0,0 +1,1461 @@
+import { useEffect, useMemo, useRef, useState } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import {
+  AlertTriangle,
+  Ban,
+  Check,
+  ChevronDown,
+  ChevronsUpDown,
+  Clock,
+  Loader2,
+  Play,
+  Search,
+  ShieldQuestion,
+} from "lucide-react";
+import type {
+  ToolCatalogEntry,
+  ToolConnectionAccessSummary,
+  ToolConnectionTestAgent,
+  ToolConnectionTestCallResult,
+  ToolConnectionTestCallStatus,
+  ToolConnectionTestDecision,
+} from "@paperclipai/shared";
+import { Link } from "@/lib/router";
+import { toolsApi } from "@/api/tools";
+import { queryKeys } from "@/lib/queryKeys";
+import { useCompany } from "@/context/CompanyContext";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { Skeleton } from "@/components/ui/skeleton";
+import {
+  Collapsible,
+  CollapsibleContent,
+  CollapsibleTrigger,
+} from "@/components/ui/collapsible";
+import { Popover, PopoverContent, PopoverTrigger } from "@/components/ui/popover";
+import {
+  JsonSchemaForm,
+  getDefaultValues,
+  validateJsonSchemaForm,
+  type JsonSchemaNode,
+} from "@/components/JsonSchemaForm";
+import { cn, relativeTime } from "@/lib/utils";
+import { appTabHref } from "../app-tabs";
+
+// ---------------------------------------------------------------------------
+// Small format helpers
+// ---------------------------------------------------------------------------
+
+/** "1.2s" / "0.4s" — the copy-spec always shows seconds with one decimal. */
+function seconds(ms: number): string {
+  return `${(ms / 1000).toFixed(1)}s`;
+}
+
+/** relativeTime() returns "just now"; the spec capitalizes it ("Just now"). */
+function relTime(date: Date): string {
+  const t = relativeTime(date);
+  return t.charAt(0).toUpperCase() + t.slice(1);
+}
+
+/** Sub-line copy: first sentence of the catalog description, no trailing period. */
+function actionSubLine(entry: ToolCatalogEntry): string | null {
+  if (!entry.description) return null;
+  const firstSentence = entry.description.split(/(?<=\.)\s/)[0] ?? entry.description;
+  return firstSentence.replace(/\.+$/, "").trim() || null;
+}
+
+// ---------------------------------------------------------------------------
+// Decision badges
+// ---------------------------------------------------------------------------
+
+type DecisionMeta = { label: string; className: string };
+
+const DECISION_META: Record<ToolConnectionTestDecision, DecisionMeta> = {
+  allowed: {
+    label: "Allowed",
+    className: "border-emerald-500/40 bg-emerald-500/10 text-emerald-700 dark:text-emerald-300",
+  },
+  ask_first: {
+    label: "Ask first",
+    className: "border-amber-500/40 bg-amber-500/10 text-amber-700 dark:text-amber-300",
+  },
+  off: {
+    label: "Off",
+    className: "border-border bg-muted text-muted-foreground",
+  },
+};
+
+function DecisionBadge({ decision }: { decision: ToolConnectionTestDecision }) {
+  const meta = DECISION_META[decision];
+  return (
+    <span
+      className={cn(
+        "inline-flex shrink-0 items-center rounded-full border px-2 py-0.5 text-xs font-medium",
+        meta.className,
+      )}
+    >
+      {meta.label}
+    </span>
+  );
+}
+
+/** "Allowed for 1 action · Ask first for 2 · Off for 1" — singular gets " action". */
+function summaryCount(label: string, n: number): string {
+  return `${label} ${n}${n === 1 ? " action" : ""}`;
+}
+
+function accessSummaryLine(summary: ToolConnectionAccessSummary): string {
+  return [
+    summaryCount("Allowed for", summary.allowedCount),
+    summaryCount("Ask first for", summary.askFirstCount),
+    summaryCount("Off for", summary.offCount),
+  ].join(" · ");
+}
+
+// ---------------------------------------------------------------------------
+// Panel
+// ---------------------------------------------------------------------------
+
+export function TestPanel({
+  connectionId,
+  appName,
+  active,
+  quarantined = [],
+}: {
+  connectionId: string;
+  appName: string;
+  /** Active (non-quarantined, non-removed) catalog entries. */
+  active: ToolCatalogEntry[];
+  /** New, not-yet-reviewed actions — shown as Off so they're reachable to test. */
+  quarantined?: ToolCatalogEntry[];
+}) {
+  const testAgentsQuery = useQuery({
+    queryKey: queryKeys.tools.testAgents(connectionId),
+    queryFn: () => toolsApi.listTestAgents(connectionId),
+    enabled: !!connectionId,
+  });
+
+  const agents = useMemo(
+    () => [...(testAgentsQuery.data?.agents ?? [])].sort((a, b) => a.name.localeCompare(b.name)),
+    [testAgentsQuery.data],
+  );
+
+  const [agentId, setAgentId] = useState<string | null>(null);
+  // Default to the first agent (alphabetical) that can run at least one action;
+  // otherwise the first agent we can test as at all.
+  useEffect(() => {
+    if (agentId && agents.some((a) => a.id === agentId)) return;
+    if (agents.length === 0) return;
+    const withAccess = agents.find((a) => a.effectiveAccess.allowedCount > 0);
+    setAgentId((withAccess ?? agents[0]).id);
+  }, [agents, agentId]);
+
+  // Switches the header from "TEST AS" card to the compact "Testing as …" line.
+  const [hasInteracted, setHasInteracted] = useState(false);
+
+  const selectedAgent = agents.find((a) => a.id === agentId) ?? null;
+
+  // Per-action decision for the selected agent, keyed by both the upstream and
+  // gateway tool names so we can match whatever the catalog stores.
+  const decisionByTool = useMemo(() => {
+    const map = new Map<string, ToolConnectionTestDecision>();
+    for (const tool of selectedAgent?.effectiveAccess.tools ?? []) {
+      map.set(tool.toolName, tool.decision);
+      map.set(tool.gatewayToolName, tool.decision);
+    }
+    return map;
+  }, [selectedAgent]);
+
+  const decisionFor = (entry: ToolCatalogEntry): ToolConnectionTestDecision =>
+    decisionByTool.get(entry.toolName) ?? "off";
+
+  // Search + read/write filter.
+  const [query, setQuery] = useState("");
+  const [kindFilter, setKindFilter] = useState<"all" | "read" | "write">("all");
+
+  const byName = (a: ToolCatalogEntry, b: ToolCatalogEntry) =>
+    (a.title ?? a.toolName).localeCompare(b.title ?? b.toolName);
+  const readActions = active.filter((e) => e.isReadOnly).sort(byName);
+  const writeActions = active.filter((e) => !e.isReadOnly).sort(byName);
+
+  const matches = (entry: ToolCatalogEntry) => {
+    if (kindFilter === "read" && !entry.isReadOnly) return false;
+    if (kindFilter === "write" && entry.isReadOnly) return false;
+    const needle = query.trim().toLowerCase();
+    if (!needle) return true;
+    return (
+      (entry.title ?? entry.toolName).toLowerCase().includes(needle) ||
+      (entry.description ?? "").toLowerCase().includes(needle)
+    );
+  };
+
+  const quarantinedActions = [...quarantined].sort(byName);
+
+  const visibleRead = readActions.filter(matches);
+  const visibleWrite = writeActions.filter(matches);
+  const visibleQuarantined = quarantinedActions.filter(matches);
+  const visibleCount = visibleRead.length + visibleWrite.length + visibleQuarantined.length;
+
+  if (testAgentsQuery.isLoading) {
+    return (
+      <div className="space-y-4">
+        <Skeleton className="h-20 w-full" />
+        <Skeleton className="h-12 w-full" />
+        <Skeleton className="h-12 w-full" />
+      </div>
+    );
+  }
+
+  if (active.length === 0 && quarantinedActions.length === 0) {
+    return <EmptyState connectionId={connectionId} appName={appName} />;
+  }
+
+  if (agents.length === 0) {
+    return (
+      <div className="rounded-lg border border-border bg-card p-6 text-center">
+        <p className="text-sm font-medium text-foreground">No agents to test as</p>
+        <p className="mx-auto mt-1 max-w-md text-sm text-muted-foreground">
+          Only agents you can assign tasks to can preview {appName}. Give an agent access in{" "}
+          <Link className="font-medium text-primary hover:underline" to={appTabHref(connectionId, "permissions")}>
+            Permissions
+          </Link>{" "}
+          to test it here.
+        </p>
+      </div>
+    );
+  }
+
+  const sharedRowProps = {
+    connectionId,
+    appName,
+    allAgents: agents,
+    onSelectAgent: setAgentId,
+    onInteract: () => setHasInteracted(true),
+  };
+
+  return (
+    <div className="space-y-5">
+      {selectedAgent && (
+        <TestAsHeader
+          appName={appName}
+          agents={agents}
+          selectedAgent={selectedAgent}
+          onSelect={setAgentId}
+          connectionId={connectionId}
+          compact={hasInteracted}
+        />
+      )}
+
+      <div className="space-y-3">
+        <div className="flex flex-wrap items-center gap-2">
+          <div className="relative min-w-(--sz-12rem) flex-1">
+            <Search className="pointer-events-none absolute left-3 top-1/2 h-4 w-4 -translate-y-1/2 text-muted-foreground" />
+            <Input
+              aria-label="Find an action"
+              placeholder="Find an action…"
+              className="pl-9"
+              value={query}
+              onChange={(event) => setQuery(event.target.value)}
+            />
+          </div>
+          <FilterChip label={`All ${active.length + quarantinedActions.length}`} active={kindFilter === "all"} onClick={() => setKindFilter("all")} />
+          <FilterChip label={`Read ${readActions.length}`} active={kindFilter === "read"} onClick={() => setKindFilter("read")} />
+          <FilterChip label={`Write ${writeActions.length}`} active={kindFilter === "write"} onClick={() => setKindFilter("write")} />
+        </div>
+        <p className="text-xs text-muted-foreground">{visibleCount} matches · sorted A–Z</p>
+      </div>
+
+      {visibleCount === 0 ? (
+        <div className="rounded-lg border border-dashed border-border p-6 text-center text-sm text-muted-foreground">
+          No actions match “{query}”. Clear the search to see them all.
+        </div>
+      ) : (
+        <div className="space-y-6">
+          {visibleRead.length > 0 && selectedAgent && (
+            <ActionGroup
+              heading={`Read (${visibleRead.length})`}
+              entries={visibleRead}
+              decisionFor={decisionFor}
+              agent={selectedAgent}
+              {...sharedRowProps}
+            />
+          )}
+          {visibleWrite.length > 0 && selectedAgent && (
+            <ActionGroup
+              heading={`Write (${visibleWrite.length})`}
+              entries={visibleWrite}
+              decisionFor={decisionFor}
+              agent={selectedAgent}
+              {...sharedRowProps}
+            />
+          )}
+          {visibleQuarantined.length > 0 && selectedAgent && (
+            <ActionGroup
+              heading={`New (${visibleQuarantined.length})`}
+              subheading="New actions wait, switched off, until you turn them on."
+              entries={visibleQuarantined}
+              decisionFor={() => "off" as const}
+              agent={selectedAgent}
+              {...sharedRowProps}
+            />
+          )}
+        </div>
+      )}
+    </div>
+  );
+}
+
+// ---------------------------------------------------------------------------
+// Empty state
+// ---------------------------------------------------------------------------
+
+function EmptyState({ connectionId, appName }: { connectionId: string; appName: string }) {
+  return (
+    <div className="rounded-lg border border-border bg-card p-8 text-center">
+      <p className="text-base font-bold text-foreground">Nothing to test yet</p>
+      <p className="mx-auto mt-1.5 max-w-md text-sm text-muted-foreground">
+        Once {appName} is connected, the actions it offers will show up here so you can try them out.
+      </p>
+      <Button asChild className="mt-4" variant="outline">
+        <Link to={appTabHref(connectionId, "setup")}>Go to Setup</Link>
+      </Button>
+    </div>
+  );
+}
+
+// ---------------------------------------------------------------------------
+// Test-as header + agent picker
+// ---------------------------------------------------------------------------
+
+function TestAsHeader({
+  appName,
+  agents,
+  selectedAgent,
+  onSelect,
+  connectionId,
+  compact,
+}: {
+  appName: string;
+  agents: ToolConnectionTestAgent[];
+  selectedAgent: ToolConnectionTestAgent;
+  onSelect: (agentId: string) => void;
+  connectionId: string;
+  compact: boolean;
+}) {
+  if (compact) {
+    return (
+      <div className="flex flex-wrap items-center justify-between gap-3 border-b border-border pb-3">
+        <p className="text-sm text-muted-foreground">
+          Testing as{" "}
+          <AgentPicker
+            agents={agents}
+            selectedAgent={selectedAgent}
+            onSelect={onSelect}
+            connectionId={connectionId}
+            appName={appName}
+            inline
+          />
+        </p>
+        <p className="text-xs text-muted-foreground">{accessSummaryLine(selectedAgent.effectiveAccess)}</p>
+      </div>
+    );
+  }
+  return (
+    <div className="rounded-lg border border-border bg-card p-4">
+      <div className="flex flex-wrap items-center justify-between gap-3">
+        <div className="min-w-0">
+          <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">Test as</p>
+          <AgentPicker
+            agents={agents}
+            selectedAgent={selectedAgent}
+            onSelect={onSelect}
+            connectionId={connectionId}
+            appName={appName}
+          />
+        </div>
+        <p className="text-sm text-muted-foreground">{accessSummaryLine(selectedAgent.effectiveAccess)}</p>
+      </div>
+      <p className="mt-2 text-xs text-muted-foreground">
+        Runs real actions in {appName}, exactly as this agent would.
+      </p>
+    </div>
+  );
+}
+
+function AgentPicker({
+  agents,
+  selectedAgent,
+  onSelect,
+  connectionId,
+  appName,
+  inline,
+}: {
+  agents: ToolConnectionTestAgent[];
+  selectedAgent: ToolConnectionTestAgent;
+  onSelect: (agentId: string) => void;
+  connectionId: string;
+  appName: string;
+  inline?: boolean;
+}) {
+  const [open, setOpen] = useState(false);
+  const [search, setSearch] = useState("");
+
+  const filtered = agents.filter((a) =>
+    a.name.toLowerCase().includes(search.trim().toLowerCase()),
+  );
+
+  return (
+    <Popover open={open} onOpenChange={(next) => { setOpen(next); if (!next) setSearch(""); }}>
+      <PopoverTrigger asChild>
+        <button
+          type="button"
+          className={cn(
+            "items-center gap-1.5 text-foreground outline-none hover:text-primary focus-visible:text-primary",
+            inline ? "inline-flex font-semibold underline-offset-2 hover:underline" : "mt-0.5 flex text-lg font-bold",
+          )}
+          aria-label="Choose which agent to test as"
+        >
+          {selectedAgent.name}
+          <ChevronsUpDown className={cn("text-muted-foreground", inline ? "h-3.5 w-3.5" : "h-4 w-4")} />
+        </button>
+      </PopoverTrigger>
+      <PopoverContent align="start" className="w-80 p-0">
+        <div className="border-b border-border p-2">
+          <div className="relative">
+            <Search className="pointer-events-none absolute left-2.5 top-1/2 h-3.5 w-3.5 -translate-y-1/2 text-muted-foreground" />
+            <Input
+              aria-label="Search agents"
+              placeholder="Search agents…"
+              className="h-8 pl-8 text-sm"
+              value={search}
+              onChange={(event) => setSearch(event.target.value)}
+              autoFocus
+            />
+          </div>
+        </div>
+        <div className="max-h-60 overflow-y-auto p-1">
+          {filtered.length === 0 ? (
+            <p className="px-3 py-4 text-center text-xs text-muted-foreground">No agents match.</p>
+          ) : (
+            filtered.map((agent) => {
+              const summary = agent.effectiveAccess;
+              const noAccess = summary.allowedCount === 0 && summary.askFirstCount === 0;
+              return (
+                <button
+                  key={agent.id}
+                  type="button"
+                  onClick={() => {
+                    onSelect(agent.id);
+                    setOpen(false);
+                    setSearch("");
+                  }}
+                  className={cn(
+                    "flex w-full items-start gap-2 rounded-md px-2 py-2 text-left hover:bg-accent",
+                    agent.id === selectedAgent.id && "bg-accent",
+                  )}
+                >
+                  <Check
+                    className={cn(
+                      "mt-0.5 h-4 w-4 shrink-0",
+                      agent.id === selectedAgent.id ? "text-primary" : "text-transparent",
+                    )}
+                  />
+                  <span className="min-w-0 flex-1">
+                    <span className="block truncate text-sm font-medium text-foreground">{agent.name}</span>
+                    <span className="block truncate text-xs text-muted-foreground">
+                      {noAccess
+                        ? "No access — not allowed for any action"
+                        : `Allowed ${summary.allowedCount} · Ask first ${summary.askFirstCount} · Off ${summary.offCount}`}
+                    </span>
+                  </span>
+                </button>
+              );
+            })
+          )}
+        </div>
+        <div className="border-t border-border px-3 py-2 text-(length:--text-micro) text-muted-foreground">
+          <p>Only agents you can assign tasks to are listed.</p>
+          <p>Pick one to preview what they'd see in {appName}.</p>
+        </div>
+        <div className="border-t border-border p-3">
+          <p className="text-xs font-semibold text-foreground">What the badges mean</p>
+          <ul className="mt-1.5 space-y-1 text-xs text-muted-foreground">
+            <li><span className="font-medium text-foreground">Allowed</span> — runs immediately when you press Run.</li>
+            <li><span className="font-medium text-foreground">Ask first</span> — Run is parked in Review for your OK.</li>
+            <li>
+              <span className="font-medium text-foreground">Off</span> — won't run. Change it in{" "}
+              <Link className="text-primary hover:underline" to={appTabHref(connectionId, "permissions")}>
+                Permissions
+              </Link>.
+            </li>
+          </ul>
+          <p className="mt-2 text-(length:--text-micro) text-muted-foreground">
+            Badges reflect this agent's current settings, not yours. Swap agents to see how an action would behave for each.
+          </p>
+        </div>
+      </PopoverContent>
+    </Popover>
+  );
+}
+
+function FilterChip({ label, active, onClick }: { label: string; active: boolean; onClick: () => void }) {
+  return (
+    <button
+      type="button"
+      onClick={onClick}
+      aria-pressed={active}
+      className={cn(
+        "rounded-full border px-3 py-1 text-xs font-medium transition-colors",
+        active
+          ? "border-primary bg-primary/10 text-primary"
+          : "border-border text-muted-foreground hover:bg-accent",
+      )}
+    >
+      {label}
+    </button>
+  );
+}
+
+// ---------------------------------------------------------------------------
+// Action group + rows
+// ---------------------------------------------------------------------------
+
+type RowSharedProps = {
+  connectionId: string;
+  appName: string;
+  allAgents: ToolConnectionTestAgent[];
+  onSelectAgent: (agentId: string) => void;
+  onInteract: () => void;
+};
+
+function ActionGroup({
+  heading,
+  subheading,
+  entries,
+  decisionFor,
+  agent,
+  ...shared
+}: {
+  heading: string;
+  subheading?: string;
+  entries: ToolCatalogEntry[];
+  decisionFor: (entry: ToolCatalogEntry) => ToolConnectionTestDecision;
+  agent: ToolConnectionTestAgent;
+} & RowSharedProps) {
+  return (
+    <section>
+      <h3 className="mb-1.5 text-xs font-semibold uppercase tracking-wide text-muted-foreground">{heading}</h3>
+      {subheading && <p className="mb-1.5 -mt-1 text-xs text-muted-foreground">{subheading}</p>}
+      <div className="divide-y divide-border overflow-hidden rounded-lg border border-border">
+        {entries.map((entry) => (
+          <ActionRow
+            key={entry.id}
+            entry={entry}
+            decision={decisionFor(entry)}
+            agent={agent}
+            {...shared}
+          />
+        ))}
+      </div>
+    </section>
+  );
+}
+
+function ActionRow({
+  entry,
+  decision,
+  agent,
+  ...shared
+}: {
+  entry: ToolCatalogEntry;
+  decision: ToolConnectionTestDecision;
+  agent: ToolConnectionTestAgent;
+} & RowSharedProps) {
+  const [open, setOpen] = useState(() => Boolean(loadStoredAskFirstOutcome(shared.connectionId, entry, agent)));
+  const title = entry.title ?? entry.toolName;
+  const sub = actionSubLine(entry);
+
+  useEffect(() => {
+    if (loadStoredAskFirstOutcome(shared.connectionId, entry, agent)) {
+      setOpen(true);
+    }
+  }, [shared.connectionId, entry, agent]);
+
+  return (
+    <Collapsible open={open} onOpenChange={setOpen}>
+      <CollapsibleTrigger asChild>
+        <button
+          type="button"
+          className="flex w-full items-center gap-3 px-4 py-3 text-left outline-none hover:bg-accent/40 focus-visible:bg-accent/40"
+        >
+          <ChevronDown
+            className={cn("h-4 w-4 shrink-0 text-muted-foreground transition-transform", open && "rotate-180")}
+          />
+          <span className="min-w-0 flex-1">
+            <span className="block truncate text-sm font-medium text-foreground">{title}</span>
+            {sub && <span className="block truncate text-xs text-muted-foreground">{sub}</span>}
+          </span>
+          <DecisionBadge decision={decision} />
+        </button>
+      </CollapsibleTrigger>
+      <CollapsibleContent>
+        <div className="border-t border-border bg-muted/20 px-4 py-4">
+          <ActionTester entry={entry} decision={decision} agent={agent} {...shared} />
+        </div>
+      </CollapsibleContent>
+    </Collapsible>
+  );
+}
+
+// ---------------------------------------------------------------------------
+// The actual tester (form + run + result)
+// ---------------------------------------------------------------------------
+
+type RunOutcome = {
+  result: ToolConnectionTestCallResult;
+  agentName: string;
+  durationMs: number;
+  ranAt: Date;
+};
+
+function testOutcomeStorageKey(connectionId: string, entry: ToolCatalogEntry, agentId: string): string {
+  return `paperclip:test-call:${connectionId}:${agentId}:${entry.id}:${entry.toolName}`;
+}
+
+function loadStoredAskFirstOutcome(connectionId: string, entry: ToolCatalogEntry, agent: ToolConnectionTestAgent): RunOutcome | null {
+  if (typeof window === "undefined") return null;
+  try {
+    const raw = window.sessionStorage.getItem(testOutcomeStorageKey(connectionId, entry, agent.id));
+    if (!raw) return null;
+    const parsed = JSON.parse(raw) as {
+      result?: ToolConnectionTestCallResult;
+      agentName?: string;
+      durationMs?: number;
+      ranAt?: string;
+    };
+    if (!parsed.result || parsed.result.decision !== "ask_first" || typeof parsed.result.actionRequestId !== "string") {
+      return null;
+    }
+    return {
+      result: parsed.result,
+      agentName: parsed.agentName || agent.name,
+      durationMs: typeof parsed.durationMs === "number" ? parsed.durationMs : 0,
+      ranAt: parsed.ranAt ? new Date(parsed.ranAt) : new Date(),
+    };
+  } catch {
+    return null;
+  }
+}
+
+function storeAskFirstOutcome(connectionId: string, entry: ToolCatalogEntry, agentId: string, outcome: RunOutcome | null) {
+  if (typeof window === "undefined") return;
+  const key = testOutcomeStorageKey(connectionId, entry, agentId);
+  try {
+    if (!outcome || outcome.result.decision !== "ask_first") {
+      window.sessionStorage.removeItem(key);
+      return;
+    }
+    window.sessionStorage.setItem(key, JSON.stringify({ ...outcome, ranAt: outcome.ranAt.toISOString() }));
+  } catch {
+    // Session storage is only a same-tab convenience. If it is unavailable, the
+    // request is still visible in Review and the backend lifecycle remains intact.
+  }
+}
+
+/** Fold optional fields behind the JsonSchemaForm "More options" disclosure. */
+function splitRequiredOptional(schema: JsonSchemaNode): JsonSchemaNode {
+  const required = new Set(schema.required ?? []);
+  const props = schema.properties ?? {};
+  const next: Record<string, JsonSchemaNode> = {};
+  for (const [key, prop] of Object.entries(props)) {
+    next[key] = required.has(key) ? prop : { ...prop, "x-paperclip-advanced": true };
+  }
+  return { ...schema, properties: next };
+}
+
+const GUT_CHECK: Record<ToolConnectionTestDecision, (app: string, agent: string) => string> = {
+  allowed: (app, agent) => `This runs a real call against ${app} as ${agent}.`,
+  ask_first: () => `Waiting for your OK before this call leaves Paperclip.`,
+  off: (_app, agent) => `No call will be made — this action is off for ${agent}.`,
+};
+
+function ActionTester({
+  entry,
+  decision,
+  connectionId,
+  appName,
+  agent,
+  allAgents,
+  onSelectAgent,
+  onInteract,
+}: {
+  entry: ToolCatalogEntry;
+  decision: ToolConnectionTestDecision;
+  agent: ToolConnectionTestAgent;
+} & RowSharedProps) {
+  const queryClient = useQueryClient();
+  const { selectedCompanyId } = useCompany();
+  const rawSchema = (entry.inputSchema ?? { type: "object", properties: {} }) as JsonSchemaNode;
+  const formSchema = useMemo(() => splitRequiredOptional(rawSchema), [rawSchema]);
+  const [values, setValues] = useState<Record<string, unknown>>(() => getDefaultValues(rawSchema));
+  const [errors, setErrors] = useState<Record<string, string>>({});
+  const [outcome, setOutcome] = useState<RunOutcome | null>(() =>
+    loadStoredAskFirstOutcome(connectionId, entry, agent)
+  );
+
+  // Running card state — keep the spinner visible ≥200ms (anti-flicker).
+  const [running, setRunning] = useState(false);
+  const [elapsedMs, setElapsedMs] = useState(0);
+  const startedAtRef = useRef(0);
+  const cancelledRef = useRef(false);
+
+  const isOff = decision === "off";
+
+  useEffect(() => {
+    if (!running) return;
+    const id = window.setInterval(() => setElapsedMs(Date.now() - startedAtRef.current), 100);
+    return () => window.clearInterval(id);
+  }, [running]);
+
+  const run = useMutation({
+    mutationFn: async () => {
+      const result = await toolsApi.runTestCall(connectionId, {
+        agentId: agent.id,
+        toolName: entry.toolName,
+        parameters: values,
+      });
+      return result;
+    },
+    onSuccess: (result) => {
+      if (cancelledRef.current) return;
+      const durationMs = Date.now() - startedAtRef.current;
+      const finish = () => {
+        if (cancelledRef.current) return;
+        const nextOutcome = { result, agentName: agent.name, durationMs, ranAt: new Date() };
+        setRunning(false);
+        setOutcome(nextOutcome);
+        storeAskFirstOutcome(connectionId, entry, agent.id, nextOutcome);
+        queryClient.invalidateQueries({ queryKey: queryKeys.tools.connectionActivity(connectionId) });
+        if (selectedCompanyId) {
+          queryClient.invalidateQueries({ queryKey: queryKeys.tools.actionRequests(selectedCompanyId, "pending") });
+          queryClient.invalidateQueries({ queryKey: queryKeys.apps.attention(selectedCompanyId) });
+        }
+      };
+      const remaining = 200 - durationMs;
+      if (remaining > 0) window.setTimeout(finish, remaining);
+      else finish();
+    },
+    onError: () => {
+      if (cancelledRef.current) return;
+      setRunning(false);
+    },
+  });
+
+  const onRun = () => {
+    const validationErrors = validateJsonSchemaForm(rawSchema, values);
+    setErrors(validationErrors);
+    if (Object.keys(validationErrors).length > 0) return;
+    onInteract();
+    cancelledRef.current = false;
+    startedAtRef.current = Date.now();
+    setElapsedMs(0);
+    setOutcome(null);
+    setRunning(true);
+    run.mutate();
+  };
+
+  const onReset = () => {
+    cancelledRef.current = true;
+    setRunning(false);
+    setOutcome(null);
+    storeAskFirstOutcome(connectionId, entry, agent.id, null);
+    setErrors({});
+    setValues(getDefaultValues(rawSchema));
+  };
+
+  const onCancelRunning = () => {
+    cancelledRef.current = true;
+    setRunning(false);
+  };
+
+  if (isOff) {
+    return (
+      <OffExplanation
+        entry={entry}
+        connectionId={connectionId}
+        appName={appName}
+        agent={agent}
+        allAgents={allAgents}
+        onSelectAgent={onSelectAgent}
+      />
+    );
+  }
+
+  const hasFields = Object.keys(rawSchema.properties ?? {}).length > 0;
+
+  return (
+    <div className="space-y-4">
+      {hasFields ? (
+        <JsonSchemaForm
+          schema={formSchema}
+          values={values}
+          onChange={setValues}
+          errors={errors}
+          disabled={running}
+          advancedLabel="More options"
+        />
+      ) : (
+        <p className="text-xs text-muted-foreground">This action takes no inputs.</p>
+      )}
+
+      <p className="text-xs text-muted-foreground">{GUT_CHECK[decision](appName, agent.name)}</p>
+
+      <div className="flex items-center gap-2">
+        <Button onClick={onRun} disabled={running} size="sm">
+          {running ? (
+            <>
+              <Loader2 className="h-3.5 w-3.5 animate-spin" /> Running…
+            </>
+          ) : (
+            <>
+              <Play className="h-3.5 w-3.5" /> {outcome ? "Run again" : "Run"}
+            </>
+          )}
+        </Button>
+        <Button onClick={onReset} disabled={running} size="sm" variant="ghost">
+          Reset
+        </Button>
+      </div>
+
+      {running && (
+        <RunningCard entry={entry} appName={appName} agentName={agent.name} elapsedMs={elapsedMs} onCancel={onCancelRunning} />
+      )}
+
+      {run.isError && !running && (
+        <div className="rounded-md border border-destructive/40 bg-destructive/10 p-3 text-sm text-destructive">
+          Couldn't reach {agent.name}. {run.error instanceof Error ? run.error.message : "Please try again."}
+        </div>
+      )}
+
+      {outcome && !running && (
+        <ResultPanel outcome={outcome} entry={entry} appName={appName} connectionId={connectionId} />
+      )}
+    </div>
+  );
+}
+
+// ---------------------------------------------------------------------------
+// Running card (T6)
+// ---------------------------------------------------------------------------
+
+function RunningCard({
+  entry,
+  appName,
+  agentName,
+  elapsedMs,
+  onCancel,
+}: {
+  entry: ToolCatalogEntry;
+  appName: string;
+  agentName: string;
+  elapsedMs: number;
+  onCancel: () => void;
+}) {
+  const verb = entry.isReadOnly ? "Reading from" : entry.isWrite ? "Writing to" : "Calling";
+  return (
+    <div className="rounded-md border border-border bg-muted/30 p-4">
+      <div className="flex items-center gap-2">
+        <Loader2 className="h-4 w-4 animate-spin text-muted-foreground" />
+        <span className="text-sm font-medium text-foreground">Running…</span>
+      </div>
+      <p className="mt-1 text-xs text-muted-foreground">
+        {verb} {appName} as {agentName}.
+      </p>
+      <div className="mt-3 flex items-center justify-between">
+        <span className="text-xs text-muted-foreground">Started {seconds(elapsedMs)} ago · Press cancel to stop</span>
+        <Button onClick={onCancel} size="sm" variant="outline">
+          Cancel
+        </Button>
+      </div>
+    </div>
+  );
+}
+
+// ---------------------------------------------------------------------------
+// Result branches
+// ---------------------------------------------------------------------------
+
+function ResultPanel({
+  outcome,
+  entry,
+  appName,
+  connectionId,
+}: {
+  outcome: RunOutcome;
+  entry: ToolCatalogEntry;
+  appName: string;
+  connectionId: string;
+}) {
+  const { result } = outcome;
+  if (result.decision === "ask_first") {
+    return <AskFirstResult outcome={outcome} entry={entry} appName={appName} connectionId={connectionId} />;
+  }
+  if (result.decision === "off") {
+    return (
+      <div className="rounded-md border border-border bg-muted/40 p-3 text-sm text-muted-foreground">
+        {result.error?.message ?? "This action is off and won't run."}
+      </div>
+    );
+  }
+  // The gateway can return `decision:"allowed"` (policy let the call through) yet
+  // the upstream MCP tool still fails at the tool layer (`isError:true` in the
+  // result envelope). Surface that as a failure card, not the green "Worked" one.
+  const toolError = result.error ?? mcpToolError(result.result);
+  if (toolError) {
+    return <ErrorResult outcome={outcome} appName={appName} connectionId={connectionId} error={toolError} />;
+  }
+  return <AllowedResult outcome={outcome} entry={entry} appName={appName} connectionId={connectionId} />;
+}
+
+/**
+ * A tool can return `decision:"allowed"` and still fail at the MCP layer — the
+ * gateway normalizes that into `{ data: { isError: true }, error: "…" }` inside
+ * the result envelope. Pull a renderable error out of that shape, or null when
+ * the result is a clean success.
+ */
+function mcpToolError(value: unknown): { message: string; reasonCode: string | null } | null {
+  if (!value || typeof value !== "object") return null;
+  const envelope = value as Record<string, unknown>;
+  const data = envelope.data && typeof envelope.data === "object" ? (envelope.data as Record<string, unknown>) : null;
+  const isError = data?.isError === true || envelope.isError === true;
+  if (!isError) return null;
+  // Prefer what the app actually said (normalized content text) over the generic
+  // gateway wrapper string, falling back to a friendly default.
+  const message =
+    (typeof envelope.content === "string" && envelope.content.trim() !== "" && envelope.content)
+    || (typeof envelope.error === "string" && envelope.error.trim() !== "" && envelope.error)
+    || "The app returned an error result.";
+  return { message, reasonCode: "tool_error" };
+}
+
+// --- Allowed (T7) ---------------------------------------------------------
+
+/** Pull a row array out of a tool result for the "n rows came back" heuristic. */
+function asRows(value: unknown): Record<string, unknown>[] | null {
+  const isObjArray = (v: unknown): v is Record<string, unknown>[] =>
+    Array.isArray(v) && v.length > 0 && v.every((i) => i !== null && typeof i === "object" && !Array.isArray(i));
+  if (isObjArray(value)) return value;
+  if (value && typeof value === "object") {
+    for (const key of ["rows", "values", "items", "data", "results"]) {
+      const inner = (value as Record<string, unknown>)[key];
+      if (isObjArray(inner)) return inner as Record<string, unknown>[];
+    }
+  }
+  return null;
+}
+
+function isEmptyResult(value: unknown): boolean {
+  if (value === null || value === undefined) return true;
+  if (Array.isArray(value)) return value.length === 0;
+  if (typeof value === "string") return value.trim() === "";
+  if (typeof value === "object") return Object.keys(value as object).length === 0;
+  return false;
+}
+
+function writeVerb(entry: ToolCatalogEntry): string | null {
+  const n = `${entry.toolName} ${entry.title ?? ""}`.toLowerCase();
+  if (/\b(append|add|insert|create|new)\b/.test(n)) return "added";
+  if (/\b(update|edit|set|patch|change|modify)\b/.test(n)) return "updated";
+  if (/\b(delete|remove|clear|trash)\b/.test(n)) return "removed";
+  return null;
+}
+
+function successHeadline(value: unknown, entry: ToolCatalogEntry, appName: string): string {
+  const verb = writeVerb(entry);
+  if (!entry.isReadOnly && verb) return `Worked. Row ${verb}.`;
+  const rows = asRows(value);
+  if (rows) return `Worked. ${rows.length} ${rows.length === 1 ? "row" : "rows"} came back.`;
+  if (isEmptyResult(value)) return "Worked. No data to show.";
+  return `Worked. ${appName} sent back the result.`;
+}
+
+function AllowedResult({
+  outcome,
+  entry,
+  appName,
+  connectionId,
+}: {
+  outcome: RunOutcome;
+  entry: ToolCatalogEntry;
+  appName: string;
+  connectionId: string;
+}) {
+  const value = outcome.result.result;
+  return (
+    <div className="rounded-md border border-emerald-500/40 bg-emerald-500/5 p-4">
+      <div className="flex items-center gap-2">
+        <Check className="h-4 w-4 text-emerald-600 dark:text-emerald-400" />
+        <span className="text-sm font-medium text-foreground">{successHeadline(value, entry, appName)}</span>
+      </div>
+      <p className="mt-0.5 flex items-center gap-1.5 text-xs text-muted-foreground">
+        <Clock className="h-3 w-3" />
+        Ran as {outcome.agentName} · {seconds(outcome.durationMs)} · {relTime(outcome.ranAt)}
+      </p>
+
+      {!isEmptyResult(value) && (
+        <div className="mt-3">
+          <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">Preview</p>
+          <div className="mt-1.5">
+            <PrettyPreview value={value} />
+          </div>
+        </div>
+      )}
+
+      <RawResponseDisclosure value={value} />
+
+      <p className="mt-3 text-xs text-muted-foreground">
+        This call is in the{" "}
+        <Link className="text-primary hover:underline" to={appTabHref(connectionId, "activity")}>
+          Activity tab
+        </Link>
+        .
+      </p>
+      <p className="mt-1 text-xs text-muted-foreground">Last run finished in {seconds(outcome.durationMs)}.</p>
+    </div>
+  );
+}
+
+/** Pretty preview: table for row arrays, depth-limited JSON otherwise, plain text for strings. */
+function PrettyPreview({ value }: { value: unknown }) {
+  const rows = asRows(value);
+  if (rows) {
+    const columns = Array.from(new Set(rows.flatMap((r) => Object.keys(r)))).slice(0, 6);
+    const shown = rows.slice(0, 6);
+    return (
+      <div className="overflow-x-auto rounded-md border border-border">
+        <table className="w-full text-left text-xs">
+          <thead className="bg-muted/50 text-muted-foreground">
+            <tr>
+              {columns.map((col) => (
+                <th key={col} className="px-2.5 py-1.5 font-medium">{col}</th>
+              ))}
+            </tr>
+          </thead>
+          <tbody className="divide-y divide-border">
+            {shown.map((row, i) => (
+              <tr key={i}>
+                {columns.map((col) => (
+                  <td key={col} className="px-2.5 py-1.5 text-foreground">{cellText(row[col])}</td>
+                ))}
+              </tr>
+            ))}
+          </tbody>
+        </table>
+        {rows.length > shown.length && (
+          <p className="px-2.5 py-1.5 text-(length:--text-micro) text-muted-foreground">… {rows.length - shown.length} more rows</p>
+        )}
+      </div>
+    );
+  }
+  if (typeof value === "string") {
+    return <pre className="max-h-64 overflow-auto whitespace-pre-wrap rounded-md border border-border bg-background p-3 text-xs text-foreground">{value}</pre>;
+  }
+  return (
+    <pre className="max-h-64 overflow-auto rounded-md border border-border bg-background p-3 text-xs text-foreground">
+      {safeStringify(collapseDeep(value, 2))}
+    </pre>
+  );
+}
+
+function cellText(value: unknown): string {
+  if (value === null || value === undefined) return "—";
+  if (typeof value === "object") return Array.isArray(value) ? `[${value.length}]` : "{…}";
+  return String(value);
+}
+
+/** Replace objects deeper than `maxDepth` with a placeholder so the tree stays readable. */
+function collapseDeep(value: unknown, maxDepth: number, depth = 0): unknown {
+  if (value === null || typeof value !== "object") return value;
+  if (depth >= maxDepth) return Array.isArray(value) ? "[…]" : "{…}";
+  if (Array.isArray(value)) return value.map((v) => collapseDeep(v, maxDepth, depth + 1));
+  const out: Record<string, unknown> = {};
+  for (const [k, v] of Object.entries(value as Record<string, unknown>)) {
+    out[k] = collapseDeep(v, maxDepth, depth + 1);
+  }
+  return out;
+}
+
+function RawResponseDisclosure({ value }: { value: unknown }) {
+  const [showRaw, setShowRaw] = useState(false);
+  if (value === undefined || value === null) return null;
+  return (
+    <div className="mt-3">
+      <button
+        type="button"
+        onClick={() => setShowRaw((prev) => !prev)}
+        className="text-xs font-semibold uppercase tracking-wide text-primary hover:underline"
+      >
+        {showRaw ? "Hide raw response" : "Show raw response"}
+      </button>
+      {showRaw && (
+        <pre className="mt-2 max-h-64 overflow-auto rounded-md border border-border bg-background p-3 text-xs text-foreground">
+          {safeStringify(value)}
+        </pre>
+      )}
+    </div>
+  );
+}
+
+// --- Error (T8) -----------------------------------------------------------
+
+function ErrorResult({
+  outcome,
+  appName,
+  connectionId,
+  error,
+}: {
+  outcome: RunOutcome;
+  appName: string;
+  connectionId: string;
+  error: { message: string; reasonCode: string | null };
+}) {
+  const hints = errorHints(error.message, error.reasonCode);
+  return (
+    <div className="rounded-md border border-amber-500/40 bg-amber-500/5 p-4">
+      <div className="flex items-center gap-2">
+        <AlertTriangle className="h-4 w-4 text-amber-600 dark:text-amber-400" />
+        <span className="text-sm font-medium text-foreground">It didn't work.</span>
+      </div>
+      <p className="mt-0.5 flex items-center gap-1.5 text-xs text-muted-foreground">
+        <Clock className="h-3 w-3" />
+        Tried as {outcome.agentName} · {seconds(outcome.durationMs)} · {relTime(outcome.ranAt)}
+      </p>
+      <div className="mt-3">
+        <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">What {appName} said</p>
+        <p className="mt-1 break-words text-sm text-foreground">{error.message}</p>
+        {error.reasonCode && <p className="mt-0.5 text-xs text-muted-foreground">code: {error.reasonCode}</p>}
+      </div>
+      <div className="mt-3">
+        <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">What to try</p>
+        <ul className="mt-1 list-disc space-y-0.5 pl-4 text-sm text-foreground">
+          {hints.map((hint) => (
+            <li key={hint}>{hint}</li>
+          ))}
+        </ul>
+      </div>
+      <p className="mt-3 text-xs text-muted-foreground">Adjust the input above and try again.</p>
+      <p className="mt-1 text-xs text-muted-foreground">
+        Also visible in the{" "}
+        <Link className="text-primary hover:underline" to={appTabHref(connectionId, "activity")}>
+          Activity tab
+        </Link>
+        .
+      </p>
+    </div>
+  );
+}
+
+// --- Ask first (T9) — live status polled from the action-request snapshot ---
+
+/** Phases that have settled — once reached, the panel stops polling. */
+const TERMINAL_PHASES: ReadonlySet<ToolConnectionTestCallStatus["phase"]> = new Set([
+  "done",
+  "denied",
+  "cancelled",
+  "expired",
+]);
+
+/** Compact "Where" line from the redacted parameter snapshot: `key: value` pairs. */
+function formatWhere(parameters: Record<string, unknown> | null | undefined): string | null {
+  if (!parameters) return null;
+  const parts: string[] = [];
+  for (const [key, value] of Object.entries(parameters)) {
+    if (value === null || value === undefined) continue;
+    if (typeof value === "object") continue;
+    parts.push(`${key}: ${String(value)}`);
+    if (parts.length >= 3) break;
+  }
+  return parts.length ? parts.join(" · ") : null;
+}
+
+function AskFirstResult({
+  outcome,
+  entry,
+  appName,
+  connectionId,
+}: {
+  outcome: RunOutcome;
+  entry: ToolCatalogEntry;
+  appName: string;
+  connectionId: string;
+}) {
+  const { selectedCompanyId } = useCompany();
+  const queryClient = useQueryClient();
+  const actionRequestId = outcome.result.actionRequestId;
+  const [cancelled, setCancelled] = useState(false);
+
+  const statusQuery = useQuery({
+    queryKey: queryKeys.tools.testCallStatus(connectionId, actionRequestId ?? "__none__"),
+    queryFn: () => toolsApi.getTestCallStatus(connectionId, actionRequestId!),
+    enabled: !!actionRequestId && !cancelled,
+    // Poll until the request settles (approved+done, denied, cancelled, expired).
+    refetchInterval: (query) => {
+      const phase = query.state.data?.phase;
+      return phase && TERMINAL_PHASES.has(phase) ? false : 2000;
+    },
+  });
+
+  const cancel = useMutation({
+    mutationFn: () => toolsApi.declineActionRequest(selectedCompanyId!, actionRequestId!),
+    onSuccess: () => {
+      setCancelled(true);
+      queryClient.invalidateQueries({ queryKey: queryKeys.tools.actionRequests(selectedCompanyId!, "pending") });
+      if (selectedCompanyId) queryClient.invalidateQueries({ queryKey: queryKeys.apps.attention(selectedCompanyId) });
+    },
+  });
+
+  const status = statusQuery.data;
+  const phase: ToolConnectionTestCallStatus["phase"] = cancelled ? "cancelled" : status?.phase ?? "waiting";
+
+  // Once the call has been approved and run, mutate into the real result shape
+  // so the tester sees the response (or failure) without re-running.
+  if (phase === "done" && status) {
+    // Same as the allowed path: an approved call can still fail at the MCP tool
+    // layer (isError:true in the envelope) without a top-level error.
+    const toolError = status.error ?? mcpToolError(status.result);
+    if (toolError) {
+      const errorOutcome: RunOutcome = {
+        result: { decision: "allowed", invocationId: status.invocationId, error: toolError },
+        agentName: outcome.agentName,
+        durationMs: status.durationMs ?? outcome.durationMs,
+        ranAt: status.resolvedAt ? new Date(status.resolvedAt) : outcome.ranAt,
+      };
+      return <ErrorResult outcome={errorOutcome} appName={appName} connectionId={connectionId} error={toolError} />;
+    }
+    const allowedOutcome: RunOutcome = {
+      result: { decision: "allowed", invocationId: status.invocationId, result: status.result },
+      agentName: outcome.agentName,
+      durationMs: status.durationMs ?? outcome.durationMs,
+      ranAt: status.resolvedAt ? new Date(status.resolvedAt) : outcome.ranAt,
+    };
+    return <AllowedResult outcome={allowedOutcome} entry={entry} appName={appName} connectionId={connectionId} />;
+  }
+
+  const requestedAt = status?.requestedAt ? new Date(status.requestedAt) : outcome.ranAt;
+  const where = formatWhere(status?.parameters);
+  const statusLabel =
+    phase === "running"
+      ? "Approved · running"
+      : phase === "denied"
+        ? "Denied — see Review for why"
+        : phase === "cancelled"
+          ? "Cancelled"
+          : phase === "expired"
+            ? "Expired — send it again"
+            : `Waiting · ${relTime(requestedAt)}`;
+  const settled = phase === "denied" || phase === "cancelled" || phase === "expired";
+
+  return (
+    <div className="rounded-md border border-amber-500/40 bg-amber-500/5 p-4">
+      <div className="flex items-center gap-2">
+        <ShieldQuestion className="h-4 w-4 text-amber-600 dark:text-amber-400" />
+        <span className="text-sm font-medium text-foreground">Sent for your OK.</span>
+      </div>
+      <p className="mt-0.5 text-xs text-muted-foreground">{outcome.agentName} needs your approval before this runs.</p>
+
+      <dl className="mt-3 space-y-1.5 text-sm">
+        <div className="flex gap-3">
+          <dt className="w-16 shrink-0 text-xs font-semibold uppercase tracking-wide text-muted-foreground">Action</dt>
+          <dd className="text-foreground">{entry.title ?? entry.toolName}</dd>
+        </div>
+        {where && (
+          <div className="flex gap-3">
+            <dt className="w-16 shrink-0 text-xs font-semibold uppercase tracking-wide text-muted-foreground">Where</dt>
+            <dd className="break-words text-foreground">{where}</dd>
+          </div>
+        )}
+        <div className="flex gap-3">
+          <dt className="w-16 shrink-0 text-xs font-semibold uppercase tracking-wide text-muted-foreground">Status</dt>
+          <dd className={cn("flex items-center gap-1.5 text-foreground", settled && "text-muted-foreground")}>
+            {phase === "running" && <Loader2 className="h-3 w-3 animate-spin" />}
+            {statusLabel}
+          </dd>
+        </div>
+      </dl>
+
+      {!settled && (
+        <p className="mt-3 text-sm text-foreground">
+          Approve it in the{" "}
+          <Link className="font-medium text-primary hover:underline" to={appTabHref(connectionId, "review")}>
+            Review tab
+          </Link>{" "}
+          to finish the test. You can also cancel the request.
+        </p>
+      )}
+
+      <div className="mt-3 flex flex-wrap items-center gap-2">
+        <Button asChild size="sm" variant="outline">
+          <Link to={appTabHref(connectionId, "review")}>Open Review tab</Link>
+        </Button>
+        {phase === "waiting" && actionRequestId && selectedCompanyId && (
+          <Button size="sm" variant="ghost" onClick={() => cancel.mutate()} disabled={cancel.isPending}>
+            {cancel.isPending ? "Cancelling…" : "Cancel this request"}
+          </Button>
+        )}
+      </div>
+    </div>
+  );
+}
+
+// --- Off (T10) ------------------------------------------------------------
+
+function OffExplanation({
+  entry,
+  connectionId,
+  appName,
+  agent,
+  allAgents,
+  onSelectAgent,
+}: {
+  entry: ToolCatalogEntry;
+  connectionId: string;
+  appName: string;
+  agent: ToolConnectionTestAgent;
+  allAgents: ToolConnectionTestAgent[];
+  onSelectAgent: (agentId: string) => void;
+}) {
+  const title = entry.title ?? entry.toolName;
+  const permHref = `${appTabHref(connectionId, "permissions")}?focus=${encodeURIComponent(entry.id)}`;
+
+  // Decision for this action across every agent we can test as.
+  const others = allAgents.filter((a) => a.id !== agent.id);
+  const decisionOf = (a: ToolConnectionTestAgent): ToolConnectionTestDecision => {
+    const tool = a.effectiveAccess.tools.find(
+      (t) => t.toolName === entry.toolName || t.gatewayToolName === entry.toolName,
+    );
+    return tool?.decision ?? "off";
+  };
+  const allOff = allAgents.every((a) => decisionOf(a) === "off");
+
+  const whyBody = entry.status === "quarantined"
+    ? "This action is new and hasn't been turned on yet."
+    : allOff
+      ? "An admin set it to Off for all agents using this app."
+      : `${agent.name}'s access profile sets this action to Off.`;
+
+  // "Last changed by {Actor} · {relativeTime}" — only the access config carries
+  // this; a quarantined action has never been configured, so there's nothing to
+  // attribute. Actor is omitted when the latest edit isn't agent-attributable.
+  const { lastChangedAt, lastChangedByName } = agent.effectiveAccess;
+  const auditHint =
+    entry.status !== "quarantined" && lastChangedAt
+      ? `Last changed${lastChangedByName ? ` by ${lastChangedByName}` : ""} · ${relTime(new Date(lastChangedAt))}`
+      : null;
+
+  const otherSettings = others.map((a) => ({ name: a.name, decision: decisionOf(a) }));
+  const tryAgents = others.filter((a) => decisionOf(a) !== "off");
+
+  return (
+    <div className="grid gap-3 md:grid-cols-(--gtc-62)">
+      <div className="space-y-3">
+        <div className="flex items-start gap-2 rounded-md border border-border bg-muted/40 p-3">
+          <Ban className="mt-0.5 h-4 w-4 shrink-0 text-muted-foreground" />
+          <div className="text-sm text-muted-foreground">
+            <p className="font-medium text-foreground">{title} is off for {agent.name}.</p>
+            <p className="mt-0.5">It won't run here, and it won't run from a task either.</p>
+            <p className="mt-2">
+              Want to test it? Turn it on for {agent.name} in{" "}
+              <Link className="font-medium text-primary hover:underline" to={appTabHref(connectionId, "permissions")}>
+                Permissions
+              </Link>{" "}
+              — set it to Allowed or Ask first.
+            </p>
+          </div>
+        </div>
+        <Button asChild size="sm">
+          <Link to={permHref}>Open Permissions →</Link>
+        </Button>
+        <p className="text-xs text-muted-foreground">No call will be made — this action is off for {agent.name}.</p>
+      </div>
+
+      <aside className="rounded-md border border-border bg-card p-3">
+        <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">Why this is off</p>
+        <p className="mt-1.5 text-xs text-muted-foreground">{whyBody}</p>
+        {auditHint && <p className="mt-1.5 text-(length:--text-micro) text-muted-foreground">{auditHint}</p>}
+        {otherSettings.length > 0 && (
+          <div className="mt-3">
+            <p className="text-(length:--text-micro) font-medium text-muted-foreground">Other agents using {appName}:</p>
+            <ul className="mt-1 space-y-0.5 text-(length:--text-micro) text-muted-foreground">
+              {otherSettings.map((s) => (
+                <li key={s.name}>
+                  {s.name}: <span className="text-foreground">{DECISION_META[s.decision].label}</span>
+                </li>
+              ))}
+            </ul>
+          </div>
+        )}
+        {tryAgents.length > 0 && (
+          <div className="mt-3">
+            <p className="text-(length:--text-micro) font-medium text-muted-foreground">Try as a different agent:</p>
+            <div className="mt-1 flex flex-wrap gap-1.5">
+              {tryAgents.slice(0, 4).map((other) => (
+                <button
+                  key={other.id}
+                  type="button"
+                  onClick={() => onSelectAgent(other.id)}
+                  className="rounded-full border border-border px-2.5 py-1 text-(length:--text-micro) font-medium text-foreground hover:bg-accent"
+                >
+                  {other.name}
+                </button>
+              ))}
+            </div>
+          </div>
+        )}
+      </aside>
+    </div>
+  );
+}
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+function safeStringify(value: unknown): string {
+  try {
+    return JSON.stringify(value, null, 2);
+  } catch {
+    return String(value);
+  }
+}
+
+/**
+ * Tailored next steps keyed on the upstream/gateway error. Mirrors the
+ * board-accepted copy-spec error-hint lookup (NOT_FOUND / PERMISSION_DENIED /
+ * INVALID_ARGUMENT / RATE_LIMIT) with the locked generic fallback otherwise.
+ */
+export function errorHints(message: string, reasonCode: string | null | undefined): string[] {
+  const haystack = `${reasonCode ?? ""} ${message}`.toUpperCase();
+  if (haystack.includes("NOT_FOUND")) {
+    return [
+      "Double-check the ID or name you entered — pick it from a dropdown if one is offered.",
+      "Make sure this agent has access to that resource in the connected account.",
+    ];
+  }
+  if (haystack.includes("PERMISSION") || haystack.includes("FORBIDDEN") || haystack.includes("UNAUTHORIZED")) {
+    return [
+      "The connected account may not have permission for this action.",
+      "Reconnect the app from Setup if its access was recently changed.",
+    ];
+  }
+  if (haystack.includes("INVALID_ARGUMENT") || haystack.includes("INVALID") || haystack.includes("BAD_REQUEST")) {
+    return [
+      "Check the field formats above — a value may be the wrong type or shape.",
+      "Open “More options” to confirm any advanced fields are filled in correctly.",
+    ];
+  }
+  if (haystack.includes("RATE_LIMIT") || haystack.includes("RESOURCE_EXHAUSTED") || haystack.includes("429")) {
+    return ["The app is rate-limiting calls right now — wait a moment and run it again."];
+  }
+  // Locked generic fallback (copy-spec decision #2).
+  return ["Check the inputs above and try again."];
+}
diff --git a/ui/src/pages/apps/app-detail/types.ts b/ui/src/pages/apps/app-detail/types.ts
new file mode 100644
index 00000000000..8fd147e999d
--- /dev/null
+++ b/ui/src/pages/apps/app-detail/types.ts
@@ -0,0 +1,41 @@
+import type {
+  Agent,
+  AppGalleryEntry,
+  ToolCallEvent,
+  ToolConnectionActivityResponse,
+  ToolConnectionLifecycleEvent,
+  ToolCatalogEntry,
+  ToolConnection,
+} from "@paperclipai/shared";
+
+export type AccessDraft = { mode: "all" | "specific"; agentIds: Set<string> };
+
+export interface AppDetailSectionProps {
+  connectionId: string;
+  connection: ToolConnection;
+  appName: string;
+  galleryEntry: AppGalleryEntry | null;
+  catalog: ToolCatalogEntry[];
+  active: ToolCatalogEntry[];
+  readOnly: ToolCatalogEntry[];
+  canChange: ToolCatalogEntry[];
+  quarantined: ToolCatalogEntry[];
+  enabledIds: Set<string>;
+  askFirstIds: Set<string>;
+  access: AccessDraft;
+  agents: Agent[];
+  pending: boolean;
+}
+
+export interface ActivityPanelProps {
+  events: ToolCallEvent[];
+  lifecycleEvents: ToolConnectionLifecycleEvent[];
+  issues: ToolConnectionActivityResponse["issues"];
+  actionRequests: ToolConnectionActivityResponse["actionRequests"];
+  loading: boolean;
+  agents: Agent[];
+  connectionId: string;
+  appName: string;
+  /** Maps a user principalId → display name, for "tested as" attribution on Test-tab calls. */
+  userLabelById?: Map<string, string>;
+}
diff --git a/ui/src/pages/apps/app-tabs.ts b/ui/src/pages/apps/app-tabs.ts
new file mode 100644
index 00000000000..d2f543f12cf
--- /dev/null
+++ b/ui/src/pages/apps/app-tabs.ts
@@ -0,0 +1,35 @@
+import { Activity, Beaker, Inbox, Settings2, ShieldCheck, Wrench } from "lucide-react";
+
+export const APP_TABS = [
+  { key: "setup", label: "Setup", icon: Settings2 },
+  { key: "review", label: "Review", icon: Inbox },
+  { key: "permissions", label: "Permissions", icon: ShieldCheck },
+  { key: "activity", label: "Activity", icon: Activity },
+  { key: "test", label: "Test", icon: Beaker },
+  { key: "advanced", label: "Advanced", icon: Wrench },
+] as const;
+
+export type AppTabKey = (typeof APP_TABS)[number]["key"];
+
+/**
+ * Tabs hidden for an application that has no live connection (the
+ * `AppNotConnected` shell). The Test tab runs real calls against a connected
+ * app, so it only appears once the app is connected.
+ */
+export const CONNECTED_ONLY_APP_TABS: ReadonlySet<AppTabKey> = new Set<AppTabKey>(["test"]);
+
+export function appTabHref(connectionId: string, tab: AppTabKey): string {
+  return `/apps/${connectionId}/${tab}`;
+}
+
+export function appApplicationTabHref(applicationId: string, tab: AppTabKey): string {
+  return `/apps/app/${applicationId}/${tab}`;
+}
+
+export function isAppTabKey(value: string | undefined): value is AppTabKey {
+  return APP_TABS.some((tab) => tab.key === value);
+}
+
+export function appTabLabel(tabKey: AppTabKey): string {
+  return APP_TABS.find((tab) => tab.key === tabKey)?.label ?? "Setup";
+}
diff --git a/ui/src/pages/apps/gateways/AppsSubNav.tsx b/ui/src/pages/apps/gateways/AppsSubNav.tsx
new file mode 100644
index 00000000000..e6f734e9ef1
--- /dev/null
+++ b/ui/src/pages/apps/gateways/AppsSubNav.tsx
@@ -0,0 +1,40 @@
+import { Link } from "@/lib/router";
+import { cn } from "@/lib/utils";
+
+type SubNavKey = "connected" | "gateways" | "activity";
+
+const ITEMS: { key: SubNavKey; label: string; href: string }[] = [
+  { key: "connected", label: "Connected", href: "/apps" },
+  { key: "gateways", label: "Gateways", href: "/apps/gateways" },
+  { key: "activity", label: "Activity", href: "/activity" },
+];
+
+/**
+ * Shared Apps section sub-navigation (Connected · Gateways · Activity). Keeps
+ * the Gateways surface reachable as a first-class Apps tab per the PAP-11178
+ * design of record, rather than buried under the Advanced developer door.
+ */
+export function AppsSubNav({ active }: { active: SubNavKey }) {
+  return (
+    <nav className="flex items-center gap-6 border-b border-border text-sm" aria-label="Apps sections">
+      {ITEMS.map((item) => {
+        const isActive = item.key === active;
+        return (
+          <Link
+            key={item.href}
+            to={item.href}
+            className={cn(
+              "-mb-px border-b-2 pb-2.5 pt-1 font-medium transition-colors",
+              isActive
+                ? "border-foreground text-foreground"
+                : "border-transparent text-muted-foreground hover:text-foreground",
+            )}
+            aria-current={isActive ? "page" : undefined}
+          >
+            {item.label}
+          </Link>
+        );
+      })}
+    </nav>
+  );
+}
diff --git a/ui/src/pages/apps/gateways/ConnectClientDialog.tsx b/ui/src/pages/apps/gateways/ConnectClientDialog.tsx
new file mode 100644
index 00000000000..9274b52e500
--- /dev/null
+++ b/ui/src/pages/apps/gateways/ConnectClientDialog.tsx
@@ -0,0 +1,204 @@
+import { useEffect, useMemo, useState } from "react";
+import { Check, Copy } from "lucide-react";
+import type { ToolMcpGatewayTokenCreated, ToolMcpGatewayWithTokens } from "@paperclipai/shared";
+import { Button } from "@/components/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from "@/components/ui/dialog";
+import { useToast } from "@/context/ToastContext";
+import { cn } from "@/lib/utils";
+import { formatSnippetConfig, maskedTokenLabel, orderedSnippets } from "./gateway-helpers";
+
+type PanelKey = string; // snippet client key, or "raw_url"
+
+/**
+ * "Connect a client" dialog (PAP-11178 design of record). Shows the copy-paste
+ * config for each supported client plus a raw URL fallback. If a token was just
+ * minted it can be revealed once here; otherwise the config carries a masked
+ * placeholder and the value never persists in the DOM.
+ */
+export function ConnectClientDialog({
+  gateway,
+  open,
+  onOpenChange,
+  createdToken,
+}: {
+  gateway: ToolMcpGatewayWithTokens;
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  createdToken?: ToolMcpGatewayTokenCreated | null;
+}) {
+  const { pushToast } = useToast();
+  const snippets = useMemo(() => orderedSnippets(gateway.clientSnippets ?? []), [gateway.clientSnippets]);
+  const endpoint = useMemo(() => {
+    const origin = typeof window !== "undefined" ? window.location.origin : "";
+    return `${origin}${gateway.endpointPath}`;
+  }, [gateway.endpointPath]);
+
+  const [active, setActive] = useState<PanelKey>(snippets[0]?.client ?? "raw_url");
+  const [revealed, setRevealed] = useState(false);
+
+  useEffect(() => {
+    if (open) {
+      setActive(snippets[0]?.client ?? "raw_url");
+      setRevealed(false);
+    }
+  }, [open, snippets]);
+
+  async function copyText(value: string, label: string) {
+    try {
+      if (typeof navigator === "undefined" || !navigator.clipboard?.writeText) {
+        throw new Error("Clipboard access is unavailable.");
+      }
+      await navigator.clipboard.writeText(value);
+      pushToast({ title: "Copied", body: label, tone: "success" });
+    } catch (error) {
+      pushToast({
+        title: "Copy failed",
+        body: error instanceof Error ? error.message : "Clipboard access is unavailable.",
+        tone: "error",
+      });
+    }
+  }
+
+  const activeSnippet = snippets.find((snippet) => snippet.client === active) ?? null;
+  const configText = activeSnippet ? formatSnippetConfig(activeSnippet.config) : "";
+
+  return (
+    <Dialog open={open} onOpenChange={onOpenChange}>
+      <DialogContent className="sm:max-w-2xl">
+        <DialogHeader>
+          <DialogTitle>Connect a client</DialogTitle>
+          <DialogDescription>
+            Pick how you’ll point your client at this gateway.
+          </DialogDescription>
+        </DialogHeader>
+
+        <div className="grid gap-4 sm:grid-cols-(--gtc-10)">
+          <nav className="flex gap-1 overflow-x-auto sm:flex-col" aria-label="Clients">
+            {snippets.map((snippet) => (
+              <button
+                key={snippet.client}
+                type="button"
+                onClick={() => setActive(snippet.client)}
+                className={cn(
+                  "shrink-0 rounded-md px-3 py-1.5 text-left text-sm transition-colors",
+                  active === snippet.client
+                    ? "bg-muted font-medium text-foreground"
+                    : "text-muted-foreground hover:bg-muted/60",
+                )}
+              >
+                {snippet.label}
+              </button>
+            ))}
+            <button
+              type="button"
+              onClick={() => setActive("raw_url")}
+              className={cn(
+                "shrink-0 rounded-md px-3 py-1.5 text-left text-sm transition-colors",
+                active === "raw_url"
+                  ? "bg-muted font-medium text-foreground"
+                  : "text-muted-foreground hover:bg-muted/60",
+              )}
+            >
+              Raw URL
+            </button>
+          </nav>
+
+          <div className="min-w-0 space-y-3">
+            {active === "raw_url" ? (
+              <div className="space-y-1.5">
+                <div className="text-sm font-medium text-foreground">Endpoint URL</div>
+                <div className="flex items-center gap-2">
+                  <code className="min-w-0 flex-1 truncate rounded-md bg-muted px-3 py-2 font-mono text-xs text-muted-foreground">
+                    {endpoint}
+                  </code>
+                  <Button variant="outline" size="sm" onClick={() => void copyText(endpoint, "Endpoint URL")}>
+                    <Copy className="mr-1 h-3.5 w-3.5" />
+                    Copy
+                  </Button>
+                </div>
+                <p className="text-xs text-muted-foreground">
+                  Authenticate with <code>Authorization: Bearer &lt;token&gt;</code> over streamable HTTP.
+                </p>
+              </div>
+            ) : activeSnippet ? (
+              <div className="space-y-1.5">
+                <div className="flex items-center justify-between gap-2">
+                  <div className="text-sm font-medium text-foreground">{activeSnippet.label}</div>
+                  <Button
+                    variant="outline"
+                    size="sm"
+                    onClick={() => void copyText(configText, `${activeSnippet.label} config`)}
+                  >
+                    <Copy className="mr-1 h-3.5 w-3.5" />
+                    Copy
+                  </Button>
+                </div>
+                <pre className="max-h-64 overflow-auto whitespace-pre-wrap break-words rounded-md bg-muted p-3 font-mono text-xs text-muted-foreground">
+                  {configText}
+                </pre>
+                {activeSnippet.notes.length > 0 ? (
+                  <ul className="space-y-1 text-xs text-muted-foreground">
+                    {activeSnippet.notes.map((note) => (
+                      <li key={note}>{note}</li>
+                    ))}
+                  </ul>
+                ) : null}
+              </div>
+            ) : (
+              <p className="text-sm text-muted-foreground">No client snippets available for this gateway.</p>
+            )}
+
+            <div className="space-y-1.5 rounded-md border border-border p-3">
+              <div className="text-xs font-medium text-muted-foreground">Token</div>
+              {createdToken ? (
+                <div className="flex items-center gap-2">
+                  <code className="min-w-0 flex-1 truncate rounded bg-background px-2 py-1.5 font-mono text-xs text-foreground">
+                    {revealed ? createdToken.token : maskedTokenLabel(createdToken)}
+                  </code>
+                  {revealed ? (
+                    <Button
+                      variant="outline"
+                      size="sm"
+                      onClick={() => void copyText(createdToken.token, "Access token")}
+                    >
+                      <Copy className="mr-1 h-3.5 w-3.5" />
+                      Copy
+                    </Button>
+                  ) : (
+                    <Button variant="outline" size="sm" onClick={() => setRevealed(true)}>
+                      Show
+                    </Button>
+                  )}
+                </div>
+              ) : (
+                <p className="text-xs text-muted-foreground">
+                  Mint a token on the <span className="font-medium">Tokens</span> tab, then paste it where the
+                  snippet shows <code>Bearer …</code>. You won’t see a token’s full value again after it’s
+                  created.
+                </p>
+              )}
+              <p className="text-xs text-muted-foreground">
+                Treat this like a password. Anyone with the token can call exactly the tools this gateway
+                allows. If it leaks, revoke it — the client goes silent immediately.
+              </p>
+            </div>
+          </div>
+        </div>
+
+        <DialogFooter>
+          <Button onClick={() => onOpenChange(false)}>
+            <Check className="mr-1.5 h-4 w-4" />
+            Done
+          </Button>
+        </DialogFooter>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/ui/src/pages/apps/gateways/GatewayDetail.tsx b/ui/src/pages/apps/gateways/GatewayDetail.tsx
new file mode 100644
index 00000000000..d8ed2e7ac2a
--- /dev/null
+++ b/ui/src/pages/apps/gateways/GatewayDetail.tsx
@@ -0,0 +1,241 @@
+import { useEffect, useMemo, useState } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { Send } from "lucide-react";
+import type { ToolMcpGatewayTokenCreated } from "@paperclipai/shared";
+import { Link, Navigate, useNavigate, useParams } from "@/lib/router";
+import { useCompany } from "@/context/CompanyContext";
+import { useBreadcrumbs } from "@/context/BreadcrumbContext";
+import { useToast } from "@/context/ToastContext";
+import { queryKeys } from "@/lib/queryKeys";
+import { toolsApi } from "@/api/tools";
+import { agentsApi } from "@/api/agents";
+import { projectsApi } from "@/api/projects";
+import { Button } from "@/components/ui/button";
+import { Skeleton } from "@/components/ui/skeleton";
+import { cn } from "@/lib/utils";
+import { ErrorState } from "@/pages/tools/shared";
+import { GATEWAY_TABS, gatewayTabHref, isGatewayTabKey, type GatewayTabKey } from "./gateway-tabs";
+import { gatewaysQueryKey } from "./NewGatewayDialog";
+import { ConnectClientDialog } from "./ConnectClientDialog";
+import { deriveGatewayApps, isGatewayOn } from "./gateway-helpers";
+import { OverviewPanel } from "./panels/OverviewPanel";
+import { AppsToolsPanel } from "./panels/AppsToolsPanel";
+import { TokensPanel } from "./panels/TokensPanel";
+import { GatewayActivityPanel } from "./panels/GatewayActivityPanel";
+import { GatewayAdvancedPanel } from "./panels/GatewayAdvancedPanel";
+
+export function GatewayDetail() {
+  const { gatewayId = "", tab } = useParams<{ gatewayId: string; tab?: string }>();
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const { pushToast } = useToast();
+  const { selectedCompany, selectedCompanyId } = useCompany();
+  const { setBreadcrumbs } = useBreadcrumbs();
+  const [snippetOpen, setSnippetOpen] = useState(false);
+  const [createdToken, setCreatedToken] = useState<ToolMcpGatewayTokenCreated | null>(null);
+
+  const activeTab: GatewayTabKey | null = isGatewayTabKey(tab) ? tab : null;
+
+  const gatewaysQuery = useQuery({
+    queryKey: gatewaysQueryKey(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listGateways(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+  const profilesQuery = useQuery({
+    queryKey: queryKeys.tools.profiles(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listProfiles(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+  const connectionsQuery = useQuery({
+    queryKey: queryKeys.tools.connections(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listConnections(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+  const applicationsQuery = useQuery({
+    queryKey: queryKeys.tools.applications(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listApplications(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+  const agentsQuery = useQuery({
+    queryKey: queryKeys.agents.list(selectedCompanyId ?? "__none__"),
+    queryFn: () => agentsApi.list(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+  const projectsQuery = useQuery({
+    queryKey: queryKeys.projects.list(selectedCompanyId ?? "__none__"),
+    queryFn: () => projectsApi.list(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+
+  const gateway = useMemo(
+    () => (gatewaysQuery.data?.gateways ?? []).find((g) => g.id === gatewayId),
+    [gatewaysQuery.data, gatewayId],
+  );
+  const profile = useMemo(
+    () => (profilesQuery.data?.profiles ?? []).find((p) => p.id === gateway?.profileId),
+    [profilesQuery.data, gateway?.profileId],
+  );
+  const apps = useMemo(
+    () =>
+      deriveGatewayApps(
+        profile,
+        applicationsQuery.data?.applications ?? [],
+        connectionsQuery.data?.connections ?? [],
+      ),
+    [profile, applicationsQuery.data, connectionsQuery.data],
+  );
+  const agentNames = useMemo(
+    () => new Map((agentsQuery.data ?? []).map((agent) => [agent.id, agent.name])),
+    [agentsQuery.data],
+  );
+  const projectNames = useMemo(
+    () => new Map((projectsQuery.data ?? []).map((project) => [project.id, project.name])),
+    [projectsQuery.data],
+  );
+
+  useEffect(() => {
+    if (!gateway) return;
+    setBreadcrumbs([
+      { label: selectedCompany?.name ?? "Company", href: "/dashboard" },
+      { label: "Apps", href: "/apps" },
+      { label: "Gateways", href: "/apps/gateways" },
+      { label: gateway.name },
+    ]);
+    return () => setBreadcrumbs([]);
+  }, [setBreadcrumbs, selectedCompany?.name, gateway]);
+
+  const toggleMutation = useMutation({
+    mutationFn: () =>
+      toolsApi.updateGateway(selectedCompanyId!, gatewayId, {
+        status: gateway && isGatewayOn(gateway) ? "disabled" : "active",
+      }),
+    onSuccess: async (updated) => {
+      pushToast({
+        title: updated.status === "active" ? "Gateway on" : "Gateway off",
+        body:
+          updated.status === "active"
+            ? `${updated.name} is exposing its tools again.`
+            : `${updated.name} is off — every client goes silent.`,
+        tone: "success",
+      });
+      await queryClient.invalidateQueries({ queryKey: gatewaysQueryKey(selectedCompanyId!) });
+    },
+    onError: (error) =>
+      pushToast({
+        title: "Couldn't update the gateway",
+        body: error instanceof Error ? error.message : String(error),
+        tone: "error",
+      }),
+  });
+
+  if (!selectedCompanyId) {
+    return <div className="p-6 text-sm text-muted-foreground">Select a company to manage gateways.</div>;
+  }
+  if (!activeTab) {
+    return <Navigate replace to={gatewayTabHref(gatewayId, "overview")} />;
+  }
+  if (gatewaysQuery.isLoading) {
+    return (
+      <div className="max-w-4xl space-y-4">
+        <Skeleton className="h-10 w-64" />
+        <Skeleton className="h-9 w-full max-w-lg" />
+        <Skeleton className="h-64 w-full" />
+      </div>
+    );
+  }
+  if (gatewaysQuery.isError) {
+    return <ErrorState error={gatewaysQuery.error} onRetry={() => gatewaysQuery.refetch()} />;
+  }
+  if (!gateway) {
+    return (
+      <div className="max-w-3xl p-6">
+        <p className="text-sm text-muted-foreground">We couldn’t find that gateway.</p>
+        <Button className="mt-4" variant="outline" onClick={() => navigate("/apps/gateways")}>
+          Back to gateways
+        </Button>
+      </div>
+    );
+  }
+
+  const endpointHost = (() => {
+    try {
+      return `${new URL(window.location.origin).host}${gateway.endpointPath}`;
+    } catch {
+      return gateway.endpointPath;
+    }
+  })();
+
+  return (
+    <div className="max-w-4xl space-y-5 pb-12">
+      <div className="flex flex-wrap items-start justify-between gap-3">
+        <div className="min-w-0">
+          <div className="text-xs text-muted-foreground">
+            <Link to="/apps/gateways" className="hover:underline">
+              Apps · Gateways
+            </Link>
+          </div>
+          <h1 className="mt-1 text-2xl font-bold tracking-tight">{gateway.name}</h1>
+          <p className="mt-1 truncate font-mono text-xs text-muted-foreground">{endpointHost}</p>
+        </div>
+        <Button onClick={() => setSnippetOpen(true)}>
+          <Send className="mr-1.5 h-4 w-4" />
+          Show snippet
+        </Button>
+      </div>
+
+      <nav className="flex items-center gap-6 overflow-x-auto border-b border-border text-sm" aria-label="Gateway tabs">
+        {GATEWAY_TABS.map((item) => {
+          const isActive = item.key === activeTab;
+          return (
+            <Link
+              key={item.key}
+              to={gatewayTabHref(gatewayId, item.key)}
+              className={cn(
+                "-mb-px shrink-0 border-b-2 pb-2.5 pt-1 font-medium transition-colors",
+                isActive
+                  ? "border-foreground text-foreground"
+                  : "border-transparent text-muted-foreground hover:text-foreground",
+              )}
+              aria-current={isActive ? "page" : undefined}
+            >
+              {item.label}
+            </Link>
+          );
+        })}
+      </nav>
+
+      {activeTab === "overview" && (
+        <OverviewPanel
+          gateway={gateway}
+          profile={profile}
+          apps={apps}
+          agentNames={agentNames}
+          projectNames={projectNames}
+          toggleDisabled={toggleMutation.isPending}
+          onToggle={() => toggleMutation.mutate()}
+        />
+      )}
+      {activeTab === "apps" && <AppsToolsPanel apps={apps} profile={profile} />}
+      {activeTab === "tokens" && (
+        <TokensPanel
+          companyId={selectedCompanyId}
+          gateway={gateway}
+          onTokenCreated={(token) => setCreatedToken(token)}
+        />
+      )}
+      {activeTab === "activity" && (
+        <GatewayActivityPanel companyId={selectedCompanyId} gateway={gateway} />
+      )}
+      {activeTab === "advanced" && (
+        <GatewayAdvancedPanel companyId={selectedCompanyId} gateway={gateway} />
+      )}
+
+      <ConnectClientDialog
+        gateway={gateway}
+        open={snippetOpen}
+        onOpenChange={setSnippetOpen}
+        createdToken={createdToken}
+      />
+    </div>
+  );
+}
diff --git a/ui/src/pages/apps/gateways/GatewaysList.tsx b/ui/src/pages/apps/gateways/GatewaysList.tsx
new file mode 100644
index 00000000000..d6728cc3430
--- /dev/null
+++ b/ui/src/pages/apps/gateways/GatewaysList.tsx
@@ -0,0 +1,355 @@
+import { type ReactNode, useEffect, useMemo, useState } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { Plus, Search } from "lucide-react";
+import type { ToolMcpGatewayWithTokens } from "@paperclipai/shared";
+import { useNavigate } from "@/lib/router";
+import { useCompany } from "@/context/CompanyContext";
+import { useBreadcrumbs } from "@/context/BreadcrumbContext";
+import { useToast } from "@/context/ToastContext";
+import { queryKeys } from "@/lib/queryKeys";
+import { toolsApi } from "@/api/tools";
+import { agentsApi } from "@/api/agents";
+import { projectsApi } from "@/api/projects";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { Skeleton } from "@/components/ui/skeleton";
+import { ToggleSwitch } from "@/components/ui/toggle-switch";
+import { ErrorState, RelativeTime } from "@/pages/tools/shared";
+import { AppsSubNav } from "./AppsSubNav";
+import { NewGatewayDialog, gatewaysQueryKey } from "./NewGatewayDialog";
+import { gatewayTabHref } from "./gateway-tabs";
+import {
+  activeTokenCount,
+  allowedToolsLabel,
+  deriveGatewayApps,
+  expiringTokenCount,
+  formatScope,
+  isGatewayOn,
+  latestTokenActivity,
+} from "./gateway-helpers";
+
+export function GatewaysList() {
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const { pushToast } = useToast();
+  const { selectedCompany, selectedCompanyId } = useCompany();
+  const { setBreadcrumbs } = useBreadcrumbs();
+  const [search, setSearch] = useState("");
+  const [creating, setCreating] = useState(false);
+
+  useEffect(() => {
+    setBreadcrumbs([
+      { label: selectedCompany?.name ?? "Company", href: "/dashboard" },
+      { label: "Apps", href: "/apps" },
+      { label: "Gateways" },
+    ]);
+    return () => setBreadcrumbs([]);
+  }, [setBreadcrumbs, selectedCompany?.name]);
+
+  const gatewaysQuery = useQuery({
+    queryKey: gatewaysQueryKey(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listGateways(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+  const profilesQuery = useQuery({
+    queryKey: queryKeys.tools.profiles(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listProfiles(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+  const connectionsQuery = useQuery({
+    queryKey: queryKeys.tools.connections(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listConnections(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+  const applicationsQuery = useQuery({
+    queryKey: queryKeys.tools.applications(selectedCompanyId ?? "__none__"),
+    queryFn: () => toolsApi.listApplications(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+  const agentsQuery = useQuery({
+    queryKey: queryKeys.agents.list(selectedCompanyId ?? "__none__"),
+    queryFn: () => agentsApi.list(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+  const projectsQuery = useQuery({
+    queryKey: queryKeys.projects.list(selectedCompanyId ?? "__none__"),
+    queryFn: () => projectsApi.list(selectedCompanyId!),
+    enabled: !!selectedCompanyId,
+  });
+
+  const profileById = useMemo(
+    () => new Map((profilesQuery.data?.profiles ?? []).map((profile) => [profile.id, profile])),
+    [profilesQuery.data],
+  );
+  const agentNames = useMemo(
+    () => new Map((agentsQuery.data ?? []).map((agent) => [agent.id, agent.name])),
+    [agentsQuery.data],
+  );
+  const projectNames = useMemo(
+    () => new Map((projectsQuery.data ?? []).map((project) => [project.id, project.name])),
+    [projectsQuery.data],
+  );
+
+  const toggleMutation = useMutation({
+    mutationFn: ({ gateway }: { gateway: ToolMcpGatewayWithTokens }) =>
+      toolsApi.updateGateway(selectedCompanyId!, gateway.id, {
+        status: isGatewayOn(gateway) ? "disabled" : "active",
+      }),
+    onSuccess: async (gateway) => {
+      pushToast({
+        title: gateway.status === "active" ? "Gateway on" : "Gateway off",
+        body:
+          gateway.status === "active"
+            ? `${gateway.name} is exposing its tools again.`
+            : `${gateway.name} is off — every client goes silent.`,
+        tone: "success",
+      });
+      await queryClient.invalidateQueries({ queryKey: gatewaysQueryKey(selectedCompanyId!) });
+    },
+    onError: (error) =>
+      pushToast({
+        title: "Couldn't update the gateway",
+        body: error instanceof Error ? error.message : String(error),
+        tone: "error",
+      }),
+  });
+
+  if (!selectedCompanyId) {
+    return <div className="p-6 text-sm text-muted-foreground">Select a company to manage gateways.</div>;
+  }
+
+  const gateways = gatewaysQuery.data?.gateways ?? [];
+  const term = search.trim().toLowerCase();
+  const filtered = term
+    ? gateways.filter((gateway) => {
+        const scope = formatScope(gateway, projectNames, agentNames).toLowerCase();
+        return (
+          gateway.name.toLowerCase().includes(term) ||
+          gateway.displaySlug.toLowerCase().includes(term) ||
+          scope.includes(term)
+        );
+      })
+    : gateways;
+
+  return (
+    <div className="max-w-5xl space-y-5">
+      <header className="space-y-1">
+        <h1 className="text-2xl font-bold tracking-tight">Apps</h1>
+        <p className="text-sm text-muted-foreground">
+          A gateway is one safe MCP endpoint that exposes only the apps you assign. Hand it to a client
+          like Cursor or Claude Desktop.
+        </p>
+      </header>
+
+      <AppsSubNav active="gateways" />
+
+      {gatewaysQuery.isLoading ? (
+        <div className="space-y-3 pt-2">
+          <Skeleton className="h-9 w-full max-w-sm" />
+          <Skeleton className="h-52 w-full" />
+        </div>
+      ) : gatewaysQuery.isError ? (
+        <ErrorState error={gatewaysQuery.error} onRetry={() => gatewaysQuery.refetch()} />
+      ) : gateways.length === 0 ? (
+        <EmptyGateways onCreate={() => setCreating(true)} />
+      ) : (
+        <div className="space-y-4 pt-1">
+          <div className="flex flex-wrap items-center justify-between gap-3">
+            <div className="relative w-full max-w-sm">
+              <Search className="pointer-events-none absolute left-3 top-1/2 h-4 w-4 -translate-y-1/2 text-muted-foreground" />
+              <Input
+                value={search}
+                onChange={(event) => setSearch(event.target.value)}
+                placeholder="Search by name, app, or owner"
+                className="pl-9"
+                aria-label="Search gateways"
+              />
+            </div>
+            <Button onClick={() => setCreating(true)}>
+              <Plus className="mr-1.5 h-4 w-4" />
+              New gateway
+            </Button>
+          </div>
+
+          {(() => {
+            const rows = filtered.map((gateway) => {
+              const profile = profileById.get(gateway.profileId);
+              const apps = deriveGatewayApps(
+                profile,
+                applicationsQuery.data?.applications ?? [],
+                connectionsQuery.data?.connections ?? [],
+              );
+              return {
+                gateway,
+                profile,
+                scope: formatScope(gateway, projectNames, agentNames),
+                appsLabel: `${apps.length} ${apps.length === 1 ? "app" : "apps"}${
+                  profile ? ` · ${allowedToolsLabel(profile)}` : ""
+                }`,
+                active: activeTokenCount(gateway),
+                expiring: expiringTokenCount(gateway),
+                lastUsed: latestTokenActivity(gateway),
+                href: gatewayTabHref(gateway.id, "overview"),
+              };
+            });
+            const toggle = (gateway: ToolMcpGatewayWithTokens) => (
+              <ToggleSwitch
+                checked={isGatewayOn(gateway)}
+                disabled={toggleMutation.isPending}
+                onClick={(event) => event.stopPropagation()}
+                onCheckedChange={() => toggleMutation.mutate({ gateway })}
+                aria-label={`Turn ${gateway.name} ${isGatewayOn(gateway) ? "off" : "on"}`}
+              />
+            );
+            const empty = (
+              <div className="px-4 py-8 text-center text-sm text-muted-foreground">
+                No gateways match “{search.trim()}”.
+              </div>
+            );
+            return (
+              <>
+                {/* Desktop / tablet: full table. */}
+                <div className="hidden overflow-x-auto rounded-lg border border-border sm:block">
+                  <table className="w-full min-w-(--sz-40rem) text-sm">
+                    <thead>
+                      <tr className="border-b border-border bg-muted/40 text-left text-(length:--text-micro) font-semibold uppercase tracking-wide text-muted-foreground">
+                        <th className="px-4 py-2.5">Gateway</th>
+                        <th className="px-4 py-2.5">Scope</th>
+                        <th className="px-4 py-2.5">Apps</th>
+                        <th className="px-4 py-2.5">Tokens</th>
+                        <th className="px-4 py-2.5">Last used</th>
+                        <th className="px-4 py-2.5 text-right">On</th>
+                      </tr>
+                    </thead>
+                    <tbody>
+                      {rows.map(({ gateway, scope, appsLabel, active, expiring, lastUsed, href }) => (
+                        <tr
+                          key={gateway.id}
+                          onClick={() => navigate(href)}
+                          className="cursor-pointer border-b border-border transition-colors last:border-0 hover:bg-muted/30"
+                        >
+                          <td className="px-4 py-3">
+                            <div className="font-medium text-foreground">{gateway.name}</div>
+                            <div className="truncate font-mono text-xs text-muted-foreground">
+                              {endpointHost(gateway.endpointPath, gateway.displaySlug)}
+                            </div>
+                          </td>
+                          <td className="px-4 py-3 text-muted-foreground">{scope}</td>
+                          <td className="px-4 py-3 text-muted-foreground">{appsLabel}</td>
+                          <td className="px-4 py-3 text-muted-foreground">
+                            {active} active{expiring > 0 ? ` · ${expiring} expiring` : ""}
+                          </td>
+                          <td className="px-4 py-3 text-muted-foreground">
+                            {lastUsed ? <RelativeTime value={lastUsed} /> : "—"}
+                          </td>
+                          <td className="px-4 py-3">
+                            <div className="flex justify-end">{toggle(gateway)}</div>
+                          </td>
+                        </tr>
+                      ))}
+                      {rows.length === 0 ? (
+                        <tr>
+                          <td colSpan={6}>{empty}</td>
+                        </tr>
+                      ) : null}
+                    </tbody>
+                  </table>
+                </div>
+
+                {/* Mobile: stacked cards so the On toggle stays reachable and thumb-sized. */}
+                <div className="space-y-3 sm:hidden">
+                  {rows.map(({ gateway, scope, appsLabel, active, expiring, lastUsed, href }) => (
+                    <div
+                      key={gateway.id}
+                      onClick={() => navigate(href)}
+                      className="cursor-pointer rounded-lg border border-border p-4 transition-colors hover:bg-muted/30"
+                    >
+                      <div className="flex items-start justify-between gap-3">
+                        <div className="min-w-0">
+                          <div className="font-medium text-foreground">{gateway.name}</div>
+                          <div className="truncate font-mono text-xs text-muted-foreground">
+                            {endpointHost(gateway.endpointPath, gateway.displaySlug)}
+                          </div>
+                        </div>
+                        <div className="shrink-0">{toggle(gateway)}</div>
+                      </div>
+                      <dl className="mt-3 grid grid-cols-2 gap-x-4 gap-y-2 text-sm">
+                        <MobileField label="Scope" value={scope} />
+                        <MobileField label="Apps" value={appsLabel} />
+                        <MobileField
+                          label="Tokens"
+                          value={`${active} active${expiring > 0 ? ` · ${expiring} expiring` : ""}`}
+                        />
+                        <MobileField
+                          label="Last used"
+                          value={lastUsed ? <RelativeTime value={lastUsed} /> : "—"}
+                        />
+                      </dl>
+                    </div>
+                  ))}
+                  {rows.length === 0 ? (
+                    <div className="rounded-lg border border-border">{empty}</div>
+                  ) : null}
+                </div>
+              </>
+            );
+          })()}
+
+          <div className="rounded-lg border border-border bg-muted/30 px-4 py-3">
+            <div className="text-sm font-semibold text-foreground">Why a gateway?</div>
+            <p className="mt-1 text-sm text-muted-foreground">
+              You pick which apps go through it, who can use it, and how. Revoke the token, the whole
+              gateway goes silent — no app-by-app cleanup.
+            </p>
+          </div>
+        </div>
+      )}
+
+      <NewGatewayDialog
+        companyId={selectedCompanyId}
+        open={creating}
+        onOpenChange={setCreating}
+        onCreated={(gatewayId) => navigate(gatewayTabHref(gatewayId, "overview"))}
+      />
+    </div>
+  );
+}
+
+/** Show `mcp.host/g/<slug>` when the endpoint is absolute, else the raw path. */
+function endpointHost(endpointPath: string, slug: string): string {
+  if (typeof window !== "undefined") {
+    try {
+      const host = new URL(window.location.origin).host;
+      return `${host}${endpointPath}`;
+    } catch {
+      /* fall through */
+    }
+  }
+  return endpointPath || `/g/${slug}`;
+}
+
+/** One label:value pair inside a mobile stacked card. */
+function MobileField({ label, value }: { label: string; value: ReactNode }) {
+  return (
+    <div className="min-w-0">
+      <dt className="text-(length:--text-micro) font-semibold uppercase tracking-wide text-muted-foreground">{label}</dt>
+      <dd className="mt-0.5 truncate text-foreground">{value}</dd>
+    </div>
+  );
+}
+
+function EmptyGateways({ onCreate }: { onCreate: () => void }) {
+  return (
+    <div className="rounded-2xl border border-dashed border-border p-12 text-center">
+      <h2 className="text-lg font-semibold text-foreground">No gateways yet</h2>
+      <p className="mx-auto mt-2 max-w-sm text-sm text-muted-foreground">
+        Group your connected apps into one safe endpoint you can hand to a client, then revoke it in one
+        move.
+      </p>
+      <Button className="mt-5" onClick={onCreate}>
+        <Plus className="mr-1.5 h-4 w-4" />
+        New gateway
+      </Button>
+    </div>
+  );
+}
diff --git a/ui/src/pages/apps/gateways/NewGatewayDialog.tsx b/ui/src/pages/apps/gateways/NewGatewayDialog.tsx
new file mode 100644
index 00000000000..6d630bbcb5b
--- /dev/null
+++ b/ui/src/pages/apps/gateways/NewGatewayDialog.tsx
@@ -0,0 +1,163 @@
+import { type FormEvent, useEffect, useState } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import type { ToolMcpGatewayContextScopeType, ToolProfileWithDetails } from "@paperclipai/shared";
+import { toolsApi } from "@/api/tools";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from "@/components/ui/dialog";
+import { useToast } from "@/context/ToastContext";
+import { queryKeys } from "@/lib/queryKeys";
+import { allowedToolsLabel } from "./gateway-helpers";
+
+export const gatewaysQueryKey = (companyId: string) => ["tools", "gateways", companyId] as const;
+
+/**
+ * "New gateway" dialog. A gateway is one safe MCP endpoint that exposes only
+ * the tools in its access profile. Matches the prosumer create flow from the
+ * PAP-11178 design of record.
+ */
+export function NewGatewayDialog({
+  companyId,
+  open,
+  onOpenChange,
+  onCreated,
+}: {
+  companyId: string;
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  onCreated?: (gatewayId: string) => void;
+}) {
+  const queryClient = useQueryClient();
+  const { pushToast } = useToast();
+  const [name, setName] = useState("");
+  const [description, setDescription] = useState("");
+  const [profileId, setProfileId] = useState("");
+
+  const profilesQuery = useQuery({
+    queryKey: queryKeys.tools.profiles(companyId),
+    queryFn: () => toolsApi.listProfiles(companyId),
+    enabled: open,
+  });
+  const activeProfiles = (profilesQuery.data?.profiles ?? []).filter(
+    (profile: ToolProfileWithDetails) => profile.status !== "archived",
+  );
+
+  useEffect(() => {
+    if (open && !profileId && activeProfiles[0]) setProfileId(activeProfiles[0].id);
+  }, [open, profileId, activeProfiles]);
+
+  const createMutation = useMutation({
+    mutationFn: () =>
+      toolsApi.createGateway(companyId, {
+        name: name.trim(),
+        description: description.trim() || null,
+        profileId,
+        defaultProfileMode: "gateway_only",
+        contextScopeType: "company" satisfies ToolMcpGatewayContextScopeType,
+      }),
+    onSuccess: async (gateway) => {
+      pushToast({ title: "Gateway created", body: gateway.name, tone: "success" });
+      await queryClient.invalidateQueries({ queryKey: gatewaysQueryKey(companyId) });
+      setName("");
+      setDescription("");
+      onOpenChange(false);
+      onCreated?.(gateway.id);
+    },
+    onError: (error) => {
+      pushToast({
+        title: "Gateway was not created",
+        body: error instanceof Error ? error.message : String(error),
+        tone: "error",
+      });
+    },
+  });
+
+  function submit(event: FormEvent<HTMLFormElement>) {
+    event.preventDefault();
+    if (!name.trim() || !profileId) return;
+    createMutation.mutate();
+  }
+
+  const profilesLoading = profilesQuery.isLoading;
+  const noProfiles = !profilesLoading && activeProfiles.length === 0;
+
+  return (
+    <Dialog open={open} onOpenChange={onOpenChange}>
+      <DialogContent className="sm:max-w-lg">
+        <DialogHeader>
+          <DialogTitle>New gateway</DialogTitle>
+          <DialogDescription>
+            One safe MCP endpoint that exposes only the apps in its access profile. Hand it to a client
+            like Cursor or Claude Desktop.
+          </DialogDescription>
+        </DialogHeader>
+        <form className="space-y-4" onSubmit={submit}>
+          <label className="block space-y-1.5">
+            <span className="text-xs font-medium text-muted-foreground">Name</span>
+            <Input
+              value={name}
+              onChange={(event) => setName(event.target.value)}
+              placeholder="CTO agents"
+              required
+              autoFocus
+            />
+          </label>
+          <label className="block space-y-1.5">
+            <span className="text-xs font-medium text-muted-foreground">Access profile</span>
+            <select
+              className="w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
+              value={profileId}
+              onChange={(event) => setProfileId(event.target.value)}
+              required
+              disabled={noProfiles}
+            >
+              <option value="" disabled>
+                {profilesLoading ? "Loading profiles…" : "Choose a profile"}
+              </option>
+              {activeProfiles.map((profile) => (
+                <option key={profile.id} value={profile.id}>
+                  {profile.name} — {allowedToolsLabel(profile)}
+                </option>
+              ))}
+            </select>
+            <span className="text-xs text-muted-foreground">
+              The profile decides which tools this gateway allows. You can change it later.
+            </span>
+          </label>
+          <label className="block space-y-1.5">
+            <span className="text-xs font-medium text-muted-foreground">Description (optional)</span>
+            <textarea
+              className="min-h-16 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
+              value={description}
+              onChange={(event) => setDescription(event.target.value)}
+              placeholder="Who this endpoint is for and when it should be rotated."
+            />
+          </label>
+          {noProfiles ? (
+            <p className="text-xs text-destructive">
+              Create an access profile under Advanced before adding a gateway.
+            </p>
+          ) : null}
+          <DialogFooter>
+            <Button type="button" variant="ghost" onClick={() => onOpenChange(false)}>
+              Cancel
+            </Button>
+            <Button
+              type="submit"
+              disabled={createMutation.isPending || noProfiles || !name.trim() || !profileId}
+            >
+              {createMutation.isPending ? "Creating…" : "Create gateway"}
+            </Button>
+          </DialogFooter>
+        </form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/ui/src/pages/apps/gateways/gateway-helpers.test.ts b/ui/src/pages/apps/gateways/gateway-helpers.test.ts
new file mode 100644
index 00000000000..d7578297b5e
--- /dev/null
+++ b/ui/src/pages/apps/gateways/gateway-helpers.test.ts
@@ -0,0 +1,215 @@
+import type {
+  ToolApplication,
+  ToolConnection,
+  ToolMcpGatewayClientSnippet,
+  ToolMcpGatewayToken,
+  ToolMcpGatewayWithTokens,
+  ToolProfileWithDetails,
+} from "@paperclipai/shared";
+import { describe, expect, it } from "vitest";
+import {
+  activeTokenCount,
+  deriveGatewayApps,
+  expiringTokenCount,
+  formatScope,
+  isGatewayOn,
+  maskedTokenLabel,
+  orderedSnippets,
+  tokenStatus,
+} from "./gateway-helpers";
+
+const NOW = new Date("2026-06-16T12:00:00.000Z").getTime();
+
+function token(overrides: Partial<ToolMcpGatewayToken> = {}): ToolMcpGatewayToken {
+  return {
+    id: "t",
+    companyId: "c",
+    gatewayId: "g",
+    name: "tok",
+    tokenPrefix: "pcgw_abc",
+    subjectType: "gateway_client",
+    subjectId: null,
+    clientLabel: "Cursor",
+    ownerNote: "",
+    allowedActions: ["tools/list", "tools/call"],
+    expiresAt: null,
+    expiryOverrideReason: null,
+    expiryOverrideByUserId: null,
+    expiryOverrideByAgentId: null,
+    expiryOverrideAt: null,
+    lastUsedAt: null,
+    revokedAt: null,
+    createdByAgentId: null,
+    createdByUserId: "u",
+    createdAt: "2026-06-01T00:00:00.000Z",
+    updatedAt: "2026-06-01T00:00:00.000Z",
+    ...overrides,
+  };
+}
+
+function gateway(overrides: Partial<ToolMcpGatewayWithTokens> = {}): ToolMcpGatewayWithTokens {
+  return {
+    id: "gateway-1",
+    companyId: "c",
+    gatewayPublicId: "gw",
+    name: "CTO agents",
+    displaySlug: "cto-agents",
+    slug: "cto-agents",
+    description: null,
+    status: "active",
+    profileId: "profile-1",
+    defaultProfileMode: "gateway_only",
+    contextScopeType: "none",
+    contextScopeId: null,
+    agentId: null,
+    projectId: null,
+    issueId: null,
+    approvalIssueId: null,
+    endpointPath: "/g/cto-agents/mcp",
+    authConfig: {} as ToolMcpGatewayWithTokens["authConfig"],
+    headerPolicy: {} as ToolMcpGatewayWithTokens["headerPolicy"],
+    metadataPolicy: {} as ToolMcpGatewayWithTokens["metadataPolicy"],
+    onDemandToolsConfig: {} as ToolMcpGatewayWithTokens["onDemandToolsConfig"],
+    metadata: null,
+    createdByAgentId: null,
+    createdByUserId: "u",
+    archivedAt: null,
+    createdAt: new Date(),
+    updatedAt: new Date(),
+    tokens: [],
+    clientSnippets: [],
+    ...overrides,
+  };
+}
+
+describe("tokenStatus", () => {
+  it("classifies revoked, expired, expiring, and active", () => {
+    expect(tokenStatus(token({ revokedAt: "2026-06-10T00:00:00.000Z" }), NOW)).toBe("revoked");
+    expect(tokenStatus(token({ expiresAt: "2026-06-01T00:00:00.000Z" }), NOW)).toBe("expired");
+    expect(tokenStatus(token({ expiresAt: "2026-06-20T00:00:00.000Z" }), NOW)).toBe("expiring");
+    expect(tokenStatus(token({ expiresAt: "2026-12-01T00:00:00.000Z" }), NOW)).toBe("active");
+    expect(tokenStatus(token({ expiresAt: null }), NOW)).toBe("active");
+  });
+});
+
+describe("token counts", () => {
+  it("counts active (incl. expiring) but not revoked/expired", () => {
+    const g = gateway({
+      tokens: [
+        token({ id: "a", expiresAt: "2026-12-01T00:00:00.000Z" }),
+        token({ id: "b", expiresAt: "2026-06-20T00:00:00.000Z" }),
+        token({ id: "c", revokedAt: "2026-06-10T00:00:00.000Z" }),
+        token({ id: "d", expiresAt: "2026-06-01T00:00:00.000Z" }),
+      ],
+    });
+    expect(activeTokenCount(g, NOW)).toBe(2);
+    expect(expiringTokenCount(g, NOW)).toBe(1);
+  });
+});
+
+describe("maskedTokenLabel", () => {
+  it("never reveals the full value — only prefix plus dots", () => {
+    expect(maskedTokenLabel({ tokenPrefix: "pcgw_live_8x4Pa" })).toBe("pcgw_live_8x4Pa•••");
+  });
+});
+
+describe("isGatewayOn", () => {
+  it("is on only when status is active", () => {
+    expect(isGatewayOn(gateway({ status: "active" }))).toBe(true);
+    expect(isGatewayOn(gateway({ status: "disabled" }))).toBe(false);
+  });
+});
+
+describe("formatScope", () => {
+  it("labels company, project, and agent scopes", () => {
+    expect(formatScope(gateway(), new Map(), new Map())).toBe("Company");
+    expect(
+      formatScope(
+        gateway({ contextScopeType: "project", contextScopeId: "p1" }),
+        new Map([["p1", "Support"]]),
+        new Map(),
+      ),
+    ).toBe("Project · Support");
+  });
+});
+
+describe("orderedSnippets", () => {
+  it("orders clients cursor → claude_desktop → vscode → claude_code → opencode", () => {
+    const snippets: ToolMcpGatewayClientSnippet[] = [
+      { client: "opencode", label: "OpenCode", config: {}, notes: [] },
+      { client: "cursor", label: "Cursor", config: {}, notes: [] },
+      { client: "vscode", label: "VS Code", config: {}, notes: [] },
+    ];
+    expect(orderedSnippets(snippets).map((s) => s.client)).toEqual(["cursor", "vscode", "opencode"]);
+  });
+});
+
+describe("deriveGatewayApps", () => {
+  const profile: ToolProfileWithDetails = {
+    id: "profile-1",
+    companyId: "c",
+    profileKey: "eng",
+    name: "Engineering",
+    description: null,
+    status: "active",
+    defaultAction: "deny",
+    newToolsReviewedAt: null,
+    metadata: null,
+    createdAt: new Date(),
+    updatedAt: new Date(),
+    bindings: [],
+    summary: {
+      accessMode: "selected",
+      allowedToolCount: 3,
+      allowedApplicationCount: 2,
+      excludedToolCount: 0,
+      totalToolCount: 3,
+      assignmentCount: 0,
+      appliesToAgentCount: 0,
+      isCompanyDefault: false,
+    },
+    entries: [
+      { effect: "include", applicationId: "app-gh", catalogEntryId: "ce-1" },
+      { effect: "include", applicationId: "app-gh", catalogEntryId: "ce-2" },
+      { effect: "include", connectionId: "conn-sheets", catalogEntryId: "ce-3" },
+      { effect: "exclude", applicationId: "app-linear", catalogEntryId: "ce-4" },
+    ] as unknown as ToolProfileWithDetails["entries"],
+  };
+
+  const applications = [
+    { id: "app-gh", name: "GitHub", status: "active" },
+    { id: "app-sheets", name: "Sheets", status: "active" },
+  ] as unknown as ToolApplication[];
+
+  const connections = [
+    { id: "conn-gh", applicationId: "app-gh", name: "GitHub", healthStatus: "healthy" },
+    { id: "conn-sheets", applicationId: "app-sheets", name: "Sheets", healthStatus: "missing_secret" },
+  ] as unknown as ToolConnection[];
+
+  it("lists included apps with tool counts and surfaces attention health", () => {
+    const rows = deriveGatewayApps(profile, applications, connections);
+    expect(rows.map((r) => r.application.id)).toEqual(["app-gh", "app-sheets"]);
+    const gh = rows.find((r) => r.application.id === "app-gh")!;
+    expect(gh.toolCount).toBe(2);
+    expect(gh.needsAttention).toBe(false);
+    const sheets = rows.find((r) => r.application.id === "app-sheets")!;
+    expect(sheets.toolCount).toBe(1);
+    expect(sheets.needsAttention).toBe(true);
+  });
+
+  it("prefers a live connection over an archived connection", () => {
+    const rows = deriveGatewayApps(profile, applications, [
+      { ...connections[0], id: "conn-gh-archived", status: "archived" },
+      { ...connections[0], id: "conn-gh-active", status: "active" },
+      connections[1],
+    ] as ToolConnection[]);
+
+    expect(rows.find((row) => row.application.id === "app-gh")?.connection?.id).toBe(
+      "conn-gh-active",
+    );
+  });
+
+  it("returns nothing without a profile", () => {
+    expect(deriveGatewayApps(undefined, applications, connections)).toEqual([]);
+  });
+});
diff --git a/ui/src/pages/apps/gateways/gateway-helpers.ts b/ui/src/pages/apps/gateways/gateway-helpers.ts
new file mode 100644
index 00000000000..9c00a440d32
--- /dev/null
+++ b/ui/src/pages/apps/gateways/gateway-helpers.ts
@@ -0,0 +1,209 @@
+import type {
+  ToolApplication,
+  ToolConnection,
+  ToolMcpGatewayClientSnippet,
+  ToolMcpGatewayToken,
+  ToolMcpGatewayWithTokens,
+  ToolProfileWithDetails,
+} from "@paperclipai/shared";
+import { humanizeConnectionDisplayName, isToolConnectionAttentionHealth } from "@paperclipai/shared";
+
+/** Days before expiry at which we surface a token as "Expiring". */
+export const TOKEN_EXPIRING_WINDOW_DAYS = 14;
+
+export type TokenStatus = "active" | "expiring" | "expired" | "revoked";
+
+export function toDate(value: Date | string | null | undefined): Date | null {
+  if (!value) return null;
+  const date = value instanceof Date ? value : new Date(value);
+  return Number.isNaN(date.getTime()) ? null : date;
+}
+
+/** Reveal-once, then masked. We never persist the full token in the DOM. */
+export function maskedTokenLabel(token: Pick<ToolMcpGatewayToken, "tokenPrefix">): string {
+  return `${token.tokenPrefix}•••`;
+}
+
+export function tokenStatus(
+  token: Pick<ToolMcpGatewayToken, "revokedAt" | "expiresAt">,
+  now: number = Date.now(),
+): TokenStatus {
+  if (token.revokedAt) return "revoked";
+  const expires = toDate(token.expiresAt);
+  if (!expires) return "active";
+  const diffMs = expires.getTime() - now;
+  if (diffMs <= 0) return "expired";
+  if (diffMs <= TOKEN_EXPIRING_WINDOW_DAYS * 24 * 60 * 60 * 1000) return "expiring";
+  return "active";
+}
+
+export const TOKEN_STATUS_LABEL: Record<TokenStatus, string> = {
+  active: "Active",
+  expiring: "Expiring",
+  expired: "Expired",
+  revoked: "Revoked",
+};
+
+/** Count of tokens that can currently authenticate (not revoked, not expired). */
+export function activeTokenCount(gateway: ToolMcpGatewayWithTokens, now: number = Date.now()): number {
+  return gateway.tokens.filter((token) => {
+    const status = tokenStatus(token, now);
+    return status === "active" || status === "expiring";
+  }).length;
+}
+
+export function expiringTokenCount(gateway: ToolMcpGatewayWithTokens, now: number = Date.now()): number {
+  return gateway.tokens.filter((token) => tokenStatus(token, now) === "expiring").length;
+}
+
+export function latestTokenActivity(gateway: ToolMcpGatewayWithTokens): Date | null {
+  return gateway.tokens.reduce<Date | null>((latest, token) => {
+    const candidate = toDate(token.lastUsedAt);
+    if (!candidate) return latest;
+    return !latest || candidate.getTime() > latest.getTime() ? candidate : latest;
+  }, null);
+}
+
+function shortId(value: string | null | undefined): string | null {
+  if (!value) return null;
+  return value.length > 12 ? `${value.slice(0, 8)}…` : value;
+}
+
+/** Prosumer "Scope" label — Company / Project · X / Agent · X. */
+export function formatScope(
+  gateway: ToolMcpGatewayWithTokens,
+  projectNames: Map<string, string>,
+  agentNames: Map<string, string>,
+): string {
+  if (gateway.contextScopeType !== "none" && gateway.contextScopeId) {
+    if (gateway.contextScopeType === "project") {
+      return `Project · ${projectNames.get(gateway.contextScopeId) ?? shortId(gateway.contextScopeId)}`;
+    }
+    if (gateway.contextScopeType === "agent") {
+      return `Agent · ${agentNames.get(gateway.contextScopeId) ?? shortId(gateway.contextScopeId)}`;
+    }
+    return `${gateway.contextScopeType} · ${shortId(gateway.contextScopeId)}`;
+  }
+  if (gateway.projectId) return `Project · ${projectNames.get(gateway.projectId) ?? shortId(gateway.projectId)}`;
+  if (gateway.agentId) return `Agent · ${agentNames.get(gateway.agentId) ?? shortId(gateway.agentId)}`;
+  return "Company";
+}
+
+export function formatOwner(gateway: ToolMcpGatewayWithTokens, agentNames: Map<string, string>): string {
+  if (gateway.createdByAgentId) {
+    return agentNames.get(gateway.createdByAgentId) ?? `Agent ${shortId(gateway.createdByAgentId)}`;
+  }
+  return "Board";
+}
+
+/** Whether the gateway is exposing tools to clients right now. */
+export function isGatewayOn(gateway: ToolMcpGatewayWithTokens): boolean {
+  return gateway.status === "active";
+}
+
+/** Human summary of how many tools a profile allows. */
+export function allowedToolsLabel(profile: ToolProfileWithDetails | undefined): string {
+  if (!profile) return "Profile unavailable";
+  const { accessMode, allowedToolCount, totalToolCount, excludedToolCount } = profile.summary;
+  const count =
+    accessMode === "all_except"
+      ? Math.max(totalToolCount - excludedToolCount, 0)
+      : allowedToolCount;
+  if (count === 0) return "No tools allowed";
+  return `${count} ${count === 1 ? "tool" : "tools"}`;
+}
+
+export type GatewayAppRow = {
+  application: ToolApplication;
+  connection: ToolConnection | null;
+  toolCount: number;
+  needsAttention: boolean;
+  attentionReason: string | null;
+};
+
+/**
+ * Derive the "Apps in this gateway" list from the bound profile's include
+ * entries, joined to the company's applications and connections. Missing
+ * credentials / unreachable servers surface through the connection health
+ * status, mirroring the connection-level "Needs attention" contract — the
+ * gateway does not own a separate credential store.
+ */
+export function deriveGatewayApps(
+  profile: ToolProfileWithDetails | undefined,
+  applications: ToolApplication[],
+  connections: ToolConnection[],
+): GatewayAppRow[] {
+  if (!profile) return [];
+  const applicationsById = new Map(applications.map((app) => [app.id, app]));
+  const connectionsById = new Map(connections.map((conn) => [conn.id, conn]));
+  const connectionsByApplication = new Map<string, ToolConnection[]>();
+  for (const conn of connections) {
+    connectionsByApplication.set(conn.applicationId, [
+      ...(connectionsByApplication.get(conn.applicationId) ?? []),
+      conn,
+    ]);
+  }
+
+  const toolCountByApp = new Map<string, number>();
+  const includedApplicationIds = new Set<string>();
+  for (const entry of profile.entries ?? []) {
+    if (entry.effect !== "include") continue;
+    let applicationId = entry.applicationId ?? null;
+    if (!applicationId && entry.connectionId) {
+      applicationId = connectionsById.get(entry.connectionId)?.applicationId ?? null;
+    }
+    if (!applicationId) continue;
+    includedApplicationIds.add(applicationId);
+    if (entry.catalogEntryId || entry.toolName) {
+      toolCountByApp.set(applicationId, (toolCountByApp.get(applicationId) ?? 0) + 1);
+    }
+  }
+
+  const rows: GatewayAppRow[] = [];
+  for (const applicationId of includedApplicationIds) {
+    const application = applicationsById.get(applicationId);
+    if (!application || application.status === "archived") continue;
+    const appConnections = connectionsByApplication.get(applicationId) ?? [];
+    const connection =
+      appConnections.find((conn) => conn.status !== "archived") ?? appConnections[0] ?? null;
+    const attentionConnection = appConnections.find((conn) =>
+      isToolConnectionAttentionHealth(conn.healthStatus),
+    );
+    rows.push({
+      application,
+      connection,
+      toolCount: toolCountByApp.get(applicationId) ?? 0,
+      needsAttention: Boolean(attentionConnection),
+      attentionReason: attentionConnection
+        ? "Sign-in expired — reconnect to restore access."
+        : null,
+    });
+  }
+  return rows.sort((a, b) => a.application.name.localeCompare(b.application.name));
+}
+
+export function gatewayAppDisplayName(row: GatewayAppRow): string {
+  return row.connection
+    ? humanizeConnectionDisplayName(row.connection)
+    : humanizeConnectionDisplayName(row.application.name);
+}
+
+const SNIPPET_CLIENT_ORDER: ToolMcpGatewayClientSnippet["client"][] = [
+  "cursor",
+  "claude_desktop",
+  "vscode",
+  "claude_code",
+  "opencode",
+];
+
+export function orderedSnippets(
+  snippets: ToolMcpGatewayClientSnippet[],
+): ToolMcpGatewayClientSnippet[] {
+  return [...snippets].sort(
+    (a, b) => SNIPPET_CLIENT_ORDER.indexOf(a.client) - SNIPPET_CLIENT_ORDER.indexOf(b.client),
+  );
+}
+
+export function formatSnippetConfig(config: Record<string, unknown>): string {
+  return JSON.stringify(config, null, 2);
+}
diff --git a/ui/src/pages/apps/gateways/gateway-tabs.ts b/ui/src/pages/apps/gateways/gateway-tabs.ts
new file mode 100644
index 00000000000..7fd5607f5cf
--- /dev/null
+++ b/ui/src/pages/apps/gateways/gateway-tabs.ts
@@ -0,0 +1,28 @@
+import { Activity, LayoutGrid, KeyRound, Wrench, Boxes } from "lucide-react";
+
+/**
+ * Gateway detail tabs (PAP-11200). Terminology is locked by the approved
+ * PAP-11178 design of record: Overview · Apps & tools · Tokens · Activity ·
+ * Advanced. Raw protocol / JSON / transport details live under Advanced.
+ */
+export const GATEWAY_TABS = [
+  { key: "overview", label: "Overview", icon: LayoutGrid },
+  { key: "apps", label: "Apps & tools", icon: Boxes },
+  { key: "tokens", label: "Tokens", icon: KeyRound },
+  { key: "activity", label: "Activity", icon: Activity },
+  { key: "advanced", label: "Advanced", icon: Wrench },
+] as const;
+
+export type GatewayTabKey = (typeof GATEWAY_TABS)[number]["key"];
+
+export function gatewayTabHref(gatewayId: string, tab: GatewayTabKey): string {
+  return `/apps/gateways/${gatewayId}/${tab}`;
+}
+
+export function isGatewayTabKey(value: string | undefined): value is GatewayTabKey {
+  return GATEWAY_TABS.some((tab) => tab.key === value);
+}
+
+export function gatewayTabLabel(tabKey: GatewayTabKey): string {
+  return GATEWAY_TABS.find((tab) => tab.key === tabKey)?.label ?? "Overview";
+}
diff --git a/ui/src/pages/apps/gateways/panels/AppsToolsPanel.tsx b/ui/src/pages/apps/gateways/panels/AppsToolsPanel.tsx
new file mode 100644
index 00000000000..d64f1c240e9
--- /dev/null
+++ b/ui/src/pages/apps/gateways/panels/AppsToolsPanel.tsx
@@ -0,0 +1,85 @@
+import type { ToolProfileWithDetails } from "@paperclipai/shared";
+import { Link } from "@/lib/router";
+import { cn } from "@/lib/utils";
+import { allowedToolsLabel, type GatewayAppRow, gatewayAppDisplayName } from "../gateway-helpers";
+
+/**
+ * Apps & tools tab — which apps this gateway exposes and how many tools each
+ * contributes, derived from the bound access profile. Missing credentials
+ * surface as "Needs attention", carried from the connection health status.
+ */
+export function AppsToolsPanel({
+  apps,
+  profile,
+}: {
+  apps: GatewayAppRow[];
+  profile: ToolProfileWithDetails | undefined;
+}) {
+  return (
+    <div className="space-y-4">
+      <p className="text-sm text-muted-foreground">
+        These apps go through this gateway. The bound profile
+        {profile ? ` (${profile.name})` : ""} decides which tools are allowed
+        {profile ? ` — ${allowedToolsLabel(profile)}.` : "."} Change the profile under Advanced.
+      </p>
+
+      {apps.length === 0 ? (
+        <div className="rounded-md border border-dashed border-border p-6 text-center text-sm text-muted-foreground">
+          No apps are assigned to this gateway’s profile yet.
+        </div>
+      ) : (
+        <div className="overflow-x-auto rounded-lg border border-border">
+          <table className="w-full min-w-(--sz-32rem) text-sm">
+            <thead>
+              <tr className="border-b border-border bg-muted/40 text-left text-(length:--text-micro) font-semibold uppercase tracking-wide text-muted-foreground">
+                <th className="px-4 py-2.5">App</th>
+                <th className="px-4 py-2.5">Tools</th>
+                <th className="px-4 py-2.5">Status</th>
+                <th className="px-4 py-2.5 text-right" />
+              </tr>
+            </thead>
+            <tbody>
+              {apps.map((app) => {
+                const href = app.connection
+                  ? `/apps/${app.connection.id}/setup`
+                  : `/apps/app/${app.application.id}/setup`;
+                return (
+                  <tr key={app.application.id} className="border-b border-border last:border-0">
+                    <td className="px-4 py-3">
+                      <Link to={href} className="font-medium text-foreground hover:underline">
+                        {gatewayAppDisplayName(app)}
+                      </Link>
+                      {app.needsAttention && app.attentionReason ? (
+                        <div className="text-xs text-muted-foreground">{app.attentionReason}</div>
+                      ) : null}
+                    </td>
+                    <td className="px-4 py-3 text-muted-foreground">
+                      {app.toolCount} {app.toolCount === 1 ? "tool" : "tools"}
+                    </td>
+                    <td className="px-4 py-3">
+                      <span
+                        className={cn(
+                          "inline-flex items-center rounded-full border px-2 py-0.5 text-xs font-medium",
+                          app.needsAttention
+                            ? "border-foreground bg-foreground text-background"
+                            : "border-emerald-500/40 bg-emerald-500/10 text-emerald-700 dark:text-emerald-300",
+                        )}
+                      >
+                        {app.needsAttention ? "Needs attention" : "Healthy"}
+                      </span>
+                    </td>
+                    <td className="px-4 py-3 text-right">
+                      <Link to={href} className="text-xs font-medium text-primary hover:underline">
+                        Open →
+                      </Link>
+                    </td>
+                  </tr>
+                );
+              })}
+            </tbody>
+          </table>
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/ui/src/pages/apps/gateways/panels/GatewayActivityPanel.tsx b/ui/src/pages/apps/gateways/panels/GatewayActivityPanel.tsx
new file mode 100644
index 00000000000..3926c38631d
--- /dev/null
+++ b/ui/src/pages/apps/gateways/panels/GatewayActivityPanel.tsx
@@ -0,0 +1,105 @@
+import { useMemo } from "react";
+import { useQuery } from "@tanstack/react-query";
+import type { ToolMcpGatewayWithTokens } from "@paperclipai/shared";
+import { toolsApi, type ToolAuditOutcome, type ToolGatewayActivityEvent } from "@/api/tools";
+import { Skeleton } from "@/components/ui/skeleton";
+import { ErrorState, RelativeTime } from "@/pages/tools/shared";
+import { cn } from "@/lib/utils";
+
+const OUTCOME_LABEL: Record<ToolAuditOutcome, string> = {
+  allowed: "Allowed",
+  blocked: "Blocked",
+  asked_first: "Ask first",
+  waiting: "Waiting",
+  failed: "Failed",
+  unknown: "—",
+};
+
+const OUTCOME_CLASS: Record<ToolAuditOutcome, string> = {
+  allowed: "border-emerald-500/40 bg-emerald-500/10 text-emerald-700 dark:text-emerald-300",
+  blocked: "border-foreground bg-foreground text-background",
+  asked_first: "border-foreground bg-foreground text-background",
+  waiting: "border-border bg-muted text-muted-foreground",
+  failed: "border-destructive/40 bg-destructive/10 text-destructive",
+  unknown: "border-border bg-muted text-muted-foreground",
+};
+
+function belongsToGateway(event: ToolGatewayActivityEvent, gateway: ToolMcpGatewayWithTokens): boolean {
+  const details = event.details ?? {};
+  return (
+    details.gatewayId === gateway.id ||
+    details.gatewayPublicId === gateway.gatewayPublicId ||
+    details.gatewaySlug === gateway.displaySlug
+  );
+}
+
+export function GatewayActivityPanel({
+  companyId,
+  gateway,
+}: {
+  companyId: string;
+  gateway: ToolMcpGatewayWithTokens;
+}) {
+  const activityQuery = useQuery({
+    queryKey: ["tools", "gateway-activity", companyId, gateway.id],
+    queryFn: () => toolsApi.listActivity(companyId, { window: "7d", limit: 100 }),
+  });
+
+  const events = useMemo(
+    () => (activityQuery.data?.events ?? []).filter((event) => belongsToGateway(event, gateway)),
+    [activityQuery.data, gateway],
+  );
+
+  if (activityQuery.isLoading) {
+    return (
+      <div className="space-y-2">
+        <Skeleton className="h-12 w-full" />
+        <Skeleton className="h-12 w-full" />
+        <Skeleton className="h-12 w-full" />
+      </div>
+    );
+  }
+  if (activityQuery.isError) {
+    return <ErrorState error={activityQuery.error} onRetry={() => activityQuery.refetch()} />;
+  }
+
+  return (
+    <div className="space-y-3">
+      <p className="text-sm text-muted-foreground">
+        Every call through this gateway in the last 7 days, with why it was allowed, blocked, or paused.
+      </p>
+      {events.length === 0 ? (
+        <div className="rounded-md border border-dashed border-border p-6 text-center text-sm text-muted-foreground">
+          No calls have gone through this gateway yet.
+        </div>
+      ) : (
+        <ul className="divide-y divide-border rounded-lg border border-border">
+          {events.map((event) => {
+            const outcome = event.normalizedOutcome;
+            const tool = event.toolDisplayName ?? "tool";
+            const app = event.appDisplayName ?? event.applicationDisplayName ?? "app";
+            const actor = event.agentDisplayName ?? "Client";
+            return (
+              <li key={event.id} className="flex items-center justify-between gap-3 px-4 py-3">
+                <div className="min-w-0">
+                  <div className="text-sm font-medium text-foreground">{actor}</div>
+                  <div className="truncate text-xs text-muted-foreground">
+                    {app} · {tool} · <RelativeTime value={event.createdAt} />
+                  </div>
+                </div>
+                <span
+                  className={cn(
+                    "shrink-0 rounded-full border px-2 py-0.5 text-xs font-medium",
+                    OUTCOME_CLASS[outcome],
+                  )}
+                >
+                  {OUTCOME_LABEL[outcome]}
+                </span>
+              </li>
+            );
+          })}
+        </ul>
+      )}
+    </div>
+  );
+}
diff --git a/ui/src/pages/apps/gateways/panels/GatewayAdvancedPanel.tsx b/ui/src/pages/apps/gateways/panels/GatewayAdvancedPanel.tsx
new file mode 100644
index 00000000000..f421af4967c
--- /dev/null
+++ b/ui/src/pages/apps/gateways/panels/GatewayAdvancedPanel.tsx
@@ -0,0 +1,153 @@
+import { useState } from "react";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { Copy } from "lucide-react";
+import type { ToolMcpGatewayWithTokens } from "@paperclipai/shared";
+import { useNavigate } from "@/lib/router";
+import { toolsApi } from "@/api/tools";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { useToast } from "@/context/ToastContext";
+import { gatewaysQueryKey } from "../NewGatewayDialog";
+
+/**
+ * Advanced tab — raw protocol/transport details, config JSON and the archive
+ * (destructive) action live here, out of the default prosumer view per the
+ * PAP-11174 contract's default-vs-Advanced split.
+ */
+export function GatewayAdvancedPanel({
+  companyId,
+  gateway,
+}: {
+  companyId: string;
+  gateway: ToolMcpGatewayWithTokens;
+}) {
+  const queryClient = useQueryClient();
+  const navigate = useNavigate();
+  const { pushToast } = useToast();
+  const [confirming, setConfirming] = useState(false);
+  const [confirmName, setConfirmName] = useState("");
+
+  const endpoint = `${typeof window !== "undefined" ? window.location.origin : ""}${gateway.endpointPath}`;
+  const rawConfig = JSON.stringify(
+    {
+      gatewayPublicId: gateway.gatewayPublicId,
+      displaySlug: gateway.displaySlug,
+      status: gateway.status,
+      profileId: gateway.profileId,
+      defaultProfileMode: gateway.defaultProfileMode,
+      contextScopeType: gateway.contextScopeType,
+      contextScopeId: gateway.contextScopeId,
+      endpointPath: gateway.endpointPath,
+      authConfig: gateway.authConfig,
+      headerPolicy: gateway.headerPolicy,
+      metadataPolicy: gateway.metadataPolicy,
+      onDemandToolsConfig: gateway.onDemandToolsConfig,
+    },
+    null,
+    2,
+  );
+
+  const archiveMutation = useMutation({
+    mutationFn: () => toolsApi.updateGateway(companyId, gateway.id, { status: "archived" }),
+    onSuccess: async () => {
+      pushToast({ title: "Gateway archived", body: `${gateway.name} is no longer reachable.`, tone: "success" });
+      await queryClient.invalidateQueries({ queryKey: gatewaysQueryKey(companyId) });
+      navigate("/apps/gateways");
+    },
+    onError: (error) =>
+      pushToast({
+        title: "Couldn't archive the gateway",
+        body: error instanceof Error ? error.message : String(error),
+        tone: "error",
+      }),
+  });
+
+  async function copy(value: string, label: string) {
+    try {
+      await navigator.clipboard.writeText(value);
+      pushToast({ title: "Copied", body: label, tone: "success" });
+    } catch {
+      pushToast({ title: "Copy failed", body: "Clipboard access is unavailable.", tone: "error" });
+    }
+  }
+
+  return (
+    <div className="space-y-5">
+      <section className="space-y-2">
+        <h3 className="text-sm font-semibold text-foreground">Transport</h3>
+        <dl className="grid gap-x-6 gap-y-2 text-sm sm:grid-cols-2">
+          <Row label="Transport" value="streamable_http" />
+          <Row label="Authentication" value="bearer" />
+          <Row label="Protocol version" value="2025-03-26" />
+          <Row label="Public ID" value={gateway.gatewayPublicId} mono />
+        </dl>
+        <div className="flex items-center gap-2">
+          <code className="min-w-0 flex-1 truncate rounded-md bg-muted px-3 py-2 font-mono text-xs text-muted-foreground">
+            {endpoint}
+          </code>
+          <Button variant="outline" size="sm" onClick={() => void copy(endpoint, "Endpoint URL")}>
+            <Copy className="mr-1 h-3.5 w-3.5" />
+            Copy
+          </Button>
+        </div>
+      </section>
+
+      <section className="space-y-2">
+        <div className="flex items-center justify-between">
+          <h3 className="text-sm font-semibold text-foreground">Raw configuration</h3>
+          <Button variant="outline" size="sm" onClick={() => void copy(rawConfig, "Gateway config JSON")}>
+            <Copy className="mr-1 h-3.5 w-3.5" />
+            Copy JSON
+          </Button>
+        </div>
+        <pre className="max-h-96 overflow-auto whitespace-pre-wrap break-words rounded-md bg-muted p-3 font-mono text-xs text-muted-foreground">
+          {rawConfig}
+        </pre>
+      </section>
+
+      <section className="space-y-2 rounded-lg border border-destructive/40 p-4">
+        <h3 className="text-sm font-semibold text-destructive">Danger zone</h3>
+        <p className="text-sm text-muted-foreground">
+          Archiving takes the gateway offline for every client. Existing tokens stop working. Type the
+          gateway name to confirm.
+        </p>
+        {confirming ? (
+          <div className="space-y-2">
+            <Input
+              value={confirmName}
+              onChange={(e) => setConfirmName(e.target.value)}
+              placeholder={gateway.name}
+              aria-label="Type the gateway name to confirm archive"
+            />
+            <div className="flex gap-2">
+              <Button
+                variant="destructive"
+                size="sm"
+                disabled={confirmName.trim() !== gateway.name || archiveMutation.isPending}
+                onClick={() => archiveMutation.mutate()}
+              >
+                {archiveMutation.isPending ? "Archiving…" : "Archive gateway"}
+              </Button>
+              <Button variant="ghost" size="sm" onClick={() => { setConfirming(false); setConfirmName(""); }}>
+                Cancel
+              </Button>
+            </div>
+          </div>
+        ) : (
+          <Button variant="outline" size="sm" className="text-destructive" onClick={() => setConfirming(true)}>
+            Archive gateway
+          </Button>
+        )}
+      </section>
+    </div>
+  );
+}
+
+function Row({ label, value, mono }: { label: string; value: string; mono?: boolean }) {
+  return (
+    <div>
+      <dt className="text-xs font-medium text-muted-foreground">{label}</dt>
+      <dd className={mono ? "mt-0.5 font-mono text-foreground" : "mt-0.5 text-foreground"}>{value}</dd>
+    </div>
+  );
+}
diff --git a/ui/src/pages/apps/gateways/panels/OverviewPanel.tsx b/ui/src/pages/apps/gateways/panels/OverviewPanel.tsx
new file mode 100644
index 00000000000..cb940afe280
--- /dev/null
+++ b/ui/src/pages/apps/gateways/panels/OverviewPanel.tsx
@@ -0,0 +1,173 @@
+import { Copy } from "lucide-react";
+import type { ToolMcpGatewayWithTokens, ToolProfileWithDetails } from "@paperclipai/shared";
+import { Link } from "@/lib/router";
+import { Button } from "@/components/ui/button";
+import { ToggleSwitch } from "@/components/ui/toggle-switch";
+import { useToast } from "@/context/ToastContext";
+import { cn } from "@/lib/utils";
+import {
+  activeTokenCount,
+  allowedToolsLabel,
+  expiringTokenCount,
+  formatScope,
+  type GatewayAppRow,
+  gatewayAppDisplayName,
+  isGatewayOn,
+} from "../gateway-helpers";
+
+export function OverviewPanel({
+  gateway,
+  profile,
+  apps,
+  agentNames,
+  projectNames,
+  toggleDisabled,
+  onToggle,
+}: {
+  gateway: ToolMcpGatewayWithTokens;
+  profile: ToolProfileWithDetails | undefined;
+  apps: GatewayAppRow[];
+  agentNames: Map<string, string>;
+  projectNames: Map<string, string>;
+  toggleDisabled: boolean;
+  onToggle: () => void;
+}) {
+  const { pushToast } = useToast();
+  const endpoint = `${typeof window !== "undefined" ? window.location.origin : ""}${gateway.endpointPath}`;
+  const active = activeTokenCount(gateway);
+  const expiring = expiringTokenCount(gateway);
+  const needsAttention = apps.filter((app) => app.needsAttention);
+  const on = isGatewayOn(gateway);
+
+  const snippet = [
+    "{",
+    '  "mcpServers": {',
+    `    "paperclip-${gateway.displaySlug}": {`,
+    `      "url": "${endpoint}",`,
+    '      "headers": { "Authorization": "Bearer pcgw_•••_TOKEN" }',
+    "    }",
+    "  }",
+    "}",
+  ].join("\n");
+
+  async function copy(value: string, label: string) {
+    try {
+      await navigator.clipboard.writeText(value);
+      pushToast({ title: "Copied", body: label, tone: "success" });
+    } catch {
+      pushToast({ title: "Copy failed", body: "Clipboard access is unavailable.", tone: "error" });
+    }
+  }
+
+  return (
+    <div className="space-y-5">
+      <div className="grid gap-3 sm:grid-cols-2 lg:grid-cols-4">
+        <div className="rounded-lg border border-border p-4">
+          <div className="text-xs font-medium text-muted-foreground">{on ? "On" : "Off"}</div>
+          <div className="mt-2">
+            <ToggleSwitch checked={on} disabled={toggleDisabled} onCheckedChange={onToggle} aria-label="Toggle gateway" />
+          </div>
+          <p className="mt-2 text-xs text-muted-foreground">Toggle the whole gateway off here.</p>
+        </div>
+        <StatCard label="Apps">
+          {apps.length} {apps.length === 1 ? "app" : "apps"}
+          {profile ? ` · ${allowedToolsLabel(profile)}` : ""}
+        </StatCard>
+        <StatCard label="Tokens">
+          {active} active{expiring > 0 ? ` · ${expiring} expiring` : ""}
+        </StatCard>
+        <StatCard label="Health">
+          {needsAttention.length === 0 ? "All green" : `${needsAttention.length} needs attention`}
+        </StatCard>
+      </div>
+
+      <section className="rounded-lg border border-border p-4">
+        <div className="flex flex-wrap items-start justify-between gap-2">
+          <div>
+            <h3 className="text-sm font-semibold text-foreground">Who can use it</h3>
+            <p className="mt-1 text-sm text-muted-foreground">
+              Anyone holding an active token below, restricted by the rules in the bound profile.
+            </p>
+          </div>
+        </div>
+        <div className="mt-3 flex flex-wrap gap-2">
+          <Chip>Scope · {formatScope(gateway, projectNames, agentNames)}</Chip>
+          <Chip>Profile · {profile?.name ?? "Unavailable"}</Chip>
+          <Chip>{active} active {active === 1 ? "token" : "tokens"}</Chip>
+        </div>
+      </section>
+
+      <section className="rounded-lg border border-border p-4">
+        <h3 className="text-sm font-semibold text-foreground">Apps in this gateway</h3>
+        {apps.length === 0 ? (
+          <p className="mt-2 text-sm text-muted-foreground">
+            This gateway’s profile doesn’t include any apps yet.
+          </p>
+        ) : (
+          <ul className="mt-3 divide-y divide-border">
+            {apps.map((app) => (
+              <AppRow key={app.application.id} app={app} />
+            ))}
+          </ul>
+        )}
+      </section>
+
+      <section className="rounded-lg border border-border bg-muted/30 p-4">
+        <div className="flex items-center justify-between gap-2">
+          <h3 className="text-sm font-semibold text-foreground">How clients connect</h3>
+          <Button variant="outline" size="sm" onClick={() => void copy(snippet, "Client config")}>
+            <Copy className="mr-1 h-3.5 w-3.5" />
+            Copy
+          </Button>
+        </div>
+        <pre className="mt-3 overflow-auto whitespace-pre-wrap break-words rounded bg-background p-3 font-mono text-xs text-muted-foreground">
+          {snippet}
+        </pre>
+      </section>
+    </div>
+  );
+}
+
+function StatCard({ label, children }: { label: string; children: React.ReactNode }) {
+  return (
+    <div className="rounded-lg border border-border p-4">
+      <div className="text-xs font-medium text-muted-foreground">{label}</div>
+      <div className="mt-2 text-sm font-semibold text-foreground">{children}</div>
+    </div>
+  );
+}
+
+function Chip({ children }: { children: React.ReactNode }) {
+  return (
+    <span className="inline-flex items-center rounded-full border border-border px-3 py-1 text-xs font-medium text-foreground">
+      {children}
+    </span>
+  );
+}
+
+function AppRow({ app }: { app: GatewayAppRow }) {
+  const href = app.connection ? `/apps/${app.connection.id}/setup` : `/apps/app/${app.application.id}/setup`;
+  return (
+    <li className="flex items-center justify-between gap-3 py-2.5">
+      <div className="min-w-0">
+        <Link to={href} className="font-medium text-foreground hover:underline">
+          {gatewayAppDisplayName(app)}
+        </Link>
+        <div className="text-xs text-muted-foreground">
+          {app.toolCount} {app.toolCount === 1 ? "tool" : "tools"}
+          {app.needsAttention && app.attentionReason ? ` · ${app.attentionReason}` : ""}
+        </div>
+      </div>
+      <span
+        className={cn(
+          "shrink-0 rounded-full border px-2 py-0.5 text-xs font-medium",
+          app.needsAttention
+            ? "border-foreground bg-foreground text-background"
+            : "border-emerald-500/40 bg-emerald-500/10 text-emerald-700 dark:text-emerald-300",
+        )}
+      >
+        {app.needsAttention ? "Needs attention" : "Healthy"}
+      </span>
+    </li>
+  );
+}
diff --git a/ui/src/pages/apps/gateways/panels/TokensPanel.test.tsx b/ui/src/pages/apps/gateways/panels/TokensPanel.test.tsx
new file mode 100644
index 00000000000..b475e13acf5
--- /dev/null
+++ b/ui/src/pages/apps/gateways/panels/TokensPanel.test.tsx
@@ -0,0 +1,202 @@
+// @vitest-environment jsdom
+
+import { flushSync } from "react-dom";
+import { createRoot } from "react-dom/client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import type { ReactNode } from "react";
+import type { ToolMcpGatewayToken, ToolMcpGatewayWithTokens } from "@paperclipai/shared";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { TokensPanel } from "./TokensPanel";
+
+const createGatewayTokenMock = vi.hoisted(() => vi.fn());
+const revokeGatewayTokenMock = vi.hoisted(() => vi.fn());
+const pushToastMock = vi.hoisted(() => vi.fn());
+
+vi.mock("@/api/tools", () => ({
+  toolsApi: {
+    createGatewayToken: (...args: unknown[]) => createGatewayTokenMock(...args),
+    revokeGatewayToken: (...args: unknown[]) => revokeGatewayTokenMock(...args),
+  },
+}));
+
+vi.mock("@/context/ToastContext", () => ({
+  useToast: () => ({ pushToast: pushToastMock }),
+}));
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+(globalThis as any).IS_REACT_ACT_ENVIRONMENT = true;
+
+async function act(callback: () => void | Promise<void>) {
+  let result: void | Promise<void> = undefined;
+  flushSync(() => {
+    result = callback();
+  });
+  await result;
+}
+
+async function flushReact() {
+  for (let i = 0; i < 3; i += 1) {
+    await act(async () => {
+      await Promise.resolve();
+      await new Promise((resolve) => window.setTimeout(resolve, 0));
+    });
+  }
+}
+
+function token(overrides: Partial<ToolMcpGatewayToken> = {}): ToolMcpGatewayToken {
+  return {
+    id: "token-1",
+    companyId: "company-1",
+    gatewayId: "gateway-1",
+    name: "cto-cursor",
+    tokenPrefix: "pcgw_live_8x4Pa",
+    subjectType: "gateway_client",
+    subjectId: null,
+    clientLabel: "Cursor",
+    ownerNote: "Local IDE",
+    allowedActions: ["tools/list", "tools/call"],
+    expiresAt: "2026-09-01T00:00:00.000Z",
+    expiryOverrideReason: null,
+    expiryOverrideByUserId: null,
+    expiryOverrideByAgentId: null,
+    expiryOverrideAt: null,
+    lastUsedAt: null,
+    revokedAt: null,
+    createdByAgentId: null,
+    createdByUserId: "user-1",
+    createdAt: "2026-06-01T00:00:00.000Z",
+    updatedAt: "2026-06-01T00:00:00.000Z",
+    ...overrides,
+  };
+}
+
+function gateway(overrides: Partial<ToolMcpGatewayWithTokens> = {}): ToolMcpGatewayWithTokens {
+  return {
+    id: "gateway-1",
+    companyId: "company-1",
+    gatewayPublicId: "gw",
+    name: "CTO agents",
+    displaySlug: "cto-agents",
+    slug: "cto-agents",
+    description: null,
+    status: "active",
+    profileId: "profile-1",
+    defaultProfileMode: "gateway_only",
+    contextScopeType: "none",
+    contextScopeId: null,
+    agentId: null,
+    projectId: null,
+    issueId: null,
+    approvalIssueId: null,
+    endpointPath: "/g/cto-agents/mcp",
+    authConfig: {} as ToolMcpGatewayWithTokens["authConfig"],
+    headerPolicy: {} as ToolMcpGatewayWithTokens["headerPolicy"],
+    metadataPolicy: {} as ToolMcpGatewayWithTokens["metadataPolicy"],
+    onDemandToolsConfig: {} as ToolMcpGatewayWithTokens["onDemandToolsConfig"],
+    metadata: null,
+    createdByAgentId: null,
+    createdByUserId: "user-1",
+    archivedAt: null,
+    createdAt: new Date(),
+    updatedAt: new Date(),
+    tokens: [],
+    clientSnippets: [],
+    ...overrides,
+  };
+}
+
+describe("TokensPanel", () => {
+  let container: HTMLDivElement;
+  let root: ReturnType<typeof createRoot>;
+
+  beforeEach(() => {
+    vi.spyOn(Date, "now").mockReturnValue(new Date("2026-06-16T12:00:00.000Z").getTime());
+    container = document.createElement("div");
+    document.body.appendChild(container);
+  });
+
+  afterEach(() => {
+    flushSync(() => root?.unmount());
+    container.remove();
+    vi.restoreAllMocks();
+  });
+
+  async function render(node: ReactNode) {
+    const client = new QueryClient({ defaultOptions: { queries: { retry: false } } });
+    root = createRoot(container);
+    await act(async () => {
+      root.render(<QueryClientProvider client={client}>{node}</QueryClientProvider>);
+    });
+    await flushReact();
+  }
+
+  function clickButton(label: string) {
+    const button = [...container.querySelectorAll("button")].find(
+      (el) => el.textContent?.trim() === label,
+    );
+    if (!button) throw new Error(`Button "${label}" not found`);
+    return act(async () => {
+      button.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    });
+  }
+
+  function setInput(selectorText: string, value: string) {
+    const input = container.querySelector<HTMLInputElement>(selectorText);
+    if (!input) throw new Error(`Input ${selectorText} not found`);
+    const setter = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, "value")?.set;
+    setter?.call(input, value);
+    return act(async () => {
+      input.dispatchEvent(new Event("input", { bubbles: true }));
+    });
+  }
+
+  it("masks existing tokens and never renders the full secret at rest", async () => {
+    await render(<TokensPanel companyId="company-1" gateway={gateway({ tokens: [token()] })} />);
+    expect(container.textContent).toContain("pcgw_live_8x4Pa•••");
+    expect(container.textContent).toContain("Active");
+  });
+
+  it("mints a token and reveals it once, then copies the full value", async () => {
+    const created = { ...token({ id: "new-token" }), token: "pcgw_live_FULLSECRETVALUE" };
+    createGatewayTokenMock.mockResolvedValue(created);
+    const writeText = vi.fn().mockResolvedValue(undefined);
+    Object.assign(navigator, { clipboard: { writeText } });
+
+    await render(<TokensPanel companyId="company-1" gateway={gateway()} />);
+
+    await clickButton("Mint token"); // open the mint form
+    await setInput('input[placeholder="cto-cursor"]', "cto-cursor");
+    const form = container.querySelector("form");
+    if (!form) throw new Error("mint form not found");
+    await act(async () => {
+      form.dispatchEvent(new Event("submit", { bubbles: true, cancelable: true }));
+    });
+    await flushReact();
+
+    expect(createGatewayTokenMock).toHaveBeenCalledTimes(1);
+    expect(container.textContent).toContain("New token — copy now");
+    // Reveal-once banner shows the full value immediately after creation.
+    expect(container.textContent).toContain("pcgw_live_FULLSECRETVALUE");
+
+    await clickButton("Copy");
+    expect(writeText).toHaveBeenCalledWith("pcgw_live_FULLSECRETVALUE");
+  });
+
+  it("gates revoke behind a typed confirmation matching the token name", async () => {
+    revokeGatewayTokenMock.mockResolvedValue(token({ revokedAt: "2026-06-16T12:00:00.000Z" }));
+    await render(<TokensPanel companyId="company-1" gateway={gateway({ tokens: [token()] })} />);
+
+    await clickButton("Revoke");
+    const confirmButton = [...container.querySelectorAll("button")].find(
+      (el) => el.textContent?.trim() === "Revoke token",
+    ) as HTMLButtonElement;
+    expect(confirmButton.disabled).toBe(true);
+
+    await setInput('input[aria-label="Type the token name to confirm"]', "cto-cursor");
+    expect(confirmButton.disabled).toBe(false);
+
+    await clickButton("Revoke token");
+    await flushReact();
+    expect(revokeGatewayTokenMock).toHaveBeenCalledWith("company-1", "token-1");
+  });
+});
diff --git a/ui/src/pages/apps/gateways/panels/TokensPanel.tsx b/ui/src/pages/apps/gateways/panels/TokensPanel.tsx
new file mode 100644
index 00000000000..418fe6eff0d
--- /dev/null
+++ b/ui/src/pages/apps/gateways/panels/TokensPanel.tsx
@@ -0,0 +1,395 @@
+import { type FormEvent, type ReactNode, useMemo, useState } from "react";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { Copy, KeyRound, Plus } from "lucide-react";
+import type {
+  ToolMcpGatewayTokenAction,
+  ToolMcpGatewayTokenCreated,
+  ToolMcpGatewayWithTokens,
+} from "@paperclipai/shared";
+import { toolsApi } from "@/api/tools";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { useToast } from "@/context/ToastContext";
+import { RelativeTime } from "@/pages/tools/shared";
+import { cn } from "@/lib/utils";
+import { gatewaysQueryKey } from "../NewGatewayDialog";
+import { maskedTokenLabel, TOKEN_STATUS_LABEL, tokenStatus, type TokenStatus } from "../gateway-helpers";
+
+const DEFAULT_ACTIONS: ToolMcpGatewayTokenAction[] = ["tools/list", "tools/call"];
+
+function defaultExpiry(): string {
+  return new Date(Date.now() + 90 * 24 * 60 * 60 * 1000).toISOString().slice(0, 10);
+}
+
+const STATUS_CLASS: Record<TokenStatus, string> = {
+  active: "border-emerald-500/40 bg-emerald-500/10 text-emerald-700 dark:text-emerald-300",
+  expiring: "border-amber-500/40 bg-amber-500/10 text-amber-700 dark:text-amber-300",
+  expired: "border-border bg-muted text-muted-foreground",
+  revoked: "border-foreground bg-foreground text-background",
+};
+
+/** Token status pill, shared by the desktop table and mobile cards. */
+function StatusBadge({ status }: { status: TokenStatus }) {
+  return (
+    <span
+      className={cn(
+        "inline-flex shrink-0 items-center rounded-full border px-2 py-0.5 text-xs font-medium",
+        STATUS_CLASS[status],
+      )}
+    >
+      {TOKEN_STATUS_LABEL[status]}
+    </span>
+  );
+}
+
+/** One label:value pair inside a mobile stacked card. */
+function TokenField({ label, value }: { label: string; value: ReactNode }) {
+  return (
+    <div className="min-w-0">
+      <dt className="text-(length:--text-micro) font-semibold uppercase tracking-wide text-muted-foreground">{label}</dt>
+      <dd className="mt-0.5 truncate text-foreground">{value}</dd>
+    </div>
+  );
+}
+
+export function TokensPanel({
+  companyId,
+  gateway,
+  onTokenCreated,
+}: {
+  companyId: string;
+  gateway: ToolMcpGatewayWithTokens;
+  onTokenCreated?: (token: ToolMcpGatewayTokenCreated) => void;
+}) {
+  const queryClient = useQueryClient();
+  const { pushToast } = useToast();
+  const [minting, setMinting] = useState(false);
+  const [name, setName] = useState("");
+  const [clientLabel, setClientLabel] = useState("");
+  const [ownerNote, setOwnerNote] = useState("");
+  const [expiresAt, setExpiresAt] = useState(defaultExpiry());
+  const [created, setCreated] = useState<ToolMcpGatewayTokenCreated | null>(null);
+  const [revealed, setRevealed] = useState(false);
+  const [revokeName, setRevokeName] = useState("");
+  const [confirmToken, setConfirmToken] = useState<{ id: string; name: string } | null>(null);
+
+  const invalidate = () => queryClient.invalidateQueries({ queryKey: gatewaysQueryKey(companyId) });
+
+  const createMutation = useMutation({
+    mutationFn: () =>
+      toolsApi.createGatewayToken(companyId, gateway.id, {
+        name: name.trim(),
+        clientLabel: clientLabel.trim() || name.trim(),
+        ownerNote: ownerNote.trim() || name.trim(),
+        allowedActions: DEFAULT_ACTIONS,
+        expiresAt: expiresAt ? `${expiresAt}T23:59:59.000Z` : null,
+      }),
+    onSuccess: async (token) => {
+      setCreated(token);
+      setRevealed(true);
+      setMinting(false);
+      setName("");
+      setClientLabel("");
+      setOwnerNote("");
+      setExpiresAt(defaultExpiry());
+      pushToast({
+        title: "Token minted",
+        body: "Copy it now — you won’t see the full value again.",
+        tone: "success",
+      });
+      onTokenCreated?.(token);
+      await invalidate();
+    },
+    onError: (error) =>
+      pushToast({
+        title: "Token was not minted",
+        body: error instanceof Error ? error.message : String(error),
+        tone: "error",
+      }),
+  });
+
+  const revokeMutation = useMutation({
+    mutationFn: (tokenId: string) => toolsApi.revokeGatewayToken(companyId, tokenId),
+    onSuccess: async (token) => {
+      setConfirmToken(null);
+      setRevokeName("");
+      pushToast({ title: "Token revoked", body: `${token.name} can no longer connect.`, tone: "success" });
+      await invalidate();
+    },
+    onError: (error) =>
+      pushToast({
+        title: "Token was not revoked",
+        body: error instanceof Error ? error.message : String(error),
+        tone: "error",
+      }),
+  });
+
+  async function copyToken(value: string) {
+    try {
+      if (typeof navigator === "undefined" || !navigator.clipboard?.writeText) {
+        throw new Error("Clipboard access is unavailable.");
+      }
+      await navigator.clipboard.writeText(value);
+      pushToast({ title: "Copied", body: "Access token", tone: "success" });
+    } catch (error) {
+      pushToast({
+        title: "Copy failed",
+        body: error instanceof Error ? error.message : "Clipboard access is unavailable.",
+        tone: "error",
+      });
+    }
+  }
+
+  function submit(event: FormEvent<HTMLFormElement>) {
+    event.preventDefault();
+    if (!name.trim()) return;
+    createMutation.mutate();
+  }
+
+  const tokens = useMemo(
+    () =>
+      [...gateway.tokens].sort(
+        (a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime(),
+      ),
+    [gateway.tokens],
+  );
+
+  return (
+    <div className="space-y-4">
+      <div className="flex flex-wrap items-center justify-between gap-2">
+        <p className="text-sm text-muted-foreground">
+          Each token is a separate way in. Revoke any one without breaking the others.
+        </p>
+        <Button size="sm" onClick={() => setMinting((value) => !value)}>
+          <Plus className="mr-1.5 h-3.5 w-3.5" />
+          Mint token
+        </Button>
+      </div>
+
+      {minting ? (
+        <form className="space-y-3 rounded-md border border-border p-4" onSubmit={submit}>
+          <div className="grid gap-3 md:grid-cols-2">
+            <label className="space-y-1.5 text-sm">
+              <span className="text-xs font-medium text-muted-foreground">Name</span>
+              <Input value={name} onChange={(e) => setName(e.target.value)} placeholder="cto-cursor" required autoFocus />
+            </label>
+            <label className="space-y-1.5 text-sm">
+              <span className="text-xs font-medium text-muted-foreground">Owner / client</span>
+              <Input
+                value={clientLabel}
+                onChange={(e) => setClientLabel(e.target.value)}
+                placeholder="Cursor on work laptop"
+              />
+            </label>
+          </div>
+          <div className="grid gap-3 md:grid-cols-[1fr_auto]">
+            <label className="space-y-1.5 text-sm">
+              <span className="text-xs font-medium text-muted-foreground">Note (why it exists)</span>
+              <Input value={ownerNote} onChange={(e) => setOwnerNote(e.target.value)} placeholder="Dotta’s MacBook" />
+            </label>
+            <label className="space-y-1.5 text-sm">
+              <span className="text-xs font-medium text-muted-foreground">Expires</span>
+              <Input type="date" value={expiresAt} onChange={(e) => setExpiresAt(e.target.value)} required />
+            </label>
+          </div>
+          <div className="flex justify-end gap-2">
+            <Button type="button" variant="ghost" size="sm" onClick={() => setMinting(false)}>
+              Cancel
+            </Button>
+            <Button type="submit" size="sm" disabled={createMutation.isPending || !name.trim()}>
+              {createMutation.isPending ? "Minting…" : "Mint token"}
+            </Button>
+          </div>
+        </form>
+      ) : null}
+
+      {created ? (
+        <div className="space-y-2 rounded-md border-2 border-foreground/80 bg-muted/40 p-4">
+          <div className="flex items-center justify-between gap-2">
+            <div>
+              <div className="text-sm font-semibold text-foreground">New token — copy now</div>
+              <div className="text-xs text-muted-foreground">
+                You won’t see the full value again. Store it in your client’s config or your secret manager.
+              </div>
+            </div>
+            <Button variant="ghost" size="sm" onClick={() => setCreated(null)} aria-label="Dismiss new token">
+              Dismiss
+            </Button>
+          </div>
+          <div className="flex items-center gap-2">
+            <code className="min-w-0 flex-1 truncate rounded bg-background px-3 py-2 font-mono text-xs text-foreground">
+              {revealed ? created.token : maskedTokenLabel(created)}
+            </code>
+            {revealed ? (
+              <Button variant="outline" size="sm" onClick={() => void copyToken(created.token)}>
+                <Copy className="mr-1 h-3.5 w-3.5" />
+                Copy
+              </Button>
+            ) : (
+              <Button variant="outline" size="sm" onClick={() => setRevealed(true)}>
+                Show
+              </Button>
+            )}
+          </div>
+        </div>
+      ) : null}
+
+      {tokens.length === 0 ? (
+        <div className="rounded-md border border-dashed border-border p-6 text-center text-sm text-muted-foreground">
+          No tokens yet. Mint one for the client that will connect to this gateway.
+        </div>
+      ) : (
+        <>
+          {/* Desktop / tablet: full table. */}
+          <div className="hidden overflow-x-auto rounded-lg border border-border sm:block">
+            <table className="w-full min-w-(--sz-44rem) text-sm">
+              <thead>
+                <tr className="border-b border-border bg-muted/40 text-left text-(length:--text-micro) font-semibold uppercase tracking-wide text-muted-foreground">
+                  <th className="px-4 py-2.5">Token</th>
+                  <th className="px-4 py-2.5">Owner</th>
+                  <th className="px-4 py-2.5">Created</th>
+                  <th className="px-4 py-2.5">Last used</th>
+                  <th className="px-4 py-2.5">Expires</th>
+                  <th className="px-4 py-2.5">Status</th>
+                  <th className="px-4 py-2.5 text-right" />
+                </tr>
+              </thead>
+              <tbody>
+                {tokens.map((token) => {
+                  const status = tokenStatus(token);
+                  const canRevoke = status !== "revoked";
+                  return (
+                    <tr key={token.id} className="border-b border-border last:border-0">
+                      <td className="px-4 py-3">
+                        <div className="font-medium text-foreground">{token.name}</div>
+                        <div className="font-mono text-xs text-muted-foreground">{maskedTokenLabel(token)}</div>
+                      </td>
+                      <td className="px-4 py-3 text-muted-foreground">{token.clientLabel || token.ownerNote || "—"}</td>
+                      <td className="px-4 py-3 text-muted-foreground"><RelativeTime value={token.createdAt} /></td>
+                      <td className="px-4 py-3 text-muted-foreground">
+                        {token.lastUsedAt ? <RelativeTime value={token.lastUsedAt} /> : "—"}
+                      </td>
+                      <td className="px-4 py-3 text-muted-foreground">
+                        {token.revokedAt ? "—" : token.expiresAt ? <RelativeTime value={token.expiresAt} /> : "no expiry"}
+                      </td>
+                      <td className="px-4 py-3">
+                        <StatusBadge status={status} />
+                      </td>
+                      <td className="px-4 py-3 text-right">
+                        {canRevoke ? (
+                          <Button
+                            variant="ghost"
+                            size="sm"
+                            className="h-7 px-2 text-xs text-destructive hover:text-destructive"
+                            onClick={() => {
+                              setConfirmToken({ id: token.id, name: token.name });
+                              setRevokeName("");
+                            }}
+                          >
+                            Revoke
+                          </Button>
+                        ) : null}
+                      </td>
+                    </tr>
+                  );
+                })}
+              </tbody>
+            </table>
+          </div>
+
+          {/* Mobile: stacked cards so status + Revoke stay reachable. */}
+          <div className="space-y-3 sm:hidden">
+            {tokens.map((token) => {
+              const status = tokenStatus(token);
+              const canRevoke = status !== "revoked";
+              return (
+                <div key={token.id} className="rounded-lg border border-border p-4">
+                  <div className="flex items-start justify-between gap-3">
+                    <div className="min-w-0">
+                      <div className="font-medium text-foreground">{token.name}</div>
+                      <div className="font-mono text-xs text-muted-foreground">{maskedTokenLabel(token)}</div>
+                    </div>
+                    <StatusBadge status={status} />
+                  </div>
+                  <dl className="mt-3 grid grid-cols-2 gap-x-4 gap-y-2 text-sm">
+                    <TokenField label="Owner" value={token.clientLabel || token.ownerNote || "—"} />
+                    <TokenField label="Created" value={<RelativeTime value={token.createdAt} />} />
+                    <TokenField
+                      label="Last used"
+                      value={token.lastUsedAt ? <RelativeTime value={token.lastUsedAt} /> : "—"}
+                    />
+                    <TokenField
+                      label="Expires"
+                      value={
+                        token.revokedAt ? "—" : token.expiresAt ? <RelativeTime value={token.expiresAt} /> : "no expiry"
+                      }
+                    />
+                  </dl>
+                  {canRevoke ? (
+                    <Button
+                      variant="ghost"
+                      size="sm"
+                      className="mt-3 w-full text-xs text-destructive hover:text-destructive"
+                      onClick={() => {
+                        setConfirmToken({ id: token.id, name: token.name });
+                        setRevokeName("");
+                      }}
+                    >
+                      Revoke
+                    </Button>
+                  ) : null}
+                </div>
+              );
+            })}
+          </div>
+        </>
+      )}
+
+      <p className="flex items-center gap-1.5 text-xs text-muted-foreground">
+        <KeyRound className="h-3.5 w-3.5" />
+        Every mint, reveal, and revoke is recorded in Activity.
+      </p>
+
+      {confirmToken ? (
+        <div className="fixed inset-0 z-50 flex items-center justify-center bg-black/40 p-4" role="dialog" aria-modal="true">
+          <div className="w-full max-w-md space-y-3 rounded-lg border border-border bg-card p-5 shadow-lg">
+            <div>
+              <h3 className="text-sm font-semibold text-foreground">Revoke this token?</h3>
+              <p className="mt-1 text-sm text-muted-foreground">
+                Any client using <span className="font-medium text-foreground">{confirmToken.name}</span> goes
+                silent immediately. This can’t be undone. Type the token name to confirm.
+              </p>
+            </div>
+            <Input
+              value={revokeName}
+              onChange={(e) => setRevokeName(e.target.value)}
+              placeholder={confirmToken.name}
+              aria-label="Type the token name to confirm"
+              autoFocus
+            />
+            <div className="flex justify-end gap-2">
+              <Button
+                variant="ghost"
+                size="sm"
+                onClick={() => {
+                  setConfirmToken(null);
+                  setRevokeName("");
+                }}
+              >
+                Cancel
+              </Button>
+              <Button
+                variant="destructive"
+                size="sm"
+                disabled={revokeName.trim() !== confirmToken.name || revokeMutation.isPending}
+                onClick={() => revokeMutation.mutate(confirmToken.id)}
+              >
+                {revokeMutation.isPending ? "Revoking…" : "Revoke token"}
+              </Button>
+            </div>
+          </div>
+        </div>
+      ) : null}
+    </div>
+  );
+}
diff --git a/ui/src/pages/apps/google-sheets.ts b/ui/src/pages/apps/google-sheets.ts
new file mode 100644
index 00000000000..75cd6e6cb89
--- /dev/null
+++ b/ui/src/pages/apps/google-sheets.ts
@@ -0,0 +1,37 @@
+export function parseGoogleSheetIds(value: string): { ids: string[]; invalidCount: number } {
+  const ids: string[] = [];
+  let invalidCount = 0;
+  for (const rawToken of value.split(/[\s,]+/g)) {
+    const token = rawToken.trim().replace(/[),.;\]]+$/g, "");
+    if (!token) continue;
+    try {
+      const parsed = new URL(token);
+      const match = parsed.pathname.match(/\/spreadsheets\/d\/([^/]+)/i);
+      if (match?.[1]) {
+        ids.push(decodeURIComponent(match[1]));
+        continue;
+      }
+      invalidCount += 1;
+    } catch {
+      invalidCount += 1;
+    }
+  }
+  return { ids: Array.from(new Set(ids)), invalidCount };
+}
+
+export function googleSheetsConfigWithAllowlist(
+  currentConfig: Record<string, unknown> | null | undefined,
+  allowedSpreadsheetIds: string[],
+): Record<string, unknown> {
+  const env = currentConfig && typeof currentConfig.env === "object" && !Array.isArray(currentConfig.env)
+    ? currentConfig.env as Record<string, unknown>
+    : {};
+  return {
+    ...(currentConfig ?? {}),
+    allowedSpreadsheetIds,
+    env: {
+      ...env,
+      GOOGLE_SHEETS_ALLOWED_SPREADSHEET_IDS: allowedSpreadsheetIds.join(","),
+    },
+  };
+}
diff --git a/ui/src/pages/apps/store-cards.tsx b/ui/src/pages/apps/store-cards.tsx
new file mode 100644
index 00000000000..0cc505c12cc
--- /dev/null
+++ b/ui/src/pages/apps/store-cards.tsx
@@ -0,0 +1,50 @@
+import { ServerCog, Wrench } from "lucide-react";
+import { Link } from "@/lib/router";
+import { advancedTabHref } from "@/pages/tools/tool-tabs";
+
+/** Popular gallery keys surfaced first in the Browse store (PAP-13254, door 1). */
+export const POPULAR_KEYS = ["zapier", "github", "slack", "notion", "linear"];
+
+/** Deep-link into the Connect wizard's bring-your-own-tool URL flow. */
+export const BYO_CONNECT_HREF = "/apps/connect?byo=1";
+
+/** Zapier connects with the complete MCP URL issued by Zapier. */
+export const ZAPIER_CONNECT_HREF = "/apps/connect?byo=1&source=zapier";
+
+/**
+ * First-class "Connect your own tool" card (PAP-12371, Finding C; PAP-13254).
+ * Lives in Browse as a persistent row and launches the guided URL flow.
+ */
+export function ByoConnectCard({ onConnect }: { onConnect: () => void }) {
+  return (
+    <button
+      type="button"
+      onClick={onConnect}
+      className="flex w-full items-center gap-4 rounded-xl border border-dashed border-border bg-card px-4 py-4 text-left transition-colors hover:border-foreground/30 hover:bg-accent/40"
+    >
+      <span className="inline-flex h-11 w-11 shrink-0 items-center justify-center rounded-lg border border-border bg-background">
+        <ServerCog className="h-5 w-5 text-muted-foreground" />
+      </span>
+      <div className="min-w-0 flex-1">
+        <div className="text-sm font-semibold text-foreground">Connect your own tool</div>
+        <div className="text-xs text-muted-foreground">
+          Paste the URL from a custom or self-hosted MCP server and review its actions before enabling it.
+        </div>
+      </div>
+      <span className="shrink-0 text-xs font-semibold text-primary">Connect →</span>
+    </button>
+  );
+}
+
+/** Labeled door to the developer control-plane (PAP-12371, Finding A cross-link). */
+export function AdvancedToolsLink() {
+  return (
+    <Link
+      to={advancedTabHref("run-your-own")}
+      className="inline-flex items-center gap-1.5 text-xs font-medium text-muted-foreground transition-colors hover:text-foreground"
+    >
+      <Wrench className="h-3.5 w-3.5" />
+      Developer tools (advanced)
+    </Link>
+  );
+}
diff --git a/ui/src/pages/apps/useReviewCount.ts b/ui/src/pages/apps/useReviewCount.ts
new file mode 100644
index 00000000000..872ba147619
--- /dev/null
+++ b/ui/src/pages/apps/useReviewCount.ts
@@ -0,0 +1,22 @@
+import { useQuery } from "@tanstack/react-query";
+import { useCompany } from "@/context/CompanyContext";
+import { queryKeys } from "@/lib/queryKeys";
+import { toolsApi } from "@/api/tools";
+
+/**
+ * Live count of Ask-first requests waiting for the user's OK (PAP-12371,
+ * Finding B). This is the "decisions waiting on you" signal — deliberately
+ * separate from the health "Needs attention" count so an approval is never
+ * hidden behind an error-triage label. Backs the sidebar "Review" badge and
+ * the persistent review affordance on /apps.
+ */
+export function useReviewCount(): number {
+  const { selectedCompanyId } = useCompany();
+  const query = useQuery({
+    queryKey: queryKeys.tools.actionRequests(selectedCompanyId ?? "__none__", "pending"),
+    queryFn: () => toolsApi.listActionRequests(selectedCompanyId!, "pending"),
+    enabled: !!selectedCompanyId,
+    refetchInterval: 20_000,
+  });
+  return query.data?.actionRequests.length ?? 0;
+}
diff --git a/ui/storybook/stories/access-profiles.stories.tsx b/ui/storybook/stories/access-profiles.stories.tsx
new file mode 100644
index 00000000000..43f0682861e
--- /dev/null
+++ b/ui/storybook/stories/access-profiles.stories.tsx
@@ -0,0 +1,685 @@
+import { useMemo, useState } from "react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import type {
+  ToolCatalogEntry,
+  ToolConnection,
+  ToolPolicy,
+  ToolProfileEffectiveSummary,
+  ToolProfileNewToolsReview,
+  ToolProfileSummary,
+  ToolProfileWithDetails,
+} from "@paperclipai/shared";
+import { queryKeys } from "@/lib/queryKeys";
+import { AgentToolsTab } from "@/pages/AgentToolsTab";
+import { ProfileDetail } from "@/pages/tools/profiles/ProfileDetail";
+import { ProfilesIndex } from "@/pages/tools/profiles/ProfilesIndex";
+import { StepAssign, StepName } from "@/pages/tools/profiles/ProfileWizard";
+import { WizardToolsStep } from "@/pages/tools/profiles/WizardToolsStep";
+import {
+  groupCatalogByApp,
+  TEMPLATES,
+  type AdvancedRule,
+  type WizardSelections,
+} from "@/pages/tools/profiles/profile-model";
+
+const COMPANY = "company-storybook";
+
+// --- Catalog fixtures ------------------------------------------------------
+
+function makeTool(
+  id: string,
+  toolName: string,
+  cap: "read" | "write" | "destructive",
+  title: string,
+  applicationId: string,
+  connectionId: string,
+): ToolCatalogEntry {
+  return {
+    id,
+    companyId: COMPANY,
+    applicationId,
+    connectionId,
+    entryKind: "tool",
+    toolName,
+    title,
+    description: title,
+    inputSchema: null,
+    outputSchema: null,
+    annotations: null,
+    riskLevel: cap,
+    isReadOnly: cap === "read",
+    isWrite: cap === "write",
+    isDestructive: cap === "destructive",
+    status: "active",
+    addedAt: new Date("2026-06-01T00:00:00Z"),
+    version: null,
+    schemaHash: null,
+    firstSeenAt: new Date("2026-06-01T00:00:00Z"),
+    lastSeenAt: new Date("2026-06-01T00:00:00Z"),
+    reviewedAt: null,
+    reviewedByAgentId: null,
+    reviewedByUserId: null,
+    createdAt: new Date("2026-06-01T00:00:00Z"),
+    updatedAt: new Date("2026-06-01T00:00:00Z"),
+  } as ToolCatalogEntry;
+}
+
+const GMAIL_TOOLS: ToolCatalogEntry[] = [
+  makeTool("g-list", "gmail.list_messages", "read", "List messages in a mailbox", "app-gmail", "conn-gmail"),
+  makeTool("g-read", "gmail.get_message", "read", "Read a single message", "app-gmail", "conn-gmail"),
+  makeTool("g-search", "gmail.search", "read", "Search the mailbox", "app-gmail", "conn-gmail"),
+  makeTool("g-labels", "gmail.list_labels", "read", "List labels", "app-gmail", "conn-gmail"),
+  makeTool("g-draft", "gmail.create_draft", "write", "Create a draft", "app-gmail", "conn-gmail"),
+  makeTool("g-send", "gmail.send_message", "write", "Send a message", "app-gmail", "conn-gmail"),
+  makeTool("g-label", "gmail.modify_labels", "write", "Add or remove labels", "app-gmail", "conn-gmail"),
+  makeTool("g-archive", "gmail.archive", "write", "Archive a thread", "app-gmail", "conn-gmail"),
+  makeTool("g-trash", "gmail.trash_message", "destructive", "Move a message to trash", "app-gmail", "conn-gmail"),
+  makeTool("g-delete", "gmail.delete_message", "destructive", "Permanently delete a message", "app-gmail", "conn-gmail"),
+  makeTool("g-purge", "gmail.empty_trash", "destructive", "Empty the trash", "app-gmail", "conn-gmail"),
+  makeTool("g-filter", "gmail.delete_filter", "destructive", "Delete a filter", "app-gmail", "conn-gmail"),
+];
+
+const SLACK_TOOLS: ToolCatalogEntry[] = [
+  makeTool("s-list", "slack.list_channels", "read", "List channels", "app-slack", "conn-slack"),
+  makeTool("s-history", "slack.channel_history", "read", "Read channel history", "app-slack", "conn-slack"),
+  makeTool("s-post", "slack.post_message", "write", "Post a message", "app-slack", "conn-slack"),
+  makeTool("s-archive", "slack.archive_channel", "destructive", "Archive a channel", "app-slack", "conn-slack"),
+];
+
+const CATALOG = [...GMAIL_TOOLS, ...SLACK_TOOLS];
+
+const APP_GROUPS = groupCatalogByApp(
+  CATALOG,
+  new Map([
+    ["app-gmail", "Gmail"],
+    ["app-slack", "Slack"],
+  ]),
+  new Map([
+    ["conn-gmail", "Gmail"],
+    ["conn-slack", "Slack"],
+  ]),
+);
+
+// --- Profile fixtures ------------------------------------------------------
+
+function summary(partial: Partial<ToolProfileSummary>): ToolProfileSummary {
+  return {
+    accessMode: "selected",
+    allowedToolCount: 0,
+    allowedApplicationCount: 0,
+    excludedToolCount: 0,
+    totalToolCount: 16,
+    assignmentCount: 0,
+    appliesToAgentCount: 0,
+    isCompanyDefault: false,
+    ...partial,
+  };
+}
+
+function profile(
+  id: string,
+  name: string,
+  status: ToolProfileWithDetails["status"],
+  s: Partial<ToolProfileSummary>,
+  updatedAt: string,
+): ToolProfileWithDetails {
+  return {
+    id,
+    companyId: COMPANY,
+    profileKey: id,
+    name,
+    description: null,
+    status,
+    defaultAction: "deny",
+    newToolsReviewedAt: null,
+    metadata: null,
+    createdAt: new Date("2026-06-01T00:00:00Z"),
+    updatedAt: new Date(updatedAt),
+    entries: [],
+    bindings: [],
+    summary: summary(s),
+  };
+}
+
+const PROFILES: ToolProfileWithDetails[] = [
+  profile("read-only", "Read-only starter", "active", { allowedToolCount: 6, allowedApplicationCount: 0, appliesToAgentCount: 3 }, "2026-06-11T10:00:00Z"),
+  profile("everyday", "Everyday work", "active", { allowedToolCount: 12, allowedApplicationCount: 1, appliesToAgentCount: 2 }, "2026-06-12T09:00:00Z"),
+  profile("company-baseline", "Company baseline", "active", { accessMode: "all_except", excludedToolCount: 4, isCompanyDefault: true }, "2026-06-09T14:00:00Z"),
+  profile("marketing", "Marketing reach", "active", { allowedToolCount: 3, allowedApplicationCount: 0 }, "2026-06-10T08:00:00Z"),
+  profile("half-built", "Onboarding bot access", "draft", { allowedToolCount: 2 }, "2026-06-12T16:30:00Z"),
+];
+
+const DETAIL_PROFILE: ToolProfileWithDetails = {
+  ...profile("detail", "Everyday work", "active", { allowedToolCount: 12, allowedApplicationCount: 1, appliesToAgentCount: 2, assignmentCount: 2 }, "2026-06-12T09:00:00Z"),
+  description: "Read and make routine changes across connected work apps.",
+  entries: [
+    {
+      id: "entry-gmail",
+      companyId: COMPANY,
+      profileId: "detail",
+      selectorType: "application",
+      effect: "include",
+      applicationId: "app-gmail",
+      connectionId: null,
+      catalogEntryId: null,
+      toolName: null,
+      riskLevel: null,
+      conditions: null,
+      createdAt: new Date("2026-06-01T00:00:00Z"),
+      updatedAt: new Date("2026-06-01T00:00:00Z"),
+    },
+  ],
+  bindings: [
+    {
+      id: "bind-sage",
+      companyId: COMPANY,
+      profileId: "detail",
+      targetType: "agent",
+      targetId: "a-sage",
+      priority: 0,
+      metadata: null,
+      createdByAgentId: null,
+      createdByUserId: null,
+      createdAt: new Date("2026-06-01T00:00:00Z"),
+      updatedAt: new Date("2026-06-01T00:00:00Z"),
+    },
+    {
+      id: "bind-atlas",
+      companyId: COMPANY,
+      profileId: "detail",
+      targetType: "agent",
+      targetId: "a-atlas",
+      priority: 0,
+      metadata: null,
+      createdByAgentId: null,
+      createdByUserId: null,
+      createdAt: new Date("2026-06-01T00:00:00Z"),
+      updatedAt: new Date("2026-06-01T00:00:00Z"),
+    },
+  ],
+};
+
+const NEW_TOOLS_PROFILE: ToolProfileWithDetails = {
+  ...DETAIL_PROFILE,
+  id: "gmail-new-tools",
+  name: "Gmail everyday",
+  newToolsPendingCount: 3,
+};
+
+const AUTO_ALLOW_PROFILE: ToolProfileWithDetails = {
+  ...DETAIL_PROFILE,
+  id: "gmail-auto-allow",
+  name: "Gmail auto-allow",
+  defaultAction: "allow",
+};
+
+const NEW_TOOLS_REVIEW: ToolProfileNewToolsReview = {
+  profileId: NEW_TOOLS_PROFILE.id,
+  reviewedAt: new Date("2026-05-01T00:00:00Z"),
+  pendingCount: 3,
+  tools: [
+    {
+      catalogEntryId: "g-send",
+      applicationId: "app-gmail",
+      applicationName: "Gmail",
+      connectionId: "conn-gmail",
+      connectionName: "Gmail",
+      toolName: "gmail.send_message",
+      title: "Send a message",
+      description: "Send a message from Gmail.",
+      capability: "write",
+      riskLevel: "write",
+      addedAt: new Date("2026-05-28T00:00:00Z"),
+      firstSeenAt: new Date("2026-05-28T00:00:00Z"),
+    },
+    {
+      catalogEntryId: "g-label",
+      applicationId: "app-gmail",
+      applicationName: "Gmail",
+      connectionId: "conn-gmail",
+      connectionName: "Gmail",
+      toolName: "gmail.modify_labels",
+      title: "Add or remove labels",
+      description: "Apply labels to existing messages.",
+      capability: "write",
+      riskLevel: "write",
+      addedAt: new Date("2026-05-28T00:00:00Z"),
+      firstSeenAt: new Date("2026-05-28T00:00:00Z"),
+    },
+    {
+      catalogEntryId: "g-trash",
+      applicationId: "app-gmail",
+      applicationName: "Gmail",
+      connectionId: "conn-gmail",
+      connectionName: "Gmail",
+      toolName: "gmail.trash_message",
+      title: "Move a message to trash",
+      description: "Move a message out of the inbox and into trash.",
+      capability: "destructive",
+      riskLevel: "destructive",
+      addedAt: new Date("2026-05-28T00:00:00Z"),
+      firstSeenAt: new Date("2026-05-28T00:00:00Z"),
+    },
+  ],
+};
+
+const CONNECTIONS: ToolConnection[] = [
+  {
+    id: "conn-gmail",
+    companyId: COMPANY,
+    applicationId: "app-gmail",
+    name: "Gmail",
+    connectionKind: "managed",
+    status: "active",
+    transportConfig: {},
+    credentialSecretRefs: [],
+    healthStatus: "ok",
+    healthCheckedAt: null,
+    lastError: null,
+    enabled: true,
+    createdByAgentId: null,
+    createdByUserId: null,
+    createdAt: new Date("2026-06-01T00:00:00Z"),
+    updatedAt: new Date("2026-06-01T00:00:00Z"),
+    installs: [
+      {
+        id: "install-gmail-sage",
+        companyId: COMPANY,
+        connectionId: "conn-gmail",
+        targetType: "agent",
+        targetId: "a-sage",
+        createdByAgentId: null,
+        createdByUserId: null,
+        createdAt: new Date("2026-06-01T00:00:00Z"),
+      },
+    ],
+  } as ToolConnection,
+  {
+    id: "conn-slack",
+    companyId: COMPANY,
+    applicationId: "app-slack",
+    name: "Slack",
+    connectionKind: "managed",
+    status: "active",
+    transportConfig: {},
+    credentialSecretRefs: [],
+    healthStatus: "ok",
+    healthCheckedAt: null,
+    lastError: null,
+    enabled: true,
+    createdByAgentId: null,
+    createdByUserId: null,
+    createdAt: new Date("2026-06-01T00:00:00Z"),
+    updatedAt: new Date("2026-06-01T00:00:00Z"),
+  } as ToolConnection,
+];
+
+const AGENTS = [
+  { id: "a-sage", name: "Sage" },
+  { id: "a-atlas", name: "Atlas" },
+  { id: "a-nova", name: "Nova" },
+];
+
+// --- Seeded index host -----------------------------------------------------
+
+function SeededIndex({
+  profiles,
+  initialStatusFilter,
+  initialResolverOpen,
+}: {
+  profiles: ToolProfileWithDetails[];
+  initialStatusFilter?: "active" | "archived";
+  initialResolverOpen?: boolean;
+}) {
+  const client = useMemo(() => {
+    const c = new QueryClient({
+      defaultOptions: { queries: { staleTime: Infinity, gcTime: Infinity, retry: false, refetchOnMount: false } },
+    });
+    c.setQueryData(queryKeys.tools.profiles(COMPANY), { profiles });
+    c.setQueryData(queryKeys.tools.applications(COMPANY), { applications: [] });
+    c.setQueryData(queryKeys.tools.connections(COMPANY), { connections: [] });
+    c.setQueryData(queryKeys.agents.list(COMPANY), AGENTS);
+    c.setQueryData(queryKeys.tools.effectiveProfilesForAgent(COMPANY, "a-sage"), {
+      agentId: "a-sage",
+      profiles: [DETAIL_PROFILE],
+      entries: DETAIL_PROFILE.entries,
+      bindings: DETAIL_PROFILE.bindings,
+      allowedTools: GMAIL_TOOLS.slice(0, 4),
+      allowedToolNames: GMAIL_TOOLS.slice(0, 4).map((tool) => tool.toolName),
+      installedConnections: [],
+    } satisfies ToolProfileEffectiveSummary);
+    c.setQueryData(queryKeys.projects.list(COMPANY), []);
+    c.setQueryData(queryKeys.routines.list(COMPANY), []);
+    return c;
+  }, [profiles]);
+  return (
+    <QueryClientProvider client={client}>
+      <div className="mx-auto max-w-6xl p-6">
+        <ProfilesIndex
+          companyId={COMPANY}
+          initialStatusFilter={initialStatusFilter}
+          initialResolverOpen={initialResolverOpen}
+        />
+      </div>
+    </QueryClientProvider>
+  );
+}
+
+function SeededDetail({
+  profile,
+  catalog = CATALOG,
+  connections = CONNECTIONS,
+  initialCreated,
+  initialReviewOpen,
+}: {
+  profile: ToolProfileWithDetails;
+  catalog?: ToolCatalogEntry[];
+  connections?: ToolConnection[];
+  initialCreated?: boolean;
+  initialReviewOpen?: boolean;
+}) {
+  const client = useMemo(() => {
+    const c = new QueryClient({
+      defaultOptions: { queries: { staleTime: Infinity, gcTime: Infinity, retry: false, refetchOnMount: false } },
+    });
+    c.setQueryData(queryKeys.tools.profiles(COMPANY), { profiles: [profile, ...PROFILES] });
+    c.setQueryData(queryKeys.tools.applications(COMPANY), {
+      applications: [
+        { id: "app-gmail", name: "Gmail" },
+        { id: "app-slack", name: "Slack" },
+      ],
+    });
+    c.setQueryData(queryKeys.tools.connections(COMPANY), { connections });
+    c.setQueryData(queryKeys.tools.catalog("conn-gmail"), { catalog: catalog.filter((tool) => tool.connectionId === "conn-gmail") });
+    c.setQueryData(queryKeys.tools.catalog("conn-slack"), { catalog: catalog.filter((tool) => tool.connectionId === "conn-slack") });
+    c.setQueryData(queryKeys.tools.profileNewTools(profile.id), profile.newToolsPendingCount ? NEW_TOOLS_REVIEW : { profileId: profile.id, reviewedAt: null, pendingCount: 0, tools: [] });
+    c.setQueryData(queryKeys.agents.list(COMPANY), AGENTS);
+    c.setQueryData(queryKeys.projects.list(COMPANY), []);
+    c.setQueryData(queryKeys.routines.list(COMPANY), []);
+    return c;
+  }, [profile, catalog, connections]);
+  return (
+    <QueryClientProvider client={client}>
+      <div className="mx-auto max-w-6xl p-6">
+        <ProfileDetail
+          companyId={COMPANY}
+          profileId={profile.id}
+          initialCreated={initialCreated}
+          initialReviewOpen={initialReviewOpen}
+        />
+      </div>
+    </QueryClientProvider>
+  );
+}
+
+function SeededAgentTools() {
+  const allowed = [...GMAIL_TOOLS.slice(0, 6), SLACK_TOOLS[0]];
+  const policy: ToolPolicy = {
+    id: "policy-write",
+    companyId: COMPANY,
+    name: "Ask first for sending mail",
+    description: "Write tools need a quick human OK.",
+    policyType: "require_approval",
+    priority: 10,
+    enabled: true,
+    selectors: {},
+    conditions: null,
+    config: null,
+    createdByAgentId: null,
+    createdByUserId: null,
+    createdAt: new Date("2026-06-01T00:00:00Z"),
+    updatedAt: new Date("2026-06-01T00:00:00Z"),
+  };
+  const client = useMemo(() => {
+    const c = new QueryClient({
+      defaultOptions: { queries: { staleTime: Infinity, gcTime: Infinity, retry: false, refetchOnMount: false } },
+    });
+    c.setQueryData(queryKeys.tools.effectiveProfilesForAgent(COMPANY, "a-sage"), {
+      agentId: "a-sage",
+      profiles: [{ ...DETAIL_PROFILE, summary: summary({ allowedToolCount: allowed.length, allowedApplicationCount: 1, assignmentCount: 1, appliesToAgentCount: 1, isCompanyDefault: true }) }],
+      entries: DETAIL_PROFILE.entries,
+      bindings: DETAIL_PROFILE.bindings,
+      allowedTools: allowed,
+      allowedToolNames: allowed.map((tool) => tool.toolName),
+      installedConnections: CONNECTIONS.filter((connection) => connection.id === "conn-gmail"),
+    } satisfies ToolProfileEffectiveSummary);
+    c.setQueryData(queryKeys.tools.connections(COMPANY), { connections: CONNECTIONS });
+    c.setQueryData(queryKeys.tools.catalog("conn-gmail"), { catalog: GMAIL_TOOLS });
+    c.setQueryData(queryKeys.tools.catalog("conn-slack"), { catalog: SLACK_TOOLS });
+    c.setQueryData(queryKeys.tools.policies(COMPANY), { policies: [policy] });
+    return c;
+  }, [allowed, policy]);
+  return (
+    <QueryClientProvider client={client}>
+      <div className="mx-auto max-w-6xl p-6">
+        <AgentToolsTab agent={{ id: "a-sage", name: "Sage" } as never} companyId={COMPANY} />
+      </div>
+    </QueryClientProvider>
+  );
+}
+
+const meta: Meta = {
+  title: "Tools/Access profiles",
+  parameters: { layout: "fullscreen" },
+};
+export default meta;
+
+type Story = StoryObj;
+
+export const IndexPopulated: Story = {
+  name: "Index — populated",
+  render: () => <SeededIndex profiles={PROFILES} />,
+};
+
+export const IndexNewToolsChip: Story = {
+  name: "Index — new tools chip (AP1 v2)",
+  render: () => <SeededIndex profiles={[NEW_TOOLS_PROFILE, ...PROFILES]} />,
+};
+
+export const IndexLongProfileName: Story = {
+  name: "Index — long profile name",
+  render: () => (
+    <SeededIndex
+      profiles={[
+        profile(
+          "long-profile-name",
+          "This profile has an exceptionally long name that should truncate before the Allows column",
+          "active",
+          { allowedToolCount: 14, allowedApplicationCount: 2, appliesToAgentCount: 1 },
+          "2026-06-12T18:00:00Z",
+        ),
+        ...PROFILES,
+      ]}
+    />
+  ),
+};
+
+export const AccessCheckerSheet: Story = {
+  name: "Access checker sheet (AP8)",
+  render: () => <SeededIndex profiles={PROFILES} initialResolverOpen />,
+};
+
+export const IndexEmpty: Story = {
+  name: "Index — empty (template cards)",
+  render: () => <SeededIndex profiles={[]} />,
+};
+
+export const IndexArchived: Story = {
+  name: "Index — archived filter",
+  render: () => <SeededIndex initialStatusFilter="archived" profiles={[...PROFILES, profile("old-profile", "Archived profile", "archived", { allowedToolCount: 5, assignmentCount: 1 }, "2026-06-08T10:00:00Z")]} />,
+};
+
+export const DetailAssigned: Story = {
+  name: "Detail — assigned",
+  render: () => <SeededDetail profile={DETAIL_PROFILE} />,
+};
+
+export const DetailNewToolsBanner: Story = {
+  name: "Detail — new tools banner (AP16)",
+  render: () => <SeededDetail profile={NEW_TOOLS_PROFILE} />,
+};
+
+export const DetailNewToolsModal: Story = {
+  name: "Detail — new tools review modal (AP16)",
+  render: () => <SeededDetail profile={NEW_TOOLS_PROFILE} initialReviewOpen />,
+};
+
+export const DetailAutoAllowedRows: Story = {
+  name: "Detail — auto-added row notes (AP16b)",
+  render: () => <SeededDetail profile={AUTO_ALLOW_PROFILE} />,
+};
+
+export const AgentAccessProfilesCard: Story = {
+  name: "Agent page — access profiles card (AP19)",
+  render: () => <SeededAgentTools />,
+};
+
+export const DetailUnassignedPostCreate: Story = {
+  name: "Detail — unassigned post-create",
+  render: () => (
+    <SeededDetail
+      initialCreated
+      profile={{
+        ...DETAIL_PROFILE,
+        id: "detail-unassigned",
+        bindings: [],
+        summary: summary({ allowedToolCount: 12, allowedApplicationCount: 1, assignmentCount: 0, appliesToAgentCount: 0 }),
+      }}
+    />
+  ),
+};
+
+export const DetailArchived: Story = {
+  name: "Detail — archived",
+  render: () => (
+    <SeededDetail
+      profile={{
+        ...DETAIL_PROFILE,
+        id: "detail-archived",
+        status: "archived",
+      }}
+    />
+  ),
+};
+
+export const DetailDegraded: Story = {
+  name: "Detail — degraded",
+  render: () => (
+    <SeededDetail
+      profile={{
+        ...DETAIL_PROFILE,
+        id: "detail-degraded",
+        summary: summary({ allowedToolCount: 12, allowedApplicationCount: 1, appliesToAgentCount: 2, assignmentCount: 2 }),
+      }}
+      connections={[{ ...CONNECTIONS[0], status: "disabled", healthStatus: "error" } as ToolConnection, CONNECTIONS[1]]}
+    />
+  ),
+};
+
+export const WizardStep1: Story = {
+  name: "Wizard — step 1 (Name)",
+  render: function Step1() {
+    const [template, setTemplate] = useState<(typeof TEMPLATES)[number]["key"] | null>("everyday");
+    const [name, setName] = useState("Everyday work");
+    const [description, setDescription] = useState("Read and make routine changes — no destructive tools.");
+    const [profileKey, setProfileKey] = useState("everyday");
+    return (
+      <div className="mx-auto max-w-3xl p-6">
+        <StepName
+          template={template}
+          onTemplate={setTemplate}
+          copyFromId={null}
+          onCopyFrom={() => {}}
+          copyOptions={PROFILES.filter((p) => p.status !== "draft")}
+          name={name}
+          onName={setName}
+          description={description}
+          onDescription={setDescription}
+          profileKey={profileKey}
+          onProfileKey={setProfileKey}
+        />
+      </div>
+    );
+  },
+};
+
+export const WizardStep2: Story = {
+  name: "Wizard — step 2 (Choose tools)",
+  render: function Step2() {
+    const [selections, setSelections] = useState<WizardSelections>({
+      "app-gmail": { kind: "all" },
+      "app-slack": { kind: "some", included: ["s-list", "s-history"] },
+    });
+    const [rules, setRules] = useState<AdvancedRule[]>([]);
+    const [action, setAction] = useState<"deny" | "allow">("deny");
+    return (
+      <div className="mx-auto max-w-3xl p-6">
+        <WizardToolsStep
+          appGroups={APP_GROUPS}
+          catalogLoading={false}
+          selections={selections}
+          onSelectionsChange={setSelections}
+          advancedRules={rules}
+          onAdvancedRulesChange={setRules}
+          newToolsAction={action}
+          onNewToolsActionChange={setAction}
+        />
+      </div>
+    );
+  },
+};
+
+export const WizardStep2Partial: Story = {
+  name: "Wizard — step 2 partial selection (AP4b)",
+  render: function Step2Partial() {
+    const [selections, setSelections] = useState<WizardSelections>({
+      "app-gmail": { kind: "all_except", excluded: ["g-delete", "g-purge"] },
+      "app-slack": { kind: "all" },
+    });
+    const [rules, setRules] = useState<AdvancedRule[]>([
+      { id: "r1", kind: "risk_level", value: "destructive", riskLevel: "destructive", effect: "exclude" },
+    ]);
+    const [action, setAction] = useState<"deny" | "allow">("deny");
+    return (
+      <div className="mx-auto max-w-3xl p-6">
+        <WizardToolsStep
+          appGroups={APP_GROUPS}
+          catalogLoading={false}
+          selections={selections}
+          onSelectionsChange={setSelections}
+          advancedRules={rules}
+          onAdvancedRulesChange={setRules}
+          newToolsAction={action}
+          onNewToolsActionChange={setAction}
+        />
+      </div>
+    );
+  },
+};
+
+export const WizardStep3: Story = {
+  name: "Wizard — step 3 (Assign)",
+  render: function Step3() {
+    const [selected, setSelected] = useState<Set<string>>(new Set(["a-sage"]));
+    const [companyDefault, setCompanyDefault] = useState(false);
+    return (
+      <div className="mx-auto max-w-3xl p-6">
+        <StepAssign
+          agents={AGENTS}
+          profiles={PROFILES}
+          selectedAgentIds={selected}
+          onToggleAgent={(id) =>
+            setSelected((prev) => {
+              const next = new Set(prev);
+              next.has(id) ? next.delete(id) : next.add(id);
+              return next;
+            })
+          }
+          companyDefault={companyDefault}
+          onCompanyDefault={setCompanyDefault}
+        />
+      </div>
+    );
+  },
+};
diff --git a/ui/storybook/stories/action-card.stories.tsx b/ui/storybook/stories/action-card.stories.tsx
new file mode 100644
index 00000000000..869b070ac91
--- /dev/null
+++ b/ui/storybook/stories/action-card.stories.tsx
@@ -0,0 +1,95 @@
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { ActionCard, ActionCardMobile, BindingsTable } from "@/components/actions/ActionCard";
+
+const binding = {
+  application: "Slack",
+  manifestVersion: "2.4.1",
+  connection: "https://slack.com/api · acme-workspace",
+  catalogSha256: "sha256:9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
+  payloadSha256: "sha256:2c26b46b68ffc68ff99b453c1d30413413422d706483bfa0f98a5e886266e7ae",
+};
+
+const baseProps = {
+  toolName: "slack.post_message",
+  risk: "medium" as const,
+  isWrite: true,
+  binding,
+  input: { channel: "#launch", text: "Deploy v2 is live 🎉", unfurl_links: false },
+  reason: "This tool can write to your workspace, so a human signs off before the agent posts.",
+  policyNumber: 7,
+  expiresInLabel: "expires in 23h 51m",
+};
+
+const meta: Meta<typeof ActionCard> = {
+  title: "Tools & Access/ActionCard",
+  component: ActionCard,
+};
+export default meta;
+
+type Story = StoryObj<typeof ActionCard>;
+
+export const Pending: Story = {
+  render: () => (
+    <div className="max-w-xl p-6">
+      <ActionCard {...baseProps} />
+    </div>
+  ),
+};
+
+export const Stale: Story = {
+  render: () => (
+    <div className="max-w-xl p-6">
+      <ActionCard
+        {...baseProps}
+        variant="stale"
+        binding={{
+          ...binding,
+          catalogSha256: "sha256:7d793037a0760186574b0282f2f435e7a4b1b2b0b822cd15d6c15b0f00a0e3f1",
+          previousCatalogSha256: binding.catalogSha256,
+        }}
+        expiresInLabel="expires in 18h 02m"
+      />
+    </div>
+  ),
+};
+
+export const DesktopSideBySide: Story = {
+  render: () => (
+    <div className="grid max-w-5xl gap-4 p-6 lg:grid-cols-2">
+      <ActionCard {...baseProps} />
+      <ActionCard
+        {...baseProps}
+        variant="stale"
+        binding={{
+          ...binding,
+          catalogSha256: "sha256:7d793037a0760186574b0282f2f435e7a4b1b2b0b822cd15d6c15b0f00a0e3f1",
+          previousCatalogSha256: binding.catalogSha256,
+        }}
+        expiresInLabel="expires in 18h 02m"
+      />
+    </div>
+  ),
+};
+
+export const Mobile: Story = {
+  render: () => (
+    <div className="w-[390px] bg-background p-3">
+      <ActionCardMobile {...baseProps} />
+    </div>
+  ),
+};
+
+export const Bindings: Story = {
+  render: () => (
+    <div className="max-w-md p-6">
+      <BindingsTable
+        rows={[
+          { label: "Application", value: "Slack · manifest v2.4.1" },
+          { label: "Connection", value: "https://slack.com/api · acme-workspace", mono: true },
+          { label: "Catalog", value: "sha256:9f86d08188…f00a08", mono: true },
+          { label: "Payload", value: "sha256:2c26b46b68…66e7ae", mono: true },
+        ]}
+      />
+    </div>
+  ),
+};
diff --git a/ui/storybook/stories/activity-feed.stories.tsx b/ui/storybook/stories/activity-feed.stories.tsx
new file mode 100644
index 00000000000..77b8df695f4
--- /dev/null
+++ b/ui/storybook/stories/activity-feed.stories.tsx
@@ -0,0 +1,181 @@
+import { useMemo } from "react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { queryKeys } from "@/lib/queryKeys";
+import type { ToolGatewayActivityEvent } from "@/api/tools";
+import { AuditTab } from "@/pages/tools/AuditTab";
+
+const COMPANY = "company-storybook";
+const MIN = 60 * 1000;
+
+function event(overrides: Partial<ToolGatewayActivityEvent> = {}): ToolGatewayActivityEvent {
+  return {
+    id: "evt-1",
+    companyId: COMPANY,
+    action: "tool_gateway.call_completed",
+    actorType: "agent",
+    actorId: "agent-fable",
+    entityType: "issue",
+    entityId: "run-1",
+    agentId: "agent-fable",
+    runId: "11111111-1111-4111-8111-111111111111",
+    applicationId: "app-gmail",
+    connectionId: "conn-gmail",
+    agentDisplayName: "Fable",
+    appDisplayName: "Gmail",
+    applicationDisplayName: "Gmail",
+    connectionDisplayName: "Gmail",
+    toolDisplayName: "Send Email",
+    normalizedOutcome: "allowed",
+    details: {
+      reasonCode: "profile_allows_tool",
+      tool: "mail:send_email",
+      issueId: "issue-1",
+      runId: "11111111-1111-4111-8111-111111111111",
+      matchedPolicyIds: ["pol-allow-mail"],
+    },
+    createdAt: new Date(Date.now() - 5 * MIN).toISOString(),
+    ...overrides,
+  };
+}
+
+const EVENTS: ToolGatewayActivityEvent[] = [
+  event(),
+  event({
+    id: "evt-2",
+    action: "tool_gateway.call_denied",
+    agentDisplayName: "Scout",
+    actorId: "agent-scout",
+    agentId: "agent-scout",
+    toolDisplayName: "Delete Spreadsheet",
+    appDisplayName: "Google Sheets",
+    applicationDisplayName: "Google Sheets",
+    connectionDisplayName: "Google Sheets",
+    normalizedOutcome: "blocked",
+    details: {
+      reasonCode: "deny_policy_block",
+      tool: "sheets:delete_spreadsheet",
+      issueId: "issue-2",
+      runId: "22222222-2222-4222-8222-222222222222",
+      matchedPolicyIds: ["pol-block-destructive"],
+    },
+    createdAt: new Date(Date.now() - 12 * MIN).toISOString(),
+  }),
+  event({
+    id: "evt-3",
+    action: "tool_gateway.approval_requested",
+    agentDisplayName: "Fable",
+    toolDisplayName: "Send Money",
+    appDisplayName: "Mercury",
+    applicationDisplayName: "Mercury",
+    connectionDisplayName: "Mercury",
+    normalizedOutcome: "asked_first",
+    details: { reasonCode: "requires_approval_policy", tool: "mercury:send_money", issueId: "issue-3" },
+    createdAt: new Date(Date.now() - 26 * MIN).toISOString(),
+  }),
+  event({
+    id: "evt-4",
+    action: "tool_gateway.call_failed",
+    agentDisplayName: "Scout",
+    toolDisplayName: "Create Issue",
+    appDisplayName: "GitHub",
+    applicationDisplayName: "GitHub",
+    connectionDisplayName: "GitHub",
+    normalizedOutcome: "failed",
+    details: { reasonCode: "tool_failed", tool: "github:create_issue", issueId: "issue-4" },
+    createdAt: new Date(Date.now() - 48 * MIN).toISOString(),
+  }),
+  event({
+    id: "evt-5",
+    action: "tool_gateway.call_deferred",
+    agentDisplayName: "Fable",
+    toolDisplayName: "Read Channel",
+    appDisplayName: "Slack",
+    applicationDisplayName: "Slack",
+    connectionDisplayName: "Slack",
+    normalizedOutcome: "waiting",
+    details: { reasonCode: "defer_runtime", tool: "slack:read_channel" },
+    createdAt: new Date(Date.now() - 70 * MIN).toISOString(),
+  }),
+];
+
+const APPLICATIONS = [
+  { id: "app-gmail", name: "Gmail" },
+  { id: "app-sheets", name: "Google Sheets" },
+  { id: "app-mercury", name: "Mercury" },
+  { id: "app-github", name: "GitHub" },
+  { id: "app-slack", name: "Slack" },
+];
+
+const AGENTS = [
+  { id: "agent-fable", name: "Fable" },
+  { id: "agent-scout", name: "Scout" },
+];
+
+const POLICIES = [
+  { id: "pol-allow-mail", name: "Fable can email customers" },
+  { id: "pol-block-destructive", name: "destructive actions → Block" },
+];
+
+function defaultActivityKey() {
+  return queryKeys.tools.activity(COMPANY, { window: "24h" });
+}
+
+function Seeded({ events }: { events: ToolGatewayActivityEvent[] }) {
+  const client = useMemo(() => {
+    const c = new QueryClient({
+      defaultOptions: {
+        queries: { staleTime: Infinity, gcTime: Infinity, retry: false, refetchOnMount: false },
+      },
+    });
+    c.setQueryData(defaultActivityKey(), {
+      pages: [{ events, nextCursor: null }],
+      pageParams: [null],
+    });
+    // Filtered-empty: typing "refund" resolves to an empty page.
+    c.setQueryData(queryKeys.tools.activity(COMPANY, { window: "24h", search: "refund" }), {
+      pages: [{ events: [], nextCursor: null }],
+      pageParams: [null],
+    });
+    c.setQueryData(queryKeys.tools.applications(COMPANY), { applications: APPLICATIONS });
+    c.setQueryData(queryKeys.agents.list(COMPANY), AGENTS);
+    c.setQueryData(queryKeys.tools.policies(COMPANY), { policies: POLICIES });
+    return c;
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, []);
+  return (
+    <QueryClientProvider client={client}>
+      <div className="mx-auto max-w-5xl p-6">
+        <AuditTab companyId={COMPANY} />
+      </div>
+    </QueryClientProvider>
+  );
+}
+
+const meta: Meta = {
+  title: "Tools/Activity (audit feed)",
+  parameters: { layout: "fullscreen" },
+};
+export default meta;
+
+type Story = StoryObj;
+
+export const Populated: Story = {
+  name: "Populated",
+  render: () => <Seeded events={EVENTS} />,
+};
+
+export const RowExpanded: Story = {
+  name: "Row expanded (use the chevron)",
+  render: () => <Seeded events={EVENTS} />,
+};
+
+export const TrueEmpty: Story = {
+  name: "Empty",
+  render: () => <Seeded events={[]} />,
+};
+
+export const FilteredEmpty: Story = {
+  name: "Filtered empty (type 'refund' in search)",
+  render: () => <Seeded events={EVENTS} />,
+};
diff --git a/ui/storybook/stories/app-activity-lifecycle.stories.tsx b/ui/storybook/stories/app-activity-lifecycle.stories.tsx
new file mode 100644
index 00000000000..16252d42b55
--- /dev/null
+++ b/ui/storybook/stories/app-activity-lifecycle.stories.tsx
@@ -0,0 +1,150 @@
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import type {
+  Agent,
+  ToolCallEvent,
+  ToolConnectionLifecycleEvent,
+} from "@paperclipai/shared";
+import { ActivityPanel } from "@/pages/apps/app-detail/ActivityPanel";
+import type { ActivityPanelProps } from "@/pages/apps/app-detail/types";
+
+const CONNECTION_ID = "conn-sheets";
+const MIN = 60 * 1000;
+
+const AGENTS = [
+  { id: "agent-coder", name: "Coder" },
+  { id: "agent-scout", name: "Scout" },
+] as unknown as Agent[];
+
+function callEvent(overrides: Partial<ToolCallEvent>): ToolCallEvent {
+  return {
+    id: "evt",
+    companyId: "company-storybook",
+    eventType: "call_completed",
+    actorType: "agent",
+    actorId: "agent-coder",
+    agentId: "agent-coder",
+    runId: null,
+    issueId: null,
+    applicationId: "app-sheets",
+    connectionId: CONNECTION_ID,
+    catalogEntryId: null,
+    invocationId: null,
+    actionRequestId: null,
+    runtimeSlotId: null,
+    toolName: "Get value",
+    decision: "allow",
+    matchedPolicyIds: [],
+    reasonCode: null,
+    outcome: "success",
+    latencyMs: 120,
+    requestHash: null,
+    requestSummary: null,
+    resultHash: null,
+    resultSummary: null,
+    resultSizeBytes: null,
+    redactionPlan: null,
+    rateLimitState: null,
+    metadata: null,
+    errorCode: null,
+    errorMessage: null,
+    createdAt: new Date(Date.now() - 40 * MIN),
+    ...overrides,
+  } as ToolCallEvent;
+}
+
+function lifecycle(overrides: Partial<ToolConnectionLifecycleEvent>): ToolConnectionLifecycleEvent {
+  return {
+    id: "life",
+    connectionId: CONNECTION_ID,
+    type: "app_connected",
+    actorType: "user",
+    actorId: "user-board",
+    agentId: null,
+    actorDisplayName: "Dotta",
+    details: null,
+    createdAt: new Date(Date.now() - 90 * MIN),
+    ...overrides,
+  };
+}
+
+const LIFECYCLE_EVENTS: ToolConnectionLifecycleEvent[] = [
+  lifecycle({ id: "life-connected", type: "app_connected", createdAt: new Date(Date.now() - 180 * MIN) }),
+  lifecycle({
+    id: "life-allowlist",
+    type: "allowlist_changed",
+    details: { added: 1, removed: 0, total: 3 },
+    createdAt: new Date(Date.now() - 120 * MIN),
+  }),
+  lifecycle({
+    id: "life-quarantine",
+    type: "actions_quarantined",
+    actorType: "system",
+    actorId: null,
+    actorDisplayName: null,
+    details: { count: 2 },
+    createdAt: new Date(Date.now() - 60 * MIN),
+  }),
+  lifecycle({ id: "life-paused", type: "app_paused", details: { enabled: false }, createdAt: new Date(Date.now() - 25 * MIN) }),
+  lifecycle({ id: "life-resumed", type: "app_resumed", details: { enabled: true }, createdAt: new Date(Date.now() - 10 * MIN) }),
+];
+
+const CALL_EVENTS: ToolCallEvent[] = [
+  callEvent({ id: "evt-1", toolName: "Get value", createdAt: new Date(Date.now() - 40 * MIN) }),
+  callEvent({
+    id: "evt-2",
+    eventType: "call_denied",
+    toolName: "Delete spreadsheet",
+    outcome: "denied",
+    createdAt: new Date(Date.now() - 15 * MIN),
+  }),
+];
+
+function panelProps(overrides: Partial<ActivityPanelProps> = {}): ActivityPanelProps {
+  return {
+    events: CALL_EVENTS,
+    lifecycleEvents: LIFECYCLE_EVENTS,
+    issues: {},
+    actionRequests: {},
+    loading: false,
+    agents: AGENTS,
+    connectionId: CONNECTION_ID,
+    appName: "Google Sheets (stdio smoke)",
+    ...overrides,
+  };
+}
+
+function Panel(props: ActivityPanelProps) {
+  return (
+    <div className="mx-auto max-w-2xl p-6">
+      <ActivityPanel {...props} />
+    </div>
+  );
+}
+
+const meta: Meta = {
+  title: "Apps/App detail · Activity (lifecycle)",
+  parameters: { layout: "fullscreen" },
+};
+export default meta;
+
+type Story = StoryObj;
+
+export const MixedTimeline: Story = {
+  name: "Tool calls + lifecycle",
+  render: () => <Panel {...panelProps()} />,
+};
+
+export const LifecycleOnly: Story = {
+  name: "Lifecycle only",
+  render: () => <Panel {...panelProps({ events: [] })} />,
+};
+
+export const Loading: Story = {
+  name: "Loading",
+  render: () => <Panel {...panelProps({ loading: true })} />,
+};
+
+export const Empty: Story = {
+  name: "Empty",
+  render: () => <Panel {...panelProps({ events: [], lifecycleEvents: [] })} />,
+};
diff --git a/ui/storybook/stories/apps-connect-discoverability.stories.tsx b/ui/storybook/stories/apps-connect-discoverability.stories.tsx
new file mode 100644
index 00000000000..3868381f741
--- /dev/null
+++ b/ui/storybook/stories/apps-connect-discoverability.stories.tsx
@@ -0,0 +1,232 @@
+import { useEffect, useMemo, useRef } from "react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import {
+  TOOL_APP_GALLERY,
+  type AppGalleryEntry,
+  type McpJsonImportPreview,
+} from "@paperclipai/shared";
+import { queryKeys } from "@/lib/queryKeys";
+import { AppsConnect } from "@/pages/apps/AppsConnect";
+import { PasteConfigTab } from "@/pages/tools/PasteConfigTab";
+
+/**
+ * PAP-11091 — discoverability copy for remote MCP URLs.
+ *
+ * Two surfaces, captured for the UXDesigner re-review:
+ *  1. Apps Connect gallery — the "Connect with a link" field now advertises that
+ *     any remote tool URL (incl. a local MCP server) works, with a localhost
+ *     example in the placeholder.
+ *  2. The Advanced "Paste a config" tab — a hint that routes a bare URL back to
+ *     the gallery's link flow.
+ */
+
+const COMPANY = "company-storybook";
+
+const GALLERY: AppGalleryEntry[] = TOOL_APP_GALLERY.slice(0, 6) as AppGalleryEntry[];
+
+function seededClient() {
+  const c = new QueryClient({
+    defaultOptions: {
+      queries: { staleTime: Infinity, gcTime: Infinity, retry: false, refetchOnMount: false },
+    },
+  });
+  c.setQueryData(queryKeys.apps.gallery(COMPANY), { apps: GALLERY });
+  return c;
+}
+
+function GalleryHost() {
+  const client = useMemo(() => seededClient(), []);
+  return (
+    <QueryClientProvider client={client}>
+      <div className="mx-auto max-w-4xl p-6">
+        <AppsConnect />
+      </div>
+    </QueryClientProvider>
+  );
+}
+
+function PasteConfigHost() {
+  const client = useMemo(() => seededClient(), []);
+  return (
+    <QueryClientProvider client={client}>
+      <div className="mx-auto max-w-3xl p-6">
+        <PasteConfigTab companyId={COMPANY} />
+      </div>
+    </QueryClientProvider>
+  );
+}
+
+const meta: Meta = {
+  title: "Apps/Connect discoverability (PAP-11091)",
+  parameters: { layout: "fullscreen" },
+};
+export default meta;
+
+type Story = StoryObj;
+
+export const GalleryLinkAffordance: Story = {
+  name: "Gallery — Connect with a link",
+  render: () => <GalleryHost />,
+};
+
+export const PasteConfigRedirectHint: Story = {
+  name: "Paste a config — redirect hint",
+  render: () => <PasteConfigHost />,
+};
+
+/**
+ * PAP-11092 / PAP-11094 — preview states after "Check config" runs.
+ *
+ * Stubs the import-json POST so the preview renders without a backend, then
+ * auto-fills the textarea and clicks "Check config" so the screenshot lands on
+ * the activation hand-off (Continue buttons + footer copy).
+ */
+function PreviewHost({ preview, snippet }: { preview: McpJsonImportPreview; snippet: string }) {
+  const client = useMemo(() => seededClient(), []);
+  const ranRef = useRef(false);
+
+  useEffect(() => {
+    const realFetch = window.fetch;
+    window.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {
+      const url = typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
+      if (url.includes("/tools/mcp/import-json")) {
+        return new Response(JSON.stringify(preview), {
+          status: 200,
+          headers: { "Content-Type": "application/json" },
+        });
+      }
+      return realFetch(input as RequestInfo, init);
+    }) as typeof window.fetch;
+    return () => {
+      window.fetch = realFetch;
+    };
+  }, [preview]);
+
+  useEffect(() => {
+    if (ranRef.current) return;
+    let cancelled = false;
+    const tick = window.setInterval(() => {
+      if (cancelled) return;
+      const textarea = document.querySelector<HTMLTextAreaElement>("textarea");
+      const button = Array.from(document.querySelectorAll<HTMLButtonElement>("button")).find((b) =>
+        b.textContent?.trim().startsWith("Check config"),
+      );
+      if (!textarea || !button) return;
+      const setter = Object.getOwnPropertyDescriptor(window.HTMLTextAreaElement.prototype, "value")?.set;
+      setter?.call(textarea, snippet);
+      textarea.dispatchEvent(new Event("input", { bubbles: true }));
+      window.setTimeout(() => {
+        button.click();
+        ranRef.current = true;
+        window.clearInterval(tick);
+      }, 30);
+    }, 50);
+    return () => {
+      cancelled = true;
+      window.clearInterval(tick);
+    };
+  }, [snippet]);
+
+  return (
+    <QueryClientProvider client={client}>
+      <div className="mx-auto max-w-3xl p-6">
+        <PasteConfigTab companyId={COMPANY} />
+      </div>
+    </QueryClientProvider>
+  );
+}
+
+const REMOTE_PREVIEW: McpJsonImportPreview = {
+  drafts: [
+    {
+      name: "kv-demo",
+      transport: "remote_http",
+      status: "draft",
+      config: { url: "http://127.0.0.1:8848/mcp" },
+      credentialRefs: [],
+      credentialFields: [],
+      warnings: [],
+    },
+  ],
+};
+
+const MIXED_PREVIEW: McpJsonImportPreview = {
+  drafts: [
+    {
+      name: "linear",
+      transport: "remote_http",
+      status: "draft",
+      config: { url: "https://mcp.linear.app/sse" },
+      credentialRefs: [
+        { name: "LINEAR_API_KEY", secretId: "draft-1", placement: "header", key: "LINEAR_API_KEY" },
+      ],
+      credentialFields: [{
+        configPath: "headers.LINEAR_API_KEY",
+        label: "LINEAR_API_KEY",
+        placement: "header",
+        key: "LINEAR_API_KEY",
+        prefix: null,
+        required: true,
+      }],
+      warnings: [],
+    },
+    {
+      name: "github",
+      transport: "local_stdio",
+      status: "draft",
+      config: { importedCommand: "npx -y @modelcontextprotocol/server-github", importedArgs: [] },
+      credentialRefs: [
+        { name: "GITHUB_TOKEN", secretId: "draft-2", placement: "env", key: "GITHUB_TOKEN" },
+      ],
+      credentialFields: [],
+      warnings: ["Imported stdio commands stay draft-only unless mapped to an approved Paperclip template."],
+    },
+  ],
+};
+
+const STDIO_PREVIEW: McpJsonImportPreview = {
+  drafts: [
+    {
+      name: "github",
+      transport: "local_stdio",
+      status: "draft",
+      config: { importedCommand: "npx -y @modelcontextprotocol/server-github", importedArgs: [] },
+      credentialRefs: [
+        { name: "GITHUB_TOKEN", secretId: "draft-3", placement: "env", key: "GITHUB_TOKEN" },
+      ],
+      credentialFields: [],
+      warnings: ["Imported stdio commands stay draft-only unless mapped to an approved Paperclip template."],
+    },
+  ],
+};
+
+export const PasteConfigPreviewRemote: Story = {
+  name: "Paste a config — remote draft (check actions)",
+  render: () => (
+    <PreviewHost
+      preview={REMOTE_PREVIEW}
+      snippet='{ "mcpServers": { "kv-demo": { "url": "http://127.0.0.1:8848/mcp" } } }'
+    />
+  ),
+};
+
+export const PasteConfigPreviewMixed: Story = {
+  name: "Paste a config — mixed remote + stdio",
+  render: () => (
+    <PreviewHost
+      preview={MIXED_PREVIEW}
+      snippet='{ "mcpServers": { "linear": { "url": "https://mcp.linear.app/sse" }, "github": { "command": "npx -y @modelcontextprotocol/server-github" } } }'
+    />
+  ),
+};
+
+export const PasteConfigPreviewStdioOnly: Story = {
+  name: "Paste a config — stdio only (draft, no activation)",
+  render: () => (
+    <PreviewHost
+      preview={STDIO_PREVIEW}
+      snippet='{ "mcpServers": { "github": { "command": "npx -y @modelcontextprotocol/server-github" } } }'
+    />
+  ),
+};
diff --git a/ui/storybook/stories/apps-connect-name.stories.tsx b/ui/storybook/stories/apps-connect-name.stories.tsx
new file mode 100644
index 00000000000..09a4510dfcb
--- /dev/null
+++ b/ui/storybook/stories/apps-connect-name.stories.tsx
@@ -0,0 +1,100 @@
+import { useEffect, useMemo, useRef } from "react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { TOOL_APP_GALLERY, type AppGalleryEntry } from "@paperclipai/shared";
+import { queryKeys } from "@/lib/queryKeys";
+import { AppsConnect } from "@/pages/apps/AppsConnect";
+
+/**
+ * PAP-11283 — the gallery Connect wizard names the connection at create time.
+ *
+ * The key step now leads with a Name field (default = the app name) so two
+ * connections to the same app (e.g. a stdio and an HTTP Google Sheets) can be
+ * told apart in the Apps list without a detail-page rename hop.
+ */
+
+const COMPANY = "company-storybook";
+
+// Zapier is an api_key gallery app, so the key step renders both the new Name
+// field and a credential input — a representative shape for this screenshot.
+const ZAPIER = TOOL_APP_GALLERY.find((e) => e.key === "zapier") as AppGalleryEntry;
+const GALLERY: AppGalleryEntry[] = [ZAPIER];
+
+function seededClient() {
+  const c = new QueryClient({
+    defaultOptions: {
+      queries: { staleTime: Infinity, gcTime: Infinity, retry: false, refetchOnMount: false },
+    },
+  });
+  c.setQueryData(queryKeys.apps.gallery(COMPANY), { apps: GALLERY });
+  return c;
+}
+
+/**
+ * Auto-advances into the key step by clicking the first gallery card, then —
+ * for the custom-name variant — types a distinct name so the screenshot lands
+ * on the edited field.
+ */
+function KeyStepHost({ customName }: { customName?: string }) {
+  const client = useMemo(() => seededClient(), []);
+  const ranRef = useRef(false);
+
+  useEffect(() => {
+    if (ranRef.current) return;
+    let cancelled = false;
+    const tick = window.setInterval(() => {
+      if (cancelled) return;
+      const card = Array.from(document.querySelectorAll<HTMLButtonElement>("button")).find((b) =>
+        b.textContent?.includes("Zapier"),
+      );
+      if (!card) return;
+      card.click();
+      ranRef.current = true;
+      window.clearInterval(tick);
+      if (customName) {
+        window.setTimeout(() => {
+          const nameInput = Array.from(document.querySelectorAll<HTMLInputElement>("input")).find(
+            (i) => i.getAttribute("placeholder") === "My app",
+          );
+          if (!nameInput) return;
+          const setter = Object.getOwnPropertyDescriptor(
+            window.HTMLInputElement.prototype,
+            "value",
+          )?.set;
+          setter?.call(nameInput, customName);
+          nameInput.dispatchEvent(new Event("input", { bubbles: true }));
+        }, 30);
+      }
+    }, 50);
+    return () => {
+      cancelled = true;
+      window.clearInterval(tick);
+    };
+  }, [customName]);
+
+  return (
+    <QueryClientProvider client={client}>
+      <div className="mx-auto max-w-4xl p-6">
+        <AppsConnect />
+      </div>
+    </QueryClientProvider>
+  );
+}
+
+const meta: Meta = {
+  title: "Apps/Connect name at create time (PAP-11283)",
+  parameters: { layout: "fullscreen" },
+};
+export default meta;
+
+type Story = StoryObj;
+
+export const DefaultName: Story = {
+  name: "Gallery key step — default name",
+  render: () => <KeyStepHost />,
+};
+
+export const CustomName: Story = {
+  name: "Gallery key step — custom name",
+  render: () => <KeyStepHost customName="Zapier (stdio smoke)" />,
+};
diff --git a/ui/storybook/stories/gateways-tab.stories.tsx b/ui/storybook/stories/gateways-tab.stories.tsx
new file mode 100644
index 00000000000..1a24d272db1
--- /dev/null
+++ b/ui/storybook/stories/gateways-tab.stories.tsx
@@ -0,0 +1,265 @@
+import { useMemo } from "react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import type { ToolMcpGatewayWithTokens } from "@paperclipai/shared";
+import { ToastProvider } from "@/context/ToastContext";
+import { queryKeys } from "@/lib/queryKeys";
+import { GatewaysTab } from "@/pages/tools/GatewaysTab";
+
+const COMPANY = "company-storybook";
+
+const POPULATED: ToolMcpGatewayWithTokens[] = [
+  {
+    id: "gw-1",
+    companyId: COMPANY,
+    name: "Engineering inbox",
+    slug: "engineering-inbox",
+    description: "Shared MCP endpoint for the engineering org's editors and IDEs.",
+    status: "active",
+    profileId: "profile-eng",
+    agentId: null,
+    projectId: null,
+    issueId: null,
+    endpointPath: "/api/mcp/gateways/engineering-inbox",
+    metadata: null,
+    createdByAgentId: null,
+    createdByUserId: "user-dotta",
+    createdAt: new Date("2026-06-10T12:00:00Z"),
+    updatedAt: new Date("2026-06-15T18:00:00Z"),
+    tokens: [
+      {
+        id: "tok-1",
+        companyId: COMPANY,
+        gatewayId: "gw-1",
+        name: "Dotta's MacBook",
+        expiresAt: new Date("2026-09-01T00:00:00Z"),
+        lastUsedAt: new Date("2026-06-16T08:00:00Z"),
+        revokedAt: null,
+        createdByAgentId: null,
+        createdByUserId: "user-dotta",
+        createdAt: new Date("2026-06-10T12:00:00Z"),
+        updatedAt: new Date("2026-06-16T08:00:00Z"),
+      },
+      {
+        id: "tok-2",
+        companyId: COMPANY,
+        gatewayId: "gw-1",
+        name: "CI runner",
+        expiresAt: null,
+        lastUsedAt: null,
+        revokedAt: null,
+        createdByAgentId: null,
+        createdByUserId: "user-dotta",
+        createdAt: new Date("2026-06-11T09:00:00Z"),
+        updatedAt: new Date("2026-06-11T09:00:00Z"),
+      },
+      {
+        id: "tok-3",
+        companyId: COMPANY,
+        gatewayId: "gw-1",
+        name: "Old laptop (rotated)",
+        expiresAt: null,
+        lastUsedAt: new Date("2026-04-01T10:00:00Z"),
+        revokedAt: new Date("2026-05-15T16:00:00Z"),
+        createdByAgentId: null,
+        createdByUserId: "user-dotta",
+        createdAt: new Date("2026-04-01T09:00:00Z"),
+        updatedAt: new Date("2026-05-15T16:00:00Z"),
+      },
+    ],
+    clientSnippets: [
+      {
+        client: "cursor",
+        label: "Cursor",
+        config: {
+          mcpServers: {
+            "paperclip-engineering-inbox": {
+              url: "https://paperclip.app/api/mcp/gateways/engineering-inbox",
+              headers: { Authorization: "Bearer YOUR_TOKEN" },
+            },
+          },
+        },
+        notes: ["Paste into ~/.cursor/mcp.json"],
+      },
+      {
+        client: "claude_desktop",
+        label: "Claude Desktop",
+        config: {
+          mcpServers: {
+            "paperclip-engineering-inbox": {
+              url: "https://paperclip.app/api/mcp/gateways/engineering-inbox",
+              headers: { Authorization: "Bearer YOUR_TOKEN" },
+            },
+          },
+        },
+        notes: ["Edit ~/Library/Application Support/Claude/claude_desktop_config.json"],
+      },
+      {
+        client: "vscode",
+        label: "VS Code",
+        config: {
+          servers: {
+            "paperclip-engineering-inbox": {
+              type: "http",
+              url: "https://paperclip.app/api/mcp/gateways/engineering-inbox",
+              headers: { Authorization: "Bearer YOUR_TOKEN" },
+            },
+          },
+        },
+        notes: [],
+      },
+    ],
+  } as unknown as ToolMcpGatewayWithTokens,
+  {
+    id: "gw-2",
+    companyId: COMPANY,
+    name: "Support ops (read-only)",
+    slug: "support-ops",
+    description: null,
+    status: "active",
+    profileId: "profile-support",
+    agentId: null,
+    projectId: null,
+    issueId: null,
+    endpointPath: "/api/mcp/gateways/support-ops",
+    metadata: null,
+    createdByAgentId: null,
+    createdByUserId: "user-dotta",
+    createdAt: new Date("2026-06-12T10:00:00Z"),
+    updatedAt: new Date("2026-06-12T10:00:00Z"),
+    tokens: [],
+    clientSnippets: [
+      {
+        client: "claude_code",
+        label: "Claude Code",
+        config: {
+          mcpServers: {
+            "paperclip-support-ops": {
+              url: "https://paperclip.app/api/mcp/gateways/support-ops",
+              headers: { Authorization: "Bearer YOUR_TOKEN" },
+            },
+          },
+        },
+        notes: [],
+      },
+    ],
+  } as unknown as ToolMcpGatewayWithTokens,
+  {
+    id: "gw-3",
+    companyId: COMPANY,
+    name: "Disabled legacy gateway with an unusually long human-readable name for truncation testing",
+    slug: "legacy-long",
+    description:
+      "Earlier shared endpoint kept around for one Cursor user who hasn't migrated yet. Will be removed in July.",
+    status: "disabled",
+    profileId: "profile-legacy",
+    agentId: null,
+    projectId: null,
+    issueId: null,
+    endpointPath: "/api/mcp/gateways/legacy-very-long-slug-for-overflow-testing-of-the-mono-chip-on-mobile-and-desktop",
+    metadata: null,
+    createdByAgentId: null,
+    createdByUserId: "user-dotta",
+    createdAt: new Date("2026-03-01T10:00:00Z"),
+    updatedAt: new Date("2026-06-01T10:00:00Z"),
+    tokens: [
+      {
+        id: "tok-4",
+        companyId: COMPANY,
+        gatewayId: "gw-3",
+        name: "Legacy IDE",
+        expiresAt: new Date("2026-06-30T00:00:00Z"),
+        lastUsedAt: null,
+        revokedAt: null,
+        createdByAgentId: null,
+        createdByUserId: "user-dotta",
+        createdAt: new Date("2026-03-01T10:00:00Z"),
+        updatedAt: new Date("2026-03-01T10:00:00Z"),
+      },
+    ],
+    clientSnippets: [],
+  } as unknown as ToolMcpGatewayWithTokens,
+];
+
+function seededClient(gateways: ToolMcpGatewayWithTokens[]) {
+  const c = new QueryClient({
+    defaultOptions: {
+      queries: { staleTime: Infinity, gcTime: Infinity, retry: false, refetchOnMount: false },
+    },
+  });
+  c.setQueryData(["tools", "gateways", COMPANY], { gateways });
+  c.setQueryData(queryKeys.tools.profiles(COMPANY), {
+    profiles: [
+      profile("profile-eng", "Engineering", 18),
+      profile("profile-support", "Support ops", 7),
+      profile("profile-legacy", "Legacy read-only", 3),
+    ],
+  });
+  c.setQueryData(queryKeys.agents.list(COMPANY), []);
+  c.setQueryData(queryKeys.projects.list(COMPANY), []);
+  return c;
+}
+
+function profile(id: string, name: string, allowedToolCount: number) {
+  return {
+    id,
+    companyId: COMPANY,
+    profileKey: id,
+    name,
+    description: null,
+    status: "active",
+    defaultAction: "deny",
+    newToolsReviewedAt: null,
+    metadata: null,
+    createdAt: new Date("2026-06-01T00:00:00Z"),
+    updatedAt: new Date("2026-06-01T00:00:00Z"),
+    entries: [],
+    bindings: [],
+    summary: {
+      accessMode: "selected",
+      allowedToolCount,
+      allowedApplicationCount: 2,
+      excludedToolCount: 0,
+      totalToolCount: 24,
+      assignmentCount: 1,
+      appliesToAgentCount: 0,
+      isCompanyDefault: false,
+    },
+  };
+}
+
+function GatewaysHost({ gateways }: { gateways: ToolMcpGatewayWithTokens[] }) {
+  const client = useMemo(() => seededClient(gateways), [gateways]);
+  return (
+    <QueryClientProvider client={client}>
+      <ToastProvider>
+        <div className="mx-auto max-w-4xl p-4 sm:p-6">
+          <GatewaysTab companyId={COMPANY} />
+        </div>
+      </ToastProvider>
+    </QueryClientProvider>
+  );
+}
+
+const meta: Meta = {
+  title: "Tools/Gateways (PAP-11182)",
+  parameters: { layout: "fullscreen" },
+};
+export default meta;
+
+type Story = StoryObj;
+
+export const Empty: Story = {
+  name: "Gateways — empty state",
+  render: () => <GatewaysHost gateways={[]} />,
+};
+
+export const Populated: Story = {
+  name: "Gateways — populated",
+  render: () => <GatewaysHost gateways={POPULATED} />,
+};
+
+export const SingleGateway: Story = {
+  name: "Gateways — single gateway with no tokens",
+  render: () => <GatewaysHost gateways={[POPULATED[1]]} />,
+};
diff --git a/ui/storybook/stories/issue-thread-interactions.stories.tsx b/ui/storybook/stories/issue-thread-interactions.stories.tsx
index 23c45f1c77b..f97d4af49a0 100644
--- a/ui/storybook/stories/issue-thread-interactions.stories.tsx
+++ b/ui/storybook/stories/issue-thread-interactions.stories.tsx
@@ -11,8 +11,15 @@ import {
   acceptedRequestConfirmationInteraction,
   boundedRequestCheckboxConfirmationInteraction,
   commentExpiredRequestConfirmationInteraction,
+  declinedToolActionInteraction,
+  executedToolActionInteraction,
+  expiredToolActionInteraction,
   failedRequestConfirmationInteraction,
+  failedToolActionInteraction,
   genericPendingRequestConfirmationInteraction,
+  pendingToolActionDestructiveInteraction,
+  pendingToolActionWriteInteraction,
+  runningToolActionInteraction,
   issueThreadInteractionComments,
   issueThreadInteractionEvents,
   issueThreadInteractionFixtureMeta,
@@ -647,6 +654,189 @@ export const RequestConfirmationFailed: Story = {
 export const RequestConfirmationAccepted = RequestConfirmationConfirmed;
 export const RequestConfirmationRejected = RequestConfirmationDeclinedWithReason;
 
+// ---------------------------------------------------------------------------
+// MCP tool-approval card (PAP-13745). A `request_confirmation` carrying a
+// `payload.toolAction` renders as the dedicated tool-approval card: identity
+// header, humanized preview, technical-details drawer, and lifecycle states.
+// The governing rule — approve = run — means no terminal state reads "Accepted".
+// ---------------------------------------------------------------------------
+
+function ToolActionCard({
+  interaction,
+  interactive = false,
+}: {
+  interaction: RequestConfirmationInteraction;
+  interactive?: boolean;
+}) {
+  return (
+    <IssueThreadInteractionCard
+      interaction={interaction}
+      agentMap={storybookAgentMap}
+      currentUserId={issueThreadInteractionFixtureMeta.currentUserId}
+      userLabelMap={boardUserLabels}
+      onAcceptInteraction={interactive ? () => undefined : undefined}
+      onRejectInteraction={interactive ? () => undefined : undefined}
+    />
+  );
+}
+
+export const ToolActionPendingWrite: Story = {
+  render: () => (
+    <StoryFrame>
+      <ScenarioCard
+        title="Pending · write"
+        description="A write tool call awaits approval: identity header, WRITE risk badge, humanized preview, collapsible technical details, expiry countdown, and an Approve & run CTA."
+      >
+        <ToolActionCard interaction={pendingToolActionWriteInteraction} interactive />
+      </ScenarioCard>
+    </StoryFrame>
+  ),
+};
+
+export const ToolActionPendingDestructive: Story = {
+  render: () => (
+    <StoryFrame>
+      <ScenarioCard
+        title="Pending · destructive"
+        description="A destructive call takes the red risk badge and a destructive primary button; the countdown sits inside the sub-5-minute urgent window."
+      >
+        <ToolActionCard interaction={pendingToolActionDestructiveInteraction} interactive />
+      </ScenarioCard>
+    </StoryFrame>
+  ),
+};
+
+export const ToolActionRunning: Story = {
+  render: () => (
+    <StoryFrame>
+      <ScenarioCard
+        title="Approved — running…"
+        description="The transient post-approve state: an amber spinner strip that self-resolves to Executed or Failed when the gateway writes back. Buttons are removed to prevent double-submit."
+      >
+        <ToolActionCard interaction={runningToolActionInteraction} />
+      </ScenarioCard>
+    </StoryFrame>
+  ),
+};
+
+export const ToolActionExecuted: Story = {
+  render: () => (
+    <StoryFrame>
+      <ScenarioCard
+        title="Executed"
+        description="The green terminal state reports the real outcome — a result summary plus a deep-link — never a bare checkmark or “Accepted”."
+      >
+        <ToolActionCard interaction={executedToolActionInteraction} />
+      </ScenarioCard>
+    </StoryFrame>
+  ),
+};
+
+export const ToolActionFailed: Story = {
+  render: () => (
+    <StoryFrame>
+      <ScenarioCard
+        title="Failed"
+        description="You approved it and it ran, but the connector errored: amber card, red icon, and the verbatim connector error. Distinct from Declined."
+      >
+        <ToolActionCard interaction={failedToolActionInteraction} />
+      </ScenarioCard>
+    </StoryFrame>
+  ),
+};
+
+export const ToolActionDeclined: Story = {
+  render: () => (
+    <StoryFrame>
+      <ScenarioCard
+        title="Declined"
+        description="You rejected it and nothing ran: red card with a dimmed/greyscale identity header and the decline reason attached."
+      >
+        <ToolActionCard interaction={declinedToolActionInteraction} />
+      </ScenarioCard>
+    </StoryFrame>
+  ),
+};
+
+export const ToolActionExpired: Story = {
+  render: () => (
+    <StoryFrame>
+      <ScenarioCard
+        title="Expired"
+        description="Nobody responded within 60 minutes: a neutral grey (not error-red) card that always states the rule and the recovery path — the agent can request approval again."
+      >
+        <ToolActionCard interaction={expiredToolActionInteraction} />
+      </ScenarioCard>
+    </StoryFrame>
+  ),
+};
+
+export const ToolActionLegacyGeneric: Story = {
+  render: () => (
+    <StoryFrame>
+      <ScenarioCard
+        title="Legacy · no toolAction"
+        description="A confirmation without a toolAction payload keeps the existing generic rendering unchanged — the tool-approval surface is strictly additive."
+      >
+        <ToolActionCard interaction={genericPendingRequestConfirmationInteraction} interactive />
+      </ScenarioCard>
+    </StoryFrame>
+  ),
+};
+
+export const ToolActionAllStates: Story = {
+  render: () => (
+    <StoryFrame>
+      <Section eyebrow="MCP Tool Approval" title="All six lifecycle states (PAP-13745)">
+        <div className="grid gap-6 xl:grid-cols-2">
+          <ScenarioCard title="1 · Pending (write)" description="Awaiting approval — Approve & run.">
+            <ToolActionCard interaction={pendingToolActionWriteInteraction} interactive />
+          </ScenarioCard>
+          <ScenarioCard title="1b · Pending (destructive)" description="Red risk badge, urgent countdown.">
+            <ToolActionCard interaction={pendingToolActionDestructiveInteraction} interactive />
+          </ScenarioCard>
+          <ScenarioCard title="2 · Approved — running…" description="Transient, self-resolving spinner.">
+            <ToolActionCard interaction={runningToolActionInteraction} />
+          </ScenarioCard>
+          <ScenarioCard title="3 · Executed" description="Green, with a result summary.">
+            <ToolActionCard interaction={executedToolActionInteraction} />
+          </ScenarioCard>
+          <ScenarioCard title="4 · Failed" description="Ran, but the connector errored.">
+            <ToolActionCard interaction={failedToolActionInteraction} />
+          </ScenarioCard>
+          <ScenarioCard title="5 · Declined" description="Rejected — nothing ran.">
+            <ToolActionCard interaction={declinedToolActionInteraction} />
+          </ScenarioCard>
+          <ScenarioCard title="6 · Expired" description="No response in 60 min.">
+            <ToolActionCard interaction={expiredToolActionInteraction} />
+          </ScenarioCard>
+          <ScenarioCard title="Legacy · no toolAction" description="Unchanged generic rendering.">
+            <ToolActionCard interaction={genericPendingRequestConfirmationInteraction} interactive />
+          </ScenarioCard>
+        </div>
+      </Section>
+    </StoryFrame>
+  ),
+};
+
+export const ToolActionMobile: Story = {
+  render: () => (
+    <StoryFrame>
+      <ScenarioCard
+        title="Mobile · 390"
+        description="Single column: risk badge wraps under the tool name, actions stack full-width, the technical drawer stays collapsed."
+      >
+        <div className="mx-auto max-w-[358px]">
+          <ToolActionCard interaction={pendingToolActionWriteInteraction} interactive />
+        </div>
+      </ScenarioCard>
+    </StoryFrame>
+  ),
+  parameters: {
+    viewport: { defaultViewport: "mobile1" },
+  },
+};
+
 export const CheckboxConfirmationPending: Story = {
   render: () => (
     <StoryFrame>
diff --git a/ui/storybook/stories/permitted-vs-installed.stories.tsx b/ui/storybook/stories/permitted-vs-installed.stories.tsx
new file mode 100644
index 00000000000..89b3e3076d4
--- /dev/null
+++ b/ui/storybook/stories/permitted-vs-installed.stories.tsx
@@ -0,0 +1,263 @@
+import { useMemo, useState } from "react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import type {
+  Agent,
+  ToolCatalogEntry,
+  ToolConnection,
+} from "@paperclipai/shared";
+import { queryKeys } from "@/lib/queryKeys";
+import { AgentToolsTab } from "@/pages/AgentToolsTab";
+import { PermissionsPanel } from "@/pages/apps/app-detail/PermissionsPanel";
+import { InstallStep } from "@/pages/apps/AppsConnect";
+import type { AccessDraft } from "@/pages/apps/app-detail/types";
+import type { InstallState } from "@/lib/tool-installs";
+
+// ---------------------------------------------------------------------------
+// Phase 3b — Permitted vs Installed UX review harness (PAP-13634).
+// Renders the three changed surfaces at a real viewport so visual craft can be
+// signed off. Fixtures are self-contained; casts keep the stories terse.
+// ---------------------------------------------------------------------------
+
+const COMPANY = "company-review";
+
+const AGENTS: Agent[] = [
+  { id: "a-sage", name: "Sage", status: "active" },
+  { id: "a-atlas", name: "Atlas", status: "active" },
+  { id: "a-nova", name: "Nova", status: "active" },
+  { id: "a-orion", name: "Orion", status: "active" },
+] as unknown as Agent[];
+
+function tool(
+  id: string,
+  toolName: string,
+  cap: "read" | "write" | "destructive",
+  title: string,
+  connectionId: string,
+): ToolCatalogEntry {
+  return {
+    id,
+    companyId: COMPANY,
+    applicationId: "app-gmail",
+    connectionId,
+    entryKind: "tool",
+    toolName,
+    title,
+    description: title,
+    inputSchema: null,
+    outputSchema: null,
+    annotations: null,
+    riskLevel: cap,
+    isReadOnly: cap === "read",
+    isWrite: cap === "write",
+    isDestructive: cap === "destructive",
+    status: "active",
+    addedAt: new Date("2026-06-01T00:00:00Z"),
+    version: null,
+    schemaHash: null,
+    firstSeenAt: new Date("2026-06-01T00:00:00Z"),
+    lastSeenAt: new Date("2026-06-01T00:00:00Z"),
+    reviewedAt: null,
+  } as unknown as ToolCatalogEntry;
+}
+
+const GMAIL_TOOLS = [
+  tool("g-list", "gmail.list", "read", "List messages", "conn-gmail"),
+  tool("g-read", "gmail.read", "read", "Read message", "conn-gmail"),
+  tool("g-send", "gmail.send", "write", "Send message", "conn-gmail"),
+];
+const SLACK_TOOLS = [tool("s-list", "slack.list", "read", "List channels", "conn-slack")];
+
+function connection(id: string, name: string, installs: InstallState): ToolConnection {
+  const rows = [
+    ...(installs.onAll ? [{ targetType: "company", targetId: COMPANY }] : []),
+    ...[...installs.agentIds].map((targetId) => ({ targetType: "agent", targetId })),
+  ].map((r, i) => ({
+    id: `${id}-install-${i}`,
+    companyId: COMPANY,
+    connectionId: id,
+    ...r,
+    createdByAgentId: null,
+    createdByUserId: null,
+    createdAt: new Date("2026-06-01T00:00:00Z"),
+  }));
+  return {
+    id,
+    companyId: COMPANY,
+    name,
+    status: "active",
+    installs: rows,
+  } as unknown as ToolConnection;
+}
+
+const meta: Meta = {
+  title: "Tools/Permitted vs Installed",
+  parameters: { layout: "fullscreen" },
+};
+export default meta;
+type Story = StoryObj;
+
+// --- Surface 1: App detail Permissions tab (PermissionsPanel) --------------
+
+function PanelHarness({ access, install }: { access: AccessDraft; install: InstallState }) {
+  const [state, setState] = useState(install);
+  return (
+    <div className="mx-auto max-w-3xl bg-background p-6">
+      <PermissionsPanel
+        appName="Gmail"
+        access={access}
+        agents={AGENTS}
+        install={state}
+        readOnly={GMAIL_TOOLS.filter((t) => t.isReadOnly)}
+        canChange={GMAIL_TOOLS.filter((t) => !t.isReadOnly)}
+        quarantined={[]}
+        enabledIds={new Set(["g-list", "g-read"])}
+        askFirstIds={new Set(["g-send"])}
+        pending={false}
+        installPending={false}
+        refreshPending={false}
+        onSaveAccess={() => {}}
+        onSaveInstall={setState}
+        onSetActionPermission={() => {}}
+        onTurnOnQuarantined={() => {}}
+        onRefreshActions={() => {}}
+      />
+    </div>
+  );
+}
+
+export const AppDetailInstalledMixed: Story = {
+  name: "1 · App detail — mixed install + auto-extend warning",
+  render: () => (
+    <PanelHarness
+      access={{ mode: "specific", agentIds: new Set(["a-sage", "a-atlas"]) }}
+      install={{ onAll: false, agentIds: new Set(["a-sage", "a-orion"]) }}
+    />
+  ),
+};
+
+export const AppDetailInstalledOnAll: Story = {
+  name: "1 · App detail — installed on all agents",
+  render: () => (
+    <PanelHarness
+      access={{ mode: "all", agentIds: new Set() }}
+      install={{ onAll: true, agentIds: new Set() }}
+    />
+  ),
+};
+
+export const AppDetailPermittedOnly: Story = {
+  name: "1 · App detail — permitted only (not installed)",
+  render: () => (
+    <PanelHarness
+      access={{ mode: "all", agentIds: new Set() }}
+      install={{ onAll: false, agentIds: new Set() }}
+    />
+  ),
+};
+
+// --- Surface 2: Agent detail Tools tab (AgentToolsTab) ---------------------
+
+function SeededAgentTools() {
+  const allowed = [...GMAIL_TOOLS, SLACK_TOOLS[0]];
+  const connections = [
+    connection("conn-gmail", "Gmail", { onAll: false, agentIds: new Set(["a-sage"]) }),
+    connection("conn-slack", "Slack", { onAll: false, agentIds: new Set() }),
+  ];
+  const client = useMemo(() => {
+    const c = new QueryClient({
+      defaultOptions: { queries: { staleTime: Infinity, gcTime: Infinity, retry: false, refetchOnMount: false } },
+    });
+    c.setQueryData(queryKeys.tools.effectiveProfilesForAgent(COMPANY, "a-sage"), {
+      agentId: "a-sage",
+      profiles: [],
+      bindings: [],
+      allowedTools: allowed,
+      allowedToolNames: allowed.map((t) => t.toolName),
+      installedConnections: connections.filter((conn) => conn.id === "conn-gmail"),
+    });
+    c.setQueryData(queryKeys.tools.connections(COMPANY), { connections });
+    c.setQueryData(queryKeys.tools.catalog("conn-gmail"), { catalog: GMAIL_TOOLS });
+    c.setQueryData(queryKeys.tools.catalog("conn-slack"), { catalog: SLACK_TOOLS });
+    return c;
+  }, []);
+  return (
+    <QueryClientProvider client={client}>
+      <div className="mx-auto max-w-6xl bg-background p-6">
+        <AgentToolsTab agent={{ id: "a-sage", name: "Sage" } as never} companyId={COMPANY} />
+      </div>
+    </QueryClientProvider>
+  );
+}
+
+export const AgentToolsInstalledApps: Story = {
+  name: "2 · Agent Tools tab — Installed apps + badges",
+  render: () => <SeededAgentTools />,
+};
+
+// --- Surface 3: Connect flow Install step (InstallStep) --------------------
+
+function SeededInstallStep({
+  access,
+  accessAgentIds,
+  initialMode,
+  initialInstall,
+}: {
+  access: "all" | "specific";
+  accessAgentIds: Set<string>;
+  initialMode: "none" | "specific" | "all";
+  initialInstall: Set<string>;
+}) {
+  const client = useMemo(() => {
+    const c = new QueryClient({
+      defaultOptions: { queries: { staleTime: Infinity, gcTime: Infinity, retry: false, refetchOnMount: false } },
+    });
+    c.setQueryData(queryKeys.agents.list(COMPANY), AGENTS);
+    return c;
+  }, []);
+  const [mode, setMode] = useState(initialMode);
+  const [ids, setIds] = useState(initialInstall);
+  return (
+    <QueryClientProvider client={client}>
+      <div className="bg-background p-6">
+        <InstallStep
+          appName="Gmail"
+          companyId={COMPANY}
+          access={access}
+          accessAgentIds={accessAgentIds}
+          installMode={mode}
+          setInstallMode={setMode}
+          installAgentIds={ids}
+          setInstallAgentIds={setIds}
+          submitting={false}
+          onBack={() => {}}
+          onFinish={() => {}}
+        />
+      </div>
+    </QueryClientProvider>
+  );
+}
+
+export const ConnectInstallSpecific: Story = {
+  name: "3 · Connect — Install step (specific + auto-extend)",
+  render: () => (
+    <SeededInstallStep
+      access="specific"
+      accessAgentIds={new Set(["a-sage", "a-atlas"])}
+      initialMode="specific"
+      initialInstall={new Set(["a-sage", "a-orion"])}
+    />
+  ),
+};
+
+export const ConnectInstallAll: Story = {
+  name: "3 · Connect — Install step (all agents)",
+  render: () => (
+    <SeededInstallStep
+      access="all"
+      accessAgentIds={new Set()}
+      initialMode="all"
+      initialInstall={new Set()}
+    />
+  ),
+};
diff --git a/ui/storybook/stories/policies-tab.stories.tsx b/ui/storybook/stories/policies-tab.stories.tsx
new file mode 100644
index 00000000000..21c957d5eb9
--- /dev/null
+++ b/ui/storybook/stories/policies-tab.stories.tsx
@@ -0,0 +1,311 @@
+import { useEffect, useMemo, useRef } from "react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import type { ToolCatalogEntry, ToolConnection, ToolPolicy } from "@paperclipai/shared";
+import { queryKeys } from "@/lib/queryKeys";
+import { PoliciesTab } from "@/pages/tools/PoliciesTab";
+
+const COMPANY = "company-storybook";
+
+function makeTool(
+  id: string,
+  toolName: string,
+  cap: "read" | "write" | "destructive",
+  title: string,
+  applicationId: string,
+  connectionId: string,
+): ToolCatalogEntry {
+  return {
+    id,
+    companyId: COMPANY,
+    applicationId,
+    connectionId,
+    entryKind: "tool",
+    name: toolName,
+    toolName,
+    title,
+    description: title,
+    inputSchema: null,
+    outputSchema: null,
+    annotations: null,
+    riskLevel: cap,
+    isReadOnly: cap === "read",
+    isWrite: cap !== "read",
+    isDestructive: cap === "destructive",
+    status: "active",
+    addedAt: new Date("2026-06-01T00:00:00Z"),
+    version: null,
+    versionHash: null,
+    schemaHash: null,
+    firstSeenAt: new Date("2026-06-01T00:00:00Z"),
+    lastSeenAt: new Date("2026-06-01T00:00:00Z"),
+    reviewedAt: null,
+    reviewedByAgentId: null,
+    reviewedByUserId: null,
+    createdAt: new Date("2026-06-01T00:00:00Z"),
+    updatedAt: new Date("2026-06-01T00:00:00Z"),
+  } as ToolCatalogEntry;
+}
+
+const GMAIL: ToolCatalogEntry[] = [
+  makeTool("g-list", "gmail.list_messages", "read", "List messages", "app-gmail", "conn-gmail"),
+  makeTool("g-read", "gmail.get_message", "read", "Read a message", "app-gmail", "conn-gmail"),
+  makeTool("g-send", "gmail.send_message", "write", "Send a message", "app-gmail", "conn-gmail"),
+  makeTool("g-draft", "gmail.create_draft", "write", "Create a draft", "app-gmail", "conn-gmail"),
+  makeTool("g-trash", "gmail.trash_message", "destructive", "Move to trash", "app-gmail", "conn-gmail"),
+  makeTool("g-delete", "gmail.delete_message", "destructive", "Permanently delete", "app-gmail", "conn-gmail"),
+];
+
+const SLACK: ToolCatalogEntry[] = [
+  makeTool("s-list", "slack.list_channels", "read", "List channels", "app-slack", "conn-slack"),
+  makeTool("s-post", "slack.post_message", "write", "Post a message", "app-slack", "conn-slack"),
+  makeTool("s-archive", "slack.archive_channel", "destructive", "Archive a channel", "app-slack", "conn-slack"),
+];
+
+const CATALOG: ToolCatalogEntry[] = [...GMAIL, ...SLACK];
+
+const CONNECTIONS: ToolConnection[] = [
+  {
+    id: "conn-gmail",
+    companyId: COMPANY,
+    applicationId: "app-gmail",
+    name: "Gmail",
+    connectionKind: "managed",
+    status: "active",
+    transportConfig: {},
+    credentialSecretRefs: [],
+    healthStatus: "ok",
+    healthCheckedAt: null,
+    lastError: null,
+    enabled: true,
+    createdByAgentId: null,
+    createdByUserId: null,
+    createdAt: new Date("2026-06-01T00:00:00Z"),
+    updatedAt: new Date("2026-06-01T00:00:00Z"),
+  } as ToolConnection,
+  {
+    id: "conn-slack",
+    companyId: COMPANY,
+    applicationId: "app-slack",
+    name: "Slack",
+    connectionKind: "managed",
+    status: "active",
+    transportConfig: {},
+    credentialSecretRefs: [],
+    healthStatus: "ok",
+    healthCheckedAt: null,
+    lastError: null,
+    enabled: true,
+    createdByAgentId: null,
+    createdByUserId: null,
+    createdAt: new Date("2026-06-01T00:00:00Z"),
+    updatedAt: new Date("2026-06-01T00:00:00Z"),
+  } as ToolConnection,
+];
+
+const AGENTS = [
+  { id: "agent-fable", name: "Fable" },
+  { id: "agent-sage", name: "Sage" },
+  { id: "agent-atlas", name: "Atlas" },
+];
+
+const PROJECTS = [
+  { id: "project-launch", name: "Launch" },
+  { id: "project-support", name: "Support" },
+];
+
+function rule(partial: Partial<ToolPolicy> & { id: string; policyType: ToolPolicy["policyType"]; priority: number }): ToolPolicy {
+  return {
+    id: partial.id,
+    companyId: COMPANY,
+    name: partial.name ?? partial.id,
+    description: partial.description ?? null,
+    policyType: partial.policyType,
+    priority: partial.priority,
+    enabled: partial.enabled ?? true,
+    selectors: partial.selectors ?? {},
+    conditions: partial.conditions ?? null,
+    config: partial.config ?? null,
+    createdByAgentId: null,
+    createdByUserId: null,
+    createdAt: new Date("2026-06-01T00:00:00Z"),
+    updatedAt: new Date("2026-06-11T00:00:00Z"),
+  };
+}
+
+const POLICIES: ToolPolicy[] = [
+  rule({
+    id: "p1",
+    name: "Block destructive actions everywhere",
+    policyType: "block",
+    priority: 50,
+    selectors: { riskLevel: "destructive" },
+  }),
+  rule({
+    id: "p2",
+    name: "Ask first when Fable sends mail",
+    policyType: "require_approval",
+    priority: 100,
+    selectors: { agentId: "agent-fable", toolName: "gmail.send_message" },
+  }),
+  rule({
+    id: "p3",
+    name: "Limit Slack posts",
+    policyType: "rate_limit",
+    priority: 150,
+    selectors: { toolName: "slack.post_message" },
+    config: { rateLimit: { limit: 25, windowSeconds: 3600, keyBy: ["agent", "tool"] } },
+  }),
+  rule({
+    id: "p4",
+    name: "Allow Sage to use Gmail",
+    policyType: "allow",
+    priority: 200,
+    selectors: { agentId: "agent-sage", applicationId: "app-gmail" },
+  }),
+  rule({
+    id: "p5",
+    name: "Block critical actions",
+    policyType: "block",
+    priority: 300,
+    selectors: { riskLevel: "critical" },
+  }),
+];
+
+const TRUST_RULES: ToolPolicy[] = [
+  rule({
+    id: "trust-1",
+    policyType: "trust_rule",
+    priority: 1000,
+    selectors: { agentId: "agent-fable", toolName: "gmail.send_message" },
+  }),
+  rule({
+    id: "trust-2",
+    policyType: "trust_rule",
+    priority: 1000,
+    selectors: { agentId: "agent-sage", toolName: "slack.post_message" },
+  }),
+];
+
+const AUDIT_HITS = [
+  { policyId: "p1", count: 14 },
+  { policyId: "p2", count: 6 },
+  { policyId: "p3", count: 22 },
+  { policyId: "p4", count: 3 },
+  { policyId: "p5", count: 1 },
+];
+
+function buildAudit() {
+  const now = Date.now();
+  const rows: Array<{ createdAt: string; details: { matchedPolicyIds: string[] } }> = [];
+  for (const hit of AUDIT_HITS) {
+    for (let i = 0; i < hit.count; i += 1) {
+      rows.push({
+        createdAt: new Date(now - i * 60_000).toISOString(),
+        details: { matchedPolicyIds: [hit.policyId] },
+      });
+    }
+  }
+  return rows;
+}
+
+function seededClient({
+  policies,
+  trustRules,
+}: {
+  policies: ToolPolicy[];
+  trustRules: ToolPolicy[];
+}) {
+  const c = new QueryClient({
+    defaultOptions: {
+      queries: { staleTime: Infinity, gcTime: Infinity, retry: false, refetchOnMount: false },
+    },
+  });
+  c.setQueryData(queryKeys.tools.policies(COMPANY), { policies });
+  c.setQueryData(queryKeys.tools.trustRules(COMPANY), { trustRules });
+  c.setQueryData(queryKeys.tools.audit(COMPANY, 250), buildAudit());
+  c.setQueryData(queryKeys.agents.list(COMPANY), AGENTS);
+  c.setQueryData(queryKeys.projects.list(COMPANY), PROJECTS);
+  c.setQueryData(queryKeys.tools.applications(COMPANY), {
+    applications: [
+      { id: "app-gmail", name: "Gmail" },
+      { id: "app-slack", name: "Slack" },
+    ],
+  });
+  c.setQueryData(queryKeys.tools.connections(COMPANY), { connections: CONNECTIONS });
+  c.setQueryData(queryKeys.tools.catalog("conn-gmail"), { catalog: GMAIL });
+  c.setQueryData(queryKeys.tools.catalog("conn-slack"), { catalog: SLACK });
+  return c;
+}
+
+function findButtonByText(label: string): HTMLButtonElement | null {
+  const buttons = Array.from(document.querySelectorAll<HTMLButtonElement>("button"));
+  return buttons.find((b) => (b.textContent ?? "").trim() === label) ?? null;
+}
+
+function PoliciesHost({
+  policies = POLICIES,
+  trustRules = TRUST_RULES,
+  autoClick,
+}: {
+  policies?: ToolPolicy[];
+  trustRules?: ToolPolicy[];
+  autoClick?: "new-rule" | "test-rule";
+}) {
+  const client = useMemo(() => seededClient({ policies, trustRules }), [policies, trustRules]);
+  const triggered = useRef(false);
+  useEffect(() => {
+    if (!autoClick || triggered.current) return;
+    let cancelled = false;
+    const tryClick = (attempt: number) => {
+      if (cancelled || triggered.current) return;
+      const label = autoClick === "new-rule" ? "New rule" : "Test a rule";
+      const button = findButtonByText(label);
+      if (button) {
+        triggered.current = true;
+        button.click();
+        return;
+      }
+      if (attempt < 30) window.setTimeout(() => tryClick(attempt + 1), 50);
+    };
+    tryClick(0);
+    return () => {
+      cancelled = true;
+    };
+  }, [autoClick]);
+  return (
+    <QueryClientProvider client={client}>
+      <div className="mx-auto max-w-6xl p-6">
+        <PoliciesTab companyId={COMPANY} />
+      </div>
+    </QueryClientProvider>
+  );
+}
+
+const meta: Meta = {
+  title: "Tools/Rules (PAP-11049)",
+  parameters: { layout: "fullscreen" },
+};
+export default meta;
+
+type Story = StoryObj;
+
+export const IndexPopulated: Story = {
+  name: "Rules index — populated",
+  render: () => <PoliciesHost />,
+};
+
+export const Empty: Story = {
+  name: "Rules — empty state",
+  render: () => <PoliciesHost policies={[]} trustRules={[]} />,
+};
+
+export const BuilderNewRule: Story = {
+  name: "Rule builder — after New rule",
+  render: () => <PoliciesHost autoClick="new-rule" />,
+};
+
+export const TestRuleSlideover: Story = {
+  name: "Test a rule — slide-over",
+  render: () => <PoliciesHost autoClick="test-rule" />,
+};
diff --git a/ui/storybook/stories/runtime-health.stories.tsx b/ui/storybook/stories/runtime-health.stories.tsx
new file mode 100644
index 00000000000..24403ca22bd
--- /dev/null
+++ b/ui/storybook/stories/runtime-health.stories.tsx
@@ -0,0 +1,246 @@
+import { useMemo } from "react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import type {
+  ToolConnection,
+  ToolRuntimeAlertRecommendation,
+  ToolRuntimeHealthSummary,
+  ToolRuntimeSlot,
+} from "@paperclipai/shared";
+import { TooltipProvider } from "@/components/ui/tooltip";
+import { queryKeys } from "@/lib/queryKeys";
+import { RuntimeTab } from "@/pages/tools/RuntimeTab";
+
+const COMPANY = "company-storybook";
+
+function slot(overrides: Partial<ToolRuntimeSlot> = {}): ToolRuntimeSlot {
+  return {
+    id: "slot-gmail",
+    companyId: COMPANY,
+    applicationId: "app-gmail",
+    connectionId: "conn-gmail",
+    projectWorkspaceId: null,
+    executionWorkspaceId: null,
+    issueId: null,
+    ownerScopeType: "company",
+    ownerScopeId: null,
+    runtimeKind: "local_stdio",
+    slotKey: "gmail-stdio-local",
+    status: "running",
+    reuseKey: null,
+    workspaceScope: null,
+    credentialScopeHash: null,
+    provider: null,
+    providerRef: null,
+    processId: 41832,
+    commandTemplateKey: "gmail",
+    healthStatus: "healthy",
+    lastHealthCheckAt: null,
+    idleExpiresAt: null,
+    startedAt: new Date("2026-06-13T10:46:00Z"),
+    stoppedAt: null,
+    lastUsedAt: new Date("2026-06-13T12:55:00Z"),
+    lastError: null,
+    metadata: null,
+    createdAt: new Date("2026-06-13T10:46:00Z"),
+    updatedAt: new Date("2026-06-13T13:00:00Z"),
+    ...overrides,
+  } as ToolRuntimeSlot;
+}
+
+function connection(overrides: Partial<ToolConnection> = {}): ToolConnection {
+  return {
+    id: "conn-gmail",
+    companyId: COMPANY,
+    applicationId: "app-gmail",
+    name: "Gmail",
+    connectionKind: "managed",
+    transport: "local_stdio",
+    status: "active",
+    transportConfig: {},
+    credentialSecretRefs: [],
+    healthStatus: "healthy",
+    healthCheckedAt: null,
+    lastError: null,
+    enabled: true,
+    createdByAgentId: null,
+    createdByUserId: null,
+    createdAt: new Date("2026-06-13T10:46:00Z"),
+    updatedAt: new Date("2026-06-13T13:00:00Z"),
+    ...overrides,
+  } as ToolConnection;
+}
+
+const SLOTS: ToolRuntimeSlot[] = [
+  slot(),
+  slot({
+    id: "slot-sheets",
+    applicationId: "app-sheets",
+    connectionId: "conn-sheets",
+    slotKey: "sheets-stdio-local",
+    commandTemplateKey: "google_sheets",
+    processId: 41877,
+    lastUsedAt: new Date("2026-06-13T12:51:00Z"),
+  }),
+  slot({
+    id: "slot-slack",
+    applicationId: "app-slack",
+    connectionId: "conn-slack",
+    runtimeKind: "remote_session",
+    slotKey: "slack-remote",
+    commandTemplateKey: null,
+    providerRef: "slack",
+    processId: null,
+    lastUsedAt: new Date("2026-06-13T12:42:00Z"),
+  }),
+  slot({
+    id: "slot-github",
+    applicationId: "app-github",
+    connectionId: "conn-github",
+    slotKey: "github-stdio-local",
+    commandTemplateKey: "github",
+    processId: 41901,
+    lastUsedAt: new Date("2026-06-13T12:59:00Z"),
+  }),
+];
+
+const CONNECTIONS: ToolConnection[] = [
+  connection(),
+  connection({ id: "conn-sheets", applicationId: "app-sheets", name: "Google Sheets" }),
+  connection({ id: "conn-slack", applicationId: "app-slack", name: "Slack", transport: "remote_http" }),
+  connection({ id: "conn-github", applicationId: "app-github", name: "GitHub" }),
+];
+
+function alert(overrides: Partial<ToolRuntimeAlertRecommendation> = {}): ToolRuntimeAlertRecommendation {
+  return {
+    name: "mcp_runtime_stuck_running_slot",
+    severity: "critical",
+    status: "firing",
+    threshold: "Any running slot with no progress for 5 minutes.",
+    observed: "1 stuck running slot(s).",
+    description: "A runtime slot is running but has not recorded progress inside the supervisor stuck-slot window.",
+    firstResponderAction: "Inspect recent audit events and active tool calls; restart the slot only after confirming no healthy call is still in progress.",
+    runbookSection: "runbook.md#stuck-running-slot",
+    ...overrides,
+  };
+}
+
+function health(overrides: Partial<ToolRuntimeHealthSummary> = {}): ToolRuntimeHealthSummary {
+  return {
+    status: "ok",
+    generatedAt: new Date("2026-06-13T13:00:00Z"),
+    runbookPath: "docs/runbooks/mcp-runtime.md",
+    metrics: {
+      windowStartedAt: new Date("2026-06-13T12:00:00Z"),
+      windowEndedAt: new Date("2026-06-13T13:00:00Z"),
+      activeSlots: 4,
+      startingSlots: 0,
+      runningSlots: 4,
+      idleSlots: 0,
+      failedSlots: 0,
+      stoppedSlots: 0,
+      stuckStartingSlots: 0,
+      stuckRunningSlots: 0,
+      capacityDeferralsLastHour: 0,
+      restartAttemptsLastHour: 0,
+      restartSuppressionsLastHour: 0,
+      idleEvictionsLastHour: 0,
+      toolCallsLastHour: 128,
+      toolTimeoutsLastHour: 0,
+      toolFailuresLastHour: 0,
+      timeoutRateLastHour: 0,
+      failureRateLastHour: 0,
+      averageToolLatencyMsLastHour: 1200,
+      p95ToolLatencyMsLastHour: 2100,
+      missingSecretFailuresLastHour: 0,
+      auditWriteFailuresLastHour: 0,
+      activeConnections: 4,
+      disabledConnections: 0,
+      degradedConnections: 0,
+      remoteHttpConnections: 1,
+      localStdioConnections: 3,
+    },
+    supportMatrix: {
+      remoteHttp: { supported: true, note: "" },
+      localStdio: { supported: true, note: "" },
+    },
+    alerts: [],
+    recommendations: [],
+    ...overrides,
+  };
+}
+
+function Seeded({
+  slots,
+  connections,
+  summary,
+}: {
+  slots: ToolRuntimeSlot[];
+  connections: ToolConnection[];
+  summary: ToolRuntimeHealthSummary;
+}) {
+  const client = useMemo(() => {
+    const c = new QueryClient({
+      defaultOptions: { queries: { staleTime: Infinity, gcTime: Infinity, retry: false, refetchOnMount: false } },
+    });
+    c.setQueryData(queryKeys.tools.runtimeSlots(COMPANY), { runtimeSlots: slots });
+    c.setQueryData(queryKeys.tools.runtimeHealth(COMPANY), summary);
+    c.setQueryData(queryKeys.tools.connections(COMPANY), { connections });
+    return c;
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, []);
+  return (
+    <QueryClientProvider client={client}>
+      <TooltipProvider>
+        <div className="mx-auto max-w-5xl p-6">
+          <RuntimeTab companyId={COMPANY} />
+        </div>
+      </TooltipProvider>
+    </QueryClientProvider>
+  );
+}
+
+const meta: Meta = {
+  title: "Tools/Health (runtime)",
+  parameters: { layout: "fullscreen" },
+};
+export default meta;
+
+type Story = StoryObj;
+
+export const AllGood: Story = {
+  name: "All good",
+  render: () => <Seeded slots={SLOTS} connections={CONNECTIONS} summary={health()} />,
+};
+
+export const NeedsAttention: Story = {
+  name: "Needs attention",
+  render: () => (
+    <Seeded
+      slots={[
+        slot({ healthStatus: "error", lastError: "MCP request timed out after 30000ms" }),
+        ...SLOTS.slice(1),
+      ]}
+      connections={[connection({ healthStatus: "degraded" }), ...CONNECTIONS.slice(1)]}
+      summary={health({
+        status: "degraded",
+        metrics: {
+          ...health().metrics,
+          runningSlots: 3,
+          degradedConnections: 1,
+          toolFailuresLastHour: 11,
+          toolTimeoutsLastHour: 3,
+          timeoutRateLastHour: 12,
+          averageToolLatencyMsLastHour: 2400,
+          p95ToolLatencyMsLastHour: 5200,
+        },
+        alerts: [alert(), alert({ name: "mcp_runtime_connection_health_degraded", observed: "1 degraded connection(s), 0 disabled connection(s)." })],
+      })}
+    />
+  ),
+};
+
+export const RowExpanded: Story = {
+  name: "Row expanded (use the chevron)",
+  render: () => <Seeded slots={SLOTS} connections={CONNECTIONS} summary={health()} />,
+};
diff --git a/ui/storybook/stories/test-tab.stories.tsx b/ui/storybook/stories/test-tab.stories.tsx
new file mode 100644
index 00000000000..03ca9ce0ccb
--- /dev/null
+++ b/ui/storybook/stories/test-tab.stories.tsx
@@ -0,0 +1,395 @@
+import { useEffect, useMemo, useRef } from "react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import type {
+  ToolCatalogEntry,
+  ToolConnectionTestAgent,
+  ToolConnectionTestCallResult,
+  ToolConnectionTestDecision,
+} from "@paperclipai/shared";
+import { queryKeys } from "@/lib/queryKeys";
+import { TestPanel } from "@/pages/apps/app-detail/TestPanel";
+
+const CONNECTION = "conn-sheets";
+
+// ---------------------------------------------------------------------------
+// Catalog (12 actions: 7 read, 5 write) — mirrors the PAP-11348 wireframes.
+// ---------------------------------------------------------------------------
+
+function tool(
+  id: string,
+  toolName: string,
+  title: string,
+  description: string,
+  read: boolean,
+  inputSchema: Record<string, unknown> | null = null,
+): ToolCatalogEntry {
+  return {
+    id,
+    companyId: "company-storybook",
+    applicationId: "app-sheets",
+    connectionId: CONNECTION,
+    entryKind: "tool",
+    name: toolName,
+    toolName,
+    title,
+    description,
+    inputSchema,
+    outputSchema: null,
+    annotations: null,
+    riskLevel: read ? "read" : "write",
+    isReadOnly: read,
+    isWrite: !read,
+    isDestructive: false,
+    status: "active",
+    addedAt: new Date("2026-06-01T00:00:00Z"),
+    version: null,
+    versionHash: null,
+    schemaHash: null,
+    firstSeenAt: new Date("2026-06-01T00:00:00Z"),
+    lastSeenAt: new Date("2026-06-01T00:00:00Z"),
+    reviewedAt: null,
+    reviewedByAgentId: null,
+    reviewedByUserId: null,
+    createdAt: new Date("2026-06-01T00:00:00Z"),
+    updatedAt: new Date("2026-06-01T00:00:00Z"),
+  } as ToolCatalogEntry;
+}
+
+const READ_SHEET_SCHEMA = {
+  type: "object",
+  properties: {
+    spreadsheetId: { type: "string", title: "Spreadsheet" },
+    sheet: { type: "string", title: "Sheet" },
+    range: { type: "string", title: "Range", description: "e.g. A1:F50" },
+  },
+  required: ["spreadsheetId", "sheet"],
+};
+
+const APPEND_ROW_SCHEMA = {
+  type: "object",
+  properties: {
+    spreadsheetId: { type: "string", title: "Spreadsheet" },
+    sheet: { type: "string", title: "Sheet" },
+    values: { type: "string", title: "Values", description: "Comma-separated cell values" },
+  },
+  required: ["spreadsheetId", "sheet", "values"],
+};
+
+const DELETE_ROW_SCHEMA = {
+  type: "object",
+  properties: {
+    spreadsheetId: { type: "string", title: "Spreadsheet" },
+    rowNumber: { type: "number", title: "Row number" },
+  },
+  required: ["spreadsheetId", "rowNumber"],
+};
+
+const CATALOG: ToolCatalogEntry[] = [
+  tool("r1", "list_spreadsheets", "List spreadsheets", "See the spreadsheets in this account.", true),
+  tool("r2", "read_sheet", "Read a sheet", "Get rows and cell values from a sheet.", true, READ_SHEET_SCHEMA),
+  tool("r3", "search_rows", "Search rows", "Find rows that match a query.", true),
+  tool("r4", "get_cell", "Get a cell", "Read a single cell value.", true),
+  tool("r5", "list_sheets", "List sheets", "See the tabs in a spreadsheet.", true),
+  tool("r6", "get_metadata", "Get spreadsheet info", "Read a spreadsheet's title and tabs.", true),
+  tool("r7", "describe_columns", "Describe columns", "List the column headers in a sheet.", true),
+  tool("w1", "append_row", "Append a row", "Add a new row to the bottom of a sheet.", false, APPEND_ROW_SCHEMA),
+  tool("w2", "update_cell", "Update a cell", "Change a single cell value.", false),
+  tool("w3", "create_sheet", "Add a sheet", "Create a new tab in a spreadsheet.", false),
+  tool("w4", "clear_range", "Clear a range", "Empty the cells in a range.", false),
+  tool("w5", "delete_row", "Delete a row", "Remove a row from a sheet permanently.", false, DELETE_ROW_SCHEMA),
+];
+
+function decisionTool(entry: ToolCatalogEntry, decision: ToolConnectionTestDecision) {
+  return {
+    toolName: entry.toolName,
+    gatewayToolName: `sheets__${entry.toolName}`,
+    displayName: entry.title,
+    risk: (entry.isReadOnly ? "read" : "write") as "read" | "write" | "destructive",
+    decision,
+    reasonCode: null,
+    matchedPolicyIds: [],
+  };
+}
+
+// Decisions: 9 allowed (7 read + 2 write), 2 ask first, 1 off.
+const DECISIONS: Record<string, ToolConnectionTestDecision> = {
+  list_spreadsheets: "allowed",
+  read_sheet: "allowed",
+  search_rows: "allowed",
+  get_cell: "allowed",
+  list_sheets: "allowed",
+  get_metadata: "allowed",
+  describe_columns: "allowed",
+  append_row: "ask_first",
+  update_cell: "allowed",
+  create_sheet: "allowed",
+  clear_range: "ask_first",
+  delete_row: "off",
+};
+
+function buildAgent(id: string, name: string, decisions: Record<string, ToolConnectionTestDecision>): ToolConnectionTestAgent {
+  const tools = CATALOG.map((entry) => decisionTool(entry, decisions[entry.toolName]));
+  return {
+    id,
+    name,
+    role: "engineer",
+    title: "Engineer",
+    status: "active",
+    effectiveAccess: {
+      connectionId: CONNECTION,
+      toolCount: tools.length,
+      allowedCount: tools.filter((t) => t.decision === "allowed").length,
+      askFirstCount: tools.filter((t) => t.decision === "ask_first").length,
+      offCount: tools.filter((t) => t.decision === "off").length,
+      lastChangedAt: null,
+      lastChangedByAgentId: null,
+      lastChangedByName: null,
+      tools,
+    },
+  };
+}
+
+const AGENTS: ToolConnectionTestAgent[] = [
+  buildAgent("agent-claude", "ClaudeCoder", DECISIONS),
+  buildAgent("agent-codex", "CodexCoder", {
+    ...DECISIONS,
+    create_sheet: "ask_first",
+    clear_range: "off",
+  }),
+];
+
+// ---------------------------------------------------------------------------
+// DOM driver — expand a row, fill its fields, press Run.
+// ---------------------------------------------------------------------------
+
+type Step =
+  | { kind: "expand"; title: string }
+  | { kind: "fill"; values: string[] }
+  | { kind: "click"; label: string };
+
+function setInputValue(input: HTMLInputElement, value: string) {
+  const setter = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, "value")?.set;
+  setter?.call(input, value);
+  input.dispatchEvent(new Event("input", { bubbles: true }));
+}
+
+function runScript(steps: Step[]) {
+  let index = 0;
+  const tick = (attempt: number) => {
+    if (index >= steps.length) return;
+    const step = steps[index];
+    if (step.kind === "expand") {
+      const btn = Array.from(document.querySelectorAll("button")).find((b) =>
+        b.textContent?.includes(step.title),
+      );
+      if (btn) {
+        btn.click();
+        index += 1;
+        window.setTimeout(() => tick(0), 60);
+        return;
+      }
+    } else if (step.kind === "fill") {
+      const inputs = Array.from(document.querySelectorAll("input")).filter(
+        (i) => i.getAttribute("aria-label") !== "Find an action" && i.getAttribute("aria-label") !== "Search agents",
+      );
+      if (inputs.length >= step.values.length) {
+        step.values.forEach((value, i) => setInputValue(inputs[i] as HTMLInputElement, value));
+        index += 1;
+        window.setTimeout(() => tick(0), 60);
+        return;
+      }
+    } else if (step.kind === "click") {
+      const btn = Array.from(document.querySelectorAll("button")).find(
+        (b) => b.textContent?.trim() === step.label,
+      );
+      if (btn) {
+        btn.click();
+        index += 1;
+        window.setTimeout(() => tick(0), 60);
+        return;
+      }
+    }
+    if (attempt < 40) window.setTimeout(() => tick(attempt + 1), 50);
+  };
+  tick(0);
+}
+
+function seededClient(agents: ToolConnectionTestAgent[]): QueryClient {
+  const client = new QueryClient({
+    defaultOptions: { queries: { staleTime: Infinity, gcTime: Infinity, retry: false, refetchOnMount: false } },
+  });
+  client.setQueryData(queryKeys.tools.testAgents(CONNECTION), { agents });
+  return client;
+}
+
+function TestHost({
+  script,
+  runResult,
+  runDelayMs = 120,
+  agents = AGENTS,
+  quarantined = [],
+}: {
+  script?: Step[];
+  runResult?: ToolConnectionTestCallResult;
+  runDelayMs?: number;
+  agents?: ToolConnectionTestAgent[];
+  quarantined?: ToolCatalogEntry[];
+}) {
+  const client = useMemo(() => seededClient(agents), [agents]);
+  const fetchPatched = useRef(false);
+
+  // Stub the test-call POST so the run states render without a backend.
+  useEffect(() => {
+    if (fetchPatched.current) return;
+    fetchPatched.current = true;
+    const original = window.fetch.bind(window);
+    window.fetch = async (input: RequestInfo | URL, init?: RequestInit) => {
+      const url = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+      if (url.includes("/test-calls")) {
+        await new Promise((resolve) => window.setTimeout(resolve, runDelayMs));
+        return Response.json(runResult ?? { decision: "allowed", invocationId: "inv-storybook", result: {} });
+      }
+      return original(input, init);
+    };
+    return () => {
+      window.fetch = original;
+    };
+  }, [runResult, runDelayMs]);
+
+  useEffect(() => {
+    if (!script) return;
+    const timer = window.setTimeout(() => runScript(script), 150);
+    return () => window.clearTimeout(timer);
+  }, [script]);
+
+  return (
+    <QueryClientProvider client={client}>
+      <div className="mx-auto max-w-3xl p-6">
+        <TestPanel connectionId={CONNECTION} appName="Google Sheets" active={CATALOG} quarantined={quarantined} />
+      </div>
+    </QueryClientProvider>
+  );
+}
+
+const meta: Meta = {
+  title: "Apps/Test tab (PAP-11350)",
+  parameters: { layout: "fullscreen" },
+};
+export default meta;
+
+type Story = StoryObj;
+
+export const Default: Story = {
+  name: "Default — grouped actions + access badges",
+  render: () => <TestHost />,
+};
+
+export const AllowedResult: Story = {
+  name: "Allowed — result panel",
+  render: () => (
+    <TestHost
+      runResult={{
+        decision: "allowed",
+        invocationId: "inv-allowed",
+        result: [
+          { Name: "Acme Co.", Stage: "Demo", Owner: "Dotta", Updated: "Tue" },
+          { Name: "Globex", Stage: "Trial", Owner: "Dotta", Updated: "Mon" },
+          { Name: "Initech", Stage: "Closed", Owner: "CodexCoder", Updated: "Sun" },
+          { Name: "Soylent", Stage: "Discovery", Owner: "QA", Updated: "Fri" },
+          { Name: "Umbrella", Stage: "Trial", Owner: "Dotta", Updated: "Thu" },
+        ],
+      }}
+      script={[
+        { kind: "expand", title: "Read a sheet" },
+        { kind: "fill", values: ["Q3 Pipeline Tracker", "Leads"] },
+        { kind: "click", label: "Run" },
+      ]}
+    />
+  ),
+};
+
+export const AskFirstResult: Story = {
+  name: "Ask first — sent for approval",
+  render: () => (
+    <TestHost
+      runResult={{ decision: "ask_first", invocationId: "inv-ask", actionRequestId: "req-1" }}
+      script={[
+        { kind: "expand", title: "Append a row" },
+        { kind: "fill", values: ["Q3 Pipeline Tracker", "Leads", "Wayne Industries, Demo, Dotta"] },
+        { kind: "click", label: "Run" },
+      ]}
+    />
+  ),
+};
+
+export const ErrorResult: Story = {
+  name: "Error — what the app said + what to try",
+  render: () => (
+    <TestHost
+      runResult={{
+        decision: "allowed",
+        invocationId: "inv-error",
+        error: { message: "Requested entity was not found.", reasonCode: "NOT_FOUND" },
+      }}
+      script={[
+        { kind: "expand", title: "Read a sheet" },
+        { kind: "fill", values: ["1AbCxyz…NotFound", "Leads"] },
+        { kind: "click", label: "Run" },
+      ]}
+    />
+  ),
+};
+
+export const RunningState: Story = {
+  name: "Running — in-flight card",
+  render: () => (
+    <TestHost
+      runDelayMs={20000}
+      script={[
+        { kind: "expand", title: "Read a sheet" },
+        { kind: "fill", values: ["Q3 Pipeline Tracker", "Leads"] },
+        { kind: "click", label: "Run" },
+      ]}
+    />
+  ),
+};
+
+export const OffAction: Story = {
+  name: "Off — explanation + open Permissions",
+  render: () => <TestHost script={[{ kind: "expand", title: "Delete a row" }]} />,
+};
+
+// PAP-11404 — Off side panel polish: audit hint + quarantined variant.
+
+const AGENTS_WITH_AUDIT: ToolConnectionTestAgent[] = AGENTS.map((agent, i) =>
+  i === 0
+    ? {
+        ...agent,
+        effectiveAccess: {
+          ...agent.effectiveAccess,
+          lastChangedAt: new Date("2026-06-17T09:00:00Z").toISOString(),
+          lastChangedByAgentId: "agent-admin",
+          lastChangedByName: "Dotta",
+        },
+      }
+    : agent,
+);
+
+export const OffAuditHint: Story = {
+  name: "Off — last-changed audit hint (PAP-11404)",
+  render: () => (
+    <TestHost agents={AGENTS_WITH_AUDIT} script={[{ kind: "expand", title: "Delete a row" }]} />
+  ),
+};
+
+const QUARANTINED: ToolCatalogEntry[] = [
+  { ...tool("q1", "rename_sheet", "Rename a sheet", "Change a sheet's name.", false), status: "quarantined" } as ToolCatalogEntry,
+];
+
+export const QuarantinedAction: Story = {
+  name: "New — quarantined action not yet on (PAP-11404)",
+  render: () => (
+    <TestHost quarantined={QUARANTINED} script={[{ kind: "expand", title: "Rename a sheet" }]} />
+  ),
+};
diff --git a/ui/vite.qa.config.mjs b/ui/vite.qa.config.mjs
new file mode 100644
index 00000000000..a1b33241a2d
--- /dev/null
+++ b/ui/vite.qa.config.mjs
@@ -0,0 +1,67 @@
+import path from "path";
+import { fileURLToPath } from "url";
+import { defineConfig } from "vite";
+import react from "@vitejs/plugin-react";
+import tailwindcss from "@tailwindcss/vite";
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const BACKEND = "http://paperclip-dev:3100";
+
+// Mock the /tools/gallery endpoint (which only exists on PAP-10341 branch)
+// so we can visually test the "recognized domain" shortcut against a populated gallery.
+const MOCK_GALLERY = {
+  apps: [
+    {
+      key: "zapier",
+      name: "Zapier",
+      tagline: "Automate things",
+      authKind: "api_key",
+      urlPatterns: ["https://zapier.com/*", "https://*.zapier.com/*"],
+      logoUrl: null,
+      credentialFields: [
+        { configPath: "credentials.authorization", label: "API key", required: true },
+      ],
+    },
+  ],
+};
+
+const galleryMockPlugin = {
+  name: "qa-mock-gallery",
+  configureServer(server) {
+    server.middlewares.use((req, res, next) => {
+      if (req.url && /\/api\/companies\/[^/]+\/tools\/gallery(\?|$)/.test(req.url)) {
+        res.setHeader("content-type", "application/json");
+        res.end(JSON.stringify(MOCK_GALLERY));
+        return;
+      }
+      next();
+    });
+  },
+};
+
+export default defineConfig({
+  plugins: [galleryMockPlugin, react(), tailwindcss()],
+  resolve: {
+    alias: {
+      "@": path.resolve(__dirname, "./src"),
+      lexical: path.resolve(__dirname, "./node_modules/lexical/Lexical.mjs"),
+    },
+  },
+  server: {
+    host: "0.0.0.0",
+    port: 5179,
+    strictPort: true,
+    proxy: {
+      "/api": {
+        target: BACKEND,
+        ws: true,
+        changeOrigin: true,
+        configure: (proxy) => {
+          proxy.on("proxyReq", (proxyReq) => {
+            proxyReq.setHeader("origin", BACKEND);
+          });
+        },
+      },
+    },
+  },
+});